Privacy Policy

This Privacy Policy describes how Mod Pizza ("we," "us," or "our") collects, uses, discloses, and protects your personal information when you visit our website at cafemod.top, use our online ordering services, sign up for our loyalty program, or otherwise interact with us. We are committed to protecting your privacy and handling your personal data with transparency, integrity, and care.

By accessing or using our website, mobile services, or any of our digital platforms, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our services immediately.

We encourage you to read this Privacy Policy carefully and to contact us if you have any questions or concerns.

1. About Us

Mod Pizza operates the website cafemod.top and provides food ordering, delivery coordination, and related services to customers throughout the United States. For any questions or concerns regarding this Privacy Policy or your personal data, you may contact us using the details below:

2. Applicable Laws and Legal Framework

As a business operating in the United States, our data practices are governed by the following applicable laws and regulations:

• Federal Trade Commission Act (FTC Act) – prohibits unfair or deceptive acts or practices in commerce, including unfair privacy and data security practices.
• California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) – provides privacy rights to California residents, including the right to know, delete, correct, and opt out of the sale or sharing of personal information.
• Children's Online Privacy Protection Act (COPPA) – governs the collection of personal information from children under 13 years of age.
• CAN-SPAM Act – regulates commercial email communications.
• Telephone Consumer Protection Act (TCPA) – governs telemarketing communications and text message marketing.
• Any applicable state-level privacy laws in the states where we operate or where our users reside.

We are committed to complying with all applicable federal and state privacy laws and will update this policy as laws evolve.

3. Information We Collect

We collect various types of information depending on how you interact with our services. The categories of personal information we collect include:

3.1 Information You Provide Directly

When you create an account, place an order, sign up for our loyalty or rewards program, contact our customer support team, or participate in surveys and promotions, you may provide us with:

• Identifiers: Full name, username, and password.
• Contact Information: Email address, phone number, and mailing or delivery address.
• Payment Information: Credit or debit card numbers, billing address, and other payment-related details. Note: Payment card data is processed by our PCI-DSS compliant third-party payment processors; we do not store full card numbers on our servers.
• Order Details: Food preferences, order history, dietary restrictions, and special instructions.
• Account Profile Data: Profile photo (if provided), saved addresses, and preferences.
• Communications: Messages, feedback, complaints, or inquiries you send us via email, contact forms, or live chat.
• Loyalty Program Data: Points balance, reward redemptions, and participation history.

3.2 Information Collected Automatically

When you visit our website or use our digital platforms, we automatically collect certain technical and usage data, including:

• Device Information: Device type, operating system, browser type and version, screen resolution, and device identifiers.
• Log Data: IP address, pages visited, date and time of visits, time spent on pages, referring URLs, and links clicked.
• Location Data: General geographic location inferred from your IP address. If you grant permission, we may also collect precise GPS-based location data to facilitate delivery services.
• Usage Data: Information about how you interact with our website, mobile app, and services, including search queries, menu items viewed, and ordering patterns.
• Cookies and Tracking Technologies: We use cookies, web beacons, pixel tags, local storage, and similar technologies to collect data about your browsing behavior. Please see Section 8 for more details on our Cookie Policy.

3.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Social Media Platforms: If you connect your account to Facebook, Google, Apple, or another social media platform, we may receive your name, email address, profile photo, and other account details as permitted by those platforms.
• Delivery Partners: Third-party delivery platforms that facilitate order fulfillment may share order status updates and delivery confirmation data with us.
• Analytics Providers: Third-party analytics tools that provide aggregated or identifiable data about how users interact with our services.
• Marketing Partners: Business partners who provide us with contact lists or promotional data in compliance with applicable law.
• Payment Processors: Transaction confirmation and fraud detection data from our payment processing partners.

3.4 Inferences and Derived Data

Based on the information we collect, we may draw inferences about your preferences, food interests, order frequency, and likely future behavior. This derived data is used to personalize your experience, offer relevant promotions, and improve our services.

4. How We Use Your Information

We use the personal information we collect for the following purposes:

4.1 Service Provision and Order Fulfillment

• Processing and fulfilling your food orders, including delivery or pickup coordination.
• Creating and managing your user account and loyalty program membership.
• Sending order confirmation, status updates, delivery notifications, and receipts.
• Providing customer support and resolving complaints or disputes.
• Facilitating payment processing and fraud prevention.

4.2 Personalization and User Experience

• Remembering your preferences, saved addresses, and past orders for a more convenient experience.
• Offering personalized menu recommendations based on your order history and stated preferences.
• Customizing the content, promotions, and offers displayed to you on our website and app.

4.3 Marketing and Communications

• Sending you promotional emails, newsletters, special offers, and loyalty rewards updates, where you have opted in or where permitted by law.
• Conducting SMS or push notification marketing campaigns (with your prior consent as required by the TCPA).
• Running sweepstakes, contests, surveys, and feedback campaigns.
• Retargeting and digital advertising through third-party advertising platforms.

You may opt out of marketing communications at any time. See Section 10 for information on your rights and how to exercise them.

4.4 Analytics and Service Improvement

• Analyzing usage trends and customer behavior to improve our website, app, menu, and overall service quality.
• Conducting internal research, market analysis, and business intelligence activities.
• Testing new features, layouts, and service offerings.
• Monitoring and maintaining the security and integrity of our digital platforms.

4.5 Legal and Compliance Purposes

• Complying with applicable federal and state laws, regulations, and legal obligations.
• Responding to lawful requests from government authorities, courts, or regulatory bodies.
• Protecting the rights, property, and safety of Mod Pizza, our employees, customers, and the public.
• Enforcing our Terms of Service and other applicable policies.
• Preventing fraud, unauthorized access, and other illegal activities.

5. Sharing Your Information with Third Parties

We do not sell your personal information to third parties for their own independent marketing purposes. However, we do share your data in the following circumstances:

5.1 Service Providers and Vendors

We engage trusted third-party service providers who perform functions on our behalf and under our instructions. These include:

• Payment processors (e.g., Stripe, PayPal, or similar platforms).
• Cloud hosting and data storage providers.
• Delivery logistics and courier services.
• Email marketing and SMS communication platforms.
• Website analytics providers (e.g., Google Analytics).
• Customer relationship management (CRM) software providers.
• Fraud detection and cybersecurity services.
• Customer support tools and live chat providers.

All service providers are required to maintain the confidentiality and security of your information and are prohibited from using it for any purpose other than providing services to us.

5.2 Advertising and Marketing Partners

We may share certain data (such as hashed email addresses, device identifiers, or browsing behavior) with advertising networks and social media platforms (such as Meta, Google, or similar) to serve you relevant advertisements and to measure the effectiveness of our marketing campaigns. This sharing may constitute "sharing" of personal information for cross-context behavioral advertising under the CPRA.

California residents have the right to opt out of this sharing. Please see Section 10 for more details.

5.3 Business Transfers

If Mod Pizza undergoes a merger, acquisition, asset sale, reorganization, or bankruptcy proceedings, your personal information may be transferred to the acquiring entity or successor business as part of the transaction. We will notify you via email or a prominent notice on our website before your information is transferred and becomes subject to a different privacy policy.

5.4 Legal Requirements and Safety

We may disclose your personal information when we believe in good faith that such disclosure is necessary to:

• Comply with a legal obligation, court order, subpoena, or governmental request.
• Enforce our Terms of Service or other agreements.
• Protect and defend the rights or property of Mod Pizza.
• Prevent or investigate possible wrongdoing, fraud, or security incidents.
• Protect the personal safety of users, employees, or the public.

5.5 With Your Consent

We may share your information with additional third parties where you have given us explicit consent to do so.

6. Data Security

The security of your personal information is a priority for us. We implement a range of administrative, technical, and physical safeguards designed to protect your data from unauthorized access, disclosure, alteration, or destruction. Our security measures include, but are not limited to:

• Encryption: We use industry-standard SSL/TLS encryption to protect data transmitted between your browser and our servers. Sensitive data, including passwords and payment information, is encrypted at rest using AES-256 or equivalent standards.
• Access Controls: Access to personal information is restricted to authorized employees and contractors who have a legitimate need to access it for business purposes. We enforce role-based access controls and require multi-factor authentication for sensitive systems.
• Payment Security: We are committed to PCI-DSS compliance for all payment card data handling. Full payment card numbers are never stored on our servers.
• Regular Security Audits: We conduct periodic vulnerability assessments, penetration testing, and security reviews of our systems and third-party service providers.
• Incident Response: We maintain a documented data breach response plan. In the event of a security breach affecting your personal information, we will notify you and applicable regulatory authorities as required by law.
• Employee Training: Our employees receive regular training on data privacy, security best practices, and their obligations under this policy.

Despite our best efforts, no method of data transmission or storage is completely secure. We cannot guarantee absolute security, and you use our services at your own risk. If you believe your account has been compromised, please contact us immediately at [email protected].

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Our general data retention guidelines are as follows:

When personal data is no longer needed, we securely delete or anonymize it in accordance with our internal data disposal procedures.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies on our website and digital platforms to enhance your experience, analyze usage patterns, and deliver relevant advertising. The types of cookies we use include:

8.1 Types of Cookies

• Strictly Necessary Cookies: Essential for the website to function properly. These enable core features such as shopping cart functionality, user authentication, and security. These cookies cannot be disabled.
• Performance and Analytics Cookies: Help us understand how visitors interact with our website by collecting anonymous usage statistics. We use tools such as Google Analytics for this purpose.
• Functional Cookies: Allow our website to remember your preferences (such as language, location, or saved addresses) to provide a more personalized experience.
• Targeting and Advertising Cookies: Used to deliver advertisements relevant to you and your interests, both on our website and on third-party platforms. These cookies may track your browsing activity across different websites.
• Social Media Cookies: Set by social media platforms (such as Facebook and Instagram) to enable sharing features and to track your interaction with social media content embedded in our site.

8.2 Managing Your Cookie Preferences

You can manage your cookie preferences through:

• Our cookie consent banner, which appears when you first visit our website.
• Your browser settings, where you can configure or block cookies.
• Opt-out tools provided by specific advertising networks (e.g., the NAI opt-out tool or the DAA's opt-out platform).
• For Google Analytics specifically, you may use the Google Analytics Opt-out Browser Add-on.

Please note that disabling certain cookies may affect the functionality of our website and services.

9. Children's Privacy

If we become aware that we have inadvertently collected personal information from a child under the age of 13 without verifiable parental consent as required by the Children's Online Privacy Protection Act (COPPA), we will take prompt steps to delete such information from our records.

If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at [email protected] so that we can take appropriate action.

10. Your Privacy Rights

Depending on your state of residence, you may have a number of rights with respect to your personal information. We are committed to honoring these rights and will respond to verified requests in a timely manner.

10.1 Rights for All Users

• Right to Know / Access: You have the right to request information about the categories and specific pieces of personal information we have collected about you, the purposes for which we use it, and the third parties with whom we share it.
• Right to Correction: You have the right to request that we correct inaccurate personal information we hold about you.
• Right to Deletion: You may request that we delete your personal information, subject to certain exceptions (e.g., where retention is required by law or necessary to complete a transaction).
• Right to Opt Out of Marketing: You may opt out of receiving marketing communications from us at any time by clicking the "unsubscribe" link in any marketing email, texting STOP in response to an SMS, or contacting us directly.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights. We will not deny you services, charge you different prices, or provide a lower quality of service because you exercised your rights.

10.2 Additional Rights for California Residents (CCPA/CPRA)

If you are a resident of California, you have the following additional rights under the CCPA as amended by the CPRA:

• Right to Know the Categories of Information Shared: You may request disclosure of the categories of personal information we sell or share with third parties for cross-context behavioral advertising.
• Right to Opt Out of Sale or Sharing: You have the right to opt out of the "sale" or "sharing" of your personal information as defined under the CPRA. To exercise this right, please click the "Do Not Sell or Share My Personal Information" link on our website or contact us at [email protected].
• Right to Limit Use of Sensitive Personal Information: If we collect "sensitive personal information" as defined by the CPRA, you have the right to limit our use of such information to certain permitted purposes.
• Right to Data Portability: You have the right to receive a copy of your personal information in a portable, machine-readable format.
• Authorized Agent: You may designate an authorized agent to submit privacy requests on your behalf. We may require written proof of such authorization.

10.3 How to Submit a Privacy Request

To exercise any of your privacy rights, please contact us using one of the following methods:

• Email: [email protected] (include "Privacy Request" in the subject line)
• Website: cafemod.top

We will verify your identity before processing your request. Verification may include confirming the email address associated with your account, or providing other identifying information. We will respond to verified requests within 45 days of receipt, or within the timeframe required by applicable law. If we need additional time, we will notify you within the initial response period.

11. Do Not Track Signals

Some web browsers transmit "Do Not Track" (DNT) signals to websites. At this time, there is no universally accepted standard for how websites should respond to DNT signals. As a result, our website does not currently respond to DNT signals. We will continue to monitor industry developments and may update this practice in the future.

California residents may also use the Global Privacy Control (GPC) browser signal to communicate their opt-out preference for the sale or sharing of personal information. We will honor GPC signals where required by applicable law.

12. International Data Transfers

Mod Pizza is headquartered in the United States, and your personal information is primarily processed and stored in the United States. However, some of our third-party service providers may be located in, or operate servers in, countries outside the United States.

If you access our services from outside the United States, please be aware that your information may be transferred to, stored in, and processed in the United States, where privacy laws may differ from those in your jurisdiction. By using our services, you acknowledge and consent to such transfers.

When we transfer personal information internationally, we take appropriate steps to ensure that such transfers are carried out in compliance with applicable law and with appropriate safeguards in place to protect your information.

13. Third-Party Links and Services

Our website may contain links to third-party websites, applications, and services that are not operated or controlled by Mod Pizza. This Privacy Policy applies only to our website and services. We are not responsible for the privacy practices or content of third-party websites.

We encourage you to review the privacy policies of any third-party websites you visit. The inclusion of a link to a third-party site on our website does not imply our endorsement of that site or its privacy practices.

Our website may also incorporate third-party services such as embedded maps, social media widgets, or payment gateways. These third parties may collect information about you when you interact with their services, subject to their own privacy policies.

14. Marketing Communications and Opt-Out Options

We may send you promotional communications about our menu items, special offers, new locations, loyalty rewards, and other news related to Mod Pizza. You have the following options to manage your marketing preferences:

14.1 Email Marketing

To opt out of marketing emails, click the "Unsubscribe" link included in any promotional email. You may also update your communication preferences in your account settings or by emailing [email protected]. Please allow up to 10 business days for your opt-out request to take effect.

14.2 SMS Marketing

If you have opted in to SMS marketing, you may opt out at any time by replying STOP to any marketing text message. Standard message and data rates may apply. Opting out of SMS marketing does not affect transactional messages related to your orders.

14.3 Push Notifications

If you have enabled push notifications through our app or browser, you may disable them through your device or browser notification settings at any time.

14.4 Transactional Communications

Please note that even if you opt out of marketing communications, we may still send you essential transactional messages related to your orders, account security, and important service updates. These communications cannot be opted out of while you maintain an active account.

15. Filing a Complaint with a Data Protection Authority

If you believe that we have violated your privacy rights, we encourage you to contact us first so that we can attempt to resolve the issue directly. Please reach out to us at [email protected].

If you are not satisfied with our response or believe we are processing your personal information in violation of applicable law, you have the right to file a complaint with the relevant authority:

15.1 For California Residents

California residents may submit complaints to the California Privacy Protection Agency (CPPA) or the California Attorney General's Office:

• California Privacy Protection Agency: cppa.ca.gov
• California Attorney General: oag.ca.gov/privacy

15.2 For All U.S. Residents

You may file a complaint regarding deceptive or unfair privacy practices with the Federal Trade Commission (FTC):

• FTC Complaint Center: reportfraud.ftc.gov
• FTC Website: www.ftc.gov

16. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our business practices, services, or applicable laws. When we make material changes to this policy, we will:

• Post the updated policy on our website at cafemod.top with a revised "Last Updated" date.
• Send you an email notification if the changes are material and you have an active account with us.
• Display a prominent notice on our website for a reasonable period following any significant updates.

Your continued use of our services after any changes to this Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this policy periodically to stay informed about how we protect your information.

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal information, please do not hesitate to contact us. We are committed to addressing your inquiries promptly and transparently.

When contacting us regarding a privacy matter, please include your full name, the email address associated with your account (if applicable), and a clear description of your inquiry or request. This will help us process your request as efficiently as possible.