Privacy Policy

Effective Date: April 2, 2026  |  Last Updated: April 2, 2026

1. About Us

Punch Pizza ("we," "us," "our," or "the Company") operates the website located at pizzpunch.world and provides food products and related services to customers across the United States. We are committed to protecting your privacy and ensuring that your personal information is handled responsibly, transparently, and in full compliance with applicable United States federal and state privacy laws.

Our contact details for all privacy-related matters are as follows:

2. Scope of This Privacy Policy

This Privacy Policy applies to all individuals who:

• Visit or browse our website at pizzpunch.world
• Create an account or user profile on our platform
• Place food orders online or through any digital channel we operate
• Sign up for our newsletter, promotions, or loyalty programs
• Contact us for customer support or general inquiries
• Participate in surveys, contests, or promotional activities we host
• Interact with us through social media platforms

This policy does not apply to third-party websites, applications, or services that may be linked from our website. We encourage you to review the privacy policies of any third-party platforms you visit independently.

3. Information We Collect

We collect various categories of information depending on how you interact with us. The information we collect falls into the following categories:

3.1 Personal Identification Information

When you create an account, place an order, or contact us, we may collect:

• Full name — to identify you and personalize your experience
• Email address — for order confirmations, account communications, and marketing
• Phone number — for order-related notifications and customer support
• Billing and delivery address — to process and fulfill your food orders
• Date of birth — to verify age and offer personalized promotions
• Username and password — for account security and access management

3.2 Payment and Financial Information

When you make a purchase through our website, we collect payment-related information, including:

• Credit card or debit card details (processed securely via third-party payment processors)
• Billing address associated with your payment method
• Transaction history and order amounts

Please Note: Punch Pizza does not directly store full payment card numbers. All payment card data is processed and stored by PCI DSS-compliant third-party payment processors. We only retain transaction identifiers and summary information for accounting and fraud prevention purposes.

3.3 Order and Transactional Data

We collect detailed records of your interactions with our food ordering services, including:

• Items ordered, quantities, special instructions, and order preferences
• Order dates, times, and frequency
• Delivery or pickup location history
• Coupon codes, discounts, and promotional offers applied
• Customer feedback and ratings submitted after orders

3.4 Usage and Technical Data

When you browse our website, we automatically collect certain technical information about your device and browsing behavior, including:

• IP address — used for security, fraud prevention, and approximate location detection
• Browser type and version — to optimize website display and functionality
• Operating system and device type — to ensure compatibility and performance
• Pages visited, time spent on pages, and click patterns — to improve user experience
• Referring URLs — to understand how users find our website
• Search queries entered on our website — to improve search functionality
• Session identifiers and timestamps — for technical and security purposes

3.5 Cookie and Tracking Data

We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about your browsing activity on our website. This includes session cookies, persistent cookies, and analytics tracking data. Please refer to Section 9 of this policy for detailed information about our cookie practices.

3.6 Communications Data

When you contact us through email, contact forms, live chat, or social media, we collect:

• The content of your messages and communications
• Your contact details provided during the interaction
• Records of customer support tickets and their resolutions
• Feedback, complaints, and survey responses

3.7 Voluntarily Submitted Information

You may voluntarily provide additional information when participating in loyalty programs, promotional contests, surveys, or when completing your account profile. This may include dietary preferences, favorite menu items, and marketing communication preferences.

4. How We Use Your Information

Punch Pizza uses the information we collect for a range of business and operational purposes, all grounded in legitimate interests, contractual necessity, legal compliance, or your explicit consent where required by applicable law.

4.1 Order Processing and Service Delivery

• To receive, process, and fulfill your food orders accurately and on time
• To communicate order confirmations, updates, and delivery notifications
• To process payments and issue refunds when applicable
• To manage delivery logistics and coordinate with third-party delivery partners

4.2 Account Management

• To create and maintain your user account on our platform
• To authenticate your identity and protect account security
• To allow you to view your order history, saved addresses, and preferences
• To send important account-related notices and updates

4.3 Customer Support

• To respond to your inquiries, complaints, and service requests
• To investigate and resolve issues related to your orders or account
• To improve our support processes based on common issues raised

4.4 Marketing and Promotional Communications

• To send you newsletters, special offers, and promotions via email or SMS — with your consent where required
• To personalize marketing messages based on your order history and preferences
• To administer loyalty programs, rewards, and referral incentives
• To conduct sweepstakes, contests, and other promotional activities

You may opt out of marketing communications at any time. See Section 8 for details on your rights.

4.5 Analytics and Service Improvement

• To analyze website traffic, user behavior, and ordering patterns
• To improve our website design, functionality, and user experience
• To develop new menu items, features, and services based on user preferences
• To measure the effectiveness of marketing campaigns and promotions

4.6 Legal and Compliance Purposes

• To comply with applicable federal and state laws, regulations, and court orders
• To prevent, detect, and investigate fraud, abuse, and security threats
• To enforce our Terms of Service and other applicable agreements
• To protect the rights, property, and safety of Punch Pizza, our customers, and the public

5. Legal Basis for Processing Personal Information

Under applicable United States law, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and the Federal Trade Commission Act (FTC Act), we process your personal information based on the following legal grounds:

6. Sharing Your Information with Third Parties

Punch Pizza does not sell your personal information to third parties. However, we may share your information with carefully selected third parties in the following circumstances:

6.1 Service Providers and Business Partners

We engage third-party companies and individuals to perform services on our behalf. These service providers are contractually obligated to use your data only for the purposes we specify and to maintain appropriate security standards. Categories of service providers include:

• Payment processors — to handle secure payment transactions
• Delivery logistics partners — to coordinate and fulfill food delivery services
• Email and SMS marketing platforms — to manage and send marketing communications
• Cloud hosting and data storage providers — to host our website and databases securely
• Analytics providers — such as Google Analytics, to analyze website usage data
• Customer support software providers — to manage support tickets and communications
• Fraud detection and cybersecurity vendors — to protect against unauthorized access

6.2 Legal Requirements and Law Enforcement

We may disclose your personal information when we believe in good faith that such disclosure is necessary to:

• Comply with a legal obligation, court order, subpoena, or government request
• Protect and defend the legal rights and interests of Punch Pizza
• Prevent or investigate possible wrongdoing in connection with our services
• Protect the personal safety of users of our services or the general public
• Protect against legal liability

6.3 Business Transfers

In the event that Punch Pizza is involved in a merger, acquisition, asset sale, reorganization, or similar corporate transaction, your personal information may be transferred as part of that transaction. We will notify you via email or a prominent notice on our website prior to any such transfer, along with information about any changes to how your data will be handled.

6.4 With Your Consent

In circumstances not described above, we will only share your personal information with third parties when we have obtained your explicit prior consent to do so.

7. Data Security

Protecting your personal information is a top priority for Punch Pizza. We have implemented a comprehensive set of technical, administrative, and physical security measures designed to protect your data from unauthorized access, loss, misuse, alteration, or destruction. Our security practices include:

7.1 Technical Safeguards

• SSL/TLS Encryption: All data transmitted between your browser and our website is encrypted using industry-standard Secure Sockets Layer (SSL) / Transport Layer Security (TLS) protocols.
• Data Encryption at Rest: Sensitive data stored in our systems is encrypted using AES-256 encryption or equivalent standards.
• Firewalls and Intrusion Detection: Our systems are protected by firewalls and continuously monitored for unauthorized access attempts.
• Access Controls: Access to personal data is restricted to authorized personnel on a strict need-to-know basis, enforced through role-based access control systems.
• Regular Security Audits: We conduct periodic vulnerability assessments and penetration testing to identify and address potential security weaknesses.

7.2 Administrative Safeguards

• Employee training on data privacy and security best practices
• Data handling policies and confidentiality agreements for all staff
• Vendor due diligence and contractual data protection requirements for third-party service providers
• Incident response procedures in the event of a data breach

7.3 Limitations

While we take extensive measures to protect your data, no method of transmission over the internet or method of electronic storage is 100% secure. We cannot guarantee the absolute security of your information. In the event of a security breach that is likely to affect your rights and freedoms, we will notify affected individuals as required by applicable law, including in accordance with applicable state data breach notification laws.

8. Your Privacy Rights

Depending on your state of residence, you may have specific rights regarding your personal information under applicable United States privacy laws, including the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA). Punch Pizza respects and supports these rights for all customers where applicable.

8.1 Right to Know and Access

You have the right to request information about the categories and specific pieces of personal information we have collected about you, the sources from which it was collected, the purposes for which it is used, and the third parties with whom it has been shared.

8.2 Right to Deletion

You have the right to request that we delete the personal information we have collected from you, subject to certain exceptions permitted by law (such as where retention is necessary to complete a transaction, comply with a legal obligation, or detect and prevent fraud).

8.3 Right to Correction

You have the right to request that we correct inaccurate personal information we maintain about you. We will take reasonable steps to correct the information in response to a verified request.

8.4 Right to Opt Out of Sale or Sharing

Under the CCPA/CPRA, California residents have the right to opt out of the "sale" or "sharing" of their personal information. Punch Pizza does not sell personal information. However, certain advertising and analytics activities may constitute "sharing" under California law. You may exercise your opt-out rights by contacting us at [email protected].

8.5 Right to Limit Use of Sensitive Personal Information

California residents have the right to limit the use and disclosure of sensitive personal information to what is necessary to perform the services you request. We do not use sensitive personal information for purposes beyond service provision without your consent.

8.6 Right to Data Portability

Where technically feasible, you have the right to receive a copy of your personal information in a structured, commonly used, and machine-readable format, and to transfer that data to another service provider.

8.7 Right to Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights. This means we will not deny you goods or services, charge you different prices, or provide a different level of service quality because you exercised your rights under applicable privacy law.

8.8 Right to Opt Out of Marketing Communications

You may opt out of receiving marketing emails at any time by clicking the "unsubscribe" link in any marketing email we send, or by contacting us directly at [email protected]. For SMS marketing opt-outs, you may reply "STOP" to any marketing text message you receive from us.

8.9 How to Submit a Privacy Request

To exercise any of the rights described above, please contact us using one of the following methods:

• Email: [email protected] (Subject line: "Privacy Rights Request")
• Website: pizzpunch.world (Contact form)

We will verify your identity before processing your request to ensure we are responding to the correct individual. We aim to respond to all verified requests within 45 days, with the possibility of a 45-day extension if necessary, as permitted by applicable law. We will not charge a fee for processing your request unless it is excessive, repetitive, or clearly unfounded.

9. Cookie Policy Overview

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and support our marketing activities. Below is a summary of how we use cookies:

9.1 Types of Cookies We Use

9.2 Managing Your Cookie Preferences

You can manage or disable cookies through your browser settings at any time. Please note that disabling certain cookies may impact the functionality and performance of our website. You may also use browser extensions and opt-out tools provided by third-party analytics and advertising providers to limit tracking.

For detailed information about our use of cookies, the specific cookies we deploy, and instructions on how to manage your preferences, please refer to our full Cookie Policy available on our website at pizzpunch.world.

10. Data Retention

We retain your personal information only for as long as is necessary to fulfill the purposes for which it was collected, including to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements. Our data retention practices are as follows:

After the applicable retention period has expired, we will securely delete or anonymize your personal information. Anonymized data may be retained indefinitely for statistical and analytical purposes as it can no longer be used to identify you.

11. Children's Privacy

If you are under 18 years of age, please do not use our website, create an account, place orders, or submit any personal information to us. If a parent or guardian believes that their minor child has provided us with personal information without consent, please contact us immediately at [email protected] with the subject line "Minor Data Removal Request," and we will promptly investigate and delete any such information from our records.

In the United States, the collection of personal information from children is additionally governed by the Children's Online Privacy Protection Act (COPPA). We comply fully with COPPA requirements and take every reasonable step to prevent the unintentional collection of data from minors.

12. International Data Transfers

Punch Pizza is a United States-based company, and all of our primary data processing and storage activities occur within the United States. However, some of our third-party service providers — including cloud hosting platforms, analytics tools, and marketing software providers — may process or store data in other countries.

When data is transferred outside the United States, we take appropriate steps to ensure that such transfers are conducted in accordance with applicable privacy laws and that your personal information receives a level of protection consistent with this Privacy Policy. These safeguards may include:

• Contractual data protection agreements with third-party service providers
• Selecting service providers that participate in recognized data protection frameworks
• Implementing standard contractual clauses where applicable
• Conducting due diligence on the data protection standards of recipient countries

By using our website and services from outside the United States, you acknowledge and consent to the transfer of your personal information to the United States, where data protection laws may differ from those in your home country.

13. Third-Party Links and External Websites

Our website may contain links to third-party websites, social media platforms, or other online services. These external links are provided for your convenience and informational purposes only. Punch Pizza does not control the content, privacy practices, or security of third-party websites and is not responsible for their privacy policies or data handling practices.

We strongly encourage you to review the privacy policies of any third-party websites you visit before submitting any personal information to them. The inclusion of a link to an external website on our platform does not constitute an endorsement of that website's privacy practices.

14. California Privacy Rights — CCPA/CPRA Disclosure

If you are a resident of California, you are entitled to specific rights under the California Consumer Privacy Act of 2018 (CCPA), as amended by the California Privacy Rights Act of 2020 (CPRA). These rights are described in detail in Section 8 of this Privacy Policy.

In addition to those rights, California law requires us to disclose the following:

14.1 Categories of Personal Information Collected in the Last 12 Months

• Identifiers (name, email, phone number, IP address)
• Commercial information (order history, products purchased)
• Internet and electronic network activity (browsing history, website interactions)
• Geolocation data (approximate location based on IP address or delivery address)
• Inferences drawn from other information to create a user profile

14.2 Shine the Light Law

Under California Civil Code Section 1798.83 (the "Shine the Light" law), California residents may request information about the categories of personal information, if any, we share with third parties for their direct marketing purposes. To make such a request, please contact us at [email protected].

15. How to File a Complaint

If you believe your privacy rights have been violated or that we have not adequately addressed your privacy concerns, we encourage you to contact us first so we can work to resolve the issue directly.

15.1 Contact Us Directly

• Email: [email protected]
• Subject Line: "Privacy Complaint"
• Website: pizzpunch.world

15.2 Regulatory Authorities

If you are not satisfied with our response, you may have the right to file a complaint with relevant government authorities:

16. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or business operations. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Post a prominent notice on our website homepage or send an email notification to registered users
• Where required by applicable law, obtain your consent before implementing material changes that affect your rights

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website and services after any changes are posted constitutes your acceptance of the updated Privacy Policy.

17. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please do not hesitate to reach out to us. We are committed to addressing your privacy inquiries promptly and transparently.