Privacy Policy

1. Introduction

Welcome to Apache pizza ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, place orders, use our mobile application, or interact with our services.

This policy applies to all information collected through our website (apachepiza.com), mobile applications, in-store visits, phone orders, and any related services, sales, marketing, or events. By using our services, you consent to the data practices described in this policy.

2. Information We Collect

2.1 Information You Provide Directly

• Personal Identification: Name, email address, phone number, billing and delivery addresses
• Account Information: Username, password, order history, favorite items, delivery preferences
• Payment Information: Credit card details, payment preferences (stored securely and encrypted)
• Food Preferences: Dietary requirements, allergen information, special requests
• Order Details: Menu items ordered, customizations, delivery instructions, special dietary needs (vegan, halal, kosher, gluten-free)
• Loyalty Program Data: Points earned, rewards claimed, membership level, spending history
• Reservation Information: Table booking details, party size, special occasion notes
• Catering Requests: Event details, guest count, menu preferences, delivery logistics
• Communication Data: Contact form submissions, customer service interactions, feedback and reviews
• Marketing Preferences: Email subscription status, promotional preferences, communication channel choices

2.2 Automatically Collected Information

• Device Information: IP address, browser type and version, operating system, device identifiers
• Usage Data: Pages visited, time spent on site, clicks, scrolling behavior, search queries
• Location Data: Approximate location based on IP address, GPS location (with permission for delivery optimization)
• Cookie Data: Session identifiers, user preferences, authentication tokens, analytics data
• Performance Data: Page load times, error reports, feature usage statistics

2.3 Information from Third Parties

• Social Media: Profile information when you connect social accounts or share content
• Payment Processors: Transaction confirmations, payment status, fraud prevention data
• Delivery Partners: Delivery status updates, driver location, delivery confirmation
• Marketing Partners: Campaign performance data, audience insights (aggregated and anonymized)
• Review Platforms: Public reviews and ratings you post about our services

3. How We Use Your Information

3.1 Service Provision

• Process and fulfill your food orders accurately and efficiently
• Manage delivery logistics and coordinate with delivery partners
• Handle table reservations and catering bookings
• Provide customer support and resolve order issues
• Maintain and improve our loyalty rewards program
• Ensure food safety by tracking allergen and dietary preferences
• Authenticate your account and prevent unauthorized access
• Process payments securely and maintain transaction records

3.2 Communication

• Send order confirmations, preparation updates, and delivery notifications
• Provide customer support responses and resolution updates
• Communicate important service changes, policy updates, and safety notices
• Send promotional emails and special offers (only with your consent)
• Share information about new menu items and seasonal offerings
• Notify you about loyalty program benefits and reward opportunities

3.3 Marketing and Analytics

• Personalize your experience with recommended menu items and offers
• Analyze website traffic and user behavior to improve our services
• Measure the effectiveness of our marketing campaigns
• Conduct market research to develop new products and services
• Create aggregated reports for business intelligence (anonymized data)
• Optimize our website performance and user interface

3.4 Legal Compliance and Security

• Comply with applicable laws, regulations, and industry standards
• Respond to legal requests, court orders, and regulatory inquiries
• Prevent, detect, and investigate fraud, security breaches, and illegal activities
• Protect the rights, property, and safety of our customers and employees
• Resolve disputes and enforce our terms of service
• Maintain records for tax, accounting, and regulatory purposes

4. Information Sharing and Disclosure

4.1 Service Providers

We share information with trusted third-party service providers who help us operate our business:

• Payment Processors: Secure handling of credit card transactions and payment verification
• Delivery Services: Order details and delivery addresses to fulfill your orders
• Cloud Storage Providers: Secure data storage and backup services
• Email Marketing Services: Delivery of promotional emails and newsletters (with consent)
• Analytics Providers: Website usage analysis and performance optimization
• Customer Support Tools: Platforms for managing customer inquiries and support tickets
• Accounting Services: Financial record keeping and tax compliance

4.2 Legal Requirements

We may disclose your information when required by law or to protect legitimate interests:

• In response to court orders, subpoenas, or other legal processes
• To comply with applicable laws, regulations, and government requests
• To protect our rights, property, and safety, or that of our customers and the public
• In connection with emergency situations affecting public health or safety
• To investigate and prevent fraud, security breaches, or illegal activities

4.3 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information becomes subject to a different privacy policy and provide you with choices regarding your information.

4.4 With Your Consent

We may share your information for other purposes with your explicit consent, such as:

• Sharing reviews or testimonials you provide (with your permission)
• Participating in joint promotions with partner businesses
• Connecting with social media platforms at your request

5. Data Security

5.1 Technical Measures

• Encryption: All data transmission is protected using SSL/TLS encryption technology
• Secure Storage: Personal data is stored on secure servers with advanced firewall protection
• Access Controls: Strict access controls ensure only authorized personnel can access personal data
• Monitoring: 24/7 security monitoring to detect and respond to potential threats
• Backups: Regular automated backups ensure data recovery in case of system failures
• Updates: Regular security updates and patches to maintain system integrity

5.2 Organizational Measures

• Comprehensive employee training on data protection and privacy practices
• Documented procedures for handling personal data throughout its lifecycle
• Confidentiality agreements with all employees and third-party service providers
• Incident response plan for security breaches and data protection violations
• Regular security audits and vulnerability assessments
• Privacy by design principles in all new systems and processes

5.3 Your Security Responsibilities

• Create strong, unique passwords for your account and update them regularly
• Never share your login credentials with others
• Log out of your account when using public or shared computers
• Be cautious of phishing emails and suspicious links
• Report any unauthorized access to your account immediately
• Keep your contact information up to date for security notifications

6. Cookies and Tracking Technologies

We use various technologies to collect information and improve your experience on our website:

Type	Purpose	Duration
Essential Cookies	Basic site functions, login state, shopping cart, security	Session duration
Functional Cookies	User preferences, language settings, location, customizations	Up to 1 year
Analytics Cookies	Usage analysis, performance measurement, site improvement	Up to 2 years
Marketing Cookies	Personalized advertising, campaign measurement, retargeting	Up to 1 year

Other Tracking Technologies

• Google Analytics: Website traffic analysis and user behavior insights
• Facebook Pixel: Advertising effectiveness measurement and custom audience creation
• Web Beacons: Email open rates and engagement tracking
• Local Storage: Storing user preferences and application data locally
• Session Replay Tools: Understanding user interactions to improve website usability

Cookie Management

You can control cookies through your browser settings. Most browsers allow you to:

• View what cookies are stored on your device
• Delete cookies individually or all at once
• Block cookies from specific websites
• Block third-party cookies
• Set cookies to be automatically deleted when you close your browser

Note: Disabling certain cookies may affect website functionality, including the ability to place orders, save preferences, and access your account.

7. Your Rights (GDPR/CCPA Compliance)

Depending on your location, you may have the following rights regarding your personal information:

7.1 Right of Access

You have the right to request confirmation of whether we process your personal data and to access that data. You can request:

• A copy of your personal information we hold
• Information about how we use your data
• Details about who we share your data with
• Information about data retention periods

7.2 Right to Rectification

You can request correction of inaccurate or incomplete personal data. This includes:

• Updating contact information
• Correcting delivery addresses
• Modifying dietary preferences and allergen information
• Updating payment information

7.3 Right to Erasure (Right to be Forgotten)

You can request deletion of your personal data in certain circumstances:

• The data is no longer necessary for the original purpose
• You withdraw consent and there's no other legal basis for processing
• Your data has been unlawfully processed
• Deletion is required for legal compliance

7.4 Right to Restrict Processing

You can request that we limit how we use your data while we address your concerns about:

• Data accuracy disputes
• Unlawful processing claims
• Legitimate interest objections

7.5 Right to Data Portability

You can request your data in a machine-readable format to:

• Transfer your data to another service provider
• Use your data for your own purposes
• Have us directly transfer data to another controller (where technically feasible)

7.6 Right to Object

You can object to processing based on legitimate interests, including:

• Direct marketing communications
• Profiling for marketing purposes
• Processing for scientific or historical research

7.7 Right Against Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing that significantly affects you, including profiling.

How to Exercise Your Rights

To exercise any of these rights, contact us using the information provided in Section 13. We will:

• Respond to your request within 30 days
• Verify your identity before processing the request
• Provide the requested information or take the requested action
• Explain any limitations or reasons for refusing a request

8. Children's Privacy

Apache pizza is committed to protecting the privacy of children. Our services are not intended for individuals under the age of 16, and we do not knowingly collect personal information from children under 16 without parental consent.

Our Approach to Children's Data

• We do not intentionally collect personal information from children under 16
• Our website and services are designed for adults and families
• We encourage parents to monitor their children's online activities
• If we become aware that we have collected information from a child under 16, we will promptly delete it

Parental Rights and Responsibilities

If you are a parent or guardian and believe your child has provided us with personal information:

• Contact us immediately using the information in Section 13
• We will verify your identity and relationship to the child
• We will promptly delete any information collected from your child
• We will not knowingly re-collect information from that child without your consent

9. International Data Transfers

As a food service operating in Ireland, we may transfer your personal data to other countries for processing and storage. We ensure appropriate safeguards are in place to protect your information.

9.1 Protection Measures

• Adequacy Decisions: We transfer data to countries deemed adequate by the European Commission
• Standard Contractual Clauses (SCCs): We use EU-approved SCCs for transfers to countries without adequacy decisions
• Data Processing Agreements: All service providers sign comprehensive data protection agreements
• Security Measures: Technical and organizational measures ensure data protection during transfer
• Regular Audits: We regularly review and audit our international transfer arrangements

9.2 Transfer Destinations

• European Union: Data analytics and marketing services
• United States: Cloud storage and processing services (with appropriate safeguards)
• Other Countries: Only as necessary and with appropriate protection measures

We continuously monitor the legal landscape regarding international transfers and update our practices as needed to ensure compliance with applicable laws.

10. Data Retention Periods

We retain your personal information only as long as necessary for the purposes outlined in this policy or as required by law.

Information Type	Retention Period	Reason
Account Information	6 months after account deletion	Legal obligations, dispute resolution
Order History	7 years	Tax and accounting requirements
Payment Records	7 years	Financial regulations, fraud prevention
Marketing Consent	3 months after withdrawal	Consent record keeping
Website Usage Logs	Up to 2 years	Security monitoring, analytics
Customer Support Records	3 years	Service quality improvement
Loyalty Program Data	5 years after last activity	Program administration, legal requirements
Food Safety Records	2 years	Regulatory compliance, health safety

Safe Data Disposal

When we no longer need your personal information, we securely dispose of it by:

• Electronic Data: Complete deletion with data recovery prevention measures
• Physical Records: Professional shredding services for paper documents
• Backup Systems: Systematic deletion from all backup and archive systems
• Third-Party Services: Ensuring service providers also securely delete data
• Documentation: Maintaining records of data disposal for compliance purposes

11. Third-Party Links

Our website may contain links to external websites, including social media platforms, review sites, and partner services. This Privacy Policy does not apply to these third-party websites.

Your Responsibilities

• Review the privacy policies of third-party websites before providing information
• Understand that we cannot control third-party privacy practices
• Be aware that third-party sites may collect information differently
• Exercise caution when sharing personal information on external sites

Common Third-Party Integrations

• Social Media: Facebook, Instagram, Twitter sharing buttons
• Review Platforms: Google Reviews, TripAdvisor, Yelp
• Payment Processors: Stripe, PayPal, banking platforms
• Delivery Tracking: Third-party delivery service tracking pages
• Maps and Location: Google Maps integration

12. Policy Changes

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements.

12.1 How We Notify You of Changes

• Website Notice: Prominent notification on our homepage and throughout the site
• Email Notification: Direct email to registered users about significant changes
• Account Dashboard: Pop-up notification when you log into your account
• App Notification: Push notifications through our mobile application
• Social Media: Announcements on our official social media accounts

12.2 Types of Changes

• Minor Updates: Clarifications, formatting, contact information updates
• Significant Changes: New data uses, sharing practices, rights modifications
• Legal Updates: Changes required by new laws or regulations

12.3 Your Options

• Review the updated policy carefully
• Contact us with questions about changes
• Exercise your rights if you disagree with changes
• Stop using our services if you cannot accept the updated policy

Checking for Updates: We recommend checking this page periodically for updates. The "Last Updated" date at the top indicates when changes were last made.

13. Contact Information

Response Commitment

We are committed to addressing your privacy concerns promptly:

• Initial Response: Within 3 business days of receiving your inquiry
• Full Resolution: Within 30 days for rights requests
• Complex Matters: We may need additional time and will inform you of delays
• Emergency Issues: Immediate response for security breaches or urgent matters

13.1 Filing Complaints

If you have concerns about our privacy practices:

1. Contact Us First: We encourage you to contact us directly for fastest resolution
2. Provide Details: Include specific information about your concern
3. Supervisory Authority: If unsatisfied with our response, you may contact the Irish Data Protection Commission:
   • Website: www.dataprotection.ie
   • Phone: +353 (0)761 104 800
   • Email: [email protected]

14. Withdrawal of Consent

You have the right to withdraw your consent at any time for processing activities that rely on your consent.

14.1 Marketing Consent Withdrawal

To stop receiving marketing communications:

• Unsubscribe Links: Click the unsubscribe link in any marketing email
• Account Settings: Log into your account and update communication preferences
• Customer Service: Contact us directly to opt out of all marketing
• Phone Opt-out: Request removal from phone marketing lists

14.2 Account Deletion Process

To delete your account entirely:

1. Log into your account and go to account settings
2. Select "Delete Account" option
3. Confirm your identity and deletion request
4. Review what data will be retained for legal compliance
5. Receive confirmation of account deletion within 48 hours

15. Conclusion

At Apache pizza, protecting your privacy is fundamental to our relationship with you. We are committed to:

• Maintaining the highest standards of data protection and security
• Being transparent about how we collect and use your information
• Providing you with control over your personal data
• Continuously improving our privacy practices
• Complying with all applicable privacy laws and regulations

We understand that trust is earned through our actions, not just our words. Your confidence in our privacy practices is essential to our success, and we work diligently to maintain that trust every day.

If you have any questions about this Privacy Policy, our privacy practices, or how we handle your personal information, please don't hesitate to contact us. We value your feedback and are here to help address any concerns you may have.

Thank you for choosing Apache pizza and for trusting us with your personal information. We look forward to continuing to serve you while protecting your privacy.