Privacy Policy

This Privacy Policy describes how Piada ("we," "us," or "our") collects, uses, discloses, and safeguards your personal information when you visit our website at piadafood.rest, place orders, use our services, or otherwise interact with us. Please read this policy carefully. By using our website or services, you agree to the practices described herein. If you do not agree, please discontinue use of our website and services immediately.

We are committed to protecting your privacy and handling your personal data in a transparent, lawful, and responsible manner in accordance with applicable United States federal and state privacy laws, including but not limited to the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), and other applicable consumer protection regulations.

1. About Us

Piada is a food business operating in the United States. We provide food products and related services to our customers through our website and physical locations. For any questions or concerns regarding this Privacy Policy or our data practices, please contact us using the information below:

2. Scope of This Policy

This Privacy Policy applies to all personal information collected through:

• Our website located at piadafood.rest
• Online ordering platforms and mobile applications affiliated with Piada
• Email, telephone, and written communications with our team
• In-person interactions at our food locations
• Social media accounts and third-party platforms where we have a presence
• Any other means through which you interact with us

This policy does not apply to third-party websites, applications, or services that may be linked to or from our website. We encourage you to review the privacy policies of any third-party services you access.

3. Information We Collect

We collect various categories of personal information depending on how you interact with us. The types of information we may collect include the following:

3.1 Personal Identification Information

When you create an account, place an order, sign up for our newsletter, participate in promotions, or contact us, we may collect:

• Full name
• Email address
• Telephone number
• Billing and delivery address
• Date of birth (where required for age verification purposes)
• Username and password for account creation
• Profile photo or avatar (if voluntarily provided)

3.2 Payment and Transaction Information

To process your orders and payments, we or our authorized payment processors may collect:

• Credit or debit card numbers (processed securely by third-party payment processors)
• Billing address associated with payment method
• Transaction history, including items ordered, order amounts, and dates
• Gift card or promotional code information

Please note that we do not store full credit or debit card numbers on our servers. All payment data is processed through PCI-DSS compliant third-party payment processors.

3.3 Usage and Behavioral Data

When you browse or use our website, we automatically collect certain technical and behavioral data, including:

• Pages visited and time spent on each page
• Links and buttons clicked
• Items viewed, added to cart, or purchased
• Search queries entered on our website
• Referral sources (how you arrived at our website)
• Time and date of your visit

3.4 Device and Technical Information

We automatically collect device and technical information when you access our website, including:

• IP address
• Browser type and version
• Operating system and device type
• Screen resolution and language settings
• Unique device identifiers
• Mobile network information

3.5 Location Data

With your consent, or based on your IP address, we may collect approximate or precise location data to:

• Display nearby Piada locations
• Facilitate delivery services to your address
• Provide locally relevant promotions and menu items

3.6 Communications Data

When you communicate with us via email, phone, live chat, social media, or any other channel, we may collect and retain:

• The content of your messages and inquiries
• Customer service records and complaint histories
• Feedback, reviews, and survey responses

3.7 Cookies and Tracking Technologies

We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about your interactions with our website. For detailed information about our use of cookies and how to manage your preferences, please refer to Section 10 of this policy (Cookie Usage).

3.8 User-Generated Content

If you post reviews, comments, photos, or other content on our website or social media pages, we may collect and use that content in accordance with this policy and our Terms of Service.

4. How We Use Your Information

We use the personal information we collect for a variety of purposes, all of which are necessary for operating our business and providing you with the best possible experience. Specifically, we use your information for the following purposes:

4.1 Service Provision and Order Fulfillment

• Processing and fulfilling your food orders, whether online or in-person
• Managing delivery logistics and confirming delivery details
• Creating and managing your customer account
• Processing payments and issuing refunds or credits where applicable
• Sending order confirmations, receipts, and status updates
• Responding to your questions, complaints, and customer support requests

4.2 Personalization and User Experience

• Remembering your preferences, dietary requirements, and past orders
• Recommending menu items based on your order history and preferences
• Customizing the content and layout of our website for your device and location
• Saving items in your cart and wish lists across sessions

4.3 Marketing and Promotions

• Sending promotional emails, newsletters, and special offers with your consent
• Notifying you about new menu items, seasonal specials, and events
• Running loyalty programs and reward schemes
• Delivering targeted advertising through our website and third-party platforms
• Conducting promotional contests, sweepstakes, and surveys

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any marketing email, or by contacting us directly at [email protected].

4.4 Analytics and Business Improvement

• Analyzing website traffic and user behavior to improve our online experience
• Conducting market research and customer satisfaction surveys
• Identifying and resolving technical issues on our website
• Evaluating the effectiveness of our marketing campaigns
• Developing new products, services, and features based on customer feedback

4.5 Legal and Compliance Purposes

• Complying with applicable laws, regulations, and legal obligations
• Enforcing our Terms of Service and other agreements
• Detecting, preventing, and investigating fraud, security incidents, and other harmful activities
• Protecting the rights, property, and safety of Piada, our customers, and the public
• Responding to lawful requests from government authorities and law enforcement

4.6 Business Operations

• Managing internal records, accounting, and auditing
• Training our staff and improving service quality
• Evaluating potential business transactions, mergers, or acquisitions

5. Legal Bases for Processing (US Law)

Under applicable United States law, including the FTC Act and CCPA/CPRA (for California residents), we process your personal information based on the following grounds:

• Contractual Necessity: Processing is required to fulfill your order or provide services you have requested.
• Legitimate Business Interest: Processing is necessary for our legitimate interests, such as fraud prevention, business analytics, and improving our services, provided such interests do not override your rights.
• Consent: Where required by law, we obtain your explicit consent before processing your data, including for marketing communications and certain cookies.
• Legal Obligation: Processing is required for compliance with applicable laws and regulations.

6. Sharing Your Information with Third Parties

We do not sell your personal information to third parties for monetary compensation. However, we may share your information in the following circumstances:

6.1 Service Providers and Business Partners

We engage trusted third-party service providers who assist us in operating our business and delivering our services. These providers are contractually bound to use your information only on our behalf and in accordance with our instructions. Categories of service providers include:

• Payment Processors: To securely process your payment transactions
• Delivery and Logistics Partners: To fulfill delivery orders to your address
• Email Service Providers: To send transactional and marketing emails
• Analytics Providers: Such as Google Analytics, to analyze website usage and performance
• Cloud Hosting Providers: To host and maintain our website and databases
• Customer Support Tools: To manage and respond to customer inquiries
• Advertising Networks: To deliver relevant advertisements on our behalf

6.2 Legal Requirements and Law Enforcement

We may disclose your personal information when we believe disclosure is necessary or required by law, including:

• To comply with a subpoena, court order, or other legal process
• To respond to a lawful request from a government agency or law enforcement authority
• To protect the safety, rights, or property of Piada, our customers, or the public
• To investigate suspected fraud or violations of our Terms of Service

6.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, sale of all or a portion of our assets, or other corporate transaction, your personal information may be transferred to the successor entity. We will notify you of any such change via a prominent notice on our website or by email prior to your information being transferred and becoming subject to a different privacy policy.

6.4 With Your Consent

We may share your personal information with other third parties when we have obtained your explicit consent to do so, such as for co-branded promotions or partnerships.

6.5 Aggregated and De-Identified Data

We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you with third parties for research, analytics, marketing, or other business purposes.

7. Data Security

We take the security of your personal information seriously and implement a variety of technical, administrative, and physical safeguards designed to protect your data from unauthorized access, disclosure, alteration, or destruction. Our security measures include:

• Encryption: Our website uses SSL/TLS encryption to protect data transmitted between your browser and our servers. Payment data is encrypted in transit and at rest.
• Access Controls: Access to personal data is restricted to authorized personnel who need the information to perform their job functions. We enforce role-based access controls and require strong authentication.
• Secure Payment Processing: All payment transactions are processed through PCI-DSS Level 1 compliant payment processors. We do not store full credit card numbers on our systems.
• Regular Security Audits: We conduct periodic security assessments, vulnerability scans, and penetration testing to identify and address potential security risks.
• Employee Training: Our employees receive regular training on data privacy and security best practices.
• Incident Response: We maintain an incident response plan to address data breaches promptly and notify affected individuals as required by applicable law.
• Data Minimization: We collect only the personal information that is necessary for the purposes described in this policy.

8. Your Privacy Rights

Depending on your state of residence, you may have specific rights regarding your personal information under US privacy laws. We are committed to honoring these rights for all our customers.

8.1 Rights Under the California Consumer Privacy Act (CCPA/CPRA)

If you are a California resident, you have the following rights under the CCPA as amended by the CPRA:

8.2 General Privacy Rights for All US Users

Regardless of your state of residence, we provide all our customers with the following rights:

• Access: You may request a copy of the personal information we hold about you.
• Correction: You may request that we update or correct inaccurate information in your account or records.
• Deletion: You may request the deletion of your personal information, subject to legal retention requirements.
• Opt-Out of Marketing: You may unsubscribe from marketing emails at any time using the unsubscribe link or by contacting us.
• Portability: You may request a copy of your data in a structured, machine-readable format.

8.3 How to Exercise Your Rights

To exercise any of your privacy rights, please contact us using one of the following methods:

• Email: [email protected]
• Website: piadafood.rest

We will verify your identity before processing your request. Verification may require you to provide information we already have on file. We will respond to your request within 45 days as required under the CCPA/CPRA, with a possible extension of an additional 45 days where necessary. We will process most other requests within 30 days of receipt.

You may designate an authorized agent to submit a privacy rights request on your behalf. We will require written authorization and verification of the agent's identity before processing such a request.

9. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Our general data retention practices are as follows:

When personal information is no longer needed, we securely delete or anonymize it in accordance with our data disposal procedures. In some circumstances, we may anonymize your personal information so that it can no longer be associated with you, in which case we may use that anonymized information without further notice to you.

10. Cookie Usage

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze site usage, and assist in our marketing efforts. Cookies are small text files stored on your device when you visit our website.

10.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the operation of our website, including enabling you to log in, add items to your cart, and complete purchases.
• Performance and Analytics Cookies: Help us understand how visitors interact with our website by collecting and reporting information anonymously (e.g., Google Analytics).
• Functionality Cookies: Allow our website to remember your preferences, such as language, location, and saved items.
• Targeting and Advertising Cookies: Used to deliver relevant advertisements and track the effectiveness of our marketing campaigns on third-party platforms.

10.2 Managing Cookies

You can manage your cookie preferences through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling certain cookies may affect the functionality of our website. You may also opt out of certain advertising cookies through industry opt-out tools such as:

• Digital Advertising Alliance (DAA) Opt-Out
• Network Advertising Initiative (NAI) Opt-Out

For full details about our use of cookies, including a comprehensive list of cookies we deploy and instructions on how to manage your preferences, please review our Cookie Policy available on our website at piadafood.rest.

11. Children's Privacy

Piada's website and services are not directed to individuals under the age of 18. We do not knowingly collect, use, or disclose personal information from children under 18 years of age. If you are under 18, please do not use our website or provide us with any personal information.

If we become aware that we have inadvertently collected personal information from a child under 18, we will take prompt steps to delete that information from our records. If you are a parent or legal guardian and believe that your child has provided us with personal information, please contact us immediately at [email protected] so that we can take appropriate action.

Our practices comply with the Children's Online Privacy Protection Act (COPPA), which prohibits the collection of personal information from children under 13 without verifiable parental consent.

12. International Data Transfers

Piada is based in the United States and primarily processes personal information within the United States. However, in some circumstances, your personal information may be transferred to, stored, or processed in other countries where our service providers operate. These countries may have data protection laws that differ from those in the United States.

When we transfer personal data internationally, we take steps to ensure that appropriate safeguards are in place to protect your information in accordance with applicable privacy laws. These safeguards may include:

• Relying on service providers located in countries that have been determined to provide an adequate level of data protection
• Implementing contractual protections with our service providers that require them to protect your personal information in accordance with applicable law
• Ensuring that our third-party partners comply with applicable US and international data protection standards

By using our website and services, you acknowledge and consent to the transfer of your personal information to the United States and, where applicable, to other countries in connection with the operation of our business.

13. Third-Party Links and Integrations

Our website may contain links to third-party websites, social media platforms, third-party payment processors, and other external services. These third-party services have their own privacy policies and terms of use, which we strongly encourage you to review before providing any personal information.

We are not responsible for the privacy practices, content, or security of third-party websites or services. The inclusion of a link on our website does not constitute an endorsement of the third party's privacy practices or services.

Our website may also include social media features, such as "Share" or "Like" buttons, which may collect information about your interaction with these features. These features are governed by the privacy policies of the respective social media companies.

14. Do Not Track Signals

Some web browsers include a "Do Not Track" (DNT) feature that sends a signal to websites indicating that you do not want your online activity tracked. There is currently no universally accepted standard for how websites should respond to DNT signals. At this time, our website does not respond to DNT signals. We continue to monitor developments in this area and will update our practices as industry standards evolve.

California residents have the right to know whether we honor DNT signals as part of their rights under the California Online Privacy Protection Act (CalOPPA). We disclose our DNT practices in this policy in accordance with that requirement.

15. California-Specific Disclosures

If you are a California resident, the following additional disclosures apply to you under the CCPA/CPRA:

15.1 Categories of Personal Information Collected

In the past 12 months, we have collected the following categories of personal information from consumers:

• Identifiers (name, email address, IP address, account name)
• Commercial information (purchase history, products considered)
• Internet or electronic network activity information (browsing history, search history)
• Geolocation data (approximate location based on IP address or GPS with consent)
• Inferences drawn from personal information (preferences, behavior patterns)
• Sensory data (audio recordings of customer service calls, where disclosed)

15.2 Shine the Light Law

California's "Shine the Light" law (California Civil Code Section 1798.83) permits California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please contact us at [email protected].

16. Filing Complaints with Authorities

If you believe that we have not handled your personal information in accordance with applicable privacy laws, or if you are not satisfied with our response to your privacy request, you have the right to file a complaint with the relevant data protection or consumer protection authority.

16.1 California Residents

California residents may file a complaint with the California Privacy Protection Agency (CPPA):

16.2 All US Consumers

US consumers may also file a complaint with the Federal Trade Commission (FTC) regarding unfair or deceptive practices:

We encourage you to contact us directly before filing a formal complaint, as we are committed to resolving any concerns in a timely and satisfactory manner. Please reach out to us at [email protected].

17. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes to this policy, we will:

• Update the "Last Updated" date at the top of this page
• Post a prominent notice on our website homepage or in your account dashboard
• Send you an email notification (if we have your email address and the changes are material)

We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use, and protect your information. Your continued use of our website and services after any changes to this policy constitutes your acceptance of those changes.

18. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact us. We are committed to addressing your inquiries promptly and transparently.