Privacy Policy

This Privacy Policy describes how Imos Pizza ("we," "us," or "our") collects, uses, discloses, and protects your personal information when you visit our website at chick-imos.digital, place orders, use our digital services, or otherwise interact with us. Please read this policy carefully to understand our practices regarding your personal data and how we will treat it.

By accessing or using our website and services, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with this policy, please discontinue use of our website and services immediately.

We are committed to protecting your privacy in accordance with applicable United States federal and state laws, including but not limited to the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), the CAN-SPAM Act, and all other applicable federal and state privacy regulations.

1. About Us and Contact Information

Imos Pizza operates the website located at chick-imos.digital and is the data controller responsible for your personal information collected through this website and our related food ordering and delivery services.

For all privacy-related inquiries, requests, complaints, or questions regarding this Privacy Policy, please contact us directly at the email address listed above. We will respond to all legitimate privacy inquiries within a reasonable timeframe and no later than 45 days as required under applicable law.

2. Information We Collect

We collect various categories of personal information in order to provide our food ordering and delivery services, improve your experience, and comply with our legal obligations. The categories of data we collect include the following:

2.1 Personal Identification Information

When you create an account, place an order, or contact us, we may collect personal identification information such as:

• Full name
• Email address
• Phone number or mobile number
• Delivery address (street address, city, state, ZIP code)
• Billing address
• Date of birth (where required for age verification or promotional purposes)
• Username and password (stored in encrypted form)
• Profile photo (if voluntarily uploaded)

2.2 Order and Transaction Information

When you place an order through our website or mobile platform, we collect information about the transaction, including:

• Items ordered (food items, quantities, customizations, special instructions)
• Order history and frequency
• Payment method type (credit card, debit card, digital wallet — note: full payment card numbers are processed by our PCI-DSS compliant third-party payment processors and are not stored on our servers)
• Order total, discounts applied, and payment confirmations
• Delivery time preferences and delivery instructions
• Tip amounts and promotional code usage

2.3 Usage and Behavioral Data

We automatically collect certain information when you use our website or digital platforms, including:

• Pages visited, links clicked, and time spent on each page
• Search queries entered on our website
• Referral URLs (how you arrived at our website)
• Items viewed, added to cart, and abandoned cart information
• Features interacted with and navigation paths through our website
• Session duration and frequency of visits

2.4 Device and Technical Information

We collect technical information about the device and software you use to access our services, including:

• IP address
• Device type (desktop, laptop, mobile, tablet)
• Operating system and version
• Web browser type and version
• Device identifiers (device ID, advertising ID)
• Screen resolution and display settings
• Network information (Wi-Fi, mobile network type)
• Time zone and language settings

2.5 Location Data

With your consent, we may collect precise or approximate geolocation data to facilitate delivery services, identify nearby store locations, and provide relevant offers. You may control location permissions through your browser or device settings.

2.6 Communications and Customer Support Data

When you contact our customer support team, submit feedback, leave a review, or correspond with us by email or chat, we may collect:

• The content of your messages, complaints, or inquiries
• Correspondence history and case notes
• Recordings or transcripts of customer service interactions (where permitted by law and with prior notice)

2.7 Marketing Preferences and Voluntary Information

We collect information you voluntarily provide when you sign up for newsletters, loyalty programs, surveys, contests, or promotional campaigns, including your communication preferences, favorite menu items, dietary restrictions, and feedback responses.

2.8 Cookie and Tracking Technology Data

We use cookies and similar tracking technologies (such as web beacons, pixels, and local storage) to collect data about your browsing activity. For a complete description of how we use cookies, please refer to Section 8 of this policy.

3. How We Use Your Information

We use the personal information we collect for a range of purposes that are necessary to operate our business and serve you effectively. These purposes include:

3.1 Service Provision and Order Fulfillment

• Processing and fulfilling food orders placed through our website or app
• Coordinating delivery and confirming order status updates
• Managing your account and providing access to order history
• Processing payments and issuing refunds or credits
• Sending order confirmation emails, delivery notifications, and receipts

3.2 Customer Support and Communication

• Responding to your inquiries, complaints, or feedback
• Resolving disputes and investigating issues with orders
• Sending service-related notifications and important account updates
• Communicating policy changes, terms updates, and security alerts

3.3 Analytics and Service Improvement

• Analyzing usage patterns to improve website functionality and user experience
• Understanding customer preferences to optimize our menu offerings
• Conducting internal research and business analytics
• Identifying and resolving technical issues, bugs, and errors
• Measuring the effectiveness of promotional campaigns and website features

3.4 Marketing and Personalization

• Sending promotional emails, special offers, and newsletters (where you have opted in)
• Personalizing content, recommendations, and promotions based on your order history and preferences
• Running targeted advertising campaigns through third-party platforms (e.g., Google Ads, Meta/Facebook Ads)
• Administering loyalty programs, contests, and sweepstakes

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any promotional email or by contacting us at [email protected].

3.5 Legal Compliance and Safety

• Complying with applicable federal and state laws and regulations
• Responding to lawful requests from government authorities, courts, or law enforcement
• Detecting, preventing, and investigating fraudulent activity, security breaches, or violations of our Terms of Service
• Protecting the rights, property, and safety of our business, employees, customers, and the public

4. How We Share Your Information

We do not sell your personal information to third parties for monetary compensation. However, we may share your data under the following circumstances:

4.1 Service Providers and Business Partners

We work with third-party companies and individuals who assist us in operating our website and delivering our services. These service providers have access to personal information only as needed to perform their functions and are contractually obligated to maintain confidentiality and data security. Categories of service providers include:

• Payment Processors: Companies that process credit/debit card transactions and digital payments on our behalf (e.g., Stripe, Square, or similar processors)
• Delivery and Logistics Providers: Third-party delivery platforms or independent delivery partners who receive delivery address and order information
• Cloud Hosting and IT Services: Companies providing servers, databases, security, and infrastructure support
• Analytics Providers: Services such as Google Analytics that help us understand website usage and performance
• Email and Marketing Platforms: Services that manage our promotional emails and customer communications
• Customer Support Tools: Platforms used to manage customer inquiries and support tickets

4.2 Legal Requirements and Law Enforcement

We may disclose your personal information when required to do so by law, court order, subpoena, or government regulation. We may also disclose your information when we believe in good faith that disclosure is necessary to:

• Comply with a legal obligation or governmental request
• Protect and defend our legal rights or property
• Prevent or investigate fraud, security breaches, or illegal activity
• Protect the safety of our users, employees, or the public

4.3 Business Transfers

In the event of a merger, acquisition, sale of assets, reorganization, or bankruptcy, your personal information may be transferred as part of that transaction. We will notify you by posting a prominent notice on our website or by email before your data is transferred and becomes subject to a different privacy policy.

4.4 Advertising and Social Media Partners

With your consent where required, we may share certain information (such as email addresses in hashed form or cookie identifiers) with social media platforms and advertising networks to deliver targeted advertisements. You can opt out of such sharing by adjusting your cookie preferences or contacting us directly.

4.5 Aggregate and De-Identified Data

We may share aggregated or de-identified information that cannot reasonably be used to identify you with partners, advertisers, or the public for research, marketing, or business development purposes.

5. Data Security

We take the security of your personal information seriously and implement a range of technical, administrative, and physical safeguards designed to protect your data from unauthorized access, use, alteration, or disclosure. Our security measures include:

• Encryption: We use Secure Socket Layer (SSL) / Transport Layer Security (TLS) encryption for all data transmitted between your browser and our website. Sensitive data such as passwords are stored using industry-standard hashing algorithms.
• Access Controls: Access to personal data is restricted to authorized personnel who have a legitimate business need to process it. We implement role-based access controls and require strong authentication.
• PCI Compliance: Our payment processing systems comply with Payment Card Industry Data Security Standards (PCI-DSS) to ensure the secure handling of credit and debit card information.
• Regular Security Audits: We conduct periodic security assessments, vulnerability scans, and penetration testing to identify and remediate potential weaknesses in our systems.
• Incident Response: We maintain a data breach response plan and will notify affected individuals and relevant authorities as required by applicable law (including state breach notification laws) in the event of a significant data security incident.
• Employee Training: Our staff receive regular training on data protection practices, phishing awareness, and privacy compliance obligations.

6. Your Privacy Rights

Depending on your state of residence, you may have specific rights regarding your personal information under applicable U.S. privacy laws. We are committed to honoring these rights for all users to the extent required by law.

6.1 Rights Available to All Users

• Right to Know / Access: You have the right to request information about the categories and specific pieces of personal information we have collected about you, the sources from which it was collected, the purposes for which it is used, and the third parties with whom it is shared.
• Right to Correction: You have the right to request that we correct inaccurate personal information we hold about you.
• Right to Deletion: You have the right to request that we delete personal information we have collected from you, subject to certain exceptions (e.g., where retention is required by law or necessary to complete a transaction).
• Right to Opt Out of Marketing: You may opt out of receiving promotional communications from us at any time.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights. We will not deny you services, charge you different prices, or provide a different level of quality because you exercised a privacy right.

6.2 Additional Rights for California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), including:

• Right to Know the Categories of Personal Information Sold or Shared: You have the right to know whether we sell or share your personal information and for what purposes.
• Right to Opt Out of Sale or Sharing: Although we do not sell personal information for monetary compensation, we may share certain identifiers with advertising partners. You may opt out of such sharing by submitting a request to us.
• Right to Limit Use of Sensitive Personal Information: You have the right to limit our use and disclosure of sensitive personal information to only what is necessary to provide the services you requested.
• Right to Data Portability: You have the right to receive a copy of your personal information in a portable, readily usable format that can be transferred to another entity.
• Right to Correct: You have the right to request correction of inaccurate personal information.

To submit a request under CCPA/CPRA, please email us at [email protected] with the subject line "California Privacy Rights Request." We will verify your identity before processing your request and respond within 45 days, with an option to extend by an additional 45 days where reasonably necessary.

6.3 Rights for Residents of Other States

Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Texas (TDPSA), and other states with applicable privacy laws may also have rights including access, correction, deletion, portability, and opt-out of targeted advertising. To exercise these rights, please contact us at [email protected].

6.4 How to Submit a Privacy Rights Request

To exercise any of the rights described above, you may:

• Email us at: [email protected]
• Visit our website at: chick-imos.digital and use our privacy request form (if available)

We will verify your identity using information associated with your account or by asking you to provide identifying information before processing your request. We will not charge a fee for processing a verifiable request unless it is excessive, repetitive, or manifestly unfounded.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Our general retention guidelines are as follows:

After the applicable retention period expires, we will securely delete or anonymize your personal information so that it can no longer be associated with you.

8. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze traffic, and deliver relevant advertisements. Cookies are small text files placed on your device when you visit our website.

8.1 Types of Cookies We Use

• Essential Cookies: Necessary for the website to function properly (e.g., maintaining your shopping cart and session login). These cookies cannot be disabled.
• Performance and Analytics Cookies: Help us understand how visitors interact with our website by collecting anonymous usage data (e.g., Google Analytics cookies).
• Functional Cookies: Remember your preferences such as language settings, saved addresses, and previous order preferences.
• Advertising and Targeting Cookies: Used to deliver advertisements relevant to your interests, both on our website and on third-party platforms.

8.2 Managing Your Cookie Preferences

You can control and manage cookie settings through your web browser settings or through our cookie consent banner when you first visit our website. Please note that disabling certain cookies may affect the functionality of our website and your ability to place orders.

For more detailed information about the cookies we use, their specific purposes, and how to manage them, please refer to our Cookie Policy available on our website at chick-imos.digital.

8.3 Do Not Track Signals

Some browsers offer a "Do Not Track" (DNT) feature that signals to websites that you do not want your online activity tracked. At this time, there is no universally accepted standard for responding to DNT signals. Our website does not currently respond to DNT browser signals, but you may use the cookie management options described above to limit tracking.

9. Children's Privacy

Our services are not directed to children under the age of 13. We comply with the Children's Online Privacy Protection Act (COPPA) and do not knowingly collect personal information from children under 13 without verifiable parental consent. If we become aware that we have inadvertently collected personal information from a child under 13, we will take immediate steps to delete such information from our records.

If you are a parent or guardian and you believe that your child under the age of 13 has provided us with personal information without your consent, please contact us immediately at [email protected]. We will take prompt action to investigate and remove the information.

We also encourage parents and guardians to monitor their children's internet usage and to help enforce this policy by instructing minors in their care not to use our services without adult supervision.

10. International Data Transfers

Imos Pizza is based in the United States, and your personal information is primarily collected and processed within the United States. If you are accessing our website from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate.

The data protection laws in the United States and other countries where we or our service providers operate may differ from the laws in your country of residence. By using our services, you acknowledge and consent to the transfer of your personal information to the United States and to the processing of your information in the United States in accordance with this Privacy Policy and applicable U.S. law.

When transferring data internationally, we take steps to ensure that appropriate safeguards are in place to protect your personal information, including the use of contractual protections with our service providers and compliance with applicable data transfer requirements.

11. Third-Party Links and Services

Our website may contain links to third-party websites, services, and applications that are not operated by us. These third-party links are provided for your convenience and reference only. We have no control over the content, privacy practices, or data collection activities of these third-party sites.

We strongly encourage you to review the privacy policies of every third-party website you visit. We are not responsible for the privacy practices or content of third-party websites and expressly disclaim any liability for their actions or omissions.

In particular, when you use third-party payment processors, delivery platforms, or social media integrations on our website, you are subject to those companies' own privacy policies and terms of service.

12. Your Choices Regarding Communications

We offer you several ways to control the communications you receive from us:

• Promotional Emails: You may opt out of receiving promotional and marketing emails by clicking the "Unsubscribe" link at the bottom of any marketing email we send you, or by contacting us at [email protected]. Please note that even after opting out of promotional emails, we will still send you transactional and service-related emails (such as order confirmations and account updates) as these are necessary for the operation of your account.
• SMS and Text Messages: If you have opted in to receive SMS marketing messages, you may opt out by replying STOP to any text message or by contacting us directly.
• Push Notifications: If you use our mobile application and have enabled push notifications, you may disable these through your device's notification settings.
• Account Preferences: You may update your communication preferences by logging into your account on our website and editing your notification settings.

13. California Privacy Rights — Shine the Light Law

Under California Civil Code Section 1798.83, California residents who have an established business relationship with us may request information once per year about the personal information we share with third parties for their direct marketing purposes. If you are a California resident and wish to make such a request, please contact us at [email protected] with the subject line "California Shine the Light Request." We will respond to your request within 30 days.

14. How to File a Complaint

If you have concerns about how we handle your personal information and are not satisfied with our response, you have the right to file a complaint with the relevant data protection or consumer protection authority. The primary avenues for filing complaints in the United States include:

14.1 Federal Trade Commission (FTC)

The Federal Trade Commission (FTC) is the primary federal agency responsible for consumer protection and enforcing privacy-related laws in the United States. You may file a complaint with the FTC at:

• Website: www.ftc.gov/complaint
• Phone: 1-877-FTC-HELP (1-877-382-4357)
• Address: Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, D.C. 20580

14.2 California Attorney General (for California Residents)

California residents who believe their CCPA/CPRA rights have been violated may file a complaint with the California Privacy Protection Agency (CPPA) or the California Attorney General's office:

• California Privacy Protection Agency: cppa.ca.gov
• California Attorney General: oag.ca.gov/privacy/ccpa

14.3 State Attorneys General

Residents of other states may file complaints with their respective State Attorney General's office. Most state attorneys general have consumer protection divisions that handle privacy-related complaints. Please visit your state government's official website for contact information.

14.4 Contacting Us First

Before filing a formal complaint with any authority, we encourage you to contact us directly so that we can address your concerns. We are committed to resolving privacy issues promptly and fairly. Please reach out to us at [email protected] with a detailed description of your concern.

15. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our business practices, legal requirements, or the services we offer. When we make material changes to this Privacy Policy, we will notify you by:

• Posting the updated Privacy Policy on our website with a new "Last Updated" date at the top of the page
• Sending an email notification to the email address associated with your account (where required by law or where the change is material)
• Displaying a prominent notice on our website homepage or at the point of login

Your continued use of our website and services after any changes to this Privacy Policy will constitute your acknowledgment of the changes and your agreement to abide by the updated policy. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

If you object to any changes to this Privacy Policy, you must stop using our website and services and, if applicable, request deletion of your account and personal data by contacting us at [email protected].

16. Governing Law

This Privacy Policy and any disputes arising from or related to your use of our services or the collection and processing of your personal data shall be governed by and construed in accordance with the laws of the United States and applicable state laws, without regard to conflict of law provisions. By using our services, you consent to the jurisdiction of the applicable courts in the United States for resolution of any such disputes.

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please do not hesitate to contact us using the details below. We take every inquiry seriously and will respond as promptly as possible.

We are dedicated to handling your personal information with respect, transparency, and care. Thank you for trusting Imos Pizza with your information and for taking the time to read our Privacy Policy.