Privacy Policy

This Privacy Policy describes how Via 313 ("we," "us," or "our") collects, uses, discloses, and protects your personal information when you visit our website at pizzas-via313.click, place an order, or otherwise interact with our services. We are committed to protecting your privacy and handling your personal data in a transparent, secure, and responsible manner in full compliance with applicable United States federal and state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and the Federal Trade Commission (FTC) Act.

Please read this Privacy Policy carefully. By accessing or using our website, placing an order, or engaging with our services, you acknowledge that you have read, understood, and agreed to the practices described in this policy. If you do not agree with any part of this Privacy Policy, please discontinue use of our website and services immediately.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will post the updated policy on this page with a new effective date. We encourage you to review this page periodically to stay informed about how we protect your information.

1. Who We Are

Via 313 is a food service business operating in the United States, dedicated to providing high-quality pizza and food products to our customers through our website and related platforms. As the data controller for purposes of this Privacy Policy, we are responsible for determining how and why your personal information is processed.

2. Information We Collect

We collect various categories of personal information depending on how you interact with us. The types of information we may collect include, but are not limited to, the following:

2.1 Personal Identification Information

When you create an account, place an order, sign up for our newsletter, or contact us through our website, we may collect personally identifiable information, including:

• Full name
• Email address
• Phone number
• Billing and delivery address (street address, city, state, ZIP code)
• Date of birth (when required for age verification purposes)
• Username and password (for account holders)
• Profile preferences and dietary preferences you choose to provide

2.2 Payment and Transaction Information

When you make a purchase through our website, we collect transaction-related information necessary to complete and fulfill your order. This may include:

• Order details (items ordered, quantity, price, order history)
• Payment card type and last four digits (full card numbers are processed by our PCI-DSS-compliant payment processors and are not stored on our servers)
• Billing address associated with the payment method
• Transaction identifiers and confirmation numbers
• Refund and dispute records

2.3 Usage and Behavioral Data

As you navigate and interact with our website, we automatically collect certain usage and behavioral information, such as:

• Pages visited and time spent on each page
• Links clicked and features used
• Search queries entered on our website
• Items added to your cart or wish list
• Referring URLs (the website that directed you to ours)
• Exit pages and navigation paths throughout the site
• Frequency and duration of visits

2.4 Device and Technical Information

We automatically receive technical information from your browser, device, and network when you visit our website, including:

• IP address
• Browser type and version
• Operating system and platform
• Device type (desktop, mobile, tablet)
• Screen resolution
• Time zone settings
• Unique device identifiers
• Network information

2.5 Location Data

With your permission, we may collect precise geolocation data from your device to facilitate delivery services, show you relevant local promotions, or provide location-based features. You may disable location tracking at any time through your device settings or browser preferences. We may also derive approximate location from your IP address.

2.6 Communications and User-Generated Content

If you contact us via email, phone, live chat, or any other communication channel, or if you submit reviews, feedback, or comments on our website, we collect the content of those communications, including:

• Messages, inquiries, and complaints sent to our customer support team
• Reviews, ratings, and testimonials submitted on our platform
• Survey responses and feedback forms
• Social media interactions where you tag or message us

2.7 Cookie and Tracking Data

We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about your browsing activities. For more detailed information, please refer to Section 7 (Cookie Usage) of this Privacy Policy.

2.8 Information from Third Parties

We may receive information about you from third-party sources, such as:

• Social media platforms, if you choose to log in or connect your account through social authentication (e.g., Facebook, Google)
• Analytics providers and advertising partners
• Delivery and logistics partners
• Payment processors and fraud prevention services
• Publicly available data sources

3. How We Use Your Information

We use the personal information we collect for a variety of business purposes, each grounded in a legitimate legal basis. The primary purposes for which we process your data include:

3.1 Service Provision and Order Fulfillment

• Processing and fulfilling your food orders, including preparation, packaging, and delivery or pickup
• Creating and managing your customer account
• Processing payments and issuing receipts or invoices
• Providing customer support and responding to your inquiries or complaints
• Managing loyalty programs, promotions, and special offers you enroll in
• Verifying your identity and preventing fraudulent transactions

3.2 Communication and Marketing

• Sending transactional emails, such as order confirmations, shipping or delivery updates, and account notifications
• Sending marketing communications about our products, services, special offers, and events — but only with your prior consent or as otherwise permitted by applicable law
• Personalizing your experience on our website based on your preferences and order history
• Conducting surveys and collecting feedback to improve our offerings
• Sending promotional text messages, where you have opted in to receive them

3.3 Analytics and Performance Improvement

• Analyzing website traffic, user behavior, and engagement patterns to improve our website functionality and user experience
• Conducting internal research and development to enhance our menu and services
• Testing new features, designs, and functionality before full deployment
• Generating aggregate statistical reports for business planning purposes

3.4 Legal Compliance and Safety

• Complying with applicable federal and state laws and regulations
• Responding to lawful requests from government authorities, courts, or law enforcement agencies
• Enforcing our Terms of Service and other applicable agreements
• Protecting the rights, safety, and property of Via 313, our customers, and the public
• Detecting, investigating, and preventing fraud, abuse, and other harmful activities

3.5 Business Operations

• Managing our business operations, including accounting, auditing, and record keeping
• Evaluating and facilitating potential business transactions, mergers, acquisitions, or asset sales
• Training our staff to improve service quality

4. Sharing of Your Information with Third Parties

We do not sell your personal information to third parties. However, we may share your data with trusted third parties in the following circumstances:

4.1 Service Providers and Business Partners

We engage carefully vetted third-party service providers who assist us in operating our business and delivering services to you. These providers are contractually obligated to use your information only as directed by us and in accordance with this Privacy Policy. Categories of service providers we work with include:

• Payment Processors: To securely process your payments (e.g., Stripe, PayPal, Square)
• Delivery and Logistics Partners: To fulfill and deliver your orders
• Cloud Hosting and Infrastructure Providers: To host our website and store data securely
• Email Marketing Platforms: To manage and send marketing and transactional communications
• Analytics Providers: Such as Google Analytics, to analyze website usage and improve our services
• Customer Support Tools: To manage customer service communications
• Fraud Detection and Security Services: To protect against fraudulent transactions and cyberattacks

4.2 Legal Requirements and Law Enforcement

We may disclose your personal information when we believe in good faith that disclosure is necessary to:

• Comply with a legal obligation, court order, subpoena, or government request
• Enforce our Terms of Service or protect our legal rights
• Protect the safety of our users, employees, or the general public
• Detect and prevent fraud, security breaches, or illegal activities

4.3 Business Transfers

In the event that Via 313 undergoes a merger, acquisition, restructuring, sale of assets, or bankruptcy proceeding, your personal information may be transferred to the acquiring or successor entity. We will notify you of such a transfer by posting a prominent notice on our website and, where required by law, by sending you a direct notification.

4.4 Aggregate and De-Identified Data

We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you with third parties for research, analytics, industry benchmarking, or marketing purposes without restriction.

4.5 With Your Consent

We may share your personal information with other third parties when you have provided explicit consent to such sharing, for example, when you choose to participate in a co-branded promotion or third-party loyalty program.

5. Data Security Measures

We take the security of your personal information seriously and implement a range of technical, administrative, and physical safeguards to protect your data against unauthorized access, disclosure, alteration, or destruction. Our security measures include:

5.1 Technical Safeguards

• SSL/TLS Encryption: All data transmitted between your browser and our website is protected using industry-standard Secure Socket Layer (SSL) or Transport Layer Security (TLS) encryption protocols.
• Encrypted Data Storage: Sensitive personal information stored on our servers is encrypted at rest using AES-256 encryption or equivalent standards.
• Firewalls and Intrusion Detection: We deploy firewalls and intrusion detection and prevention systems to monitor and block unauthorized network access.
• Secure Payment Processing: We utilize PCI-DSS-compliant payment processors to handle all payment card data. We do not store full credit or debit card numbers on our systems.
• Multi-Factor Authentication: Administrative access to our systems requires multi-factor authentication to reduce the risk of unauthorized access.
• Regular Security Updates: We maintain up-to-date software, operating systems, and security patches across all our platforms.

5.2 Administrative Safeguards

• Access to personal data is restricted to employees and contractors who have a legitimate business need to access it.
• All employees with access to personal data receive regular training on data protection and privacy best practices.
• We conduct periodic internal audits and risk assessments to evaluate the effectiveness of our security controls.
• We maintain incident response procedures to quickly detect, contain, and remediate data security incidents.

5.3 Data Breach Notification

In the event of a data breach that affects your personal information, we will notify affected individuals and relevant authorities as required by applicable law. Notifications will be provided in a timely manner and will include information about the nature of the breach, data affected, and steps taken to address it. Where required under state data breach notification laws applicable in the United States, we will also provide guidance on steps you can take to protect yourself.

6. Your Privacy Rights

Depending on your state of residence, you may have certain rights regarding your personal information under applicable U.S. privacy laws, including the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA). We extend these rights to all our users to the extent practicable.

6.1 Right to Know and Access

You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which we collected your information, the purposes for collecting or selling your information, and the categories of third parties with whom we share your information.

6.2 Right to Correction

You have the right to request that we correct inaccurate personal information that we maintain about you, taking into account the nature and purposes of the data processing. You may also update much of your information directly through your account settings on our website.

6.3 Right to Deletion

You have the right to request that we delete personal information we have collected from you, subject to certain exceptions. We may deny your deletion request if retaining the information is necessary to complete a transaction, detect security incidents, comply with a legal obligation, or engage in other internal uses that are compatible with the context in which you provided the information.

6.4 Right to Opt Out of Sale or Sharing

We do not sell your personal information as defined under the CCPA/CPRA. However, if we ever engage in activities that may constitute a "sale" or "sharing" of personal information for cross-context behavioral advertising, you have the right to opt out of such activities. You may submit an opt-out request by contacting us at [email protected].

6.5 Right to Data Portability

To the extent technically feasible, you have the right to receive a copy of your personal information in a structured, commonly used, and machine-readable format, and to request that we transmit that information to another service provider.

6.6 Right to Limit Use of Sensitive Personal Information

Under the CPRA, California residents have the right to limit our use and disclosure of sensitive personal information (such as precise geolocation, account credentials, or health-related information) to purposes necessary for providing the requested services. If you wish to exercise this right, please contact us using the information in Section 12.

6.7 Right to Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights. We will not deny you goods or services, charge you different prices, or provide you with a different quality of service based solely on your exercise of privacy rights.

6.8 How to Submit a Privacy Rights Request

To exercise any of the rights described above, you may submit a verifiable consumer request by:

• Emailing us at: [email protected] with the subject line "Privacy Rights Request"
• Visiting our website at: pizzas-via313.click

We will respond to verifiable consumer requests within 45 days of receipt. If we require more time, we will inform you of the reason and the extension period (up to an additional 45 days) in writing. We may need to verify your identity before processing your request by asking you to provide specific information that we can match against records we already maintain. You may also designate an authorized agent to submit requests on your behalf with written permission.

7. Cookie Usage

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and deliver relevant content and advertising. Cookies are small text files placed on your device when you visit a website.

7.1 Types of Cookies We Use

7.2 Managing Your Cookie Preferences

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or be notified when a cookie is set. Please note that disabling certain cookies may affect the functionality of our website and your ability to place orders. For more detailed information about our cookie practices, please refer to our full Cookie Policy, which is available on our website.

8. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements, and as necessary to resolve disputes and enforce our agreements. The specific retention periods we apply depend on the category of data and the purpose for which it was collected:

After the applicable retention period expires, we will securely delete or anonymize your personal information in accordance with our data destruction procedures.

9. Children's Privacy

Our website and services are intended for use by individuals who are 18 years of age or older. We do not knowingly collect, solicit, or process personal information from children under the age of 13, and we do not direct our services or marketing to minors.

The Children's Online Privacy Protection Act (COPPA) prohibits us from knowingly collecting personal information from children under 13 without verifiable parental consent. If you are under 13, please do not use our website or provide us with any personal information. If you are between 13 and 17, please obtain parental or guardian consent before using our services.

If we become aware that we have inadvertently collected personal information from a child under 13 without appropriate parental consent, we will take immediate steps to delete that information from our records. If you believe that a child under 13 has provided us with personal information, please contact us immediately at [email protected] so that we can take appropriate action.

10. International Data Transfers

Via 313 is based in the United States, and your personal information is primarily collected, stored, and processed within the United States. However, some of our third-party service providers may be located in or operate from other countries. As a result, your personal information may be transferred to, stored in, or processed in countries outside your country of residence, which may have different data protection laws than those in your jurisdiction.

When we transfer personal information internationally, we take appropriate steps to ensure that such transfers are conducted in compliance with applicable law and that your information receives adequate protection. These steps may include:

• Ensuring that third-party recipients are located in countries with adequate data protection standards
• Implementing contractual safeguards, such as standard data transfer agreements or data processing agreements
• Verifying that service providers maintain appropriate security measures comparable to our own standards

If you are located outside the United States and choose to use our services, please be aware that your information will be transferred to and processed in the United States. By using our website and services, you consent to this transfer.

11. California Privacy Rights (CCPA/CPRA)

California residents have specific rights under the California Consumer Privacy Act (CCPA), as amended and strengthened by the California Privacy Rights Act (CPRA), which became fully effective on January 1, 2023. In addition to the general rights described in Section 6, California residents are entitled to the following:

11.1 Categories of Personal Information Collected

In the past 12 months, we have collected the following categories of personal information as defined by the CCPA:

• Identifiers (name, email address, IP address, account credentials)
• Commercial information (purchase history, transaction data)
• Internet or other electronic network activity information (browsing history, usage data)
• Geolocation data (approximate and, with consent, precise)
• Inferences drawn from personal information to create a profile about your preferences
• Audio, electronic, visual, or similar information (when you contact us by phone or leave voicemails)

11.2 "Do Not Sell or Share My Personal Information"

We do not sell your personal information for monetary consideration. However, we may share personal information with advertising and analytics partners in ways that may constitute "sharing" under California law for cross-context behavioral advertising purposes. California residents may opt out of such sharing by contacting us at [email protected] with the subject line "Do Not Sell or Share My Information."

11.3 Authorized Agent

California residents may designate an authorized agent to make requests on their behalf. To do so, the authorized agent must provide written proof of their authorization from you, and we may require you to verify your identity directly with us before processing the request.

11.4 Shine the Light Law

Under California Civil Code Section 1798.83, California residents who have an established business relationship with us may request information about the categories of personal information we disclose to third parties for direct marketing purposes and the identities of those third parties. To make such a request, please contact us at [email protected].

12. Contact Information for Privacy Inquiries

If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please do not hesitate to contact us. We are committed to addressing your inquiries promptly and thoroughly.

We aim to respond to all privacy-related inquiries within 45 days. For complex requests, we will notify you if an extension is required. All communications regarding your personal data will be handled confidentially by our privacy team.

13. How to File a Complaint with a Data Protection Authority

If you believe that we have not adequately addressed your privacy concerns or that we have processed your personal data in violation of applicable privacy laws, you have the right to file a complaint with the relevant data protection or consumer protection authority.

13.1 Federal Trade Commission (FTC)

The Federal Trade Commission (FTC) is the primary consumer protection agency in the United States and enforces federal privacy laws, including the FTC Act, which prohibits unfair or deceptive practices relating to the collection and use of personal information. You may file a complaint with the FTC at:

• Website: www.ftc.gov/complaint
• Phone: 1-877-FTC-HELP (1-877-382-4357)
• Address: Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, DC 20580

13.2 California Privacy Protection Agency (CPPA)

California residents may also file privacy complaints with the California Privacy Protection Agency (CPPA), which enforces the CCPA/CPRA and related California privacy regulations:

• Website: cppa.ca.gov
• Address: California Privacy Protection Agency, 2101 Arena Boulevard, Sacramento, CA 95834

13.3 State Attorney General Offices

Depending on your state of residence, you may also have the right to file a privacy complaint with your state's Attorney General office. Most state AG offices have dedicated consumer protection divisions that handle privacy-related complaints. We encourage you to consult the official website of your state's Attorney General for more information on how to submit a complaint.

Before filing a formal complaint with any authority, we encourage you to contact us first at [email protected] so we have the opportunity to resolve your concern directly.

14. Third-Party Links and Services

Our website may contain links to third-party websites, applications, or services that are not owned or controlled by Via 313. This Privacy Policy applies only to our website and services. We are not responsible for the privacy practices or content of third-party sites. We encourage you to review the privacy policies of any third-party services you access through our website, as their data collection and use practices may differ significantly from ours.

15. Changes to This Privacy Policy

We reserve the right to update, modify, or revise this Privacy Policy at any time to reflect changes in our data practices, legal obligations, technology, or business operations. When we make material changes to this Privacy Policy, we will:

• Update the "Last Updated" date at the top of this page
• Post the revised policy prominently on our website at pizzas-via313.click
• Where required by law or where changes significantly affect your rights, send you a direct notification by email

Your continued use of our website or services following the posting of any changes to this Privacy Policy constitutes your acceptance of those changes. We encourage you to review this policy periodically to remain informed about how we protect your information.

16. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of the United States and applicable state laws, including but not limited to the California Consumer Privacy Act (CCPA/CPRA) and the Federal Trade Commission Act (FTC Act). Any disputes arising out of or in connection with this Privacy Policy shall be subject to the exclusive jurisdiction of the courts located in the United States.