Privacy Policy

1. Introduction

Apache Pizza ("we," "our," or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, share, and protect information about you when you use our website, mobile applications, or any of our food delivery and restaurant services.

This policy applies to all information collected through our digital platforms, in-store visits, phone orders, delivery services, catering events, and any other interactions you have with Apache Pizza. By using our services, you agree to the collection and use of information in accordance with this policy.

Important Note: We never sell your personal data to third parties. Your trust is fundamental to our business, and we are committed to maintaining the highest standards of data protection and privacy.

If you do not agree with any part of this privacy policy, please do not use our services or provide us with your personal information.

2. Information We Collect

2.1 Information You Provide to Us

• Personal Identification Information: Name, email address, phone number, delivery address, billing address, date of birth
• Account Information: Username, password, order history, saved payment methods, delivery preferences
• Food Service Specific Information:
  • Dietary preferences and restrictions (vegetarian, vegan, gluten-free, etc.)
  • Allergen information you provide
  • Special dietary requirements (halal, kosher, organic preferences)
  • Favorite menu items and custom orders
  • Table reservation details and party size
  • Catering event requirements and guest count
  • Loyalty program participation and rewards data
• Payment Information: Credit card details, billing information (processed securely and encrypted)
• Communication Data: Contact form submissions, customer service inquiries, reviews and feedback, survey responses
• Marketing Preferences: Email subscription preferences, promotional material preferences, communication channel preferences

2.2 Information We Collect Automatically

• Device Information: IP address, browser type and version, operating system, device identifiers, screen resolution
• Usage Data: Pages visited, time spent on pages, click patterns, order frequency, menu browsing behavior
• Location Information: Approximate location based on IP address, precise location (with permission) for delivery services
• Cookie and Tracking Data: Session identifiers, user preferences, analytics data, advertising identifiers
• Performance Data: Website load times, error reports, feature usage statistics

2.3 Information from Third Parties

• Social Media Platforms: Profile information when you connect social media accounts
• Payment Processors: Transaction verification and fraud prevention data
• Delivery Partners: Delivery status updates and location tracking
• Marketing Partners: Campaign performance data and audience insights (anonymized)
• Review Platforms: Publicly available reviews and ratings you post

3. How We Use Your Information

3.1 Service Provision and Order Management

• Processing and fulfilling your food orders
• Coordinating delivery and pickup services
• Managing table reservations and catering events
• Providing customer support and resolving issues
• Maintaining your account and order history
• Processing payments and refunds
• Ensuring food safety by tracking allergen and dietary preferences

3.2 Communication and Customer Service

• Sending order confirmations and delivery notifications
• Providing customer support responses
• Notifying you of important policy changes or service updates
• Sending promotional emails and special offers (with your consent)
• Conducting customer satisfaction surveys
• Managing loyalty program communications

3.3 Marketing and Business Analytics

• Personalizing your experience and menu recommendations
• Analyzing website traffic and user behavior patterns
• Measuring marketing campaign effectiveness
• Conducting market research for new menu items and services
• Improving our website, app, and service quality
• Creating anonymized reports and business intelligence

3.4 Legal Compliance and Security

• Responding to legal requests and court orders
• Preventing fraud and unauthorized access
• Protecting our rights, property, and safety
• Resolving disputes and enforcing agreements
• Complying with tax, accounting, and regulatory requirements
• Conducting security audits and risk assessments

4. Information Sharing and Disclosure

4.1 Service Providers and Business Partners

• Payment Processors: Secure processing of credit card transactions and payment verification
• Delivery Services: Sharing delivery addresses and contact information for order fulfillment
• Cloud Storage Providers: Secure data storage and backup services with encryption
• Email Marketing Services: Managing newsletter subscriptions and promotional campaigns
• Analytics Providers: Website performance analysis and user behavior insights
• Customer Support Tools: Managing customer inquiries and support tickets

4.2 Legal Requirements and Protection

We may disclose your information when required by law or to protect our legitimate interests:

• In response to court orders, subpoenas, or legal process
• To comply with applicable laws and regulatory requirements
• To protect the rights, property, or safety of Apache Pizza, our customers, or others
• In emergency situations involving public safety
• To investigate and prevent fraud, security breaches, or illegal activities

4.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of our business, customer information may be transferred to the new owner. We will:

• Notify customers before any transfer of personal data
• Ensure the new owner complies with this privacy policy
• Provide options for data deletion if you disagree with the transfer

4.4 With Your Explicit Consent

We may share your information for other purposes with your explicit consent, such as:

• Participating in joint marketing campaigns with partner restaurants
• Sharing testimonials or reviews (with your permission)
• Special promotions or events requiring third-party coordination

5. Data Security

5.1 Technical Security Measures

• Encryption: All data transmission uses SSL/TLS encryption (256-bit) to protect information in transit
• Secure Storage: Personal data is encrypted at rest using industry-standard AES-256 encryption
• Firewall Protection: Advanced firewall systems protect our servers from unauthorized access
• Access Controls: Role-based access control ensures only authorized personnel can access personal data
• 24/7 Monitoring: Continuous security monitoring and threat detection systems
• Regular Backups: Secure, encrypted backups stored in geographically diverse locations
• Vulnerability Testing: Regular security assessments and penetration testing

5.2 Organizational Security Measures

• Employee Training: Regular security awareness training for all staff members
• Data Handling Procedures: Strict protocols for accessing, processing, and storing personal data
• Confidentiality Agreements: All employees and contractors sign comprehensive NDAs
• Incident Response Plan: Detailed procedures for responding to security incidents
• Third-Party Audits: Regular security audits by independent cybersecurity firms
• Compliance Monitoring: Ongoing monitoring of data protection compliance

5.3 Your Security Responsibilities

To help protect your account and personal information:

• Use Strong Passwords: Create unique, complex passwords for your account
• Keep Passwords Confidential: Never share your login credentials with others
• Secure Logout: Always log out when using public or shared computers
• Be Cautious with Emails: Be wary of phishing emails requesting personal information
• Report Suspicious Activity: Contact us immediately if you notice unauthorized account access
• Keep Contact Information Updated: Ensure we can reach you for important security notifications

Security Breach Notification: In the unlikely event of a data breach affecting your personal information, we will notify you and relevant authorities within 72 hours of discovery, as required by law.

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your browsing experience, analyze site usage, and deliver personalized content. Below is a detailed breakdown of the types of cookies we use:

Additional Tracking Technologies

• Google Analytics: Website traffic analysis and user behavior insights
• Facebook Pixel: Social media advertising effectiveness measurement
• Web Beacons: Email open rates and engagement tracking
• Local Storage: Storing user preferences and shopping cart data in your browser
• Session Recording: Understanding user interactions to improve site usability (anonymized)

Cookie Management

You can control cookie preferences through:

• Browser Settings: Most browsers allow you to accept, reject, or delete cookies
• Our Cookie Consent Tool: Customize your cookie preferences on our website
• Opt-Out Tools: Use industry opt-out tools for advertising cookies

Note: Disabling certain cookies may affect website functionality and your user experience, including the ability to place orders or access personalized features.

7. Your Rights (GDPR/CCPA Compliance)

Under applicable data protection laws, including GDPR and CCPA, you have the following rights regarding your personal information:

7.1 Right of Access

You have the right to request information about what personal data we hold about you, including:

• Categories of personal information collected
• Sources of personal information
• Purposes for processing your data
• Third parties with whom we share data
• How long we retain your information

7.2 Right to Rectification

You can request correction of inaccurate or incomplete personal data, including:

• Updating contact information
• Correcting delivery addresses
• Modifying dietary preferences or allergen information
• Updating payment information

7.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal data when:

• The data is no longer necessary for the original purpose
• You withdraw consent and there's no other legal basis for processing
• Your data has been unlawfully processed
• Deletion is required for legal compliance

7.4 Right to Restrict Processing

You can request limitation of data processing in certain circumstances:

• While we verify the accuracy of disputed data
• When processing is unlawful but you prefer restriction over deletion
• When we no longer need the data but you need it for legal claims
• While we verify legitimate grounds for processing

7.5 Right to Data Portability

You can request your personal data in a structured, machine-readable format, including:

• Account information and preferences
• Order history and transaction records
• Loyalty program data
• Communication preferences

7.6 Right to Object

You can object to processing of your personal data for:

• Direct marketing purposes (including profiling)
• Processing based on legitimate interests
• Scientific, historical research, or statistical purposes

7.7 Right Against Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing, including profiling, that produces significant legal or similar effects.

How to Exercise Your Rights

To exercise any of these rights:

• Email us at: [email protected]
• Call us at: +353 1 670 3865
• Visit our store at: 4 Nassau St, Dublin, D02 YX74, Ireland
• Use our online contact form

Response Time: We will respond to your request within 30 days. For complex requests, we may extend this period by an additional 60 days with notification.

8. Children's Privacy

Apache Pizza takes children's privacy seriously and is committed to protecting the personal information of minors.

Age Restrictions

• Our services are not intended for children under 16 years of age
• We do not knowingly collect personal information from children under 16
• Users must be at least 18 years old to create an account and place orders
• Parental supervision is required for users under 18

Parental Rights and Responsibilities

• Parents are responsible for monitoring their children's online activities
• If we become aware that we have collected information from a child under 16, we will delete it promptly
• Parents can contact us to review, delete, or stop further collection of their child's information
• We encourage parents to teach children about online privacy and safety

Parent Notification: If you believe your child under 16 has provided personal information to us, please contact us immediately at [email protected], and we will work to promptly delete such information.

9. International Data Transfers

As a business operating with international service providers, we may transfer your personal data outside Ireland and the European Economic Area (EEA). We ensure all transfers are protected by appropriate safeguards.

9.1 Protection Measures for International Transfers

• Adequacy Decisions: We rely on European Commission adequacy decisions for countries with equivalent data protection
• Standard Contractual Clauses (SCCs): We use EU-approved contractual clauses with service providers
• Data Processing Agreements: Comprehensive agreements ensuring GDPR compliance
• Security Measures: Encryption and security controls for data in transit and at rest
• Regular Compliance Audits: Ongoing monitoring of international partners' data protection practices
• Data Minimization: Only transferring necessary data for specific purposes

9.2 Transfer Destinations and Purposes

• United States: Cloud storage services, analytics platforms, customer support tools
• United Kingdom: Payment processing, marketing services
• European Union: Data analytics, email marketing platforms
• Other Countries: As needed for service provision with appropriate safeguards

Your Rights: You have the right to obtain information about international transfers and request copies of the safeguards we have in place.

10. Data Retention Periods

We retain your personal information only as long as necessary for the purposes outlined in this privacy policy and as required by applicable laws.

Safe Data Disposal Procedures

When personal data reaches the end of its retention period, we ensure secure disposal through:

• Electronic Data: Secure deletion using DoD 5220.22-M standards (data is overwritten multiple times)
• Physical Records: Cross-cut shredding followed by secure disposal
• Backup Systems: Coordinated deletion from all backup and archive systems
• Third-Party Systems: Verified deletion from service provider systems
• Documentation: Maintaining disposal records for compliance auditing

Exception: We may retain certain data longer if required by law, ongoing legal proceedings, or legitimate business interests (such as fraud prevention).

11. Third-Party Links

Our website and mobile applications may contain links to third-party websites, services, and social media platforms. This privacy policy does not apply to these external sites.

Important Considerations

• Separate Privacy Policies: Each third-party site has its own privacy policy and terms of service
• No Control: We do not control the privacy practices of linked websites
• No Responsibility: Apache Pizza is not responsible for the content or privacy practices of third parties
• Due Diligence: We encourage you to review privacy policies before providing personal information

Types of Third-Party Links

• Social media platforms (Facebook, Instagram, Twitter)
• Payment processors and financial services
• Review and rating websites
• Partner restaurants and food delivery platforms
• Suppliers and ingredient information sites
• Job posting and recruitment platforms

Your Responsibility: When you click on third-party links or use integrated services, you are subject to their privacy policies and terms of service. Please read these carefully before sharing your personal information.

12. Policy Changes

We may update this privacy policy from time to time to reflect changes in our practices, legal requirements, or business operations.

12.1 How We Notify You of Changes

• Website Notice: Prominent notification on our homepage and privacy policy page
• Email Notification: Direct email to all registered users for significant changes
• App Notification: Push notification through our mobile application
• Account Login Notice: Pop-up notification when you next log into your account
• Social Media: Announcements on our official social media channels

12.2 What Constitutes Significant Changes

• Changes to the types of personal information we collect
• New purposes for using your personal information
• Changes to data sharing practices
• Modifications to your rights and how to exercise them
• Changes to data retention periods
• Updates to security measures or breach procedures

12.3 Your Options When We Make Changes

• Review Changes: We recommend reading the updated policy carefully
• Contact Us: Ask questions about changes you don't understand
• Update Preferences: Modify your consent preferences if needed
• Opt Out: Withdraw consent for new purposes you disagree with
• Stop Using Services: Discontinue use if you disagree with major changes

Checking for Updates: The "Last Updated" date at the top of this policy indicates the most recent revision. We encourage you to review this policy periodically to stay informed about how we protect your personal information.

Continued Use: Your continued use of our services after we post changes constitutes acceptance of the updated privacy policy.

13. Contact Information

Response Commitment

We are committed to addressing your privacy concerns promptly:

• Initial Response: Within 3 business days of receiving your inquiry
• Data Subject Rights Requests: Within 30 days (may be extended to 60 days for complex requests)
• Privacy Complaints: Within 5 business days with a detailed response plan
• Security Incidents: Immediate acknowledgment and regular updates until resolution

13.1 Privacy Complaints and Dispute Resolution

We take privacy complaints seriously and encourage you to contact us first to resolve any concerns. Our complaint process includes:

• Immediate acknowledgment of your complaint
• Thorough investigation of the issue
• Clear explanation of findings and corrective actions
• Follow-up to ensure your satisfaction with the resolution

Escalation Options: If you are not satisfied with our response, you have the right to lodge a complaint with your local supervisory authority:

• Ireland: Data Protection Commission (DPC) - www.dataprotection.ie
• EU Residents: Your local data protection authority
• UK Residents: Information Commissioner's Office (ICO) - ico.org.uk

14. Withdrawal of Consent

You have the right to withdraw your consent at any time for data processing activities that are based on consent. Withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.

14.1 Marketing Consent Withdrawal

To stop receiving marketing communications:

• Email Unsubscribe: Click the "unsubscribe" link in any marketing email
• Account Settings: Update your communication preferences in your online account
• Phone Request: Call us at +353 1 670 3865 to opt out
• Email Request: Send an opt-out request to [email protected]
• Written Request: Mail your request to our business address

14.2 Cookie Consent Withdrawal

• Use our cookie preference center on the website
• Adjust your browser settings to block cookies
• Clear existing cookies from your browser
• Contact us to reset your cookie preferences

14.3 Account Deletion Process

To permanently delete your account and associated data:

• Step 1: Log into your account and go to account settings
• Step 2: Select "Delete Account" or contact customer support
• Step 3: Confirm your identity for security purposes
• Step 4: Review what data will be deleted and what may be retained
• Step 5: Confirm deletion (this action cannot be undone)
• Step 6: Receive confirmation email of account deletion

Important Notes:

• Some information may be retained for legal compliance (e.g., transaction records for tax purposes)
• Account deletion may take up to 30 days to complete across all systems
• You will lose access to loyalty points, order history, and saved preferences
• Deletion is permanent and cannot be reversed

15. Conclusion

At Apache Pizza, protecting your privacy and personal information is not just a legal obligation—it's fundamental to maintaining the trust you place in us when you choose our food and services. This privacy policy reflects our commitment to transparency, data protection, and your rights as our valued customer.

Our Privacy Commitments

• Transparency: Clear communication about how we collect, use, and protect your data
• Choice: Meaningful options for controlling your personal information
• Security: Industry-leading measures to protect your data from unauthorized access
• Respect: Honoring your privacy preferences and exercising your rights promptly
• Compliance: Adherence to all applicable privacy laws and regulations
• Continuous Improvement: Regular updates to our practices based on evolving standards and your feedback

Building Trust Through Privacy

We understand that privacy is personal, and different customers have different comfort levels with data sharing. Whether you prefer minimal data collection or enjoy personalized experiences, we strive to accommodate your preferences while providing excellent food service.

Your trust enables us to:

• Deliver hot, fresh food exactly how you like it
• Remember your dietary preferences and allergen concerns for your safety
• Provide efficient customer service when you need assistance
• Improve our menu and services based on customer feedback
• Offer relevant promotions and loyalty rewards

Questions and Feedback

Privacy can be complex, and we recognize that you may have questions about our practices or suggestions for improvement. We encourage open communication about privacy concerns and welcome your feedback on how we can better protect your personal information.

Please don't hesitate to contact us at [email protected] or +353 1 670 3865 if you:

• Have questions about this privacy policy
• Need help exercising your privacy rights
• Want to update your privacy preferences
• Have suggestions for improving our privacy practices
• Experience any privacy-related concerns

Thank You

Thank you for choosing Apache Pizza and for taking the time to understand our privacy practices. We are honored to serve you and committed to earning your continued trust through responsible data stewardship.

We look forward to continuing to serve you delicious food while protecting your privacy every step of the way.

Remember: This privacy policy was last updated on January 15, 2026. Please check this page regularly for any updates or changes to our privacy practices.