Privacy Policy

Welcome to Davanni's. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website davannispizza.click (the "Website"), place orders, or otherwise interact with our services. Please read this policy carefully. If you disagree with its terms, please discontinue use of our Website immediately.

This Privacy Policy applies to all information collected through our Website, as well as any related services, sales, marketing, or events. By accessing or using our Website, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

1. About Us

Davanni's is a food service business operating in the United States. We are dedicated to providing high-quality food products and an exceptional customer experience both online and in-store. For the purposes of this Privacy Policy, Davanni's acts as the data controller responsible for your personal information.

• Company Name: Davanni's
• Website: davannispizza.click
• Email: [email protected]

2. Information We Collect

We collect information about you in a variety of ways when you interact with our Website and services. The categories of information we collect include:

2.1 Personal Information You Provide Directly

When you voluntarily provide information to us — such as when you create an account, place an order, subscribe to our newsletter, fill out a contact form, or participate in promotions — we may collect:

• Name: First and last name for account creation and order processing.
• Contact Details: Email address, phone number, and mailing/delivery address.
• Payment Information: Credit card numbers, debit card numbers, billing address, and other payment details. Note that payment card data is processed through secure third-party payment processors and we do not store full card numbers on our servers.
• Account Credentials: Username and password (stored in encrypted form).
• Order History: Details of food items ordered, quantities, special instructions, and delivery preferences.
• Communications: Messages, feedback, complaints, or inquiries you send to us via email or contact forms.
• Promotional Participation: Information you provide when entering contests, surveys, or loyalty programs.

2.2 Information Collected Automatically

When you visit our Website, certain information is collected automatically through cookies, web beacons, pixels, and similar tracking technologies. This includes:

• Device Information: IP address, device type, operating system, browser type and version, device identifiers, and screen resolution.
• Usage Data: Pages visited, links clicked, time spent on each page, referring URLs, search queries on our Website, and exit pages.
• Location Data: General geographic location derived from your IP address (city and state level). We do not collect precise GPS location without your explicit consent.
• Log Data: Server logs that record requests made to our servers, timestamps, error logs, and access logs.
• Cookie Data: Information stored in cookies placed on your device. See Section 8 for detailed information about our use of cookies.

2.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Social Media Platforms: If you log in or connect your account through a social media service (e.g., Facebook, Google), we receive basic profile information such as your name, email address, and profile picture as permitted by your privacy settings on that platform.
• Analytics Providers: Third-party analytics services that help us understand how visitors use our Website.
• Delivery Partners: If you order delivery through a third-party delivery platform, we may receive order-related information to fulfill and coordinate your delivery.
• Marketing Partners: Information from advertising networks and marketing partners that help us reach new customers and measure ad effectiveness.

2.4 Information We Do Not Collect

We do not intentionally collect sensitive personal information such as Social Security numbers, government-issued identification numbers, medical or health information, genetic data, biometric data, or racial or ethnic origin data unless required by law or explicitly requested with your consent.

3. How We Use Your Information

We use the information we collect for a variety of legitimate business purposes. Specifically, we use your information to:

3.1 Provide and Manage Our Services

• Process and fulfill your food orders, including coordinating delivery or pickup.
• Create and manage your account on our Website.
• Process payments and send transaction confirmations.
• Communicate with you about your orders, including status updates and notifications.
• Respond to your questions, comments, and customer service requests.
• Resolve disputes and troubleshoot problems.

3.2 Improve Our Website and Services

• Analyze usage patterns and trends to improve the functionality and design of our Website.
• Conduct research and analysis to better understand our customers' preferences.
• Test new features and improvements before rolling them out broadly.
• Monitor and fix technical issues and bugs on our Website.

3.3 Marketing and Promotional Communications

• Send you promotional emails, newsletters, and special offers about our products if you have opted in to receive such communications.
• Serve targeted advertisements on our Website and third-party platforms based on your browsing history and interests.
• Notify you about contests, loyalty programs, and other promotions.
• Measure the effectiveness of our marketing campaigns.

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any marketing email or by contacting us at [email protected]. Please note that even if you opt out of marketing emails, we may still send you transactional and service-related communications.

3.4 Legal Compliance and Safety

• Comply with applicable laws, regulations, legal processes, and governmental requests.
• Enforce our Terms of Service and other agreements.
• Detect, prevent, and address fraud, security breaches, and other harmful activities.
• Protect the rights, property, and safety of Davanni's, our customers, and the public.

3.5 Business Operations

• Maintain and improve our internal records and business processes.
• Conduct audits of our operations and services.
• Evaluate and facilitate mergers, acquisitions, or other business transactions.

4. Legal Basis for Processing (Applicable Laws)

As a business operating in the United States, our data practices are governed by applicable federal and state laws, including:

• Federal Trade Commission Act (FTC Act): We comply with the FTC's standards for unfair or deceptive practices, including maintaining reasonable data security standards and honoring our privacy commitments.
• CAN-SPAM Act: Our commercial email communications comply with the CAN-SPAM Act requirements, including providing clear opt-out mechanisms in every marketing email.
• California Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA): If you are a California resident, you have specific rights regarding your personal information. Please see Section 7 for a detailed description of California-specific rights.
• Children's Online Privacy Protection Act (COPPA): We do not knowingly collect personal information from children under the age of 13. Please see Section 10 for our children's privacy policy.
• State-Specific Privacy Laws: We also comply with applicable privacy laws in states where we operate or where our users reside, including but not limited to the Virginia Consumer Data Protection Act (VCDPA), the Colorado Privacy Act (CPA), and other applicable state laws.

5. Sharing Your Information with Third Parties

We do not sell, trade, or rent your personal information to unaffiliated third parties for their independent use. However, we may share your information in the following circumstances:

5.1 Service Providers

We share your information with trusted third-party companies and individuals who assist us in operating our Website and delivering our services. These service providers are contractually obligated to use your information only as directed by us and in accordance with this Privacy Policy. Categories of service providers include:

• Payment Processors: To securely handle credit and debit card transactions.
• Delivery Services: To coordinate the delivery of your food orders.
• Cloud Hosting Providers: To store and process data on our behalf.
• Email Marketing Platforms: To send promotional and transactional emails.
• Analytics Providers: Such as Google Analytics, to analyze Website traffic and usage patterns.
• Customer Support Tools: Platforms that help us manage and respond to customer inquiries.
• Fraud Prevention Services: To detect and prevent fraudulent transactions and account activity.

5.2 Business Transfers

If Davanni's is involved in a merger, acquisition, sale of assets, reorganization, or bankruptcy, your personal information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our Website of any such change in ownership or use of your personal information, and we will inform you of any choices you may have regarding your information.

5.3 Legal Requirements

We may disclose your information if required to do so by law or in the good-faith belief that such action is necessary to:

• Comply with a legal obligation, subpoena, court order, or governmental request.
• Protect and defend the rights or property of Davanni's.
• Prevent or investigate possible wrongdoing in connection with our services.
• Protect the personal safety of users of our Website or the public.
• Protect against legal liability.

5.4 With Your Consent

We may share your information with other third parties when we have your explicit consent to do so. For example, if you choose to participate in a joint promotion with a partner restaurant or brand, we may share relevant information with that partner as disclosed at the time you provide consent.

5.5 Aggregated and De-Identified Data

We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you with third parties for marketing, research, industry analysis, and other business purposes. This information does not constitute personal information under applicable laws.

6. Data Security

We take the security of your personal information seriously and implement a variety of technical, administrative, and physical safeguards designed to protect your information from unauthorized access, disclosure, alteration, and destruction. Our security measures include:

• Encryption: We use SSL/TLS encryption to protect data transmitted between your browser and our servers. Sensitive data, including passwords, is stored using industry-standard hashing and encryption algorithms.
• Access Controls: Access to personal information is restricted to authorized employees, contractors, and service providers who need access to perform their job functions. We enforce role-based access controls and least-privilege principles.
• Secure Payment Processing: Payment card information is processed through PCI-DSS compliant payment processors. We do not store complete credit card numbers on our servers.
• Regular Security Assessments: We conduct periodic security assessments, vulnerability scans, and penetration testing to identify and address potential security weaknesses.
• Incident Response: We maintain an incident response plan to promptly detect, contain, and respond to security breaches. In the event of a data breach affecting your information, we will notify you and applicable regulatory authorities as required by law.
• Employee Training: Our team members receive regular training on data privacy and security best practices.

Despite our best efforts, no method of transmission over the internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. You are responsible for maintaining the confidentiality of your account credentials and should notify us immediately at [email protected] if you suspect any unauthorized use of your account.

7. Your Privacy Rights

Depending on your state of residence, you may have certain rights with respect to your personal information. We are committed to honoring these rights.

7.1 Rights Available to All Users

• Right to Know / Access: You have the right to request a copy of the personal information we hold about you and to receive information about how we collect, use, and share that information.
• Right to Correction: You have the right to request that we correct inaccurate or incomplete personal information we hold about you.
• Right to Deletion: You have the right to request that we delete your personal information, subject to certain legal exceptions (e.g., information we are required to retain by law or for legitimate business purposes).
• Right to Opt Out of Marketing: You have the right to opt out of receiving marketing communications from us at any time.
• Right to Data Portability: You may request a copy of your personal information in a structured, machine-readable format.

7.2 California Residents — CCPA/CPRA Rights

If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) grants you the following additional rights:

• Right to Know Categories and Specific Pieces: You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which we collected it, our business or commercial purpose for collecting or sharing it, and the categories of third parties with whom we share it.
• Right to Opt Out of Sale or Sharing: California residents have the right to opt out of the "sale" or "sharing" of their personal information for cross-context behavioral advertising. We do not sell your personal information for monetary consideration. However, our use of certain advertising cookies and tracking technologies may constitute "sharing" under the CPRA. You may opt out by using our Cookie Preference Center or by submitting a request to us.
• Right to Limit Use of Sensitive Personal Information: If we collect sensitive personal information (as defined by CPRA), you have the right to limit its use to purposes permitted by law.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you goods or services, charge you a different price, or provide a different level of quality because you exercised your privacy rights.
• Right to Appeal: If we deny your privacy rights request, you have the right to appeal our decision by contacting us and requesting a review.

How to Submit a CCPA/CPRA Request: You may submit a request to exercise your California privacy rights by emailing us at [email protected] with the subject line "California Privacy Rights Request." We will respond to verifiable requests within 45 days as required by law. We may extend this period by an additional 45 days when reasonably necessary with notice to you.

7.3 Residents of Other States

Residents of Virginia, Colorado, Connecticut, Texas, and other states with applicable privacy laws may have similar rights to access, correct, delete, and port their personal information, as well as the right to opt out of targeted advertising and profiling. To exercise these rights, please contact us using the information provided in Section 12.

7.4 How to Exercise Your Rights

To exercise any of the rights described above, please contact us at:

• Email: [email protected]

We may need to verify your identity before processing your request to ensure we do not disclose or delete information belonging to another person. Verification may require you to provide certain identifying information that matches the information we have on file for you. We will not use the information you provide to verify your identity for any purpose other than processing your privacy rights request.

You may also designate an authorized agent to submit requests on your behalf. Authorized agents must provide written authorization or a power of attorney signed by you, and we may require you to verify your identity directly with us.

8. Cookies and Tracking Technologies

Our Website uses cookies, web beacons, pixels, and similar tracking technologies to collect information about your browsing activity and to enhance your experience on our Website. Cookies are small text files stored on your device when you visit a website.

8.1 Types of Cookies We Use

8.2 Managing Your Cookie Preferences

You can manage your cookie preferences through your browser settings. Most browsers allow you to refuse cookies or to receive an alert when cookies are being sent. However, disabling certain cookies may affect the functionality of our Website. You may also opt out of interest-based advertising by visiting the Digital Advertising Alliance's opt-out tool at www.aboutads.info/choices or the Network Advertising Initiative at www.networkadvertising.org/choices.

For more detailed information about the specific cookies we use and how to manage them, please refer to our full Cookie Policy, which is available on our Website.

9. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, as described in this Privacy Policy, unless a longer retention period is required or permitted by law. Our general retention guidelines are as follows:

When personal information is no longer needed, we securely delete or anonymize it in accordance with our data retention and disposal procedures.

10. Children's Privacy

Our Website and services are intended for use by individuals who are at least 18 years of age. We do not knowingly collect personal information from children under the age of 13 in accordance with the Children's Online Privacy Protection Act (COPPA), or from minors under the age of 18 without parental consent where required by applicable law.

If you are under 18 years of age, please do not use our Website or provide any personal information to us. If you are a parent or guardian and believe that your child has provided personal information to us, please contact us immediately at [email protected] and we will take steps to delete such information promptly.

We do not knowingly market to children, and our Website does not include features designed to attract individuals under the age of 18. If we discover that we have inadvertently collected personal information from a child, we will delete it as quickly as practicable.

11. International Data Transfers

Davanni's is based in the United States, and we primarily collect, store, and process data within the United States. However, some of our third-party service providers may be located in or may operate servers in other countries, which means your personal information may be transferred to, stored in, and processed in countries outside of the United States.

The United States and other countries may not have data protection laws that are equivalent to those in your home jurisdiction. When we transfer personal information internationally, we take steps to ensure that appropriate safeguards are in place to protect your information, including:

• Selecting service providers who commit to maintaining adequate data protection standards.
• Entering into data processing agreements that include appropriate data transfer mechanisms and safeguards.
• Ensuring that transfers are made in accordance with applicable privacy laws.

By using our Website and providing your personal information to us, you acknowledge that your information may be transferred to and processed in the United States and other countries as described in this Privacy Policy.

12. Contact Us for Privacy Inquiries

If you have questions, concerns, or requests related to this Privacy Policy or our data practices, please do not hesitate to contact us. We are committed to addressing your privacy inquiries in a timely and transparent manner.

When contacting us about a privacy matter, please include:

• Your full name and email address associated with your account (if applicable).
• A clear description of your privacy inquiry or request.
• The specific right or concern you wish to address.

We aim to respond to all privacy-related inquiries within 30 days. For verifiable consumer requests under CCPA/CPRA, we will respond within the timeframe required by law (generally 45 days, with a possible 45-day extension).

13. How to File a Complaint

If you believe we have not adequately addressed your privacy concerns, you have the right to file a complaint with the appropriate data protection or consumer protection authority. In the United States, the following regulatory bodies handle privacy and consumer protection complaints:

13.1 Federal Trade Commission (FTC)

The FTC is the primary federal agency responsible for consumer protection, including enforcing privacy standards for commercial entities. You may file a complaint with the FTC at:

• Website: reportfraud.ftc.gov
• Phone: 1-877-FTC-HELP (1-877-382-4357)
• Mail: Federal Trade Commission, 600 Pennsylvania Avenue, NW, Washington, DC 20580

13.2 California Attorney General (for California Residents)

If you are a California resident and believe your CCPA/CPRA rights have been violated, you may file a complaint with the California Privacy Protection Agency (CPPA) or the California Attorney General's Office:

• California Privacy Protection Agency: cppa.ca.gov
• California Attorney General: oag.ca.gov/privacy

13.3 State Attorneys General

Residents of other states may file privacy or consumer protection complaints with their respective State Attorney General's office. Contact information for your State Attorney General can be found through the National Association of Attorneys General at www.naag.org.

We encourage you to first contact us directly at [email protected] so that we have an opportunity to resolve your concerns before you escalate to a regulatory authority.

14. Third-Party Websites and Links

Our Website may contain links to third-party websites, applications, or services that are not operated or controlled by Davanni's. This Privacy Policy does not apply to those third-party websites. We are not responsible for the privacy practices of third parties, and we encourage you to review the privacy policies of any third-party website you visit. The inclusion of a link on our Website does not imply our endorsement of the linked site's privacy practices.

15. Do Not Track Signals

Some browsers include a "Do Not Track" (DNT) feature that signals to websites that you do not want your online activities tracked across websites. At this time, there is no universally accepted standard for how websites should respond to DNT signals, and our Website does not currently alter its data collection and use practices in response to DNT signals. However, you may use the cookie management tools described in Section 8 to limit tracking on our Website. We will update this policy if we adopt a DNT response mechanism in the future.

16. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. When we make changes, we will:

• Update the "Last Updated" date at the top of this Privacy Policy.
• Post the revised Privacy Policy on our Website with the new effective date.
• Where required by law or where changes are material, provide you with notice via email or a prominent notice on our Website prior to the change becoming effective.

We encourage you to periodically review this Privacy Policy to stay informed about how we are protecting your information. Your continued use of our Website after any changes to this Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you should discontinue use of our Website and contact us to delete your account.

17. Glossary of Terms

For clarity, the following definitions apply throughout this Privacy Policy:

• "Personal Information" means any information that identifies, relates to, describes, or could reasonably be linked, directly or indirectly, to a particular consumer or household.
• "Data Controller" means the entity that determines the purposes and means of processing personal information.
• "Data Processor" means a third party that processes personal information on behalf of the data controller.
• "Processing" means any operation performed on personal information, including collection, storage, use, disclosure, or deletion.
• "Sensitive Personal Information" includes Social Security numbers, financial account information, health data, biometric data, and other categories defined as sensitive under applicable law.
• "Website" means davannispizza.click and all associated pages and subdomains.