Privacy Policy

1. Introduction

At Dions, we are committed to protecting your privacy and maintaining the security of your personal information. This Privacy Policy explains how we collect, use, share, and protect your information when you visit our website, use our services, place orders, or interact with us in any way.

This policy applies to all services offered by Dions, including our website at dions-pizz.digital, online ordering system, mobile applications, loyalty programs, catering services, and franchise opportunities. By using our services, you agree to the terms outlined in this Privacy Policy.

We want to assure you that we never sell your personal data to third parties. Your trust is essential to our business, and we are committed to maintaining transparent practices regarding how we handle your information.

2. Information We Collect

2.1 Information You Provide Directly

• Personal Identification: Name, email address, phone number, mailing address, date of birth
• Account Information: Username, password, order history, purchase preferences
• Payment Information: Credit card details, billing address (securely encrypted)
• Order Details: Food preferences, dietary restrictions, allergen information, special requests
• Delivery Information: Delivery addresses, location data, delivery instructions
• Dietary Preferences: Vegetarian, vegan, halal, kosher, gluten-free, and other dietary requirements
• Loyalty Program Data: Rewards points, membership status, favorite orders
• Reservation Information: Table booking details, party size, special occasions
• Catering Details: Event information, guest count, menu preferences
• Communication Records: Contact form submissions, customer service interactions, reviews and feedback
• Marketing Preferences: Email subscription preferences, promotional offers interest

2.2 Automatically Collected Information

• Device Information: IP address, browser type and version, operating system, device type
• Usage Data: Pages visited, time spent on site, click patterns, search queries
• Cookie Data: Session identifiers, user preferences, analytics data
• Location Information: Approximate location based on IP address, GPS data (with permission)
• Technical Data: Log files, error reports, performance metrics

2.3 Information from Third Parties

• Social Media: Profile information if you connect social media accounts
• Payment Processors: Transaction verification and fraud prevention data
• Delivery Partners: Delivery status updates and location tracking
• Marketing Partners: Advertising effectiveness data, demographic insights
• Review Platforms: Customer reviews and ratings from external sites

3. How We Use Your Information

3.1 Service Provision

• Order Processing: Preparing, cooking, and delivering your food orders
• Account Management: Creating and maintaining your user account
• Customer Support: Providing assistance and resolving issues
• Payment Processing: Handling transactions securely and preventing fraud
• Quality Improvement: Enhancing our menu, services, and customer experience
• Loyalty Programs: Managing rewards, points, and special offers

3.2 Communication

• Order Updates: Confirmations, preparation status, delivery notifications
• Customer Service: Responding to inquiries and support requests
• Important Notices: Policy changes, service updates, security alerts
• Marketing Communications: Promotional emails, special offers (with your consent only)
• Surveys and Feedback: Requesting your opinions to improve our services

3.3 Marketing and Analytics

• Personalized Advertising: Showing relevant ads and recommendations
• Traffic Analysis: Understanding website usage patterns and popular content
• Campaign Effectiveness: Measuring marketing performance and ROI
• Market Research: Developing new products and services based on customer preferences
• Demographic Analysis: Understanding our customer base for better service

3.4 Legal Compliance

• Legal Requests: Responding to court orders, subpoenas, and regulatory inquiries
• Fraud Prevention: Detecting and preventing fraudulent activities
• Safety Protection: Protecting the rights, property, and safety of our customers and employees
• Dispute Resolution: Resolving conflicts and legal disputes
• Regulatory Compliance: Meeting food safety, health, and business regulations

4. Information Sharing and Disclosure

4.1 Service Providers

We share information with trusted third-party service providers who assist us in operating our business:

• Payment Processors: Secure handling of credit card transactions and payment verification
• Delivery Companies: Coordinating food delivery and tracking services
• Cloud Storage Providers: Secure data storage and backup services
• Email Service Providers: Managing marketing campaigns and customer communications
• Analytics Tools: Website usage analysis and performance monitoring
• Customer Support Software: Managing customer service interactions and support tickets

4.2 Legal Requirements

We may disclose your information when required by law or to protect our legitimate interests:

• Court Orders and Subpoenas: Complying with legal proceedings
• Government Requests: Responding to lawful requests from authorities
• Legal Compliance: Meeting regulatory and statutory obligations
• Emergency Situations: Protecting public safety in urgent circumstances

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, customer information may be transferred to the new owner. We will notify you before your information is transferred and becomes subject to a different privacy policy.

4.4 With Your Consent

We may share your information for purposes not covered in this policy only with your explicit consent.

5. Data Security

5.1 Technical Measures

• SSL/TLS Encryption: All data transmission is encrypted using industry-standard protocols
• Advanced Firewalls: Multiple layers of network security to prevent unauthorized access
• Access Controls: Strict employee access limitations based on job requirements
• 24/7 Monitoring: Continuous security monitoring and threat detection
• Regular Backups: Automated data backups to ensure information recovery
• Secure Servers: Physical and digital protection of our server infrastructure

5.2 Organizational Measures

• Employee Training: Regular security awareness training for all staff members
• Data Handling Procedures: Strict protocols for accessing and processing personal data
• Third-Party Agreements: Confidentiality contracts with all service providers
• Incident Response Plan: Prepared procedures for handling security breaches
• Regular Audits: Periodic security assessments and vulnerability testing

5.3 Your Responsibilities

• Strong Passwords: Use unique, complex passwords for your account
• Account Security: Never share your login credentials with others
• Public Computers: Always log out when using shared or public devices
• Phishing Awareness: Be cautious of suspicious emails or links
• Report Issues: Contact us immediately if you suspect unauthorized account access

Security Breach Notification: In the event of a data breach that affects your personal information, we will promptly notify you and relevant authorities as required by law.

6. Cookies and Tracking Technologies

We use various tracking technologies to enhance your experience on our website and analyze usage patterns.

Tracking Technologies Used

• Google Analytics: Website traffic analysis and user behavior insights
• Facebook Pixel: Advertising effectiveness measurement and retargeting
• Web Beacons: Email open rates and engagement tracking
• Local Storage: Storing user preferences and session data

Cookie Management: You can control cookies through your browser settings to accept, reject, or delete cookies. Please note that disabling certain cookies may affect website functionality and your user experience.

7. Your Rights (GDPR/CCPA Compliance)

Depending on your location, you may have the following rights regarding your personal data:

• Right of Access: Request to view all personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure (Right to be Forgotten): Request deletion of your personal data
• Right to Restrict Processing: Limit how we use your data in certain circumstances
• Right to Data Portability: Receive your data in a machine-readable format
• Right to Object: Object to processing, especially for marketing purposes
• Right Against Automated Decision-Making: Opt out of automated profiling decisions

How to Exercise Your Rights: Contact us using the information provided in Section 13. We will respond to your request within 30 days and verify your identity before processing any requests.

8. Children's Privacy

Our services are not intended for children under the age of 16, and we do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

Upon notification, we will promptly delete any information we have collected from children under 16. We encourage parents to monitor their children's internet usage and help us protect their privacy.

9. International Data Transfers

9.1 Protection Measures

When we transfer your data internationally, we ensure appropriate protection through:

• Adequacy Decisions: Transfers to countries recognized as providing adequate protection
• Standard Contractual Clauses (SCCs): EU-approved contract terms for data protection
• Data Processing Agreements: Binding contracts with international partners
• Security Measures: Technical and organizational safeguards during transfer
• Regular Audits: Ongoing compliance monitoring and assessment

9.2 Transfer Destinations

Your data may be transferred to and processed in:

• United States: Cloud storage and data processing services
• European Union: Analytics and marketing services
• Other Countries: As necessary for service provision with appropriate protections

10. Data Retention Periods

We retain your information only as long as necessary for the purposes outlined in this policy:

Safe Data Disposal

When data retention periods expire, we ensure secure disposal through:

• Complete Electronic Deletion: Unrecoverable removal from all systems
• Physical Record Destruction: Secure shredding of paper documents
• Backup Data Removal: Deletion from all backup systems
• Disposal Documentation: Maintaining records of secure data destruction

11. Third-Party Links

Our website may contain links to external websites and services that are not operated by us. We are not responsible for the privacy practices or content of these third-party sites.

We encourage you to review the privacy policies of any third-party websites before providing personal information. Your interactions with third-party sites are governed by their respective privacy policies, not ours.

12. Policy Changes

12.1 Change Notification

We may update this Privacy Policy from time to time. When we make changes, we will notify you through:

• Website Notice: Prominent banner on our homepage
• Email Notification: Direct communication to registered users
• Login Notification: Pop-up notification when you access your account
• Consent Requests: Explicit consent for significant policy changes

12.2 Checking for Changes

• Regular Reviews: We recommend checking this policy periodically
• Last Updated Date: Always displayed at the top of this page
• Continued Use: Using our services after changes constitutes acceptance
• Opt-Out Option: You may stop using our services if you disagree with changes

13. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Response Commitment: We will respond to your privacy-related inquiries within 3 business days.

13.1 Complaints

If you have concerns about our privacy practices:

• Contact Us First: We encourage you to contact us directly for resolution
• Supervisory Authority: If unsatisfied, you may contact your local data protection authority
• State Attorney General: For US residents, you may also contact your state's consumer protection office

14. Withdrawal of Consent

14.1 Marketing Consent Withdrawal

You can withdraw consent for marketing communications at any time through:

• Unsubscribe Links: Click the unsubscribe link in any marketing email
• Account Settings: Manage your communication preferences in your account
• Customer Support: Contact us directly to opt out of marketing communications

14.2 Account Deletion

To completely delete your account and associated data:

• Account Settings: Use the account deletion option in your profile
• Email Request: Send a deletion request to our customer service
• Phone Request: Call our customer service line
• Legal Retention: Some data may be retained as required by law

15. Conclusion

At Dions, protecting your privacy is fundamental to our relationship with you. We are committed to maintaining the highest standards of data protection and transparency in all our practices.

Your trust is the foundation of our business, and we work diligently to earn and maintain that trust through responsible data handling, clear communication, and respect for your privacy rights.

If you have any questions about this Privacy Policy or our privacy practices, please don't hesitate to contact us. We value your feedback and are here to address any concerns you may have.

Thank you for choosing Dions. We appreciate your business and your trust in our commitment to privacy protection.