Privacy Policy

1. Introduction

At Imos Pizza, we are committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, share, and protect your information when you use our services, including our website, mobile applications, and food delivery services.

This policy applies to all users of our services, whether you're ordering food online, dining at our restaurants, or simply browsing our website. By using our services, you agree to the collection and use of information in accordance with this policy.

Important: We never sell your personal data to third parties. Your trust is fundamental to our business, and we take our responsibility to protect your privacy seriously.

2. Information We Collect

2.1 Information You Provide

We collect information that you voluntarily provide to us when using our services:

• Personal Identification: Name, email address, phone number, delivery address, and billing information
• Account Information: Username, password, order history, and account preferences
• Food Service Specific:
  • Order history and favorite menu items
  • Dietary preferences and restrictions
  • Allergen information you provide
  • Special dietary requirements (vegan, halal, kosher, gluten-free, etc.)
  • Loyalty program and rewards data
  • Table reservation information
  • Catering event details and requirements
  • Food preferences and customization requests
• Payment Information: Credit card details (securely encrypted and stored by our payment processors)
• Communications: Contact form submissions, customer reviews, feedback, and support requests
• Marketing Preferences: Newsletter subscriptions and communication preferences

2.2 Automatically Collected Information

When you visit our website or use our mobile app, we automatically collect certain information:

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Data: Pages visited, time spent on site, click patterns, search queries
• Location Data: Approximate location based on IP address for delivery services
• Cookie Data: Session IDs, preferences, and analytics data (see Section 6 for details)
• App Usage: Features used, crash reports, and performance data

2.3 Information from Third Parties

We may receive information about you from third-party sources:

• Social Media: If you connect your social media accounts to our services
• Payment Processors: Transaction confirmation and payment verification data
• Delivery Partners: Delivery status and location updates
• Marketing Partners: Aggregated demographic and interest data for advertising

3. How We Use Your Information

3.1 Service Provision

We use your information to provide and improve our food delivery and restaurant services:

• Processing and fulfilling food orders
• Managing delivery logistics and tracking
• Providing customer support and resolving issues
• Managing your account and loyalty program benefits
• Personalizing menu recommendations based on your preferences
• Processing reservations and managing seating
• Coordinating catering events and special orders
• Ensuring food safety by tracking allergen requirements

3.2 Communication

We use your contact information to communicate with you about:

• Order confirmations, updates, and delivery notifications
• Customer support responses and issue resolution
• Important policy changes and service updates
• Marketing communications (only with your explicit consent)
• Loyalty program rewards and special offers
• New menu items and restaurant locations

3.3 Marketing and Analytics

With your consent, we may use your information for:

• Personalized advertising based on your food preferences
• Analyzing website traffic and user behavior patterns
• Measuring the effectiveness of our marketing campaigns
• Conducting market research for new products and services
• Creating anonymized reports on dining trends and preferences

3.4 Legal Compliance

We may use your information when required by law or to protect our interests:

• Responding to legal requests, court orders, and government investigations
• Preventing fraud and ensuring payment security
• Protecting the rights, property, and safety of Imos Pizza, customers, and employees
• Resolving disputes and enforcing our terms of service
• Complying with food safety regulations and health department requirements

4. Information Sharing and Disclosure

4.1 Service Providers

We share information with trusted third-party service providers who help us operate our business:

• Payment Processors: To securely process credit card transactions and prevent fraud
• Delivery Services: To coordinate food delivery and provide tracking information
• Cloud Storage Providers: To securely store and backup your data
• Email Services: To send order confirmations, newsletters, and promotional materials
• Analytics Providers: To analyze website usage and improve our services
• Customer Support Tools: To provide efficient customer service

All service providers are contractually required to protect your information and use it only for specified purposes.

4.2 Legal Requirements

We may disclose your information when legally required:

• In response to court orders, subpoenas, or government requests
• To comply with applicable laws and regulations
• To protect our rights, property, and the safety of our customers
• In emergency situations involving public safety
• To investigate and prevent fraudulent activities

4.3 Business Transfers

If Imos Pizza is involved in a merger, acquisition, or asset sale, your information may be transferred. We will:

• Notify you before your personal data is transferred
• Ensure the new owner complies with this privacy policy
• Provide you with choices regarding the transfer

4.4 With Your Consent

We may share your information for other purposes with your explicit consent, such as:

• Partnering with local businesses for special promotions
• Participating in community events and charity programs
• Sharing testimonials and reviews (with your permission)

5. Data Security

5.1 Technical Measures

We implement robust security measures to protect your personal information:

• Encryption: SSL/TLS encryption for all data transmission between your device and our servers
• Firewall Protection: Advanced firewall systems to prevent unauthorized access
• Access Controls: Strict access controls limiting data access to essential personnel only
• Monitoring: 24/7 security monitoring and intrusion detection systems
• Data Backup: Regular secure backups to prevent data loss
• Vulnerability Testing: Regular security audits and penetration testing

5.2 Organizational Measures

We maintain strict organizational security practices:

• Employee Training: Regular security awareness training for all staff
• Data Handling Procedures: Comprehensive policies for personal data processing
• Confidentiality Agreements: All employees and contractors sign confidentiality agreements
• Incident Response: Detailed security incident response and notification procedures
• Regular Audits: Periodic security assessments and compliance reviews

5.3 Your Responsibilities

You can help protect your account by:

• Using strong, unique passwords for your account
• Never sharing your login credentials with others
• Logging out of your account on shared or public computers
• Being cautious of phishing emails and suspicious links
• Reporting any unauthorized account access immediately
• Keeping your contact information up to date

Security Breach Notification: In the unlikely event of a data breach that affects your personal information, we will promptly notify you and relevant authorities as required by law, typically within 72 hours of discovery.

6. Cookies and Tracking Technologies

We use various tracking technologies to enhance your experience and analyze our services:

Tracking Technologies Used

• Google Analytics: For website traffic analysis and user behavior insights
• Facebook Pixel: For measuring advertising effectiveness and creating custom audiences
• Web Beacons: To track email open rates and engagement
• Local Storage: For storing preferences and improving site performance
• GPS Location: For delivery services (with your permission)

Cookie Management

You can control cookies through your browser settings. Most browsers allow you to:

• View and delete existing cookies
• Block all cookies or only third-party cookies
• Receive notifications before cookies are stored
• Set preferences for specific websites

Note: Disabling certain cookies may affect website functionality and your user experience.

7. Your Rights (GDPR/CCPA Compliance)

You have several rights regarding your personal information:

7.1 Right of Access

You can request to view all personal data we hold about you, including:

• Account information and order history
• Personal preferences and dietary restrictions
• Communication records and customer support interactions
• Marketing preferences and consent records

7.2 Right to Rectification

You can request correction of inaccurate or incomplete personal data, including:

• Updating contact information
• Correcting delivery addresses
• Modifying dietary preferences or allergen information
• Updating payment information

7.3 Right to Erasure (Right to be Forgotten)

You can request deletion of your personal data when:

• The data is no longer necessary for its original purpose
• You withdraw your consent
• The data has been unlawfully processed
• You object to processing and there are no overriding legitimate grounds

7.4 Right to Restrict Processing

You can request limitation of how we use your data in certain circumstances:

• While we verify the accuracy of disputed data
• When processing is unlawful but you prefer restriction over deletion
• When we no longer need the data but you need it for legal claims

7.5 Right to Data Portability

You can request to receive your personal data in a structured, machine-readable format or have it transferred to another service provider.

7.6 Right to Object

You can object to processing of your personal data for:

• Direct marketing purposes
• Legitimate interests that are not essential for our services
• Research and statistical purposes

7.7 Right Against Automated Decision-Making

You have the right not to be subject to automated decision-making, including profiling, that produces significant legal effects.

How to Exercise Your Rights

To exercise any of these rights, contact us using the information in Section 13. We will respond to your request within 30 days and provide clear information about any actions taken.

8. Children's Privacy

Protecting children's privacy is important to us:

• Our services are not intended for children under 16 years of age
• We do not knowingly collect personal information from children under 16
• If you are a parent and believe your child has provided us with personal information, please contact us immediately
• Upon notification, we will promptly delete any information we may have collected from children under 16
• We encourage parents to monitor their children's online activities and educate them about sharing personal information

9. International Data Transfers

9.1 Protection Measures

When we transfer your data internationally, we implement appropriate safeguards:

• Adequacy Decisions: Transfers to countries recognized by data protection authorities as providing adequate protection
• Standard Contractual Clauses (SCC): EU-approved contracts ensuring data protection compliance
• Data Processing Agreements: Comprehensive contracts with international service providers
• Security Measures: Additional technical and organizational measures for data protection
• Regular Audits: Periodic compliance assessments of international partners

9.2 Transfer Destinations

Your data may be transferred to and processed in:

• United States: For cloud storage and analytics services
• European Union: For data analytics and customer support
• Other Countries: As necessary for service provision, always with appropriate protection measures

10. Data Retention Periods

We retain your information only as long as necessary for the purposes outlined in this policy:

Safe Data Disposal

When data retention periods expire, we ensure secure disposal through:

• Electronic Deletion: Complete and unrecoverable deletion of digital records
• Physical Destruction: Secure shredding of any physical documents
• Backup Removal: Deletion from all backup systems and archives
• Documentation: Maintaining records of disposal activities for compliance

11. Third-Party Links

Our website and services may contain links to third-party websites and services:

• We are not responsible for the privacy practices of third-party sites
• These sites have their own privacy policies and terms of service
• We encourage you to review third-party privacy policies before providing personal information
• Your interactions with third-party sites are governed by their policies, not ours
• We do not endorse or control the content or practices of linked sites

12. Policy Changes

12.1 Change Notification

We may update this privacy policy from time to time. When we make changes, we will notify you through:

• Website Notice: Prominent notification on our homepage
• Email Notification: Direct email to registered users for significant changes
• App Notification: In-app notifications for mobile app users
• Account Dashboard: Notice when you log into your account

12.2 Checking for Changes

We recommend that you:

• Check this page periodically for updates
• Review the "Last Updated" date at the top of this policy
• Read any change notifications we send you
• Contact us if you have questions about changes

Your continued use of our services after changes take effect constitutes acceptance of the updated policy. If you disagree with changes, you may stop using our services.

13. Contact Information

14. Withdrawal of Consent

14.1 Marketing Consent Withdrawal

You can withdraw your consent for marketing communications at any time:

• Email Unsubscribe: Click the unsubscribe link in any marketing email
• Account Settings: Update your communication preferences in your account dashboard
• Contact Support: Call or email our customer support team
• Written Request: Send a written request to our business address

14.2 Account Deletion

To delete your account and withdraw all consent:

1. Log into your account and go to account settings
2. Select "Delete Account" and follow the prompts
3. Confirm your identity for security purposes
4. Review what data will be deleted vs. retained for legal compliance
5. Receive confirmation of account deletion

Note: Some information may be retained as required by law, such as transaction records for tax purposes.

15. Conclusion

At Imos Pizza, protecting your privacy is not just a legal obligation—it's fundamental to maintaining the trust you place in us when you choose our food delivery services. We understand that your personal information, including your dining preferences, dietary restrictions, and contact details, is sensitive and valuable.

Our commitment extends beyond compliance with privacy laws. We continuously invest in security measures, train our staff on privacy best practices, and regularly review our procedures to ensure we're providing the highest level of protection for your personal information.

The trust relationship between Imos Pizza and our customers is built on transparency, respect, and mutual benefit. When you share your information with us, you're enabling us to provide better service, remember your preferences, and create a personalized dining experience that meets your needs.

We encourage you to contact us with any questions or concerns about this Privacy Policy or our privacy practices. Our team is here to help and ensure that you feel confident about how your information is being protected and used.

Thank you for choosing Imos Pizza and for trusting us with your personal information. We're committed to earning that trust every day through our actions and our commitment to your privacy.

Remember: This Privacy Policy was last updated on December 28, 2024. Please check back regularly for any updates or changes.