Privacy Policy

This Privacy Policy describes how Via 313 ("we," "us," "our," or "the Company") collects, uses, discloses, retains, and protects personal information when you visit our website at pizzas-via313.rest, place an order, use our services, or otherwise interact with us. We are committed to protecting your privacy and handling your personal data with transparency, integrity, and care.

By accessing or using our website, placing an order online, signing up for communications, or otherwise interacting with Via 313, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy. If you do not agree with the practices described herein, please refrain from using our website or services.

This Privacy Policy applies to all users located in the United States, including residents of California who may have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). Where applicable, we also comply with the Federal Trade Commission (FTC) Act and other applicable federal and state laws.

1. About Us / Data Controller

The entity responsible for processing your personal data under this Privacy Policy is:

Via 313 is a food service business operating in the United States. If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us using the details provided above or in the Contact section at the end of this document.

2. Information We Collect

We collect various types of personal information depending on how you interact with us. The categories of information we collect include, but are not limited to, the following:

2.1 Information You Provide Directly

When you use our website, place an order, create an account, contact us, or participate in any promotional activities, we may collect:

• Identity Information: Your full name, username, or similar identifier.
• Contact Information: Email address, telephone number, billing address, and delivery address.
• Account Information: Username, password (stored in encrypted form), and account preferences.
• Order Information: Items ordered, special instructions, order history, dietary preferences, and associated order details.
• Payment Information: Credit or debit card details, billing address, and transaction information. Please note that full payment card data is processed by our secure third-party payment processors and is not stored directly on our servers.
• Communications: Messages, feedback, reviews, or inquiries you send to us via email, contact forms, or other communication channels.
• Marketing Preferences: Your preferences in receiving marketing communications from us and your communication preferences.

2.2 Information Collected Automatically

When you visit our website, we automatically collect certain technical and usage information through cookies, web beacons, pixels, log files, and similar tracking technologies. This includes:

• Device Information: Device type, operating system, browser type and version, screen resolution, language settings, and unique device identifiers.
• Usage Data: Pages visited, time spent on pages, links clicked, items viewed, search queries entered on our site, and the sequence of actions taken during your visit.
• Log Data: IP address, browser type, referring/exit pages, date and time of visits, error logs, and crash reports.
• Location Information: General geographic location derived from your IP address. If you grant permission, we may collect more precise geolocation data to assist with delivery services.
• Cookie Data: Information stored in cookies placed on your device. Please see our Cookies section below for more details.

2.3 Information from Third Parties

We may receive personal information about you from third-party sources, including:

• Payment Processors: Confirmation and transaction details from payment service providers such as Stripe, Square, or similar processors.
• Delivery Platforms: If you order through a third-party delivery platform (such as DoorDash, Grubhub, or Uber Eats), we may receive order and contact information necessary to fulfill your order.
• Analytics Providers: Aggregated and anonymized analytics data from services like Google Analytics to help us understand website usage patterns.
• Social Media Platforms: If you interact with us or engage with content on social media platforms, we may receive information such as your public profile information and engagement data.
• Publicly Available Sources: Publicly available information such as business directories and public social media posts relevant to our services.

3. How We Use Your Information

We use the personal information we collect for specific, legitimate purposes related to operating our food service business and improving your experience. The purposes for which we use your data include:

3.1 Providing and Fulfilling Services

• Processing and fulfilling your food orders, including online orders and delivery coordination.
• Managing your account and maintaining your order history and preferences.
• Processing payments and issuing receipts or order confirmations.
• Coordinating delivery, pickup, or catering arrangements.
• Communicating order status updates, estimated delivery times, and other service-related information.
• Responding to your inquiries, complaints, feedback, and requests for customer support.

3.2 Business Operations and Administration

• Managing our internal records, accounting, and business operations.
• Ensuring the security and integrity of our website and systems.
• Detecting, investigating, and preventing fraudulent transactions, unauthorized access, or other illegal activities.
• Complying with legal obligations, including tax reporting, food safety regulations, and other applicable laws.
• Enforcing our Terms of Service and other applicable agreements.

3.3 Analytics and Website Improvement

• Analyzing website usage patterns, traffic, and user behavior to improve the functionality and usability of our website.
• Conducting research and statistical analysis to better understand our customers' needs and preferences.
• Testing and improving our website features, menu offerings, and overall customer experience.
• Monitoring the performance and reliability of our digital infrastructure.

3.4 Marketing and Communications

• Sending you promotional emails, newsletters, special offers, and news about Via 313, where you have opted in or where we have a legitimate interest to do so under applicable law.
• Personalizing your experience on our website and in our communications based on your order history and preferences.
• Conducting surveys and gathering customer feedback to improve our products and services.
• Running contests, promotions, or loyalty programs you choose to participate in.
• Retargeting and serving relevant advertisements on third-party platforms, where permitted.

Your Marketing Choices: You may opt out of receiving marketing communications from us at any time by clicking the "unsubscribe" link in any marketing email, or by contacting us directly at [email protected]. Please note that even if you opt out of marketing communications, we may still send you transactional or service-related messages (such as order confirmations and delivery updates) as these are necessary to fulfill your orders.

4. Legal Basis for Processing

While the concept of legal basis is primarily associated with laws like the GDPR, we believe in transparency regarding why we process your data. Under U.S. law, including the FTC Act and the CCPA/CPRA, we process your data for the following reasons:

• Contractual Necessity: Processing required to fulfill orders you place with us, manage your account, and provide our services.
• Legal Obligations: Processing required to comply with applicable federal, state, and local laws, including tax law, food safety regulations, and consumer protection laws.
• Legitimate Business Interests: Processing conducted for our legitimate business interests, such as fraud prevention, improving our services, and direct marketing to existing customers, provided these interests do not override your rights.
• Your Consent: Where you have provided explicit consent, such as opting into marketing communications or allowing precise location tracking.

5. Sharing Your Information with Third Parties

We do not sell your personal information for monetary consideration. However, we may share your data with trusted third parties in the following circumstances:

5.1 Service Providers and Business Partners

We work with carefully selected third-party service providers who assist us in operating our business and providing services to you. These providers may access your personal data only to perform specific tasks on our behalf and are contractually obligated to protect your data and use it solely for the purposes we specify. Categories of service providers include:

• Payment processing companies (e.g., Stripe, Square)
• Delivery management and logistics platforms
• Website hosting, cloud storage, and IT infrastructure providers
• Email marketing and communication platforms
• Customer relationship management (CRM) software providers
• Analytics and data insight platforms (e.g., Google Analytics)
• Online ordering and point-of-sale system providers

5.2 Third-Party Delivery Platforms

If you place an order through a third-party delivery platform (such as DoorDash, Grubhub, Uber Eats, or similar services), please be aware that your information will also be subject to the privacy policies of those platforms. We encourage you to review those policies directly.

5.3 Legal Requirements and Safety

We may disclose your personal information if required to do so by law or if we believe in good faith that such disclosure is necessary to:

• Comply with a legal obligation, court order, subpoena, or governmental request under applicable federal, state, or local law.
• Protect and defend our rights, property, or interests.
• Prevent or investigate possible wrongdoing or illegal activities in connection with our services.
• Protect the personal safety of our customers, employees, or the public.

5.4 Business Transfers

If Via 313 is involved in a merger, acquisition, sale of assets, reorganization, or similar business transaction, your personal information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website of any such change in ownership or use of your personal information and any choices you may have.

5.5 Aggregated and Anonymized Data

We may share aggregated or anonymized information — which does not directly identify any individual — with third parties for business analysis, research, marketing, or other purposes.

6. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies (such as web beacons, pixels, and local storage) to enhance your browsing experience, remember your preferences, analyze website performance, and deliver relevant content and advertisements.

6.1 Types of Cookies We Use

6.2 Managing Your Cookie Preferences

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or receive a notification before a cookie is placed. Please note that disabling certain cookies may affect the functionality of our website and your ability to place orders. You may also opt out of certain analytics cookies by visiting the Google Analytics Opt-Out Browser Add-on.

7. Data Security

We take the security of your personal information seriously and implement a range of technical, administrative, and physical safeguards designed to protect your data against unauthorized access, disclosure, alteration, loss, or destruction. Our security measures include:

• Encryption: We use Secure Socket Layer (SSL) / Transport Layer Security (TLS) encryption to protect data transmitted between your browser and our website. Sensitive data, including passwords, is stored using industry-standard hashing techniques.
• Access Controls: Access to personal data is restricted to authorized employees and service providers who need the information to perform their job functions, and they are bound by confidentiality obligations.
• Secure Payment Processing: We use PCI-DSS compliant third-party payment processors to handle payment card information, which means your card details are not directly stored on our servers.
• Regular Security Assessments: We conduct periodic reviews of our data collection, storage, and processing practices and security measures.
• Incident Response: We maintain procedures for responding to potential data breaches, including notifying affected individuals and regulatory authorities where required by law.

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security. In the event of a data breach that affects your rights and freedoms, we will notify you and the relevant authorities in accordance with applicable law.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with our legal obligations, resolve disputes, and enforce our agreements. The retention periods we apply are as follows:

When personal data is no longer required, we will securely delete or anonymize it. Where deletion is not immediately possible (e.g., data stored in backup systems), we will isolate it from further processing until deletion is possible.

9. Your Privacy Rights

Depending on your location, you may have various rights regarding your personal information. We are committed to honoring these rights to the fullest extent required by applicable law.

9.1 Rights Available to All U.S. Users

• Right to Know / Access: You have the right to request information about the personal data we hold about you, including what categories of data we collect, the purposes for which we use it, and with whom we share it.
• Right to Correction: You have the right to request that we correct inaccurate or incomplete personal information we hold about you.
• Right to Deletion: You have the right to request that we delete personal information we hold about you, subject to certain legal exceptions (e.g., where we need to retain data for legal compliance or fraud prevention).
• Right to Opt Out of Marketing: You may opt out of receiving marketing communications from us at any time.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights, including by denying services, charging different prices, or providing a different quality of service.

9.2 Additional Rights for California Residents (CCPA/CPRA)

If you are a resident of California, you have the following additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), effective January 1, 2023:

• Right to Know (Specific Pieces): You may request the specific pieces of personal information we have collected about you over the past 12 months.
• Right to Data Portability: You have the right to receive a copy of the personal information we have collected about you in a portable, readily usable format.
• Right to Opt Out of Sale or Sharing: You have the right to direct us not to sell or share your personal information with third parties. While we do not sell personal information for monetary consideration, to the extent our use of cookies and advertising technologies constitutes a "sale" or "sharing" under the CPRA, you may exercise this right.
• Right to Limit Use of Sensitive Personal Information: You have the right to limit our use and disclosure of sensitive personal information to specific permitted purposes as defined under CPRA.
• Right to Correct Inaccurate Personal Information: You have the right to request that we correct inaccurate personal information we hold about you.
• Right Against Automated Decision-Making: You have the right to opt out of automated decision-making, including profiling, that produces legal or similarly significant effects.

9.3 How to Exercise Your Rights

To submit a privacy rights request, you may contact us via:

• Email: [email protected]
• Website: pizzas-via313.rest

We may need to verify your identity before processing your request. Verification may involve confirming your name, email address, and other information we already have on file. We will not require you to create an account to submit a request. Authorized agents may submit requests on your behalf provided they submit appropriate written authorization.

10. Children's Privacy

Our website and services are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13 years of age. Our online ordering services are intended for use by individuals who are at least 18 years of age, as placing a food order constitutes entering into a contractual relationship.

If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at [email protected]. If we become aware that we have inadvertently collected personal information from a child under the age of 13, we will take prompt steps to delete that information from our records in compliance with the Children's Online Privacy Protection Act (COPPA).

Minors between the ages of 13 and 17 should not use our services without the supervision and consent of a parent or guardian. We encourage parents and guardians to monitor their children's online activities.

11. International Data Transfers

Via 313 is based in the United States, and the personal information we collect is primarily stored and processed within the United States. By using our website and services, you consent to the transfer and processing of your information in the United States.

If you are accessing our services from outside the United States, please be aware that your information may be transferred to, stored, and processed in a jurisdiction whose data protection laws may differ from those in your country of residence. In such cases, we take appropriate safeguards to ensure that your personal data remains protected in accordance with this Privacy Policy, including through contractual mechanisms where applicable.

Our third-party service providers (such as cloud hosting companies and analytics providers) may also process your data in locations outside your home jurisdiction. We require all such providers to implement appropriate security measures consistent with applicable law.

12. Third-Party Websites and Links

Our website may contain links to third-party websites, social media platforms, delivery services, or other online services. This Privacy Policy applies only to our website and services. We are not responsible for the privacy practices of third-party websites, and we encourage you to review the privacy policies of any third-party sites you visit. The inclusion of a link to a third-party website does not constitute an endorsement or recommendation by Via 313.

13. Do Not Track Signals

Some browsers transmit "Do Not Track" (DNT) signals to websites. Currently, there is no universally accepted standard for how websites should respond to DNT signals. We do not currently alter our data collection and use practices in response to DNT signals. However, as regulations evolve, we will revisit this practice and update our approach accordingly.

14. How to File a Complaint

If you believe that we have handled your personal information in a manner inconsistent with this Privacy Policy or in violation of applicable law, we encourage you to contact us first so that we can attempt to resolve your concern.

Please contact us at:

• Email: [email protected]

If you are not satisfied with our response or believe we are not processing your personal data in accordance with applicable law, you may file a complaint with the relevant regulatory authority:

14.1 Federal Trade Commission (FTC)

The Federal Trade Commission is the primary U.S. federal agency responsible for consumer protection and enforcing rules against unfair or deceptive business practices, including privacy violations.

• Website: www.ftc.gov
• File a Complaint: reportfraud.ftc.gov
• Phone: 1-877-382-4357

14.2 California Residents — California Privacy Protection Agency (CPPA)

California residents may file complaints with the California Privacy Protection Agency, which is the agency responsible for enforcing the CCPA/CPRA.

• Website: cppa.ca.gov

14.3 California Attorney General

California residents may also submit consumer complaints to the California Attorney General's Office.

• Website: oag.ca.gov/privacy

15. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, business operations, legal requirements, or regulatory developments. When we make significant changes to this Policy, we will:

• Update the "Last Updated" date at the top of this page.
• Post the revised Privacy Policy on our website at pizzas-via313.rest.
• Where required or appropriate, notify you by email or by displaying a prominent notice on our website.

We encourage you to periodically review this Privacy Policy to stay informed about how we are protecting your personal information. Your continued use of our website or services following the posting of any changes to this Privacy Policy constitutes your acceptance of those changes, to the extent permitted by applicable law.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, the manner in which we process your personal data, or your rights as described in this Policy, please do not hesitate to contact us:

We are committed to responding to your inquiries promptly and in accordance with applicable legal timelines. For CCPA/CPRA requests, we will respond within 45 days of receiving your verified request.