Privacy Policy

This Privacy Policy describes how Dewey's Pizza ("we," "us," "our," or "the Company") collects, uses, discloses, retains, and protects your personal information when you visit our website at deweysdelivery.rest, place orders, use our food delivery services, or otherwise interact with us. We are committed to protecting your privacy and handling your personal data in an open and transparent manner.

Please read this Privacy Policy carefully. By accessing or using our website, placing an order, or interacting with our services in any way, you acknowledge that you have read, understood, and agree to the practices described in this policy. If you do not agree with any part of this Privacy Policy, please discontinue use of our services immediately.

We operate in the United States and comply with applicable federal and state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), and other applicable federal and state regulations governing data protection and consumer privacy.

1. About Us and Contact Information

Dewey's Pizza is a food service and delivery business dedicated to providing fresh, high-quality pizza and food products to our valued customers. Our operations include online ordering, food preparation, and delivery services.

For all privacy-related inquiries, requests, or complaints, please contact us at the email address listed above. We aim to respond to all legitimate privacy inquiries within 45 business days or as required by applicable law.

2. Scope of This Privacy Policy

This Privacy Policy applies to all personal information we collect through the following channels:

• Our website located at deweysdelivery.rest
• Online food ordering systems and platforms
• Telephone orders and customer service interactions
• Email communications and marketing campaigns
• Loyalty programs, promotions, and contests
• In-person interactions at our physical locations
• Third-party platforms and services that integrate with our systems
• Any mobile applications we may operate

This policy does not apply to third-party websites, applications, or services that may be linked from our website. Those third parties have their own privacy policies, and we encourage you to review them before providing any personal information.

3. Information We Collect

We collect various categories of personal information depending on how you interact with our services. The categories below outline the types of data we may gather from or about you.

3.1 Personal Identification Information

When you create an account, place an order, or contact us, we may collect:

• Full name
• Email address
• Phone number (mobile and landline)
• Delivery and billing address
• Date of birth (where required for age verification)
• Username and account credentials
• Profile photographs (if voluntarily submitted)

3.2 Payment and Financial Information

To process your food orders and transactions, we collect:

• Credit and debit card numbers (processed securely through our payment processors)
• PayPal, Apple Pay, Google Pay, or other digital wallet information
• Billing address associated with your payment method
• Transaction amounts, order history, and purchase records

3.3 Order and Delivery Information

To fulfill your food delivery orders, we collect:

• Order contents, special instructions, and dietary preferences
• Delivery address and location data
• Order history and frequency of purchases
• Preferred delivery times and scheduling information
• Feedback, ratings, and reviews about orders

3.4 Usage Data and Website Analytics

When you visit our website or interact with our digital platforms, we automatically collect:

• IP address and general geographic location (city/state level)
• Browser type, version, and settings
• Operating system and device type
• Pages visited, time spent on each page, and navigation patterns
• Search terms used on our website
• Referring website URLs
• Click-through data and interaction logs
• Date and time of website visits
• Session identifiers

3.5 Device Information

We may collect specific information about the devices you use to access our services, including:

• Device identifiers (such as mobile advertising IDs)
• Hardware model and technical specifications
• Network connection type and provider
• Screen resolution and display settings
• Installed applications relevant to our service delivery

3.6 Cookie and Tracking Technology Data

We use cookies, web beacons, pixel tags, local storage objects, and similar tracking technologies to collect information about your browsing behavior. For detailed information about the specific cookies we use, please refer to our Cookie Policy. The categories of data collected through these technologies include:

• Session tokens and authentication data
• Shopping cart contents and preferences
• Marketing attribution data
• Behavioral targeting information
• Performance and analytics metrics

3.7 Communications Data

When you contact us by email, phone, or through our website contact forms, we collect:

• The content of your messages and inquiries
• Customer service records and support tickets
• Call recordings (where legally permitted and disclosed)
• Survey responses and feedback submissions

3.8 Marketing and Promotional Data

If you participate in our promotions, loyalty programs, or marketing campaigns, we collect:

• Marketing preferences and opt-in/opt-out status
• Promotional code usage history
• Contest or sweepstakes entry information
• Referral program participation data

3.9 Information from Third Parties

We may also receive personal information about you from third-party sources, including:

• Social media platforms (if you log in using social authentication)
• Third-party food delivery aggregators and platforms
• Marketing and analytics service providers
• Public databases and commercially available data sources
• Fraud prevention and identity verification services

4. How We Use Your Information

We use the personal information we collect for the following purposes, always in accordance with applicable law and the principles of data minimization and purpose limitation.

4.1 Service Provision and Order Fulfillment

• Processing, preparing, and delivering your food orders
• Creating and managing your customer account
• Sending order confirmations, receipts, and delivery status updates
• Processing payments and refunds
• Coordinating with delivery personnel and third-party drivers
• Resolving order issues, complaints, and disputes

4.2 Customer Communications

• Responding to your inquiries and customer service requests
• Sending transactional emails and SMS notifications
• Providing important service announcements and updates
• Notifying you of changes to our menu, pricing, or policies

4.3 Marketing and Promotional Activities

• Sending promotional offers, discounts, and special deals (with your consent where required)
• Administering loyalty programs and reward points
• Personalizing marketing communications based on your preferences and order history
• Running contests, sweepstakes, and promotional campaigns
• Delivering targeted advertisements on our website and third-party platforms

You may opt out of marketing communications at any time by following the unsubscribe link in our emails, replying "STOP" to SMS messages, or contacting us at [email protected].

4.4 Analytics and Business Improvement

• Analyzing website traffic, user behavior, and service performance
• Understanding customer preferences and purchasing patterns
• Improving our menu offerings, website functionality, and delivery services
• Conducting market research and customer satisfaction surveys
• Developing new features, products, and promotional strategies

4.5 Legal Compliance and Safety

• Complying with applicable federal, state, and local laws and regulations
• Responding to lawful requests from government authorities and law enforcement
• Enforcing our Terms of Service and other legal agreements
• Detecting, investigating, and preventing fraud, abuse, and security threats
• Protecting the rights, property, and safety of our customers, employees, and the public

4.6 Operational and Administrative Purposes

• Internal record-keeping and business administration
• Staff training and quality assurance
• Auditing our services and business processes
• Insurance, legal claims, and risk management

5. Legal Basis for Processing

We process your personal information on the following legal grounds:

• Contractual Necessity: Processing is necessary to fulfill your orders and deliver our food services as agreed.
• Legitimate Interests: We have a legitimate business interest in analyzing usage data, improving our services, and preventing fraud, provided these interests are not overridden by your privacy rights.
• Legal Obligation: We are required by law to process certain data to comply with tax, accounting, food safety, and other regulatory requirements.
• Consent: For marketing communications and non-essential cookies, we rely on your express consent, which you may withdraw at any time.

6. Sharing Your Information with Third Parties

We do not sell your personal information to third parties for their own marketing purposes. However, we may share your information in the following circumstances:

6.1 Service Providers and Business Partners

We engage trusted third-party service providers who assist us in operating our business and delivering our services. These providers access your data only as necessary to perform their services on our behalf and are contractually bound to protect your information. Categories of service providers include:

6.2 Legal Requirements and Law Enforcement

We may disclose your personal information when we believe in good faith that such disclosure is required or permitted by law, including:

• To comply with a subpoena, court order, or other legal process
• To respond to a lawful request from a government agency or law enforcement authority
• To comply with applicable federal and state reporting requirements
• To protect our legal rights or defend against legal claims

6.3 Business Transfers

If Dewey's Pizza is involved in a merger, acquisition, sale of assets, bankruptcy, or other corporate transaction, your personal information may be transferred as part of that transaction. We will notify you via email or prominent notice on our website if your data becomes subject to a different privacy policy as a result of such a transaction.

6.4 With Your Consent

We may share your information with third parties in other circumstances when you have provided your express consent for us to do so.

6.5 Aggregated and De-Identified Data

We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you with third parties for research, marketing, and business purposes without restriction.

7. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your experience, analyze site traffic, and support our marketing activities. Cookies are small text files stored on your device when you visit our website.

7.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the website to function correctly, including maintaining your session and shopping cart.
• Performance and Analytics Cookies: Help us understand how visitors interact with our website so we can improve functionality.
• Functional Cookies: Remember your preferences and settings to provide a personalized experience.
• Targeting and Advertising Cookies: Used to deliver relevant advertisements based on your browsing behavior and interests.

7.2 Managing Your Cookie Preferences

You can manage or withdraw your consent to non-essential cookies at any time through our cookie consent banner or by adjusting your browser settings. Please note that disabling certain cookies may affect the functionality of our website and your ability to place orders.

For full details on the specific cookies we use, their purposes, and how to manage them, please visit our Cookie Policy.

8. Data Security

We take the security of your personal information seriously and have implemented a range of technical, administrative, and physical safeguards designed to protect your data from unauthorized access, disclosure, alteration, loss, or destruction.

8.1 Technical Security Measures

• SSL/TLS Encryption: All data transmitted between your browser and our website is encrypted using industry-standard Secure Socket Layer (SSL) technology.
• Encrypted Storage: Sensitive personal data stored in our systems is encrypted at rest using strong cryptographic algorithms.
• Payment Security: We comply with Payment Card Industry Data Security Standards (PCI DSS) for processing payment card information.
• Access Controls: Access to personal data is restricted to authorized personnel on a need-to-know basis, with role-based permissions.
• Firewalls and Intrusion Detection: We employ firewalls, intrusion detection systems, and regular security monitoring to protect our infrastructure.
• Regular Security Audits: We conduct periodic security assessments and vulnerability testing to identify and address potential risks.

8.2 Administrative Security Measures

• Employee privacy and security training programs
• Data access logging and activity monitoring
• Vendor security assessments and contractual data protection requirements
• Incident response and data breach notification procedures

8.3 Breach Notification

In the event of a data security breach that affects your personal information, we will notify you and relevant regulatory authorities in accordance with applicable law, including any state-specific breach notification requirements. We will provide timely and transparent communication about the nature of the breach, the information affected, and the steps we are taking to address it.

9. Your Privacy Rights

Depending on your state of residence, you may have various rights regarding your personal information. We are committed to honoring these rights and providing you with mechanisms to exercise them.

9.1 Rights Under the California Consumer Privacy Act (CCPA/CPRA)

If you are a California resident, you have the following rights under the CCPA as amended by the CPRA:

9.2 General Privacy Rights (All Users)

Regardless of your state of residence, we provide all users with the following rights to the extent practicable:

• Right of Access: Request confirmation of whether we process your personal data and obtain a copy of it.
• Right to Correction: Request that we correct inaccurate or incomplete personal information about you.
• Right to Deletion: Request that we delete your personal information, subject to legal obligations to retain certain data.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.
• Right to Opt Out of Marketing: Unsubscribe from marketing communications at any time.

9.3 How to Exercise Your Rights

To exercise any of your privacy rights, please contact us using the following methods:

• Email: [email protected] with the subject line "Privacy Rights Request"
• Website: Through the contact form available at deweysdelivery.rest

We will verify your identity before processing your request to protect your security. We aim to respond to all verifiable consumer requests within 45 days. We may extend this period by an additional 45 days where reasonably necessary, with prior notice to you.

You may designate an authorized agent to make a request on your behalf. We will require the agent to provide proof of authorization and may verify your identity directly with you.

10. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by applicable law. The following table provides general guidance on our data retention practices:

After the applicable retention period expires, we will securely delete or anonymize your personal information in accordance with our data disposal procedures. You may request deletion of your data before the end of the retention period, subject to exceptions under applicable law.

11. Children's Privacy

Our website and food delivery services are not directed at children under 13 years of age, and we do not knowingly solicit or collect personal information from minors. If you are a parent or legal guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at [email protected].

Upon receiving a verifiable request from a parent or guardian, we will promptly investigate and, if confirmed, delete the child's personal information from our systems. We comply fully with the Children's Online Privacy Protection Act (COPPA) and applicable state laws protecting minors' online privacy.

If we discover that we have inadvertently collected personal information from a child under 13 (or the applicable age of consent in a given state), we will take immediate steps to delete that information from our records and terminate any related accounts.

12. International Data Transfers

Dewey's Pizza is based in the United States and primarily operates within the United States. However, some of our third-party service providers may be located in other countries, and your personal information may be transferred to, stored, or processed in those countries.

When we transfer personal information to countries outside the United States, we take steps to ensure that appropriate safeguards are in place to protect your information in a manner consistent with this Privacy Policy and applicable law. These safeguards may include:

• Contractual data protection agreements with our service providers
• Standard contractual clauses approved by relevant regulatory authorities
• Transfers only to countries recognized as providing adequate data protection
• Certifications or other recognized transfer mechanisms

By using our services, you acknowledge that your information may be transferred to and processed in countries that may have different data protection standards than your country of residence. We will always handle your data in accordance with this Privacy Policy regardless of where it is processed.

13. "Do Not Track" Signals

Some web browsers offer a "Do Not Track" (DNT) feature that signals to websites that you do not want your online activity tracked. Currently, there is no universally accepted standard for recognizing DNT signals, and our website does not currently respond to DNT browser signals.

However, we do offer you choices about the collection and use of your information for marketing and analytics purposes through our cookie consent tools, and we honor opt-out requests from California residents under the CCPA/CPRA.

14. Third-Party Links and Services

Our website may contain links to third-party websites, social media platforms, and services that are not owned or controlled by Dewey's Pizza. This Privacy Policy applies only to information collected by Dewey's Pizza through our own website and services.

When you click on a link to a third-party website, you are leaving our website and entering a site that is governed by that third party's own privacy policy. We strongly encourage you to read the privacy policies of any third-party sites you visit. We are not responsible for the privacy practices or content of third-party websites.

Third-party services that may appear on our website or integrate with our ordering systems include, but are not limited to, social media platforms (Facebook, Instagram, Twitter/X), map and navigation services (Google Maps), and third-party food delivery aggregator platforms.

15. California Privacy Rights — Additional Disclosures

Under the CCPA/CPRA, California residents are entitled to specific disclosures about the categories of personal information collected and the purposes for which it is used. In the preceding 12 months, we have collected the following categories of personal information:

• Identifiers (name, email, phone number, IP address)
• Commercial information (purchase history, order preferences)
• Internet or electronic network activity (browsing behavior, interaction data)
• Geolocation data (delivery address location)
• Inferences drawn from personal information (customer profile, preferences)
• Financial information (payment card details processed by third parties)

We use this information for the business purposes described in Section 4 of this Policy. We do not sell personal information as traditionally defined. However, we may share certain information (such as browsing behavior with advertising networks) that may constitute "sharing" for cross-context behavioral advertising under the CPRA, and California residents have the right to opt out of such sharing.

California residents may exercise their rights by contacting us at [email protected]. We do not discriminate against consumers for exercising their California privacy rights.

16. Filing Complaints with Regulatory Authorities

If you believe we have not handled your personal information in accordance with applicable law or this Privacy Policy, you have the right to file a complaint with relevant regulatory authorities.

16.1 Federal Trade Commission (FTC)

For concerns about unfair or deceptive practices relating to data privacy, you may file a complaint with the Federal Trade Commission:

• Website: www.ftc.gov/complaint
• Phone: 1-877-FTC-HELP (1-877-382-4357)
• Address: Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, DC 20580

16.2 California Privacy Protection Agency (CPPA)

California residents may file a complaint related to their CCPA/CPRA rights with the California Privacy Protection Agency:

• Website: cppa.ca.gov
• Email: [email protected]

16.3 State Attorneys General

Residents of any U.S. state may also file complaints with their state's Attorney General office regarding violations of state consumer protection or privacy laws. Contact information for each state's Attorney General can be found through the National Association of Attorneys General at www.naag.org.

We encourage you to contact us first at [email protected] so we have the opportunity to address your concerns before you escalate to a regulatory authority.

17. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our business practices, legal requirements, or technological developments. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Post a prominent notice on our website homepage
• Send an email notification to registered account holders where required by law
• Provide a summary of significant changes in the notice

Your continued use of our website or services after any changes to this Privacy Policy constitutes your acceptance of the updated policy. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information.

If changes significantly affect how we use your previously collected personal information, we will provide additional notice and, where required by law, seek your consent before applying those changes retroactively.

18. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to reach out to us. We are committed to addressing your privacy concerns promptly and transparently.

When contacting us about a privacy matter, please include your full name, email address, and a clear description of your request or concern so we can assist you efficiently. We will respond to all legitimate privacy inquiries within 45 business days or as required by applicable law.

For verified consumer requests under the CCPA/CPRA, we will provide a substantive response within 45 days of receipt, with the possibility of a one-time 45-day extension where reasonably necessary.