Privacy Policy

1. Introduction

Apache Pizza ("we," "us," "our," or "the Company") is committed to protecting your privacy and handling your personal data responsibly. This Privacy Policy describes how we collect, use, share, and protect information about you when you visit our website, order food, use our services, or interact with us in any way.

This policy applies to all services offered by Apache Pizza, including our website at apachiipiza.com, mobile applications, in-store experiences, delivery services, catering, and franchise operations. By using our services, creating an account, placing an order, or providing us with your information, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Information We Collect

2.1 Information You Provide to Us

We collect information you voluntarily provide when you interact with our services:

• Personal Identification: Name, email address, phone number, date of birth, and delivery addresses
• Account Information: Username, password (encrypted), order history, and account preferences
• Food Preferences: Dietary requirements (vegan, vegetarian, halal, kosher, gluten-free), allergen information, favorite orders, and special dietary needs
• Order Details: Food selections, customizations, delivery instructions, and special requests
• Payment Information: Credit card numbers, billing addresses, and payment method preferences (processed securely through encrypted systems)
• Loyalty Program Data: Rewards points, membership level, promotional preferences, and redemption history
• Reservation Information: Table booking details, party size, special occasion notes, and timing preferences
• Catering Details: Event information, guest count, menu selections, delivery locations, and special event requirements
• Communication Data: Contact form submissions, customer service interactions, reviews, ratings, and feedback
• Marketing Preferences: Email subscription choices, promotional interests, and communication frequency preferences

2.2 Information Automatically Collected

When you use our services, we automatically collect certain technical information:

• Device Information: IP address, browser type and version, operating system, device identifiers, and mobile device information
• Usage Data: Pages visited, time spent on site, click-through rates, search queries, navigation patterns, and feature usage
• Location Data: Approximate location based on IP address, precise location (with permission) for delivery services, and GPS coordinates for order tracking
• Cookie Information: Session IDs, user preferences, shopping cart contents, login status, and analytics data
• Performance Data: Page load times, error messages, crash reports, and system performance metrics

2.3 Information from Third Parties

We may receive information about you from external sources:

• Social Media: Profile information when you connect social accounts or share content
• Payment Processors: Transaction verification, fraud prevention data, and payment confirmation details
• Delivery Partners: Delivery status updates, driver information, and delivery completion confirmations
• Marketing Partners: Demographic information, interest data, and advertising effectiveness metrics
• Franchise Partners: Local store preferences, regional promotions, and franchise-specific service data
• Review Platforms: Customer reviews, ratings, and publicly available feedback

3. How We Use Your Information

3.1 Service Provision

We use your information to deliver our core food services:

• Order Processing: Preparing, tracking, and delivering your food orders accurately and efficiently
• Account Management: Creating and maintaining your account, processing registrations, and managing login authentication
• Customer Support: Responding to inquiries, resolving issues, processing refunds, and providing technical assistance
• Quality Improvement: Analyzing usage patterns to enhance our menu, services, website functionality, and overall customer experience
• Personalization: Customizing your experience based on order history, dietary preferences, and past interactions
• Safety & Allergens: Ensuring food safety by tracking allergen information and dietary restrictions

3.2 Communication

We communicate with you to provide essential service updates and information:

• Order Communications: Confirmations, preparation status, delivery tracking, and completion notifications
• Customer Support: Responding to your questions, concerns, and service requests
• Important Notices: Service disruptions, menu changes, policy updates, and safety alerts
• Marketing Communications: Promotional offers, new menu items, special events, and loyalty program benefits (only with your consent)
• Loyalty Program: Points balance, rewards availability, special member offers, and program updates

3.3 Marketing and Analytics

With your consent, we use information for marketing and business intelligence:

• Personalized Advertising: Showing you relevant offers based on your preferences and order history
• Website Analytics: Understanding traffic patterns, popular menu items, and user behavior to improve our services
• Campaign Measurement: Evaluating the effectiveness of marketing campaigns and promotional offers
• Market Research: Analyzing trends to develop new menu items, services, and customer experiences
• Recommendation Engine: Suggesting menu items and offers based on your previous orders and preferences

3.4 Legal Compliance and Security

We use information to meet legal obligations and maintain security:

• Legal Compliance: Meeting regulatory requirements, tax obligations, and industry standards
• Fraud Prevention: Detecting and preventing fraudulent transactions, fake accounts, and suspicious activities
• Safety Protection: Protecting the rights, property, and safety of our customers, employees, and business
• Dispute Resolution: Investigating and resolving customer complaints, chargebacks, and legal disputes
• Audit Requirements: Maintaining records for financial audits, regulatory inspections, and compliance verification

4. Information Sharing and Disclosure

4.1 Service Providers

We share information with trusted third-party service providers who help us operate our business:

• Payment Processors: Secure processing of credit card transactions, fraud prevention, and payment verification (Stripe, PayPal, etc.)
• Delivery Services: Coordinating food delivery, tracking orders, and managing delivery personnel
• Cloud Storage Providers: Secure data storage, backup services, and system reliability (AWS, Google Cloud)
• Email Services: Sending order confirmations, marketing emails, and customer communications (Mailchimp, SendGrid)
• Analytics Tools: Website analytics, user behavior tracking, and performance monitoring (Google Analytics)
• Customer Support: Providing live chat, phone support, and ticket management systems
• Marketing Services: Managing advertising campaigns, social media marketing, and promotional activities

All service providers are bound by strict confidentiality agreements and are only permitted to use your information to provide services to us.

4.2 Legal Requirements

We may disclose your information when required by law or to protect legitimate interests:

• Legal Orders: Complying with court orders, subpoenas, warrants, and government requests
• Regulatory Compliance: Meeting requirements from food safety authorities, tax agencies, and industry regulators
• Safety Emergencies: Protecting public safety, preventing harm, and responding to emergency situations
• Rights Protection: Defending our legal rights, enforcing our terms of service, and protecting intellectual property
• Fraud Investigation: Cooperating with law enforcement to investigate fraudulent activities and criminal conduct

4.3 Business Transfers

In the event of a business transaction, your information may be transferred:

• Mergers and Acquisitions: If Apache Pizza merges with or is acquired by another company
• Asset Sales: If we sell or transfer business assets, including customer databases
• Bankruptcy: If we undergo bankruptcy proceedings or business restructuring
• Customer Protection: We will notify you before your information is transferred and ensure the new entity complies with this privacy policy

4.4 With Your Consent

We will share your information for other purposes only with your explicit consent:

• Social Media Sharing: When you choose to share orders, reviews, or experiences on social platforms
• Partner Promotions: Participating in joint marketing campaigns with partner businesses
• Research Participation: Contributing to market research or customer satisfaction studies
• Third-party Integration: Connecting with other apps or services at your request

5. Data Security

5.1 Technical Security Measures

We implement comprehensive technical safeguards to protect your information:

• Encryption: All data transmission uses industry-standard SSL/TLS encryption (256-bit) to protect information in transit
• Secure Storage: Personal data is encrypted at rest using AES-256 encryption standards
• Firewall Protection: Advanced firewall systems monitor and block unauthorized access attempts
• Access Controls: Multi-factor authentication and role-based access ensure only authorized personnel can access data
• Network Security: Virtual private networks (VPNs) and secure connections protect data flow
• Regular Monitoring: 24/7 security monitoring systems detect and respond to potential threats immediately
• Data Backups: Automated, encrypted backups ensure data recovery in case of system failures
• Security Updates: Regular software updates and security patches maintain system integrity

5.2 Organizational Security Measures

Our company policies and procedures protect your data through human safeguards:

• Employee Training: Regular security awareness training for all staff members handling personal data
• Privacy Policies: Comprehensive data handling procedures and privacy protection protocols
• Confidentiality Agreements: All employees and contractors sign strict confidentiality agreements
• Incident Response: Detailed procedures for responding to security breaches or data incidents
• Regular Audits: Internal and external security audits to identify and address vulnerabilities
• Vendor Management: Strict security requirements for all third-party service providers
• Data Minimization: We collect and retain only the minimum data necessary for our services

5.3 Your Security Responsibilities

You play an important role in keeping your information secure:

• Strong Passwords: Use unique, complex passwords with a combination of letters, numbers, and symbols
• Account Protection: Never share your login credentials with others
• Secure Logout: Always log out of your account, especially on shared or public computers
• Phishing Awareness: Be cautious of suspicious emails requesting personal information
• Immediate Reporting: Contact us immediately if you suspect unauthorized access to your account
• Software Updates: Keep your device and browser software updated with the latest security patches
• Public Wi-Fi: Avoid accessing sensitive information over unsecured public Wi-Fi networks

6. Cookies and Tracking Technologies

We use various technologies to enhance your experience and analyze how our services are used. Below is a detailed breakdown of the types of cookies and tracking technologies we employ:

Tracking Technologies We Use

• Google Analytics: Website traffic analysis, user behavior tracking, and conversion measurement
• Facebook Pixel: Social media advertising effectiveness and retargeting campaigns
• Web Beacons: Email open rates, click-through tracking, and communication effectiveness
• Local Storage: Browser-based data storage for offline functionality and user preferences
• Session Storage: Temporary data storage for current browsing session
• Third-party Tags: Marketing partner integration and cross-platform tracking

Cookie Management

You have control over cookie usage through various methods:

• Browser Settings: Configure your browser to accept, reject, or delete cookies
• Our Cookie Banner: Customize your preferences using our consent management system
• Opt-out Tools: Use industry opt-out tools for advertising cookies
• Mobile Settings: Adjust tracking preferences in your mobile device settings

7. Your Privacy Rights (GDPR/CCPA Compliance)

Depending on your location, you may have specific rights regarding your personal data. We respect and honor these rights regardless of where you are located:

7.1 Right of Access

You have the right to know what personal information we have about you. You can request:

• A copy of all personal data we hold about you
• Information about how we collected your data
• Details about who we've shared your data with
• The purpose for processing your information

7.2 Right to Rectification

You can request correction of inaccurate or incomplete personal data:

• Update your contact information and delivery addresses
• Correct dietary preferences and allergen information
• Modify account details and preferences
• Fix any errors in your order history

7.3 Right to Erasure (Right to be Forgotten)

You can request deletion of your personal data in certain circumstances:

• When the data is no longer necessary for the original purpose
• If you withdraw consent for marketing communications
• When we have processed data unlawfully
• If deletion is required for legal compliance

7.4 Right to Restrict Processing

You can request that we limit how we use your data in certain situations:

• While we verify the accuracy of disputed data
• When you object to processing but we need to verify our legitimate interests
• If processing is unlawful but you prefer restriction over deletion
• When you need the data for legal claims

7.5 Right to Data Portability

You can receive your personal data in a machine-readable format or request transfer to another service:

• Download your order history and preferences
• Export your loyalty program data
• Transfer account information to another food service
• Receive data in common formats (JSON, CSV, XML)

7.6 Right to Object

You can object to certain types of data processing:

• Marketing communications and promotional offers
• Profiling for advertising purposes
• Processing based on legitimate interests
• Direct marketing activities

7.7 Right Against Automated Decision-Making

You have the right not to be subject to automated decision-making, including profiling, that produces legal effects or significantly affects you.

8. Children's Privacy

Apache Pizza is committed to protecting the privacy of children. Our services are not intended for individuals under the age of 16, and we do not knowingly collect personal information from children under 16 years of age.

Our Children's Privacy Practices:

• No Intentional Collection: We do not actively seek to collect personal information from children under 16
• Account Restrictions: Account creation requires users to confirm they are at least 16 years old
• Parental Supervision: Children should always use our services under parental supervision
• Educational Purpose: Any interaction with minors is limited to educational content about food and nutrition

If We Discover Children's Information:

If we become aware that we have collected personal information from a child under 16, we will:

• Delete the information immediately from our systems
• Cease any processing of that information
• Implement additional safeguards to prevent future collection
• Notify the relevant supervisory authorities if required

9. International Data Transfers

As a global food service company, we may need to transfer your personal data to countries outside the European Economic Area (EEA) to provide our services effectively. We ensure all international transfers are protected with appropriate safeguards.

9.1 Protection Measures for International Transfers

• Adequacy Decisions: We transfer data to countries recognized by the European Commission as providing adequate data protection (such as Japan and Canada)
• Standard Contractual Clauses (SCCs): We use EU-approved contractual clauses for transfers to countries without adequacy decisions
• Data Processing Agreements: All international service providers must sign comprehensive data protection agreements
• Security Safeguards: Enhanced security measures for international data processing, including encryption and access controls
• Regular Audits: Ongoing compliance monitoring and assessment of international partners
• Impact Assessments: Regular evaluation of data protection risks in destination countries

9.2 Countries Where We Transfer Data

Your Rights: You have the right to obtain information about international transfers of your data and to object to transfers in certain circumstances. Contact us if you have questions about where your data is processed.

10. Data Retention Periods

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, and resolve disputes. Below are our specific retention periods for different types of information:

Safe Data Disposal Practices

When data reaches the end of its retention period, we ensure secure disposal:

• Electronic Data: Complete deletion using secure erasure methods that make data unrecoverable
• Physical Records: Cross-cut shredding and secure destruction through certified disposal services
• Backup Systems: Systematic removal from all backup and archive systems
• Third-party Systems: Coordination with service providers to ensure complete deletion
• Disposal Documentation: Maintenance of disposal records for audit and compliance purposes
• Hardware Disposal: Professional destruction of storage devices using DoD 5220.22-M standards

11. Third-Party Links

Our website and communications may contain links to external websites, social media platforms, and third-party services that are not operated by Apache Pizza. This privacy policy does not apply to these external sites.

Types of Third-Party Links We May Include:

• Social Media Platforms: Links to our Facebook, Instagram, Twitter, and other social media pages
• Payment Processors: Secure connections to payment gateways for transaction processing
• Partner Websites: Links to franchise partners, suppliers, and affiliated businesses
• Review Platforms: Connections to restaurant review sites and feedback platforms
• News Articles: Links to external news stories or articles that mention our company
• Regulatory Sites: Links to government agencies and regulatory bodies relevant to food service

Important Disclaimers:

• No Responsibility: We are not responsible for the privacy practices, content, or security of third-party websites
• Independent Policies: Each third-party site has its own privacy policy and terms of service
• No Endorsement: Links do not constitute an endorsement of third-party content or practices
• Data Collection: Third-party sites may collect information about you independently of our services
• Security Risks: We cannot guarantee the security of information you provide to third-party sites

Your Responsibility When Using Third-Party Links:

• Review Privacy Policies: Read the privacy policy of any third-party site before providing personal information
• Check Security: Verify that third-party sites use secure connections (https://) for sensitive data
• Be Cautious: Exercise caution when providing personal or financial information to external sites
• Report Issues: Inform us if you encounter problems with linked third-party sites
• Use Discretion: Make informed decisions about what information to share with third parties

12. Policy Changes

We may update this Privacy Policy from time to time to reflect changes in our practices, services, legal requirements, or business operations. We are committed to keeping you informed about any changes that may affect your privacy rights.

12.1 How We Notify You of Changes

When we update this Privacy Policy, we will notify you through multiple channels:

• Website Notice: A prominent banner on our homepage announcing policy changes
• Email Notification: Direct email to all registered users with details of significant changes
• Account Dashboard: Notification in your account dashboard when you next log in
• Pop-up Notice: A notification popup when you first visit after a policy update
• Social Media: Announcements on our official social media channels for major changes
• Push Notifications: Mobile app notifications for users with the Apache Pizza app

12.2 Types of Changes and Required Actions

• Minor Changes: Clarifications, formatting updates, or contact information changes require no action from you
• Material Changes: Changes affecting how we collect, use, or share your data will include a 30-day notice period
• Significant Changes: Major policy revisions may require explicit consent before taking effect
• Legal Changes: Updates required by new laws will be implemented promptly with appropriate notice

12.3 Your Options When We Update Our Policy

• Accept Changes: Continue using our services to indicate acceptance of the updated policy
• Review Changes: Take time to read and understand what has changed
• Contact Us: Reach out with questions or concerns about policy updates
• Opt-out: Choose to stop using our services if you disagree with the changes
• Exercise Rights: Request deletion of your data if you no longer agree with our practices

12.4 Checking for Updates

• Regular Review: We recommend reviewing this policy periodically
• Last Updated Date: Check the "Last Updated" date at the top of this policy
• Version Control: Significant changes will include version numbers for tracking
• Archive Access: Previous versions may be available upon request for comparison

13. Contact Information

We are committed to addressing your privacy concerns promptly and transparently. If you have any questions about this Privacy Policy, our data practices, or wish to exercise your privacy rights, please contact us using any of the following methods:

Specialized Contact Methods

• Data Protection Officer: [email protected]
• Security Issues: [email protected]
• General Inquiries: [email protected]
• Customer Support: Available through your account dashboard or by calling our main number
• Franchise Privacy: [email protected]
• Marketing Opt-out: [email protected]

Response Commitments

• General Inquiries: Within 3 business days
• Privacy Rights Requests: Within 30 days (may extend to 60 days for complex requests)
• Security Incidents: Immediate response within 24 hours
• Urgent Matters: Same business day response
• Complaints: Acknowledgment within 1 business day, resolution within 14 days

13.1 Privacy Complaints and Escalation

If you have a privacy-related complaint, we encourage you to contact us first so we can work together to resolve the issue. Our complaint resolution process includes:

• Initial Contact: Reach out to our privacy team with your concern
• Investigation: We will thoroughly investigate your complaint
• Response: You will receive a detailed response with our findings and any corrective actions
• Follow-up: We will ensure the resolution meets your satisfaction

Supervisory Authority Contact

If you are not satisfied with our response to your privacy complaint, you have the right to lodge a complaint with the relevant supervisory authority:

14. Withdrawal of Consent

You have the right to withdraw your consent for data processing at any time. Withdrawing consent will not affect the lawfulness of processing that occurred before the withdrawal, but it will stop further processing based on that consent.

14.1 Marketing Consent Withdrawal

You can stop receiving marketing communications from us through several easy methods:

• Email Unsubscribe: Click the unsubscribe link in any marketing email
• Account Settings: Update your communication preferences in your account dashboard
• Customer Support: Contact our support team to update your preferences
• Phone: Call +353 21 477 2209 to speak with a representative
• Written Request: Send a written request to our address

Processing Time: Marketing consent withdrawal takes effect within 48 hours for email communications and up to 10 business days for other channels.

14.2 Cookie Consent Withdrawal

You can change your cookie preferences at any time:

• Cookie Preferences Center: Access through our website footer or privacy settings
• Browser Settings: Configure your browser to reject or delete cookies
• Opt-out Tools: Use industry tools like the Digital Advertising Alliance opt-out page
• Mobile Settings: Adjust advertising preferences in your device settings

14.3 Account Deletion Process

If you wish to completely delete your account and withdraw all consent:

1. Login to Your Account: Access your account dashboard
2. Navigate to Settings: Find the "Account Settings" or "Privacy Settings" section
3. Request Deletion: Click "Delete Account" or "Close Account"
4. Confirm Identity: Verify your identity through email or phone confirmation
5. Review Consequences: Understand what data will be deleted and what may be retained
6. Final Confirmation: Confirm your decision to permanently delete your account
7. Deletion Processing: We will process your request within 30 days

14.4 What Happens After Withdrawal

• Immediate Effect: New data processing based on your withdrawn consent will stop immediately
• Service Impact: Some services may no longer be available without certain consents
• Legal Obligations: We may still retain some data to comply with legal requirements
• Legitimate Interests: Processing may continue if we have other lawful bases
• Historical Data: Past processing remains lawful, but future processing stops

15. Conclusion

At Apache Pizza, protecting your privacy is not just a legal obligation—it's fundamental to our commitment to earning and maintaining your trust. We understand that when you choose to share your personal information with us, whether it's for placing an order, joining our loyalty program, or simply browsing our website, you're placing confidence in our ability to handle that information responsibly.

Our Privacy Commitment to You

We pledge to continue:

• Transparency: Being clear and honest about how we collect, use, and protect your personal information
• Security: Implementing robust technical and organizational measures to safeguard your data
• Respect: Honoring your privacy choices and responding promptly to your requests and concerns
• Innovation: Continuously improving our privacy practices as technology and regulations evolve
• Accountability: Taking responsibility for our data practices and being responsive to your feedback

Building Trust Through Privacy

Trust is the foundation of our relationship with you. Every time you order your favorite pizza, share dietary preferences, or provide feedback about your experience, you're trusting us with information that matters to you. We take this responsibility seriously and work every day to earn that trust through our actions, not just our words.

Your Role in Privacy Protection

Privacy protection is a shared responsibility. While we implement comprehensive safeguards on our end, we encourage you to:

• Review your privacy settings regularly
• Keep your account information up to date
• Report any security concerns immediately
• Ask questions when you're unsure about our practices
• Stay informed about your privacy rights

Continuous Improvement

Privacy is not a destination but a journey. As our business grows and technology evolves, we continuously evaluate and enhance our privacy practices. We welcome your feedback and suggestions on how we can better protect your privacy while delivering the exceptional food service experience you expect from Apache Pizza.

Thank You

Thank you for choosing Apache Pizza and for trusting us with your personal information. Whether you're a loyal customer who's been with us for years or someone placing their first order, we appreciate the confidence you place in us. We're committed to maintaining that trust through transparent, responsible, and secure handling of your personal data.

If you ever have questions, concerns, or suggestions about our privacy practices, please don't hesitate to reach out to us. Our team is here to help and ensure that your privacy is protected every step of the way.