Privacy Policy

This Privacy Policy describes how Piada ("we," "us," or "our") collects, uses, discloses, and protects your personal information when you visit our website at meal-piada.rest, place orders, use our services, or otherwise interact with us. Please read this policy carefully to understand our practices regarding your personal data and how we treat it.

By accessing or using our website, placing an order, signing up for an account, or otherwise engaging with our services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the terms outlined herein, please discontinue use of our website and services immediately.

We are committed to protecting your privacy and handling your personal data in a transparent, responsible, and lawful manner consistent with applicable United States federal and state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and the Federal Trade Commission (FTC) Act.

1. Who We Are

Piada is a food business operating in the United States. We operate online through our website meal-piada.rest and are dedicated to providing quality food products and an excellent customer experience. If you have any questions about this Privacy Policy or our data practices, please contact us using the details below:

2. Information We Collect

We collect various categories of information depending on how you interact with our website and services. The types of data we may collect include the following:

2.1 Personal Identification Information

When you create an account, place an order, subscribe to our newsletter, contact our support team, or otherwise engage with us, we may collect:

• Full name
• Email address
• Phone number
• Billing and shipping address
• Payment information (processed securely through third-party payment processors; we do not store full card numbers)
• Username and password (stored in encrypted form)
• Date of birth (where required for age verification or promotional purposes)
• Dietary preferences and food allergy information (provided voluntarily)

2.2 Order and Transaction Data

When you place an order with us, we collect information related to your purchases, including:

• Items ordered and quantities
• Order history and transaction records
• Delivery instructions and special requests
• Payment confirmation and billing records
• Refund and return requests

2.3 Usage and Behavioral Data

We automatically collect certain information when you visit or interact with our website, including:

• Pages visited and time spent on each page
• Search queries made on our website
• Links clicked and navigation paths
• Products viewed and added to cart
• Frequency and duration of website visits
• Referring website or traffic source

2.4 Device and Technical Information

We collect technical information about the device and network you use to access our website, such as:

• IP address
• Browser type and version
• Operating system and device type (desktop, mobile, tablet)
• Screen resolution
• Device identifiers
• Time zone and language settings
• Internet service provider (ISP)

2.5 Cookies and Tracking Technologies

We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about your browsing behavior on our website. This helps us improve user experience, analyze traffic, and deliver relevant content and advertisements. For more detailed information, please refer to Section 9 (Cookie Policy) of this document.

2.6 Communications Data

When you contact us via email, phone, or any contact form on our website, we may collect and retain the content of those communications, including:

• Email correspondence
• Customer support inquiries and responses
• Survey responses and feedback
• Reviews and ratings submitted on our platform

2.7 Information from Third Parties

We may receive information about you from third-party sources, including:

• Social media platforms if you connect your account or interact with our social media pages
• Analytics providers who help us understand website traffic and behavior
• Advertising partners who assist with targeted marketing campaigns
• Payment processors who confirm transaction status
• Delivery and logistics partners who provide order fulfillment updates

3. How We Use Your Information

We use the personal information we collect for the following purposes:

3.1 Service Provision and Order Fulfillment

• Processing and fulfilling your food orders
• Managing your customer account and preferences
• Processing payments and issuing refunds or credits
• Arranging delivery and providing order status updates
• Responding to customer service inquiries and resolving disputes
• Sending order confirmations and receipts

3.2 Website Improvement and Analytics

• Analyzing how users interact with our website to improve design and functionality
• Monitoring website performance and identifying technical issues
• Conducting internal research and development
• Generating aggregated, anonymized reports on user behavior and trends
• Testing new features and content before broader deployment

3.3 Marketing and Communications

• Sending promotional emails, newsletters, and special offers (with your consent where required)
• Notifying you of new menu items, seasonal promotions, and exclusive deals
• Personalizing your experience based on past orders and browsing behavior
• Delivering targeted advertisements through third-party advertising networks
• Conducting loyalty programs and reward campaigns

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any email we send, or by contacting us directly at [email protected].

3.4 Legal Compliance and Safety

• Complying with applicable federal and state laws and regulations
• Responding to lawful requests from government authorities or law enforcement
• Enforcing our Terms of Service and other legal agreements
• Detecting and preventing fraud, abuse, and security threats
• Protecting the rights, property, and safety of Piada, our customers, and the public

3.5 Business Operations

• Managing our internal records and administrative processes
• Planning and conducting business mergers, acquisitions, or restructuring
• Improving our menu offerings based on customer preferences and feedback
• Training staff and improving customer service standards

4. Legal Basis for Processing

We process your personal data on the following legal grounds:

• Contract Performance: Processing necessary to fulfill your order, manage your account, or provide the services you have requested.
• Legitimate Interests: Processing necessary for our legitimate business interests, such as improving our services, preventing fraud, and direct marketing, provided such interests do not override your fundamental rights and freedoms.
• Legal Obligation: Processing required to comply with applicable laws, regulations, or legal processes.
• Consent: Where we rely on your consent (e.g., for marketing emails or non-essential cookies), you have the right to withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5. Sharing Your Information with Third Parties

We do not sell, rent, or trade your personal information to third parties for their own independent marketing purposes. However, we may share your data in the following circumstances:

5.1 Service Providers and Business Partners

We work with trusted third-party service providers who assist us in operating our business and website. These providers are contractually obligated to protect your information and may only use it to provide services on our behalf. Categories of service providers include:

• Payment Processors: To securely process credit/debit card and other payment transactions (e.g., Stripe, Square, PayPal)
• Delivery and Logistics Partners: To fulfill and deliver your food orders
• Cloud Hosting and IT Infrastructure Providers: To store and manage our data securely
• Email and Communication Platforms: To send order confirmations, newsletters, and promotional communications
• Analytics Providers: Such as Google Analytics, to understand website usage and user behavior
• Advertising Networks: To deliver targeted ads on our behalf across the web and social media platforms
• Customer Support Platforms: To manage and respond to customer inquiries

5.2 Legal Requirements and Law Enforcement

We may disclose your personal information to government authorities, regulators, courts, or law enforcement agencies if required to do so by law, or if we believe in good faith that such disclosure is necessary to:

• Comply with a legal obligation, subpoena, court order, or government request
• Protect and defend our legal rights or property
• Prevent or investigate possible wrongdoing in connection with our services
• Protect the personal safety of users of our website or the public

5.3 Business Transfers

If Piada undergoes a merger, acquisition, sale of assets, bankruptcy, or other business transaction, your personal information may be transferred to the acquiring entity as part of that transaction. We will notify you via email and/or a prominent notice on our website before your personal data is transferred and becomes subject to a different privacy policy.

5.4 Aggregated and Anonymized Data

We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you with third parties for research, marketing, analytics, or other business purposes.

6. Data Security

We take the security of your personal information seriously and implement a range of technical, administrative, and physical safeguards to protect it from unauthorized access, disclosure, alteration, or destruction. Our security measures include:

• Encryption: All data transmitted between your browser and our website is encrypted using SSL/TLS technology (HTTPS protocol).
• Secure Payment Processing: Payment card information is processed by PCI-DSS compliant third-party processors. We do not store full card numbers on our servers.
• Access Controls: Access to personal data is restricted to authorized personnel on a need-to-know basis. All team members with data access undergo regular training on data privacy and security.
• Password Protection: User account passwords are stored using industry-standard hashing algorithms.
• Regular Security Audits: We conduct periodic security reviews and vulnerability assessments of our systems and infrastructure.
• Data Minimization: We collect only the information necessary for the purposes outlined in this policy.
• Incident Response: We maintain a documented data breach response plan and will notify affected users and relevant authorities in accordance with applicable law in the event of a confirmed breach.

Despite our best efforts, no method of transmission over the internet or method of electronic storage is 100% secure. We cannot guarantee the absolute security of your personal data, and you assume some risk in providing us with your information.

7. Your Privacy Rights

Depending on your state of residence and applicable law, you may have certain rights regarding your personal information. We honor these rights and have put processes in place to facilitate your exercise of them.

7.1 Rights Under the California Consumer Privacy Act (CCPA/CPRA)

If you are a California resident, you have the following rights under the CCPA and CPRA:

To exercise your California privacy rights, please submit a verifiable consumer request to us at [email protected]. We will respond to your request within 45 days as required by law, with a possible one-time 45-day extension where reasonably necessary.

7.2 General Privacy Rights for All Users

Regardless of your location, we strive to honor the following rights for all users of our website:

• Right of Access: You may request a copy of the personal information we hold about you.
• Right to Rectification: You may request that we correct or update inaccurate or incomplete personal information.
• Right to Erasure: You may request that we delete your personal data, subject to legal exceptions.
• Right to Restrict Processing: You may request that we limit the way we use your personal data.
• Right to Data Portability: You may request that we provide your personal data in a structured, machine-readable format, or transfer it to another service provider where technically feasible.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time.
• Right to Object to Marketing: You may opt out of direct marketing communications at any time.

To exercise any of these rights, please contact us at [email protected]. We may need to verify your identity before processing your request to ensure security and prevent fraud.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Our general retention practices are as follows:

When personal data is no longer required, we securely delete or anonymize it in accordance with our data retention schedule and applicable legal requirements.

9. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and provide personalized content and advertising. Cookies are small text files placed on your device when you visit a website.

9.1 Types of Cookies We Use

• Essential/Strictly Necessary Cookies: Required for the website to function properly (e.g., maintaining your session, remembering your shopping cart). These cannot be disabled.
• Performance/Analytics Cookies: Help us understand how visitors interact with our website by collecting anonymous usage data (e.g., Google Analytics).
• Functional Cookies: Remember your preferences such as language, region, and login details to improve your experience.
• Targeting/Advertising Cookies: Used to deliver relevant advertisements and track the effectiveness of our marketing campaigns.
• Third-Party Cookies: Placed by third-party services embedded in our website, such as social media share buttons and advertising networks.

9.2 Managing Your Cookie Preferences

You can manage your cookie preferences through our cookie consent tool displayed when you first visit our website. You may also control cookies through your browser settings by blocking or deleting them. Please note that disabling certain cookies may affect the functionality of our website and your user experience.

For more detailed information about the cookies we use, please refer to our Cookie Policy available on our website at meal-piada.rest.

10. Children's Privacy

We do not knowingly collect, use, or disclose personal information from individuals under 18 years of age. Our services are not directed at children, and we do not intentionally market to or target minors.

If you are a parent or guardian and believe that your child under the age of 18 has provided us with personal information without your consent, please contact us immediately at [email protected]. Upon verification, we will take prompt steps to delete such information from our systems.

In compliance with the Children's Online Privacy Protection Act (COPPA), we do not knowingly collect personal information from children under 13 years of age. If we discover that we have inadvertently collected information from a child under 13, we will delete it immediately.

11. International Data Transfers

Piada is a United States-based business, and your personal information is primarily collected, processed, and stored within the United States. However, because we work with certain third-party service providers that may operate in other countries, your personal data may be transferred to, stored, or processed outside of the United States.

When such transfers occur, we take steps to ensure that your personal information receives an adequate level of protection. These steps may include:

• Entering into data processing agreements with third-party service providers that incorporate appropriate data protection clauses
• Ensuring that any international transfers comply with applicable U.S. export laws and the privacy laws of the recipient country
• Only transferring data to countries or organizations that provide adequate protections for personal data

By using our website and services from outside the United States, you acknowledge that your personal information may be transferred to and processed in the United States, where data protection laws may differ from those in your country of residence.

12. Third-Party Websites and Links

Our website may contain links to third-party websites, social media platforms, payment portals, or other external services. This Privacy Policy applies solely to our website and services at meal-piada.rest. We are not responsible for the privacy practices or content of any third-party websites.

We encourage you to review the privacy policies of any third-party websites you visit, as their data collection and handling practices may differ significantly from ours. Clicking on third-party links is done at your own risk.

13. Do Not Track Signals

Some browsers include a "Do Not Track" (DNT) feature that signals websites not to track your online activity. Currently, there is no universally accepted standard for responding to DNT signals. As a result, our website does not currently respond to browser-based DNT signals.

However, you may control tracking through our cookie consent tool and your browser settings as described in Section 9 of this policy. We will continue to monitor industry developments regarding DNT standards and may update our practices accordingly.

14. Marketing and Opt-Out Rights

We may use your personal information to send you marketing and promotional communications about our products, special offers, new menu items, seasonal events, and loyalty programs. We will only send you marketing communications where we have a lawful basis to do so, such as your consent or our legitimate business interests.

14.1 Email Marketing

You may unsubscribe from our marketing emails at any time by:

• Clicking the "Unsubscribe" link found at the bottom of any marketing email we send
• Contacting us directly at [email protected] with "Unsubscribe" in the subject line
• Updating your communication preferences in your online account settings (if applicable)

Please note that even if you unsubscribe from marketing communications, we may still send you transactional emails related to your orders, account activity, or legal notices.

14.2 Targeted Advertising

You may opt out of interest-based advertising by visiting:

• Network Advertising Initiative (NAI) Opt-Out
• Digital Advertising Alliance (DAA) Opt-Out
• Your device settings for mobile advertising ID (IDFA on iOS, GAID on Android)

15. FTC Act Compliance

We operate in compliance with the Federal Trade Commission (FTC) Act, which prohibits unfair or deceptive acts or practices in commerce. Our privacy practices are designed to be transparent, fair, and consistent with the representations we make to consumers. We do not engage in deceptive data collection practices, and we honor the commitments outlined in this Privacy Policy.

If you believe we have engaged in any unfair or deceptive privacy practices, you may file a complaint with the Federal Trade Commission at ftc.gov/complaint.

16. Filing Complaints with Data Protection Authorities

If you have concerns about how we handle your personal information and are not satisfied with our response, you have the right to file a complaint with the appropriate data protection authority.

16.1 California Residents

California residents may file complaints with the California Privacy Protection Agency (CPPA):

16.2 All U.S. Consumers

All U.S. consumers may file complaints with the Federal Trade Commission (FTC):

Before filing a complaint with any authority, we encourage you to first contact us directly so that we have an opportunity to resolve your concern. We are committed to addressing privacy issues promptly and fairly.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will:

• Post the updated policy on this page with a revised "Last Updated" date
• Send you an email notification if the changes are significant (where we hold your email address)
• Display a prominent notice on our website homepage

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website and services after the posting of changes constitutes your acceptance of the updated policy.

18. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please do not hesitate to contact us. We are committed to responding to all privacy inquiries in a timely and thorough manner.

We aim to respond to all legitimate privacy inquiries within 30 days of receipt. For requests under the CCPA/CPRA, we will respond within 45 days, with the option to extend by an additional 45 days where reasonably necessary, as permitted by law.

When submitting a request, please include:

• Your full name and email address associated with your account
• A description of your request or concern
• Any relevant reference numbers (e.g., order numbers) to help us locate your data

We may need to verify your identity before processing certain requests to protect against unauthorized access to personal data. This verification process is carried out solely for security purposes and is not intended to discourage you from exercising your rights.