Privacy Policy

1. Introduction

At Imos Pizza, we are deeply committed to protecting your privacy and maintaining the trust you place in us when you order our delicious St. Louis-style pizza. This comprehensive Privacy Policy outlines how we collect, use, protect, and share your personal information when you visit our website, place orders online, dine in our restaurants, or interact with our services.

This policy applies to all services offered by Imos Pizza, including our website (pizzimos.top), mobile applications, online ordering systems, delivery services, catering, loyalty programs, and in-restaurant experiences. By using our services, creating an account, or placing an order, you agree to the terms outlined in this Privacy Policy.

We understand that your privacy is paramount, especially when it comes to food preferences, dietary restrictions, and delivery information. This policy has been designed to be transparent, comprehensive, and easy to understand, reflecting our commitment to maintaining your trust in every interaction.

2. Information We Collect

2.1 Information You Provide to Us

• Personal Identification: Name, email address, phone number, delivery address, billing address, date of birth (for age verification and birthday promotions)
• Account Information: Username, password, security questions, profile picture, communication preferences
• Order History and Preferences: Past orders, favorite menu items, customization preferences, order frequency, average order value
• Dietary Information: Food allergies, dietary restrictions (vegetarian, vegan, gluten-free), special dietary requirements (halal, kosher), spice preferences
• Payment Information: Credit/debit card details (stored securely with our payment processors), billing addresses, payment history
• Delivery Information: Precise delivery addresses, delivery instructions, preferred delivery times, access codes
• Contact Forms and Reviews: Messages sent through our contact forms, customer reviews, feedback, survey responses
• Loyalty Program Data: Reward points, membership tier, earned benefits, redemption history
• Reservation Information: Table reservations, party size, special occasion notes, seating preferences
• Catering Details: Event information, guest count, menu selections, dietary accommodations, delivery logistics
• Marketing Preferences: Newsletter subscriptions, promotional email preferences, SMS marketing consent

2.2 Information Automatically Collected

• Device Information: IP address, browser type and version, operating system, device identifiers, screen resolution, time zone
• Usage Data: Pages visited, time spent on site, click patterns, search queries, menu browsing behavior, order abandonment data
• Location Data: Approximate location from IP address, GPS location (if permitted for delivery optimization), delivery zone identification
• Cookie Data: Session identifiers, user preferences, shopping cart contents, login status, personalization settings
• Performance Data: Website loading times, error reports, feature usage statistics

2.3 Information from Third Parties

• Social Media: Profile information when you connect social media accounts, shared content permissions
• Payment Processors: Transaction verification, fraud prevention data, payment method validation
• Delivery Partners: Delivery status updates, driver location, delivery confirmation
• Marketing Partners: Campaign performance data, audience insights (anonymized), referral information
• Review Platforms: Public reviews and ratings from third-party review sites

3. How We Use Your Information

3.1 Service Provision

• Order Processing: Fulfilling food orders, processing payments, coordinating kitchen preparation, managing delivery logistics
• Account Management: Creating and maintaining user accounts, authentication, password resets, profile updates
• Personalization: Recommending menu items based on past orders, customizing user experience, remembering preferences and dietary restrictions
• Customer Support: Responding to inquiries, resolving order issues, handling complaints, providing technical assistance
• Quality Improvement: Analyzing order patterns to improve menu offerings, optimizing delivery routes, enhancing website functionality

3.2 Communication

• Order Communications: Order confirmations, preparation updates, delivery notifications, receipt delivery
• Service Updates: Changes to menu items, restaurant hours, delivery areas, pricing updates
• Customer Support: Responding to questions, providing order assistance, following up on feedback
• Important Notices: Policy changes, security alerts, account notifications, food safety recalls
• Marketing Communications: Promotional offers, new menu items, special events, loyalty program updates (with your consent)

3.3 Marketing and Analytics

• Targeted Advertising: Showing relevant ads based on preferences and order history, retargeting website visitors
• Campaign Measurement: Tracking effectiveness of promotional campaigns, measuring customer acquisition, analyzing conversion rates
• Market Research: Understanding customer preferences, identifying trends, developing new menu items
• Loyalty Programs: Managing reward points, offering personalized promotions, tracking program engagement

3.4 Legal Compliance and Security

• Legal Requirements: Complying with food safety regulations, tax reporting, responding to legal requests
• Fraud Prevention: Detecting suspicious activities, preventing payment fraud, protecting against account takeovers
• Safety Protection: Ensuring food safety standards, protecting customer and employee safety
• Dispute Resolution: Investigating complaints, resolving order disputes, handling chargebacks

4. Information Sharing and Disclosure

4.1 Service Providers

• Payment Processors: Stripe, PayPal, and other secure payment services for transaction processing
• Delivery Partners: Third-party delivery services for food transportation and logistics
• Cloud Storage Providers: Amazon Web Services, Google Cloud for secure data storage and backup
• Email Services: Mailchimp, SendGrid for sending order confirmations and marketing communications
• Analytics Providers: Google Analytics for website performance analysis and user behavior insights
• Customer Support Tools: Zendesk, Intercom for managing customer service interactions

4.2 Legal Requirements

• Law Enforcement: When required by valid court orders, subpoenas, or legal processes
• Regulatory Compliance: Health department inspections, food safety investigations, tax audits
• Emergency Situations: When necessary to protect public safety or prevent harm
• Fraud Prevention: Sharing necessary information to prevent, detect, or investigate fraud

4.3 Business Transfers

In the event of a merger, acquisition, bankruptcy, or other business transfer, customer information may be transferred to the new owner. We will provide notice before your personal information is transferred and becomes subject to a different privacy policy.

4.4 With Your Consent

We may share your information for other purposes with your explicit consent, such as participating in third-party promotions or sharing testimonials.

5. Data Security

5.1 Technical Security Measures

• Encryption: All data transmission uses SSL/TLS encryption (minimum 256-bit), sensitive data encrypted at rest
• Firewalls: Advanced next-generation firewalls protect our servers from unauthorized access
• Access Controls: Role-based access ensuring only authorized personnel can access customer data
• Monitoring: 24/7 security monitoring with real-time threat detection and response
• Backups: Regular encrypted backups stored in geographically separate secure facilities
• Vulnerability Testing: Regular penetration testing and security audits by third-party experts

5.2 Organizational Security Measures

• Employee Training: Mandatory security awareness training for all staff handling customer data
• Background Checks: Comprehensive background checks for employees with data access
• Confidentiality Agreements: All employees and contractors sign strict confidentiality agreements
• Incident Response: Comprehensive security incident response plan with defined procedures
• Regular Audits: Internal and external security audits to ensure compliance with best practices

5.3 Your Security Responsibilities

• Use strong, unique passwords for your account
• Never share your login credentials with others
• Log out of your account when using public or shared computers
• Be cautious of phishing emails or suspicious links
• Report any unauthorized account access immediately
• Keep your contact information updated for security notifications

6. Cookies and Tracking Technologies

We use various tracking technologies to enhance your experience on our website and mobile applications. Below is a detailed breakdown of the types of cookies and tracking technologies we employ:

Cookie Type	Purpose	Duration
Essential Cookies	Basic site functionality, user authentication, shopping cart management, security features	Session duration
Functional Cookies	Remember user preferences, language settings, location preferences, customized menu displays	Up to 1 year
Analytics Cookies	Website usage analysis, performance monitoring, user behavior tracking, conversion measurement	Up to 2 years
Marketing Cookies	Personalized advertising, retargeting campaigns, social media integration, promotional effectiveness	Up to 1 year

Additional Tracking Technologies

• Google Analytics: Comprehensive website traffic analysis and user behavior insights
• Facebook Pixel: Conversion tracking and custom audience creation for advertising
• Web Beacons: Email open rate tracking and engagement measurement
• Local Storage: Enhanced user experience through browser-based data storage
• Session Replay Tools: Understanding user interactions to improve website usability

Cookie Management

You can control cookies through your browser settings. Most browsers allow you to accept, reject, or delete cookies. However, please note that disabling certain cookies may affect website functionality, such as maintaining your shopping cart or remembering your login status.

7. Your Privacy Rights

We respect your privacy rights and provide comprehensive options for controlling your personal information, in compliance with GDPR, CCPA, and other applicable privacy regulations.

7.1 Right of Access

You have the right to request a copy of all personal information we hold about you, including order history, account details, and communication records. We will provide this information in a clear, structured format within 30 days.

7.2 Right to Rectification

You can request correction of any inaccurate or incomplete personal information. This includes updating contact details, correcting dietary restrictions, or modifying delivery preferences.

7.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal information, subject to certain legal obligations. We may need to retain some information for legal compliance, such as transaction records for tax purposes.

7.4 Right to Restrict Processing

You can request that we limit how we use your personal information, such as stopping marketing communications while maintaining your account for orders.

7.5 Right to Data Portability

You have the right to receive your personal information in a machine-readable format or request transfer to another service provider where technically feasible.

7.6 Right to Object

You can object to certain types of data processing, particularly for marketing purposes or legitimate interest-based processing.

7.7 Rights Against Automated Decision-Making

You have the right to request human review of any automated decisions that significantly affect you, such as credit checks for large catering orders.

8. Children's Privacy

Imos Pizza takes children's privacy seriously and is committed to protecting minors online. Our services are not intended for children under the age of 16, and we do not knowingly collect personal information from children under 16 without verified parental consent.

Age Verification

• Account creation requires age verification
• Alcohol-related promotions have additional age restrictions (21+)
• Parental consent required for users under 16
• Special protections for student meal programs

If We Discover Information from Children

If we become aware that we have collected personal information from a child under 16 without proper parental consent, we will take immediate steps to delete such information from our records. Parents who believe their child has provided information to us should contact us immediately.

Parent/Guardian Notice: If you are a parent or guardian and believe your child has shared personal information with us, please contact us at [email protected] or +1 860-567-0043 for immediate assistance.

9. International Data Transfers

9.1 Protection Measures

When transferring your personal information internationally, we implement robust safeguards to ensure your data remains protected:

• Adequacy Decisions: We rely on official adequacy decisions from regulatory authorities where available
• Standard Contractual Clauses (SCCs): We use EU-approved SCCs for transfers to countries without adequacy decisions
• Data Processing Agreements: All international partners must sign comprehensive data protection agreements
• Security Assessments: Regular audits of international partners' security practices
• Encryption in Transit: All international data transfers use end-to-end encryption

9.2 Transfer Destinations

Your personal information may be transferred to and processed in the following countries:

• United States: Cloud storage services, payment processing, customer support systems
• European Union: Data analytics services, email marketing platforms, security monitoring
• Canada: Backup services and disaster recovery systems
• Other Countries: As needed for service provision, always with appropriate safeguards

10. Data Retention Periods

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this privacy policy, comply with legal obligations, and protect our legitimate business interests.

Information Type	Retention Period	Reason for Retention
Account Information	6 months after account deletion	Legal obligations, dispute resolution, fraud prevention
Order History	7 years	Tax and accounting requirements, warranty claims
Payment Information	As required by payment processors	Chargeback protection, fraud prevention
Marketing Consent	3 months after withdrawal	Consent record keeping, compliance verification
Website Usage Logs	Up to 2 years	Security monitoring, analytics, system optimization
Customer Support Records	3 years	Service quality improvement, training purposes
Dietary Information	Until account deletion	Safety compliance, personalized service
Delivery Information	1 year	Service optimization, dispute resolution

Safe Data Disposal Procedures

• Electronic Data: Complete digital deletion using industry-standard data wiping techniques ensuring data is unrecoverable
• Physical Records: Secure shredding of any physical documents containing personal information
• Backup Systems: Systematic removal from all backup systems and archives
• Third-Party Systems: Coordination with service providers to ensure complete data removal
• Disposal Records: Maintenance of disposal records for compliance verification

11. Third-Party Links and Services

Our website and mobile applications may contain links to third-party websites, social media platforms, review sites, and other external services. While we carefully select our partners, we are not responsible for the privacy practices of these third-party sites.

External Links

• Social media platforms (Facebook, Instagram, Twitter)
• Review sites (Yelp, Google Reviews, TripAdvisor)
• Food delivery partner websites
• Payment processor sites for account management
• Local community partner websites

Your Responsibility

When you click on external links or use third-party services:

• Review the privacy policy of each site before providing personal information
• Understand that different privacy rules may apply
• Check security indicators (SSL certificates, secure URLs)
• Be cautious about sharing sensitive information
• Report suspicious or fraudulent sites to us immediately

12. Policy Changes and Updates

12.1 Notification Methods

We may update this Privacy Policy from time to time to reflect changes in our practices, services, legal requirements, or industry standards. When we make changes, we will notify you through multiple channels:

• Website Notice: Prominent banner notification on our homepage and key service pages
• Email Notification: Direct email to all registered users about significant changes
• Account Dashboard: Notification in your account dashboard requiring acknowledgment
• Mobile App Alerts: Push notifications for mobile app users
• Social Media: Announcements on our official social media channels

12.2 Types of Changes

• Minor Updates: Clarifications, contact information changes, or formatting improvements
• Material Changes: New data collection practices, sharing arrangements, or rights modifications
• Legal Compliance: Updates required by new laws or regulatory requirements

12.3 Your Options

After receiving notice of policy changes, you have several options:

• Continue using our services, indicating acceptance of the updated policy
• Contact us with questions or concerns about the changes
• Exercise your data rights, including deletion or restriction requests
• Discontinue use of our services if you disagree with the changes

13. Contact Information

Response Commitment

We are committed to responding to all privacy-related inquiries within 3 business days. For complex requests requiring investigation, we will acknowledge receipt immediately and provide a detailed response within 30 days as required by applicable privacy laws.

13.1 Filing Complaints

We encourage you to contact us first with any privacy concerns so we can work together to resolve them. However, if you are not satisfied with our response, you have the right to file a complaint with the appropriate supervisory authority:

• For EU Residents: Your local Data Protection Authority or the Irish Data Protection Commission
• For California Residents: California Attorney General's Office
• For Canadian Residents: Office of the Privacy Commissioner of Canada
• For Other Jurisdictions: Your local privacy regulator or consumer protection agency

14. Withdrawal of Consent

You have the right to withdraw your consent for data processing at any time. However, please note that withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.

14.1 Marketing Consent Withdrawal

You can withdraw consent for marketing communications through several methods:

• Email Unsubscribe: Click the unsubscribe link in any marketing email
• Account Settings: Update your communication preferences in your online account
• Customer Support: Contact our customer service team for immediate removal
• SMS Stop: Reply "STOP" to any promotional text message
• Phone Opt-out: Call us to remove your number from marketing lists

14.2 Account Deletion Process

To completely delete your account and associated data:

1. Log into your account and navigate to "Account Settings"
2. Select "Delete Account" and follow the confirmation process
3. Alternatively, contact customer support for assistance
4. We may retain certain information as required by law or for legitimate business purposes
5. Complete deletion will occur within 30 days of your request

15. Conclusion

At Imos Pizza, protecting your privacy is not just a legal obligation—it's a fundamental part of our commitment to serving you with integrity and respect. We understand that trust is earned through consistent actions, transparent communication, and genuine care for your personal information.

This Privacy Policy represents our promise to you: that your personal information will be handled with the utmost care, used only for legitimate purposes that enhance your dining experience, and protected with industry-leading security measures. We never take this responsibility lightly, and we continuously invest in improving our privacy practices to exceed your expectations and industry standards.

Our Ongoing Commitment

• Regular review and updating of our privacy practices
• Continuous investment in security infrastructure and training
• Transparent communication about how we handle your information
• Responsive customer service for all privacy-related concerns
• Compliance with evolving privacy laws and regulations

We value the trust you place in us when you choose Imos Pizza for your dining needs. Whether you're ordering your favorite St. Louis-style pizza for delivery, dining in one of our restaurants, or attending a catering event, we want you to feel confident that your privacy is protected every step of the way.

If you have any questions, concerns, or suggestions about this Privacy Policy or our privacy practices, please don't hesitate to reach out to us. We welcome your feedback and are always looking for ways to improve our service to you.

Thank you for choosing Imos Pizza and for taking the time to understand how we protect your privacy.