Privacy Policy

Welcome to Davanni's. We respect your privacy and are committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website davannis-pizzas.digital, place an order, interact with our digital services, or otherwise engage with Davanni's. Please read this policy carefully. If you do not agree with the terms of this Privacy Policy, please discontinue use of our website and services.

This Privacy Policy is governed by the laws of the United States, including applicable federal regulations enforced by the Federal Trade Commission (FTC) under the FTC Act (15 U.S.C. § 45), and, where applicable, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), California Civil Code § 1798.100 et seq. Additional state-specific privacy laws may apply depending on your state of residence, including but not limited to the Virginia Consumer Data Protection Act (VCDPA), the Colorado Privacy Act (CPA), the Connecticut Data Privacy Act (CTDPA), and the Texas Data Privacy and Security Act (TDPSA).

1. Who We Are

Davanni's is a food service business operating through the website davannis-pizzas.digital. We are committed to delivering quality food and excellent customer service while maintaining transparent data practices. For all privacy-related matters, you may contact us using the information provided in Section 14 of this policy.

• Business Name: Davanni's
• Website: davannis-pizzas.digital
• Email: [email protected]

2. Information We Collect

We collect various categories of information to provide you with a seamless ordering and dining experience. The types of information we may collect include the following:

2.1 Personal Identification Information

When you create an account, place an order, make a reservation, subscribe to our newsletter, or contact our customer service, we may collect:

• Full name
• Email address
• Phone number
• Mailing or delivery address
• Date of birth (for age verification and promotional purposes)
• Username and password for account access
• Payment information (credit/debit card numbers, billing address — processed securely through third-party payment processors)

2.2 Order and Transaction Information

We collect information related to your purchases and interactions with our food services, including:

• Order history and details (items ordered, quantities, special instructions)
• Transaction amounts and dates
• Delivery or pickup preferences
• Loyalty rewards balances and redemption history
• Promotional codes or discount vouchers used

2.3 Usage Data and Technical Information

When you access our website or digital services, we automatically collect certain technical data, including:

• IP address
• Browser type and version
• Operating system and device type
• Pages visited, links clicked, and time spent on each page
• Referring URLs (the page you visited before arriving at our website)
• Search queries made within our website
• Date and time of each visit
• Error logs and crash reports

2.4 Location Data

With your consent, we may collect precise or approximate location data from your device to facilitate delivery services, identify the nearest Davanni's location, and provide location-based promotions. You may revoke location permissions at any time through your device or browser settings.

2.5 Cookies and Tracking Technologies

We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about your browsing behavior on our website. For detailed information about how we use cookies and your choices regarding them, please refer to Section 9 of this policy.

2.6 Communications and Feedback

When you contact us by email, phone, or through our website contact forms, we collect:

• The content of your messages and inquiries
• Your responses to surveys or feedback forms
• Reviews and ratings you submit about our food or services
• Social media interactions with our official accounts

2.7 Information from Third Parties

We may also receive information about you from third parties, including:

• Third-party food delivery platforms (e.g., DoorDash, Uber Eats, Grubhub) when you order through them
• Social media platforms when you link your account or log in through social authentication
• Marketing partners and data brokers, subject to applicable law
• Payment processors confirming transaction status

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 Order Fulfillment and Service Delivery

• Processing and fulfilling your food orders, including delivery and pickup
• Sending order confirmations, receipts, and updates
• Managing your customer account and loyalty program membership
• Processing payments and refunds
• Communicating with you about your order status, delays, or issues

3.2 Customer Support

• Responding to your inquiries, complaints, and feedback
• Resolving disputes and troubleshooting problems
• Maintaining records of interactions for quality assurance

3.3 Marketing and Promotions

• Sending you promotional emails, newsletters, and special offers, with your consent where required
• Personalizing marketing content based on your order history and preferences
• Conducting sweepstakes, contests, or loyalty reward programs
• Retargeting advertising on third-party platforms

You may opt out of marketing communications at any time. See Section 8 for your rights and opt-out mechanisms.

3.4 Website and Service Improvement

• Analyzing usage patterns to improve the functionality and design of our website
• Conducting internal research and analytics
• Testing new features and menu offerings
• Monitoring and preventing fraudulent or unauthorized activity

3.5 Legal and Compliance Obligations

• Complying with applicable federal, state, and local laws
• Responding to lawful requests from government authorities
• Enforcing our Terms of Service and other agreements
• Protecting the rights, property, and safety of Davanni's, our customers, and the public

3.6 Business Operations

• Managing our internal business operations, including accounting, auditing, and record-keeping
• Facilitating business transactions such as mergers, acquisitions, or asset sales
• Communicating with vendors, partners, and franchisees

4. Legal Bases for Processing

We process your personal information under the following legal bases recognized under applicable U.S. privacy law and best practices:

5. Sharing Your Information with Third Parties

Davanni's does not sell, rent, or trade your personal information to third parties for their own independent marketing purposes. However, we may share your information with third parties in the following circumstances:

5.1 Service Providers and Business Partners

We engage trusted third-party companies and individuals to perform services on our behalf, including:

• Payment processors: To securely process credit and debit card transactions
• Delivery service providers: To coordinate food delivery to your location
• Email and marketing platforms: To send promotional communications and newsletters
• Analytics providers: Such as Google Analytics, to understand website usage
• Cloud hosting and IT services: To store and process data securely
• Customer support platforms: To manage helpdesk and chat support services
• Loyalty program administrators: To manage rewards and points tracking

These service providers are contractually obligated to use your information only for the purposes specified by Davanni's and to implement appropriate security measures.

5.2 Third-Party Delivery Platforms

When you place an order through third-party platforms such as DoorDash, Uber Eats, or Grubhub, those platforms' privacy policies govern their use of your data. We encourage you to review their privacy practices independently. We may receive limited order and contact information from these platforms to fulfill your orders.

5.3 Legal Requirements and Law Enforcement

We may disclose your information when required to do so by law, including:

• In response to a subpoena, court order, or other lawful legal process
• To comply with federal, state, or local government requirements
• To cooperate with law enforcement investigations
• To protect the rights, property, or safety of Davanni's, our employees, customers, or the public
• In connection with fraud prevention, cybersecurity, or investigation of illegal activity

5.4 Business Transfers

In the event that Davanni's undergoes a merger, acquisition, reorganization, bankruptcy, or sale of all or part of its assets, your personal information may be transferred as part of that transaction. We will provide notice before your personal information becomes subject to a different privacy policy.

5.5 With Your Consent

We may share your information with additional third parties when you have given us explicit consent to do so, such as when you participate in a co-branded promotion or integrate your account with a third-party application.

6. Data Security

Davanni's takes the security of your personal information seriously. We implement a variety of technical, administrative, and physical safeguards designed to protect your data from unauthorized access, disclosure, alteration, and destruction. These measures include:

• Encryption: We use Secure Socket Layer (SSL) / Transport Layer Security (TLS) encryption to protect data transmitted between your browser and our servers.
• Secure payment processing: All payment card data is handled by PCI-DSS compliant payment processors. We do not store your full credit card numbers on our servers.
• Access controls: Access to personal information is restricted to authorized personnel who need it to perform their job functions, subject to confidentiality obligations.
• Password protection: User accounts are protected by passwords. We recommend using a unique, strong password and enabling two-factor authentication where available.
• Regular security assessments: We conduct periodic reviews and testing of our security practices and systems.
• Employee training: Our team members receive training on data privacy and security best practices.
• Incident response: We maintain a data breach response plan and will notify affected users and relevant authorities as required by applicable law in the event of a security breach.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including to comply with legal, accounting, and reporting obligations. The following general retention periods apply:

When your personal information is no longer required, we will securely delete or anonymize it in accordance with our data retention procedures. Anonymized data, which cannot reasonably be used to identify you, may be retained for longer periods for statistical and research purposes.

8. Your Privacy Rights

Depending on your state of residence, you may have certain rights regarding your personal information. We are committed to honoring these rights in accordance with applicable law.

8.1 Rights Available to All Users

• Right to Know / Access: You have the right to request information about the categories and specific pieces of personal information we have collected about you, and how it has been used and shared.
• Right to Correct: You may request that we correct inaccurate personal information we hold about you.
• Right to Delete: You may request that we delete personal information we have collected about you, subject to certain exceptions (e.g., where retention is required by law or necessary to complete a transaction).
• Right to Opt Out of Marketing: You may opt out of receiving promotional emails by clicking the "unsubscribe" link in any marketing email, or by contacting us directly at [email protected].
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights. You will not be denied services, charged different prices, or provided a lower quality of service as a result of exercising your rights.

8.2 California Residents — CCPA/CPRA Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), California Civil Code § 1798.100 et seq.:

• Right to Know (Categories and Specific Information): Request details about the categories of personal information collected, the business purposes for collection, and the categories of third parties with whom it is shared.
• Right to Delete: Request deletion of personal information, subject to applicable exceptions.
• Right to Correct: Request correction of inaccurate personal information.
• Right to Opt Out of Sale or Sharing: Davanni's does not sell personal information. However, if we ever engage in activities that constitute "sharing" under CPRA (e.g., cross-context behavioral advertising), you may opt out.
• Right to Limit Use of Sensitive Personal Information: You may direct us to limit the use of sensitive personal information to only that which is necessary to provide the requested services.
• Right to Data Portability: Request a copy of your personal information in a portable and usable format.
• Right to Appeal: If we deny your privacy request, you have the right to appeal our decision.

To submit a CCPA/CPRA request, please email [email protected] with the subject line "California Privacy Request." We will respond within 45 days of receiving your request. This period may be extended by an additional 45 days where reasonably necessary, with prior notice.

You may also designate an authorized agent to make a request on your behalf. Authorized agents must provide written proof of their authorization, and we may require you to verify your identity directly.

8.3 Other State Privacy Rights

Residents of the following states may also have specific privacy rights under their applicable state laws:

• Virginia (VCDPA): Rights to access, correction, deletion, portability, and opt out of targeted advertising and profiling.
• Colorado (CPA): Rights to access, correction, deletion, portability, and opt out of targeted advertising.
• Connecticut (CTDPA): Rights to access, correction, deletion, portability, and opt out of targeted advertising and profiling.
• Texas (TDPSA): Rights to access, correction, deletion, portability, and opt out of sale of personal data and targeted advertising.

To exercise any of the rights described in this section, please contact us using the information in Section 14. We will verify your identity before processing your request to protect against unauthorized access to your information.

9. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and deliver personalized content and advertising. A cookie is a small text file placed on your device when you visit a website.

We use the following types of cookies:

• Strictly Necessary Cookies: Essential for the website to function properly, including shopping cart functionality and account login.
• Performance and Analytics Cookies: Help us understand how visitors interact with our website (e.g., Google Analytics).
• Functional Cookies: Remember your preferences, such as language settings and saved addresses.
• Marketing and Advertising Cookies: Used to deliver relevant advertisements and track the effectiveness of our marketing campaigns.

You may manage your cookie preferences through your browser settings or through our cookie consent management tool available on our website. Please note that disabling certain cookies may affect the functionality of our website and services.

10. Children's Privacy

Davanni's is committed to protecting the privacy of minors. Our website and digital services are intended for use by individuals who are 18 years of age or older. We do not knowingly collect, use, or disclose personal information from children under the age of 13, in compliance with the Children's Online Privacy Protection Act (COPPA), 15 U.S.C. § 6501 et seq.

If you are under the age of 18, you may use our services only with the involvement and consent of a parent or legal guardian. If you are a parent or guardian and believe that your child under 13 has provided us with personal information without your consent, please contact us immediately at [email protected]. We will take prompt steps to remove such information from our records.

We do not knowingly sell, share, or disclose personal information belonging to consumers under the age of 16 without affirmative authorization, in compliance with the CPRA's provisions regarding minors' data.

11. International Data Transfers

Davanni's is based in the United States, and your personal information is primarily collected, processed, and stored within the United States. However, some of our third-party service providers may be located in or operate servers in other countries. If we transfer your personal information outside of the United States, we will ensure that appropriate safeguards are in place to protect your information consistent with this Privacy Policy and applicable U.S. privacy law.

If you are accessing our services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country. By using our services, you consent to the transfer of your information to the United States as described in this Privacy Policy.

12. Third-Party Links and Services

Our website may contain links to third-party websites, social media platforms, or services that are not operated by Davanni's. We have no control over the content or privacy practices of these third-party sites and are not responsible for their privacy policies. We encourage you to review the privacy policies of any third-party websites you visit. The inclusion of a link on our website does not imply our endorsement of that website's privacy practices.

Examples of third-party services that may be integrated with our website include:

• Social media platforms (Facebook, Instagram, Twitter/X, TikTok)
• Payment processors (Stripe, PayPal, Square)
• Online food delivery platforms (DoorDash, Uber Eats, Grubhub)
• Mapping services (Google Maps)
• Analytics providers (Google Analytics, Meta Pixel)

13. Do Not Track Signals

Some web browsers offer a "Do Not Track" (DNT) feature that signals websites you visit that you do not want your online activity tracked. Currently, our website does not respond to DNT signals from browsers because there is no uniform standard for how DNT signals should be interpreted. However, you may still manage your tracking preferences through our cookie consent tools and browser settings.

California residents may also exercise their right to opt out of the "sale" or "sharing" of personal information as defined under CPRA by contacting us as described in Section 8.2.

14. Contact Information for Privacy Inquiries

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our privacy team using the following information:

When submitting a privacy request, please include your full name, email address associated with your account (if applicable), a description of your request, and your state of residence so we may respond to you appropriately. We will respond to all verifiable privacy requests within the timeframes required by applicable law.

15. How to File a Complaint with a Data Protection Authority

If you believe your privacy rights have been violated and you are not satisfied with our response to your inquiry, you have the right to lodge a complaint with the appropriate regulatory authority. In the United States, the following authorities may be relevant:

15.1 Federal Trade Commission (FTC)

The FTC enforces federal consumer protection laws, including laws related to deceptive or unfair privacy practices under the FTC Act (15 U.S.C. § 45). You may file a complaint with the FTC at:

• Website: www.ftc.gov/complaint
• Phone: 1-877-382-4357
• Address: Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, D.C. 20580

15.2 California Privacy Protection Agency (CPPA)

California residents may file a complaint with the California Privacy Protection Agency, which enforces the CCPA/CPRA:

• Website: cppa.ca.gov
• Email: [email protected]
• Address: California Privacy Protection Agency, 2101 Arena Boulevard, Sacramento, CA 95834

15.3 State Attorneys General

Residents of other states may file privacy complaints with their state Attorney General's office. Most state attorney general offices have a dedicated consumer protection division. Please visit the official website of your state government to find the appropriate contact information.

16. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons. When we make material changes to this policy, we will notify you by:

• Updating the "Last Updated" date at the top of this page
• Posting a prominent notice on our website
• Sending an email notification to registered users (for significant changes)

Your continued use of our website or services after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your information.

17. Glossary of Key Terms