GENERAL PRIVACY POLICY

Effective Date: January 1, 2023

Introduction

The Little Brown Box Pizza, LLC, a Delaware limited liability company, doing business as Pieology, together with its affiliates and subsidiaries, (collectively “Pieology,” “us,” “we,” or “our”) respects the privacy concerns of our customers and all users of products and services. We are committed to protecting and respecting your privacy. This Privacy Policy (the “Privacy Policy”) and any other documents referred to in it sets forth the basis on which any personal data we collect from you, or that you provide to us, in connection with the Product will be processed by us. We are providing this Privacy Policy so that you can better understand how we collect, use, and share information that is gathered using our Product. 

Our privacy practices are subject to the applicable laws of the places in which we do business, so we have added region-specific terms that only apply to customers located in certain geographic regions, or as required by applicable laws.

1. Scope of This Notice

This Privacy Policy describes Pieology’s practices for collecting, using, maintaining, protecting, and disclosing (“processing”) your personal information when you use our services (“Services”), such as when you:

  • Visit our website at pieology.com (the “Site”) and any other sites or applications that link to this Privacy Policy.
  • Download and/or use our mobile application (our “App”).
  • Create and maintain an account with Pieology.
  • Participate in our Pie Life Rewards program.
  • Sign up for our promotional emails.
  • Make a purchase or other transaction with us.
  • Subscribe to or engage with our newsletters or other electronic communications.
  • Interact with our social media pages.
  • Click on our ads posted on third party sites.
  • Communicate with our service representatives or features (including via chat functions, email, text, or phone).
  • Use our Services anywhere we collect information from you and refer to this Privacy Policy.
  •  

    This Privacy Policy also applies to personal information we collect from third parties about you.

     

    This Privacy Policy does not apply to:

     

  • Third-Party Sites. Websites, apps, videos (embedded or direct links), or other content (each a “Linked Site”) to which we link that are not operated by us. Linked Sites have their own personal information collection and use practices, and we are not responsible those practices. We encourage you to read each Linked Site’s privacy disclosures to understand how your personal information is processed.
  • Workforce Members and Candidates. Our processing of the personal information of job applicants/candidates and workforce members is not governed by his policy. That processing is described in our Candidate Privacy Notice.
  • Non-Personal Information. Our processing of information that cannot be linked to an identifiable or identified individual. We may process this data for any legitimate business purpose

  • 2. Personal Data We Collect and How We Use It

    Personal information (sometimes called “personal data”) is a broadly defined term whose legal definition varies across jurisdictions. When used in this Privacy Policy, “personal information” includes information that is reasonably capable of identifying a particular individual (including through their device) either alone or when combined with information from other sources.

    The personal information we collect about you depends on the nature and context of your interaction with Pieology and our Services.  It may also depend on various choices you make about how to use the Services we offer, the functionality and features you choose or enable, your location, the devices you us to interact with our services, and applicable law.  The following describes the personal information we collect about you and the way we collect it.

              2.1 Personal Information You Give to Us

    We collect the following categories personal information you provide to us, including the following:

  • Your Personal Details. For example, your first and last name, email address, phone number, physical address, job titles, and other contact information you provide.
  • Account and Other Identifiers. For example, a username, screen name, handle, account ID, assigned user ID, customer number, or similar identifier that can be used to identify and user or account.
  • Government Identification. Some of our locations allow for the purchase of alcohol (in-restaurant only). Pieology requires government-issued photo ID in order to purchase alcohol. ID may also be required to pick up an order. Your ID may be reviewed, swiped, or scanned in order to verify your age and identity.
  • User Content. For example, emails and text messages, photos, videos, audio recordings, customer support communications, comments/feedback, and any other content submitted by you.
  • Survey data. We may contact some individuals to request participation in a survey or other general research. If you choose to take part in these, you may provide personal information, in or along with your survey responses, or in any other feedback or comments you give us.
  • Contests, sweepstakes, and prize drawings data. If you take part in a contest, sweepstakes, or prize drawing, then you may provide personal information, feedback, or comments to enter, or as part of the contest, sweepstakes, or prize drawing.
  • Messages and email data. We collect information about you when you send, receive, open, read or otherwise engage with messages, email, or other communications in connection with our Services, including whether you have opened or acted on those communications.
  • Social Media Content. For example, interactions with our social media pages and content you post on them.
  • Other Personal Information You Provide. If you provide us personal information other than that described above, we will collect it and use it for the purposes for which you provide it or other consistent purposes.
  • Inferences. In certain instances, we may infer personal information about you based on the information you have provided to us or that we have collected about you.
  • Chat Modules. We may collect certain categories of personal information from you when you use our interactive chat module. By interacting with the chat box, you consent to our collection practices and understand and acknowledge that we may use this data to communicate with you about our products and services.
  • Payment processing information. For example, the form of payment, payment card number and details, bank account number, payment service provider, and other payment information you provide.
  • Demographic information. For example, information that reveals your racial or ethnic origin, religious or philosophical beliefs, union membership, political opinions, or sex life or sexual orientation.
  • Precise Geolocation. You may choose to grant our Services permission to access your device’s precise geolocation, which we may use to confirm your address and help us operate or personalize our Services, including by tagging posts, providing information on or adding information to a map, and helping us show you more relevant content or ads.
  •  

             2.2 Personal Information We Derive Through Your Use of Our Services

    We and our third-party partners use cookies, web beacons, clear GIF, pixels, internet tags, and other similar tracking technologies (collectively, “tracking technologies”) to gather information when you interact with our websites, mobile apps, and email communications. We use some of these tracking technologies help us optimize and maintain the security of our websites and your account. We also use them for compatible purposes like save your preferences, fixing errors, and ensuring consistent service of our websites and mobile apps. For additional information on our use of cookies, please visit our Cookie Notice.

    We permit third parties to use tracking technologies on our websites for analytics and advertising, including to help manage and display advertisements, to tailor advertisements to your interests, and provide metrics on advertising effectiveness. The third parties use their technology to provide advertising about products and services tailored to your interests which may appear either on our websites or on other websites.    

    The information we collect using these technologies includes:

  • Device and Browser Identifiers. For example, an assigned user ID, IP address, or similar identifier that can be used to identify your device.
  • Coarse Location Information. A general approximation of your location that is not based on global position system (GPS) information.
  • Browsing and Search History. Information about the content you view and searches you make on our Site(s).
  • Website Log and Usage Data. Information related to our pages you viewed, the services and features you used or interacted with, your browser type and details about any links or communications with which you interacted.
  • Advertising Metrics. Information about the advertisements you have viewed on our Website.
  • Cross-Device Tracking. Information about the unique devices you use, which allows us to collect information across your different devices to deliver more relevant information to you and measure the effectiveness of our Services.
  •  

    Because the “Do Not Track” browser-based standard signal has yet to gain widespread acceptance, our Website(s) currently does not respond to those signals.

              2.3 Personal Information We Collect From Others

    We mostly collect personal information directly from you or based on your interaction with our Site. However, we also may collect personal information from third-party sources. These include our Franchisees with whom you do business,  Business Services Providers, Marketing and Advertising Providers, government entities, our Pieology affiliates, social media platforms, and other users of our Services.

    Even if you are not a registered user of our Services, your information might still be collected. Some users may choose to share information about their contacts, including their name, email address, phone number, or other information. User may also post or comment with personal information about other users on social media.

    3. What We Do with Your Personal Information

    We may use your personal information for a variety of reasons. Depending on how you interact with our Services, these include using personal information:

  • Delivering Our Products and Services to you and to provide the related customer support, communication, and security.
  • Policy Enforcement, including enforcing our terms of service, acceptable use policies, anti-spam policies, and other similar policies.
  • Advertising & Marketing to send advertisements and marketing material via physical and electronic mail relating to product specials and other promotional events or offers, perform marketing research and data analytics, and perform similar activities.
  • Contextual and Behavioral Targeting to provide contextual customization of ads shown as part of an interaction with our website or application, using tracking technologies like cookies and pixels.
  • Counting Ad Impressions & Website Interactions to audit interactions with our websites, applications, or advertisements, count ad impressions to unique visitors, verify position and quality of ad impressions, and perform similar activities.
  • Customer Service to provide customer service, maintain and service products and accounts, provide training for quality assurance purposes, and perform similar activities.
  • Fraud Prevention to detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, and to prosecute those responsible for that activity.
  • Processing Transactions to process or fulfill orders and transactions, verify customer information, process payments, confirm eligibility promotional benefits, and perform similar activities.
  • Public Health and Safety to conduct screening or temperature checks for COVID-19 symptoms or similar screening activities related to public health and safety.
  • Defending Against Claims & Litigation to defend against or respond to potential or actual claims and litigation.
  •  

    4. Our Sharing of Your Personal Information

    We may share your personal information with the following:

    Franchisees. Our franchise owners.

    Business Services Providers. These are those persons or entities with whom we have a relationship to provide business operations services and support to Pieology. These providers may include the following:

  • IT Operations Providers. These include cloud computing service providers, internet service providers, data backup and security providers, functionality and infrastructure providers, and similar service providers.
  • Operations Providers. These include service provider with whom we partner to provide day-to-day business operations, including payment processors, security vendors, business software service providers, hospitality service providers, banks, facilities management providers.
  • Professional Advisors. These include lawyers, accountants, consultants, security professionals, and other similar parties when disclosure is reasonably necessary to comply with our legal and contractual obligations, prevent or respond to fraud or abuse, defend ourselves against attacks, or protect the rights, property, and safety of us, our customers, and the public.
  • Marketing and Advertising Providers. These include advertising, direct marketing, and lead generation providers, affiliate marketing program providers, retargeting platforms, data brokers, ad networks, marketing consultants, and similar services providers.

    Affiliates. Our affiliates include any subsidiaries, joint venturers, or other companies that we control or that are under common control with us.

    Legally Required Parties/Governmental Entities. Persons to whom we are required by law to provide information, such as pursuant to a subpoena or a court order.

    Reorganization. Persons involved in the consideration, negotiation, completion of a business transaction, including the sale, merger, consolidation, acquisition, change in control, transfer of substantial assets, bankruptcy, or reorganization, and any subsequent integration.

    Authorized Disclosures: To any party when authorized by the individual to whom it pertains to share it.

    5. Data Retention

    We will retain your personal information only for so long as necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information; the potential risk of harm from unauthorized use or disclosure of your personal information; the purposes for which we process your personal information and whether we can achieve those purposes through other means; and the applicable legal requirements. In some circumstances, you may ask us to delete your information. Additionally, we may anonymize your personal information (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.

    6. Data Security

    We have implemented and maintain reasonable security procedures and practices, appropriate to the nature of the information, to protect your personal information from unauthorized access, destruction, use, modification, or disclosure. However, no security measure is perfect, so we cannot guarantee the security of your personal information. Data protection laws vary among countries, with some providing more protection than others.

    7. International Data Transfers

    We are located and operate in the United States. By submitting personal information to us, you understand that we may transfer your personal information to country foreign to you, including the United States, for processing. The laws that apply to the use and protection of personal information in the United States, or other countries or jurisdictions in which we transfer or process personal information, may be different from the laws and protections in your country. These transfers may include transfers to our service providers located in foreign jurisdictions. Whenever we engage a service provider, we require that its privacy and security standards adhere our requirements and applicable privacy laws.

    8. Your Privacy Preferences

    You can control the collection and use of personal information for some of our processing activities. This includes:

  • Adjusting Communication Preferences
  •  

    Emails From Pieology: The Site presents you with the option to provide your email address and other personal information in order to opt in to receive email communications, including promotional emails. If you wish to no longer receive email communications, you can click on the “unsubscribe” link located at the bottom of the email, email Pieology at privacy@pieology.com to let us know, and we will remove you as soon as possible. Opting out of marketing or newsletter emails will not opt-you out of all emails—we may need to send you transactional or similar emails related to your Pieology purchases, legal or contractual updates, or similar topics. You are not able to opt-out of these emails.

    Text Messages: You may opt out of automated text notifications any time by replying “STOP,” or any alternative keyword we have shared with you. You may still receive communications from Pieology regarding safety issues, such as messages related to your account, even if you have opted out.

  • Blocking Cookies
  •  

    Most web browsers automatically accept cookies by default, but you can alter how your browser responds to cookies by adjusting the settings. Information about managing cookies for popular web browsers can be found in the links below:

    Safari (Desktop) and Safari Mobile (iOS).

    Firefox

    Chrome

    Microsoft Edge

    Brave

    Many websites, including ours, employ Google Analytics. To opt out of Google Analytics data collection, follow these instructions from Google.

    9. Your Privacy Rights & Choices

    Some jurisdictions provide covered individuals with specific privacy rights which can be exercised against covered entities. Depending on the jurisdiction, these rights may include the following:

  • Access and Portability. The right to know (or confirm) what personal information a business has collected about you, and to receive a copy of it.
  • Deletion/Restriction. The right to request that a business delete personal information it has collected from you or restrict how it is used, subject to certain exception.
  • Correction/Rectification. The right to request correction of inaccurate personal information maintained by the business.
  • Opt-Out of the Sale/Sharing of Your Personal Information. The right to opt-out of the sale of your personal information to third parties. The term “sale” varies by jurisdiction, but sometimes includes the right to opt-out of the use of personal information for targeted advertising purposes.
  • Revoke Consent. Where consent is required for processing under applicable law, you may withdraw your consent to the processing of your information at any time. 
  • Object to Processing. Object, on grounds relating to your situation, to our processing of personal data concerning you which is (i) necessary for the performance of a task carried out in the public interest, (ii) carried out in the exercise of official authority vested in us, or (iii) processed by us on the basis of our legitimate interest. In this case, where applicable, we will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
  • Limitation/Restriction. The right to limit or restrict a business’s use or disclosure of certain personal information.
  • Opt-out of Profiling/Automated Decision-Making: The right to opt- out of profiling in furtherance of decisions that produce legal or similarly significant effects concerning you.
  • Non-Discrimination. The right not to be discriminated against for exercising any of the rights conferred at law.
  • Complaints. The right to lodge a complaint with the appropriate governmental authority.
  •  

    Pieology will honor the privacy rights afforded to individuals in accordance with applicable law and will not discriminate against individuals for exercising their privacy choices under the law.

    10. Exercising Your Privacy Rights

    You have the right to submit a verifiable request to us using the following methods:

  • Email
  • You may submit a request by writing to us at privacy@pieology.com.

  • Toll-Free Telephone Call
  • You may submit requests by calling our dedicated, toll-free number designated for CCPA requests at (833) 714-6344.

    A member of our team will acknowledge your request and guide you through the verification process.

    11. Children’s Privacy

    Our Services are not intended for persons under 16 years of age. We do not knowingly collect or process the personal information of individuals under the age of 16. If we learn that we have collected personal information from a child under age 16, we will delete that information as quickly as possible. If you believe that a child under 16 may have provided us their Personal Information, please contact us at privacy@pieology.com.  

    12. Jurisdiction-Specific Privacy Disclosures

              12.1 California

    Please see our California Privacy Policy which supplements this Privacy Policy.

              12.2 U.S. State-Specific Privacy Rights

    Residents of certain U.S. States have the rights indicated below as of the date in which the applicable laws granting such rights are effective, which are as follows:

                California: January 1, 2023

                Virginia: January 1, 2023

                Colorado: July 1, 2023

                Connecticut: July 1, 2023

                Utah: December 31, 2023

    Privacy Rights

    Description

    CA

    VA

    CO

    CT

    UT

    Access/Know

    Request confirmation from us as to whether your personal information is being processed by Pieology and, if so, access to such personal information.

    Deletion

    Request that your personal information be deleted (subject to some limitations).

    Portability

    Request that Pieology provide a copy of the personal information concerning you that you have provided to us in a usable/readable format.

    Rectification/Correction

    Request that Pieology correct any inaccurate personal data relating to you (subject to limitations).

     

    Restriction on Sharing for Cross-Context Behavioral or Targeted Advertising (called “sharing” under California law)

    Request that Pieology stop sharing of your personal information for purposes cross-contextual behavioral of targeted advertising purposes.

     

     

    Sales of Personal Information

    Request that Pieology stop selling personal information about you to third parties.

     

     

    Restriction on Automated Decision-Making or Profiling

    Request that Pieology stop using automated decision-making technology to evaluate you, create a profile of you, and make predictions about your future behavior.

     

     

    Limiting the Use and Disclosure of Sensitive Personal Information

    Request that Pieology limit our use and disclosure of your “sensitive personal information,” as that term is defined in the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (CCPA), to the extent required by law.

     

     

     

     

    Right to Appeal

    Appeal the denial of a privacy rights request under the relevant law

     

     

    Pieology does not engage in automated decision making/profiling so no action is required to exercise this right under state law.

    If you would like to opt-out of the sale or sharing of your personal information for cross-contextual behavioral or targeted advertising, please click the Do Not Sell or Share My Personal Information link.

    You may make a request at any time to exercise your privacy rights under applicable law by using our Privacy Portal.  We will respond to your request in the time permitted by law (if properly submitted). If we need more time to process and respond to your request, we will notify you of that fact along with the reason for the delay. In all cases we will complete your request within the time permitted by law. If we decline to act regarding your request, we will inform you of our decision and the reason for it.

    Nevada

    If you are a resident of Nevada, you have the right to opt-out of the sale of certain personal information to third parties who intend to license or sell that personal information. Please note that we do not currently sell your personal information as sales are defined in Nevada Revised Statutes Chapter 603A.

    13. Changes to this Notice

    We may update this Privacy Policy from time to time. If we make changes, we will notify you by revising the date at the top of the Policy and, in some cases, we may provide you with additional notice (such as adding a statement to our website homepage or sending you a notification). We encourage you to review the Privacy Policy whenever you access our Services or otherwise interact with us to stay informed about our information practices and the choices available to you.

    14. Contact Us

    If you have questions or comments about this Privacy Policy or complaints about our privacy practices, please contact us at:

             Mail:

    Pieology Pizzeria

    Attn: Privacy Policy Issues

    3200 Park Center Drive, Suite #1400

    Costa Mesa, CA 92626

             Email: privacy@pieology.com

             Telephone: 1-833-714-6344