Privacy Policy

This Privacy Policy describes how Anthony's Coal Fired Pizza ("we," "us," "our," or "the Company") collects, uses, discloses, and safeguards your personal information when you visit our website at acfpizza.digital, place orders, use our digital services, or otherwise interact with us. Please read this policy carefully. By accessing or using our website and services, you acknowledge that you have read, understood, and agree to the practices described herein.

We are committed to protecting your privacy and handling your personal data with transparency, integrity, and in full compliance with applicable United States federal and state privacy laws, including but not limited to the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), and the Federal Trade Commission Act (FTC Act). If you do not agree with this Privacy Policy, please discontinue use of our website and services immediately.

1. About Us

Anthony's Coal Fired Pizza is a food service business operating within the United States. We are dedicated to providing high-quality, coal-fired pizza and related food products to our customers through our physical locations and digital ordering platforms. For all privacy-related matters, you may contact us using the information provided in the Contact Us section of this policy.

2. Scope of This Privacy Policy

This Privacy Policy applies to all personal information collected through:

• Our website located at acfpizza.digital and any subdomains associated with it;
• Online ordering systems and digital menus operated by or on behalf of Anthony's Coal Fired Pizza;
• Email communications, customer support interactions, and feedback forms;
• Loyalty programs, promotions, contests, or surveys we administer;
• Any other digital or in-store touchpoint where personal information is collected and this policy is referenced.

This policy does not apply to third-party websites, applications, or services that may be linked from our website. We are not responsible for the privacy practices of those third parties, and we encourage you to review their individual privacy policies before providing any personal information.

3. Information We Collect

We collect various categories of personal information depending on how you interact with our website and services. The categories include, but are not limited to, the following:

3.1 Personal Identification Information

When you create an account, place an order, or contact us, we may collect:

• Full name
• Email address
• Phone number
• Billing and delivery address (including street address, city, state, and ZIP code)
• Date of birth (where required for age verification or loyalty program purposes)
• Username and password (for account holders)

3.2 Payment and Financial Information

When you complete a purchase, we collect payment details necessary to process your transaction. This may include credit or debit card numbers, expiration dates, and billing information. We do not store full payment card numbers on our servers. Payment processing is handled by PCI-DSS compliant third-party payment processors, and we receive only tokenized or partial card data (e.g., last four digits) for reference purposes.

3.3 Order and Transaction Data

• Order history, including items ordered, quantities, and prices
• Delivery instructions and special dietary requests
• Receipts and transaction confirmations
• Loyalty points balances and redemption history

3.4 Usage and Behavioral Data

When you visit our website, we automatically collect certain technical and behavioral data, including:

• IP address and approximate geographic location derived from your IP address
• Browser type, version, and operating system
• Pages visited, links clicked, and features used on our website
• Time and duration of visits, session data, and navigation paths
• Referring URLs (the website you visited before landing on ours)
• Search queries entered on our website
• Scroll depth and interaction patterns

3.5 Device Information

• Device type (desktop, mobile, tablet)
• Device identifiers and advertising identifiers (where applicable)
• Screen resolution and display settings
• Mobile network information

3.6 Cookie and Tracking Technology Data

We use cookies, pixel tags, web beacons, and similar tracking technologies to collect data about your browsing behavior on our website. For a detailed explanation of the cookies we use and your choices, please refer to our Cookie Policy (Section 9 of this document).

3.7 Communications and Customer Support Data

• Content of emails, live chat transcripts, or messages you send us
• Records of customer service inquiries and resolutions
• Survey responses, reviews, and feedback submitted through our platforms
• Social media interactions where you tag or message our official accounts

3.8 Marketing and Preference Data

• Email marketing subscription status and preferences
• SMS/text marketing opt-in status
• Communication preferences (frequency, format, topics)
• Promotional code usage and campaign attribution data

3.9 Information You Provide Voluntarily

You may also provide information voluntarily when participating in contests, sweepstakes, or promotions we run, when submitting job applications, when enrolling in our loyalty or rewards program, or when posting reviews or comments on our digital platforms.

3.10 Information from Third Parties

We may receive personal information about you from third parties, including:

• Third-party food delivery platforms (e.g., DoorDash, Uber Eats, Grubhub) when you place orders through those services
• Analytics providers such as Google Analytics
• Social media platforms when you log in using a social login feature or interact with our social media advertisements
• Payment processors confirming successful or failed transactions
• Marketing partners and list providers (where applicable and legally permitted)

4. How We Use Your Information

We use the personal information we collect for the following purposes:

4.1 Service Provision and Order Fulfillment

• Processing and fulfilling food orders placed through our website or third-party delivery platforms
• Managing your customer account, including authentication and access controls
• Communicating order confirmations, updates, delivery status, and receipts
• Resolving issues related to orders, returns, or complaints
• Managing loyalty program accounts, points, and rewards

4.2 Customer Support

• Responding to your inquiries, questions, and feedback
• Investigating and resolving disputes or complaints
• Maintaining records of customer interactions for quality assurance purposes

4.3 Personalization

• Personalizing your experience on our website by showing relevant menu items, promotions, or content based on your order history and preferences
• Recommending products or offers that may interest you
• Remembering your saved preferences, such as delivery addresses and favorite orders

4.4 Marketing and Promotional Communications

• Sending you email newsletters, promotional offers, and special announcements (subject to your opt-in preferences)
• Sending SMS or text message marketing communications where you have provided explicit consent
• Administering contests, sweepstakes, or loyalty program promotions
• Conducting targeted digital advertising on platforms such as Google, Facebook, and Instagram

4.5 Analytics and Website Improvement

• Analyzing website traffic, user behavior, and usage patterns to improve the functionality and user experience of our website
• Measuring the effectiveness of our marketing campaigns and promotions
• Conducting internal research, reporting, and business analysis
• Identifying and resolving technical bugs, errors, or security vulnerabilities

4.6 Legal Compliance and Safety

• Complying with applicable federal and state laws and regulations
• Responding to lawful requests from law enforcement, regulatory authorities, or courts
• Protecting the rights, property, and safety of Anthony's Coal Fired Pizza, our customers, and the public
• Detecting, preventing, and investigating fraud, unauthorized access, and other illegal activities
• Enforcing our Terms of Service and other legal agreements

4.7 Business Operations

• Managing our internal business operations, including accounting, auditing, and reporting
• In connection with corporate transactions such as mergers, acquisitions, or asset sales (subject to appropriate confidentiality obligations)

5. Legal Basis for Processing

We process your personal information on the following legal grounds, consistent with applicable U.S. law and sound privacy principles:

• Contract Performance: Processing necessary to fulfill your orders and deliver the services you have requested.
• Legitimate Business Interests: Processing necessary for our legitimate business interests, including fraud prevention, website security, and business analytics, provided those interests are not overridden by your rights.
• Consent: Where you have given us specific consent to process your data for a particular purpose, such as marketing communications or targeted advertising. You may withdraw consent at any time.
• Legal Obligation: Processing required to comply with applicable federal and state laws, including tax, accounting, and consumer protection regulations.

6. Sharing Your Information with Third Parties

We do not sell your personal information to third parties in the traditional sense. However, we may share your information with the following categories of third parties under the circumstances described below:

6.1 Service Providers and Vendors

We engage third-party companies and individuals to perform functions on our behalf, including but not limited to:

• Payment processors (e.g., Stripe, Square) for secure transaction handling
• Cloud hosting and infrastructure providers (e.g., Amazon Web Services, Google Cloud)
• Email and SMS marketing platforms (e.g., Mailchimp, Klaviyo, Twilio)
• Analytics providers (e.g., Google Analytics, Hotjar)
• Customer relationship management (CRM) software providers
• Third-party food delivery platforms
• IT support and cybersecurity service providers
• Loyalty program platform providers

These service providers are contractually obligated to use your personal information only as directed by us and in accordance with this Privacy Policy. They are not permitted to use your data for their own independent purposes.

6.2 Legal Requirements and Law Enforcement

We may disclose your personal information if required to do so by law or in response to valid legal processes, including subpoenas, court orders, or government investigations. We may also disclose information when we believe in good faith that disclosure is necessary to:

• Comply with a legal obligation under federal or state law;
• Protect and defend the rights or property of Anthony's Coal Fired Pizza;
• Prevent or investigate possible wrongdoing in connection with our services;
• Protect the personal safety of users of our services or the public.

6.3 Business Transfers

In the event of a merger, acquisition, sale of assets, bankruptcy, or other corporate transaction, your personal information may be transferred to or acquired by a successor entity. We will notify you via email or prominent notice on our website of any such change in ownership that materially affects the handling of your personal information.

6.4 Advertising and Marketing Partners

We may share limited personal information (such as email addresses in hashed form or advertising identifiers) with social media platforms and digital advertising networks for the purpose of serving you targeted advertisements. You have the right to opt out of this type of data sharing, as described in the Your Privacy Rights section below.

6.5 With Your Consent

We may share your information with other third parties when you have provided explicit consent for us to do so.

7. Data Security

We take the security of your personal information seriously and implement a range of technical, administrative, and physical safeguards designed to protect your data from unauthorized access, use, disclosure, alteration, and destruction. These measures include:

7.1 Technical Safeguards

• Secure Socket Layer (SSL) / Transport Layer Security (TLS) encryption for all data transmitted between your browser and our website
• Encryption of sensitive data at rest using industry-standard encryption protocols
• Firewalls, intrusion detection systems, and network monitoring
• Regular vulnerability scanning and penetration testing
• Multi-factor authentication (MFA) for system access by our staff

7.2 Administrative Safeguards

• Strict access controls limiting employee access to personal data on a need-to-know basis
• Regular staff training on data privacy and security best practices
• Vendor due diligence and data processing agreements with all third-party service providers
• Documented incident response and breach notification procedures

7.3 Physical Safeguards

• Secured physical access to servers and data storage facilities
• Secure disposal of physical documents containing personal information

Despite our best efforts, no method of electronic transmission or storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected individuals and relevant authorities as required by applicable law, including any applicable state data breach notification laws.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The following general retention periods apply:

When personal information is no longer required, we will securely delete, anonymize, or aggregate it in a manner that prevents re-identification.

9. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and support our marketing efforts. Cookies are small text files stored on your device by your web browser at our request.

9.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the operation of our website (e.g., session management, shopping cart functionality). These cannot be disabled.
• Performance and Analytics Cookies: Help us understand how visitors interact with our website by collecting aggregated usage data (e.g., Google Analytics).
• Functional Cookies: Allow our website to remember your preferences, such as saved delivery addresses or language settings.
• Targeting and Advertising Cookies: Used to deliver relevant advertisements on our website and third-party platforms, and to measure the effectiveness of our advertising campaigns.

9.2 Managing Cookie Preferences

You can control and manage cookies through your browser settings. Most browsers allow you to block or delete cookies. However, disabling certain cookies may affect the functionality of our website. You may also opt out of targeted advertising cookies by visiting:

• Network Advertising Initiative (NAI) Opt-Out Tool
• Digital Advertising Alliance (DAA) Opt-Out Tool
• Google Analytics Opt-Out: Google Analytics Opt-out Browser Add-on

We may also utilize a cookie consent banner on our website to allow you to manage your cookie preferences at the time of your visit.

10. Your Privacy Rights

Depending on your state of residence within the United States, you may have the following rights with respect to your personal information:

10.1 Rights Available to All U.S. Residents

• Right to Know: You have the right to request that we disclose what personal information we collect, use, and share about you.
• Right to Correct: You have the right to request correction of inaccurate personal information we hold about you.
• Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions (e.g., legal obligations).
• Right to Opt Out of Marketing: You may opt out of receiving marketing communications from us at any time by clicking "Unsubscribe" in any email or by contacting us directly at [email protected].
• Right to Data Portability: Where technically feasible, you may request a copy of your personal information in a structured, commonly used, and machine-readable format.

10.2 Additional Rights for California Residents (CCPA/CPRA)

If you are a California resident, you are entitled to the following additional rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA):

• Right to Know (Detailed): The right to request specific pieces of personal information collected about you in the past 12 months, including the categories of personal information, the sources from which it was collected, the purposes for collection, and the categories of third parties with whom it was shared.
• Right to Opt Out of Sale or Sharing: The right to opt out of the sale or sharing of your personal information with third parties for cross-context behavioral advertising. To exercise this right, click the "Do Not Sell or Share My Personal Information" link on our website or contact us at [email protected].
• Right to Limit Use of Sensitive Personal Information: You have the right to limit our use of sensitive personal information (as defined by the CPRA) to what is necessary for the performance of our services.
• Right Against Automated Decision-Making: The right to opt out of automated decision-making processes that produce legal or similarly significant effects.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you goods or services, charge different prices, or provide a lower quality of service because you have exercised your privacy rights.

10.3 How to Submit a Privacy Rights Request

To exercise any of the rights described above, please contact us using one of the following methods:

• Email: [email protected]
• Website: acfpizza.digital (through our contact form)

We will verify your identity before processing your request to protect the security of your personal information. You may be asked to provide information that matches what we have on file for you. We will respond to verifiable consumer requests within 45 days of receipt. If we require additional time, we will notify you of the extension and the reason within the initial 45-day period. You may designate an authorized agent to submit requests on your behalf; authorized agents must provide written authorization from you.

11. Children's Privacy

Our website and digital services are not directed at children under the age of 18, and we do not knowingly collect, use, or disclose personal information from children under the age of 13 in violation of the Children's Online Privacy Protection Act (COPPA). If you are a parent or guardian and believe that your child under the age of 13 has provided personal information to us without your consent, please contact us immediately at [email protected]. Upon verification, we will take prompt steps to delete such information from our records.

If you are between the ages of 13 and 17, you should not use our website or services without the involvement and consent of a parent or legal guardian. We reserve the right to restrict access to our services for users we reasonably believe to be under the age of 18.

12. International Data Transfers

Anthony's Coal Fired Pizza is based in the United States, and the personal information we collect is primarily stored and processed on servers located within the United States. However, some of our third-party service providers may be located in other countries, and your personal information may be transferred to, stored in, or processed in countries outside of the United States.

When we transfer personal information outside of the United States, we take steps to ensure that adequate protections are in place consistent with applicable law, including entering into appropriate data processing agreements and ensuring that any overseas recipients provide a standard of protection comparable to that available in the United States. By using our website and services, you acknowledge and consent to the transfer of your personal information to countries outside your country of residence, including the United States, which may have data protection laws that differ from those in your country.

13. Third-Party Links and Services

Our website may contain links to third-party websites, applications, or services, including social media platforms, food delivery services, and promotional partners. Clicking on these links may allow those third parties to collect or share data about you. We do not control these third-party services and are not responsible for their privacy practices. We encourage you to read the privacy policies of any third-party site or service you visit before providing any personal information. Our inclusion of a link to a third-party site does not constitute an endorsement of that site's privacy practices.

14. Do Not Track Signals

Some web browsers may transmit "Do Not Track" (DNT) signals to websites. As there is currently no universally accepted standard for how websites should respond to DNT signals, our website does not currently respond to browser-initiated DNT signals. We continue to monitor developments in this area and will update our practices if a standard is established. In the meantime, you can use the opt-out tools described in our Cookie section to control tracking.

15. How to File a Privacy Complaint

If you believe that we have not complied with this Privacy Policy or applicable privacy laws, we encourage you to first contact us directly so that we can attempt to resolve your concern:

• Email: [email protected]

We take all privacy complaints seriously and will respond within a reasonable timeframe to address your concerns. If you are not satisfied with our response, you may also have the right to file a complaint with a relevant regulatory authority:

15.1 For California Residents

California residents may file a complaint with the California Privacy Protection Agency (CPPA) or the California Attorney General's Office:

• California Privacy Protection Agency: cppa.ca.gov
• California Attorney General: oag.ca.gov

15.2 For All U.S. Residents

Residents throughout the United States may report concerns related to deceptive or unfair business practices to the Federal Trade Commission (FTC):

• FTC Complaint Assistant: reportfraud.ftc.gov
• FTC Website: www.ftc.gov

15.3 State-Specific Authorities

If you reside in a state with a dedicated data protection or consumer protection authority, you may also have the right to file a complaint with that state's relevant agency. Many states, including Virginia, Colorado, Connecticut, Texas, and others, have enacted comprehensive consumer data privacy laws with their own enforcement mechanisms. We encourage you to consult the attorney general's office in your state for further guidance.

16. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time in response to changes in our business practices, applicable laws, or industry standards. When we make material changes to this policy, we will:

• Update the "Last Updated" date at the top of this page;
• Post the revised policy on our website at acfpizza.digital;
• Where required by law, or where we deem it appropriate, notify you via email or through a prominent notice on our website prior to the changes taking effect.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information. Your continued use of our website and services after the effective date of any revised policy constitutes your acceptance of the updated terms.

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact us. We are committed to addressing your privacy inquiries promptly and transparently.

When contacting us about a privacy matter, please include your full name, the email address associated with your account (if applicable), and a clear description of your inquiry or request. This will help us respond to you efficiently and accurately.