Privacy Policy

1. Introduction

Welcome to Apache Pizza ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website apachplza.com, use our mobile application, order food for delivery or pickup, visit our restaurant locations, or engage with our services.

This policy applies to all information collected by Apache Pizza through our digital platforms, physical locations, and third-party integrations. By using our services, creating an account, placing an order, or providing your information to us, you agree to the practices described in this Privacy Policy.

We never sell your personal data to third parties. Your trust is paramount to us, and we are committed to transparent data practices that prioritize your privacy rights.

If you do not agree with the terms of this Privacy Policy, please do not access or use our services. We encourage you to review this policy regularly as we may update it from time to time to reflect changes in our practices or legal requirements.

2. Information We Collect

2.1 Information You Provide to Us

• Personal Identification Information: Name, email address, phone number, postal address, date of birth
• Account Information: Username, password, profile information, purchase history, favorite orders
• Payment Information: Credit/debit card details, billing address, payment preferences (stored securely through encrypted third-party processors)
• Order Information: Food items ordered, delivery addresses, special dietary requirements, allergen information, delivery preferences
• Dietary and Health Information: Allergen restrictions, dietary preferences (vegan, vegetarian, halal, kosher), special dietary requirements
• Contact Form Data: Messages, feedback, customer service inquiries, complaints, reviews and ratings
• Marketing Preferences: Email subscription status, communication preferences, promotional interests
• Loyalty Program Data: Rewards points, membership status, redemption history, tier levels
• Event Information: Catering event details, party sizes, special occasions, table reservation information

2.2 Information We Collect Automatically

• Device Information: IP address, browser type and version, operating system, device identifiers, screen resolution
• Usage Data: Pages visited, time spent on site, click paths, search queries, order frequency, menu browsing patterns
• Cookie Data: Session IDs, user preferences, shopping cart contents, login status, analytics data
• Location Information: Approximate location based on IP address, GPS location (with permission for delivery services)
• Performance Data: Page load times, error reports, website performance metrics

2.3 Information from Third Parties

• Social Media: Profile information if you connect social media accounts or log in through social platforms
• Payment Processors: Transaction confirmations, payment status, fraud detection data
• Delivery Partners: Delivery status updates, driver location data, delivery confirmations
• Marketing Partners: Campaign performance data, customer acquisition sources, advertising effectiveness metrics
• Review Platforms: Customer reviews and ratings from third-party review sites

3. How We Use Your Information

3.1 Service Provision

• Processing and fulfilling your food orders and delivery requests
• Managing your account, login authentication, and password resets
• Providing customer support and resolving service issues
• Processing payments and managing billing information
• Coordinating food delivery and pickup services
• Managing table reservations and catering events
• Tracking order history and enabling reordering of favorite items
• Ensuring food safety by maintaining allergen and dietary preference records

3.2 Communication

• Sending order confirmations, payment receipts, and delivery notifications
• Providing customer support responses and service updates
• Delivering important notices about policy changes or service disruptions
• Sending promotional emails and marketing communications (only with your consent)
• Notifying you about loyalty rewards, special offers, and new menu items
• Conducting customer satisfaction surveys and feedback requests

3.3 Marketing and Analytics

• Creating personalized food recommendations based on order history
• Analyzing website traffic, user behavior, and ordering patterns
• Measuring the effectiveness of marketing campaigns and promotions
• Conducting market research to develop new menu items and services
• Optimizing our website and mobile app user experience
• Segmenting customers for targeted marketing communications

3.4 Legal Compliance and Security

• Responding to legal requests, court orders, and regulatory inquiries
• Preventing fraud, unauthorized access, and security breaches
• Protecting our rights, property, and the safety of our customers and employees
• Resolving disputes and enforcing our terms of service
• Complying with food safety regulations and health department requirements
• Maintaining records for tax, accounting, and audit purposes

4. Information Sharing and Disclosure

4.1 Service Providers

We share information with trusted third-party service providers who assist us in operating our business:

• Payment Processors: Secure handling of credit card transactions and payment processing
• Delivery Services: Sharing delivery addresses and order details with our delivery partners
• Cloud Storage Providers: Secure storage of customer data and order information
• Email Service Providers: Managing and sending marketing emails and order notifications
• Analytics Tools: Google Analytics and similar services for website usage analysis
• Customer Support Platforms: Managing customer service inquiries and support tickets
• Food Safety Partners: Sharing allergen information to ensure safe food preparation

4.2 Legal Requirements

We may disclose your information when required by law or to protect our interests:

• Compliance with court orders, subpoenas, and legal processes
• Meeting regulatory requirements and government requests
• Protecting our rights, property, and legal interests
• Ensuring public safety in emergency situations
• Cooperating with law enforcement investigations
• Complying with food safety and health department regulations

4.3 Business Transfers

In the event of a merger, acquisition, or sale of our business assets:

• Customer information may be transferred to the new owner
• We will notify customers before any transfer occurs
• The new owner must comply with this Privacy Policy
• Customers will have the opportunity to opt-out if they disagree

4.4 With Your Consent

We may share your information for other purposes with your explicit consent, such as:

• Participating in promotional partnerships with other brands
• Sharing testimonials or reviews (with your permission)
• Integrating with third-party loyalty programs
• Participating in market research studies

5. Data Security

5.1 Technical Security Measures

• Encryption: All data transmission is protected using SSL/TLS encryption protocols
• Firewall Protection: Advanced firewall systems protect against unauthorized network access
• Access Controls: Strict access controls ensure only authorized personnel can access customer data
• Monitoring: 24/7 security monitoring systems detect and respond to potential threats
• Data Backups: Regular secure backups ensure data recovery in case of system failures
• Vulnerability Testing: Regular security assessments and penetration testing
• Secure Hosting: Data hosted on secure, certified cloud infrastructure

5.2 Organizational Security Measures

• Employee Training: Regular privacy and security training for all staff members
• Data Handling Procedures: Strict procedures for accessing, processing, and storing personal data
• Confidentiality Agreements: All employees and contractors sign confidentiality agreements
• Incident Response Plan: Comprehensive plan for responding to security breaches
• Regular Audits: Internal and external security audits to ensure compliance
• Vendor Management: Security assessments of all third-party service providers

5.3 Your Security Responsibilities

• Use strong, unique passwords for your account
• Do not share your login credentials with others
• Log out of your account when using public or shared computers
• Be cautious of phishing emails and suspicious links
• Report any unauthorized access or suspicious activity immediately
• Keep your contact information up to date for security notifications

Security Breach Notification: In the unlikely event of a data breach that affects your personal information, we will promptly notify you via email and/or prominent website notice, and will also notify relevant authorities as required by law. We will provide details about what information was involved, what we are doing to investigate and respond to the breach, and steps you can take to protect yourself.

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website. The table below describes the types of cookies we use:

Tracking Technologies We Use

• Google Analytics: Website traffic analysis and user behavior tracking
• Facebook Pixel: Advertising campaign measurement and retargeting
• Web Beacons: Email open rate tracking and engagement measurement
• Local Storage: Storing user preferences and cart contents in your browser
• Session Storage: Temporary data storage for site functionality

Cookie Management

You can control cookies through your browser settings. Most browsers allow you to accept, reject, or delete cookies. Please note that disabling certain cookies may affect website functionality and your user experience. To learn more about cookies and how to manage them, visit www.allaboutcookies.org.

7. Your Rights Under GDPR and CCPA

We respect your privacy rights and provide you with control over your personal information. Depending on your location, you may have the following rights:

7.1 Right of Access

You have the right to know what personal information we have about you and to request a copy of your data. This includes order history, account information, and any other data we have collected.

7.2 Right to Rectification

You have the right to correct any inaccurate or incomplete personal information we hold about you. You can update most information through your account settings or by contacting us.

7.3 Right to Erasure (Right to be Forgotten)

You have the right to request deletion of your personal data, subject to certain legal requirements. We may need to retain some information for legal compliance or fraud prevention.

7.4 Right to Restrict Processing

You have the right to request that we limit how we use your personal information in certain circumstances, such as while we investigate a data accuracy issue.

7.5 Right to Data Portability

You have the right to receive your personal data in a structured, machine-readable format and to transfer this data to another service provider.

7.6 Right to Object

You have the right to object to the processing of your personal data, especially for marketing purposes. You can opt-out of marketing communications at any time.

7.7 Right Against Automated Decision-Making

You have the right not to be subject to automated decision-making that significantly affects you, including profiling for marketing purposes.

How to Exercise Your Rights

To exercise any of these rights, please contact us using the information provided in Section 13. We will respond to your request within 30 days. You may need to verify your identity before we can process your request. There is no charge for most requests, but we may charge a reasonable fee for excessive or repetitive requests.

8. Children's Privacy

Our services are not intended for children under the age of 16. We do not knowingly collect personal information from children under 16 through our website, mobile app, or restaurant locations.

If you are a parent or guardian and believe that your child under 16 has provided us with personal information, please contact us immediately using the information provided in Section 13. If we discover that we have collected personal information from a child under 16, we will promptly delete that information from our systems.

We encourage parents and guardians to monitor their children's online activities and to help enforce this policy by instructing their children never to provide personal information through our services without permission.

For children between 13-16 years old, we recommend parental supervision when using our services, especially when placing orders or providing personal information.

9. International Data Transfers

9.1 Protection Measures

When we transfer your personal data outside of Ireland or the European Union, we ensure appropriate safeguards are in place:

• Adequacy Decisions: Transfers to countries recognized by the European Commission as providing adequate protection
• Standard Contractual Clauses (SCCs): EU-approved contract terms that ensure data protection
• Data Processing Agreements: Binding contracts with third-party processors requiring data protection
• Security Measures: Technical and organizational measures to protect data during transfer
• Compliance Audits: Regular audits to ensure international partners meet our privacy standards

9.2 Transfer Destinations

Your personal data may be transferred to and processed in the following regions:

• United States: For cloud storage and analytics services (with appropriate safeguards)
• European Union: For data analytics and customer support services
• Other Countries: As needed for business operations, always with appropriate protection measures

We regularly review our international transfer practices to ensure they comply with applicable data protection laws and provide adequate protection for your personal information.

10. Data Retention Periods

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected and to comply with legal requirements. The table below outlines our retention periods:

Safe Data Disposal

When personal data reaches the end of its retention period, we ensure secure disposal:

• Electronic Data: Complete deletion using secure deletion methods that make data unrecoverable
• Physical Records: Secure shredding and destruction of paper documents
• Backup Data: Removal from all backup systems and archives
• Disposal Records: Maintenance of disposal records for audit purposes
• Third-Party Data: Ensuring our service providers also securely dispose of your data

11. Third-Party Links and Services

Our website and mobile app may contain links to third-party websites, services, or applications that are not owned or operated by Apache Pizza. This Privacy Policy does not apply to third-party websites or services.

We are not responsible for the privacy practices of third-party websites. These sites may have their own privacy policies and terms of service that govern how they collect, use, and share your personal information.

We strongly encourage you to review the privacy policies of any third-party websites or services before providing them with your personal information. Some third-party services we may link to include:

• Social media platforms (Facebook, Instagram, Twitter)
• Review websites (Google Reviews, Yelp)
• Payment processors (PayPal, Stripe)
• Delivery tracking services
• Survey and feedback platforms
• Partner restaurant websites

Your interactions with third-party websites and services are at your own risk, and you are responsible for reviewing their terms and privacy practices.

12. Changes to This Privacy Policy

12.1 Change Notification Methods

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. When we make changes, we will notify you through:

• Website Notice: Prominent banner on our website homepage
• Email Notification: Direct email to registered users about significant changes
• In-App Notification: Push notifications through our mobile app
• Account Dashboard: Notification in your account settings
• Pop-up Notice: One-time pop-up when you next visit our website

12.2 Staying Informed About Changes

• The latest version of this policy is always available on our website
• Check the "Last Updated" date at the top of this policy
• Subscribe to our newsletter to receive policy update notifications
• For significant changes, we will provide at least 30 days' notice
• Continued use of our services after changes constitutes acceptance
• If you disagree with changes, you may discontinue using our services

Material Changes: For significant changes that affect how we use your personal information, we will obtain your explicit consent before implementing the changes or give you the option to opt-out of the new practices.

13. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us using the information below:

Response Commitment: We are committed to responding to all privacy-related inquiries within 3 business days. For complex requests, we may require up to 30 days to provide a complete response.

13.1 Filing Complaints

If you believe we have not adequately addressed your privacy concerns, you have the right to file a complaint with the relevant supervisory authority:

• Ireland: Data Protection Commission (DPC) - www.dataprotection.ie
• EU/EEA: Your local data protection authority
• UK: Information Commissioner's Office (ICO) - www.ico.org.uk

We encourage you to contact us first so we can work together to resolve any concerns you may have about our privacy practices.

14. Withdrawal of Consent

14.1 Marketing Consent Withdrawal

You can withdraw your consent for marketing communications at any time through:

• Unsubscribe Link: Click the unsubscribe link in any marketing email
• Account Settings: Update your communication preferences in your account dashboard
• Customer Support: Contact our customer support team to opt-out
• Email Request: Send an email to [email protected]
• Phone Request: Call us at +353 1 670 3865 during business hours

14.2 Account Deletion Process

If you wish to delete your account and associated data, follow these steps:

1. Log into your account and go to Account Settings
2. Click on "Delete Account" option
3. Confirm your decision and provide a reason (optional)
4. We will send a confirmation email within 24 hours
5. Your account will be permanently deleted within 30 days

Please note: Some information may be retained for legal compliance, fraud prevention, and legitimate business purposes as outlined in our retention policy. We will clearly explain what information, if any, will be retained when you request account deletion.

15. Conclusion

At Apache Pizza, we are committed to protecting your privacy and maintaining your trust. This Privacy Policy represents our dedication to transparent data practices and your right to privacy. We understand that your personal information is valuable, and we take our responsibility to protect it seriously.

Your trust is the foundation of our relationship with you. Whether you're ordering your favorite meal, providing feedback, or simply browsing our menu, we want you to feel confident that your personal information is safe and secure with us.

We continuously review and improve our privacy practices to ensure they meet the highest standards of data protection. As technology evolves and privacy laws develop, we will update our practices accordingly while always prioritizing your privacy rights.

If you have any questions about this Privacy Policy or our privacy practices, we encourage you to reach out to us. We value your feedback and are here to address any concerns you may have about how we handle your personal information.

Thank you for choosing Apache Pizza and for trusting us with your personal information. We look forward to continuing to serve you with the same commitment to quality and privacy that has made us a trusted name in food service.

Remember to check this page regularly for updates. This Privacy Policy was last updated on January 15, 2025.