Privacy Policy

This Privacy Policy describes how Dewey's Pizza ("we," "us," "our," or "the Company") collects, uses, discloses, retains, and protects information about you when you visit our website at pizzadeweys-eat.rest, place an order, sign up for our loyalty program, interact with our digital services, or otherwise engage with us. We are committed to handling your personal information with transparency, care, and respect for your rights under applicable United States privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and the Federal Trade Commission Act (FTC Act).

Please read this Privacy Policy carefully. By accessing or using our website and services, you acknowledge that you have read, understood, and agree to the practices described herein. If you do not agree with any part of this policy, please discontinue use of our services and contact us with any questions.

1. About Us

Dewey's Pizza is a food service business operating in the United States. We are dedicated to providing exceptional pizza and dining experiences to our customers both in-store and online. As a data controller, we are responsible for the personal information we collect about you. Our contact details are as follows:

2. Scope of This Privacy Policy

This Privacy Policy applies to all personal information we collect through:

• Our website, pizzadeweys-eat.rest, including all subdomains and associated pages;
• Online ordering systems, mobile-compatible interfaces, and digital menu platforms;
• Email, SMS, or other electronic communications you initiate with us;
• Loyalty programs, promotional campaigns, contests, or surveys we administer;
• In-store digital kiosks or any integrated point-of-sale data collection tools;
• Social media pages or profiles operated by Dewey's Pizza.

This policy does not apply to third-party websites, applications, or services that may be linked from our website. We encourage you to review the privacy policies of any third-party sites you visit, as we have no control over their data practices.

3. Information We Collect

We collect several categories of personal information depending on how you interact with us. These categories are described in detail below.

3.1 Personal Identification Information

When you place an order, create an account, sign up for our newsletter, or contact us, we may collect the following identifying details:

• Full name
• Email address
• Phone number
• Billing and delivery address
• Date of birth (for age verification or loyalty program eligibility)
• Username and password for account access
• Profile picture or avatar (if voluntarily provided)

3.2 Payment and Financial Information

When you complete a purchase through our website or ordering platform, we collect payment-related information. We do not store full credit or debit card numbers on our servers. Payment processing is handled by PCI-DSS-compliant third-party payment processors. We may retain the last four digits of your card number, card type, billing address, and transaction confirmation numbers for record-keeping and fraud prevention.

3.3 Order and Transaction Data

We collect records of your purchases, order history, menu preferences, special dietary requests, delivery instructions, and feedback related to your orders. This data helps us personalize your experience and improve our service delivery.

3.4 Usage Data and Website Interactions

When you visit our website, we automatically collect certain technical information about your session and behavior, including:

• Internet Protocol (IP) address
• Browser type and version
• Operating system and device type
• Referring URL and exit pages
• Pages visited, time spent on each page, and click-through paths
• Date and time of your visit
• Search queries entered on our site
• Items added to your cart, even if a purchase was not completed

3.5 Device Information

We may collect information about the device you use to access our website, including device identifiers, hardware model, mobile network information, and unique device identifiers. This information helps us optimize the website for different devices and screen sizes and aids in security monitoring.

3.6 Cookie and Tracking Technology Data

We use cookies, web beacons, pixel tags, local storage, and similar tracking technologies to collect information about your browsing activity on our website. This includes session cookies (which expire when you close your browser) and persistent cookies (which remain on your device for a set period). For full details on our cookie practices, please refer to our Cookie Policy, which is incorporated by reference into this Privacy Policy.

3.7 Communications Data

If you contact us via email, phone, contact form, or live chat, we collect the content of your messages, your contact details, and records of the correspondence for customer service, training, and quality assurance purposes.

3.8 Marketing and Preference Data

We collect information about your communication preferences, including whether you have opted in or out of email marketing, SMS alerts, push notifications, or promotional mailings. We also track your engagement with our marketing emails (e.g., open rates, click-through rates).

3.9 Information You Voluntarily Provide

You may choose to provide additional information when participating in surveys, writing reviews, entering contests, or responding to feedback requests. We collect only what you voluntarily submit in these contexts.

4. How We Use Your Information

We use the personal information we collect for the following purposes, each of which is grounded in a lawful basis under applicable law:

4.1 Service Provision and Order Fulfillment

The primary purpose for which we collect your personal information is to fulfill your orders and deliver our food services. This includes processing your payment, sending order confirmations, coordinating delivery, handling modifications or cancellations, and providing customer support related to your purchase.

4.2 Account Management

If you create an account with us, we use your information to create and maintain your profile, verify your identity, allow you to access your order history, manage loyalty rewards, and enable you to save preferences for faster future ordering.

4.3 Analytics and Service Improvement

We analyze usage data and behavioral patterns to understand how customers interact with our website, which menu items are most popular, where ordering flow bottlenecks occur, and how our marketing campaigns perform. This analysis enables us to continuously improve our website, menu, and customer experience.

4.4 Marketing and Promotional Communications

With your consent or where we have a legitimate interest in doing so, we may use your contact information and preferences to send you promotional emails, text messages, or notifications about new menu items, special deals, limited-time offers, loyalty rewards, and events. You may opt out of marketing communications at any time as described in Section 9 of this policy.

4.5 Personalization

We use your order history, preferences, and behavioral data to tailor the content and recommendations you see on our website and in our communications. For example, we may highlight menu items based on your past orders or geographic location.

4.6 Security and Fraud Prevention

We use technical and transactional data to detect, investigate, and prevent fraudulent transactions, unauthorized account access, and other potentially illegal or harmful activities. This includes monitoring for unusual order patterns, chargebacks, and suspicious login attempts.

4.7 Legal Compliance

We may use your information to comply with applicable federal and state laws, respond to legal process, enforce our Terms of Service, comply with tax and accounting obligations, and respond to requests from law enforcement or regulatory authorities.

4.8 Business Operations

We may use aggregated and anonymized data for internal business reporting, forecasting, strategic planning, and operational decision-making. Such data does not identify individual customers.

5. How We Share Your Information

We do not sell your personal information to third parties for their own independent marketing purposes. However, we do share your information with third parties in the following circumstances:

5.1 Service Providers and Business Partners

We engage trusted third-party service providers who assist us in operating our business and delivering our services. These may include:

• Payment processors — to securely handle your payment transactions;
• Delivery platforms and couriers — to coordinate the delivery of your orders;
• Email and SMS marketing platforms — to send communications on our behalf;
• Website hosting and cloud infrastructure providers — to maintain our website and store data securely;
• Analytics providers (e.g., Google Analytics) — to analyze website usage and user behavior;
• Customer support software providers — to manage customer inquiries and support tickets;
• Loyalty and rewards platform providers — to administer our loyalty program;
• Fraud detection and cybersecurity firms — to protect against unauthorized activity.

All service providers are contractually required to use your information only as necessary to perform services on our behalf, maintain appropriate security standards, and comply with applicable privacy laws.

5.2 Legal Requirements and Law Enforcement

We may disclose your personal information if required to do so by law, subpoena, court order, or other legal process, or if we believe in good faith that such disclosure is necessary to: (a) comply with applicable law or legal obligations; (b) protect and defend the rights or property of Dewey's Pizza; (c) prevent or investigate potential wrongdoing in connection with our services; or (d) protect the personal safety of users of our website or the public.

5.3 Business Transfers

If Dewey's Pizza is involved in a merger, acquisition, asset sale, reorganization, or similar transaction, your personal information may be transferred as part of that transaction. We will notify you via email or a prominent notice on our website before your information becomes subject to a different privacy policy.

5.4 With Your Consent

We may share your information with third parties for any other purpose with your explicit prior consent. You always have the right to withdraw such consent, though withdrawal does not affect the lawfulness of processing that occurred before consent was withdrawn.

5.5 Aggregated and De-Identified Data

We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you with third parties for research, marketing, analytics, or other business purposes.

6. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, remember your preferences, and analyze site traffic. Cookies are small text files stored on your device by your browser when you visit a website.

We use the following types of cookies:

• Strictly Necessary Cookies: Essential for the website to function properly, including enabling you to navigate pages, add items to your cart, and complete purchases. These cannot be disabled.
• Performance and Analytics Cookies: Collect anonymized data about how visitors use our site to help us improve functionality and content.
• Functional Cookies: Remember your preferences and settings (e.g., saved addresses, language preferences) to provide a more personalized experience.
• Marketing and Advertising Cookies: Track your browsing activity across sites to deliver targeted advertisements relevant to your interests.

You can manage or disable cookies through your browser settings. Note that disabling certain cookies may affect the functionality of our website. For more detailed information about the specific cookies we use and how to control them, please review our full Cookie Policy, available on our website.

7. Data Security

Dewey's Pizza takes the security of your personal information seriously. We implement a combination of technical, administrative, and physical safeguards designed to protect your data from unauthorized access, disclosure, alteration, and destruction. Our security measures include, but are not limited to:

• Secure Sockets Layer (SSL) / Transport Layer Security (TLS) encryption for all data transmitted between your browser and our servers;
• Encrypted storage of sensitive data including passwords (using industry-standard hashing algorithms);
• Restricted access to personal information on a need-to-know basis among our employees and contractors;
• Regular security audits and vulnerability assessments;
• PCI-DSS compliant payment processing via certified third-party processors;
• Firewalls, intrusion detection systems, and anti-malware software;
• Employee training on data privacy and security best practices;
• Incident response plans for detecting and responding to data breaches.

Despite our best efforts, no method of data transmission or storage over the internet is completely secure. We cannot guarantee the absolute security of your information. If you have reason to believe that your interaction with us is no longer secure, please contact us immediately at [email protected].

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected individuals and, where required, relevant regulatory authorities in accordance with applicable state and federal law, including breach notification requirements under applicable US state data protection statutes.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The following general retention periods apply:

When your personal information is no longer required for these purposes, we will securely delete, anonymize, or aggregate it in a manner that prevents re-identification.

9. Your Privacy Rights

Depending on your state of residence and applicable law, you may have certain rights with respect to your personal information. We honor these rights to the extent required by law and strive to go beyond minimum requirements wherever reasonably practicable.

9.1 Right to Know and Access

You have the right to request that we disclose what personal information we have collected about you, including the categories of information, the purposes for which it was collected, the categories of third parties with whom it was shared, and the specific pieces of personal information we hold about you.

9.2 Right to Correction

You have the right to request that we correct inaccurate personal information we maintain about you. You may also update your information directly through your account settings on our website.

9.3 Right to Deletion

You have the right to request that we delete personal information we have collected about you, subject to certain exceptions. We may retain information where necessary to complete a transaction, fulfill a legal obligation, detect fraud, or comply with a legal process.

9.4 Right to Data Portability

You have the right to request a copy of the personal information you provided to us in a structured, commonly used, and machine-readable format, and to request that we transmit this information to another service provider where technically feasible.

9.5 Right to Opt Out of Sale or Sharing

Under the CCPA/CPRA, California residents have the right to opt out of the sale or sharing of their personal information for cross-context behavioral advertising. Dewey's Pizza does not sell personal information as defined under the CCPA/CPRA. However, our use of certain third-party advertising and analytics cookies may be considered "sharing" under California law. You can exercise this right by adjusting your cookie preferences on our website or by contacting us directly.

9.6 Right to Limit Use of Sensitive Personal Information

California residents under the CPRA have the right to direct us to limit our use of sensitive personal information to only what is necessary to provide the services you request. We do not use sensitive personal information for any purposes beyond service delivery and legal compliance.

9.7 Right to Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights. This means we will not deny you services, charge you different prices, provide you a lower quality of service, or suggest that you may receive a different level of service as a result of exercising your privacy rights.

9.8 Right to Opt Out of Marketing

You may opt out of receiving marketing communications from us at any time by:

• Clicking the "Unsubscribe" link in any marketing email we send;
• Replying STOP to any SMS marketing message;
• Updating your communication preferences in your account settings;
• Contacting us at [email protected] with your opt-out request.

Please note that even if you opt out of marketing communications, we may still send you transactional or service-related emails (e.g., order confirmations, receipts, or important account notifications).

9.9 How to Submit a Privacy Request

To exercise any of the rights described above, you may contact us using the following methods:

• Email: [email protected] (Subject line: "Privacy Rights Request")
• Website: pizzadeweys-eat.rest (via our Contact or Privacy Request form)

We will acknowledge your request within 10 business days and respond to your request within 45 calendar days of receipt. If we require additional time (up to 90 days total), we will notify you of the reason for the extension. We may need to verify your identity before processing your request. We will use the personal information you provide in your request solely for the purpose of verifying your identity.

You may designate an authorized agent to submit a privacy request on your behalf. The authorized agent must provide written proof of their authorization, and we may require you to directly verify your identity with us.

10. Children's Privacy

Our website and services are intended for use by individuals who are 18 years of age or older. We do not knowingly collect, use, or disclose personal information from children under the age of 13. If we become aware that we have inadvertently collected personal information from a child under 13, we will take immediate steps to delete that information from our records in accordance with the Children's Online Privacy Protection Act (COPPA).

If you are a parent or legal guardian and believe your child under the age of 13 has provided personal information to us without your consent, please contact us immediately at [email protected] so that we can take appropriate action.

Individuals between the ages of 13 and 17 may use our services only with the verified consent of a parent or legal guardian. We encourage parents and guardians to monitor their children's online activity and to contact us with any concerns.

11. International Data Transfers

Dewey's Pizza is based in the United States and our primary data processing activities take place within the United States. If you are accessing our website from outside the United States, please be aware that your personal information will be transferred to and processed in the United States, where data protection laws may differ from those in your country of residence.

By using our website and services, you consent to the transfer of your personal information to the United States and acknowledge that such processing is necessary for the performance of our services. We take appropriate measures to ensure that any international transfers of personal information are conducted in compliance with applicable legal requirements and that your data receives an adequate level of protection.

If you are located in a jurisdiction that restricts data transfers to countries without adequate data protection laws (such as certain states or territories with stricter regulations), please contact us before providing any personal information, and we will discuss appropriate arrangements.

12. Third-Party Websites and Links

Our website may contain links to third-party websites, social media platforms, or services that are not operated by Dewey's Pizza. These include, but may not be limited to, food delivery platforms, social networking sites, and review platforms. When you click on these links, you will be directed to a third-party website. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party websites.

We strongly encourage you to review the privacy policy of every website you visit. The inclusion of any link on our website does not imply our endorsement of the linked site or any association with its operators. Your use of third-party websites is entirely at your own risk.

13. California Privacy Rights (CCPA/CPRA)

This section applies specifically to California residents and supplements the rest of this Privacy Policy in accordance with the California Consumer Privacy Act of 2018 (CCPA) and the California Privacy Rights Act of 2020 (CPRA).

In the preceding 12 months, we have collected the following categories of personal information from California consumers:

California residents may submit verified consumer requests to exercise their rights by contacting us at [email protected]. We will respond to verifiable consumer requests within the timeframes required under the CCPA/CPRA.

14. Consumer Protection and the FTC Act

Our data practices are also governed by the Federal Trade Commission Act (FTC Act), which prohibits unfair or deceptive acts or practices in commerce. We are committed to transparent, fair, and honest data practices, and we do not engage in deceptive data collection or use. We do not misrepresent the nature, extent, or purpose of our data collection activities, and we honor all commitments we make in this Privacy Policy.

If you believe we have engaged in unfair or deceptive practices with respect to your personal information, you may file a complaint with the Federal Trade Commission at ftc.gov/complaint or by calling 1-877-FTC-HELP (1-877-382-4357).

15. How to File a Complaint with a Data Protection Authority

If you believe that we have violated your privacy rights, we encourage you to contact us first so that we may address your concerns promptly and directly. However, you also have the right to file a complaint with the relevant data protection or consumer protection authority in your jurisdiction. In the United States, applicable regulatory bodies include:

• Federal Trade Commission (FTC):
  Website: www.ftc.gov/complaint
  Phone: 1-877-382-4357 (1-877-FTC-HELP)
• California Privacy Protection Agency (CPPA) — for California Residents:
  Website: cppa.ca.gov
• State Attorney General's Office: You may also file a complaint with the Attorney General's office of your respective state. Most state Attorneys General have consumer protection divisions that handle privacy-related complaints.

16. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our business practices, applicable laws, or technological developments. When we make material changes, we will:

• Post the updated Privacy Policy on our website with a new "Last Updated" date;
• Send an email notification to customers with active accounts if the changes are significant;
• Display a prominent notice on our website homepage for a reasonable period following the update.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website or services after the effective date of any changes constitutes your acceptance of the revised policy.

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to reach out to us. We are committed to addressing your inquiries promptly and transparently.

When contacting us about a privacy rights request, please include your full name, email address associated with your account (if applicable), a description of your request, and any information needed to verify your identity. We will process your request as quickly as possible and within the timeframes required by applicable law.