Privacy Policy

Welcome to Round Table Pizza. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website roundtable-cafe.rest, place orders, participate in our loyalty programs, or otherwise interact with us. Please read this policy carefully. If you disagree with its terms, please discontinue use of our site and services.

This Privacy Policy applies to all information collected through our website (roundtable-cafe.rest), mobile applications, in-store interactions, and any related services, sales, marketing, or events (collectively referred to as the "Services").

1. Who We Are

Round Table Pizza is a food service business operating in the United States. We are responsible for your personal data as described in this Privacy Policy.

If you have any questions or concerns about this policy or our privacy practices, please contact us using the information provided above or refer to the Contact Us section at the end of this document.

2. Legal Framework

As a business operating in the United States, we comply with all applicable federal and state privacy laws, including but not limited to:

• The Federal Trade Commission Act (FTC Act), which governs unfair or deceptive acts or practices in commerce, including privacy and data security.
• The California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) — for California residents.
• The Children's Online Privacy Protection Act (COPPA) — governing data collection from children under 13.
• The CAN-SPAM Act — governing commercial email communications.
• The Telephone Consumer Protection Act (TCPA) — governing telephone and SMS marketing communications.
• Other applicable state privacy laws, including the Virginia Consumer Data Protection Act (VCDPA), Colorado Privacy Act (CPA), and Connecticut Data Privacy Act (CTDPA), where applicable.

We take our legal obligations seriously and continually monitor developments in privacy law to ensure our practices remain compliant and up to date.

3. Information We Collect

We collect personal information that you voluntarily provide to us, information automatically collected when you use our Services, and information from third-party sources. The categories of information we collect include:

3.1 Personal Information You Provide Directly

We collect information you provide when you:

• Register for an account or loyalty program
• Place an online or in-store order
• Sign up for our newsletter or marketing communications
• Contact our customer support team
• Participate in surveys, promotions, or contests
• Submit feedback or reviews

This information may include:

3.2 Information Collected Automatically

When you access or use our website and digital services, certain information is automatically collected about your device and browsing behavior. This includes:

• Device Information: IP address, device type, operating system, browser type and version, device identifiers (such as mobile advertising IDs), screen resolution, and language settings.
• Usage Data: Pages viewed, links clicked, time spent on pages, referring URLs, search queries entered on our site, and navigation paths through our website.
• Location Data: General geographic location inferred from your IP address; precise location data if you enable location services on your mobile device and grant us permission.
• Log Data: Server logs including access times, error logs, and activity records.
• Transaction Data: Automatically generated order confirmation numbers, timestamps, and transaction records.

3.3 Cookies and Tracking Technologies

We use cookies, web beacons, pixel tags, local storage objects, and similar tracking technologies to collect information about your interactions with our Services. These technologies help us recognize you across sessions, remember your preferences, analyze website traffic, and deliver targeted advertising.

For detailed information about the cookies we use, the purposes for which we use them, and how you can manage your cookie preferences, please refer to our Cookie Policy, available on our website. You may also control cookie settings through your browser settings or opt-out mechanisms provided on our website.

3.4 Information from Third Parties

We may receive information about you from third-party sources, including:

• Social Media Platforms: If you choose to connect your social media account (e.g., Facebook, Google) to our Services or interact with our social media pages.
• Delivery Partners: Third-party delivery platforms may share order and contact information with us to facilitate delivery.
• Analytics Providers: Companies such as Google Analytics that provide us with aggregated or de-identified usage data.
• Advertising Partners: Ad networks and marketing partners that help us reach you with relevant promotions.
• Payment Processors: Secure payment processors that handle your financial transactions and provide us with limited transaction confirmation data.

4. How We Use Your Information

We use the information we collect for a variety of business and operational purposes. Specifically, we use your personal information to:

4.1 Provide and Manage Our Services

• Process and fulfill food orders placed online, via app, or by telephone
• Manage your loyalty program membership and rewards points
• Create and maintain your customer account
• Process payments and issue refunds or credits
• Coordinate delivery logistics and communicate estimated arrival times
• Respond to your customer service inquiries and resolve disputes
• Send order confirmations, receipts, and delivery notifications

4.2 Analytics and Service Improvement

• Analyze usage patterns and trends to improve website functionality and user experience
• Conduct internal research and development for new menu items and services
• Monitor and evaluate the performance of our marketing campaigns
• Generate aggregate, de-identified statistical reports about our customer base
• Detect and address technical issues, bugs, and security vulnerabilities

4.3 Marketing and Promotional Communications

• Send promotional emails, special offers, coupons, and newsletters — where you have consented or where permitted by law
• Deliver personalized menu recommendations based on your order history
• Notify you of seasonal promotions, limited-time offers, and events
• Conduct contests, sweepstakes, and loyalty program promotions
• Display targeted advertisements on third-party websites and platforms

You may opt out of marketing communications at any time by clicking the "Unsubscribe" link in any email, texting STOP to any SMS messages, or contacting us directly at [email protected].

4.4 Legal and Security Purposes

• Comply with applicable laws, regulations, legal processes, and government requests
• Enforce our Terms of Service and other agreements
• Protect the rights, property, and safety of Round Table Pizza, our customers, and the public
• Detect, investigate, and prevent fraudulent transactions and other illegal activities
• Maintain records required by law, including tax and accounting records

5. How We Share Your Information

We do not sell, rent, or trade your personal information to unaffiliated third parties for their own marketing purposes without your consent. However, we do share information in the following circumstances:

5.1 Service Providers and Business Partners

We engage trusted third-party vendors and service providers who perform functions on our behalf. These parties are contractually obligated to keep your information confidential and use it only for the specific services they provide to us. Categories of service providers include:

• Payment Processors: To securely handle credit card transactions and financial data
• Delivery Services: Third-party logistics and delivery partners to fulfill your orders
• Email and SMS Providers: To send transactional and promotional communications
• Cloud Hosting Providers: To store data and power our website and applications
• Analytics Providers: To help us understand how our Services are used
• Customer Support Tools: To manage and respond to customer inquiries
• Advertising Networks: To deliver relevant ads on other platforms
• Loyalty Program Partners: To manage reward points and member benefits

5.2 Legal Requirements and Law Enforcement

We may disclose your information if required to do so by law or in good-faith belief that such action is necessary to:

• Comply with a legal obligation, court order, subpoena, or government request
• Protect and defend the legal rights or property of Round Table Pizza
• Prevent or investigate possible wrongdoing in connection with our Services
• Protect the personal safety of users of our Services or the public
• Protect against legal liability

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, asset sale, bankruptcy, or similar corporate transaction, your personal information may be transferred to the successor entity as part of the business assets. We will notify you via email and/or a prominent notice on our website of any such change in ownership and any choices you may have regarding your information.

5.4 With Your Consent

We may share your information with other third parties when you have given us your explicit consent to do so, such as when you participate in a joint promotion with a partner brand.

6. Data Security

We take the security of your personal information very seriously. We implement a variety of industry-standard technical, administrative, and physical security measures designed to protect your information from unauthorized access, disclosure, alteration, and destruction.

6.1 Security Measures We Employ

• Encryption: All data transmitted between your browser and our servers is protected using Secure Socket Layer (SSL) / Transport Layer Security (TLS) encryption. Payment card data is encrypted using PCI-DSS compliant systems.
• Access Controls: Access to personal information is restricted to employees and contractors who need it to perform their job functions, and all such personnel are subject to confidentiality obligations.
• Firewalls and Intrusion Detection: We deploy network firewalls and intrusion detection systems to monitor and protect our infrastructure.
• Regular Security Audits: We conduct periodic security assessments and vulnerability testing of our systems and applications.
• Password Protection: User passwords are stored using one-way cryptographic hashing algorithms. We never store plaintext passwords.
• Data Minimization: We only collect and retain personal information that is necessary for the purposes described in this Privacy Policy.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Our specific retention guidelines are as follows:

When personal information is no longer needed, we securely delete or anonymize it in accordance with our data disposal procedures.

8. Your Privacy Rights

Depending on your state of residence, you may have certain rights regarding your personal information. We are committed to honoring these rights in accordance with applicable law.

8.1 Rights Available to All Users

• Right to Know / Access: You have the right to request information about the categories and specific pieces of personal information we have collected about you, the sources of that information, and the purposes for which it is used.
• Right to Correction: You have the right to request that we correct inaccurate or incomplete personal information we hold about you.
• Right to Deletion: You may request that we delete your personal information, subject to certain exceptions (such as legal obligations or legitimate business needs).
• Right to Opt-Out of Marketing: You have the right to opt out of receiving promotional communications from us at any time.

8.2 Additional Rights for California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Know: The right to know what personal information is being collected, used, shared, or sold.
• Right to Delete: The right to request deletion of personal information collected from you (with certain exceptions).
• Right to Correct: The right to correct inaccurate personal information that we maintain about you.
• Right to Opt-Out of Sale or Sharing: The right to direct us not to sell or share your personal information with third parties. To exercise this right, you may submit a request via our website or contact us at [email protected].
• Right to Limit Use of Sensitive Personal Information: The right to limit our use and disclosure of sensitive personal information to only what is necessary to perform the requested services.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you goods or services, charge different prices, or provide a different level of quality because you exercised your privacy rights.
• Right to Data Portability: The right to receive your personal information in a portable, usable format so you can transfer it to another company.

California residents may submit privacy requests by contacting us at [email protected]. We will respond to verified requests within 45 days, with a possible extension of an additional 45 days when reasonably necessary, as permitted by law.

8.3 Rights for Residents of Other States

Residents of Virginia, Colorado, Connecticut, Utah, and other states with comprehensive privacy laws may have similar rights, including rights to access, correct, delete, and port personal data, and to opt out of certain processing activities. We will honor these rights in accordance with applicable state law. Please contact us to submit a request.

8.4 How to Exercise Your Rights

To submit a privacy rights request, please:

• Email us at: [email protected]
• Include your full name, email address associated with your account, and a description of the right you wish to exercise

We will verify your identity before processing your request. Verification may require you to confirm information associated with your account. We will not charge a fee for processing your request unless it is excessive, repetitive, or manifestly unfounded.

You may designate an authorized agent to submit a request on your behalf. Authorized agents must provide written authorization from you and may be required to verify their identity separately.

9. Children's Privacy

Our website, online ordering platform, and marketing communications are not directed at children under the age of 13. We do not knowingly collect, solicit, or use personal information from children under 13. If we become aware that we have inadvertently collected personal information from a child under 13 without verifiable parental consent, we will take prompt steps to delete that information from our records.

If you are a parent or legal guardian and believe that your child under 13 has provided us with personal information, please contact us immediately at [email protected] so that we can take appropriate action in compliance with the Children's Online Privacy Protection Act (COPPA).

For users between the ages of 13 and 17, we recommend that a parent or guardian review this Privacy Policy and supervise any use of our Services. We do not knowingly market to minors or target minors with personalized advertising.

10. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website, analyze site traffic, and deliver relevant advertisements. Cookies are small text files stored on your device when you visit our website.

10.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the website to function properly. These cannot be disabled as they enable core features like shopping cart functionality and account login.
• Performance and Analytics Cookies: These collect anonymous information about how visitors use our site, helping us improve performance and user experience (e.g., Google Analytics).
• Functionality Cookies: These remember your preferences and settings, such as your location, language, and previously selected menu items.
• Targeting and Advertising Cookies: Used to deliver advertisements relevant to your interests and to track the effectiveness of our advertising campaigns.

10.2 Managing Your Cookie Preferences

You can manage or disable cookies through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, or be notified when new cookies are received. Please note that disabling certain cookies may affect the functionality of our website.

Additionally, you may opt out of interest-based advertising by visiting:

• The Digital Advertising Alliance (DAA) at optout.aboutads.info
• The Network Advertising Initiative (NAI) at optout.networkadvertising.org
• Google's opt-out page at tools.google.com/dlpage/gaoptout

For complete details about our cookie practices, please review our full Cookie Policy available on our website.

11. International Data Transfers

Round Table Pizza is based in the United States, and the information we collect is governed by United States law. If you are accessing our Services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where our servers are located and our central database is operated.

The data protection laws in the United States may differ from those in your country. By using our Services or providing us with any information, you consent to this transfer, processing, and storage of your information in the United States.

If you are located in a jurisdiction with specific requirements for international data transfers, such as the European Economic Area (EEA), United Kingdom, or Switzerland, and you interact with our website, please be aware that we will handle such transfers in accordance with applicable law and implement appropriate safeguards.

We take steps to ensure that any international transfers of personal information are conducted in compliance with applicable law, including by entering into standard contractual clauses or relying on other recognized legal mechanisms where required.

12. Third-Party Websites and Links

Our website may contain links to third-party websites, including delivery partners, social media platforms, and promotional partners. These third-party sites have their own privacy policies and we are not responsible for their content, practices, or policies. We encourage you to review the privacy policies of any third-party sites you visit.

Our inclusion of a link to a third-party website does not constitute an endorsement of that website or its privacy practices. We have no control over how those websites collect, use, or share your information.

13. Do Not Track Signals

Some web browsers offer a "Do Not Track" (DNT) feature that signals to websites that you do not want your online activity tracked. Because there is currently no universally accepted standard for how to respond to DNT signals, our website does not alter its behavior in response to DNT signals at this time. However, you can still manage your privacy preferences using the cookie management tools and opt-out mechanisms described in Section 10 of this Policy.

We will continue to monitor developments in DNT standards and update our practices accordingly.

14. Social Media Features

Our website may include social media features, such as Facebook "Like" buttons, Instagram sharing options, and Twitter/X share buttons. These features may collect your IP address, track which page you are visiting on our site, and set a cookie to enable the feature to function properly.

Social media features and widgets are either hosted by a third party or hosted directly on our site. Your interactions with these features are governed by the privacy policy of the company providing them, not by this Privacy Policy. We encourage you to review the privacy policies of any social media platforms you use.

15. Email Communications and Text Messages

If you sign up for our mailing list, place an order, or otherwise provide us with your email address or phone number, we may send you:

• Transactional Messages: Order confirmations, receipts, delivery updates, and account notifications. These are essential to our service and cannot be opted out of while you have an active account.
• Marketing Messages: Promotional emails, newsletters, special offers, and loyalty program updates. You may opt out of these at any time by clicking the "Unsubscribe" link in any email or replying STOP to any text message.

We comply with the CAN-SPAM Act and the Telephone Consumer Protection Act (TCPA) in all our communications. We will not send you unsolicited commercial messages without your consent, and we will always include a clear opt-out mechanism in all marketing communications.

16. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. We will notify you of significant changes by:

• Posting the updated policy on our website at roundtable-cafe.rest with a new "Last Updated" date
• Sending a notification email to the email address associated with your account for material changes
• Displaying a prominent notice on our website

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our Services after the posting of changes constitutes your acceptance of such changes.

If we make material changes that affect how we handle personal information you have already provided to us, we will obtain your consent where required by law before implementing those changes.

17. Filing a Complaint

If you believe we have violated your privacy rights or have handled your personal information in a manner inconsistent with this Privacy Policy or applicable law, we encourage you to contact us first so we can attempt to resolve your concern directly.

17.1 Contact Us First

Please reach out to our Privacy Team at [email protected] with a detailed description of your concern. We will investigate and respond within 30 days.

17.2 Regulatory Complaints

If you are not satisfied with our response, you have the right to file a complaint with the appropriate regulatory authority:

• Federal Trade Commission (FTC): The FTC accepts consumer complaints related to privacy and data security. You may file a complaint online at reportfraud.ftc.gov or by calling 1-877-FTC-HELP (1-877-382-4357).
• California Residents: You may contact the California Privacy Protection Agency (CPPA) at cppa.ca.gov or the California Attorney General at oag.ca.gov/privacy.
• Other State Residents: You may contact your state Attorney General's office for guidance on filing a privacy complaint under your applicable state law.

We are committed to working cooperatively with regulatory authorities to resolve any privacy complaints that cannot be resolved directly with you.

18. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact our Privacy Team using the information below:

We aim to respond to all privacy-related inquiries within 10 business days. For formal privacy rights requests (such as data access, deletion, or correction), we will respond within the timeframes required by applicable law (typically 45 days for CCPA/CPRA requests).

When contacting us about a privacy matter, please provide:

• Your full name
• Your email address associated with your account (if applicable)
• A detailed description of your question or concern
• The specific right you wish to exercise (if submitting a formal privacy rights request)