Privacy Policy

This Privacy Policy describes how Pizza Luce ("we," "us," "our," or "the Company") collects, uses, discloses, and protects the personal information of visitors and customers who access or use our website located at eat-pizzaluce.digital (the "Website") and any related online services, ordering platforms, loyalty programs, or digital communications we provide (collectively, the "Services").

We are committed to respecting your privacy and handling your personal data with transparency, care, and responsibility. Please read this Privacy Policy carefully. By using our Website or Services, you acknowledge that you have read and understood the practices described herein. If you do not agree with this Privacy Policy, please discontinue use of our Website and Services immediately.

This Privacy Policy applies to all users located in the United States, including residents of California who are afforded additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA). Where applicable, we comply with the Federal Trade Commission (FTC) Act and other relevant federal and state privacy regulations.

1. About Us

Pizza Luce is a food service business operating through its digital platform. For all privacy-related matters, you may contact us using the following details:

2. Information We Collect

We collect various categories of personal information depending on how you interact with our Website and Services. The types of information we gather include the following:

2.1 Personal Identification Information

When you create an account, place an order, participate in a promotion, sign up for our newsletter, or otherwise interact with our Services, we may collect personal identification information, including but not limited to:

• Full name
• Email address
• Phone number
• Mailing address and delivery address
• Date of birth (where voluntarily provided, for age verification or promotional purposes)
• Username and password (hashed and secured)
• Profile photograph (if uploaded)

2.2 Payment and Financial Information

When you place an order or make a purchase through our Website, we collect payment-related information necessary to process your transaction. This may include:

• Credit or debit card number (last four digits only — full card data is processed by our secure third-party payment processor)
• Billing address
• Payment method type (e.g., Visa, MasterCard, American Express)
• Transaction ID and order confirmation numbers

We do not store complete payment card information on our servers. All payment data is handled by PCI-DSS compliant payment processors.

2.3 Order and Transaction Data

To fulfill your food orders and manage your account history, we collect and retain:

• Items ordered, customization preferences, and dietary notes
• Order history and frequency
• Delivery instructions and preferred locations
• Special requests or dietary restrictions you provide
• Loyalty points balance and redemption history

2.4 Usage and Technical Data

As you navigate and use our Website, we automatically collect certain technical information about your device and browsing behavior, including:

• IP address
• Browser type and version
• Operating system and device type
• Referring URLs and exit pages
• Pages viewed, links clicked, and time spent on each page
• Date and time of access
• Session duration and navigation path
• Error logs and crash reports

2.5 Location Data

With your permission, we may collect precise or approximate geographic location data from your device to facilitate delivery services, suggest nearby pickup locations, or display relevant local promotions. You may disable location sharing through your browser or device settings at any time.

2.6 Cookie and Tracking Data

We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about your interactions with our Website. This includes session cookies, persistent cookies, and third-party analytics cookies. For more detailed information, please refer to Section 9 (Cookie Policy) of this document.

2.7 Communications Data

If you contact us via email, phone, web form, or live chat, we may retain records of those communications, including:

• The content of your messages or inquiries
• Your contact details as provided during communication
• Our responses and any follow-up correspondence

2.8 User-Generated Content

If you leave reviews, ratings, or comments through our Website or any affiliated platform, we may collect and use that content in connection with our Services and promotional materials.

3. How We Use Your Information

We process your personal information only for legitimate business purposes and in accordance with applicable law. The specific purposes for which we use your data include:

3.1 Providing and Managing Our Services

• Processing and fulfilling food orders, including delivery and pickup
• Creating and managing your customer account
• Sending order confirmations, receipts, and delivery updates
• Administering loyalty programs, rewards, and promotional offers
• Responding to customer service inquiries and resolving complaints

3.2 Improving Our Website and Services

• Analyzing usage patterns to improve website performance and user experience
• Conducting internal research, testing, and product development
• Monitoring and diagnosing technical issues and security vulnerabilities
• Training staff and refining operational processes

3.3 Marketing and Promotional Communications

• Sending newsletters, promotional offers, and special deals via email, SMS, or push notifications (with your consent where required)
• Personalizing your experience on our Website based on your order history and preferences
• Conducting surveys, polls, and feedback requests
• Displaying targeted advertisements through third-party advertising networks

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any email, replying "STOP" to any SMS, or contacting us directly at [email protected].

3.4 Legal Compliance and Safety

• Complying with applicable federal and state laws and regulations
• Responding to lawful requests from law enforcement or regulatory authorities
• Protecting the rights, property, and safety of our customers, employees, and the public
• Detecting, preventing, and investigating fraud, unauthorized access, or other illegal activities
• Enforcing our Terms of Service and other legal agreements

3.5 Business Operations

• Managing our financial accounts, invoicing, and accounting records
• Evaluating business performance and strategic planning
• Facilitating mergers, acquisitions, or asset sales (see Section 5.4)

4. Legal Basis for Processing (U.S. Context)

In the United States, we rely on the following legal and practical justifications for processing your personal information:

• Contractual necessity: Processing required to fulfill orders and provide our Services to you.
• Legitimate interests: Processing for fraud prevention, security, internal analytics, and business improvement where your rights and expectations are not overridden.
• Consent: For marketing communications, cookies, and location tracking where your explicit consent is required.
• Legal obligation: Processing required to comply with applicable law, including tax reporting and regulatory compliance.

5. Sharing Your Information with Third Parties

We do not sell your personal information to third parties. However, we may share your data with trusted third parties in the following circumstances:

5.1 Service Providers and Business Partners

We engage third-party vendors and contractors who perform services on our behalf. These parties are contractually obligated to protect your data and use it only for the purposes we specify. These service providers may include:

• Payment processors (e.g., Stripe, Square, or similar platforms)
• Delivery and logistics partners
• Email marketing platforms (e.g., Mailchimp, Klaviyo)
• Cloud hosting and infrastructure providers
• Customer relationship management (CRM) systems
• Analytics providers (e.g., Google Analytics)
• Fraud prevention and identity verification services
• IT support and cybersecurity vendors

5.2 Legal Requirements and Government Requests

We may disclose your personal information if required to do so by law or in good faith belief that such action is necessary to:

• Comply with a legal obligation, court order, subpoena, or government request
• Enforce or protect our legal rights and interests
• Investigate potential violations of our Terms of Service
• Protect the safety of our customers, employees, or the general public

5.3 Advertising and Analytics Partners

We may share anonymized or aggregated data with advertising networks and analytics platforms to help us understand user behavior, improve our marketing campaigns, and measure the effectiveness of our advertising. These partners may use cookies or similar technologies to collect data across websites.

5.4 Business Transfers

In the event of a merger, acquisition, sale of assets, reorganization, or bankruptcy, your personal information may be transferred as part of the transaction. We will notify you via email or a prominent notice on our Website if such a transfer occurs and your rights under this Privacy Policy change materially.

5.5 With Your Consent

In circumstances not described above, we will share your personal information only with your explicit prior consent.

6. Data Security

We take the security of your personal information seriously and implement a range of technical and organizational measures designed to protect your data from unauthorized access, loss, misuse, alteration, or disclosure. Our security measures include:

• Encryption: All data transmitted between your browser and our Website is encrypted using industry-standard Transport Layer Security (TLS/SSL) protocols.
• Secure servers: Your data is stored on secure servers hosted in data centers with physical access controls, firewalls, and intrusion detection systems.
• Access controls: Access to personal data within our organization is restricted to authorized personnel on a need-to-know basis.
• Payment security: We use PCI-DSS compliant payment processors and do not store full payment card data on our own servers.
• Regular audits: We conduct periodic security reviews, vulnerability assessments, and employee training to maintain a strong security posture.
• Incident response: We have procedures in place to detect, respond to, and notify affected individuals of any data breaches in accordance with applicable state law requirements.

7. Your Privacy Rights

Depending on your state of residence, you may have certain rights with respect to your personal information. We are committed to honoring these rights promptly and without discrimination.

7.1 Rights for All U.S. Users

• Right to Know: You may request information about what personal data we hold about you, including the categories of data collected, purposes of use, and third parties with whom it is shared.
• Right to Access: You may request a copy of the specific personal information we have collected about you.
• Right to Correction: You may request that we correct inaccurate or incomplete personal information in our records.
• Right to Deletion: You may request that we delete your personal information, subject to certain exceptions (e.g., where retention is required by law or for legitimate business purposes).
• Right to Opt Out of Marketing: You may opt out of receiving marketing communications from us at any time.

7.2 Additional Rights for California Residents (CCPA/CPRA)

If you are a resident of California, you have the following additional rights under the CCPA and CPRA:

• Right to Know (Detailed): You have the right to know the specific pieces of personal information we have collected about you and the categories of sources from which it was collected.
• Right to Delete: Subject to certain exceptions, you may request that we and our service providers delete your personal information.
• Right to Correct: You may request correction of inaccurate personal information we maintain about you.
• Right to Opt Out of Sale or Sharing: Although we do not sell personal information, you have the right to opt out of the sharing of your personal information for cross-context behavioral advertising purposes.
• Right to Limit Use of Sensitive Personal Information: Where applicable, you may direct us to limit our use of sensitive personal information to purposes reasonably necessary to provide our Services.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you goods or services, charge you different prices, or provide a different level of quality of service based solely on your exercise of privacy rights.
• Right to Data Portability: You have the right to receive a copy of your personal information in a portable, readily usable format where technically feasible.

7.3 How to Exercise Your Rights

To exercise any of the rights described above, please submit a verifiable consumer request to us using the following methods:

• Email: [email protected] (subject line: "Privacy Rights Request")

We will verify your identity before processing your request, which may require you to provide certain account information. We will respond to your request within 45 days of receipt. If we require an extension, we will notify you within the initial 45-day period. You may designate an authorized agent to submit a request on your behalf, provided appropriate verification is furnished.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The following general retention periods apply:

When personal data is no longer required, we securely delete or anonymize it in accordance with our internal data retention schedule.

9. Cookie Policy

Our Website uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and support our marketing activities. Below is a summary of the types of cookies we use:

9.1 Types of Cookies We Use

9.2 Managing Your Cookie Preferences

You may control cookie settings through your browser preferences. Most browsers allow you to refuse or delete cookies. Please note that disabling certain cookies may affect the functionality of our Website and your ability to place orders or access certain features.

For California residents, you may exercise your right to opt out of cross-context behavioral advertising by adjusting your cookie preferences or by submitting a request to us at [email protected].

10. Children's Privacy

If you are under 18 years old, please do not use our Website or submit any personal information to us without the direct supervision and consent of a parent or legal guardian. If we become aware that we have inadvertently collected personal information from a child under 13 without verifiable parental consent, we will take immediate steps to delete that information from our systems.

Parents or guardians who believe that their child has provided us with personal information may contact us at [email protected] to request deletion of that data.

Our practices comply with the Children's Online Privacy Protection Act (COPPA) as enforced by the Federal Trade Commission (FTC).

11. International Data Transfers

Pizza Luce is a United States-based business, and the personal information we collect is primarily stored and processed within the United States. However, some of our third-party service providers may operate in other countries, which may involve the transfer of your personal data outside the United States.

When such transfers occur, we take steps to ensure that your personal information receives adequate protection consistent with this Privacy Policy, including by:

• Using only service providers that have implemented appropriate contractual, technical, and organizational safeguards
• Ensuring that cross-border transfers are governed by standard contractual clauses or similar protective mechanisms where applicable
• Verifying that recipient countries or organizations provide an adequate level of data protection

By using our Website and Services, you acknowledge that your personal information may be transferred to, stored in, and processed in the United States or other countries where data protection laws may differ from those in your country of residence.

12. Third-Party Websites and Links

Our Website may contain links to third-party websites, social media platforms, or integrated services (such as food delivery platforms or social sharing tools). These third-party sites operate independently and are governed by their own privacy policies. We are not responsible for the privacy practices, content, or security of any third-party websites.

We encourage you to review the privacy policies of any third-party sites you visit through links on our Website before providing any personal information to those platforms.

13. Do Not Track Signals

Some browsers offer a "Do Not Track" (DNT) feature that sends a signal to websites requesting that your activity not be tracked. Currently, our Website does not respond to DNT signals, as there is no universally accepted standard for how websites should respond to such signals. We continue to monitor developments in this area and may update our practices accordingly.

California residents may exercise their rights under the CCPA/CPRA regardless of whether DNT signals are used.

14. How to File a Privacy Complaint

If you believe that we have violated your privacy rights or handled your personal information in a manner inconsistent with this Privacy Policy, we encourage you to contact us first so that we may attempt to resolve your concern.

14.1 Contact Us Directly

Please send your complaint or inquiry to:

We will acknowledge receipt of your complaint within 10 business days and aim to resolve your concern within 30 business days. Complex matters may require additional time, and we will keep you informed of our progress.

14.2 Filing a Complaint with Regulatory Authorities

If you are not satisfied with our response, or if you believe we are processing your personal data unlawfully, you have the right to file a complaint with the appropriate regulatory authority:

• Federal Trade Commission (FTC): The FTC handles complaints about deceptive or unfair business practices, including privacy violations. You may file a complaint at www.ftc.gov/complaint or by calling 1-877-382-4357.
• California Residents — California Privacy Protection Agency (CPPA): California residents may file a complaint with the CPPA regarding violations of the CCPA/CPRA. Visit cppa.ca.gov for more information.
• State Attorney General: Residents of any U.S. state may contact their State Attorney General's office regarding privacy-related consumer complaints.

15. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, applicable law, or the nature of our Services. When we make material changes, we will:

• Post the updated Privacy Policy on this page with a revised "Last Updated" date
• Send a notification email to registered users where required by law or where the changes significantly affect your rights
• Display a prominent notice on our Website for a reasonable period following the update

Your continued use of our Website or Services following the posting of any revised Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

16. Contact Information

For any questions, concerns, or requests related to this Privacy Policy or our handling of your personal information, please do not hesitate to reach out to us through the following channels:

This Privacy Policy was last reviewed and updated on May 28, 2026. It supersedes all previous versions of Pizza Luce's privacy policy.