Privacy Policy

Effective Date: June 25, 2026  |  Last Updated: June 25, 2026

1. Introduction and Who We Are

Welcome to Piada Kitchen. We are a food service business operating in the United States, committed to protecting your privacy and handling your personal information with transparency and respect. This Privacy Policy applies to all information collected through our website (piadakitchen.rest), online ordering platforms, email communications, and any other services we offer (collectively, the "Services").

As a business operating in the United States, we comply with applicable federal and state privacy laws, including but not limited to the Federal Trade Commission Act (FTC Act), the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and other applicable state and federal regulations governing data privacy and consumer protection.

We take your privacy seriously. This document is designed to give you a clear, honest, and complete picture of how your personal data is handled from the moment you interact with us. If you have any questions or concerns, please contact us directly using the information provided at the end of this policy.

2. Contact Information

If you have any questions, requests, or concerns regarding this Privacy Policy or the handling of your personal data, you may contact us through the following channels:

We aim to respond to all privacy-related inquiries within 30 business days of receipt. For urgent matters, we recommend contacting us via email and clearly marking your subject line with "PRIVACY REQUEST."

3. Information We Collect

We collect several types of information in connection with the Services we provide. The categories below describe the personal information we may collect, depending on how you interact with us.

3.1 Personal Identification Information

When you create an account, place an order, sign up for our newsletter, or contact us directly, we may collect the following personal information:

• Full name
• Email address
• Phone number
• Delivery address and billing address
• Date of birth (where required for age verification or promotional offers)
• Username and password (for account holders)
• Payment information (processed securely through third-party payment processors)
• Order history and food preferences
• Dietary restrictions and allergen information (voluntarily provided)

3.2 Usage Data and Website Activity

We automatically collect certain information when you visit and use our website. This usage data may include:

• Pages visited and time spent on each page
• Links clicked and navigation patterns
• Search queries made on our website
• Items added to your cart or wishlist
• Referral URLs (how you arrived at our website)
• Date and time of your visit
• Error logs and performance data

3.3 Device and Technical Information

We collect technical information about the devices you use to access our Services:

• IP address
• Browser type and version
• Operating system and device type
• Screen resolution and language settings
• Unique device identifiers
• Mobile network information (if applicable)
• Geographic location data (at the city or region level, based on IP address)

3.4 Cookies and Tracking Technologies

We use cookies, web beacons, pixel tags, and similar tracking technologies to enhance your experience and gather data about how our Services are used. Please refer to Section 10 of this policy for detailed information about our cookie practices. You can manage your cookie preferences at any time through your browser settings or our cookie consent tool.

3.5 Communications and Feedback

When you contact us via email, phone, or through any form on our website, we may collect and retain:

• The content of your messages or inquiries
• Customer service records and correspondence
• Survey responses and feedback submitted by you
• Reviews and ratings you post about our products or services

3.6 Information from Third Parties

We may receive personal information about you from third-party sources, including:

• Social media platforms (if you connect your account or interact with our social media pages)
• Third-party food delivery platforms and online ordering services
• Analytics providers and advertising partners
• Payment processors and fraud prevention services

4. How We Use Your Information

We use the personal information we collect for a variety of legitimate business purposes. Below is a detailed explanation of how and why we process your data.

4.1 Providing and Managing Services

• Processing and fulfilling your food orders, both online and in-store
• Managing your account and preferences
• Sending order confirmations, receipts, and delivery updates
• Handling returns, refunds, and complaints
• Verifying your identity and preventing fraud
• Facilitating payment transactions securely

4.2 Customer Communications

• Responding to your inquiries, questions, and customer support requests
• Sending important service-related notifications and updates
• Notifying you of changes to our menu, policies, or terms
• Providing information about allergens or food safety when relevant

4.3 Marketing and Promotional Activities

• Sending promotional emails, special offers, and newsletters (with your consent where required)
• Personalizing content and recommendations based on your order history and preferences
• Informing you about loyalty programs, discounts, and new menu items
• Conducting contests, promotions, and surveys
• Delivering targeted advertisements through third-party platforms

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any marketing email or by contacting us at [email protected].

4.4 Analytics and Service Improvement

• Analyzing website traffic and user behavior to improve our online experience
• Understanding customer preferences to improve our menu and services
• Conducting internal research and development activities
• Monitoring and improving the performance and security of our website
• Compiling aggregated, anonymized statistical data for business insights

4.5 Legal Compliance and Safety

• Complying with applicable laws, regulations, and legal obligations
• Responding to lawful requests from government authorities or law enforcement
• Enforcing our Terms of Service and other agreements
• Protecting the rights, safety, and property of Piada Kitchen, our customers, and third parties
• Investigating and preventing fraudulent, harmful, or illegal activities

5. Legal Bases for Processing Personal Information

We process your personal information on the following legal grounds:

• Contractual Necessity: Processing is necessary to fulfill orders, manage your account, and deliver our Services as agreed.
• Legitimate Interests: We process data for purposes such as fraud prevention, improving our services, and direct marketing where our interests are not outweighed by your rights.
• Consent: Where required by applicable law, we obtain your consent before processing your data (e.g., for marketing communications or non-essential cookies).
• Legal Obligation: We may process your data to comply with applicable federal and state laws and regulations.

6. Sharing Your Information with Third Parties

We do not sell your personal information to third parties for their own direct marketing purposes. However, we may share your data in the following circumstances:

6.1 Service Providers and Business Partners

We work with trusted third-party service providers who assist us in operating our business and delivering our Services. These providers are authorized to use your personal information only as necessary to perform services on our behalf and are contractually required to maintain appropriate security measures. Categories of service providers include:

• Payment processors and financial institutions
• Food delivery and logistics platforms
• Email marketing and communication platforms
• Website hosting and cloud infrastructure providers
• Analytics and data intelligence services (e.g., Google Analytics)
• Customer support and helpdesk tools
• Advertising and social media platforms
• Fraud detection and identity verification services

6.2 Legal Requirements and Law Enforcement

We may disclose your personal information if required to do so by law, or in response to valid legal process such as a subpoena, court order, or government request. We may also disclose information to protect the safety of our customers, employees, or the general public, or to prevent illegal activity.

6.3 Business Transfers

In the event that Piada Kitchen undergoes a merger, acquisition, asset sale, reorganization, or bankruptcy proceeding, your personal information may be transferred as part of that transaction. We will notify you via email or a prominent notice on our website before any such transfer takes effect, and prior to your information becoming subject to a materially different privacy policy.

6.4 Aggregated and De-Identified Data

We may share aggregated or de-identified information that cannot reasonably be used to identify you with third parties for research, marketing, analytics, or other purposes.

6.5 California-Specific Disclosures (CCPA/CPRA)

7. Data Security

We take the security of your personal information seriously and implement a variety of technical, administrative, and physical safeguards designed to protect your data from unauthorized access, disclosure, alteration, or destruction.

7.1 Security Measures We Employ

• Encryption: We use SSL/TLS encryption to protect data transmitted between your browser and our website.
• Access Controls: Access to personal data is restricted to authorized personnel who require it to perform their job functions.
• Secure Payment Processing: Payment card information is processed through PCI DSS-compliant third-party payment processors. We do not store full payment card numbers on our servers.
• Regular Security Assessments: We periodically review and assess our data security practices to identify and address potential vulnerabilities.
• Employee Training: Our staff receives training on data privacy and security best practices.
• Incident Response: We maintain a data breach response plan and will notify affected users and relevant authorities as required by applicable law in the event of a security incident.

Despite our best efforts, no method of data transmission or storage over the internet is completely secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of any passwords associated with your account.

8. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, comply with our legal obligations, resolve disputes, and enforce our agreements. The specific retention periods depend on the nature of the data and the purpose of processing:

When personal information is no longer required, we will securely delete or anonymize it. In some circumstances, we may anonymize your personal data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice.

9. Your Privacy Rights

Depending on your location and applicable laws, you may have certain rights with respect to your personal information. We are committed to honoring these rights and making it easy for you to exercise them.

9.1 General Privacy Rights (All Users)

• Right to Access: You have the right to request a copy of the personal information we hold about you.
• Right to Correction: You may request that we correct any inaccurate or incomplete personal information we hold about you.
• Right to Deletion: You may request that we delete your personal information, subject to certain legal exceptions.
• Right to Portability: Where technically feasible, you may request that your personal information be provided to you in a structured, commonly used, machine-readable format.
• Right to Opt Out of Marketing: You may opt out of receiving marketing communications from us at any time.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights.

9.2 California Residents — CCPA/CPRA Rights

If you are a California resident, you have the following additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know: You have the right to know what personal information we have collected about you, the sources of that information, how it is used, and with whom it is shared.
• Right to Delete: You may request that we delete personal information we have collected from you, subject to certain exceptions.
• Right to Correct: You have the right to request correction of inaccurate personal information we maintain about you.
• Right to Opt Out of Sale/Sharing: You have the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising purposes.
• Right to Limit Use of Sensitive Personal Information: You may direct us to limit the use of your sensitive personal information to necessary purposes only.
• Right to Non-Discrimination: We will not deny services, charge different prices, or provide a different level of service because you exercised your CCPA rights.

To submit a California privacy rights request, please contact us at [email protected] with the subject line "California Privacy Rights Request." We will verify your identity before processing your request and respond within 45 days, with one possible extension of an additional 45 days where necessary.

You may also designate an authorized agent to submit a request on your behalf. The authorized agent must provide written authorization signed by you, and we may require you to verify your identity directly with us.

9.3 How to Exercise Your Rights

To exercise any of your privacy rights, please submit a request to us by:

• Email: [email protected] (subject line: "Privacy Rights Request")

We will verify your identity before fulfilling any request. We may ask you to provide additional information to confirm your identity and ensure we are responding to the correct individual. We will not charge a fee for reasonable requests, but may charge a fee for repetitive, manifestly unfounded, or excessive requests.

10. Cookie Policy Summary

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and deliver relevant content and advertisements. This section provides a brief overview of our cookie practices.

10.1 Types of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for the website to function properly. They enable core features such as security, shopping cart functionality, and account login. These cookies cannot be disabled.
• Performance and Analytics Cookies: These cookies collect information about how visitors use our website, such as which pages are visited most often. We use this data to improve the performance and usability of our site. (e.g., Google Analytics)
• Functional Cookies: These cookies allow our website to remember your preferences, such as your language settings, location, and previously viewed items.
• Marketing and Advertising Cookies: These cookies are used to deliver advertisements relevant to you and your interests. They also help us measure the effectiveness of our marketing campaigns. These cookies may be set by third-party advertising partners.

10.2 Managing Your Cookie Preferences

You can manage or disable cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of our website and your ability to place orders or access certain features. You may also use our cookie consent tool when you first visit our website to customize your preferences.

For more information about specific cookies and how to manage them, please visit our full Cookie Policy or contact us at [email protected].

11. Children's Privacy

Piada Kitchen's website and Services are intended for adults who are at least 18 years of age. We do not knowingly collect personal information from minors. If you are under 18, please do not use our website or provide any personal information to us.

If we become aware that we have inadvertently collected personal information from a child under 18 without verifiable parental consent, we will take immediate steps to delete that information from our records. If you believe we may have collected information from a minor, please contact us immediately at [email protected].

Parents and guardians who have concerns about their child's use of our website are encouraged to contact us directly. We are committed to complying with the Children's Online Privacy Protection Act (COPPA) and other applicable laws protecting minors' privacy.

12. International Data Transfers

Piada Kitchen is based in the United States, and your personal information is primarily collected, stored, and processed in the United States. By using our Services, you acknowledge and agree that your information may be transferred to, stored, and processed in the United States and potentially other countries where our service providers operate.

If you are accessing our Services from outside the United States, please be aware that data protection laws in the United States may differ from those in your country of residence. However, we are committed to protecting your personal information in accordance with applicable privacy laws and the terms of this Privacy Policy, regardless of where the data is processed.

When we transfer personal information internationally, we take appropriate steps to ensure that adequate protections are in place, including using contractual data processing agreements with service providers that include appropriate data transfer safeguards. If you have questions about international data transfers, please contact us at [email protected].

13. Third-Party Websites and Links

Our website may contain links to third-party websites, applications, or services that are not operated or controlled by Piada Kitchen. These may include food delivery platforms, social media pages, payment processors, and other external resources. This Privacy Policy does not apply to those third-party sites, and we are not responsible for their privacy practices.

We encourage you to review the privacy policies of any third-party websites you visit through links on our site. Your interactions with those websites are governed solely by their own terms and privacy policies. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

14. Marketing Communications and Opt-Out

With your consent (where required by applicable law), we may use your personal information to send you promotional communications, including:

• Email newsletters featuring new menu items, seasonal specials, and promotions
• SMS messages with exclusive deals and order updates (if you have opted in to text notifications)
• Push notifications through our website or any mobile application (where applicable)
• Personalized offers based on your order history and preferences

You have the right to opt out of marketing communications at any time. To do so, you may:

• Click the "unsubscribe" or "opt-out" link included in any marketing email we send you
• Reply "STOP" to any SMS marketing message
• Contact us directly at [email protected] with your opt-out request

Please note that even if you opt out of marketing communications, you may still receive transactional or service-related communications (such as order confirmations, receipts, and account notifications) that are necessary to provide you with our Services.

15. How to File a Privacy Complaint

If you have a concern or complaint about how we handle your personal information, we encourage you to contact us first so we have the opportunity to address the issue directly.

15.1 Contact Us First

Please submit your privacy complaint to:

• Email: [email protected]
• Subject Line: Privacy Complaint

We will acknowledge your complaint within 5 business days and aim to provide a full response within 30 days. We take all privacy complaints seriously and will investigate each matter thoroughly and fairly.

15.2 Filing a Complaint with Regulatory Authorities

If you are not satisfied with our response, or if you believe we are processing your personal information in violation of applicable law, you have the right to file a complaint with the relevant data protection authority.

For users in the United States, you may contact:

• Federal Trade Commission (FTC):
  Website: www.ftc.gov
  Phone: 1-877-FTC-HELP (1-877-382-4357)
  The FTC handles complaints regarding unfair or deceptive business practices, including privacy violations.
• California Privacy Protection Agency (CPPA) — for California residents:
  Website: cppa.ca.gov
  The CPPA enforces the CCPA and CPRA and handles consumer complaints from California residents.
• State Attorney General's Office:
  Residents of all states may contact their state Attorney General's office regarding privacy rights violations under applicable state law.

16. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, services, legal requirements, or for other operational reasons. When we make material changes to this Privacy Policy, we will:

• Update the "Last Updated" date at the top of this page
• Post the revised policy on our website at piadakitchen.rest
• Send an email notification to registered users (where required by applicable law)
• Display a prominent notice on our website informing you of significant changes

Your continued use of our Services after any changes to this Privacy Policy constitutes your acknowledgment of the updated policy. If you do not agree to the revised policy, you should discontinue use of our Services and contact us to request deletion of your personal information.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

17. Accessibility of This Policy

We are committed to making this Privacy Policy accessible and understandable to all users. If you require this policy in an alternative format, or if you have difficulty understanding any part of this document, please contact us at [email protected] and we will do our best to assist you.

18. Glossary of Terms

For clarity, the following definitions apply throughout this Privacy Policy:

• Personal Information: Any information that identifies, relates to, describes, or is reasonably capable of being associated with a specific individual.
• Processing: Any operation performed on personal information, including collection, storage, use, disclosure, or deletion.
• Service Provider: A third party that processes personal information on our behalf and under our instructions.
• Sensitive Personal Information: A category of personal information that requires heightened protection, including financial information, precise geolocation data, health information, and account credentials.
• Cookies: Small text files placed on your device by websites to store information and enable certain website features.
• De-identified Data: Information that has been modified so that it cannot reasonably be used to identify a specific individual.

This Privacy Policy was last reviewed and updated on June 25, 2026. Piada Kitchen is committed to transparency and responsible data stewardship. We welcome your questions, feedback, and requests regarding your privacy at any time.