Privacy Policy

Welcome to Dewey's Pizza. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website deweyscafe.rest, place an order, or interact with us in any way. Please read this policy carefully. If you disagree with its terms, please discontinue use of our site and services.

This Privacy Policy applies to all information collected through our website (deweyscafe.rest), as well as any related services, sales, marketing, or events (collectively, the "Services"). By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

1. Who We Are

Dewey's Pizza is a food service business operating in the United States. We operate under the brand name Dewey's Pizza and are reachable through our digital presence at deweyscafe.rest.

For any questions or concerns about this Privacy Policy, you may contact us at the email address listed above. We will respond to all legitimate privacy-related inquiries within a reasonable timeframe, and no later than the timeframe required by applicable law.

2. Information We Collect

We collect various types of information in connection with your use of our Services. This information falls into several broad categories: information you provide directly to us, information collected automatically through technology, and information obtained from third parties.

2.1 Personal Information You Provide Directly

When you interact with Dewey's Pizza, you may voluntarily provide us with personal information, including but not limited to:

• Contact Information: Your full name, email address, phone number, and mailing or delivery address.
• Account Information: Username, password, and profile details if you create an account on our website.
• Order Information: Details of your food orders, dietary preferences, special instructions, and order history.
• Payment Information: Credit card numbers, debit card numbers, billing addresses, and other financial information necessary to process your payments. Note that payment information is processed by secure third-party payment processors and we do not store full card numbers on our servers.
• Communications: Messages, feedback, reviews, complaints, and inquiries that you send to us via email, contact forms, or other communication channels.
• Marketing Preferences: Your preferences for receiving marketing communications and promotional offers from us.
• Loyalty Program Data: If you participate in any loyalty or rewards program we offer, we collect points balances, redemption history, and related account data.

2.2 Information Collected Automatically

When you visit our website or use our Services, certain information is collected automatically through cookies, web beacons, pixels, and other tracking technologies. This may include:

• Device Information: The type of device you use (desktop, tablet, smartphone), operating system, browser type and version, device identifiers, and hardware model.
• Usage Data: Pages visited, links clicked, time spent on each page, the page you visited before arriving at our site, and other clickstream data.
• IP Address: Your Internet Protocol (IP) address, which may be used to determine your approximate geographic location.
• Cookie Data: Information stored in cookies placed on your device. See Section 8 of this policy for more detail on our use of cookies.
• Log Data: Server logs that record access times, error logs, and technical events related to your use of our site.
• Location Data: Approximate geolocation derived from your IP address. If you grant permission through your device settings, we may also collect more precise GPS-based location data to facilitate delivery services.
• Referral Data: The URL of the website that referred you to ours, if applicable.

2.3 Information from Third Parties

We may also receive information about you from third-party sources, including:

• Third-Party Delivery Platforms: If you place an order through a third-party food delivery platform (such as DoorDash, Uber Eats, or Grubhub), we may receive your order details and contact information from those platforms.
• Social Media Platforms: If you interact with us through social media or use a social login feature, we may receive basic profile information such as your name, profile picture, and email address from those platforms.
• Analytics Providers: We receive aggregated and anonymized data from analytics providers about how users interact with our website.
• Payment Processors: We receive confirmation of payment authorization and basic transaction identifiers from our payment processors.
• Review Platforms: We may receive information about public reviews you post on platforms like Google Reviews or Yelp that mention Dewey's Pizza.

3. How We Use Your Information

We use the information we collect for a variety of business and operational purposes. All uses are grounded in legitimate business needs, your consent where required, or legal obligations. Specifically, we use your information to:

3.1 Provide and Manage Our Services

• Process and fulfill your food orders, including coordinating delivery or pickup.
• Create and manage your customer account.
• Process payments and refunds securely.
• Send order confirmations, receipts, and status updates via email or SMS.
• Respond to your customer service inquiries and resolve disputes.
• Administer loyalty programs, promotions, and contests.

3.2 Improve and Personalize Our Services

• Analyze usage patterns and trends to improve our website, menu offerings, and overall customer experience.
• Personalize your experience by remembering your preferences, order history, and saved addresses.
• Conduct internal research and analytics to better understand our customers and their needs.
• Test new features, products, and website functionality before broad release.

3.3 Marketing and Communications

• Send you promotional emails, special offers, discount codes, and newsletters about Dewey's Pizza, where you have opted in or where permitted by applicable law.
• Show you targeted advertisements on third-party platforms such as Google, Facebook, and Instagram based on your interests and browsing behavior.
• Notify you about changes to our menu, hours of operation, or other important service updates.
• Request reviews or feedback following your order experience.

3.4 Legal Compliance and Safety

• Comply with applicable federal, state, and local laws and regulations, including the California Consumer Privacy Act (CCPA/CPRA) and the Federal Trade Commission (FTC) Act.
• Detect, investigate, and prevent fraudulent transactions, unauthorized access, and other illegal activities.
• Enforce our Terms of Service and other applicable agreements.
• Protect the rights, property, and safety of Dewey's Pizza, our customers, and the public.
• Respond to lawful requests from government authorities or law enforcement agencies.

4. How We Share Your Information

We respect your privacy and do not sell your personal information to third parties for monetary compensation. However, we do share your information in certain circumstances as described below. Under the CCPA/CPRA, "selling" has a specific legal definition, and we do not engage in such sales. We may, however, share data with partners for purposes such as targeted advertising, which may constitute "sharing" under California law.

4.1 Service Providers

We share your information with trusted third-party service providers who assist us in operating our business and delivering our Services. These service providers are bound by contractual obligations to protect your information and may only use it for the specific purposes we have authorized. Service providers include:

• Payment Processors: Such as Stripe, Square, or PayPal, to securely process financial transactions.
• Delivery Partners: Third-party delivery drivers or delivery platforms who need your address and contact information to complete your order.
• Email and SMS Marketing Platforms: Such as Mailchimp or Klaviyo, used to send you communications.
• Analytics Providers: Such as Google Analytics, to help us understand website traffic and user behavior.
• Cloud Hosting Providers: Who store our website data and customer information on secure servers.
• Customer Support Tools: Platforms used to manage and respond to customer inquiries.

4.2 Business Transfers

If Dewey's Pizza is involved in a merger, acquisition, asset sale, financing, reorganization, or bankruptcy proceeding, your information may be transferred as part of that transaction. We will notify you via email or a prominent notice on our website if such a transfer occurs and your data becomes subject to a different privacy policy.

4.3 Legal Requirements

We may disclose your information to government authorities, regulators, law enforcement agencies, or courts when we believe disclosure is required or permitted by law, including to comply with a subpoena, court order, or other legal process; to enforce our agreements; or to protect the rights, safety, or property of Dewey's Pizza, our users, or others.

4.4 With Your Consent

In cases not described above, we will share your personal information only with your explicit consent or at your direction.

5. Your Privacy Rights

Depending on your state of residence within the United States, you may have certain rights regarding your personal information. We are committed to honoring those rights in compliance with applicable law, including the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), and other applicable state privacy laws.

5.1 Right to Know and Access

You have the right to request that we disclose what personal information we have collected about you, the categories of sources from which it was collected, the purposes for which it was collected, and the categories of third parties with whom it has been shared. You may also request a copy of the specific personal information we hold about you.

5.2 Right to Correction

You have the right to request that we correct inaccurate personal information we maintain about you, taking into account the nature of the information and the purposes of processing.

5.3 Right to Deletion

You have the right to request that we delete personal information we have collected about you, subject to certain exceptions. We may retain certain information as required by law, for legitimate business purposes such as fraud prevention, or to complete transactions you have requested.

5.4 Right to Opt-Out of Sale or Sharing

California residents have the right to opt out of the "sale" or "sharing" of their personal information as those terms are defined under the CCPA/CPRA. If we engage in any activities that qualify as selling or sharing under California law (such as sharing data with advertising partners), you may opt out by contacting us at [email protected] or by adjusting your cookie preferences on our website.

5.5 Right to Data Portability

You have the right to receive a copy of your personal information in a structured, commonly used, and machine-readable format, and to transmit that information to another organization where technically feasible.

5.6 Right to Limit Use of Sensitive Personal Information

Under the CPRA, California residents have the right to direct us to limit the use and disclosure of sensitive personal information (such as precise geolocation, financial account information, or health-related data) to only what is necessary to perform the Services you requested.

5.7 Right to Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights. We will not deny you our Services, charge you different prices, provide a different level of service, or suggest that you will receive a lower quality of service as a result of exercising your rights.

5.8 How to Submit a Rights Request

To exercise any of the rights listed above, please contact us by:

• Email: [email protected]

We will acknowledge receipt of your request within 10 business days and respond substantively within 45 days of receipt. If we require additional time (up to 90 days), we will inform you of the reason and extension in writing. We may need to verify your identity before processing your request. We will not charge a fee for processing your request unless it is excessive, repetitive, or manifestly unfounded.

6. Data Security

The security of your personal information is a top priority for Dewey's Pizza. We have implemented a range of administrative, technical, and physical security measures designed to protect your information from unauthorized access, disclosure, alteration, or destruction.

Our security measures include, but are not limited to:

• Encryption: All data transmitted between your browser and our website is protected using Transport Layer Security (TLS/SSL) encryption.
• Secure Payment Processing: Payment card information is processed through PCI-DSS compliant payment processors. We do not store full card numbers on our systems.
• Access Controls: Access to personal data within our organization is restricted on a need-to-know basis. Employees who handle personal data are trained on data privacy and security best practices.
• Data Minimization: We only collect personal information that is necessary for the purposes described in this policy.
• Regular Security Assessments: We periodically review our data collection, storage, and processing practices to guard against unauthorized access.
• Incident Response: We maintain an incident response plan to detect, contain, and address data security incidents promptly.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

When personal information is no longer needed, we securely delete or anonymize it in accordance with our data retention schedule. Anonymized data that can no longer be linked to an identifiable individual may be retained indefinitely for research and analytics purposes.

8. Cookie Policy

Our website, deweyscafe.rest, uses cookies and similar tracking technologies (such as web beacons, pixels, and local storage) to enhance your browsing experience, analyze site traffic, and deliver personalized content and advertising.

8.1 What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They are widely used to make websites work more efficiently and to provide analytical information to website owners.

8.2 Types of Cookies We Use

8.3 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or set preferences for specific websites. Please note that disabling certain cookies may affect the functionality of our website and your ability to place orders.

For more detailed information about the cookies we use, their specific purposes, durations, and how to opt out, please refer to our full Cookie Policy, available on our website at deweyscafe.rest.

9. Children's Privacy

Dewey's Pizza does not knowingly collect, solicit, or process personal information from individuals under the age of 18. Our website and online ordering platform are intended solely for use by adults aged 18 years and older.

If you are a parent or guardian and you believe that your child under the age of 18 has provided us with personal information without your consent, please contact us immediately at [email protected]. Upon verification, we will promptly delete such information from our records in accordance with applicable law, including the Children's Online Privacy Protection Act (COPPA) where applicable.

We do not knowingly engage in targeted advertising directed at minors and we do not sell the personal information of consumers we know to be under 16 years of age, as required under the CCPA/CPRA.

10. International Data Transfers

Dewey's Pizza is based in the United States, and the personal information we collect is primarily stored and processed in the United States. If you are accessing our Services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country of residence.

By using our Services, you acknowledge and consent to the transfer of your information to the United States and to the practices described in this Privacy Policy.

For data transfers that may involve individuals in other countries, we take reasonable steps to ensure that appropriate safeguards are in place to protect your personal information in a manner consistent with applicable law. If you have questions about international data transfers, please contact us at [email protected].

11. Third-Party Links and Services

Our website may contain links to third-party websites, applications, or services, including food delivery platforms, social media pages, and payment processors. This Privacy Policy does not apply to the privacy practices of those third parties. We encourage you to review the privacy policies of any third-party services you access through links on our website.

We are not responsible for the content, privacy policies, or practices of any third-party websites or services. The inclusion of a link on our website does not imply our endorsement of that third party or its privacy practices.

12. Marketing Communications and Opt-Out

With your consent or as otherwise permitted by applicable law, we may send you marketing emails, text messages (SMS), or push notifications about our menu, promotions, special offers, and new services.

12.1 Opting Out of Email Marketing

You may unsubscribe from our marketing emails at any time by clicking the "Unsubscribe" or "Opt-Out" link found at the bottom of any marketing email we send. You may also send a request to opt out to [email protected]. Please allow up to 10 business days for your opt-out request to be processed.

12.2 Opting Out of SMS Marketing

If you have opted into SMS marketing, you may opt out at any time by replying "STOP" to any text message you receive from us. Standard message and data rates may apply.

12.3 Transactional Communications

Please note that even if you opt out of marketing communications, we may still send you transactional or administrative communications, such as order confirmations, receipts, refund notifications, and important updates related to your use of our Services.

13. Applicable Law and Regulatory Compliance

As a food service business operating in the United States, Dewey's Pizza is subject to a number of federal and state privacy laws and consumer protection regulations, including:

• California Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA): Grants California residents specific rights regarding their personal information, including the right to know, delete, correct, and opt out of the sale or sharing of personal data. We comply with these requirements in full.
• Federal Trade Commission (FTC) Act (15 U.S.C. § 41 et seq.): Prohibits unfair or deceptive acts or practices in commerce. We are committed to transparent and fair data practices in accordance with FTC guidance.
• CAN-SPAM Act: Governs commercial email communications. We comply with all CAN-SPAM requirements in our marketing emails.
• Children's Online Privacy Protection Act (COPPA): We comply with COPPA by not knowingly collecting personal information from children under 13 (and, per our policy, under 18).
• Applicable State Privacy Laws: We monitor and comply with emerging state-level privacy legislation across the United States, including laws enacted in Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), and other states as applicable.

14. How to File a Privacy Complaint

If you believe that we have not handled your personal information in accordance with this Privacy Policy or applicable law, we encourage you to contact us first so we have an opportunity to address your concerns.

Step 1 — Contact Us Directly:

Send your complaint or concern to our privacy team at [email protected]. Please describe your concern in as much detail as possible. We will acknowledge your complaint within 10 business days and work to resolve it within 45 days.

Step 2 — Contact the Relevant Data Protection Authority:

If we are unable to resolve your complaint to your satisfaction, you may have the right to file a complaint with the relevant government authority. Depending on your state of residence, this may include:

• California Residents: The California Privacy Protection Agency (CPPA) enforces the CPRA. You may file a complaint at: https://cppa.ca.gov. Additionally, the California Attorney General's Office accepts consumer privacy complaints at https://oag.ca.gov.
• All U.S. Consumers: The Federal Trade Commission (FTC) accepts reports of unfair or deceptive business practices, including privacy violations. File a complaint at: https://reportfraud.ftc.gov.
• Other States: Residents of other states with applicable privacy laws may contact their state Attorney General's office or the relevant consumer protection agency for their state.

15. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. When we make changes, we will update the "Last Updated" date at the top of this page. If we make material changes to how we collect, use, or share your personal information, we will notify you by:

• Sending an email to the address associated with your account (if applicable);
• Posting a prominent notice on our website homepage; or
• Other means reasonably designed to inform you of the changes.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our Services after any changes to this Privacy Policy are posted constitutes your acceptance of those changes.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to reach out to us. We are here to help and are committed to handling all privacy-related inquiries with care and transparency.