Privacy Policy

This Privacy Policy describes how Anthony's Coal Fired Pizza ("we," "us," "our," or the "Company") collects, uses, discloses, and protects the personal information of individuals ("you," "your," or "user") who visit our website at acfpizza.rest, place orders, participate in our loyalty programs, or otherwise interact with our services. We are committed to protecting your privacy and handling your data in an open, transparent, and lawful manner consistent with applicable United States federal and state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and the Federal Trade Commission Act (FTC Act).

Please read this Privacy Policy carefully before using our website or submitting any personal information to us. By accessing or using our services, you acknowledge that you have read, understood, and agreed to the practices described in this Privacy Policy. If you do not agree with the terms outlined here, please discontinue use of our website and services immediately.

1. About Us

Anthony's Coal Fired Pizza is a food service business operating in the United States. We are passionate about delivering high-quality, coal-fired cuisine to our guests, both in-restaurant and through our digital ordering channels. For all privacy-related matters, you may contact us using the following details:

2. Scope of This Privacy Policy

This Privacy Policy applies to all personal information collected through:

• Our website located at acfpizza.rest
• Online food ordering platforms and integrated third-party delivery services associated with our brand
• Our loyalty and rewards programs
• Email newsletters, promotional communications, and marketing campaigns
• Customer service interactions, including phone, email, and live chat
• In-restaurant digital kiosks, feedback forms, or Wi-Fi sign-up portals
• Any mobile applications associated with our brand

This Policy does not apply to the practices of third-party companies, websites, or services that we do not own or control, even if linked from our website. We encourage you to review the privacy policies of any third-party services you choose to use.

3. Information We Collect

We collect several categories of personal information depending on how you interact with us. Below is a detailed breakdown of the data we may gather:

3.1 Personal Identification Information

When you create an account, place an order, sign up for our newsletter, participate in a promotion, or contact us, we may collect:

• Full name
• Email address
• Phone number
• Mailing address and delivery address
• Date of birth (for age verification and birthday rewards)
• Username and password (for account management)

3.2 Payment and Financial Information

To process orders and transactions, we collect payment-related data, which may include:

• Credit or debit card information (processed securely via PCI-DSS-compliant payment processors)
• Billing address
• Transaction history and order details
• Digital wallet information (e.g., Apple Pay, Google Pay)

We do not store full credit card numbers on our servers. All payment transactions are handled by certified third-party payment processors.

3.3 Usage and Behavioral Data

When you use our website or digital services, we automatically collect certain technical and behavioral data, including:

• IP address and approximate geographic location
• Browser type, version, and language settings
• Operating system and device type
• Pages visited, time spent on pages, and navigation paths
• Referring URLs (websites that directed you to our site)
• Search queries entered on our website
• Clickstream data and interaction logs
• Session identifiers and timestamps

3.4 Cookie and Tracking Technology Data

We and our third-party service providers use cookies, web beacons, pixel tags, local storage objects, and similar tracking technologies to collect information about your browsing behavior. For more detailed information, please refer to Section 8 – Cookie Usage of this Policy.

3.5 Communications Data

When you contact our customer service team or submit feedback, we may retain:

• Records of correspondence (emails, chat transcripts, call logs)
• Survey responses and review submissions
• Complaint records and resolution notes

3.6 Loyalty and Preferences Data

If you enroll in our loyalty program or customize your account, we collect:

• Order history and food preferences
• Reward points balance and redemption history
• Communication preferences (opt-in or opt-out status)
• Saved delivery addresses and favorite menu items

3.7 Information from Third Parties

We may receive personal information about you from third parties, including:

• Third-party delivery platforms (e.g., DoorDash, Uber Eats, Grubhub) when you place orders through their services
• Social media platforms if you log in using your social media account or interact with our social media pages
• Marketing and analytics partners who provide us with enriched demographic or behavioral data
• Publicly available data sources

4. How We Use Your Information

We use the personal information we collect for several purposes, all aimed at delivering a better, safer, and more personalized experience. Specifically, we use your data to:

4.1 Service Provision and Order Fulfillment

• Process and fulfill your food orders, both online and in-restaurant
• Manage your account and loyalty program membership
• Communicate order confirmations, delivery status updates, and receipts
• Respond to your customer service inquiries and resolve complaints
• Process refunds, cancellations, and returns where applicable

4.2 Marketing and Promotions

• Send you promotional emails, special offers, and newsletters (with your consent or based on legitimate interest)
• Personalize marketing messages based on your order history and preferences
• Conduct sweepstakes, contests, and loyalty reward campaigns
• Target advertising on third-party platforms such as Facebook, Instagram, and Google

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any email or by contacting us at [email protected].

4.3 Analytics and Service Improvement

• Analyze website traffic, user behavior, and conversion rates to improve our digital experience
• Conduct internal research and development to enhance our menu, services, and customer experience
• Monitor and troubleshoot technical issues on our website and applications
• Generate anonymized, aggregated reports for business intelligence purposes

4.4 Legal Compliance and Security

• Comply with applicable federal and state laws, regulations, and legal processes
• Detect, investigate, and prevent fraudulent transactions, unauthorized access, and other illegal activities
• Enforce our Terms of Service and other legal agreements
• Protect the rights, property, and safety of Anthony's Coal Fired Pizza, our employees, and our customers

5. Legal Basis for Processing Personal Information

As a business operating in the United States, we process personal information based on the following legal grounds:

• Contractual Necessity: Processing is necessary to fulfill your orders and provide the services you have requested.
• Legitimate Interests: We process data to improve our services, prevent fraud, and conduct marketing activities, balancing our interests against your privacy rights.
• Legal Obligation: We may be required to process or retain certain data to comply with applicable laws, regulations, court orders, or government directives.
• Consent: For certain activities such as email marketing, personalized advertising, or non-essential cookies, we rely on your explicit consent, which you may withdraw at any time.

6. Sharing Your Information with Third Parties

We do not sell your personal information to third parties. However, we may share your data with trusted partners and service providers under the following circumstances:

6.1 Service Providers and Business Partners

We engage third-party companies and individuals to perform services on our behalf. These include:

• Payment processors to securely handle financial transactions
• Delivery and logistics providers to fulfill online orders
• Email marketing platforms to send communications on our behalf
• Analytics providers such as Google Analytics to understand website usage
• Customer relationship management (CRM) platforms to manage customer data and interactions
• Cloud hosting providers to store and process data securely
• Advertising networks to serve relevant ads on external platforms

All third-party service providers are contractually obligated to use your data only for the specific purposes for which they were engaged and to maintain appropriate security measures.

6.2 Legal Requirements and Law Enforcement

We may disclose your personal information when required by law or in response to valid legal requests, including:

• Court orders, subpoenas, or warrants
• Requests from regulatory bodies or government agencies
• Compliance with federal or state statutes, such as the FTC Act or applicable food safety regulations
• Situations where disclosure is necessary to protect against imminent threats to public safety

6.3 Business Transfers

In the event of a merger, acquisition, sale of assets, bankruptcy, or other corporate transaction, your personal information may be transferred to the acquiring entity. We will notify you of any such change and the resulting privacy implications via email or a prominent notice on our website.

6.4 With Your Consent

We may share your information with third parties in other circumstances when we have obtained your explicit consent to do so.

7. Data Security

We take the security of your personal information seriously and implement a range of administrative, technical, and physical safeguards to protect it from unauthorized access, disclosure, alteration, or destruction. Our security measures include:

• SSL/TLS Encryption: All data transmitted between your browser and our website is encrypted using Secure Sockets Layer (SSL) or Transport Layer Security (TLS) protocols.
• PCI-DSS Compliance: Payment card data is processed in accordance with Payment Card Industry Data Security Standards.
• Access Controls: Access to personal data is restricted to authorized personnel only, on a need-to-know basis, and is protected by multi-factor authentication.
• Regular Security Audits: We conduct periodic vulnerability assessments and penetration testing to identify and address potential security weaknesses.
• Employee Training: Our staff receives regular privacy and security training to ensure compliance with data handling best practices.
• Data Minimization: We collect only the minimum amount of personal information necessary to fulfill the stated purposes.
• Incident Response Plan: We maintain a documented data breach response plan to quickly detect, contain, and remediate security incidents.

8. Cookie Usage

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and deliver personalized content and advertising. Cookies are small text files stored on your device when you visit a website.

8.1 Types of Cookies We Use

• Essential Cookies: Necessary for the website to function properly (e.g., shopping cart, login sessions). These cannot be disabled.
• Performance Cookies: Collect anonymized data about how visitors use the website to help us improve its performance.
• Functional Cookies: Remember your preferences and settings, such as your location or language.
• Marketing and Targeting Cookies: Used to deliver relevant advertisements and track the effectiveness of marketing campaigns.

8.2 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to block or delete cookies. Please note that disabling certain cookies may impact the functionality of our website. For more detailed information about our cookie practices, please refer to our dedicated Cookie Policy available on our website.

To opt out of Google Analytics tracking, you may use the Google Analytics Opt-out Browser Add-on.

9. Your Privacy Rights

Depending on your state of residence, you may have specific rights regarding your personal information. We are committed to honoring these rights in a timely and transparent manner.

9.1 Rights Under the California Consumer Privacy Act (CCPA/CPRA)

If you are a California resident, you have the following rights under the CCPA as amended by the CPRA:

• Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the sources of that information, our business purposes for collecting it, and the categories of third parties with whom we share it.
• Right to Delete: You have the right to request the deletion of personal information we have collected from you, subject to certain exceptions.
• Right to Correct: You have the right to request that we correct inaccurate personal information we maintain about you.
• Right to Opt-Out of Sale or Sharing: You have the right to opt out of the sale or sharing of your personal information with third parties. While we do not sell personal information, we may share it for cross-context behavioral advertising purposes.
• Right to Limit Use of Sensitive Personal Information: You have the right to limit the use and disclosure of sensitive personal information to purposes necessary to provide our services.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights. You will not receive lower quality service or higher prices as a result of invoking your rights.

9.2 General Privacy Rights for All U.S. Residents

Regardless of your state of residence, we extend the following rights to all of our users:

• Right to Access: You may request a copy of the personal information we hold about you.
• Right to Correction: You may request that we update or correct inaccurate information associated with your account.
• Right to Deletion: You may request the erasure of your personal data where there is no compelling reason for us to continue processing it.
• Right to Data Portability: You may request that we provide your personal data in a structured, commonly used, and machine-readable format.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to Object: You may object to processing carried out for direct marketing or on the basis of legitimate interests.

9.3 How to Exercise Your Rights

To exercise any of your privacy rights, please contact us through one of the following methods:

• Email: [email protected]
• Website: acfpizza.rest

We will verify your identity before processing your request to protect against unauthorized disclosure or deletion. We will respond to all verifiable consumer requests within 45 days of receipt, as required by applicable law. In complex cases, we may extend this period by an additional 45 days, with prior notification.

You may designate an authorized agent to submit requests on your behalf. The authorized agent must provide written permission signed by you, and we may require you to verify your identity directly with us.

10. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Our general data retention guidelines are as follows:

Upon expiration of the applicable retention period, we will securely delete or anonymize your personal information in accordance with our data disposal procedures.

11. Children's Privacy

We comply fully with the Children's Online Privacy Protection Act (COPPA) and do not knowingly collect, use, or disclose personal information from children under 13 without verifiable parental consent. If you are between the ages of 13 and 17, please use our services only with the involvement and consent of a parent or legal guardian.

If we become aware that we have inadvertently collected personal information from a child under the age of 13 without appropriate consent, we will take immediate steps to delete such information from our records. If you believe we may have collected information from a child under 13, please contact us immediately at [email protected].

12. International Data Transfers

Anthony's Coal Fired Pizza is a United States-based business and primarily processes personal data within the United States. Our servers, databases, and data processing infrastructure are located within the United States.

If you are accessing our services from outside the United States, please be aware that your personal information may be transferred to, stored in, and processed in the United States, where data protection laws may differ from those in your home country. By using our services, you consent to the transfer of your personal information to the United States.

In the event that we engage service providers or partners located outside the United States, we ensure that appropriate safeguards are in place, such as contractual data protection agreements, to protect the security and integrity of your personal information during any international transfer.

13. Third-Party Links and Services

Our website may contain links to third-party websites, social media platforms, online ordering integrations, and delivery service partners. These third-party services have their own privacy policies, which we encourage you to review. We are not responsible for the privacy practices or content of any third-party websites or services.

Examples of third-party integrations may include:

• Food delivery platforms (e.g., DoorDash, Uber Eats, Grubhub)
• Social media platforms (e.g., Facebook, Instagram, Twitter/X)
• Online review platforms (e.g., Yelp, Google Reviews)
• Payment processors (e.g., Stripe, Square, PayPal)
• Analytics tools (e.g., Google Analytics, Meta Pixel)

14. Do Not Track (DNT) Signals

Some web browsers allow users to send "Do Not Track" (DNT) signals to websites they visit. Currently, our website does not respond to DNT signals because there is no universally accepted standard for how websites should respond to such signals. We will continue to monitor developments in this area and update our practices accordingly.

California residents may also exercise their privacy rights under the CCPA/CPRA, as described in Section 9 of this Policy.

15. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, applicable laws, or business operations. When we make material changes, we will:

• Update the "Last Updated" date at the top of this Policy
• Post the revised Policy on our website at acfpizza.rest
• Send an email notification to registered users for significant changes
• Display a prominent notice on our website homepage for a period of time following the update

Your continued use of our website or services after the effective date of any changes constitutes your acceptance of the revised Privacy Policy. We encourage you to review this Policy periodically to stay informed about how we protect your information.

16. Filing a Complaint

If you believe that we have not handled your personal information in accordance with applicable privacy laws or this Privacy Policy, we encourage you to contact us first so that we can attempt to resolve the issue directly:

• Email: [email protected]
• Website: acfpizza.rest

We take all privacy complaints seriously and will respond to your inquiry within 30 business days.

16.1 Regulatory Bodies

If you are not satisfied with our response, you have the right to file a complaint with a relevant regulatory authority. Depending on your state of residence, the following bodies may be relevant:

• California Residents: You may file a complaint with the California Privacy Protection Agency (CPPA) at cppa.ca.gov, or with the California Attorney General's Office at oag.ca.gov.
• All U.S. Residents: You may file a complaint with the Federal Trade Commission (FTC) at ftc.gov/complaint for concerns related to unfair or deceptive trade practices under the FTC Act.
• Other States: Many states have their own Attorney General offices that handle consumer privacy complaints. You may visit your state's official government website to find the appropriate contact information.

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please do not hesitate to contact our privacy team using the information below:

We are dedicated to addressing your privacy concerns promptly and thoroughly. Our goal is to ensure that your experience with Anthony's Coal Fired Pizza is both delightful and secure, and that your personal information is always treated with the utmost respect and care.