Privacy Policy

This Privacy Policy describes how Imos Pizza ("we," "us," "our," or the "Company") collects, uses, discloses, retains, and protects your personal information when you visit our website at imosspizz.rest, place orders, interact with our services, or otherwise engage with us. We are committed to protecting your privacy and handling your personal data in a transparent, lawful, and responsible manner.

By accessing or using our website, placing an order, or otherwise interacting with Imos Pizza, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with the terms set forth below, please discontinue use of our website and services immediately.

This Privacy Policy applies to all users of our website, mobile experiences, online ordering platforms, loyalty programs, and any other digital or in-person touchpoints operated by Imos Pizza. We encourage you to read this document carefully and contact us if you have any questions or concerns.

1. About Us

Imos Pizza is a food service business operating in the United States. Our mission is to deliver exceptional food experiences to our customers while maintaining the highest standards of data privacy and security.

2. Applicable Laws and Legal Framework

As a business operating in the United States, we comply with applicable federal and state privacy laws, including but not limited to:

• The Federal Trade Commission Act (FTC Act), which prohibits unfair or deceptive practices in commerce, including misrepresentation of privacy practices.
• The California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), which grants California residents specific rights over their personal information.
• The Children's Online Privacy Protection Act (COPPA), which restricts the collection of personal information from children under the age of 13.
• The CAN-SPAM Act, governing commercial email communications.
• The Telephone Consumer Protection Act (TCPA), governing marketing calls and text messages.
• Any other applicable federal, state, or local privacy laws that may apply to our operations.

If you are a resident of California, you may have additional rights as described in Section 11 of this Privacy Policy, which outlines your rights under the CCPA/CPRA.

3. Information We Collect

We collect various categories of information depending on how you interact with our website and services. The categories of personal information we may collect include:

3.1 Information You Provide Directly

When you create an account, place an order, sign up for our loyalty program, contact us, or otherwise interact with us voluntarily, you may provide us with:

• Identification Information: Your full name, username, and date of birth (for age verification purposes).
• Contact Information: Email address, mailing address, billing address, delivery address, and telephone number.
• Payment Information: Credit or debit card details, billing information, and transaction history. Note that payment card information is processed through secure third-party payment processors and we do not store full card numbers on our systems.
• Order Information: Details about the food items you order, special instructions, order history, and preferences.
• Account Credentials: Username and password for your online account (passwords are stored in encrypted format).
• Communications: Messages, feedback, reviews, and any other communications you send to us via email, contact forms, or other channels.
• Marketing Preferences: Your preferences regarding receiving promotional emails, SMS messages, or other marketing communications.

3.2 Information Collected Automatically

When you visit our website or use our digital services, we automatically collect certain technical information about your device and browsing activity, including:

• Device Information: IP address, device type, device identifier, operating system and version, browser type and version, and screen resolution.
• Usage Data: Pages visited, time and date of visit, time spent on pages, links clicked, referring URLs, and exit pages.
• Location Data: General geographic location derived from your IP address. With your explicit consent, we may collect more precise GPS-based location data to facilitate delivery services.
• Log Data: Server logs, error logs, and other diagnostic information generated during your interactions with our website.
• Cookie and Tracking Data: Information collected through cookies, web beacons, pixel tags, and similar tracking technologies. For more information, please see Section 8 of this Privacy Policy.

3.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Social Media Platforms: If you connect your social media account to our services or log in via a social platform (e.g., Facebook, Google), we may receive profile information and other data permitted by that platform's privacy settings.
• Analytics Providers: Aggregated and anonymized data about website traffic and user behavior from third-party analytics services.
• Delivery Partners: Information related to delivery transactions when orders are fulfilled through third-party delivery platforms.
• Marketing Partners: Contact and demographic information from marketing and advertising partners, where you have given your consent for such sharing.
• Payment Processors: Transaction confirmation and fraud detection signals from payment processing services.

3.4 Sensitive Personal Information

We generally do not intentionally collect sensitive personal information such as social security numbers, driver's license numbers, racial or ethnic origin, religious beliefs, health information, sexual orientation, or biometric data. In the limited circumstance where payment information is processed, we do so through compliant, encrypted systems managed by certified payment processors. If we ever need to collect sensitive information for a specific purpose, we will seek your explicit consent and provide clear notice at the time of collection.

4. How We Use Your Information

Imos Pizza uses the personal information we collect for a variety of legitimate business purposes. We process your information only when we have a valid legal basis to do so, including when it is necessary for the performance of a contract with you, when it is in our legitimate business interests, when we have obtained your consent, or when we are required to do so by law.

4.1 Service Provision and Order Fulfillment

• Processing and fulfilling your food orders, including coordinating deliveries and notifying you about order status.
• Managing your account, including account creation, authentication, and maintenance.
• Providing customer support and responding to your inquiries, complaints, and feedback.
• Processing payments and managing billing-related matters.
• Facilitating loyalty program enrollment, point tracking, and reward redemption.

4.2 Communications

• Sending transactional communications such as order confirmations, receipts, and delivery updates.
• Sending service-related announcements and important notices about changes to our terms, policies, or services.
• Responding to your questions and providing requested information.
• With your consent, sending you promotional emails, SMS messages, push notifications, or other marketing communications about our products, offers, and special promotions.

4.3 Analytics and Improvement

• Analyzing how our website and services are used to improve functionality, performance, and user experience.
• Conducting research and analysis to better understand customer preferences and food ordering behavior.
• Testing new features, products, and services before broader rollout.
• Generating anonymized, aggregated statistics for internal reporting and business planning.

4.4 Marketing and Advertising

• Delivering personalized advertisements based on your preferences and browsing history (with consent where required).
• Managing and optimizing our advertising campaigns across digital channels.
• Measuring the effectiveness of our marketing efforts.
• Creating audience segments for targeted marketing purposes.

4.5 Legal and Compliance Purposes

• Complying with applicable laws, regulations, and legal processes.
• Detecting, preventing, and investigating fraud, security breaches, and other potentially illegal or prohibited activities.
• Protecting the rights, property, and safety of Imos Pizza, our customers, and others.
• Enforcing our Terms of Service and other agreements.
• Responding to legal requests, court orders, and regulatory inquiries.

5. Sharing of Your Information with Third Parties

We respect your privacy and do not sell, rent, or trade your personal information to unaffiliated third parties for their own marketing purposes without your explicit consent. However, we do share your information with trusted third parties in the following circumstances:

5.1 Service Providers

We engage third-party companies and individuals to perform services on our behalf, such as payment processing, website hosting, data storage, analytics, email delivery, customer support, and marketing. These service providers are granted access to your personal information only to the extent necessary to perform their functions and are contractually obligated to maintain appropriate data security standards and use your information only as directed by us.

5.2 Delivery and Logistics Partners

To fulfill your food orders, we may share your name, delivery address, contact number, and order details with delivery drivers, third-party delivery platforms, and logistics service providers.

5.3 Business Transfers

If Imos Pizza undergoes a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of its assets, your personal information may be transferred as part of that transaction. We will provide notice before your personal information becomes subject to a different privacy policy.

5.4 Legal and Regulatory Disclosures

We may disclose your personal information when we believe in good faith that disclosure is necessary to:

• Comply with applicable laws, regulations, or legal processes.
• Respond to lawful requests from public authorities, including law enforcement and government agencies.
• Protect the rights, property, or safety of Imos Pizza, our customers, employees, or the public.
• Detect or prevent fraud, cybersecurity threats, or other illegal activities.

5.5 With Your Consent

We may share your personal information with third parties when we have obtained your explicit consent to do so, or at your direction.

5.6 Aggregated and Anonymized Data

We may share aggregated or de-identified information with third parties for research, marketing, analytics, or other purposes where such information cannot reasonably be used to identify you.

6. Data Security

Imos Pizza takes the security of your personal information seriously and implements a range of administrative, technical, and physical safeguards designed to protect your data against unauthorized access, disclosure, alteration, and destruction. Our security measures include, but are not limited to:

• Encryption: We use industry-standard SSL/TLS encryption to protect data transmitted between your browser and our servers. Sensitive data, including passwords and payment information, is encrypted both in transit and at rest.
• Access Controls: Access to personal information is restricted to authorized employees and contractors on a need-to-know basis. All personnel with access to personal data are subject to confidentiality obligations.
• Secure Payment Processing: Payment card transactions are processed through PCI-DSS compliant payment processors. We do not store full credit card numbers on our systems.
• Regular Security Assessments: We conduct periodic reviews and assessments of our data security practices, systems, and infrastructure.
• Incident Response: We maintain a data breach response plan and will notify affected users and relevant authorities as required by applicable law in the event of a confirmed data breach.
• Employee Training: Our team members receive regular training on data privacy best practices and security protocols.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including to comply with our legal and regulatory obligations, resolve disputes, enforce our agreements, and support legitimate business operations. The specific retention periods we apply include:

When personal information is no longer needed, we securely delete, destroy, or anonymize it in accordance with our data retention and disposal procedures.

8. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies (such as web beacons, pixel tags, and local storage) to enhance your experience, analyze website performance, and deliver relevant advertising.

8.1 Types of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for the operation of our website and enable core functions such as shopping cart management, account login, and security features. These cookies cannot be disabled without significantly affecting website functionality.
• Performance and Analytics Cookies: These cookies collect information about how visitors use our website, such as which pages are visited most often and how long users spend on each page. This data is used to improve our website's performance and user experience.
• Functional Cookies: These cookies allow our website to remember your preferences (such as your saved address or preferred language) and provide enhanced, personalized features.
• Targeting and Advertising Cookies: These cookies track your browsing activity across our site and third-party websites to deliver personalized advertisements and measure the effectiveness of our advertising campaigns.

8.2 Managing Your Cookie Preferences

You may adjust your cookie preferences at any time through our cookie consent management tool available on our website. You can also manage cookies through your browser settings to block or delete cookies. Please note that disabling certain cookies may impact the functionality of our website and your user experience.

For more detailed information about the specific cookies we use and how to manage them, please refer to our Cookie Policy.

9. Children's Privacy

Imos Pizza does not knowingly collect, solicit, or process personal information from children under 18 years of age. Our website, online ordering system, and related services are designed for adult users only. We do not knowingly direct marketing to minors or create profiles of users we know to be under 18.

In compliance with the Children's Online Privacy Protection Act (COPPA), we do not knowingly collect personal information from children under 13 years of age. If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at [email protected] so we can take prompt action to delete that information from our systems.

If we learn that we have inadvertently collected personal information from a person under the age of 18, we will take immediate steps to delete such information from our records and, where applicable, terminate any associated account.

10. International Data Transfers

Imos Pizza is based in the United States, and the personal information we collect is primarily processed and stored on servers located within the United States. If you are accessing our website or services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country of residence.

By using our website and services, users located outside the United States acknowledge and consent to the transfer of their personal information to the United States. We take appropriate steps to ensure that such transfers are conducted in accordance with applicable privacy laws and that adequate protections are in place to safeguard your personal information.

In cases where we transfer personal information internationally, we rely on legally recognized transfer mechanisms including, where applicable, standard contractual clauses or other appropriate safeguards approved under relevant data protection frameworks.

11. Your Privacy Rights

Depending on your location and applicable law, you may have certain rights with respect to your personal information. We honor these rights and provide mechanisms for you to exercise them.

11.1 General Rights Available to All Users

• Right to Access: You have the right to request a copy of the personal information we hold about you.
• Right to Correction: You have the right to request that we correct inaccurate or incomplete personal information about you.
• Right to Deletion: You may request that we delete your personal information, subject to certain exceptions required by law or legitimate business necessity.
• Right to Opt-Out of Marketing: You may unsubscribe from marketing communications at any time by clicking the "unsubscribe" link in any email we send you, texting STOP in response to an SMS message, or contacting us directly.
• Right to Data Portability: In certain circumstances, you may request that we provide your personal information in a structured, commonly used, machine-readable format so you can transfer it to another service provider.

11.2 California Residents — CCPA/CPRA Rights

If you are a resident of California, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Know: You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you, the sources of that information, the business or commercial purposes for collecting it, and the categories of third parties with whom we share it.
• Right to Delete: You have the right to request deletion of personal information we have collected from you, subject to certain exceptions.
• Right to Correct: You have the right to request correction of inaccurate personal information we maintain about you.
• Right to Opt-Out of Sale or Sharing: You have the right to opt out of the "sale" or "sharing" of your personal information for cross-context behavioral advertising purposes as defined by the CPRA. To exercise this right, please visit our website's "Do Not Sell or Share My Personal Information" link or contact us directly.
• Right to Limit Use of Sensitive Personal Information: Where we collect sensitive personal information, you have the right to limit its use and disclosure to purposes strictly necessary to provide you with our services.
• Right to Non-Discrimination: You have the right not to receive discriminatory treatment for exercising your CCPA/CPRA privacy rights. We will not deny you goods or services, charge you different prices, or provide you with a different level of service because you have exercised your privacy rights.

To submit a verifiable consumer request under the CCPA/CPRA, please contact us at [email protected]. We will respond to verifiable requests within 45 days, with the possibility of a 45-day extension where necessary.

You may also designate an authorized agent to submit requests on your behalf. We may require verification of your identity and the agent's authorization before processing any request.

11.3 Exercising Your Rights

To exercise any of your privacy rights, you may:

• Send an email to [email protected] with the subject line "Privacy Rights Request".
• Log in to your account on our website and manage your preferences directly through your account settings.

We may need to verify your identity before processing your request to protect the security of your information. We will not discriminate against you for exercising your privacy rights.

12. Do Not Track Signals

Some web browsers offer a "Do Not Track" (DNT) feature that signals to websites that you do not want your online activity tracked. As there is currently no universally accepted standard for responding to DNT signals, our website does not currently alter its data collection and use practices in response to DNT signals from your browser. We continue to work toward industry-wide solutions that respect DNT preferences and will update our practices accordingly as standards emerge.

However, you can manage your cookie preferences and opt out of certain tracking technologies through our cookie management tool or your browser settings, as described in Section 8 of this Privacy Policy.

13. Third-Party Links and Services

Our website may contain links to third-party websites, applications, or services that are not operated or controlled by Imos Pizza. This Privacy Policy does not apply to such third-party platforms, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party services before providing your personal information to them.

Third-party services we may link to or integrate with include payment processors, social media platforms, delivery tracking services, and online review platforms. Each of these services has its own privacy practices, which we do not control.

14. Marketing Communications

With your consent, we may send you promotional emails, SMS messages, push notifications, or other marketing communications about our menu offerings, special deals, seasonal promotions, loyalty program updates, and more.

You can opt out of receiving marketing communications at any time by:

• Clicking the "Unsubscribe" or "Opt-Out" link included in any promotional email we send you.
• Replying STOP to any marketing SMS message we send you.
• Updating your communication preferences through your online account settings.
• Contacting us directly at [email protected].

Please note that even if you opt out of marketing communications, we may still send you transactional messages related to your orders, account, or other services you have requested. These communications are necessary for the provision of our services and are not subject to marketing opt-out preferences.

15. Filing a Privacy Complaint

If you have concerns about how we handle your personal information and feel that we have not adequately addressed your complaint, you have the right to file a complaint with the appropriate regulatory authorities.

15.1 Federal Trade Commission (FTC)

The Federal Trade Commission (FTC) is the primary federal agency responsible for consumer protection, including privacy. If you believe we have engaged in unfair or deceptive privacy practices, you may file a complaint with the FTC at:

• Website: www.ftc.gov/complaint
• Phone: 1-877-FTC-HELP (1-877-382-4357)
• Address: Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, D.C. 20580

15.2 California Attorney General (California Residents)

California residents who believe their CCPA/CPRA rights have been violated may file a complaint with the California Privacy Protection Agency (CPPA) or the California Attorney General's Office:

• California Privacy Protection Agency: cppa.ca.gov
• California Attorney General: oag.ca.gov/privacy

15.3 State Attorney General Offices

Residents of other U.S. states may file complaints with their respective state Attorney General's office if they believe their state privacy rights have been violated. Contact information for your state's Attorney General can typically be found through your state government's official website.

15.4 Contact Us First

Before filing a formal complaint with a regulatory authority, we encourage you to contact us directly so that we can attempt to resolve your concern promptly and to your satisfaction. Most privacy concerns can be resolved quickly through direct communication.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes to this Privacy Policy, we will:

• Post the updated Privacy Policy on our website at imosspizz.rest with a revised "Last Updated" date.
• Send an email notification to registered account holders where the changes are material.
• Display a prominent notice on our website when significant changes are made.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website and services following the posting of changes constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, please discontinue your use of our services and contact us to close your account.

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please do not hesitate to contact us. We are committed to addressing your privacy-related inquiries in a timely and transparent manner.

We will make every effort to respond to your privacy inquiries within 30 business days of receipt. For verifiable consumer requests under the CCPA/CPRA, we will respond within the timeframe required by applicable law (generally 45 days, with a possible 45-day extension).