Privacy Policy

1. Introduction

Welcome to Mod Pizza. We are committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, share, and protect your information when you use our website, mobile applications, and food delivery services.

This policy applies to all visitors, customers, and users of our services. By using our services, you agree to the collection and use of information in accordance with this policy.

Important: We never sell your personal data to third parties. Your trust is fundamental to our business, and we are committed to maintaining the highest standards of data protection.

2. Information We Collect

2.1 Information You Provide

We collect information you voluntarily provide when using our services:

• Personal Identification: Name, email address, phone number, delivery address, billing address
• Account Information: Username, password (encrypted), purchase history, order preferences
• Payment Information: Credit card details, billing information (stored in encrypted format through secure payment processors)
• Food Preferences: Dietary restrictions, allergen information, favorite orders, special dietary requirements (vegan, halal, kosher, gluten-free)
• Order Details: Restaurant selections, menu items, delivery instructions, table reservation information
• Loyalty Program Data: Rewards points, membership status, promotional preferences
• Catering Information: Event details, guest count, special requirements, corporate billing information
• Communication: Contact form submissions, customer reviews, feedback, support ticket conversations
• Marketing Preferences: Newsletter subscriptions, promotional email preferences, communication frequency settings

2.2 Automatically Collected Information

We automatically collect certain information when you interact with our services:

• Device Information: IP address, browser type and version, operating system, device identifiers
• Usage Data: Pages visited, time spent on site, click patterns, search queries, referral sources
• Location Data: Approximate location based on IP address, precise location (with permission) for delivery services
• Cookie Data: Session identifiers, user preferences, authentication tokens, analytics data
• Performance Data: Page load times, error reports, technical issues, app crashes

2.3 Information from Third Parties

We may receive information from external sources:

• Social Media: Profile information if you connect your social media accounts
• Payment Processors: Transaction confirmations, payment method verification
• Delivery Partners: Delivery status updates, driver location, delivery confirmations
• Marketing Partners: Campaign performance data, audience insights (anonymized)
• Data Enhancement Services: Address verification, demographic information (where legally permitted)

3. How We Use Your Information

3.1 Service Provision

We use your information to provide and improve our food delivery services:

• Order Processing: Managing orders, payment processing, order confirmation, delivery coordination
• Account Management: User authentication, profile management, order history tracking
• Customer Support: Responding to inquiries, resolving issues, providing technical assistance
• Service Improvement: Analyzing usage patterns, optimizing delivery routes, improving website performance
• Personalization: Customizing menu recommendations, remembering preferences, tailoring user experience

3.2 Communication

We communicate with you for various service-related purposes:

• Transactional Messages: Order confirmations, delivery updates, payment receipts, cancellation notifications
• Customer Support: Response to inquiries, follow-up communications, satisfaction surveys
• Important Notices: Policy changes, service updates, security alerts, account notifications
• Marketing Communications: Promotional offers, new menu items, special events (only with your consent)

3.3 Marketing and Analytics

With your consent, we use information for marketing and analytical purposes:

• Personalized Advertising: Targeted promotions, customized offers, relevant product recommendations
• Performance Analytics: Website traffic analysis, user behavior patterns, conversion tracking
• Campaign Effectiveness: Measuring marketing success, A/B testing, ROI analysis
• Market Research: Understanding customer preferences, developing new products, improving services

3.4 Legal Compliance

We may use your information to comply with legal requirements:

• Legal Requests: Responding to court orders, subpoenas, government requests
• Fraud Prevention: Detecting suspicious activity, preventing unauthorized access, security monitoring
• Rights Protection: Protecting our rights, property, safety, and those of our customers
• Dispute Resolution: Resolving conflicts, investigating complaints, enforcing terms of service

4. Information Sharing and Disclosure

4.1 Service Providers

We share information with trusted third-party service providers who assist in our operations:

• Payment Processors: Stripe, PayPal, and other payment services for secure transaction processing
• Delivery Companies: Third-party delivery services for order fulfillment and tracking
• Cloud Storage Providers: AWS, Google Cloud for secure data storage and backup
• Email Services: Mailchimp, SendGrid for transactional and marketing emails
• Analytics Tools: Google Analytics, Mixpanel for website and app performance analysis
• Customer Support: Zendesk, Intercom for customer service and chat functionality

4.2 Legal Requirements

We may disclose information when required by law:

• Court Orders: Compliance with legal subpoenas and court-mandated disclosure
• Regulatory Compliance: Meeting food safety regulations, tax requirements, business licensing
• Law Enforcement: Cooperating with police investigations, national security matters
• Emergency Situations: Protecting public safety, preventing harm, emergency response

4.3 Business Transfers

In the event of business changes, your information may be transferred:

• Mergers and Acquisitions: Transfer of assets in business combinations
• Asset Sales: Sale of business units or substantial assets
• Bankruptcy Proceedings: Court-supervised asset distribution
• Customer Protection: We will notify customers before transfer and ensure new owners comply with this policy

4.4 With Your Consent

We may share information for other purposes with your explicit consent, such as:

• Partnerships with other food brands
• Joint marketing campaigns
• Special promotional events
• Customer testimonials and reviews

5. Data Security

5.1 Technical Measures

We implement comprehensive technical safeguards to protect your data:

• Encryption: SSL/TLS encryption for data transmission, AES-256 encryption for stored data
• Network Security: Advanced firewall systems, intrusion detection, DDoS protection
• Access Control: Multi-factor authentication, role-based access, principle of least privilege
• Monitoring: 24/7 security monitoring, automated threat detection, incident response systems
• Backup Systems: Regular encrypted backups, disaster recovery procedures, data integrity checks
• Vulnerability Management: Regular security audits, penetration testing, patch management

5.2 Organizational Measures

Our organizational security practices include:

• Employee Training: Regular security awareness training, data handling procedures, privacy education
• Data Handling Procedures: Clear policies for data access, processing, and storage
• Third-Party Agreements: Confidentiality agreements with vendors, security requirements for partners
• Incident Response: Documented procedures for security breaches, rapid response team, customer notification protocols
• Compliance Audits: Regular internal audits, third-party security assessments, certification maintenance

5.3 Your Responsibilities

You play an important role in protecting your account security:

• Strong Passwords: Use unique, complex passwords with letters, numbers, and symbols
• Password Protection: Never share passwords or leave accounts logged in on shared devices
• Secure Browsing: Log out of accounts on public computers, use secure Wi-Fi networks
• Phishing Awareness: Be cautious of suspicious emails, verify sender authenticity, never click suspicious links
• Account Monitoring: Regular review of account activity, report unauthorized access immediately
• Software Updates: Keep browsers and devices updated with latest security patches

Security Breach Notification: In the unlikely event of a data breach that affects your personal information, we will notify you and relevant authorities within 72 hours as required by law, providing details about what information was involved and steps we're taking to address the situation.

6. Cookies and Tracking Technologies

We use various technologies to collect and store information when you visit our website:

Cookie Type	Purpose	Duration
Essential Cookies	Basic site functionality, login state, shopping cart, security	Session
Functional Cookies	User preferences, language settings, location data, customization	Up to 1 year
Analytics Cookies	Usage analysis, performance monitoring, website improvement	Up to 2 years
Marketing Cookies	Personalized advertising, campaign measurement, retargeting	Up to 1 year

Additional Tracking Technologies

• Google Analytics: Website traffic analysis, user behavior tracking, conversion measurement
• Facebook Pixel: Social media advertising effectiveness, custom audience creation
• Web Beacons: Email open rates, newsletter engagement, campaign performance
• Local Storage: Browser data storage, offline functionality, preference saving
• Session Replay: User interaction recording for UX improvement (anonymized)

Cookie Management

You can control cookie settings through your browser options. Most browsers allow you to:

• Accept or reject all cookies
• Accept only certain types of cookies
• Delete existing cookies
• Receive notification when cookies are set

Note: Disabling certain cookies may affect website functionality and your user experience.

7. Your Rights (GDPR/CCPA Compliance)

Under applicable privacy laws, you have several rights regarding your personal information:

7.1 Right of Access

You have the right to know what personal information we collect, use, and share. You can request a copy of your personal data in a commonly used format.

7.2 Right to Rectification

You can request correction of inaccurate personal information and completion of incomplete data.

7.3 Right to Erasure (Right to be Forgotten)

You can request deletion of your personal information, subject to certain legal limitations and business requirements.

7.4 Right to Restrict Processing

You can request that we limit how we use your personal information in certain circumstances.

7.5 Right to Data Portability

You can request to receive your personal data in a machine-readable format and transmit it to another service provider.

7.6 Right to Object

You can object to processing of your personal information, particularly for direct marketing purposes.

7.7 Right Against Automated Decision-Making

You have rights regarding automated decision-making and profiling that significantly affects you.

How to Exercise Your Rights

To exercise any of these rights, contact us using the information provided in Section 13. We will respond to your request within 30 days and may require verification of your identity for security purposes.

8. Children's Privacy

Our services are not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

If we become aware that we have collected personal information from children without verification of parental consent, we will take immediate steps to delete that information from our servers.

9. International Data Transfers

9.1 Protection Measures

When transferring personal data internationally, we implement appropriate safeguards:

• Adequacy Decisions: Transfers to countries with adequate protection levels (EU-Japan, EU adequacy decisions)
• Standard Contractual Clauses (SCCs): EU-approved contractual terms for international transfers
• Data Processing Agreements: Binding contracts with international service providers
• Security Measures: Encryption, access controls, monitoring for all international transfers
• Regular Audits: Ongoing compliance verification and protection assessment

9.2 Transfer Destinations

Your personal data may be transferred to and processed in:

• United States: Cloud storage services, payment processing, analytics
• European Union: Data analytics, customer support, marketing services
• Other Countries: As needed for service provision, always with appropriate protections

10. Data Retention Periods

Information Type	Retention Period	Reason for Retention
Account Information	6 months after account deletion	Legal obligations, dispute resolution
Order History	7 years	Tax and accounting requirements, warranty claims
Marketing Consent	3 months after withdrawal	Consent record keeping, compliance verification
Website Usage Logs	Up to 2 years	Security monitoring, analytics, performance improvement
Customer Support Records	3 years	Service quality improvement, training purposes
Payment Information	As required by payment processors	Fraud prevention, chargeback protection
Dietary Preferences	Until account deletion	Service personalization, safety requirements

Safe Data Disposal

When retention periods expire, we ensure secure data disposal:

• Electronic Deletion: Complete and unrecoverable removal from all systems
• Physical Record Destruction: Professional shredding of paper documents
• Backup System Cleaning: Removal from all backup and archive systems
• Third-Party Notification: Ensuring service providers also delete data
• Disposal Documentation: Maintaining records of data destruction for compliance

11. Third-Party Links

Our website and mobile application may contain links to third-party websites, social media platforms, and external services. We are not responsible for the privacy practices or content of these external sites.

Before providing personal information to any third-party website, we encourage you to review their privacy policies and terms of service. These external sites may have different data collection and use practices than ours.

When you click on third-party links, you are leaving our platform and are subject to the privacy and security policies of the external website.

12. Policy Changes

12.1 Change Notification

We may update this Privacy Policy periodically. When we make changes, we will notify you through:

• Website Notice: Prominent banner on our homepage and privacy policy page
• Email Notification: Direct email to registered users about significant changes
• App Notifications: Push notifications for mobile app users
• Account Dashboard: Notification in your account settings

12.2 Checking for Changes

We recommend regularly reviewing this Privacy Policy for any updates:

• The latest version is always available on our website
• Check the "Last Updated" date at the top of this document
• Significant changes will require your explicit consent
• Continued use of our services after updates constitutes acceptance
• You may discontinue using our services if you disagree with changes

14. Withdrawal of Consent

14.1 Marketing Consent Withdrawal

You can withdraw your consent for marketing communications at any time:

• Email Unsubscribe: Click the unsubscribe link in any marketing email
• Account Settings: Update your communication preferences in your account dashboard
• Customer Support: Contact our support team to opt out of all marketing communications
• Text Messages: Reply "STOP" to any promotional SMS message

14.2 Account Deletion

To delete your account and associated data:

1. Log into your account and go to Account Settings
2. Select "Delete Account" option
3. Confirm your identity and deletion request
4. Wait for email confirmation of deletion
5. Note: Some data may be retained for legal compliance as outlined in Section 10

15. Conclusion

At Mod Pizza, protecting your privacy is not just a legal obligation—it's fundamental to building trust with our customers. We are committed to transparency in our data practices and continuously improving our privacy protections.

We value the trust you place in us when sharing your personal information, and we work diligently to maintain that trust through responsible data handling practices, robust security measures, and respect for your privacy rights.

If you have any questions about this Privacy Policy or concerns about how we handle your personal information, please don't hesitate to contact us. We're here to help and ensure your privacy is protected.

Thank you for choosing Mod Pizza for your dining experience. We appreciate your business and your confidence in our privacy practices.