Privacy Policy

This Privacy Policy explains how Davanni's ("we," "us," "our," or "the Company") collects, uses, discloses, retains, and protects information about you when you visit our website at pizza-davannis.rest, place orders, interact with our services, or otherwise engage with us. We are committed to protecting your personal information and your right to privacy. Please read this policy carefully. If you disagree with its terms, please discontinue use of our site and services.

This Privacy Policy applies to all users of pizza-davannis.rest and any related digital services, mobile experiences, or customer communications operated by Davanni's. It is intended to comply with applicable United States federal and state privacy laws, including but not limited to the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), and other applicable state and federal regulations.

1. Who We Are

Davanni's is a food service business operating in the United States. We operate the website pizza-davannis.rest and provide food ordering, delivery, and related services to our customers. For all privacy-related matters, you may contact us directly using the information provided in Section 14 of this policy.

2. Information We Collect

We collect several types of information in connection with our services. The categories below describe the personal information we may collect, depending on how you interact with us.

2.1 Information You Provide Directly

When you create an account, place an order, make a reservation, contact customer support, sign up for a newsletter, or otherwise interact with us, we may collect:

• Identifiers: Your full name, username, and similar identifiers.
• Contact Information: Email address, phone number, and mailing or delivery address.
• Account Credentials: Passwords or other authentication information used to access your account.
• Order and Transaction Information: Items ordered, order history, special dietary preferences or requests, gift card numbers, and loyalty program details.
• Payment Information: Credit or debit card numbers, billing address, and other financial information required to process payments. Note: Full payment card details are processed by our PCI-compliant payment processors; we do not store complete card numbers on our servers.
• Communications: Messages, feedback, reviews, complaints, or other communications you send us.
• Survey and Promotional Data: Responses to surveys, contests, sweepstakes, or promotional activities you participate in.

2.2 Information Collected Automatically

When you visit pizza-davannis.rest or use our digital services, certain information is collected automatically through cookies, web beacons, pixels, and similar technologies:

• Usage Data: Pages viewed, links clicked, time spent on pages, search queries entered on our site, referring URLs, and exit pages.
• Device Information: IP address, browser type and version, operating system, device type (desktop, mobile, tablet), device identifiers, screen resolution, and language settings.
• Location Data: Approximate geographic location inferred from your IP address, or precise geolocation if you grant permission through your browser or device settings.
• Log Files: Server logs that record access times, error logs, and traffic analytics.
• Cookie and Tracking Data: Information collected through cookies, pixel tags, web beacons, and similar technologies. See Section 9 for detailed information about our use of cookies.

2.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Social Media Platforms: If you connect your social media account to our services or interact with our social media pages, we may receive profile data such as your name, profile picture, email address, and friend/follower lists, subject to your privacy settings on those platforms.
• Delivery and Partner Platforms: Third-party food delivery platforms or technology integration partners may share your name, delivery address, and order information when you use their platform to order from us.
• Analytics and Advertising Partners: We may receive aggregated or anonymized information from analytics providers to help us understand our audience.
• Publicly Available Sources: Information from public records or other publicly available sources, as permitted by law.

2.4 Sensitive Personal Information

We do not intentionally collect sensitive personal information such as Social Security numbers, government-issued ID numbers, racial or ethnic origin, religious beliefs, union membership, genetic data, or health information unless specifically required for a particular service or required by law. We ask that you do not provide such information unless explicitly requested.

3. How We Use Your Information

We use the personal information we collect for the following business and operational purposes:

3.1 Service Provision and Order Fulfillment

• Processing and fulfilling your food orders, including delivery and pick-up coordination.
• Managing your account, including authentication and profile management.
• Processing payments and refunds.
• Communicating order confirmations, updates, receipts, and delivery notifications.
• Administering loyalty rewards programs or promotional offers.

3.2 Customer Service and Support

• Responding to your inquiries, complaints, and feedback.
• Resolving disputes and troubleshooting issues.
• Providing technical support related to our website and digital services.

3.3 Marketing and Communications

• Sending promotional emails, newsletters, special offers, and coupons, provided you have opted in or we have a legitimate interest to do so.
• Personalizing your experience on our website based on your past orders and browsing behavior.
• Conducting targeted advertising through third-party ad platforms, including retargeting campaigns.
• Conducting surveys and gathering feedback to improve our products and services.

3.4 Analytics and Site Improvement

• Analyzing website traffic and user behavior to improve site functionality, design, and content.
• Monitoring and evaluating the effectiveness of our marketing campaigns.
• Conducting research and development to enhance our product offerings.
• Generating internal reports and business analytics.

3.5 Legal and Compliance Purposes

• Complying with applicable laws, regulations, and legal processes.
• Enforcing our Terms of Service and other applicable policies.
• Detecting, preventing, and responding to fraud, security incidents, and other harmful activities.
• Protecting the rights, property, and safety of Davanni's, our customers, and the public.

4. Legal Basis for Processing

In the United States, we rely on the following legal bases to collect and process your personal information:

• Contractual Necessity: Processing is necessary to fulfill a contract with you, such as processing your food order.
• Legitimate Business Interests: We process certain data based on our legitimate interests, such as fraud prevention, website security, and improving our services, provided those interests are not overridden by your rights.
• Consent: Where required by law, we will obtain your consent before processing your data, such as for optional marketing communications or non-essential cookies.
• Legal Obligation: We may process data to comply with applicable laws, regulations, or court orders.

5. Sharing Your Information with Third Parties

We do not sell your personal information to unaffiliated third parties for their own independent marketing purposes. However, we may share your information in the following circumstances:

5.1 Service Providers and Vendors

We share your information with third-party companies and individuals that provide services on our behalf. These service providers are contractually obligated to use your data only for the purposes we specify and to maintain appropriate security measures. Examples include:

• Payment processing companies (e.g., credit card processors).
• Email marketing platforms and communication service providers.
• Cloud hosting and data storage providers.
• Analytics and website optimization tools (e.g., Google Analytics).
• Delivery logistics and courier partners.
• Customer relationship management (CRM) software providers.
• Advertising networks and retargeting partners.

5.2 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal information may be transferred to the acquiring entity. We will notify you of any such change via email or prominent notice on our website and give you the opportunity to exercise your rights with respect to your data.

5.3 Legal Requirements and Protection of Rights

We may disclose your information if we believe disclosure is necessary or appropriate to:

• Comply with applicable law, regulation, subpoena, legal process, or governmental request.
• Enforce our Terms of Service or other agreements.
• Protect the safety, rights, or property of Davanni's, our employees, customers, or others.
• Detect, prevent, or address fraud, security, or technical issues.

5.4 With Your Consent

We may share your information with other third parties when you have provided explicit consent for us to do so, including participation in co-branded promotions or integration with third-party services you have requested.

5.5 Aggregated or De-Identified Data

We may share aggregated or de-identified information — information that cannot reasonably be used to identify you — with third parties for research, marketing, analytics, and other legitimate business purposes.

6. California Privacy Rights (CCPA/CPRA)

If you are a resident of the State of California, you have specific rights under the California Consumer Privacy Act of 2018 (CCPA), as amended by the California Privacy Rights Act of 2020 (CPRA). These rights include:

6.1 Right to Know

You have the right to request that we disclose what personal information we have collected about you, the categories of sources from which it was collected, the business purpose for collection, the categories of third parties with whom it is shared, and the specific pieces of personal information we hold about you.

6.2 Right to Delete

You have the right to request deletion of personal information we have collected from you, subject to certain exceptions (e.g., where we need the information to complete a transaction, comply with a legal obligation, or detect security incidents).

6.3 Right to Correct

Under the CPRA, you have the right to request that we correct inaccurate personal information we maintain about you, taking into account the nature of the information and the purposes for processing it.

6.4 Right to Opt Out of Sale or Sharing

You have the right to opt out of the "sale" or "sharing" of your personal information as those terms are defined under the CCPA/CPRA. While we do not sell personal information in the traditional sense, certain advertising and analytics activities may constitute "sharing" under California law. You may exercise this right by contacting us at [email protected].

6.5 Right to Limit Use of Sensitive Personal Information

To the extent we collect sensitive personal information as defined by the CPRA, you have the right to direct us to limit its use and disclosure to what is necessary for performing services you requested.

6.6 Right to Non-Discrimination

We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny goods or services, charge different prices, provide a different level of service quality, or suggest that you will receive a different level of service because you exercised your rights.

6.7 How to Submit a California Privacy Request

To submit a verifiable consumer request, please contact us at [email protected]. We will respond to verifiable requests within 45 days as required by law, with the possibility of a single 45-day extension if necessary. You may designate an authorized agent to make requests on your behalf with proper written authorization.

7. Your Privacy Rights (All Users)

Regardless of your state of residence, we respect your right to control your personal information. To the extent permitted by applicable law, you have the following rights:

7.1 Right of Access

You may request a copy of the personal information we hold about you, including details about how it is used and shared.

7.2 Right to Correction

You may request that we update or correct inaccurate or incomplete personal information we hold about you.

7.3 Right to Deletion

You may request that we delete your personal information, subject to applicable legal exceptions.

7.4 Right to Data Portability

Where technically feasible and required by applicable law, you may request that we provide your personal information to you in a structured, commonly used, machine-readable format.

7.5 Right to Withdraw Consent

Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing prior to withdrawal.

7.6 Right to Opt Out of Marketing

You may opt out of receiving marketing communications from us at any time by clicking the "unsubscribe" link in any marketing email, by texting STOP in response to any SMS marketing, or by contacting us directly at [email protected]. Please allow up to 10 business days for your request to be processed. Opting out of marketing communications will not affect transactional communications related to your orders or account.

To exercise any of these rights, please contact us at:

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, to comply with our legal obligations, resolve disputes, and enforce our agreements. The specific retention periods depend on the type of data and the purpose for which it was collected:

After the applicable retention period has expired, we will securely delete or anonymize your personal information in accordance with our internal data management procedures.

9. Cookies and Tracking Technologies

Our website pizza-davannis.rest uses cookies, web beacons, pixel tags, and similar tracking technologies to enhance your browsing experience, analyze website traffic, and support our marketing activities.

9.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the website to function properly, including session management, security, and shopping cart functionality. These cannot be disabled.
• Performance and Analytics Cookies: Help us understand how visitors interact with our website by collecting anonymous usage statistics (e.g., Google Analytics).
• Functional Cookies: Remember your preferences, such as your location, language, and saved items, to provide a more personalized experience.
• Marketing and Targeting Cookies: Track your browsing activity across sites to deliver relevant advertisements and measure the effectiveness of marketing campaigns.

9.2 Managing Your Cookie Preferences

You can manage or disable cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, and set preferences for certain websites. Please note that disabling certain cookies may affect the functionality of our website. You may also opt out of interest-based advertising through the Digital Advertising Alliance (DAA) at www.aboutads.info or the Network Advertising Initiative (NAI) at www.networkadvertising.org.

For detailed information about the specific cookies we use, their purposes, and how to manage them, please refer to our Cookie Policy available on our website at pizza-davannis.rest.

10. Data Security

We take the security of your personal information seriously and implement a range of administrative, technical, and physical safeguards to protect it from unauthorized access, disclosure, alteration, and destruction. Our security measures include:

• Encryption: We use Secure Sockets Layer (SSL) / Transport Layer Security (TLS) technology to encrypt data transmitted between your browser and our servers.
• Access Controls: Access to personal information is restricted to authorized employees and service providers who need it to perform their job functions. All access is subject to appropriate confidentiality obligations.
• Payment Security: Payment card transactions are processed in compliance with Payment Card Industry Data Security Standards (PCI-DSS) through our certified payment processors.
• Regular Security Assessments: We conduct periodic security reviews, vulnerability assessments, and penetration testing to identify and address potential security risks.
• Incident Response: We maintain a data breach response plan and will notify affected individuals and relevant authorities as required by applicable law in the event of a security breach.
• Employee Training: Our employees receive regular training on data privacy and security best practices.

Despite our best efforts, no security system is completely impenetrable. We cannot guarantee the absolute security of your information. If you believe your account or personal information has been compromised, please contact us immediately at [email protected].

11. Children's Privacy

Our website, services, and products are intended for use by individuals who are 18 years of age or older. We do not knowingly collect, use, or disclose personal information from individuals under the age of 18. If you are under 18, please do not use our website or provide any personal information to us.

We comply with the Children's Online Privacy Protection Act (COPPA), which prohibits the collection of personal information from children under the age of 13 without verified parental consent. If we learn that we have inadvertently collected personal information from a child under 13, we will promptly delete such information from our records.

If you are a parent or guardian and believe your child under the age of 18 has provided us with personal information, please contact us at [email protected] so that we may take appropriate action.

12. International Data Transfers

Davanni's is based in the United States, and our primary data processing activities take place within the United States. If you access our website or services from outside the United States, please be aware that your information may be transferred to, stored in, and processed in the United States or other countries where our service providers operate.

Data protection laws in the United States and other countries may differ from those in your home country. By using our website and services, you acknowledge and consent to the transfer of your personal information to the United States and the processing of your information as described in this Privacy Policy.

We take steps to ensure that any international transfers of personal information are conducted in compliance with applicable law and that appropriate safeguards are in place to protect your information.

13. Third-Party Links and Services

Our website may contain links to third-party websites, social media platforms, or services that are not operated by Davanni's. We are not responsible for the privacy practices of those third parties. Once you leave our website by clicking a third-party link, this Privacy Policy no longer applies.

We encourage you to review the privacy policies of any third-party websites or services you visit. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party sites.

14. How to File a Privacy Complaint

If you have concerns about how we handle your personal information, we encourage you to first contact us directly so that we can address your concerns promptly and effectively.

14.1 Contact Davanni's Privacy Team

Please include "Privacy Inquiry" or "Privacy Complaint" in the subject line of your email. Describe your concern in as much detail as possible. We will acknowledge your inquiry within 5 business days and will endeavor to resolve the matter within 30 days.

14.2 Filing a Complaint with a Regulatory Authority

If you are a California resident and are not satisfied with our response to your privacy inquiry, you may file a complaint with the California Privacy Protection Agency (CPPA) or the California Attorney General's Office:

• California Privacy Protection Agency: https://cppa.ca.gov
• California Attorney General – Privacy Complaints: https://oag.ca.gov/privacy

For all other United States residents, you may file a complaint with the Federal Trade Commission (FTC):

• FTC Consumer Protection: https://www.ftc.gov/complaint

15. FTC Act Compliance

We comply with the Federal Trade Commission Act (FTC Act), which prohibits unfair or deceptive acts or practices in or affecting commerce. Our data practices are designed to be transparent, honest, and consistent with the representations we make in this Privacy Policy. We do not engage in deceptive data practices, and we do not make material misrepresentations about how we collect, use, or share your personal information.

We also comply with applicable FTC guidelines on endorsements, testimonials, and behavioral advertising, including the requirement to provide clear and conspicuous disclosures about interest-based advertising practices.

16. Do Not Track Signals

Some web browsers include a "Do Not Track" (DNT) feature that signals to websites that you do not want your online activity tracked. Currently, there is no universally accepted standard for how websites should respond to DNT signals, and our website does not alter its data collection practices in response to DNT signals. If a universal standard is established in the future, we will review and update our practices accordingly.

California residents should note that the CPRA's opt-out rights with respect to the "sharing" of personal information for cross-context behavioral advertising may provide a more effective mechanism to limit tracking. Please see Section 6.4 for more information.

17. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. When we make material changes, we will notify you by:

• Posting the updated Privacy Policy on our website at pizza-davannis.rest with a new "Last Updated" date.
• Sending an email notification to the address associated with your account (for registered users).
• Displaying a prominent notice on our website homepage for a reasonable period following the update.

Your continued use of our website or services after the effective date of any changes constitutes your acceptance of the revised Privacy Policy. We encourage you to review this policy periodically to stay informed about how we are protecting your information.

18. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to reach out to us. We are committed to addressing your inquiries in a timely and thorough manner.

When contacting us about a privacy matter, please provide your full name, contact information, a description of your request or concern, and any relevant details to help us locate your information and respond appropriately. We will respond to all privacy-related inquiries within the timeframes required by applicable law.