Privacy Policy

This Privacy Policy describes how Mod Pizza ("we," "us," "our," or the "Company") collects, uses, discloses, and protects your personal information when you visit our website at modpizzafood.digital, place an order, participate in our loyalty programs, or otherwise interact with our services. We are committed to protecting your privacy and ensuring that your personal data is handled in a responsible, transparent, and lawful manner in accordance with applicable United States federal and state privacy laws.

Please read this Privacy Policy carefully. By accessing or using our website, mobile applications, or any of our services, you acknowledge that you have read, understood, and agree to the terms described in this policy. If you do not agree with the terms set forth herein, please discontinue use of our services immediately.

For questions or concerns regarding this Privacy Policy, please contact us using the information provided in the Contact Information section at the end of this document.

1. Company Overview and Scope

Mod Pizza operates as a food service business within the United States. Our operations are subject to applicable United States federal privacy laws, including the Federal Trade Commission Act (FTC Act), the Children's Online Privacy Protection Act (COPPA), and, where applicable, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) for residents of California, as well as applicable state privacy laws across other jurisdictions including but not limited to Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), and Texas (TDPSA).

This Privacy Policy applies to:

• All visitors to our website at modpizzafood.digital
• Customers who place online or in-store orders
• Users who create accounts or register for our loyalty or rewards programs
• Individuals who subscribe to our newsletters or marketing communications
• Any person who otherwise provides personal information to us

This policy does not apply to third-party websites, platforms, or services that may be linked from our website. We encourage you to review the privacy policies of those third parties separately.

2. Information We Collect

We collect various categories of information depending on how you interact with our services. The categories of personal information we collect are described below.

2.1 Personal Identification Information

When you create an account, place an order, or contact us, we may collect the following personal identification information:

• Full name
• Email address
• Phone number
• Mailing and billing address
• Date of birth (where provided, for promotional purposes)
• Username and password for account login
• Payment information (processed securely through third-party payment processors)
• Profile photo (if you choose to upload one)

2.2 Order and Transaction Information

When you place an order with us, we collect information related to that transaction, including:

• Items ordered and customizations made
• Order history and frequency
• Delivery address and instructions
• Payment method type (e.g., credit card, debit card, digital wallet)
• Transaction amounts and timestamps
• Loyalty points earned or redeemed

2.3 Usage and Technical Data

We automatically collect certain technical and behavioral data when you visit our website or use our mobile application, including:

• IP address
• Browser type and version
• Operating system and device type
• Pages viewed and navigation path on our website
• Time and date of visits
• Referring URL (the website that directed you to ours)
• Session duration and frequency of visits
• Clickstream data

2.4 Cookies and Tracking Technologies

We use cookies, web beacons, pixel tags, local storage, and similar tracking technologies to enhance your experience on our website. Cookies are small text files stored on your device that allow us to recognize you on return visits and understand how you use our site. For more information about the specific cookies we use and how to manage your preferences, please refer to our Cookie Policy.

2.5 Device and Location Information

With your permission, we may collect location data to help you find nearby store locations or to facilitate delivery services. We may also collect:

• Device identifiers (such as mobile advertising IDs)
• Geolocation data (GPS coordinates or approximate location based on IP address)
• Mobile network information
• Push notification tokens (if you opt in to push notifications)

2.6 Communications and Feedback

When you contact our customer service team, complete surveys, submit reviews, or interact with us on social media, we may collect:

• The content of your messages, reviews, and feedback
• Records of correspondence
• Survey responses
• Social media handles or profile information shared publicly

2.7 Information from Third Parties

We may receive information about you from third parties, including:

• Third-party delivery platforms (e.g., DoorDash, Uber Eats, Grubhub) when you place an order through them
• Payment processors who provide fraud detection and verification services
• Social media platforms when you log in using social authentication (e.g., "Sign in with Google" or "Sign in with Apple")
• Marketing partners and data analytics providers
• Publicly available sources

3. How We Use Your Information

We use the personal information we collect for the following purposes, based on legitimate business interests, contractual necessity, legal obligations, or your consent:

3.1 Service Provision and Order Fulfillment

• Processing and fulfilling your food orders
• Managing your account and loyalty program membership
• Arranging delivery or coordinating in-store pickup
• Processing payments and managing billing
• Sending transactional communications such as order confirmations, receipts, and delivery updates

3.2 Customer Support

• Responding to your inquiries, questions, and complaints
• Resolving disputes and troubleshooting issues
• Maintaining records of customer interactions for quality assurance

3.3 Personalization and User Experience

• Remembering your preferences and saved orders
• Customizing the content and offers displayed to you
• Recommending menu items based on your order history
• Improving the usability and functionality of our website and app

3.4 Marketing and Promotions

• Sending you promotional emails, newsletters, and special offers (with your consent or where permitted by law)
• Notifying you about new menu items, limited-time offers, and events
• Administering contests, sweepstakes, and loyalty reward programs
• Conducting targeted advertising on our website and through third-party platforms (subject to your preferences)

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any email we send or by contacting us at [email protected].

3.5 Analytics and Business Intelligence

• Analyzing website traffic, user behavior, and ordering patterns to improve our services
• Conducting market research and customer satisfaction surveys
• Generating aggregated statistical reports for internal business decisions
• Monitoring and improving the performance of our digital platforms

3.6 Legal Compliance and Safety

• Complying with applicable federal and state laws and regulations
• Detecting, preventing, and investigating fraud, security breaches, and other illegal activities
• Responding to lawful requests from law enforcement or government authorities
• Enforcing our Terms of Service and other applicable agreements
• Protecting the rights, safety, and property of Mod Pizza, our customers, and the public

4. Sharing Your Information with Third Parties

We do not sell, rent, or trade your personal information to unaffiliated third parties for their own independent marketing purposes without your explicit consent. However, we may share your information in the following circumstances:

4.1 Service Providers and Business Partners

We engage trusted third-party service providers to assist us in operating our business and delivering services to you. These providers are contractually obligated to use your information only as directed by us and in accordance with this Privacy Policy. Categories of service providers include:

• Payment processors: To securely handle payment transactions
• Delivery partners: To fulfill delivery orders
• Cloud hosting and IT providers: To store and manage our data systems
• Email and marketing platforms: To send communications on our behalf
• Analytics providers: To help us analyze usage data (e.g., Google Analytics)
• Customer support platforms: To manage customer inquiries
• Fraud prevention and identity verification services

4.2 Legal Requirements and Law Enforcement

We may disclose your personal information to government authorities, law enforcement agencies, or other parties as required or permitted by law, including:

• In response to a court order, subpoena, or other legal process
• To comply with applicable laws and regulations, including requests from regulatory bodies
• To protect the rights, property, or safety of Mod Pizza, our users, employees, or the public
• In connection with an investigation of suspected or actual fraud or illegal activity

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal information may be transferred to the acquiring entity as part of the transaction. We will notify you via email and/or a prominent notice on our website if such a change in ownership occurs and affects the handling of your personal information.

4.4 With Your Consent

We may share your information with third parties in other circumstances when we have obtained your explicit consent to do so.

4.5 Aggregated and De-Identified Data

We may share aggregated or de-identified information that cannot reasonably be used to identify you with third parties for research, analytics, and marketing purposes. This type of information is not subject to the restrictions in this Privacy Policy.

5. Data Security

We take the security of your personal information seriously and have implemented a combination of administrative, technical, and physical safeguards designed to protect your data against unauthorized access, disclosure, alteration, and destruction. Our security measures include:

• Encryption: We use Secure Sockets Layer (SSL) / Transport Layer Security (TLS) encryption to protect data transmitted between your browser and our servers.
• Access controls: Access to personal information is restricted to authorized employees and service providers who need the information to perform their job functions.
• Password protection: User account passwords are stored using industry-standard hashing algorithms. We recommend using a strong, unique password for your account.
• Payment security: We do not store full credit or debit card numbers on our servers. Payment transactions are handled by PCI DSS-compliant third-party payment processors.
• Regular security assessments: We conduct periodic reviews of our data collection, storage, and processing practices to identify potential vulnerabilities.
• Incident response: We maintain procedures for detecting, reporting, and responding to data security incidents in compliance with applicable breach notification laws.

While we strive to use commercially acceptable means to protect your personal information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your data. In the event of a data breach that affects your personal information, we will notify you as required by applicable state and federal data breach notification laws, including those enacted by individual states across the United States.

6. Your Privacy Rights

Depending on your state of residence, you may have the following rights with respect to your personal information. We will respond to verified requests within the timeframes required by applicable law (generally 45 days, with a possible 45-day extension).

6.1 Right to Know / Right of Access

You have the right to request that we disclose information about the personal data we have collected, used, disclosed, and sold about you over the past 12 months, including the categories of data, the sources from which it was collected, the purposes for which it was used, and the categories of third parties with whom it was shared.

6.2 Right to Correction

You have the right to request that we correct inaccurate personal information we hold about you, taking into account the nature of the data and the purposes of processing.

6.3 Right to Deletion

You have the right to request the deletion of personal information we have collected about you, subject to certain exceptions provided by law (such as when we need to retain the information to complete a transaction, comply with a legal obligation, or exercise free speech rights).

6.4 Right to Data Portability

Where technically feasible, you have the right to receive a copy of your personal information in a structured, commonly used, and machine-readable format, and to transmit that information to another service provider.

6.5 Right to Opt Out of Sale or Sharing

California residents have the right to direct us not to sell or share their personal information with third parties for cross-context behavioral advertising. Residents of other states with applicable privacy laws may have similar opt-out rights.

6.6 Right to Limit Use of Sensitive Personal Information

Under the CPRA, California residents have the right to limit our use and disclosure of sensitive personal information (such as precise geolocation, financial data, and health information) to what is necessary to perform the services you have requested.

6.7 Right to Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights. We will not deny you goods or services, charge you different prices, provide you with a different level of service, or suggest that you will receive a different quality of service as a result of exercising your rights.

6.8 How to Submit a Privacy Rights Request

To exercise any of the rights described above, please contact us using the following methods:

• Email: [email protected]
• Website: modpizzafood.digital (Privacy Request Form)

We will need to verify your identity before processing your request. We may ask you to provide additional information, such as your name, email address, and details of your account or recent interactions with us, to confirm your identity. Authorized agents may also submit requests on behalf of California consumers, subject to verification requirements.

7. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to improve your browsing experience, analyze site traffic, and deliver personalized content and advertising. Cookies are small data files stored on your device when you visit our website.

7.1 Types of Cookies We Use

You can manage your cookie preferences through your browser settings or through our cookie preference center on our website. Please note that disabling certain cookies may affect the functionality of our website. For full details on our use of cookies, please review our Cookie Policy.

8. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. The specific retention periods we apply are as follows:

When your personal information is no longer needed for the purposes for which it was collected, we will securely delete, destroy, or anonymize it in accordance with our data retention schedule and applicable legal requirements.

9. Children's Privacy

Our website, mobile application, and services are intended for use by individuals who are 18 years of age or older. We do not knowingly collect, use, or disclose personal information from children under the age of 13 without verifiable parental consent, in compliance with the Children's Online Privacy Protection Act (COPPA), 15 U.S.C. § 6501 et seq.

If you are between the ages of 13 and 17, you must have the permission of a parent or legal guardian to use our services and to provide personal information. We encourage parents and guardians to monitor their children's online activities and to contact us if they believe their child has provided us with personal information without consent.

If we become aware that we have inadvertently collected personal information from a child under the age of 13 without proper parental consent, we will take immediate steps to delete that information from our records. If you believe we may have collected information from a minor, please contact us immediately at [email protected].

10. International Data Transfers

Mod Pizza is based in the United States and our primary data processing activities occur within the United States. However, some of our third-party service providers may be located in, or may process data in, countries other than the United States.

If we transfer your personal data outside of the United States, we take appropriate steps to ensure that such transfers are made in compliance with applicable privacy laws and that your data continues to receive adequate protection. These steps may include:

• Entering into data processing agreements with our service providers that incorporate standard contractual clauses or other legally approved transfer mechanisms
• Verifying that third-party recipients maintain privacy and security standards substantially similar to those described in this Privacy Policy
• Ensuring that cross-border transfers are made only where legally permissible and with appropriate safeguards

If you are located outside the United States and choose to provide us with personal information, please be aware that such information will be transferred to and processed in the United States, where data protection laws may differ from those in your country of residence. By using our services, you consent to this transfer, processing, and storage of your information in the United States.

11. Third-Party Links and Services

Our website may contain links to third-party websites, mobile applications, and social media platforms. We may also integrate with third-party services such as delivery platforms, payment processors, and social authentication providers. These third parties have their own independent privacy policies, and we are not responsible for their privacy practices.

We encourage you to review the privacy policies of any third-party services you interact with before providing them with your personal information. The inclusion of a link to a third-party website does not constitute an endorsement or recommendation by Mod Pizza.

12. Additional Rights for California Residents

In addition to the general rights described in Section 6, California residents have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), effective January 1, 2023:

12.1 Shine the Light Law

Under California Civil Code Section 1798.83 ("Shine the Light" law), California residents who have an established business relationship with us may request information about the types of personal information we have shared with third parties for their direct marketing purposes during the preceding calendar year. To submit such a request, please contact us at [email protected].

12.2 Categories of Personal Information Collected (CCPA)

For California residents, the categories of personal information we have collected in the preceding 12 months include:

• Identifiers (name, email, phone number, IP address)
• Commercial information (order history, purchasing behavior)
• Internet or other electronic network activity (browsing and interaction with our website)
• Geolocation data
• Inferences drawn from the above to create a profile about your preferences

12.3 Sensitive Personal Information

Under the CPRA, we may process the following categories of sensitive personal information: precise geolocation data (with your consent for delivery services) and payment card information (processed by third-party PCI-compliant processors). We do not use sensitive personal information for purposes beyond what is necessary to provide our services.

13. Privacy Rights for Residents of Other States

Residents of states that have enacted comprehensive consumer privacy laws, including but not limited to Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), and Texas (TDPSA), may have rights similar to those described in Section 6 of this Privacy Policy, including rights to access, correct, delete, and obtain a portable copy of their personal data, as well as the right to opt out of targeted advertising and profiling in connection with significant decisions.

To exercise your applicable state privacy rights, please contact us at [email protected] or through our website's privacy request portal. We will respond to your request in accordance with the applicable timelines and requirements of your state's privacy law.

14. How to File a Privacy Complaint

If you have concerns about how we handle your personal information and are not satisfied with our response, you have the right to file a complaint with the appropriate regulatory authority.

14.1 Federal Trade Commission (FTC)

For general consumer protection complaints related to privacy and deceptive practices, you may contact the Federal Trade Commission (FTC):

• Website: www.ftc.gov
• Complaint Portal: reportfraud.ftc.gov
• Phone: 1-877-382-4357

14.2 California Privacy Protection Agency (CPPA)

California residents may file complaints with the California Privacy Protection Agency:

• Website: cppa.ca.gov

14.3 State Attorneys General

Residents of other states may contact their respective State Attorney General's office to report privacy violations. Contact information for your state's Attorney General can typically be found through your state government's official website.

14.4 Internal Complaint Resolution

Before filing a complaint with a regulatory authority, we encourage you to contact us directly so we have an opportunity to address your concerns:

• Email: [email protected]
• Website: modpizzafood.digital

15. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will:

• Post the updated Privacy Policy on our website with a new "Last Updated" date
• Send an email notification to users who have provided their email address, where required by law
• Display a prominent notice on our website for a reasonable period following significant changes

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our website or services after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

16. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us using the following information:

We are committed to resolving privacy-related inquiries and complaints in a timely manner. We will acknowledge receipt of your request within a reasonable time and will strive to provide a substantive response within the timeframe required by applicable law — generally within 45 days of receiving a verifiable consumer request, with the possibility of a one-time extension of an additional 45 days where reasonably necessary.