Privacy Policy

Welcome to Dewey's Pizza. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website deweys-pizza.click, place orders online, or otherwise interact with us. Please read this policy carefully. If you disagree with its terms, please discontinue use of our site.

This Privacy Policy applies to all information collected through our website, as well as any related services, sales, marketing, or events (collectively referred to as the "Services"). By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by all the terms of this Privacy Policy.

1. About Us

Dewey's Pizza operates the website deweys-pizza.click and provides food ordering and related services to customers across the United States. Throughout this Privacy Policy, the terms "we," "us," "our," and "Dewey's Pizza" refer to our company and its operations.

2. Legal Framework and Applicable Law

As a business operating in the United States, Dewey's Pizza complies with applicable federal and state privacy laws, including but not limited to:

• The Federal Trade Commission Act (FTC Act), which governs unfair or deceptive acts or practices related to consumer privacy and data security.
• The California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), which grants California residents specific rights regarding their personal information.
• The Children's Online Privacy Protection Act (COPPA), which restricts the collection of information from children under the age of 13.
• The CAN-SPAM Act, which governs commercial email communications.
• The Electronic Communications Privacy Act (ECPA), as applicable.
• Any additional state-specific privacy laws in states where we operate, including but not limited to the Virginia Consumer Data Protection Act (VCDPA), Colorado Privacy Act (CPA), and Connecticut Data Privacy Act (CTDPA).

We are committed to maintaining compliance with all applicable legal requirements as they evolve. If you have specific questions about how particular laws apply to your situation, please contact us using the information provided in Section 14 of this policy.

3. Information We Collect

We collect various types of information depending on how you interact with our website and Services. The categories of personal information we collect include the following:

3.1 Information You Provide to Us Directly

When you use our Services, create an account, place an order, sign up for our newsletter, contact our customer support, or participate in promotions or surveys, you may voluntarily provide us with information such as:

• Identification Information: Full name, username, or similar identifier.
• Contact Information: Email address, telephone number, billing address, and delivery address.
• Payment Information: Credit or debit card numbers, billing details, and other financial information necessary to process transactions. Please note that we use secure, PCI-DSS-compliant third-party payment processors and do not store complete payment card details on our own servers.
• Account Credentials: Username and encrypted password when you create an account with us.
• Order History and Preferences: Details of meals ordered, dietary preferences, special instructions, and past transaction history.
• Communications: Records of correspondence if you contact us, including emails, chat messages, and customer service inquiries.
• Feedback and Reviews: Any reviews, ratings, or comments you provide about our food or service.
• Promotional Entries: Information submitted in connection with contests, sweepstakes, or promotions.

3.2 Information Collected Automatically

When you visit our website, we automatically collect certain technical and usage information through cookies, web beacons, pixels, and similar tracking technologies:

• Device Information: IP address, browser type and version, operating system, device type, device identifiers, and screen resolution.
• Usage Data: Pages visited, time spent on pages, links clicked, referring URLs, search queries entered on our site, and your navigation path through our website.
• Location Data: Approximate geographic location derived from your IP address. If you grant permission, we may collect more precise location data to facilitate delivery services.
• Log Data: Server logs, error reports, and activity timestamps.
• Cookie and Tracking Data: Information collected through cookies, web beacons, pixel tags, and similar tracking technologies. Please see Section 9 for more details on our cookie practices.

3.3 Information Collected from Third Parties

We may also receive information about you from third-party sources, such as:

• Social Media Platforms: If you connect your social media account or use social login features, we may receive profile information in accordance with your social media account privacy settings.
• Analytics Providers: Aggregated and anonymized data from third-party analytics services to help us understand how users interact with our website.
• Advertising Partners: Information from advertising networks and partners to help us deliver relevant advertising.
• Payment Processors: Transaction confirmation and fraud prevention data from payment processing partners.
• Delivery Partners: If we use third-party delivery platforms, we may receive order and contact information necessary to fulfill your delivery.
• Publicly Available Sources: Publicly accessible data such as business directories and public social media profiles.

3.4 Sensitive Personal Information

We do not intentionally collect sensitive categories of personal information such as racial or ethnic origin, political opinions, religious beliefs, genetic or biometric data, or health information unless directly relevant to providing our Services (for example, allergy information you voluntarily share with us for food preparation purposes). Any such information you voluntarily provide will be handled with heightened care and used solely for the purpose you provided it.

4. How We Use Your Information

We use the information we collect for various legitimate business and operational purposes, including:

4.1 Service Provision and Order Fulfillment

• Processing and fulfilling your food orders, including coordinating delivery or pickup.
• Creating and managing your customer account.
• Processing payments and preventing fraudulent transactions.
• Sending order confirmations, receipts, and status updates.
• Responding to your customer service inquiries and resolving disputes.
• Saving your order preferences to improve future ordering experiences.

4.2 Marketing and Communications

• Sending promotional emails, special offers, discount coupons, and newsletters about our menu, events, and services, subject to your marketing preferences and applicable law.
• Personalizing marketing communications based on your order history and preferences.
• Administering loyalty programs, contests, sweepstakes, and promotions.
• Sending push notifications (if you have opted in on a mobile application).
• Displaying targeted advertisements on our website and third-party platforms using your browsing and purchase history.

4.3 Analytics and Service Improvement

• Monitoring and analyzing usage patterns, trends, and website performance.
• Conducting internal research and development to improve our menu offerings, website functionality, and customer experience.
• Generating aggregate, anonymized statistics about user behavior on our website.
• Testing new features, website designs, and ordering flows.

4.4 Legal Compliance and Safety

• Complying with applicable federal and state laws, regulations, and legal processes.
• Enforcing our Terms of Service and other agreements.
• Detecting, investigating, and preventing fraudulent transactions, abuse, security incidents, and other harmful or illegal activities.
• Protecting the rights, property, and safety of Dewey's Pizza, our customers, employees, and the public.
• Responding to lawful requests from public authorities, including law enforcement.

4.5 Legal Bases for Processing

Under applicable U.S. privacy laws, our legal bases for processing your personal information include: (a) your consent, where required; (b) the performance of a contract with you (e.g., processing your order); (c) our legitimate business interests (e.g., improving our Services, marketing), provided those interests are not overridden by your rights; and (d) compliance with legal obligations.

5. How We Share Your Information

We do not sell your personal information to third parties. However, we may share your information in the following limited circumstances:

5.1 Service Providers and Business Partners

We engage trusted third-party companies and individuals to help us operate our website, process transactions, and deliver our Services. These service providers have access to your information only to perform specific tasks on our behalf and are contractually obligated to protect your information and not use it for any other purpose. Categories of service providers include:

• Payment Processors: Companies that handle credit card and payment processing (e.g., Stripe, Square, or similar PCI-compliant processors).
• Delivery Partners: Third-party courier services or food delivery platforms used to fulfill your orders.
• Cloud Hosting Providers: Companies that host our website and databases.
• Email and Communication Platforms: Services used to send transactional and marketing emails (e.g., Mailchimp, SendGrid, or similar platforms).
• Analytics Providers: Services such as Google Analytics that help us understand website usage.
• Advertising Networks: Partners that help us deliver targeted advertising on our website and other platforms.
• Customer Support Tools: Platforms used to manage customer service inquiries and communications.

5.2 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal information may be transferred as part of that transaction. We will notify you via email or a prominent notice on our website of any such change in ownership or control of your personal information, as well as any choices you may have regarding your information.

5.3 Legal Requirements

We may disclose your information if we believe, in good faith, that such disclosure is necessary to:

• Comply with a legal obligation, court order, subpoena, or lawful government request.
• Enforce our Terms of Service or other policies.
• Protect and defend the rights or property of Dewey's Pizza.
• Prevent or investigate possible wrongdoing in connection with our Services.
• Protect the personal safety of users of our Services or the public.
• Protect against legal liability.

5.4 With Your Consent

We may share your information with third parties when you have explicitly consented to such sharing. For example, if you choose to connect a third-party loyalty program or authorize us to share your data with a partner for a specific promotion, we will do so based on your consent.

5.5 Aggregated or De-Identified Data

We may share aggregated or de-identified information — which cannot reasonably be used to identify you — with third parties for research, marketing, analytics, and other purposes. We take commercially reasonable steps to ensure such data cannot be re-identified.

6. Data Security

The security of your personal information is important to us. We implement a comprehensive set of technical, administrative, and physical safeguards designed to protect your information from unauthorized access, use, alteration, disclosure, or destruction. Our security measures include:

• Encryption: All data transmitted between your browser and our website is encrypted using industry-standard Transport Layer Security (TLS/SSL) technology. Sensitive data at rest, including payment information, is encrypted using AES-256 encryption.
• Access Controls: Access to personal information is restricted to authorized employees and service providers on a need-to-know basis. All personnel with access to personal data undergo background screening and privacy training.
• PCI-DSS Compliance: Our payment processes comply with Payment Card Industry Data Security Standards (PCI-DSS) to protect your financial information.
• Firewalls and Intrusion Detection: We employ firewalls, intrusion detection systems, and regular security scanning to protect our network infrastructure.
• Regular Security Audits: We conduct periodic security assessments and vulnerability testing to identify and remediate potential risks.
• Incident Response Plan: We maintain a documented data breach response plan to ensure prompt action in the event of a security incident, including notification to affected individuals and relevant authorities as required by law.
• Employee Training: All employees handling personal data receive regular training on data privacy and security best practices.

7. Your Privacy Rights

Depending on your state of residence, you may have specific rights regarding your personal information. We respect and honor these rights as described below.

7.1 Rights Available to All Users

• Right to Know / Access: You have the right to request a copy of the personal information we hold about you, including the categories of information collected, the purposes for which it is used, and the third parties with whom it has been shared.
• Right to Correction: You have the right to request that we correct inaccurate or incomplete personal information we maintain about you.
• Right to Deletion: You have the right to request that we delete your personal information, subject to certain exceptions (such as information we need to retain for legal compliance or fraud prevention).
• Right to Opt-Out of Marketing: You may opt out of receiving promotional communications from us at any time by clicking the "unsubscribe" link in any marketing email or by contacting us directly.

7.2 Rights Under the California Consumer Privacy Act (CCPA/CPRA)

California residents have the following additional rights under the CCPA as amended by the CPRA:

• Right to Know About Data Sharing: The right to know whether your personal information is being sold or disclosed and to whom.
• Right to Opt-Out of Sale or Sharing: The right to opt out of the "sale" or "sharing" of your personal information for cross-context behavioral advertising. We do not sell personal information for monetary compensation; however, certain sharing with advertising partners may constitute "sharing" under CPRA, and you may opt out of this.
• Right to Limit Use of Sensitive Personal Information: The right to limit our use and disclosure of sensitive personal information to purposes necessary to provide the Services.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights. We will not deny goods or services, charge different prices, or provide a different level of quality because you exercised your privacy rights.
• Right to Data Portability: The right to receive your personal information in a portable and, to the extent technically feasible, readily usable format.

To submit a CCPA rights request, please contact us at [email protected] with the subject line "CCPA Rights Request." We will verify your identity before processing your request and respond within 45 days, with a possible extension of an additional 45 days when reasonably necessary.

7.3 Rights Under Other State Laws

Residents of Virginia, Colorado, Connecticut, Texas, Utah, and other states with comprehensive privacy laws may have similar rights to access, correct, delete, and port their personal data, as well as rights related to automated decision-making and profiling. Please contact us to exercise any such rights, and we will respond in accordance with the applicable law for your state.

7.4 How to Exercise Your Rights

To exercise any of your privacy rights, you may:

• Email us at [email protected] with the subject line "Privacy Rights Request."
• Log in to your account and update your information or preferences directly through your account settings.

We may need to verify your identity to process your request. We will not use your personal information submitted to verify your identity for any purpose other than verification. You may designate an authorized agent to submit a request on your behalf, provided we receive written authorization from you.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Our general retention practices are as follows:

When personal information is no longer needed, we will securely delete, destroy, or anonymize it in accordance with our data retention and destruction policies. Even after deletion, some information may remain in backup or archival systems for a limited period before being permanently removed.

9. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies (such as web beacons, pixel tags, and local storage) to enhance your experience, analyze website performance, and deliver relevant advertising.

9.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the website to function properly, enabling features such as login sessions, shopping cart functionality, and security.
• Performance and Analytics Cookies: These collect information about how visitors use our website, such as which pages are visited most often and error messages received, to help us improve site performance.
• Functionality Cookies: These remember your preferences (such as language, location, or order preferences) to provide a more personalized experience.
• Targeting and Advertising Cookies: These are set by us or our advertising partners to build a profile of your interests and display relevant advertisements on our website and other platforms.

9.2 Managing Your Cookie Preferences

You can control or disable cookies through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, and set preferences for certain websites. Please note that disabling certain cookies may affect the functionality of our website and your ability to place orders. You may also opt out of interest-based advertising by visiting the Network Advertising Initiative's opt-out page or the Digital Advertising Alliance's opt-out page.

10. Children's Privacy

Our Services are intended for use by individuals who are 18 years of age or older. We do not knowingly collect, use, or disclose personal information from individuals under the age of 18. Our website is not directed to children, and we do not design any features or content specifically to attract children.

In compliance with the Children's Online Privacy Protection Act (COPPA), we do not knowingly collect personal information from children under the age of 13. If we learn that we have inadvertently collected personal information from a child under 13 without verifiable parental consent, we will take immediate steps to delete that information from our records.

If you are a parent or guardian and believe that your child under the age of 18 has provided us with personal information without your consent, please contact us immediately at [email protected]. We will promptly investigate and take appropriate action, including deleting the child's personal information from our systems.

11. International Data Transfers

Dewey's Pizza is headquartered in the United States, and our primary data processing activities take place within the United States. However, some of our third-party service providers — including analytics, email marketing, and cloud infrastructure providers — may be located in other countries or may process data on servers located outside the United States.

When we transfer personal information outside the United States, we take steps to ensure that adequate protections are in place to protect your information and that any such transfer complies with applicable data protection laws. These protective measures may include:

• Entering into data processing agreements with service providers that include standard contractual protections.
• Ensuring that service providers maintain adequate security practices and privacy standards.
• Conducting due diligence on the data protection practices of our international partners.

If you are located outside the United States and choose to use our Services, please be aware that your information will be transferred to, processed, and stored in the United States. The data protection laws in the United States may differ from those in your country. By using our Services and providing us with your information, you consent to this transfer, processing, and storage.

12. Third-Party Links and Services

Our website may contain links to third-party websites, applications, or services — such as social media platforms, payment processors, or food delivery aggregators — that are not operated by us. When you click on a third-party link, you will be directed to that third party's site or service. We strongly advise you to review the privacy policy of every site you visit.

We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. The inclusion of a link on our website does not imply our endorsement of the linked site or service. Our Privacy Policy applies only to information we collect through our own website and Services.

13. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our business practices, applicable laws, or for any other operational, legal, or regulatory reasons. When we make changes, we will:

• Update the "Last Updated" date at the top of this Privacy Policy.
• Post the revised policy on our website at deweys-pizza.click.
• For material changes that significantly affect your rights or how we handle your personal information, we will provide more prominent notice, which may include sending an email notification to the email address on file in your account, or displaying a banner or notification on our website.

Your continued use of our Services after the effective date of any changes to this Privacy Policy constitutes your acceptance of the updated policy. We encourage you to review this page periodically to stay informed about how we protect your information. If you disagree with the changes, you may close your account and discontinue use of our Services.

14. Contact Us for Privacy Inquiries

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact our privacy team using the information below. We are committed to addressing your concerns promptly and transparently.

When contacting us regarding a privacy matter, please include the following information to help us assist you efficiently:

• Your full name and email address associated with your account (if applicable).
• A clear description of your inquiry, request, or concern.
• The specific right you are seeking to exercise (if applicable).
• Your state of residence (to help us apply the correct legal framework).

We will acknowledge receipt of your inquiry within 10 business days and aim to fully respond within the timeframes required by applicable law (generally 45 days, with possible extensions as permitted by law).

15. Filing a Complaint with a Data Protection Authority

If you believe that our processing of your personal information violates applicable privacy law and we have not adequately addressed your concern, you have the right to file a complaint with the relevant regulatory authority. The appropriate authority will depend on your state of residence:

15.1 California Residents

California residents may file complaints with the California Privacy Protection Agency (CPPA), which is responsible for enforcing the CCPA/CPRA:

• California Privacy Protection Agency (CPPA)
• Website: cppa.ca.gov
• Address: 2101 Arena Boulevard, Sacramento, CA 95834

California residents may also contact the California Attorney General's Office regarding privacy violations:

• Website: oag.ca.gov/privacy

15.2 All U.S. Residents

All U.S. residents may report unfair or deceptive business practices, including privacy violations, to the Federal Trade Commission (FTC):

• Federal Trade Commission
• Website: ftc.gov
• Consumer Helpline: 1-877-FTC-HELP (1-877-382-4357)
• Report Fraud: reportfraud.ftc.gov

15.3 Residents of Other States

Residents of other states should contact their state Attorney General's office or the relevant state consumer protection agency for guidance on filing privacy-related complaints. Many state attorneys general offices have dedicated consumer protection divisions that handle privacy matters.

Before filing a formal complaint with a regulatory authority, we encourage you to contact us directly at [email protected]. We are committed to resolving privacy concerns amicably and promptly, and we believe that direct communication is often the fastest and most effective way to address any issues.