Privacy Policy

This Privacy Policy describes how Piada ("we," "us," or "our") collects, uses, discloses, and protects your personal information when you visit our website at cafe-piada.click, place orders, use our services, or otherwise interact with us. We are committed to protecting your privacy and handling your personal data with transparency and integrity.

By accessing or using our website and services, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our website and services immediately.

We operate in the United States and comply with all applicable federal and state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), and other applicable consumer protection regulations. If you are a California resident, please pay special attention to the sections specifically addressing your rights under California law.

1. About Us

Piada is a food service business operating in the United States. We provide food and beverage services to our customers through our website and physical locations. Your trust is important to us, and we take the protection of your personal information very seriously.

2. Information We Collect

We collect various types of information in connection with your use of our website and services. The categories of personal information we collect are described below.

2.1 Personal Information You Provide to Us

When you interact with us directly — for example, by creating an account, placing an order, signing up for our newsletter, or contacting our customer support — you may provide us with the following types of personal information:

• Identity Information: Your first name, last name, username, or similar identifier.
• Contact Information: Your email address, telephone number, billing address, delivery address, and postal code.
• Account Credentials: Your username and password (stored in encrypted form), security questions, and related authentication information.
• Payment Information: Credit or debit card numbers, billing addresses, and other financial information necessary to process your transactions. Note: We use third-party payment processors and do not store full card numbers on our servers.
• Order Information: Details of food and beverage orders you place, including menu items selected, special dietary requirements, allergies or food preferences, delivery instructions, and order history.
• Communications: Any messages, feedback, reviews, complaints, or other communications you send to us through our website, email, or other channels.
• Promotional Preferences: Your preferences for receiving marketing communications and updates from us.
• Survey Responses: Information you provide when you participate in surveys, promotions, contests, or feedback programs we offer.

2.2 Information Collected Automatically

When you visit our website or interact with our digital services, we automatically collect certain technical and usage information, including:

• Device Information: IP address, browser type and version, operating system and platform, device type (desktop, mobile, tablet), device identifiers, and hardware configuration.
• Usage Data: Pages you view, links you click, time and date of your visit, time spent on pages, referring URLs, exit pages, and navigation paths through our website.
• Location Data: General geographic location derived from your IP address, and if you grant permission, more precise location information to help us identify nearby locations or facilitate delivery services.
• Log Data: Server logs, error reports, and other diagnostic data collected when you use our website or services.
• Cookie and Tracking Data: Information collected through cookies, web beacons, pixel tags, and similar tracking technologies as described in Section 8 of this policy.

2.3 Information from Third Parties

We may also receive personal information about you from third-party sources, including:

• Social Media Platforms: If you choose to log in to our website using a social media account (such as Facebook or Google), we may receive certain profile information as permitted by your privacy settings on those platforms.
• Business Partners and Affiliates: We may receive information from marketing partners, loyalty program partners, or other affiliated businesses.
• Third-Party Delivery Platforms: If you order our food through third-party delivery services, we may receive order-related information to fulfill your request and improve our services.
• Analytics Providers: We work with analytics companies that help us understand how users interact with our website and services.
• Public Sources: Publicly available information such as social media posts or publicly accessible databases.

2.4 Sensitive Personal Information

We may collect certain sensitive personal information in limited circumstances, such as dietary restrictions, food allergies, and health-related preferences that you voluntarily provide to ensure we can serve you safely. We handle such information with heightened care and use it only to fulfill the specific purpose for which it was provided.

3. How We Use Your Information

We use the personal information we collect for a variety of purposes, all of which are grounded in legitimate business needs, your consent, or legal obligations. Specifically, we use your information to:

3.1 Service Provision and Order Fulfillment

• Process and fulfill your food orders, including coordinating delivery or pickup arrangements.
• Create and manage your user account.
• Process payments and prevent fraudulent transactions.
• Send you order confirmations, receipts, and delivery updates.
• Respond to your questions, comments, and requests for customer support.
• Accommodate special dietary requirements, food allergies, or other food-related preferences you share with us.

3.2 Website and Service Improvement

• Analyze how users interact with our website to improve functionality and user experience.
• Conduct research and development to enhance our menu offerings and services.
• Identify and fix technical issues, bugs, and errors on our platform.
• Develop new features, products, and services based on user feedback and behavior.
• Monitor and maintain the security and integrity of our website and systems.

3.3 Marketing and Communications

• Send you promotional emails, newsletters, special offers, and updates about our products and services — but only when you have opted in or where permitted by applicable law.
• Personalize your experience on our website by showing you content and offers relevant to your preferences and past interactions.
• Conduct targeted advertising campaigns on third-party platforms based on your interests and behaviors.
• Notify you about changes to our services, menu, or policies.

3.4 Legal and Compliance Purposes

• Comply with applicable laws, regulations, and legal processes.
• Enforce our Terms of Service and other agreements.
• Protect the rights, property, or safety of Piada, our customers, or others.
• Detect, investigate, and prevent fraudulent, abusive, or illegal activities.
• Respond to lawful requests from law enforcement or government authorities.

3.5 Analytics and Research

• Conduct internal analytics to understand customer preferences, order patterns, and business performance.
• Perform market research and customer satisfaction surveys.
• Generate aggregated, anonymized statistical reports for internal and external business purposes.

4. How We Share Your Information

We do not sell your personal information to third parties for monetary compensation. However, we may share your information with certain third parties in the following circumstances:

4.1 Service Providers

We share personal information with trusted third-party vendors and service providers who perform functions on our behalf, such as:

• Payment Processors: To securely process your payment transactions.
• Delivery Partners: To coordinate and fulfill food delivery orders to your specified address.
• Technology Providers: Hosting companies, cloud storage providers, and IT support services.
• Email and Marketing Platforms: To send transactional and marketing communications on our behalf.
• Analytics Providers: Services such as Google Analytics that help us understand website usage and user behavior.
• Customer Support Tools: Platforms that help us manage and respond to customer inquiries.

All service providers are contractually required to use your information only for the purposes we specify and to maintain appropriate security measures.

4.2 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, sale of assets, or similar corporate transaction, your personal information may be transferred as part of the business assets. We will notify you via email and/or a prominent notice on our website before your information is transferred and becomes subject to a different privacy policy.

4.3 Legal Requirements

We may disclose your information when required to do so by law, or in good-faith belief that such disclosure is necessary to:

• Comply with a legal obligation, court order, subpoena, or government request.
• Protect and defend the rights or property of Piada.
• Prevent or investigate possible wrongdoing in connection with our services.
• Protect the personal safety of users of our services or the general public.

4.4 With Your Consent

We may share your information with third parties for any other purpose with your explicit consent.

4.5 Aggregated and Anonymized Data

We may share aggregated or anonymized information — data that cannot reasonably be used to identify you — with third parties for research, marketing, analytics, and other business purposes.

5. Your Privacy Rights

Depending on your location and applicable law, you may have certain rights regarding your personal information. We are committed to honoring these rights in a timely and transparent manner.

5.1 Rights Available to All Users

• Right to Access: You have the right to request a copy of the personal information we hold about you.
• Right to Correction: You have the right to request that we correct any inaccurate or incomplete personal information.
• Right to Deletion: You may request that we delete your personal information, subject to certain legal exceptions.
• Right to Opt-Out of Marketing: You can opt out of receiving marketing communications from us at any time by clicking the "unsubscribe" link in any email we send or by contacting us directly.
• Right to Data Portability: Where technically feasible, you may request that we provide your personal information in a structured, commonly used, machine-readable format.

5.2 California Residents — CCPA/CPRA Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), which became fully effective on January 1, 2023:

• Right to Know: You have the right to know what personal information we have collected about you, including the categories of information, the purposes for collection, and the categories of third parties with whom we share it.
• Right to Delete: You can request deletion of your personal information we have collected, with limited exceptions.
• Right to Correct: You have the right to request correction of inaccurate personal information we maintain about you.
• Right to Opt-Out of Sale or Sharing: You have the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising. While we do not sell your data in the traditional sense, certain advertising practices may qualify as "sharing" under CPRA. You may exercise this right by contacting us at [email protected].
• Right to Limit Use of Sensitive Personal Information: You have the right to limit our use of sensitive personal information to purposes permitted by the CPRA.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you goods or services, charge you different prices, or provide you a different level of quality because you exercised your privacy rights.
• Authorized Agent: You may designate an authorized agent to submit requests on your behalf. We may require verification of the agent's authorization and your identity.

To exercise any of your California privacy rights, please submit a verifiable consumer request by emailing us at [email protected]. We will respond to your request within 45 days, and may extend that period by an additional 45 days when reasonably necessary with prior notice to you.

5.3 How to Exercise Your Rights

To exercise any of your privacy rights, please contact us using the information below:

• Email: [email protected]
• Website: cafe-piada.click

When submitting a request, please include sufficient information to allow us to verify your identity and locate your records. We may need to ask you for additional verification before processing your request. We will not use information provided in a rights request for any purpose other than fulfilling the request.

6. Data Security

We implement a range of technical, administrative, and physical security measures designed to protect your personal information from unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• Encryption: We use SSL/TLS encryption to protect data transmitted between your browser and our servers. Sensitive information such as payment data is encrypted both in transit and at rest.
• Access Controls: Access to personal information is limited to authorized personnel who need it to perform their job functions. We enforce role-based access controls and require authentication for system access.
• Secure Payment Processing: Payment transactions are processed through PCI DSS-compliant payment processors. We do not store full credit card numbers on our systems.
• Regular Security Assessments: We conduct periodic security reviews, vulnerability assessments, and penetration testing to identify and address potential security risks.
• Employee Training: Our staff receive regular training on data privacy and security best practices.
• Incident Response: We have a data breach response plan in place to quickly identify, contain, and remediate security incidents, and to notify affected individuals and relevant authorities as required by law.
• Third-Party Security: We require our service providers and partners to maintain appropriate security standards through contractual agreements.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. The specific retention periods depend on the type of information and the purpose of processing:

When personal information is no longer needed, we will securely delete or anonymize it in accordance with our data retention procedures. In some cases, we may be required to retain certain data for longer periods due to legal obligations.

8. Cookies and Tracking Technologies

Our website uses cookies, web beacons, pixel tags, and similar tracking technologies to enhance your browsing experience, analyze website performance, and deliver relevant content and advertising.

8.1 Types of Cookies We Use

• Essential Cookies: These cookies are necessary for the website to function properly, including enabling you to navigate the site, use shopping cart features, and complete orders.
• Performance and Analytics Cookies: These cookies collect information about how visitors use our website, such as which pages are visited most often and how users navigate between pages. This data helps us improve the functionality and content of our site.
• Functional Cookies: These cookies remember choices you make (such as your language preferences or saved items) to provide a more personalized experience.
• Marketing and Advertising Cookies: These cookies track your browsing activity across websites and are used to deliver targeted advertisements relevant to your interests.

8.2 Your Cookie Choices

You can control and manage cookies through your browser settings. Most browsers allow you to refuse some or all cookies, or to alert you when a cookie is being sent. Please note that disabling certain cookies may affect the functionality of our website. For detailed information about our use of cookies and how to manage your preferences, please refer to our Cookie Policy.

You may also opt out of interest-based advertising by visiting the following industry opt-out tools:

• Digital Advertising Alliance (DAA): www.aboutads.info/choices
• Network Advertising Initiative (NAI): www.networkadvertising.org/choices

9. Children's Privacy

Our website and services are not directed to children under the age of 18. We do not knowingly collect, solicit, or maintain personal information from children. If we learn that we have inadvertently collected personal information from a child under 18 without appropriate parental consent, we will take immediate steps to delete that information from our records.

This policy is consistent with the requirements of the Children's Online Privacy Protection Act (COPPA), which governs the online collection of personal information from children under the age of 13 in the United States.

If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at [email protected]. We will investigate and take appropriate action to remove any such information.

10. International Data Transfers

Piada is based in the United States, and our services are primarily intended for customers located in the United States. If you are accessing our services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States or other countries where our servers or service providers are located.

Data privacy laws in the United States may differ from those in your home country. By using our services, you consent to the transfer of your information to the United States and other countries, where it will be processed in accordance with this Privacy Policy and applicable U.S. laws.

When we transfer personal information internationally, we take appropriate safeguards to ensure that your information remains protected, including:

• Using contractual protections with our service providers that require them to protect personal information consistent with this Privacy Policy.
• Ensuring service providers adhere to recognized security standards and frameworks.
• Conducting due diligence on third-party partners to verify their data protection practices.

11. Third-Party Links and Services

Our website may contain links to third-party websites, apps, or services that are not owned or controlled by Piada. This Privacy Policy applies only to our website and services. We are not responsible for the privacy practices of third-party sites, and we encourage you to review the privacy policies of any third-party sites you visit.

Additionally, our website may incorporate third-party tools and services, such as social media sharing buttons, embedded maps, or payment widgets. These tools may collect information about your interactions independently, subject to their own privacy policies.

12. Do Not Track Signals

Some web browsers transmit "Do Not Track" (DNT) signals to websites. Currently, there is no universally agreed-upon standard for how websites should respond to DNT signals. Our website does not currently respond to DNT signals. However, you can control cookies and tracking technologies through your browser settings as described in Section 8 of this policy.

13. Your Marketing Choices

We may use your personal information to send you information about our products, services, promotions, and events. You always have the choice to opt out of receiving marketing communications from us:

• Email Marketing: Click the "unsubscribe" link in any marketing email we send you, or contact us at [email protected] to be removed from our email list.
• Text/SMS Marketing: Reply "STOP" to any marketing text message we send you, if applicable.
• Account Settings: If you have an account with us, you may update your communication preferences through your account settings.

Please note that even after you opt out of marketing communications, we may still send you transactional or operational messages related to your orders, account activity, or important service notices.

14. How to File a Complaint

If you have concerns about how we handle your personal information and you are not satisfied with our response, you have the right to file a complaint with the appropriate regulatory authority.

14.1 Federal Trade Commission (FTC)

In the United States, the Federal Trade Commission (FTC) is the primary consumer protection authority. You can file a complaint with the FTC at:

• Website: www.ftc.gov/complaint
• Phone: 1-877-FTC-HELP (1-877-382-4357)
• Address: Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, DC 20580

14.2 California Residents — California Privacy Protection Agency (CPPA)

California residents may also file complaints with the California Privacy Protection Agency (CPPA), which enforces the CCPA/CPRA:

• Website: cppa.ca.gov
• Email: [email protected]

14.3 State Attorneys General

You may also file a complaint with your state's Attorney General office. Most state attorneys general have consumer protection divisions that handle privacy-related complaints. Visit your state's official government website to find the appropriate contact information.

15. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will notify you by:

• Posting the updated Privacy Policy on our website with a new "Last Updated" date.
• Sending an email notification to the address associated with your account (for significant changes).
• Displaying a prominent notice on our homepage or within our app.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our website and services after any changes constitutes your acceptance of the updated Privacy Policy.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact us. We are committed to addressing your inquiries promptly and transparently.

When contacting us about a privacy matter, please include your full name, contact information, and a clear description of your inquiry or request so that we can assist you effectively. For requests to exercise your legal rights, please also include information sufficient to verify your identity.

We aim to respond to all privacy inquiries within 30 days. For complex matters, we may require up to 45 days, in which case we will notify you of the extension and the reason for the delay.