Privacy Policy

This Privacy Policy describes how Dewey's Pizza ("we," "us," "our," or "the Company") collects, uses, discloses, and protects the personal information of individuals ("you," "your," or "user") who visit our website at deweys-bbq.click, place orders, interact with our digital services, or otherwise engage with our business. We are committed to protecting your privacy and handling your personal information in a transparent, lawful, and responsible manner.

Please read this Privacy Policy carefully. By accessing or using our website, placing an order, or otherwise interacting with our services, you acknowledge that you have read, understood, and agree to the practices described in this policy. If you do not agree with any part of this Privacy Policy, please discontinue use of our website and services immediately.

This Privacy Policy is governed by applicable United States federal and state privacy laws, including but not limited to the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission (FTC) Act, and other applicable consumer protection regulations.

1. About Us

Dewey's Pizza is a food service business operating in the United States. Our contact information for all privacy-related matters is as follows:

For all privacy inquiries, data subject requests, or concerns regarding this Privacy Policy, please contact us at the email address listed above. We endeavor to respond to all privacy-related inquiries within thirty (30) days of receipt.

2. Scope of This Privacy Policy

This Privacy Policy applies to:

• All visitors to our website at deweys-bbq.click
• Customers who place online orders through our website or affiliated ordering platforms
• Individuals who create user accounts or loyalty program memberships with us
• Subscribers to our email newsletters, promotional communications, or SMS alerts
• Individuals who contact us via email, telephone, or other communication channels
• Users who interact with us on social media platforms or through third-party review sites
• Job applicants who submit employment-related information to us

This Privacy Policy does not apply to third-party websites, applications, or services that may be linked from our website. We encourage you to review the privacy policies of any third-party services you choose to access, as we are not responsible for their privacy practices.

3. Information We Collect

We collect various categories of personal information depending on how you interact with us. The types of information we collect are described below:

3.1 Personal Identification Information

When you create an account, place an order, or contact us, we may collect information that identifies you personally, including:

• Full name (first and last name)
• Email address
• Phone number (including mobile number for SMS communications)
• Mailing or delivery address
• Date of birth (when required for age verification purposes)
• Username and password for account access
• Profile photo or avatar (if voluntarily submitted)

3.2 Payment and Transaction Information

When you make a purchase or place an order through our website, we collect payment-related information necessary to process your transaction, including:

• Credit card or debit card details (processed securely through our payment processors)
• Billing address
• Order history and transaction records
• Gift card or promotional code usage
• Refund and return records

Please note that we do not directly store full payment card numbers on our servers. Payment card data is handled by our PCI-DSS compliant third-party payment processors.

3.3 Usage and Behavioral Data

We automatically collect certain information about how you use our website and digital services, including:

• Pages visited, links clicked, and time spent on specific pages
• Search queries entered on our website
• Products or menu items viewed, added to cart, or ordered
• Frequency of visits and session duration
• Referral sources (how you arrived at our website)
• Interactions with emails and push notifications
• Features used within our web application or mobile platform

3.4 Device and Technical Information

We collect technical data about the devices and systems you use to access our services, including:

• IP address and approximate geographic location derived from IP
• Device type (desktop, mobile, tablet)
• Operating system and version
• Browser type and version
• Unique device identifiers (such as mobile advertising IDs)
• Network connection type and carrier information
• Time zone settings and language preferences

3.5 Location Information

With your permission or as reasonably necessary to provide delivery services, we may collect:

• Precise GPS location data (if you enable location services on your device)
• Approximate location based on your IP address
• Delivery address information provided during order placement

3.6 Communications and User-Generated Content

When you communicate with us or interact with our platform in other ways, we may collect:

• Content of emails, chat messages, or support tickets sent to us
• Feedback, reviews, and ratings you provide about our food or service
• Survey responses and market research participation data
• Social media posts or mentions where you tag our brand
• Recorded phone calls (when permitted by law and with notice)

3.7 Cookies and Tracking Technologies

We use cookies, web beacons, pixels, and similar tracking technologies to collect information about your browsing activity on our website. For more detailed information about our cookie practices, please refer to Section 9 of this Privacy Policy.

3.8 Information from Third Parties

We may receive personal information about you from third-party sources, such as:

• Third-party food delivery platforms (e.g., DoorDash, Uber Eats, Grubhub) when you place orders through those services
• Social media platforms when you use social login features
• Advertising networks that provide demographic and interest data
• Loyalty program partners
• Public databases and commercially available data sources
• Analytics providers who supplement data collected directly from our website

4. How We Use Your Information

We use the personal information we collect for a variety of legitimate business purposes. These include:

4.1 Service Provision and Order Fulfillment

• Processing and fulfilling your food orders, including delivery or pickup arrangements
• Managing your account and account preferences
• Processing payments and issuing receipts or invoices
• Communicating order confirmations, status updates, and delivery notifications
• Handling refunds, cancellations, and order modifications
• Providing customer support and resolving complaints or disputes

4.2 Marketing and Promotional Communications

• Sending promotional emails, newsletters, and special offers (with your consent where required)
• Delivering personalized recommendations based on your order history and preferences
• Conducting loyalty programs, rewards, and promotions
• Sending SMS or push notification alerts about deals and new menu items (with your opt-in consent)
• Serving targeted advertising on our website and third-party platforms
• Retargeting campaigns to remind you of items you previously viewed or added to your cart

4.3 Analytics and Business Improvement

• Analyzing website traffic, user behavior, and purchasing patterns
• Understanding customer preferences to improve our menu offerings
• Measuring the effectiveness of our marketing campaigns
• Identifying technical issues and improving website performance
• Conducting internal research and business analytics
• Generating anonymized or aggregated reports about customer trends

4.4 Legal Compliance and Safety

• Complying with applicable federal, state, and local laws and regulations
• Responding to lawful requests from government authorities or law enforcement
• Detecting, investigating, and preventing fraudulent transactions or unauthorized activity
• Protecting the security and integrity of our systems and data
• Enforcing our Terms of Service and other legal agreements
• Exercising or defending legal claims

4.5 Operational and Administrative Purposes

• Verifying your identity when you contact customer support
• Administering job applications and employment processes
• Maintaining accurate business records
• Communicating important changes to our services, policies, or terms

5. Sharing Your Information with Third Parties

We do not sell your personal information in the traditional sense. However, we may share your personal information with third parties in the following circumstances:

5.1 Service Providers and Business Partners

We work with trusted third-party service providers who assist us in operating our business. These include:

• Payment processors: To securely handle credit card and payment transactions
• Delivery platforms: Such as DoorDash, Uber Eats, or Grubhub, to fulfill delivery orders
• Cloud hosting providers: To store and manage our website data and infrastructure
• Email marketing platforms: To send promotional and transactional email communications
• Analytics providers: Such as Google Analytics, to understand website usage and user behavior
• Customer support tools: To manage customer inquiries and support tickets
• Advertising networks: To deliver targeted advertisements on our behalf
• Point-of-sale (POS) system providers: To manage in-restaurant and online transactions

All service providers are required to handle your personal information in accordance with applicable privacy laws and our data processing agreements, and are restricted from using your information for any purpose other than performing services on our behalf.

5.2 Legal Requirements and Law Enforcement

We may disclose your personal information when required by law or in good-faith belief that such action is necessary to:

• Comply with a legal obligation, subpoena, court order, or regulatory requirement
• Respond to lawful requests from government authorities, including law enforcement agencies
• Protect and defend the legal rights or property of Dewey's Pizza
• Prevent or investigate possible wrongdoing in connection with our services
• Protect the personal safety of our users, staff, or the general public

5.3 Business Transfers

In the event of a merger, acquisition, sale of assets, bankruptcy, or other business reorganization, your personal information may be transferred to a successor entity. We will notify you of any such transfer and provide you with the opportunity to exercise your rights under applicable law before your information is subject to a different privacy policy.

5.4 With Your Consent

We may share your personal information with additional third parties when you have given us explicit consent to do so, such as when you participate in a joint promotion, co-branded offer, or opt in to sharing your data with a specific partner.

5.5 Aggregated and De-Identified Data

We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you with third parties for research, marketing, analytics, or other lawful purposes. This sharing does not constitute a disclosure of personal information.

6. Data Security

We take the security of your personal information seriously and implement a range of technical, administrative, and physical safeguards designed to protect your data from unauthorized access, disclosure, alteration, or destruction. Our security measures include:

• Encryption: We use Secure Socket Layer (SSL) / Transport Layer Security (TLS) technology to encrypt data transmitted between your browser and our website.
• Access controls: We restrict access to personal information to authorized employees and contractors who have a legitimate business need to access such data.
• Secure payment processing: All payment card transactions are processed through PCI-DSS compliant payment processors, and we do not store full card numbers on our servers.
• Regular security assessments: We conduct periodic reviews and testing of our security infrastructure to identify and remediate vulnerabilities.
• Employee training: Our staff receive training on data privacy and security best practices.
• Incident response procedures: We maintain documented procedures for responding to potential data breaches, including notifying affected individuals and regulators as required by applicable law.

In the event of a data breach that affects your personal information, we will notify you in accordance with applicable federal and state breach notification laws, including applicable state data breach notification statutes.

7. Your Privacy Rights

Depending on your state of residence and applicable law, you may have the following rights with respect to your personal information:

7.1 Right to Know and Access

You have the right to request information about the categories and specific pieces of personal information we have collected about you, the sources from which that information was collected, the purposes for which we use it, and the categories of third parties with whom we share it.

7.2 Right to Correction

You have the right to request that we correct inaccurate personal information we hold about you, taking into account the nature of the information and the purposes of its processing.

7.3 Right to Deletion

You have the right to request that we delete personal information we have collected about you, subject to certain exceptions. We may retain personal information where necessary to complete a transaction, detect security incidents, comply with legal obligations, exercise legal claims, or for other legitimate purposes permitted by law.

7.4 Right to Opt Out of Sale or Sharing

Under the CCPA/CPRA, California residents have the right to opt out of the "sale" or "sharing" of their personal information for cross-context behavioral advertising purposes. If we engage in such activities, you may exercise this right by contacting us at [email protected] or by using the "Do Not Sell or Share My Personal Information" mechanism on our website.

7.5 Right to Limit Use of Sensitive Personal Information

California residents have the right to limit our use and disclosure of sensitive personal information (such as precise geolocation, financial account information, or health-related data) to purposes necessary to perform the services requested or as otherwise permitted by the CPRA.

7.6 Right to Data Portability

You have the right to receive a copy of your personal information in a structured, commonly used, and machine-readable format and to have that information transmitted to another controller where technically feasible.

7.7 Right to Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights. We will not deny you services, charge you different prices, provide a different level of service quality, or suggest that you will receive different treatment because you exercised your rights under applicable privacy law.

7.8 How to Submit a Privacy Rights Request

To exercise any of your privacy rights, please submit a verifiable request to us using one of the following methods:

• Email: [email protected]
• Website: deweys-bbq.click

When submitting a request, please provide sufficient information to allow us to verify your identity, such as your full name, email address associated with your account, and a description of your request. We will respond to verifiable consumer requests within 45 days of receipt. If we require additional time, we will notify you of the extension and the reason for it. We may respond to up to two requests per 12-month period at no charge.

7.9 Authorized Agents

You may designate an authorized agent to submit privacy rights requests on your behalf. To verify the authority of an agent, we may require written authorization signed by you or proof of a power of attorney. We may still contact you directly to verify your identity as part of the request process.

8. Marketing Communications and Opt-Out

We may send you promotional emails, newsletters, special offers, and other marketing communications about Dewey's Pizza products and services. You have the right to opt out of receiving such communications at any time.

8.1 Email Marketing

To unsubscribe from marketing emails, you may:

• Click the "Unsubscribe" link included at the bottom of any marketing email
• Email us directly at [email protected] with the subject line "Unsubscribe"

Please note that even if you opt out of marketing communications, we may still send you transactional or service-related emails regarding your orders, account, or legal notices.

8.2 SMS and Text Messages

If you have opted in to receive SMS marketing messages, you may opt out at any time by replying "STOP" to any text message you receive from us. Standard messaging rates may apply.

8.3 Push Notifications

You may disable push notifications from our website or any mobile application by adjusting the settings on your device or within your account preferences.

9. Cookie Policy Overview

Our website uses cookies, web beacons, pixels, and similar tracking technologies to enhance your browsing experience, analyze website performance, and deliver personalized content and advertising.

9.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the website to function properly, enabling core features such as login sessions, shopping carts, and security settings. These cookies cannot be disabled.
• Performance and Analytics Cookies: Help us understand how visitors interact with our website by collecting anonymous usage data. We use tools such as Google Analytics for this purpose.
• Functional Cookies: Allow the website to remember your preferences and settings, such as language, location, and saved items, to provide a more personalized experience.
• Targeting and Advertising Cookies: Used to deliver advertisements that are relevant to your interests, track ad campaign effectiveness, and limit the number of times you see an ad.

9.2 Managing Cookie Preferences

You may control and manage cookie settings in several ways:

• Adjusting your browser settings to block or delete cookies (note that this may affect website functionality)
• Using our cookie consent tool or banner displayed on your first visit to our website
• Opting out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on
• Exercising your right to opt out of targeted advertising through industry opt-out tools such as the Digital Advertising Alliance (DAA) or Network Advertising Initiative (NAI)

For full details about the cookies we use and how to manage them, please refer to our complete Cookie Policy available on our website at deweys-bbq.click.

10. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, as outlined in this Privacy Policy, and to comply with applicable legal obligations. Our general data retention periods are as follows:

When your personal information is no longer required for its original purpose and there is no legal basis for continued retention, we will securely delete, destroy, or anonymize such information.

11. Children's Privacy

We are committed to complying with the Children's Online Privacy Protection Act (COPPA) and other applicable laws protecting the privacy of minors. Our website is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13 without verifiable parental consent.

If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at [email protected]. Upon verification, we will promptly delete any personal information collected from the child from our systems.

Individuals between the ages of 13 and 17 should only use our website and services with the supervision and consent of a parent or legal guardian. We encourage parents and guardians to monitor their children's online activities and to use parental control tools available from online services and software manufacturers.

12. International Data Transfers

Dewey's Pizza is a United States-based business, and our primary data processing activities occur within the United States. However, some of our third-party service providers may be located in other countries and may process your personal information outside of the United States.

If your personal information is transferred internationally, we take appropriate steps to ensure that such transfers are conducted in compliance with applicable law and that your data is afforded a comparable level of protection to that provided under U.S. law. These steps may include:

• Entering into data processing agreements with service providers that include standard contractual clauses or similar data protection mechanisms
• Verifying that recipient countries have adequate data protection laws in place
• Implementing technical and organizational measures to protect data during international transfer

By using our website and services from outside the United States, you acknowledge and consent to the transfer of your personal information to the United States and to other countries in which our service providers operate, where data protection laws may differ from those of your country of residence.

13. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have specific privacy rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), in addition to those described in Section 7 above. These rights include:

• Right to Know: The right to know about the personal information we collect, use, disclose, and "sell" or "share."
• Right to Delete: The right to request deletion of personal information we have collected from you, subject to certain exceptions.
• Right to Correct: The right to request correction of inaccurate personal information.
• Right to Opt Out: The right to opt out of the "sale" or "sharing" of your personal information for cross-context behavioral advertising.
• Right to Limit Use of Sensitive Personal Information: The right to limit our use of sensitive personal information to specified permissible purposes.
• Right to Non-Discrimination: The right not to be discriminated against for exercising your CCPA/CPRA rights.

To submit a California privacy rights request, please contact us at [email protected]. We will respond to verifiable consumer requests within 45 days, with the possibility of a 45-day extension where reasonably necessary.

13.1 Categories of Personal Information We Have Collected

In the past 12 months, we have collected the following categories of personal information as defined by the CCPA:

14. Do Not Track Signals

Some web browsers may transmit "Do Not Track" (DNT) signals to websites. Currently, there is no universally agreed-upon standard for how websites should respond to DNT signals, and we do not currently alter our data collection practices in response to DNT signals from browsers. However, you may limit tracking through the cookie management options described in Section 9 of this Privacy Policy.

15. Third-Party Links and Services

Our website may contain links to third-party websites, social media platforms, review sites, or other online services that are not operated by us. These links are provided for your convenience and informational purposes only. We have no control over the content, privacy practices, or data collection activities of these third-party sites.

We strongly encourage you to review the privacy policies of any third-party websites you visit. We are not responsible or liable for the privacy practices, security measures, or content of such websites, and your use of those sites is subject to their respective terms and policies.

16. How to File a Complaint

If you believe that we have violated your privacy rights or failed to comply with applicable privacy laws, we encourage you to contact us first so that we can address your concerns directly. Please contact our privacy team at:

• Email: [email protected]
• Website: deweys-bbq.click

We will endeavor to respond to your complaint within thirty (30) days and work with you to resolve the matter in good faith.

16.1 Filing a Complaint with Regulatory Authorities

If you are not satisfied with our response or believe we are not handling your personal information in accordance with the law, you have the right to file a complaint with the appropriate regulatory authority. Depending on your location and the nature of your complaint, relevant authorities include:

• Federal Trade Commission (FTC): For general consumer protection and privacy complaints in the United States. Visit www.ftc.gov or call 1-877-FTC-HELP (1-877-382-4357).
• California Privacy Protection Agency (CPPA): California residents may file complaints related to CCPA/CPRA violations with the CPPA. Visit cppa.ca.gov for more information.
• Your State Attorney General's Office: Most U.S. states have consumer protection offices that accept privacy-related complaints. Contact your state Attorney General's office for information specific to your state.

17. Changes to This Privacy Policy

We reserve the right to update, modify, or revise this Privacy Policy at any time to reflect changes in our business practices, legal requirements, or technological developments. When we make material changes to this Privacy Policy, we will:

• Update the "Last Updated" date at the top of this page
• Post the revised policy on our website at deweys-bbq.click
• Send an email notification to registered account holders where required or appropriate
• Display a prominent notice on our website homepage for a reasonable period following material changes

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website or services after the effective date of any changes constitutes your acceptance of the revised Privacy Policy.

18. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please do not hesitate to contact us. We take privacy seriously and are committed to addressing your inquiries promptly and thoroughly.

We aim to respond to all privacy-related inquiries and requests within 30 days of receipt. For certain types of requests (such as formal data subject access requests under the CCPA/CPRA), we may require up to 45 days, with the possibility of a further 45-day extension in complex cases, and we will notify you accordingly.