Privacy Policy

1. Introduction

At Lou Malnati's, we are committed to protecting your privacy and personal information. This Privacy Policy describes how we collect, use, share, and protect your personal information when you use our website, mobile applications, and food ordering services. Your privacy is important to us, and we want you to feel confident when sharing information with us.

This policy applies to all interactions you have with Lou Malnati's, including when you visit our website at lou-malnatis.top, place orders for food delivery or pickup, create an account, participate in our loyalty program, make reservations, or contact our customer service team.

By using our services, you agree to the terms outlined in this Privacy Policy. We want to be transparent about our practices and ensure you understand how your information is handled. Please note that we never sell your personal data to third parties for their marketing purposes.

2. Information We Collect

2.1 Information You Provide

We collect information that you voluntarily provide to us when using our services:

• Personal Identification: Name, email address, phone number, delivery address, billing address
• Account Information: Username, password, order history, favorite menu items, dietary preferences
• Payment Information: Credit card details, billing information (stored securely and encrypted)
• Food Preferences: Allergen information, special dietary requirements (vegan, vegetarian, gluten-free, halal, kosher), spice preferences, portion sizes
• Order Details: Menu items selected, special instructions, delivery times, catering event details
• Loyalty Program Data: Rewards points, membership tier, promotional preferences
• Table Reservations: Party size, preferred seating, special occasions, accessibility needs
• Communication: Contact form submissions, customer reviews, feedback, support inquiries
• Marketing Preferences: Email subscription choices, promotional offers interest, communication frequency

2.2 Automatically Collected Information

We automatically collect certain information when you use our services:

• Device Information: IP address, browser type and version, operating system, device identifiers, screen resolution
• Usage Data: Pages visited, time spent on site, click patterns, search terms, navigation paths
• Location Data: Approximate location derived from IP address, precise location (with consent) for delivery services
• Cookie Data: Session identifiers, user preferences, shopping cart contents, analytics data
• Performance Data: Page load times, error messages, technical diagnostics

2.3 Information from Third Parties

We may receive information about you from third-party sources:

• Social Media: Profile information if you connect your social media accounts
• Payment Processors: Transaction verification and fraud prevention data
• Delivery Partners: Delivery status updates and location information
• Marketing Partners: Demographic data and interest categories for advertising
• Data Aggregators: Publicly available information to verify identity and prevent fraud

3. How We Use Your Information

3.1 Service Provision

• Processing and fulfilling your food orders
• Coordinating delivery and pickup services
• Managing your account and authentication
• Processing payments and managing billing
• Providing customer support and resolving issues
• Managing table reservations and catering events
• Administering loyalty program benefits and rewards
• Improving our menu offerings and service quality

3.2 Communication

• Sending order confirmations and delivery notifications
• Providing customer support responses
• Delivering important service announcements
• Notifying you of policy changes or updates
• Sending marketing emails and promotional offers (with consent only)
• Conducting customer satisfaction surveys

3.3 Marketing and Analytics

• Personalizing your experience and menu recommendations
• Analyzing website traffic and user behavior patterns
• Measuring effectiveness of marketing campaigns
• Conducting market research for new product development
• Creating targeted advertising based on preferences
• Improving website functionality and user experience

3.4 Legal Compliance

• Responding to legal requests and court orders
• Preventing fraud and protecting against security threats
• Protecting our rights, property, and safety
• Resolving disputes and enforcing agreements
• Complying with applicable laws and regulations

4. Information Sharing and Disclosure

4.1 Service Providers

We share information with trusted third-party service providers who help us operate our business:

• Payment Processors: Secure credit card processing and fraud prevention
• Delivery Companies: Order fulfillment and delivery coordination
• Cloud Storage Providers: Secure data hosting and backup services
• Email Marketing Services: Newsletter delivery and promotional campaigns
• Analytics Tools: Website usage analysis and performance monitoring
• Customer Support Platforms: Help desk and ticket management systems

4.2 Legal Requirements

We may disclose your information when required by law or to protect our legitimate interests:

• In response to court orders, subpoenas, or legal process
• To comply with applicable laws and regulations
• To protect our rights, property, and safety
• In cases of public safety or emergency situations
• To investigate and prevent fraud or illegal activities

4.3 Business Transfers

In the event of a merger, acquisition, or asset sale, your information may be transferred to the new owner. We will provide notice and ensure the new owner complies with this Privacy Policy or obtains your consent for any material changes.

4.4 With Your Consent

We may share your information for other purposes with your explicit consent, such as participating in joint promotions or sharing testimonials.

5. Data Security

5.1 Technical Measures

• Encryption: SSL/TLS encryption for all data transmission and storage
• Firewall Protection: Advanced network security systems to prevent unauthorized access
• Access Controls: Restricted access to personal data on a need-to-know basis
• Monitoring: 24/7 security monitoring and threat detection
• Data Backups: Regular encrypted backups stored in secure locations
• Security Updates: Regular software updates and security patches

5.2 Organizational Measures

• Comprehensive employee security training programs
• Strict data handling procedures and protocols
• Confidentiality agreements with all staff and contractors
• Security incident response and recovery plans
• Regular security audits and assessments
• Data minimization and retention policies

5.3 Your Responsibilities

You play an important role in protecting your information:

• Use strong, unique passwords for your account
• Never share your login credentials with others
• Log out of your account when using public computers
• Be cautious of suspicious emails or phishing attempts
• Report any unauthorized access to your account immediately
• Keep your contact information up to date

Security Breach Notification: In the unlikely event of a data breach that affects your personal information, we will promptly notify you and relevant authorities as required by law, and take immediate steps to minimize any potential harm.

6. Cookies and Tracking Technologies

We use various cookies and tracking technologies to enhance your experience on our website:

Type	Purpose	Duration
Essential Cookies	Basic site functionality, login state, shopping cart	Session
Functional Cookies	User preferences, language settings, location data	Up to 1 year
Analytics Cookies	Usage analysis, performance monitoring, improvement	Up to 2 years
Marketing Cookies	Personalized advertising, campaign measurement	Up to 1 year

Tracking Technologies Used:

• Google Analytics for traffic analysis and user behavior
• Facebook Pixel for advertising effectiveness measurement
• Web beacons to track email open rates
• Local storage for browser-specific data
• Session storage for temporary data

Cookie Management: You can control cookies through your browser settings to accept, reject, or delete cookies. However, disabling certain cookies may affect website functionality and your user experience.

7. Your Rights

Under applicable privacy laws (GDPR, CCPA, etc.), you have the following rights regarding your personal information:

7.1 Right of Access

You have the right to know what personal information we have about you and request a copy of your data.

7.2 Right to Rectification

You can request that we correct any inaccurate or incomplete personal information.

7.3 Right to Erasure (Right to be Forgotten)

You can request that we delete your personal information under certain circumstances.

7.4 Right to Restrict Processing

You can request that we limit how we use your personal information.

7.5 Right to Data Portability

You can request to receive your personal information in a machine-readable format or have it transferred to another service provider.

7.6 Right to Object

You can object to our processing of your personal information, especially for marketing purposes.

7.7 Right Against Automated Decision-Making

You have the right to not be subject to decisions based solely on automated processing that significantly affects you.

How to Exercise Your Rights: To exercise any of these rights, please contact us using the information provided in Section 13. We will respond to your request within 30 days.

8. Children's Privacy

Our services are not intended for children under the age of 16. We do not intentionally collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. We will promptly investigate and delete any such information from our systems.

Parents should supervise their children's online activities and help enforce this Privacy Policy by instructing their children to never provide personal information through our website without permission.

9. International Data Transfers

9.1 Protection Measures

When we transfer your personal information internationally, we ensure adequate protection through:

• EU-Japan adequacy decisions for data transfers
• Standard Contractual Clauses (SCC) approved by regulators
• Data processing agreements with strict security requirements
• Regular compliance audits and monitoring
• Appropriate technical and organizational security measures

9.2 Transfer Destinations

Your personal information may be transferred to and processed in:

• United States (cloud storage and processing services)
• European Union (data analytics and customer support)
• Other countries as necessary for service provision, always with appropriate safeguards

10. Data Retention Periods

We retain your personal information only as long as necessary for the purposes outlined in this policy:

Information Type	Retention Period	Reason
Account information	6 months after account deletion	Legal obligations, dispute resolution
Order and purchase history	7 years	Tax and accounting requirements
Marketing consent records	3 years after withdrawal	Consent record keeping, compliance
Website usage logs	Up to 2 years	Security monitoring, analytics
Customer support records	3 years	Service quality improvement
Payment transaction data	7 years	Financial regulations, fraud prevention

Safe Data Disposal: When data retention periods expire, we ensure complete and secure disposal through:

• Complete electronic deletion making data unrecoverable
• Physical destruction of paper records through certified shredding
• Deletion of all backup copies and archived data
• Maintenance of disposal records for compliance

11. Third-Party Links

Our website may contain links to third-party websites, social media platforms, or other services. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party sites before providing personal information.

When you leave our website through external links, this Privacy Policy no longer applies. Your interactions with third parties are governed by their respective privacy policies and terms of service.

12. Policy Changes

12.1 Change Notification

We may update this Privacy Policy from time to time. When we make changes, we will notify you through:

• Prominent notice on our website homepage
• Email notification to registered users
• Pop-up notification when you log in to your account
• For significant changes, we may require explicit consent

12.2 Checking for Changes

• The most current version will always be available on our website
• Check the "Last Updated" date at the top of this policy
• Continued use of our services after changes indicates acceptance
• If you disagree with changes, you may stop using our services

13. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Lou Malnati's
Address: 3593 Main St, Vancouver, BC V5V 3N4, Canada
Phone: +1 604-423-4840
Email: [email protected]
Business Hours: Monday-Friday 9:00 AM - 6:00 PM PST

Response Commitment: We will respond to all privacy-related inquiries within 3 business days.

13.1 Complaints

If you have a complaint about our privacy practices:

• Please contact us first so we can work together to resolve the issue
• If you are not satisfied with our response, you may contact your local privacy regulator
• For Canadian residents: Office of the Privacy Commissioner of Canada
• For EU residents: Your local Data Protection Authority

14. Withdrawal of Consent

14.1 Marketing Consent Withdrawal

You can withdraw consent for marketing communications at any time through:

• Clicking the unsubscribe link in any marketing email
• Updating your preferences in your account settings
• Contacting our customer support team
• Calling us at +1 604-423-4840

14.2 Account Deletion

To delete your account and associated data:

• Log in to your account and visit account settings
• Select "Delete Account" and confirm your choice
• Contact customer support for assistance
• Note: Some data may be retained for legal compliance as outlined in Section 10

15. Conclusion

At Lou Malnati's, protecting your privacy is not just a legal obligation – it's fundamental to our relationship with you. We are committed to being transparent about our data practices and giving you control over your personal information.

We understand that trust is earned through consistent actions, not just words. That's why we continuously review and improve our privacy practices to ensure they meet the highest standards. Your personal information is valuable, and we treat it with the care and respect it deserves.

We invite you to contact us with any questions or concerns about this Privacy Policy or our privacy practices. Your feedback helps us improve and ensures we're meeting your expectations for privacy protection.

Thank you for choosing Lou Malnati's and for trusting us with your personal information. We appreciate your business and your confidence in our commitment to privacy.

Please remember to check this Privacy Policy periodically for updates. The "Last Updated" date at the top indicates when the most recent changes were made.