Privacy Policy

This Privacy Policy describes how Dion's Pizzeria ("Dion's," "we," "us," or "our") collects, uses, discloses, retains, and protects information about you when you visit our website at dionspizzeria.rest, place an order, sign up for our loyalty program, contact our team, or otherwise interact with our services (collectively, the "Services"). We are committed to handling your personal information responsibly and in accordance with applicable United States federal and state privacy laws, including the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), and the Federal Trade Commission Act (FTC Act).

Please read this Privacy Policy carefully. By accessing or using our Services, you acknowledge that you have read, understood, and agree to the practices described herein. If you do not agree with this policy, please discontinue use of our Services immediately.

1. About Us

Dion's Pizzeria operates a food service business in the United States. You may contact us regarding any privacy-related inquiries using the information below:

2. Information We Collect

We collect various categories of information depending on how you interact with Dion's Pizzeria. The categories below outline what we may collect and why.

2.1 Personal Information You Provide Directly

When you engage with our Services — such as placing an online order, creating an account, signing up for our email newsletter, participating in a promotion, or contacting our customer support — you may voluntarily provide us with personal information, including but not limited to:

• Identity Information: First name, last name, username or display name.
• Contact Information: Email address, phone number, home or delivery address.
• Account Credentials: Password (stored in encrypted form), account security questions.
• Payment Information: Credit card numbers, debit card numbers, billing address, and other payment details. Note that full payment card data is processed by our PCI-DSS compliant third-party payment processors; we do not store complete card numbers on our servers.
• Order History: Details of menu items ordered, customization preferences, special dietary requests, order dates, and delivery instructions.
• Loyalty Program Information: Points balance, reward redemption history, participation records.
• Communications: Any messages, feedback, reviews, or complaints you send us via email, contact forms, or social media.
• Survey and Promotion Data: Responses to surveys, sweepstakes entries, contest participation, and feedback forms.

2.2 Information Collected Automatically

When you visit our website at dionspizzeria.rest or use our digital Services, we and our third-party partners automatically collect certain technical and usage data, including:

• Device Information: Device type, operating system and version, browser type and version, screen resolution, device identifiers (such as advertising IDs or device IDs), and mobile carrier information.
• Log Data: IP address, access dates and times, pages viewed, referring URLs, exit pages, click-through paths, and error logs.
• Usage Data: How you interact with our website — including which pages you visit, how long you spend on each page, which menu items you view, items added to or removed from your cart, and the searches you conduct.
• Location Data: General geographic location derived from your IP address, and (if you grant permission) more precise location data from your mobile device for purposes such as finding the nearest Dion's location or enabling delivery services.
• Cookie and Tracking Data: Information collected through cookies, web beacons, pixel tags, local storage objects, and similar tracking technologies. Please see Section 8 of this policy for more information about our cookie practices.

2.3 Information from Third Parties

We may receive information about you from third-party sources, which we may combine with information we already hold about you:

• Third-Party Ordering Platforms: If you order through a third-party delivery application or food ordering platform, we may receive certain order and contact details from that platform.
• Social Media Platforms: If you choose to log in using a social media account (such as Facebook or Google), we may receive your name, email address, profile picture, and other information you have made publicly available or permitted that platform to share.
• Marketing and Analytics Partners: We may obtain demographic, interest, and behavioral data from advertising and analytics partners to help us better understand our audience and improve our marketing efforts.
• Review Platforms: If you post a review on a third-party review site (such as Google Reviews or Yelp) and mention our business, we may collect and review that public content.

2.4 Information Collected in Our Physical Locations

If you visit one of our physical restaurant locations, we may collect information through:

• Loyalty card sign-ups or in-store account registrations.
• Written feedback forms or comment cards.
• Security and surveillance cameras for the safety of our staff and guests (subject to applicable law).

3. How We Use Your Information

We use the information we collect for a variety of business and operational purposes, including:

3.1 Providing and Improving Our Services

• Processing and fulfilling your food orders, including coordinating delivery or pickup.
• Creating and managing your account, including loyalty program participation.
• Processing payments and issuing receipts or invoices.
• Responding to your inquiries, comments, complaints, and support requests.
• Personalizing your experience — for example, remembering your preferences and past orders to make reordering faster.
• Improving our menu offerings, website functionality, and overall customer experience based on usage patterns and feedback.
• Developing new features, products, or services.

3.2 Analytics and Research

• Conducting internal research and analytics to understand how customers use our Services.
• Monitoring website performance, identifying technical issues, and measuring the effectiveness of content and promotions.
• Generating aggregated and anonymized insights about ordering trends, popular menu items, and peak hours.

3.3 Marketing and Communications

• Sending you transactional emails and SMS messages related to your orders (confirmations, updates, receipts).
• Sending you promotional communications, special offers, new menu announcements, and loyalty program updates — but only if you have opted in to receive such communications or we have a legitimate basis to do so.
• Displaying targeted advertisements on our website or third-party platforms, based on your interests and activity.
• Conducting surveys, contests, and sweepstakes.

You may opt out of marketing emails at any time by clicking the "unsubscribe" link in any marketing email we send, or by contacting us at [email protected]. Please note that even if you opt out of marketing communications, you will still receive transactional messages related to your orders or account.

3.4 Legal and Safety Purposes

• Complying with applicable federal, state, and local laws and regulations.
• Detecting, investigating, and preventing fraudulent transactions, unauthorized access, and other illegal activities.
• Enforcing our Terms of Service and other agreements.
• Protecting the rights, property, and safety of Dion's Pizzeria, our customers, employees, and the public.
• Responding to lawful requests from government authorities, courts, and law enforcement.

4. Legal Basis for Processing (Where Applicable)

To the extent that applicable law requires us to identify a legal basis for processing your personal information, we rely on the following:

• Contractual Necessity: Processing is necessary to fulfill your order, provide our Services, and manage your account.
• Legitimate Interests: We process certain data to operate our business efficiently, prevent fraud, improve our Services, and communicate with customers, where these interests are not overridden by your privacy rights.
• Consent: Where required, we obtain your consent before sending you marketing communications or placing non-essential cookies on your device.
• Legal Obligation: We may process your data to comply with applicable law, court orders, or legal obligations.

5. Sharing Your Information with Third Parties

We do not sell your personal information to third parties for their independent marketing purposes. However, we do share your information in the following circumstances:

5.1 Service Providers and Business Partners

We work with carefully selected third-party vendors and service providers who help us operate our business and deliver our Services. These parties may access your personal information only to the extent necessary to perform their functions and are contractually obligated to protect your data. Examples include:

• Payment Processors: Companies that securely handle payment transactions (e.g., Stripe, Square).
• Delivery and Logistics Partners: Third-party delivery drivers or logistics platforms that fulfill your orders.
• Cloud Hosting and IT Providers: Companies that provide hosting, data storage, and infrastructure services.
• Email and SMS Marketing Platforms: Tools used to send transactional and promotional communications.
• Analytics Providers: Services such as Google Analytics that help us understand website traffic and user behavior.
• Customer Support Tools: Platforms used to manage and respond to customer inquiries.
• Advertising Networks: Ad technology companies that help us deliver relevant advertisements.

5.2 Legal Requirements and Law Enforcement

We may disclose your personal information if we believe in good faith that such disclosure is necessary to:

• Comply with a legal obligation, subpoena, court order, or governmental request.
• Enforce our Terms of Service or other applicable agreements.
• Protect against legal liability, fraud, or security threats.
• Protect the safety of any person, including our employees and customers.

5.3 Business Transfers

In the event that Dion's Pizzeria is involved in a merger, acquisition, sale of assets, financing, or other business transfer, your personal information may be transferred to the successor entity. We will notify you via email or a prominent notice on our website before your personal information becomes subject to a materially different privacy policy.

5.4 With Your Consent

We may share your information with third parties in other ways not described above when we have your explicit consent to do so.

5.5 Aggregated and Anonymized Data

We may share aggregated or de-identified information — which cannot reasonably be used to identify you — with third parties for research, marketing, analytics, and other purposes.

6. Data Security

We take the security of your personal information seriously and implement a range of technical, administrative, and physical safeguards designed to protect your data from unauthorized access, use, disclosure, alteration, or destruction. Our security measures include:

• Encryption: We use industry-standard SSL/TLS encryption to protect data transmitted between your browser and our servers. Stored sensitive data, including passwords, is protected with strong cryptographic hashing.
• Access Controls: Access to personal information is restricted to authorized personnel who need it to perform their job responsibilities. We use role-based access controls and require multi-factor authentication for administrative systems.
• Payment Security: All payment card transactions are processed through PCI-DSS compliant third-party processors. We do not store full credit card numbers on our own servers.
• Regular Security Assessments: We conduct periodic reviews of our data collection, storage, and processing practices, as well as security vulnerability assessments.
• Employee Training: Our team members receive training on data privacy and security best practices.
• Incident Response: We maintain an incident response plan to address potential data breaches in a timely and transparent manner, including notifying affected individuals and relevant authorities as required by law.

While we take reasonable precautions to protect your information, no data transmission over the internet or electronic storage system is 100% secure. We cannot guarantee absolute security, and you provide your information at your own risk. If you believe your account has been compromised, please contact us immediately at [email protected].

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Our general retention guidelines are as follows:

When personal information is no longer needed, we securely delete or anonymize it. If deletion is not immediately possible (for example, because data is stored in backup archives), we will isolate the information from further use until deletion is possible.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies on dionspizzeria.rest to enhance your browsing experience, analyze site traffic, and deliver targeted advertising. Cookies are small text files placed on your device when you visit a website.

8.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the operation of our website, such as maintaining your session when you add items to your cart or log in to your account. These cookies cannot be disabled.
• Performance and Analytics Cookies: These cookies collect information about how visitors use our website, such as pages visited and error messages encountered, to help us improve performance. Examples include Google Analytics cookies.
• Functionality Cookies: These cookies allow our website to remember your preferences (such as your delivery address or language settings) to provide an enhanced experience.
• Targeting and Advertising Cookies: These cookies track your browsing activity across websites to deliver ads that are more relevant to your interests. They are placed by our advertising partners.

8.2 Managing Your Cookie Preferences

You can manage or disable cookies through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling certain cookies may impact the functionality of our website. You may also opt out of interest-based advertising through the Network Advertising Initiative at optout.networkadvertising.org or the Digital Advertising Alliance at optout.aboutads.info.

For a full description of the cookies we use and detailed instructions on managing your preferences, please refer to our Cookie Policy, available on our website at dionspizzeria.rest.

9. Your Privacy Rights

Depending on your location and applicable law, you may have the following rights with respect to your personal information:

9.1 Right to Know and Access

You have the right to request information about the personal data we hold about you, including the categories of data collected, the purposes for which it is used, the sources from which it was collected, and the third parties with whom it has been shared.

9.2 Right to Correction

You have the right to request that we correct inaccurate or incomplete personal information we hold about you. You may also update much of your information directly through your account settings on our website.

9.3 Right to Deletion

You have the right to request that we delete your personal information, subject to certain exceptions (such as where we are required to retain information to comply with a legal obligation, complete a transaction, or detect security incidents).

9.4 Right to Data Portability

You have the right to request a copy of the personal information you have provided to us in a structured, commonly used, and machine-readable format, where technically feasible.

9.5 Right to Opt Out of Marketing

You may opt out of receiving promotional communications from us at any time by using the unsubscribe link in any marketing email, replying "STOP" to any marketing SMS, or by contacting us directly. Opting out does not affect transactional communications.

9.6 Right to Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights. This means we will not deny you goods or services, charge you different prices, or provide you a different level of service because you exercised a right under this Privacy Policy or applicable law.

9.7 How to Submit a Request

To exercise any of the rights described above, please submit a verifiable request to us by:

• Email: [email protected]

We will acknowledge your request within 10 business days and respond substantively within 45 days. If we need additional time (up to 45 additional days), we will inform you of the reason and extension period in writing. We may need to verify your identity before processing your request to protect your information from unauthorized disclosure or deletion.

10. California Privacy Rights (CCPA/CPRA)

The California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively, "CCPA/CPRA"), provides California residents with additional rights regarding their personal information. This section supplements the general information in this Privacy Policy.

10.1 Categories of Personal Information Collected

In the preceding 12 months, we have collected the following categories of personal information as defined by the CCPA/CPRA:

• Identifiers (name, email address, phone number, IP address)
• Personal information listed in Cal. Civ. Code §1798.80 (e.g., payment card information, address)
• Internet or other electronic network activity information (browsing history, search history, interactions with our website)
• Geolocation data (general or precise location)
• Inferences drawn from the above to create a profile about preferences and behavior
• Commercial information (order history, purchasing tendencies)

10.2 Your CCPA/CPRA Rights

California residents have the right to:

• Know what personal information is collected, used, disclosed, and sold or shared.
• Delete personal information collected about them (with certain exceptions).
• Correct inaccurate personal information.
• Opt out of the sale or sharing of personal information for cross-context behavioral advertising.
• Limit the use and disclosure of sensitive personal information.
• Non-discrimination for exercising CCPA/CPRA rights.

10.3 Do Not Sell or Share My Personal Information

California residents may opt out of the sale or sharing of their personal information for targeted advertising purposes by contacting us at [email protected] with the subject line "Do Not Sell or Share My Personal Information."

10.4 Authorized Agents

You may designate an authorized agent to submit requests on your behalf. The agent must provide written proof of authorization, and we may still require you to verify your own identity directly with us.

11. Children's Privacy

Our Services are intended for use by individuals who are 18 years of age or older. We do not knowingly collect, use, or disclose personal information from children under the age of 13, as defined by the Children's Online Privacy Protection Act (COPPA), or from individuals under the age of 18 without verifiable parental consent where required by law.

If you are a parent or guardian and believe that your child under the age of 13 has provided us with personal information without your consent, please contact us immediately at [email protected]. We will take prompt steps to investigate and, where confirmed, delete such information from our records.

We do not direct any part of our Services specifically at children, and we do not knowingly market to children.

12. International Data Transfers

Dion's Pizzeria is based in the United States. If you are accessing our Services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where our servers are located and our central operations are conducted. The data protection laws in the United States may differ from those in your country of residence.

By using our Services, you consent to the transfer of your information to the United States. We take appropriate contractual and security measures to ensure that any international transfers of personal data are carried out in compliance with applicable law and with appropriate safeguards in place to protect your information.

If you have questions about how your information is protected in connection with international transfers, please contact us at [email protected].

13. Third-Party Links and Services

Our website may contain links to third-party websites, applications, or services — such as third-party delivery platforms, social media pages, review sites, or payment gateways — that are not operated by us. This Privacy Policy applies only to our Services. We are not responsible for the privacy practices of any third-party websites or services, and we encourage you to review their privacy policies before providing them with any personal information.

The inclusion of a link to a third-party website does not imply our endorsement of that website or its privacy practices.

14. FTC Act and Consumer Protection Compliance

Dion's Pizzeria is committed to fair and transparent data practices in compliance with the Federal Trade Commission Act (FTC Act), which prohibits unfair or deceptive acts or practices in commerce. We do not engage in deceptive data collection or use practices, and we provide truthful and accurate information about how we collect and use personal data. If you believe we have engaged in any unfair or deceptive practice, you may file a complaint with the Federal Trade Commission (FTC) at:

• FTC Online Complaint Assistant: reportfraud.ftc.gov
• FTC Mailing Address: Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, DC 20580
• FTC Phone: 1-877-FTC-HELP (1-877-382-4357)

15. How to File a Privacy Complaint

If you have concerns about how we handle your personal information and wish to file a complaint, we encourage you to first contact us directly so that we can address your concerns:

• Email: [email protected]

We take all privacy complaints seriously and will respond to your complaint within a reasonable timeframe. If you are not satisfied with our response or believe we are processing your personal information in a manner inconsistent with applicable law, you may contact the following regulatory authorities:

15.1 For All U.S. Residents — Federal Trade Commission (FTC)

The FTC enforces federal consumer protection laws including those related to privacy and data security.

• Website: www.ftc.gov
• Complaint Portal: reportfraud.ftc.gov
• Phone: 1-877-382-4357

15.2 For California Residents — California Privacy Protection Agency (CPPA)

The California Privacy Protection Agency enforces the CCPA/CPRA and handles privacy complaints from California residents.

• Website: cppa.ca.gov
• Email: [email protected]

15.3 For California Residents — California Attorney General

• Website: oag.ca.gov/privacy

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Post the updated Privacy Policy on our website at dionspizzeria.rest with a new "Last Updated" date.
• Notify you by email (if we have your email address on file) or by displaying a prominent notice on our website before the change takes effect.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our Services after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to reach out to us:

We are committed to working with you to resolve any privacy concerns you may have in a fair and timely manner.