Privacy Policy

This Privacy Policy describes how Pizza Luce ("we," "us," or "our") collects, uses, discloses, and safeguards your personal information when you visit our website at lucespizza.top, place orders through our online platform, or otherwise interact with our services. Please read this policy carefully. By using our website or services, you acknowledge that you have read, understood, and agree to the practices described herein.

We are committed to protecting your privacy and handling your personal information in a transparent, lawful, and responsible manner. This policy has been drafted in compliance with applicable United States federal and state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), and other relevant consumer protection regulations.

1. About Us

Pizza Luce is a food service business operating in the United States. We provide pizza and related food products to customers through our physical locations and online ordering platform.

2. Information We Collect

We collect various types of information in connection with your use of our website and services. The categories below describe what we collect, why we collect it, and how it is gathered.

2.1 Personal Information You Provide Directly

When you interact with us — for example, by creating an account, placing an order, submitting a contact form, or signing up for promotions — you may voluntarily provide us with personal information, including but not limited to:

• Identity Information: First name, last name, username, or similar identifiers.
• Contact Information: Email address, telephone number, billing address, delivery address, and postal code.
• Account Credentials: Username and password (stored in encrypted form).
• Payment Information: Credit card numbers, debit card numbers, billing details, and other financial data necessary to process transactions. Note: We do not store full payment card numbers on our servers; payment processing is handled by PCI-DSS-compliant third-party processors.
• Order Information: Details of the food items you order, special instructions, dietary preferences, and order history.
• Communications: Any messages, feedback, complaints, or inquiries you send us via email, contact forms, or other channels.
• Marketing Preferences: Your choices regarding receiving promotional emails, SMS messages, or other marketing communications from us.

2.2 Information Collected Automatically

When you visit our website, certain information is collected automatically through cookies, web beacons, pixel tags, and similar tracking technologies. This includes:

• Usage Data: Pages you visit, links you click, time spent on pages, referring URLs, and navigation paths through our site.
• Device Information: IP address, browser type and version, operating system, device type (desktop, mobile, tablet), screen resolution, language settings, and time zone.
• Location Data: General geographic location based on IP address (city/region level). We do not collect precise GPS location without your explicit consent.
• Cookie Data: Session identifiers, preference settings, and behavioral data stored via cookies. See Section 8 of this policy for more details on our cookie practices.
• Log Data: Server logs that record requests made to our servers, error reports, and system activity.

2.3 Information from Third Parties

We may receive information about you from third-party sources, which we may combine with the information we already hold. These sources include:

• Social Media Platforms: If you log in using a social media account (e.g., Facebook, Google), we receive profile information authorized by you through that platform.
• Analytics Providers: Data about how users interact with our website, aggregated and provided by analytics services.
• Marketing Partners: Information to help us better target our promotional communications.
• Delivery Partners: Order status and delivery confirmation information from third-party delivery services we use to fulfill your orders.
• Review Platforms: Public reviews or ratings you submit about our food or services on third-party review platforms.

3. How We Use Your Information

We use the personal information we collect for a variety of legitimate purposes related to operating our food service business and improving your experience. These purposes include:

3.1 Service Provision and Order Fulfillment

• Processing and fulfilling your food orders, including coordinating with our kitchen staff and delivery personnel.
• Communicating with you about your orders, including order confirmations, estimated delivery times, and any issues that arise.
• Managing your account, including authentication and account security.
• Processing payments and issuing refunds where applicable.
• Responding to your customer service inquiries, complaints, and feedback.

3.2 Business Operations and Analytics

• Analyzing how our website and services are used to identify trends, measure performance, and improve functionality.
• Conducting internal research and development to create new menu items or service features.
• Monitoring and maintaining the security, integrity, and reliability of our systems.
• Diagnosing technical problems and resolving errors on our platform.
• Generating aggregate, anonymized statistical reports about our customers and usage patterns.

3.3 Marketing and Promotional Communications

• Sending you promotional emails, newsletters, special offers, and discount codes if you have opted in to receive such communications.
• Personalizing the content and promotions displayed to you on our website based on your order history and preferences.
• Running loyalty programs, contests, sweepstakes, and other promotional activities.
• Retargeting you with relevant advertisements on third-party platforms (subject to your consent where required by law).

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any promotional email, texting STOP in response to an SMS message, or contacting us directly at [email protected].

3.4 Legal Compliance and Safety

• Complying with applicable federal, state, and local laws and regulations.
• Responding to lawful requests from government authorities, law enforcement agencies, or courts.
• Enforcing our Terms of Service and other applicable agreements.
• Protecting the rights, property, and safety of Pizza Luce, our customers, employees, and the public.
• Detecting, preventing, and investigating fraud, abuse, or other unlawful activities.

4. Legal Basis for Processing

While the United States does not have a single federal privacy law equivalent to the GDPR, we recognize and respect applicable state privacy frameworks. Our processing activities are grounded in the following bases:

• Contract Performance: Processing necessary to fulfill your food orders and provide the services you have requested.
• Legitimate Business Interests: Analytics, security monitoring, fraud prevention, and business improvement activities, balanced against your privacy interests.
• Legal Obligation: Processing required to comply with federal and state laws, tax obligations, and regulatory requirements.
• Consent: Marketing communications, certain cookies, and other optional data uses where we obtain your prior consent.

5. Sharing Your Information with Third Parties

We do not sell your personal information to third parties. However, we may share your information in the following circumstances:

5.1 Service Providers and Business Partners

We engage trusted third-party service providers to perform functions on our behalf. These parties are contractually obligated to protect your information and may only use it for the specific purposes for which we engaged them. Categories of such providers include:

• Payment Processors: Companies that securely process credit card and other payment transactions (e.g., Stripe, Square).
• Delivery and Logistics Partners: Third-party delivery services used to bring your order to your door.
• Cloud Hosting Providers: Companies that host our website and store our data on secure servers.
• Email Marketing Platforms: Services used to send promotional emails and newsletters on our behalf.
• Analytics Providers: Services such as Google Analytics that help us understand website traffic and user behavior.
• Customer Support Tools: Platforms that help us manage and respond to customer inquiries.
• IT and Security Services: Companies providing cybersecurity, anti-fraud, and system monitoring services.

5.2 Legal and Regulatory Disclosures

We may disclose your personal information to government agencies, law enforcement, regulators, courts, or other authorized bodies where we are required to do so by law, court order, subpoena, or other legal process. We may also disclose information where we believe disclosure is necessary to:

• Comply with applicable laws and regulations, including tax reporting obligations.
• Protect and defend the legal rights or property of Pizza Luce.
• Prevent or investigate possible wrongdoing in connection with our services.
• Protect the personal safety of our users or the public.

5.3 Business Transfers

In the event that Pizza Luce undergoes a merger, acquisition, restructuring, sale of assets, or other business transaction, your personal information may be transferred to the successor entity as part of that transaction. We will notify you via email and/or a prominent notice on our website before your personal information becomes subject to a different privacy policy.

5.4 Aggregated and Anonymized Data

We may share aggregated, anonymized, or de-identified information with third parties for research, analytics, marketing, or other purposes. Such data cannot reasonably be used to identify you as an individual.

6. Data Security

We take the security of your personal information seriously and have implemented a range of technical, administrative, and physical safeguards designed to protect your data from unauthorized access, disclosure, alteration, or destruction. Our security measures include:

• Encryption: We use industry-standard SSL/TLS encryption to protect data transmitted between your browser and our servers.
• Secure Payment Processing: Payment card information is handled through PCI-DSS-compliant processors. We do not store full card numbers on our systems.
• Access Controls: Access to personal data is restricted to authorized employees and contractors who need it to perform their job functions, and is protected by role-based access controls.
• Password Security: Account passwords are hashed and salted using strong cryptographic algorithms.
• Regular Security Audits: We conduct periodic security reviews and vulnerability assessments of our systems.
• Incident Response Plan: We maintain procedures for detecting, reporting, and responding to data security incidents.
• Employee Training: Our staff receive regular training on data privacy and security best practices.

While we implement robust security measures, no method of data transmission or storage is 100% secure. In the event of a data breach that is likely to affect your rights and freedoms, we will notify affected individuals and relevant authorities as required by applicable law, including any applicable state breach notification laws.

7. Your Privacy Rights

Depending on your state of residence, you may have certain rights with respect to your personal information. We are committed to honoring these rights in accordance with applicable U.S. law.

7.1 Rights Under the California Consumer Privacy Act (CCPA/CPRA)

If you are a California resident, you have the following rights under the CCPA as amended by the CPRA:

• Right to Know: You have the right to request that we disclose what personal information we collect, use, disclose, and sell about you.
• Right to Delete: You have the right to request deletion of personal information we have collected about you, subject to certain exceptions.
• Right to Correct: You have the right to request that we correct inaccurate personal information we maintain about you.
• Right to Opt Out of Sale/Sharing: You have the right to opt out of the sale or sharing of your personal information. We do not currently sell personal information as defined under the CCPA.
• Right to Limit Use of Sensitive Personal Information: You have the right to limit our use of sensitive personal information to purposes necessary to provide the services you request.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights. We will not deny you goods or services, charge you different prices, or provide a different level of service because you exercised your privacy rights.

7.2 General Privacy Rights (All U.S. Residents)

Regardless of your state, we extend the following rights to all of our users as a matter of policy:

• Right of Access: You may request a copy of the personal information we hold about you.
• Right to Correction: You may request that we correct or update inaccurate or incomplete information we hold about you.
• Right to Deletion: You may request that we delete your personal data, subject to legal exceptions.
• Right to Portability: You may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to Object to Marketing: You may opt out of direct marketing communications at any time.

7.3 How to Exercise Your Rights

To exercise any of your privacy rights, please submit a request to us using one of the following methods:

• Email: [email protected]
• Website: lucespizza.top

We will verify your identity before processing your request to ensure we do not disclose or delete information belonging to another person. We will respond to your request within 45 days of receipt. If we require additional time (up to 90 days total), we will inform you of the reason and extension period in writing. We do not charge a fee to process or respond to a verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded.

You may designate an authorized agent to make a request on your behalf. We will require written proof of the agent's authority to act on your behalf and may still require you to verify your identity directly with us.

8. Cookie Policy

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and deliver relevant content and advertising. Cookies are small text files placed on your device when you visit a website.

8.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the operation of our website, including enabling you to log in, add items to your cart, and complete an order. These cannot be disabled.
• Performance and Analytics Cookies: Help us understand how visitors interact with our website by collecting anonymous usage data. We use tools such as Google Analytics for this purpose.
• Functional Cookies: Remember your preferences (such as your language, location, or saved address) to provide a more personalized experience.
• Marketing and Advertising Cookies: Used to deliver relevant advertisements to you on our website and third-party platforms, and to measure the effectiveness of our marketing campaigns.

8.2 Managing Your Cookie Preferences

Most web browsers allow you to control cookie settings through the browser's preferences. You may choose to block or delete cookies at any time; however, doing so may affect the functionality of our website and your ability to place orders. You can also manage advertising cookies through the Digital Advertising Alliance's opt-out tool at www.aboutads.info/choices.

For comprehensive information about how we use cookies, please refer to our full Cookie Policy available on our website at lucespizza.top.

9. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Our general retention periods are as follows:

When personal information is no longer required, we securely delete or anonymize it. Where immediate deletion is not possible (for example, because data is stored in backup archives), we will securely isolate the data and prevent any further processing until deletion is possible.

10. Children's Privacy

Pizza Luce does not knowingly target or market its online services to children under 18. If you are under 18 years of age, please do not use our website or submit any personal information to us. If you are a parent or guardian and believe that your child under 18 has provided us with personal information without your consent, please contact us immediately at [email protected]. Upon receiving such a request, we will take prompt steps to verify the claim and delete the child's information from our records.

We comply with the Children's Online Privacy Protection Act (COPPA), which prohibits the collection of personal information from children under 13 without verifiable parental consent. Our higher threshold of 18 years reflects our commitment to responsible practices in the food service industry.

11. International Data Transfers

Pizza Luce is based in the United States and primarily processes personal data within the United States. Our servers and the servers of some of our third-party service providers are located within the United States.

If you access our website from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country of residence. By using our services, you acknowledge and consent to this transfer of your information to the United States.

When we transfer personal data internationally, we take appropriate steps to ensure that adequate protections are in place to safeguard your information in accordance with this Privacy Policy. For users in countries with stricter data transfer requirements, we implement appropriate contractual safeguards as required by applicable law.

12. Third-Party Links and Services

Our website may contain links to third-party websites, applications, or services that are not owned or controlled by Pizza Luce. This Privacy Policy applies only to information collected on our website and through our services. We are not responsible for the privacy practices of third-party websites or services. We encourage you to review the privacy policies of any third-party sites you visit, particularly before submitting any personal information.

We may integrate third-party services into our platform, such as social media sharing buttons, embedded maps, or payment processing widgets. When you interact with these features, the third-party providers may collect data about you subject to their own privacy policies.

13. Do Not Track Signals

Some web browsers include a "Do Not Track" (DNT) feature that signals to websites that you do not want your online activities tracked. At present, there is no universally accepted standard for responding to DNT signals, and our website does not currently change its behavior in response to DNT signals. We will continue to monitor developments in DNT standards and update our practices accordingly.

For California residents, please note that our website does not track personal information over time and across third-party websites to the extent that would require disclosure under California's Shine the Light law, beyond what is described in this Privacy Policy.

14. California-Specific Disclosures

This section applies specifically to California residents and supplements the information provided elsewhere in this Privacy Policy.

14.1 Categories of Personal Information Collected

In the past 12 months, we have collected the following categories of personal information as defined under the CCPA:

• Identifiers (name, email address, IP address, account username)
• Categories of personal information listed in the California Customer Records statute (name, phone number, address, credit card information)
• Commercial information (purchase history, products ordered)
• Internet or other electronic network activity information (browsing history, search history, website interaction data)
• Geolocation data (general location based on IP address)
• Inferences drawn from personal information to create a profile (preferences, order patterns)

14.2 Shine the Light Law

California Civil Code Section 1798.83 permits California residents to request information regarding the disclosure of their personal information to third parties for those third parties' direct marketing purposes. If you are a California resident and would like to make such a request, please contact us at [email protected].

15. Filing a Complaint

If you have concerns about how we handle your personal information and are not satisfied with our response to your inquiry, you have the right to file a complaint with the relevant regulatory authority.

15.1 Federal Trade Commission (FTC)

The Federal Trade Commission (FTC) enforces consumer protection laws in the United States, including laws related to unfair or deceptive data privacy practices. You may file a complaint with the FTC at:

15.2 California Privacy Protection Agency (CPPA)

California residents may also file a complaint with the California Privacy Protection Agency (CPPA), which enforces the CPRA:

15.3 State Attorney General Offices

Residents of other U.S. states may contact their respective State Attorney General offices for guidance on data privacy rights and complaint procedures. Many state attorneys general have consumer protection divisions that handle privacy-related complaints.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will notify you by:

• Posting the updated Privacy Policy on our website at lucespizza.top with a revised "Last Updated" date;
• Sending an email notification to the email address associated with your account (for significant changes); and/or
• Displaying a prominent notice on our website or app.

Your continued use of our website and services after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this policy periodically to stay informed about how we are protecting your information.

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to reach out to us. We are committed to addressing your inquiries promptly and transparently.

This Privacy Policy was last reviewed and updated on April 8, 2026. Pizza Luce reserves all rights not expressly granted herein. Nothing in this Privacy Policy creates any contractual rights not otherwise provided by law.