Privacy Policy

1. Introduction

Welcome to Apache pizza ("we," "our," or "us"). We are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website apachepiizza.com, use our mobile applications, place orders, or interact with our services.

This policy applies to all information collected through our digital platforms, in-store visits, delivery services, catering events, and any related services, sales, marketing, or events. By using our services, you agree to the collection and use of information in accordance with this policy.

Important Note: We never sell your personal data to third parties. Your trust is fundamental to our relationship with you, and we are committed to maintaining the highest standards of data protection.

2. Information We Collect

2.1 Information You Provide Directly

• Personal Identification: Full name, email address, phone number, delivery address, billing address
• Account Information: Username, password (encrypted), purchase history, order preferences
• Food Service Specific Data:
  • Dietary preferences and restrictions (vegetarian, vegan, gluten-free, etc.)
  • Allergen information you provide for safety purposes
  • Special dietary requirements (halal, kosher, organic preferences)
  • Favorite orders and customization preferences
  • Table reservation details and party size
  • Catering event information and guest counts
  • Loyalty program participation and rewards data
• Payment Information: Credit card details (securely encrypted and stored with our payment processors)
• Communication Data: Contact form submissions, customer reviews, feedback, support tickets
• Marketing Preferences: Email subscription choices, promotional preferences, communication frequency settings

2.2 Information Automatically Collected

• Device Information: IP address, browser type and version, operating system, device identifiers
• Usage Data: Pages visited, time spent on site, click patterns, search queries, order frequency
• Location Data: Approximate location from IP address, delivery location coordinates (with permission)
• Cookie Data: Session identifiers, user preferences, website functionality data, analytics information
• Technical Data: Log files, crash reports, performance metrics, error messages

2.3 Information from Third Parties

• Social Media: Profile information if you connect social media accounts
• Payment Processors: Transaction confirmation and payment status information
• Delivery Partners: Delivery status updates and location tracking during delivery
• Marketing Partners: Campaign performance data and audience insights (anonymized)
• Review Platforms: Public reviews and ratings you post about our services

3. How We Use Your Information

3.1 Service Provision

• Order Processing: Prepare, fulfill, and deliver your food orders accurately
• Account Management: Create and maintain your customer account, process registrations
• Authentication: Verify your identity and prevent unauthorized access
• Reservation Management: Process table bookings and manage seating arrangements
• Catering Services: Plan and execute catering events according to your specifications
• Quality Improvement: Analyze service performance and optimize our offerings
• Safety Compliance: Ensure allergen information is properly communicated to kitchen staff

3.2 Communication

• Order Updates: Confirmation emails, preparation status, delivery notifications
• Customer Support: Respond to inquiries, resolve issues, provide assistance
• Service Notifications: Important updates about our services, menu changes, hours of operation
• Policy Changes: Notify you of updates to terms, conditions, or privacy policies
• Marketing Communications: Promotional offers, new menu items, special events (only with your consent)

3.3 Marketing and Analytics

• Personalization: Recommend menu items based on past orders and preferences
• Targeted Advertising: Show relevant ads on our platforms and partner sites
• Campaign Analysis: Measure effectiveness of marketing campaigns and promotions
• Market Research: Develop new menu items and services based on customer preferences
• Loyalty Programs: Manage rewards, points, and exclusive member benefits

3.4 Legal Compliance and Protection

• Legal Requirements: Comply with applicable laws, regulations, and legal processes
• Fraud Prevention: Detect and prevent fraudulent transactions and activities
• Security Protection: Protect our systems, customers, and employees from threats
• Dispute Resolution: Handle complaints, refunds, and legal disputes
• Regulatory Compliance: Meet food safety, health department, and business licensing requirements

4. Information Sharing and Disclosure

4.1 Service Providers

We share your information with trusted third-party service providers who assist us in operating our business:

• Payment Processors: Secure processing of credit card and digital payment transactions
• Delivery Services: Third-party delivery companies to fulfill order delivery
• Cloud Storage Providers: Secure data storage and backup services with industry-standard encryption
• Email Service Providers: Delivery of order confirmations, newsletters, and marketing communications
• Analytics Tools: Website performance analysis and customer behavior insights
• Customer Support Platforms: Ticket management and customer service tools
• Marketing Services: Advertising platforms and campaign management tools

4.2 Legal Requirements

We may disclose your information when required by law or to protect our legitimate interests:

• Legal Process: In response to court orders, subpoenas, or legal proceedings
• Regulatory Compliance: To meet health department, tax, or other regulatory requirements
• Rights Protection: To protect our rights, property, or safety, and that of our customers and employees
• Emergency Situations: When necessary to protect someone's physical safety or prevent harm
• Law Enforcement: To assist legitimate law enforcement investigations

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets:

• Customer information may be transferred to the new owner
• We will provide advance notice of such transfers
• The new owner must comply with this privacy policy or provide notice of policy changes
• You will have the opportunity to opt-out if you disagree with new policies

4.4 With Your Consent

We may share your information for other purposes with your explicit consent, such as:

• Participation in joint promotions with partner restaurants
• Integration with third-party apps or services you choose to use
• Sharing reviews or testimonials (with your permission)

5. Data Security

5.1 Technical Security Measures

• Encryption: All data transmission uses SSL/TLS encryption (minimum 256-bit)
• Firewall Protection: Advanced firewall systems protect our servers from unauthorized access
• Access Controls: Strict access controls ensure only authorized personnel can access customer data
• Monitoring: 24/7 security monitoring and intrusion detection systems
• Data Backups: Regular encrypted backups stored in secure, geographically distributed locations
• Vulnerability Testing: Regular penetration testing and security audits

5.2 Organizational Security Measures

• Employee Training: Regular security awareness training for all staff members
• Data Handling Procedures: Clear protocols for accessing, processing, and storing personal data
• Confidentiality Agreements: All employees and contractors sign confidentiality agreements
• Incident Response: Comprehensive security incident response plan and procedures
• Compliance Audits: Regular internal and external security audits and assessments

5.3 Your Security Responsibilities

• Strong Passwords: Use unique, complex passwords for your account
• Password Protection: Never share your account credentials with others
• Public Computer Safety: Always log out when using public or shared computers
• Phishing Awareness: Be cautious of suspicious emails or links claiming to be from us
• Account Monitoring: Regularly review your account activity and report any suspicious activity immediately

Security Breach Notification: In the unlikely event of a security breach that affects your personal information, we will notify you and relevant authorities within 72 hours as required by law. We will provide details about what information was involved, what we are doing to address the breach, and what steps you should take to protect yourself.

6. Cookies and Tracking Technologies

Cookie Type	Purpose	Duration
Essential Cookies	Basic site functionality, login state, shopping cart, security features	Session or up to 24 hours
Functional Cookies	User preferences, language settings, customization options, remember delivery address	Up to 1 year
Analytics Cookies	Website usage analysis, performance monitoring, user behavior insights	Up to 2 years
Marketing Cookies	Personalized advertising, campaign tracking, social media integration	Up to 1 year

Other Tracking Technologies We Use:

• Google Analytics: Website traffic analysis and user behavior tracking
• Facebook Pixel: Advertisement effectiveness measurement and audience building
• Web Beacons: Email open rates and click-through tracking
• Local Storage: Browser-based storage for enhanced functionality
• Session Storage: Temporary storage for current session data

Cookie Management: You can control cookies through your browser settings to accept, reject, or delete cookies. Please note that disabling certain cookies may affect website functionality, such as the ability to add items to your cart or maintain your login session. Most browsers allow you to:

• View what cookies are stored and delete them individually
• Block third-party cookies
• Block cookies from specific sites
• Accept cookies by default
• Be prompted before cookies are stored

7. Your Rights (GDPR/CCPA Compliance)

Under applicable privacy laws, including GDPR and CCPA, you have the following rights regarding your personal information:

• 7.1 Right of Access: Request a copy of all personal data we hold about you, including order history, account information, and preferences
• 7.2 Right to Rectification: Request correction of inaccurate or incomplete personal data
• 7.3 Right to Erasure (Right to be Forgotten): Request deletion of your personal data, subject to legal retention requirements
• 7.4 Right to Restrict Processing: Limit how we use your data in certain circumstances
• 7.5 Right to Data Portability: Receive your personal data in a structured, machine-readable format for transfer to another service
• 7.6 Right to Object: Object to processing of your personal data, especially for direct marketing purposes
• 7.7 Right Against Automated Decision-Making: Request human review of automated decisions that significantly affect you

How to Exercise Your Rights: To exercise any of these rights, please contact us using the information provided in the Contact section. We will respond to your request within 30 days. You may need to verify your identity before we can process your request. There is no fee for most requests, although we may charge a reasonable fee for excessive or repetitive requests.

8. Children's Privacy

Our services are not intended for children under the age of 16, and we do not knowingly collect personal information from children under 16. If you are under 16, please do not provide any information through our website or services without parental supervision.

If we learn that we have collected personal information from a child under 16 without verification of parental consent, we will take steps to delete that information as quickly as possible. If you believe we might have any information from or about a child under 16, please contact us immediately at [email protected].

Parental Rights: Parents or guardians who believe their child has provided us with personal information may contact us to review, modify, or delete such information.

9. International Data Transfers

9.1 Protection Measures

When we transfer your personal data outside of your country of residence, we ensure appropriate safeguards are in place:

• Adequacy Decisions: Transfers to countries deemed adequate by the European Commission
• Standard Contractual Clauses (SCC): EU-approved contractual protections for international transfers
• Data Processing Agreements: Comprehensive agreements with all international service providers
• Security Measures: Technical and organizational measures to protect data during transfer
• Regular Audits: Ongoing compliance monitoring and assessment of international partners

9.2 Transfer Destinations

Your personal data may be transferred to and processed in:

• United States: Cloud storage and processing services with appropriate safeguards
• European Union: Data analytics and marketing services within EU jurisdictions
• Other Countries: Only as necessary for service provision and with appropriate protection measures

10. Data Retention Periods

Information Type	Retention Period	Reason for Retention
Account Information	6 months after account deletion	Legal obligations, dispute resolution
Order and Purchase History	7 years	Tax compliance, accounting requirements, warranty claims
Marketing Consent Records	3 months after consent withdrawal	Compliance documentation, consent proof
Website Usage Logs	Up to 2 years	Security monitoring, analytics, service improvement
Customer Support Records	3 years after case closure	Service quality improvement, training purposes
Payment Information	As required by payment processors	Fraud prevention, chargeback handling, legal compliance
Dietary Preferences	Until account deletion or opt-out	Service personalization, safety compliance

Safe Data Disposal: When personal data reaches the end of its retention period, we ensure secure disposal through:

• Complete electronic deletion using secure overwriting methods
• Physical destruction of paper records through certified shredding
• Removal from backup systems and archives
• Documentation of disposal for compliance purposes

11. Third-Party Links

Our website may contain links to external websites, social media platforms, or third-party services that are not operated by us. These may include:

• Social media platforms (Facebook, Instagram, Twitter)
• Payment processors and financial institutions
• Review platforms and rating sites
• Partner restaurant websites
• Food delivery aggregator platforms

We are not responsible for the privacy practices or content of these third-party sites. We encourage you to read the privacy policies of any external sites you visit. When you leave our website, our privacy policy no longer applies.

Your Responsibility: Exercise caution when providing personal information to third-party sites, even if accessed through links on our website.

12. Policy Changes

12.1 Change Notification Process

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. When we make changes, we will notify you through:

• Website Notice: Prominent banner or notification on our homepage
• Email Notification: Direct email to registered users for significant changes
• Account Dashboard: Notice in your account portal upon login
• Mobile App: Push notification for app users

12.2 Staying Informed

To stay informed about privacy policy changes:

• Check the "Last Updated" date at the top of this policy
• Review the current version on our website periodically
• Ensure your contact information is up to date to receive notifications
• Continued use of our services after changes indicates acceptance
• Contact us if you have questions about any changes

Significant Changes: For material changes that affect how we use your personal information, we will seek your explicit consent before implementing the changes.

13. Contact Information

Response Commitment: We are committed to responding to all privacy-related inquiries within 3 business days. For urgent matters, please call our main phone number.

13.1 Filing Complaints

If you have concerns about how we handle your personal information:

1. Contact Us First: We encourage you to contact us directly so we can address your concerns
2. Supervisory Authority: If you are not satisfied with our response, you may contact the relevant data protection authority:
   • Ireland: Data Protection Commission (DPC) - www.dataprotection.ie
   • EU Residents: Your local data protection authority
   • Other Jurisdictions: Your local privacy regulator

14. Withdrawal of Consent

14.1 Marketing Consent Withdrawal

You can withdraw consent for marketing communications at any time through:

• Unsubscribe Links: Click the unsubscribe link in any marketing email
• Account Settings: Update your communication preferences in your account dashboard
• Customer Support: Contact our support team to opt-out of all marketing
• Written Request: Send an email to [email protected]

14.2 Complete Account Deletion

To delete your account and associated data:

1. Log into your account and go to Account Settings
2. Select "Delete Account" and confirm your choice
3. You will receive a confirmation email with a final deletion link
4. Click the confirmation link to complete the process
5. Alternatively, contact customer support for assistance

Important Note: Some information may be retained for legal compliance purposes even after account deletion, as outlined in our data retention policy.

15. Conclusion

At Apache pizza, protecting your privacy is not just a legal obligation—it's fundamental to the trust relationship we have with our customers. We are committed to maintaining the highest standards of data protection and transparency in all our practices.

Your trust allows us to serve you better, whether you're enjoying a meal in our restaurant, ordering delivery to your home, or planning a special catering event. We understand that your personal information is valuable, and we treat it with the respect and care it deserves.

If you have any questions, concerns, or suggestions about this Privacy Policy or our privacy practices, we encourage you to contact us. Our team is always ready to help and ensure that your experience with Apache pizza is both delicious and secure.

Thank you for choosing Apache pizza and for trusting us with your personal information. We look forward to continuing to serve you while maintaining the highest standards of privacy protection.

Remember to check this page periodically for updates. The most current version is always available at apachepiizza.com/privacy.html