Privacy Policy

This Privacy Policy describes how Imos ("we," "us," or "our") collects, uses, discloses, and safeguards your personal information when you visit our website at imos-pizzza.rest, place orders, interact with our digital services, or otherwise engage with our business. We are committed to protecting your privacy and handling your personal data with transparency, integrity, and in full compliance with applicable United States privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and the Federal Trade Commission (FTC) Act.

Please read this Privacy Policy carefully. By accessing or using our website, placing an order, or providing us with your information, you acknowledge that you have read, understood, and agree to the practices described herein. If you do not agree with this Privacy Policy, please do not use our services or provide us with your personal information.

We encourage you to review this Privacy Policy periodically, as we may update it from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by updating the "Last Updated" date at the top of this page.

1. Who We Are

Imos is a food service business operating in the United States. We provide customers with quality food products, including pizza and related menu items, through our physical locations and online ordering platform. As a data controller, we are responsible for the personal information we collect about you in connection with your use of our services.

2. Information We Collect

We collect various types of information in connection with your interactions with Imos. The categories of personal information we collect include the following:

2.1 Personal Identification Information

When you create an account, place an order, subscribe to our newsletter, participate in a promotion, or contact us for customer support, we may collect personally identifiable information, including but not limited to:

• Full name
• Email address
• Telephone number
• Mailing or delivery address
• Date of birth (where required for age verification)
• Username and password (for registered accounts)
• Profile photo (if voluntarily provided)

2.2 Payment and Financial Information

When you make a purchase through our website or in-store, we collect payment-related information necessary to process your transaction. This may include:

• Credit or debit card details (processed securely through PCI-DSS compliant payment processors)
• Billing address
• Transaction history and order details
• Digital wallet information (e.g., Apple Pay, Google Pay)

We do not store your full payment card numbers on our servers. Payment processing is handled by third-party processors who maintain their own security standards and data practices.

2.3 Order and Transaction Information

In the course of providing our food services, we collect information about your orders and transactions, including:

• Items ordered and order frequency
• Order preferences and customizations
• Delivery instructions and preferences
• Order history and receipts
• Loyalty program activity and rewards balances

2.4 Usage and Technical Data

When you visit our website at imos-pizzza.rest, we automatically collect certain technical information about your device and your interactions with our site, including:

• IP address
• Browser type and version
• Operating system
• Device type (desktop, mobile, tablet)
• Unique device identifiers
• Pages visited and time spent on each page
• Links clicked and features used
• Referring website or source
• Date and time of your visit
• Search queries made on our site
• Error logs and crash reports

2.5 Location Data

With your permission, we may collect geolocation data to help us identify the nearest Imos location, facilitate delivery services, or personalize offers based on your area. You can disable location sharing in your device settings at any time; however, this may limit certain features of our services.

2.6 Communications Data

If you contact us by email, phone, or through our website's contact forms, we retain records of that correspondence, including your name, contact details, and the content of your messages. We may also keep records of surveys or feedback you provide to us.

2.7 Marketing and Preferences Data

We collect information about your preferences, interests, and marketing consent settings, including:

• Email marketing subscription status
• SMS/text message opt-in status
• Notification preferences
• Dietary preferences or restrictions (when voluntarily provided)
• Favorite menu items and food preferences

2.8 Cookies and Tracking Technologies

We use cookies, web beacons, pixel tags, and similar tracking technologies to enhance your experience on our website. Please see Section 8 of this Privacy Policy and our dedicated Cookie Policy for more detailed information about how we use these technologies and how you can manage your preferences.

2.9 Information from Third Parties

We may also receive information about you from third-party sources, such as:

• Social media platforms (e.g., if you connect your account or interact with our social pages)
• Third-party delivery platforms and aggregators
• Analytics and advertising partners
• Publicly available databases
• Customer review platforms

3. How We Use Your Information

We use the personal information we collect for a variety of legitimate business purposes. The primary ways in which we use your information are described below:

3.1 Provision of Services

• Processing and fulfilling your food orders, whether online or in-store
• Managing your customer account and profile
• Facilitating delivery and pickup services
• Processing payments and issuing receipts
• Administering loyalty programs and rewards
• Communicating with you about your orders, including order confirmations, status updates, and delivery notifications

3.2 Customer Support

• Responding to your inquiries, questions, and complaints
• Resolving disputes and troubleshooting issues
• Providing technical assistance with our website or app
• Maintaining records of our customer interactions for quality assurance

3.3 Analytics and Service Improvement

• Analyzing how customers use our website and services to improve functionality and user experience
• Conducting market research and internal reporting
• Identifying trends in ordering behavior to optimize our menu and offerings
• Testing new features and website improvements
• Monitoring and preventing fraud, security breaches, and unauthorized access

3.4 Marketing and Communications

• Sending you promotional emails, newsletters, and special offers (subject to your marketing preferences)
• Delivering targeted advertisements on our website and third-party platforms
• Notifying you about new menu items, promotions, discounts, and events
• Personalizing your experience on our website based on your preferences and order history
• Conducting surveys and obtaining feedback to improve our services

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any of our emails, adjusting your account preferences, or contacting us directly at [email protected].

3.5 Legal and Compliance Purposes

• Complying with applicable federal, state, and local laws and regulations
• Responding to lawful requests from government authorities or law enforcement
• Enforcing our Terms of Service and other legal agreements
• Protecting the rights, property, and safety of Imos, our customers, and the public
• Maintaining business records as required by law

4. Sharing Your Information with Third Parties

We do not sell your personal information for monetary consideration. However, we may share your information with certain third parties in the following circumstances:

4.1 Service Providers and Business Partners

We engage trusted third-party service providers who assist us in operating our business and delivering services to you. These providers are contractually obligated to use your information only as directed by us and in accordance with this Privacy Policy. Categories of service providers include:

• Payment processors: To securely handle payment transactions
• Delivery and logistics partners: To fulfill food delivery orders
• Email and SMS marketing platforms: To send promotional and transactional communications
• Website analytics providers: Such as Google Analytics, to help us understand website usage
• Cloud hosting and IT infrastructure providers: To maintain and operate our digital platforms
• Customer relationship management (CRM) tools: To manage customer data and support interactions
• Advertising networks: To display targeted advertisements on our behalf
• Fraud prevention and security services: To protect against unauthorized transactions

4.2 Legal Requirements

We may disclose your personal information when we believe in good faith that such disclosure is necessary to:

• Comply with a legal obligation, court order, or government request
• Enforce our Terms of Service or other legal agreements
• Protect the rights, property, or safety of Imos, our customers, employees, or the public
• Investigate, prevent, or take action regarding fraud, illegal activities, or potential threats

4.3 Business Transfers

In the event of a merger, acquisition, sale of assets, bankruptcy, reorganization, or other business transaction, your personal information may be transferred to a successor entity as part of that transaction. We will notify you via email or a prominent notice on our website if such a transfer occurs and your information becomes subject to a different privacy policy.

4.4 With Your Consent

We may share your information with other third parties when you have provided explicit consent for us to do so, such as when you opt into a co-branded promotion or third-party loyalty program.

4.5 Aggregated and De-Identified Data

We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you with partners, researchers, advertisers, or other third parties for any legitimate business purpose.

5. Data Security

Imos takes the security of your personal information seriously. We implement a range of technical, administrative, and physical safeguards designed to protect your data from unauthorized access, disclosure, alteration, or destruction. Our security measures include:

• Encryption: We use SSL/TLS encryption to secure data transmitted between your browser and our website.
• Access controls: Access to personal information is restricted to authorized employees and contractors who need it to perform their job functions.
• Secure payment processing: All payment transactions are processed through PCI-DSS compliant payment gateways. We do not store full card numbers on our systems.
• Regular security assessments: We periodically review and test our systems and security practices.
• Employee training: Our staff receive training on data protection best practices and the importance of maintaining confidentiality.
• Firewalls and intrusion detection: We employ technical measures to detect and prevent unauthorized access to our systems.
• Data minimization: We collect only the information necessary for the purposes described in this Privacy Policy.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the applicable regulatory authorities in accordance with applicable law, including state data breach notification laws.

6. Your Privacy Rights

Depending on your state of residence and applicable law, you may have certain rights regarding your personal information. We are committed to honoring these rights to the fullest extent required by law.

6.1 Rights Under the CCPA/CPRA (California Residents)

If you are a resident of California, you have the following rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Know: You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you, the sources of that information, the purposes for which it was collected, and the categories of third parties with whom it has been shared.
• Right to Delete: You have the right to request that we delete personal information we have collected from you, subject to certain exceptions permitted by law.
• Right to Correct: You have the right to request correction of inaccurate personal information we hold about you.
• Right to Opt-Out of Sale or Sharing: You have the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising purposes. To exercise this right, you may contact us at [email protected].
• Right to Limit Use of Sensitive Personal Information: You have the right to limit our use and disclosure of sensitive personal information to purposes necessary to provide the requested services.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights. We will not deny you services, charge different prices, or provide a lower quality of service because you exercised your rights under the CCPA/CPRA.
• Right to Data Portability: You may request a copy of your personal information in a portable and readily usable format.

6.2 General Privacy Rights (All Users)

Regardless of your location, we extend the following rights to all of our customers:

• Right to Access: You may request a copy of the personal information we hold about you.
• Right to Correction: You may request that we correct or update inaccurate or incomplete information.
• Right to Deletion: You may request that we delete your account and associated personal information, subject to certain legal requirements.
• Right to Withdraw Consent: Where we process your data based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.
• Right to Opt-Out of Marketing: You may opt out of receiving promotional communications from us at any time.

6.3 How to Exercise Your Rights

To exercise any of your privacy rights, please submit a request by:

• Email: [email protected]
• Website: imos-pizzza.rest (via our contact form)

We will verify your identity before processing your request and will respond within the timeframes required by applicable law (generally within 45 days, with the possibility of a single extension of an additional 45 days when necessary). We will not charge a fee for processing your request unless it is excessive, repetitive, or manifestly unfounded.

You may designate an authorized agent to submit requests on your behalf. We may require written authorization and verification of your identity before fulfilling requests submitted through an authorized agent.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Our general data retention periods are as follows:

When personal information is no longer needed for the purposes for which it was collected, we will securely delete or anonymize it in accordance with our data retention and disposal procedures.

8. Cookies and Tracking Technologies

Our website at imos-pizzza.rest uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and deliver personalized content and advertisements. A "cookie" is a small text file placed on your device when you visit a website.

8.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the operation of our website, including enabling you to log in, place orders, and use core features. These cannot be disabled.
• Performance and Analytics Cookies: Collect information about how visitors use our website, such as which pages are visited most often and whether any error messages are received. This data helps us improve site performance.
• Functionality Cookies: Remember your preferences and settings (such as your location, language, or saved cart items) to provide a more personalized experience.
• Targeting and Advertising Cookies: Used to deliver advertisements relevant to you and your interests, both on our website and on third-party sites. They also limit the number of times you see an ad and help measure the effectiveness of ad campaigns.

8.2 Managing Your Cookie Preferences

You can control and manage cookies in several ways:

• Through your browser settings, which allow you to refuse some or all cookies or to alert you when cookies are being sent
• Through our cookie consent banner, which appears when you first visit our website
• By using opt-out tools provided by advertising networks, such as the Digital Advertising Alliance (DAA) opt-out tool at optout.aboutads.info

Please note that disabling certain cookies may affect the functionality of our website and your ability to use some features, including online ordering.

For more detailed information about the specific cookies we use, their purposes, and how to manage them, please refer to our Cookie Policy, available on our website at imos-pizzza.rest.

9. Children's Privacy

In compliance with the Children's Online Privacy Protection Act (COPPA), we do not knowingly collect personal information from children under the age of 13 without verifiable parental consent. If we become aware that we have inadvertently collected personal information from a child under the age of 13 without appropriate consent, we will take immediate steps to delete that information from our records.

If you are a parent or guardian and believe that your child under the age of 13 has provided us with personal information without your consent, please contact us immediately at [email protected]. We will investigate the matter and take appropriate action to delete the relevant information.

We also recommend that parents and guardians supervise their children's online activities and educate them about sharing personal information online.

10. International Data Transfers

Imos is a United States-based business, and your personal information is primarily collected, stored, and processed within the United States. However, some of our third-party service providers may operate in other countries, which means that your personal information may be transferred to, stored in, or processed in countries outside of your state of residence, including countries that may have different data protection laws than those in your jurisdiction.

When we transfer personal information internationally, we take steps to ensure that adequate protections are in place to safeguard your information in accordance with this Privacy Policy and applicable law. These measures may include:

• Entering into data processing agreements with international service providers that include appropriate data protection clauses
• Ensuring that transfers are made only to countries with adequate levels of data protection, or to organizations that have committed to appropriate safeguards
• Applying technical and organizational security measures to protect personal data during and after international transfer

By using our services and providing us with your personal information, you acknowledge that your information may be transferred to and processed in the United States and other countries as described in this Privacy Policy.

11. Links to Third-Party Websites

Our website may contain links to third-party websites, applications, or services that are not operated or controlled by Imos. These may include delivery platforms, social media sites, and advertising partners. This Privacy Policy does not apply to those third-party sites, and we are not responsible for the privacy practices of any third party.

We encourage you to review the privacy policies of any third-party sites you visit. The inclusion of a link on our website does not constitute our endorsement of any third-party site, its content, or its privacy practices.

12. Do Not Track Signals

Some browsers offer a "Do Not Track" (DNT) feature that sends a signal to websites requesting that your browsing activity not be tracked. Currently, there is no universally accepted standard for how websites should respond to DNT signals, and our website does not currently alter its data collection practices in response to DNT signals. We will continue to monitor developments in this area and update our practices accordingly.

California residents may also exercise their rights under the CPRA by opting out of the sale or sharing of personal information as described in Section 6.1 above.

13. Your State Privacy Rights

In addition to the rights available to California residents under CCPA/CPRA, residents of other states may have privacy rights under their state laws. As of the effective date of this Privacy Policy, several U.S. states have enacted comprehensive consumer privacy laws that may grant you rights similar to those described in this policy, including the right to access, correct, delete, and opt out of the processing of your personal information.

These may include residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Texas (TDPSA), and other states that have adopted or may in the future adopt consumer privacy legislation. If you are a resident of a state with applicable privacy laws, you may submit a privacy rights request to us using the contact information provided in Section 15 of this Privacy Policy, and we will respond in accordance with the law applicable to your state.

We also comply with the FTC Act and applicable FTC guidelines regarding unfair or deceptive acts or practices in connection with our data collection and privacy practices. We will not make any material misrepresentations about the privacy, security, or confidentiality of consumers' personal information.

14. How to File a Complaint with a Data Protection Authority

If you believe that we have not handled your personal information in accordance with applicable law, you have the right to file a complaint with the relevant data protection authority in your jurisdiction. In the United States, the following agencies may be relevant:

14.1 Federal Trade Commission (FTC)

The Federal Trade Commission enforces privacy and data security laws at the federal level. If you believe we have engaged in unfair or deceptive practices in connection with your personal information, you may file a complaint with the FTC at:

• Website: www.ftc.gov/complaint
• Phone: 1-877-382-4357
• Address: Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, DC 20580

14.2 California Privacy Protection Agency (CPPA)

If you are a California resident and believe your rights under the CCPA/CPRA have been violated, you may file a complaint with the California Privacy Protection Agency:

• Website: cppa.ca.gov
• Email: [email protected]

14.3 State Attorney General

Residents of many states may also file complaints with their state's Attorney General office. We encourage you to contact the appropriate office for your state if you have concerns about how we handle your personal information.

Before filing a complaint with a regulatory authority, we encourage you to first contact us directly so that we have the opportunity to address your concern. We are committed to resolving privacy issues promptly and transparently.

15. Contact Us for Privacy Inquiries

If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal information, please do not hesitate to reach out to us. We are committed to addressing your privacy inquiries in a timely and transparent manner.

We strive to respond to all privacy-related requests and inquiries within 30 days of receipt, and within the legally required timeframes under applicable state and federal law. For requests submitted under CCPA/CPRA or other state privacy laws, we will respond within 45 days, with the possibility of a 45-day extension when necessary, and we will inform you of any such extension within the initial 45-day period.

16. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes to this Privacy Policy, we will:

• Update the "Last Updated" date at the top of this page
• Post the revised Privacy Policy on our website at imos-pizzza.rest
• Provide notice via email to registered users for significant changes
• Display a prominent notice on our website where appropriate

Your continued use of our website and services after any modifications to this Privacy Policy constitutes your acknowledgment of the changes and your agreement to abide by and be bound by the updated policy. If you do not agree with the revised Privacy Policy, you should discontinue using our services and contact us to request deletion of your personal information.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information and to be aware of any changes that may affect you.