Privacy Policy
Welcome to Giordano's Pizza. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website at giordanospizza.click, place orders, interact with our services, or otherwise engage with us online or offline. Please read this policy carefully. If you do not agree with the terms of this Privacy Policy, please discontinue use of our website and services immediately.
This Privacy Policy applies to all users located in the United States. Depending on your state of residence, you may have additional rights under applicable state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and other applicable state regulations. We are also committed to complying with the Federal Trade Commission (FTC) Act, which prohibits unfair or deceptive practices in commerce, including the mishandling of consumer data.
1. Who We Are
Giordano's Pizza operates under the domain giordanospizza.click and provides food ordering, delivery, and related services to customers across the United States. For the purposes of this Privacy Policy, "we," "us," "our," or "the Company" refers to Giordano's Pizza and its operators.
For any privacy-related inquiries, you may contact us using the following information:
- Company Name: Giordano's Pizza
- Website: giordanospizza.click
- Email: [email protected]
2. Information We Collect
We collect a variety of information from and about users of our website and services. This information may be collected directly from you, automatically through your use of our website, or from third-party sources. The categories of personal information we collect include, but are not limited to, the following:
2.1 Personal Identification Information
When you register an account, place an order, subscribe to our newsletter, or contact us directly, we may collect:
- Full name
- Email address
- Phone number
- Billing and shipping address (including street address, city, state, and ZIP code)
- Username and password (encrypted)
- Date of birth (where applicable, for age verification purposes)
- Profile photo (if you choose to upload one)
2.2 Payment and Transaction Information
When you make a purchase through our website, we collect payment-related information necessary to process your transaction. This may include:
- Credit or debit card details (processed securely through third-party payment processors)
- Billing address associated with the payment method
- Order history, including items ordered, quantities, special instructions, and transaction amounts
- Refund and dispute records
Please note that we do not store full credit card numbers on our servers. All payment processing is handled by PCI-DSS-compliant third-party payment processors.
2.3 Usage Data and Technical Information
When you visit our website, our servers and analytics tools automatically collect certain technical information, including:
- IP address
- Browser type and version
- Operating system and device type
- Referring URLs and exit pages
- Pages visited on our website and time spent on each page
- Clickstream data and navigation patterns
- Date and time of your visit
- Search queries entered on our site
- Error logs and crash reports
2.4 Location Data
To provide accurate delivery services and location-based features, we may collect:
- Delivery address you provide during checkout
- General geographic location inferred from your IP address
- GPS or precise location data (only with your explicit consent, if you use our mobile application or enable location features in your browser)
2.5 Device Information
We may collect information about the device you use to access our website, including:
- Device identifiers (such as mobile advertising IDs)
- Hardware model
- Mobile network information
- Screen resolution and display settings
2.6 Communications Data
If you contact our customer support team, leave a review, or communicate with us via email, live chat, or other channels, we may retain records of those communications, including:
- The content of messages you send us
- Feedback, complaints, or suggestions
- Customer service call recordings (where permitted by law and with prior notice)
2.7 Cookies and Tracking Technologies
We use cookies, web beacons, pixel tags, and similar tracking technologies to enhance your experience on our website, analyze usage patterns, and deliver targeted advertising. For more detailed information, please refer to Section 8 of this Privacy Policy (Cookie Usage).
2.8 Information from Third Parties
We may receive information about you from third-party sources, such as:
- Social media platforms (if you log in using a social media account or interact with our social media pages)
- Marketing partners and advertising networks
- Delivery partner platforms
- Fraud prevention and identity verification services
3. How We Use Your Information
We use the personal information we collect for a variety of legitimate business purposes. These purposes include:
3.1 Providing and Managing Our Services
- Processing food orders and managing deliveries
- Creating and managing your user account
- Communicating with you about your orders, including confirmations, updates, and receipts
- Facilitating payment transactions and issuing refunds
- Responding to customer service inquiries and resolving disputes
- Personalizing your experience, such as remembering your preferences and past orders
3.2 Marketing and Promotional Communications
- Sending you newsletters, promotional offers, coupons, and updates about new menu items or services
- Conducting loyalty and rewards programs
- Delivering targeted advertisements on our website and third-party platforms based on your interests and browsing behavior
- Conducting surveys and gathering feedback to improve our offerings
You may opt out of receiving marketing communications at any time by clicking the "unsubscribe" link in any promotional email or by contacting us at [email protected]. Please note that even if you opt out of marketing communications, we may still send you transactional or service-related messages.
3.3 Analytics and Performance Improvement
- Analyzing website traffic and user behavior to improve our website and services
- Monitoring and evaluating the performance of our marketing campaigns
- Conducting internal research and development to improve our menus and customer experience
- Identifying trends and usage patterns to inform business decisions
3.4 Legal Compliance and Safety
- Complying with applicable federal and state laws and regulations
- Responding to lawful requests from government authorities, courts, or law enforcement agencies
- Detecting, preventing, and investigating fraud, security breaches, and other potentially prohibited or illegal activities
- Protecting the rights, property, and safety of Giordano's Pizza, our users, and the public
- Enforcing our Terms of Service and other applicable policies
3.5 Business Operations
- Managing our business operations, including accounting, auditing, and recordkeeping
- Facilitating corporate transactions such as mergers, acquisitions, or asset sales
- Maintaining the security and integrity of our systems and infrastructure
4. Sharing Your Information with Third Parties
We do not sell your personal information to third parties for monetary compensation. However, we may share your information in the following circumstances:
4.1 Service Providers and Business Partners
We work with trusted third-party service providers who assist us in operating our website and delivering our services. These providers are contractually obligated to handle your data only as instructed by us and in compliance with applicable law. Categories of service providers include:
- Payment processors: To securely process credit and debit card transactions
- Delivery and logistics partners: To fulfill food delivery orders
- Email and SMS marketing platforms: To send promotional and transactional communications
- Analytics providers: Such as Google Analytics, to analyze website usage and performance
- Customer relationship management (CRM) systems: To manage customer interactions
- Cloud hosting providers: To store and manage data securely
- Fraud prevention services: To detect and prevent fraudulent transactions
4.2 Legal Requirements
We may disclose your personal information if required to do so by law or in response to valid legal processes, including:
- Compliance with subpoenas, court orders, or other legal obligations
- Cooperation with law enforcement agencies in investigations
- Protection of the legal rights and interests of Giordano's Pizza
- Prevention of imminent harm to public safety
4.3 Business Transfers
In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal information may be transferred to the acquiring entity. We will notify you of any such change in ownership or control of your personal data through a notice posted on our website or sent directly to you.
4.4 With Your Consent
We may share your information with other third parties when we have obtained your explicit consent to do so. You may withdraw your consent at any time by contacting us at [email protected].
4.5 Aggregate and De-Identified Data
We may share aggregated, de-identified, or anonymized information — which cannot reasonably be used to identify you — with third parties for research, analytics, or marketing purposes without restriction.
5. Data Security
We take the security of your personal information seriously and implement a range of technical, administrative, and physical safeguards to protect it from unauthorized access, disclosure, alteration, or destruction. Our security measures include:
- Encryption: We use Secure Sockets Layer (SSL) / Transport Layer Security (TLS) technology to encrypt data transmitted between your browser and our servers.
- Access Controls: Access to your personal data is restricted to authorized personnel who need it to perform their job functions. All access is logged and monitored.
- Password Security: Passwords are stored in encrypted (hashed) form and are never stored in plain text.
- PCI-DSS Compliance: Our payment processing systems comply with the Payment Card Industry Data Security Standard (PCI-DSS).
- Firewalls and Intrusion Detection: We use industry-standard firewalls and intrusion detection/prevention systems to protect our network infrastructure.
- Regular Security Audits: We conduct periodic security assessments and vulnerability scans to identify and address potential weaknesses.
- Employee Training: Our staff receives regular training on data privacy and security best practices.
Despite our best efforts, no security system is completely impenetrable. In the event of a data breach that affects your personal information, we will notify you in accordance with applicable federal and state breach notification laws, including those required under state data breach statutes. We will take prompt action to contain and remediate any security incident.
6. Your Privacy Rights
Depending on your state of residence, you may have certain rights regarding your personal information. We are committed to honoring these rights in accordance with applicable law.
6.1 Rights for All U.S. Residents
All users of our services have the following rights:
- Right to Know: You have the right to know what personal information we collect, how we use it, and with whom we share it.
- Right to Opt Out of Marketing: You may opt out of receiving marketing communications at any time.
- Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
6.2 California Residents – CCPA/CPRA Rights
If you are a California resident, you are entitled to additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):
| Right | Description |
|---|---|
| Right to Know | Request disclosure of the categories and specific pieces of personal information we have collected about you in the past 12 months. |
| Right to Delete | Request deletion of your personal information, subject to certain exceptions permitted by law. |
| Right to Correct | Request correction of inaccurate personal information we hold about you. |
| Right to Opt Out of Sale/Sharing | Opt out of the sale or sharing of your personal information for cross-context behavioral advertising purposes. |
| Right to Limit Use of Sensitive Data | Limit the use and disclosure of sensitive personal information to specific permitted purposes. |
| Right to Data Portability | Receive a copy of your personal information in a portable, readily usable format. |
| Right to Non-Discrimination | We will not discriminate against you for exercising any of your CCPA/CPRA rights. |
To exercise any of your California privacy rights, please submit a verifiable consumer request to us by emailing [email protected]. We will respond to your request within 45 days as required by law. If we need additional time, we will inform you of the reason and extension period (up to 90 days total).
6.3 Rights for Residents of Other States
Residents of states including Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Texas (TDPSA), and other states with enacted privacy legislation may also have rights to access, correct, delete, and obtain a portable copy of their personal information, as well as the right to opt out of targeted advertising and profiling. We will honor applicable rights for residents of states with enforceable privacy laws. Please contact us at [email protected] to exercise your rights.
6.4 How to Submit a Privacy Rights Request
To submit a privacy rights request, please:
- Email us at [email protected] with the subject line "Privacy Rights Request"
- Include your full name, email address associated with your account, state of residence, and a clear description of the right you wish to exercise
We may need to verify your identity before processing your request. Identity verification may involve confirming information you have previously provided to us.
7. Data Retention
We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, to comply with our legal obligations, resolve disputes, enforce our agreements, and conduct our business operations. The following general retention periods apply:
| Category of Data | Retention Period |
|---|---|
| Account and profile information | Duration of account plus 3 years after closure |
| Order and transaction records | 7 years (for tax and accounting purposes) |
| Customer support communications | 3 years from the date of communication |
| Marketing preferences and consent records | 5 years or until consent is withdrawn |
| Website usage and analytics data | Up to 26 months |
| Cookies and tracking data | As specified in our Cookie Policy (typically 30 days to 2 years) |
| Fraud prevention records | Up to 10 years, as required by law |
When personal information is no longer needed, we will securely delete or anonymize it in accordance with our data retention and disposal procedures.
8. Cookie Usage
Our website uses cookies and similar tracking technologies to improve your browsing experience, analyze website traffic, and serve relevant advertisements. Cookies are small text files placed on your device when you visit our website.
The types of cookies we use include:
- Strictly Necessary Cookies: Essential for the website to function properly, including session management and cart functionality.
- Performance and Analytics Cookies: Help us understand how visitors interact with our website, including tools like Google Analytics.
- Functional Cookies: Remember your preferences, such as language settings and saved addresses.
- Marketing and Advertising Cookies: Used to deliver targeted advertisements based on your interests and browsing activity.
You can manage or disable cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of our website. For detailed information about the cookies we use, the purposes for which we use them, and how to manage your cookie preferences, please refer to our Cookie Policy.
We also honor Global Privacy Control (GPC) signals as required by applicable law (including the CPRA for California residents). If your browser transmits a GPC signal, we will treat it as an opt-out request from the sale and sharing of personal information.
9. Children's Privacy
Our website and services are intended for users who are 18 years of age or older. We do not knowingly collect, use, or disclose personal information from children under the age of 13, or where applicable, under the age of 16.
Our services comply with the Children's Online Privacy Protection Act (COPPA). If we become aware that we have inadvertently collected personal information from a child under the applicable age threshold without verifiable parental consent, we will take immediate steps to delete such information from our records.
If you are a parent or guardian and believe your child has provided personal information to us, please contact us immediately at [email protected] so that we can take appropriate action.
10. International Data Transfers
Giordano's Pizza operates primarily within the United States. However, some of our third-party service providers, partners, and technology infrastructure may be located in or operate from other countries. If your personal information is transferred to, stored in, or processed in a country other than the United States, we will take appropriate safeguards to ensure that your data continues to receive an adequate level of protection consistent with this Privacy Policy and applicable law.
Safeguards for international transfers may include:
- Entering into data processing agreements with standard contractual clauses or equivalent protections
- Ensuring that third-party recipients in other countries maintain appropriate security and privacy standards
- Transferring data only to countries that provide an adequate level of data protection as recognized by applicable authorities
By using our website and services, you acknowledge and consent to the transfer of your information to the United States and other countries as described in this section.
11. FTC Compliance and Consumer Protection
Giordano's Pizza is committed to fair information practices in accordance with the Federal Trade Commission (FTC) Act. We do not engage in unfair or deceptive practices in connection with the collection, use, or disclosure of personal information. Our privacy practices are designed to be transparent, and we strive to honor the representations we make in this Privacy Policy.
If you believe we have violated any applicable consumer protection laws or engaged in unfair or deceptive practices regarding your personal information, you have the right to file a complaint with the Federal Trade Commission (FTC) at:
600 Pennsylvania Avenue, NW
Washington, D.C. 20580
Website: www.ftc.gov
Phone: 1-877-FTC-HELP (1-877-382-4357)
12. How to File a Privacy Complaint
If you have concerns about how we handle your personal information, we encourage you to contact us first so that we can address your concerns directly.
Step 1: Contact us at [email protected] with a detailed description of your concern. We will acknowledge your complaint within 5 business days and aim to resolve it within 30 days.
Step 2: If you are not satisfied with our response, you may escalate your complaint to the relevant authority based on your state of residence:
| State | Relevant Authority | Website |
|---|---|---|
| California | California Privacy Protection Agency (CPPA) | cppa.ca.gov |
| All States | Federal Trade Commission (FTC) | ftc.gov |
| All States | Your State Attorney General's Office | Visit your state government website |
13. Third-Party Links and Websites
Our website may contain links to third-party websites, applications, or services that are not owned or controlled by Giordano's Pizza. This Privacy Policy applies solely to our website and services. We have no control over and assume no responsibility for the privacy practices, content, or security of any third-party sites. We encourage you to review the privacy policies of any third-party websites you visit.
14. Do Not Track Signals
Some web browsers include a "Do Not Track" (DNT) feature that signals websites not to track users' online activities. As there is currently no industry-wide consensus on how to interpret and respond to DNT signals, our website does not alter its data collection or use practices in response to DNT signals at this time. However, as noted in Section 8, we do honor Global Privacy Control (GPC) signals where required by applicable law.
15. Changes to This Privacy Policy
We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. When we make material changes, we will:
- Post the revised Privacy Policy on this page with an updated "Last Updated" date
- Send an email notification to registered users at the email address associated with their account (for significant changes)
- Display a prominent notice on our website for a reasonable period following any material change
Your continued use of our website or services after any changes to this Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.
16. Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or our data handling practices, please do not hesitate to contact us:
Giordano's Pizza — Privacy Inquiries
- Website: giordanospizza.click
- Email: [email protected]
We are committed to resolving privacy-related questions and concerns promptly and transparently. Our team will make every effort to respond to your inquiry within 5 business days.