Privacy Policy

Welcome to Dewey's Pizza. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website deweys-food.digital, place orders, use our services, or interact with us in any way. Please read this policy carefully. If you disagree with its terms, please discontinue use of our website and services.

This Privacy Policy applies to all information collected through our website, mobile applications, online ordering systems, in-store interactions, and any related services, sales, marketing, or events (collectively referred to as the "Services").

1. Who We Are

Dewey's Pizza is a food service business operating in the United States. We are the data controller responsible for your personal information collected through our Services.

For any questions or concerns regarding this Privacy Policy or our data practices, please contact us using the information provided in the Contact Us section at the end of this document.

2. Information We Collect

We collect information about you in a variety of ways depending on how you interact with our Services. The categories of information we collect include the following:

2.1 Personal Information You Provide to Us

When you register an account, place an order, subscribe to our newsletter, participate in promotions, contact our customer service team, or otherwise interact with us, you may voluntarily provide us with personally identifiable information, including but not limited to:

• Identity Data: First name, last name, username, or similar identifier.
• Contact Data: Email address, telephone number, billing address, and delivery address.
• Account Credentials: Password and other login information used to access your account.
• Order Information: Details about the food items you purchase, special instructions, order history, and transaction records.
• Payment Data: Credit card numbers, debit card numbers, and billing information. Please note that full payment card details are processed by our third-party payment processors and are not stored directly on our servers.
• Communication Data: Messages, feedback, reviews, survey responses, and any other content you send us directly.
• Preferences and Dietary Information: Information you voluntarily provide about food preferences, dietary restrictions, or allergen requirements to help us customize your experience.
• Loyalty Program Data: Points, rewards, and redemption history if you participate in any loyalty or rewards programs we operate.

2.2 Information Collected Automatically

When you access or use our website and Services, certain information is collected automatically through cookies, web beacons, pixel tags, log files, and similar technologies. This automatically collected information includes:

• Device Information: IP address, device type, operating system, browser type and version, device identifiers, and hardware model.
• Usage Data: Pages you visit on our website, links you click, time and date of your visit, time spent on each page, referring URLs, and navigation patterns.
• Location Data: General geographic location inferred from your IP address. If you grant permission through your browser or mobile device, we may collect more precise geolocation data to help with delivery services or to show you relevant nearby offerings.
• Cookie Data: Information stored in cookies and similar tracking technologies placed on your browser or device. See Section 9 of this policy for more details about our use of cookies.
• Log Data: Server logs that record information such as access times, error reports, and other diagnostic information.

2.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Social Media Platforms: If you choose to link your social media accounts or log in through a social media provider (such as Facebook or Google), we may receive information from those platforms consistent with your privacy settings on those platforms.
• Payment Processors: Our payment partners may share transaction confirmation and fraud detection information with us.
• Delivery Partners: Third-party delivery service providers may share information necessary to fulfill and track your orders.
• Analytics Providers: We may receive aggregated or de-identified data from analytics service providers to help us understand how users interact with our Services.
• Marketing Partners: We may receive data from marketing platforms and advertising networks to help us measure the effectiveness of our campaigns.

3. How We Use Your Information

We use the personal information we collect for a variety of legitimate business purposes. Specifically, we use your information to:

3.1 Provide and Manage Our Services

• Process and fulfill your food orders, including delivery and pickup arrangements.
• Create and manage your customer account.
• Process payments and prevent fraudulent transactions.
• Communicate with you about your orders, including order confirmations, updates, and delivery notifications.
• Provide customer support and respond to your inquiries, complaints, or requests.
• Administer loyalty programs, promotions, contests, and special offers.

3.2 Improve and Personalize Our Services

• Analyze usage patterns and trends to understand how customers interact with our website and services.
• Personalize your experience by displaying content, recommendations, and offers tailored to your preferences and order history.
• Develop new features, products, and services based on customer feedback and behavior.
• Conduct research and analytics to improve our menu offerings and overall customer experience.
• Test and optimize our website performance, layout, and functionality.

3.3 Marketing and Communications

• Send you promotional emails, newsletters, special offers, and updates about Dewey's Pizza products and services, where you have provided consent or where we have a legitimate interest to do so.
• Deliver targeted advertisements on our website, social media platforms, and third-party websites based on your interests and browsing behavior.
• Conduct surveys and solicit feedback to improve our services.
• Notify you about changes to our menu, policies, or services.

You have the right to opt out of marketing communications at any time. Please see Section 7 for information on how to exercise your rights.

3.4 Legal and Compliance Purposes

• Comply with applicable federal, state, and local laws and regulations.
• Enforce our Terms of Service and other agreements.
• Protect the rights, property, and safety of Dewey's Pizza, our customers, and the public.
• Detect, prevent, and address fraud, security breaches, and other illegal or harmful activities.
• Respond to legal requests, court orders, subpoenas, or other lawful requests from government authorities.

4. How We Share Your Information

We do not sell your personal information to third parties. However, we may share your information in the following circumstances:

4.1 Service Providers and Business Partners

We share your information with trusted third-party service providers who assist us in operating our business and delivering our Services. These providers are contractually obligated to use your information only as directed by us and in accordance with this Privacy Policy. Such service providers include:

• Payment Processors: To securely handle payment card transactions and prevent fraud.
• Delivery Partners: To fulfill delivery orders and communicate delivery status to you.
• Cloud Hosting and Technology Providers: To host our website and store data securely.
• Email and Communication Services: To send transactional and marketing emails on our behalf.
• Analytics Providers: Such as Google Analytics, to analyze website traffic and user behavior.
• Customer Support Platforms: To manage customer service inquiries and ticketing systems.
• Marketing and Advertising Platforms: To manage and deliver targeted advertising campaigns.

4.2 Legal Requirements and Law Enforcement

We may disclose your personal information to government authorities, law enforcement agencies, courts, or other third parties when we believe disclosure is necessary or required:

• To comply with applicable laws, regulations, legal processes, or governmental requests.
• To enforce our Terms of Service or other agreements and protect our rights.
• To protect the safety, rights, or property of Dewey's Pizza, our users, or the public.
• To detect, prevent, or address fraud, security issues, or technical problems.

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal information may be transferred as part of that transaction. We will notify you via email or a prominent notice on our website before your personal information becomes subject to a different privacy policy as a result of such a transaction.

4.4 With Your Consent

We may share your personal information with other third parties where you have given us explicit consent to do so.

4.5 Aggregated and De-Identified Data

We may share aggregated or de-identified information that cannot reasonably be used to identify you with third parties for research, analysis, marketing, or other business purposes.

5. Data Security

The security of your personal information is important to us. We implement a variety of administrative, technical, and physical security measures designed to protect your personal information from unauthorized access, use, alteration, or disclosure. These measures include:

• Encryption: We use industry-standard SSL/TLS encryption to protect data transmitted between your browser and our website.
• Secure Payment Processing: Payment card information is processed through PCI-DSS compliant third-party payment processors. We do not store full credit card numbers on our servers.
• Access Controls: Access to personal information is restricted to authorized personnel who need it to perform their job functions. We use role-based access controls and require strong authentication for system access.
• Regular Security Audits: We conduct periodic reviews and assessments of our data security practices and systems.
• Data Minimization: We collect and retain only the personal information necessary for the purposes described in this Privacy Policy.
• Employee Training: Our team members receive training on data privacy and security best practices.

If you believe your account has been compromised or if you become aware of any security breach, please contact us immediately at [email protected].

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The following general retention periods apply:

When personal information is no longer needed, we will securely delete, anonymize, or destroy it in accordance with our data retention and disposal procedures.

7. Your Privacy Rights

Depending on your location and applicable law, you may have certain rights regarding your personal information. We are committed to honoring these rights and have established processes to help you exercise them.

7.1 Rights for All Users

• Right to Access: You have the right to request a copy of the personal information we hold about you.
• Right to Correction: You have the right to request that we correct any inaccurate or incomplete personal information we hold about you.
• Right to Deletion: You have the right to request that we delete your personal information, subject to certain exceptions (such as legal compliance obligations).
• Right to Opt Out of Marketing: You can unsubscribe from our marketing communications at any time by clicking the "Unsubscribe" link in any marketing email, or by contacting us at [email protected].
• Right to Data Portability: You have the right to receive a copy of your personal information in a structured, commonly used, and machine-readable format where technically feasible.

7.2 Additional Rights for California Residents (CCPA/CPRA)

If you are a resident of California, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Know: You have the right to know what categories of personal information we collect, the purposes for which we use it, and the categories of third parties with whom we share it.
• Right to Delete: You may request deletion of personal information we have collected about you, subject to certain exceptions.
• Right to Correct: You may request correction of inaccurate personal information we maintain about you.
• Right to Opt Out of Sale or Sharing: We do not sell your personal information. However, certain sharing of data with advertising networks may constitute "sharing" under the CPRA. You may opt out of this sharing by contacting us or using available opt-out mechanisms on our website.
• Right to Limit Use of Sensitive Personal Information: You have the right to direct us to limit the use and disclosure of sensitive personal information to what is necessary to perform the services you have requested.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you goods or services, charge you different prices, or provide a different level of service because you exercised your privacy rights.

To exercise your California privacy rights, please submit a verifiable consumer request to us by emailing [email protected]. We will respond to your request within 45 days, with the possibility of a 45-day extension where necessary.

7.3 How to Submit a Privacy Request

To exercise any of your privacy rights, please contact us by:

• Email: [email protected]
• Website: deweys-food.digital

We may need to verify your identity before processing your request to ensure the security of your personal information. We will not charge a fee for most requests unless the request is manifestly unfounded or excessive.

8. Children's Privacy

Dewey's Pizza does not knowingly collect personal information from children under the age of 18. By using our Services, you represent and warrant that you are at least 18 years of age. If you are a parent or guardian and believe that your child under the age of 18 has provided us with personal information without your consent, please contact us immediately at [email protected].

Upon receiving such a request, we will take prompt steps to verify the information and, if confirmed, delete the child's personal information from our records as quickly as reasonably possible. We comply fully with the Children's Online Privacy Protection Act (COPPA), 15 U.S.C. § 6501 et seq., and the FTC's implementing regulations at 16 C.F.R. Part 312.

9. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and deliver relevant advertising. This section provides a brief overview of our cookie practices.

9.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They allow websites to recognize your device, remember your preferences, and collect information about your browsing behavior.

9.2 Types of Cookies We Use

9.3 Managing Your Cookie Preferences

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, and be alerted when cookies are being set. Please note that disabling certain cookies may affect the functionality of our website and your ability to use certain features, including the online ordering system.

You may also opt out of interest-based advertising through the following industry opt-out tools:

• Network Advertising Initiative (NAI): optout.networkadvertising.org
• Digital Advertising Alliance (DAA): optout.aboutads.info

For detailed information about our cookie practices, please refer to our Cookie Policy.

10. International Data Transfers

Dewey's Pizza is a United States-based business, and your personal information is primarily collected, stored, and processed within the United States. If you access our Services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where our servers and central databases are located.

United States data protection and privacy laws may differ from those in your country of residence. By using our Services, you consent to the transfer of your personal information to the United States and acknowledge that such transfer is governed by this Privacy Policy.

Where we transfer personal data from other jurisdictions, we take steps to ensure that appropriate safeguards are in place to protect your information in accordance with applicable data protection laws. If you have questions about how we handle international data transfers, please contact us at [email protected].

11. Third-Party Websites and Links

Our website may contain links to third-party websites, applications, and services that are not owned or controlled by Dewey's Pizza. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party websites you visit, as their data collection and use practices may differ significantly from ours.

This Privacy Policy applies only to information collected by Dewey's Pizza through our own Services. Links to third-party websites do not constitute endorsement by Dewey's Pizza of those websites, their content, or their privacy or security practices.

12. Legal Basis for Processing (Federal and State Compliance)

Dewey's Pizza complies with applicable United States federal and state privacy laws, including but not limited to:

• Federal Trade Commission Act (FTC Act), 15 U.S.C. § 45: We engage in fair and non-deceptive data practices and comply with the FTC's guidance on consumer privacy.
• Children's Online Privacy Protection Act (COPPA), 15 U.S.C. § 6501 et seq.: We do not knowingly collect personal information from children under the age of 13 (or under 18 as per our age restriction policy).
• CAN-SPAM Act, 15 U.S.C. § 7701 et seq.: Our email marketing practices comply with CAN-SPAM requirements, including honoring opt-out requests within 10 business days.
• California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), Cal. Civ. Code § 1798.100 et seq.: We provide California residents with the additional privacy rights described in Section 7.2 of this policy.
• State-Specific Privacy Laws: We also monitor and comply with other applicable state privacy laws, including those enacted in Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), and other states with comprehensive privacy legislation, as they apply to our operations.

Our processing of your personal information is based on one or more of the following legal grounds:

• Performance of a Contract: Processing is necessary to fulfill your orders and provide our Services to you.
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, security, analytics, and service improvement, provided those interests do not override your privacy rights.
• Legal Obligation: Processing is necessary for us to comply with applicable laws and regulations.
• Consent: Where required by law, we process your personal information based on your freely given, specific, informed, and unambiguous consent.

13. How to File a Complaint

If you have concerns about how Dewey's Pizza handles your personal information and believe we have not addressed your concerns adequately, you have the right to file a complaint with the relevant authorities.

13.1 Contact Us First

We encourage you to first contact us directly at [email protected]. We will do our best to address your concerns promptly and fairly.

13.2 Federal Trade Commission (FTC)

If you believe your privacy rights have been violated, you may file a complaint with the Federal Trade Commission (FTC), which is the primary federal agency responsible for consumer protection in the United States:

• Website: www.ftc.gov/complaint
• Phone: 1-877-FTC-HELP (1-877-382-4357)
• Address: Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, D.C. 20580

13.3 California Attorney General (for California Residents)

California residents may also submit complaints to the California Privacy Protection Agency (CPPA) or the California Attorney General's Office:

• California Privacy Protection Agency: cppa.ca.gov
• California Attorney General: oag.ca.gov

13.4 State Attorneys General

Residents of other states may also contact their respective State Attorney General's office if they believe their privacy rights under applicable state law have been violated. A directory of State Attorneys General is available at www.naag.org.

14. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or for other business reasons. We will notify you of material changes by:

• Posting the updated Privacy Policy on our website with a revised "Last Updated" date at the top of this page.
• Sending an email notification to the email address associated with your account (for significant changes).
• Displaying a prominent notice on our website or within our Services.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our Services after any changes are posted constitutes your acceptance of the updated Privacy Policy.

15. Contact Us

If you have any questions, concerns, or requests related to this Privacy Policy or our data practices, please do not hesitate to reach out to us. We are here to help.

We aim to respond to all privacy-related inquiries within 30 days of receipt. For complex requests or where a statutory response period applies (such as CCPA/CPRA requests), we will respond within the timeframe required by applicable law.