Privacy Policy

1. Introduction

At Lou Malnati's, we are committed to protecting your privacy and maintaining the security of your personal information. This Privacy Policy explains how we collect, use, share, and protect your information when you use our food delivery services, visit our website at lou-malnatis.digital, or interact with our mobile applications.

This policy applies to all users of our services, including customers who place orders, visitors to our website, and participants in our loyalty programs. By using our services, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide to Us

We collect information you voluntarily provide when you:

• Create an account: Name, email address, phone number, date of birth
• Place orders: Delivery addresses, payment information, order history, dietary preferences
• Contact us: Customer service inquiries, feedback, reviews, and survey responses
• Join loyalty programs: Rewards preferences, favorite orders, special occasions
• Make reservations: Table booking information, party size, special requests
• Catering services: Event details, guest count, menu customizations
• Allergen information: Food allergies, dietary restrictions (vegan, halal, kosher, etc.)
• Marketing preferences: Communication preferences, promotional interests

2.2 Automatically Collected Information

When you use our services, we automatically collect certain information:

• Device information: IP address, browser type, operating system, device identifiers
• Usage data: Pages viewed, time spent on site, click patterns, search queries
• Location data: Approximate location from IP address, precise location with permission
• Cookie data: Session IDs, user preferences, shopping cart contents
• Order patterns: Frequency of orders, preferred meal times, seasonal preferences

2.3 Information from Third Parties

We may receive information about you from:

• Social media platforms: When you connect your social accounts
• Payment processors: Transaction verification and fraud prevention data
• Delivery partners: Delivery status updates and location tracking
• Marketing partners: Demographic data and interest segments
• Public databases: Address verification and demographic information

3. How We Use Your Information

3.1 Service Provision

• Process and fulfill your food orders and deliveries
• Manage your account and provide customer authentication
• Facilitate table reservations and catering bookings
• Customize menu recommendations based on dietary preferences
• Track allergen information to ensure food safety
• Provide customer support and resolve issues
• Improve service quality and operational efficiency

3.2 Communication

• Send order confirmations, preparation updates, and delivery notifications
• Provide customer support responses and issue resolutions
• Share important service updates and policy changes
• Send promotional emails and special offers (with your consent only)
• Notify you about loyalty program benefits and rewards

3.3 Marketing and Analytics

• Personalize your experience with relevant food recommendations
• Analyze website traffic and user behavior patterns
• Measure the effectiveness of our marketing campaigns
• Conduct market research for new menu items and services
• Improve our website and mobile app functionality

3.4 Legal Compliance

• Respond to legal requests and court orders
• Prevent fraud and ensure transaction security
• Protect our rights, property, and the safety of our customers
• Resolve disputes and enforce our terms of service
• Comply with food safety and health regulations

4. Information Sharing and Disclosure

4.1 Service Providers

We share information with trusted third parties who help us operate our business:

• Payment processors: Secure transaction processing and fraud prevention
• Delivery companies: Address information for order fulfillment
• Cloud storage providers: Secure data storage and backup services
• Email marketing services: Newsletter delivery and promotional campaigns
• Analytics providers: Website usage analysis and performance monitoring
• Customer support tools: Help desk and communication platforms

4.2 Legal Requirements

We may disclose your information when required by law:

• In response to court orders, subpoenas, or legal processes
• To comply with applicable laws and regulations
• To protect our rights, property, or safety
• In case of emergencies or public safety concerns
• For food safety investigations and health authority requests

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new owner. We will notify you before your information is transferred and becomes subject to a different privacy policy.

4.4 With Your Consent

We will share your information for other purposes only with your explicit consent, which you may withdraw at any time.

5. Data Security

5.1 Technical Measures

We implement robust security measures to protect your information:

• Encryption: SSL/TLS encryption for all data transmission
• Firewall protection: Advanced firewall systems to prevent unauthorized access
• Access controls: Restricted access to personal data on a need-to-know basis
• Monitoring: 24/7 security monitoring and intrusion detection
• Backups: Regular secure data backups and disaster recovery procedures

5.2 Organizational Measures

• Regular employee training on data protection and privacy practices
• Strict policies for handling personal information
• Confidentiality agreements with all third-party service providers
• Incident response procedures for security breaches
• Regular security audits and vulnerability assessments

5.3 Your Responsibilities

Help us protect your information by:

• Using strong, unique passwords for your account
• Not sharing your login credentials with others
• Logging out of your account on public or shared computers
• Being cautious of phishing emails or suspicious links
• Reporting any unauthorized account access immediately

6. Cookies and Tracking Technologies

We use various technologies to enhance your experience and gather information about how our services are used:

Type	Purpose	Duration
Essential Cookies	Basic site functionality, login state, shopping cart	Session (deleted when browser closes)
Functional Cookies	User preferences, language settings, location data	Up to 1 year
Analytics Cookies	Usage analysis, site improvement, performance monitoring	Up to 2 years
Marketing Cookies	Personalized advertising, campaign effectiveness	Up to 1 year

Tracking Technologies Used:

• Google Analytics: Website traffic analysis and user behavior tracking
• Facebook Pixel: Ad performance measurement and audience targeting
• Web beacons: Email open rates and engagement tracking
• Local storage: Browser-based data storage for preferences
• Session replay tools: User experience analysis (anonymized)

Cookie Management: You can control cookies through your browser settings by choosing to accept, reject, or delete cookies. Please note that disabling certain cookies may affect the functionality of our website and services.

7. Your Rights (GDPR/CCPA Compliance)

Depending on your location, you may have the following rights regarding your personal information:

7.1 Right of Access

You have the right to request access to your personal data and receive a copy of the information we hold about you.

7.2 Right to Rectification

You can request correction of any inaccurate or incomplete personal data we hold about you.

7.3 Right to Erasure (Right to be Forgotten)

You can request deletion of your personal data, subject to certain legal limitations and business requirements.

7.4 Right to Restrict Processing

You can request that we limit how we use your personal data in certain circumstances.

7.5 Right to Data Portability

You have the right to receive your personal data in a structured, machine-readable format and transfer it to another service provider.

7.6 Right to Object

You can object to certain types of data processing, especially for marketing purposes.

7.7 Right Against Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing that significantly affects you.

How to Exercise Your Rights: Contact us using the information provided in Section 13. We will respond to your request within 30 days and may require verification of your identity.

8. Children's Privacy

Our services are not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16 without parental consent. If you are a parent or guardian and become aware that your child has provided us with personal information, please contact us immediately.

If we discover that we have collected personal information from a child under 16 without parental consent, we will take steps to delete that information promptly. Parents have the right to review, delete, or refuse further collection of their child's personal information.

9. International Data Transfers

9.1 Protection Measures

When we transfer your personal data outside your country of residence, we ensure appropriate protections are in place:

• European Commission adequacy decisions for approved countries
• Standard Contractual Clauses (SCC) approved by data protection authorities
• Binding Corporate Rules for intra-group transfers
• Appropriate technical and organizational security measures
• Regular compliance audits and monitoring

9.2 Transfer Destinations

Your data may be transferred to and processed in:

• United States: Cloud storage and data processing services
• European Union: Analytics and customer service operations
• Other countries: As needed for service provision with appropriate safeguards

10. Data Retention Periods

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy:

Information Type	Retention Period	Reason
Account information	6 months after account deletion	Legal obligations, dispute resolution
Order and purchase history	7 years	Tax and accounting requirements
Marketing consent records	3 months after withdrawal	Consent record keeping
Website usage logs	Up to 2 years	Security monitoring, analytics
Customer support records	3 years	Service quality improvement
Allergen information	3 years after last order	Food safety compliance
Loyalty program data	2 years after program exit	Rewards fulfillment, fraud prevention

Safe Data Disposal: When retention periods expire, we securely dispose of your information through complete electronic deletion, physical record shredding, and removal from backup systems.

11. Third-Party Links

Our website and mobile applications may contain links to external websites or services operated by third parties. We are not responsible for the privacy practices or content of these third-party sites.

We encourage you to review the privacy policies of any third-party websites you visit before providing any personal information. Your interactions with third-party sites are governed by their respective privacy policies, not this one.

12. Policy Changes

12.1 Change Notification

We may update this Privacy Policy from time to time. When we make changes, we will notify you by:

• Posting a prominent notice on our website
• Sending email notifications to registered users
• Displaying pop-up notifications when you log into your account
• Requesting explicit consent for significant changes

12.2 Staying Informed

We recommend checking this page periodically for updates. The "Last Updated" date at the top of this policy indicates when the most recent changes were made. Continued use of our services after changes constitutes acceptance of the updated policy.

14. Withdrawal of Consent

14.1 Marketing Consent Withdrawal

You can withdraw your consent for marketing communications at any time:

• Click the "unsubscribe" link in any marketing email
• Update your preferences in your account settings
• Contact our customer support team
• Reply "STOP" to text marketing messages

14.2 Account Deletion Process

To delete your account and personal data:

1. Log into your account and navigate to account settings
2. Select "Delete Account" option
3. Confirm your identity through email verification
4. Review what data will be deleted and what may be retained for legal purposes
5. Complete the deletion process

Note: Some information may be retained for legal, regulatory, or legitimate business purposes as outlined in our retention policy.

15. Conclusion

At Lou Malnati's, protecting your privacy is not just a legal obligation—it's fundamental to building and maintaining trust with our customers. We are committed to being transparent about our data practices and giving you control over your personal information.

We believe that great food experiences should be built on a foundation of trust and respect for your privacy. Our team continuously works to ensure that your personal information is handled with the highest standards of care and security.

Thank you for choosing Lou Malnati's and for trusting us with your personal information. If you have any questions or feedback about our privacy practices, we encourage you to reach out to us using the contact information provided above.

Remember: This Privacy Policy was last updated on January 15, 2025. Please check this page periodically for any updates or changes to our privacy practices.