Privacy Policy

Welcome to Imos ("we," "us," "our," or "the Company"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website imos-pizzza.click, place orders, or otherwise interact with our food services (collectively, the "Services"). Please read this policy carefully. If you disagree with its terms, please discontinue use of our Services.

This Privacy Policy is governed by applicable United States federal and state privacy laws, including but not limited to the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), and other relevant consumer protection statutes. By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

1. About Us

Imos is a food service business operating in the United States. We provide customers with the ability to browse our menu, place food orders, make payments, and engage with our brand through our website and related digital channels.

2. Information We Collect

We collect various types of information in connection with the Services we provide. The categories of information we collect are described below.

2.1 Personal Information You Provide to Us

When you interact with our website, register for an account, place a food order, subscribe to our newsletter, contact us for support, or otherwise communicate with us, you may voluntarily provide us with personal information, including:

• Identity Information: First name, last name, username, or similar identifier.
• Contact Information: Email address, telephone number, billing address, and delivery address.
• Account Credentials: Password or similar security information used to access your account.
• Payment Information: Credit or debit card details, bank account information, or other financial data necessary to process your orders. Please note that payment information is processed by our third-party payment processors and is not stored directly on our servers.
• Order Details: Information about the food items you order, dietary preferences, special instructions, and order history.
• Communications Data: Information you provide when you contact us through email, contact forms, or customer support channels, including records and copies of your correspondence.
• Marketing Preferences: Your preferences regarding receiving marketing communications from us and our third-party partners.
• Feedback and Reviews: Ratings, reviews, survey responses, or other feedback you submit about our food products and services.

2.2 Information We Collect Automatically

When you visit our website or use our Services, we may automatically collect certain technical and usage data, including:

• Device Information: IP address, browser type and version, operating system, device type, screen resolution, and hardware configuration.
• Usage Data: Pages you visit on our website, time spent on each page, links clicked, referring URLs, search terms used, and the date and time of your visits.
• Location Data: General geographic location derived from your IP address, or, if you grant permission, precise GPS location to facilitate local food delivery services.
• Transaction Data: Details about payments to and from you, and details about products and services you have purchased from us.
• Log Data: Server logs that record your interactions with our website, error logs, and system activity.
• Cookie and Tracking Data: Information gathered through cookies, web beacons, pixel tags, and similar tracking technologies. Please refer to Section 8 of this Policy for more information about our use of cookies.

2.3 Information from Third-Party Sources

We may receive information about you from third-party sources and combine it with information we already hold about you. These third-party sources may include:

• Analytics Providers: Companies such as Google Analytics that help us understand how users interact with our website.
• Advertising Partners: Third-party advertising networks and social media platforms that provide us with data about your engagement with our advertisements.
• Payment Processors: Financial institutions and payment processing companies that facilitate your transactions with us.
• Delivery Partners: Third-party delivery services that assist in fulfilling your food orders and may share relevant fulfillment data with us.
• Social Media Platforms: If you choose to link your social media account with our Services or log in through a social media account, we may receive certain information from those platforms based on your privacy settings on those platforms.

2.4 Sensitive Personal Information

In some circumstances, we may collect information that may be considered sensitive under applicable law, such as payment card information or precise geolocation data. We collect such information only to the extent necessary to provide our Services and do not use sensitive personal information for purposes beyond those permitted by law, including for the purpose of inferring characteristics about consumers.

3. How We Use Your Information

We use the information we collect for a variety of purposes in connection with operating our food business, improving our Services, and complying with our legal obligations. Specifically, we use your information to:

3.1 Service Provision and Order Fulfillment

• Process and fulfill your food orders, including coordinating with delivery partners to ensure timely delivery to your specified address.
• Create and manage your account, including verifying your identity and maintaining the security of your account.
• Process payments and issue refunds where applicable.
• Communicate with you about your orders, including sending order confirmations, receipts, and delivery updates via email or SMS.
• Respond to your inquiries, requests, and customer service needs.
• Administer loyalty programs, promotional offers, or discount schemes you have enrolled in.

3.2 Analytics and Service Improvement

• Analyze usage patterns and trends to understand how our customers interact with our website and Services.
• Monitor and evaluate the performance, reliability, and security of our website and systems.
• Conduct internal research and data analysis to improve our food offerings, menu, pricing, and overall customer experience.
• Develop new products, features, and services based on customer behavior and feedback.
• Perform quality assurance testing and troubleshoot technical issues.

3.3 Marketing and Communications

• Send you promotional emails, newsletters, special offers, and other marketing communications about our food products and services, where you have opted in or where we have a legitimate interest to do so under applicable law.
• Personalize the content, recommendations, and advertisements you see on our website and on third-party platforms based on your preferences and past interactions.
• Administer contests, sweepstakes, promotions, and surveys in which you may participate.
• Retarget you with relevant advertisements on third-party websites and social media platforms based on your browsing behavior.

3.4 Legal Compliance and Safety

• Comply with applicable federal and state laws, regulations, and legal processes, including obligations under the FTC Act and applicable state consumer protection laws.
• Respond to lawful requests from governmental authorities, law enforcement agencies, and courts of competent jurisdiction.
• Detect, investigate, and prevent fraudulent transactions, unauthorized access, and other illegal activities that may compromise our Services or harm our customers.
• Enforce our Terms of Service and other agreements with you.
• Protect the rights, property, and safety of our Company, our customers, and the general public.

3.5 Business Operations

• Manage our day-to-day business operations, including accounting, auditing, and administrative purposes.
• Carry out our obligations arising from contracts entered into between you and us.
• Evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets.

4. Sharing Your Information with Third Parties

We do not sell your personal information to third parties for monetary consideration. However, we may share your information with certain trusted third parties in the following circumstances:

4.1 Service Providers and Business Partners

We engage third-party companies and individuals to perform services on our behalf, including but not limited to:

• Payment Processors: To securely process your payment transactions.
• Delivery Partners: To facilitate the delivery of food orders to your specified location.
• Cloud Hosting Providers: To store and manage our data and systems infrastructure.
• Email and Communication Service Providers: To send transactional and marketing communications.
• Analytics Providers: To help us understand website traffic, user behavior, and service performance.
• Customer Support Platforms: To manage and respond to customer inquiries and support tickets.
• Marketing and Advertising Agencies: To assist with our marketing campaigns and promotional activities.

These third-party service providers are contractually obligated to handle your information securely, to use it only for the purposes we specify, and in compliance with applicable privacy laws.

4.2 Legal Requirements and Law Enforcement

We may disclose your personal information when we believe in good faith that disclosure is necessary to:

• Comply with a legal obligation, court order, subpoena, or other legal process.
• Respond to requests from government or regulatory authorities, including law enforcement agencies.
• Protect the rights, property, or safety of Imos, our customers, or others.
• Investigate potential violations of our Terms of Service or applicable laws.

4.3 Business Transfers

In the event that Imos undergoes a merger, acquisition, sale of assets, bankruptcy, reorganization, or similar corporate transaction, your personal information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website before your personal information is transferred and becomes subject to a different privacy policy.

4.4 Aggregated and De-Identified Data

We may share aggregated or de-identified information that cannot reasonably be used to identify you with third parties for research, marketing, analytics, and other purposes. Such information does not constitute personal information under applicable law.

4.5 With Your Consent

We may share your personal information with other third parties where you have provided your explicit consent for us to do so.

5. Data Security

We take the security of your personal information very seriously. We have implemented a range of technical, administrative, and physical security measures designed to protect your personal information from unauthorized access, disclosure, alteration, loss, misuse, or destruction.

5.1 Technical Safeguards

• Encryption of data in transit using Transport Layer Security (TLS/SSL) protocols.
• Encryption of sensitive data at rest using industry-standard encryption algorithms.
• Firewalls, intrusion detection systems, and network monitoring to detect and prevent unauthorized access.
• Secure access controls, including multi-factor authentication for administrative access to our systems.
• Regular security vulnerability assessments and penetration testing.

5.2 Administrative Safeguards

• Limiting access to personal information to employees, contractors, and agents who need it to perform their job functions.
• Providing privacy and security training to our personnel who handle personal information.
• Implementing internal data governance policies and procedures.
• Regularly reviewing and updating our security practices to address emerging threats.

5.3 Limitations

While we strive to use commercially reasonable means to protect your personal information, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee the absolute security of your information. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and relevant authorities as required by applicable law, including applicable state data breach notification statutes in the United States.

You are responsible for keeping your account credentials confidential. We encourage you to use a strong, unique password for your account and to notify us immediately if you suspect any unauthorized use of your account.

6. Your Privacy Rights

Depending on your state of residence within the United States, you may have certain rights regarding your personal information. We respect and honor these rights as required by applicable law.

6.1 Rights Under California Law (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Know: You have the right to request that we disclose what personal information we have collected about you, the categories of sources from which it was collected, the business purposes for collecting it, and the categories of third parties with whom we share it.
• Right to Access: You have the right to request a copy of the specific personal information we have collected about you in a readily usable format.
• Right to Deletion: You have the right to request that we delete the personal information we have collected about you, subject to certain exceptions permitted by law (such as information needed to complete transactions or comply with legal obligations).
• Right to Correction: You have the right to request that we correct inaccurate personal information that we maintain about you.
• Right to Opt Out of Sale or Sharing: You have the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising. We will honor opt-out preference signals such as the Global Privacy Control (GPC) where applicable.
• Right to Limit Use of Sensitive Personal Information: You have the right to limit our use and disclosure of your sensitive personal information to purposes permitted by the CPRA.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you goods or services, charge different prices, or provide a different quality of service because you exercised your privacy rights.

6.2 Rights Available to All US Residents

Regardless of your state of residence, we offer the following rights to all users of our Services:

• Right to Access: You may request access to the personal information we hold about you and receive a copy of that information.
• Right to Correction: You may request that we correct or update inaccurate or incomplete personal information we hold about you.
• Right to Deletion: You may request that we delete your personal information from our records, subject to legal and contractual obligations.
• Right to Data Portability: Where technically feasible, you may request that we provide your personal information in a structured, commonly used, and machine-readable format.
• Right to Withdraw Consent: Where we rely on your consent as the legal basis for processing your information, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing conducted prior to the withdrawal.
• Right to Opt Out of Marketing: You may opt out of receiving marketing communications from us at any time by clicking the "unsubscribe" link in our emails or by contacting us directly at [email protected].

6.3 How to Exercise Your Rights

To exercise any of the rights described in this section, please submit a verifiable consumer request to us by:

• Emailing us at: [email protected]
• Visiting our website at: imos-pizzza.click

We will verify your identity before processing your request to protect your information from unauthorized disclosure. We will respond to your verifiable consumer request within the time period required by applicable law (generally 45 days, with a possible extension of an additional 45 days where reasonably necessary). We will not charge a fee for processing your request unless it is excessive, repetitive, or manifestly unfounded.

You may designate an authorized agent to submit requests on your behalf. If you use an authorized agent, we may require proof of the agent's authorization and verification of your own identity.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The criteria we use to determine our retention periods include:

• Account Information: We retain account information for as long as your account is active. If you close your account, we will retain certain information for a reasonable period (typically up to 3 years) to resolve disputes, enforce agreements, and comply with legal obligations.
• Order Data: We retain records of your food orders for a minimum of 5 years for accounting, tax compliance, and legal purposes.
• Payment Records: Payment transaction records are retained as required by applicable financial regulations and tax laws, generally for a minimum of 7 years.
• Marketing Data: We retain your marketing preferences and communication history until you opt out or request deletion, after which we may retain a suppression record to honor your preferences.
• Usage and Technical Data: Log files and technical data are typically retained for up to 24 months for security monitoring and analytical purposes.
• Support Communications: Customer support records are retained for up to 3 years from the date of the interaction.
• Legal Claims: Where personal information is relevant to an ongoing or potential legal claim, dispute, or regulatory investigation, we may retain such information until the matter is resolved.

After the applicable retention period expires, we will securely delete or anonymize your personal information in accordance with our data disposal procedures.

8. Cookie Policy Overview

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and personalize content and advertisements. This section provides a brief overview of our use of cookies.

8.1 What Are Cookies?

Cookies are small text files that are placed on your device (computer, smartphone, or tablet) when you visit a website. They help websites recognize your device and remember information about your visit, such as your preferences and settings.

8.2 Types of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for the operation of our website and cannot be disabled in our systems. They are required to enable core functionality such as processing your food orders, maintaining your shopping cart, and managing your account session.
• Performance and Analytics Cookies: These cookies collect information about how visitors use our website, including which pages are most frequently visited and how users navigate between pages. We use this information to improve our website's performance and user experience.
• Functionality Cookies: These cookies allow our website to remember choices you make (such as your preferred delivery address or language) and provide enhanced, personalized features.
• Targeting and Advertising Cookies: These cookies are used to deliver advertisements that are more relevant to you and your interests. They may also be used to limit the number of times you see an advertisement and to measure the effectiveness of advertising campaigns.

8.3 Managing Your Cookie Preferences

You can control and manage cookies in several ways. Most web browsers allow you to refuse cookies or to alert you when cookies are being sent. However, please note that disabling certain cookies may affect the functionality of our website and your ability to place food orders.

For more detailed information about the specific cookies we use, their purposes, duration, and how to opt out, please refer to our full Cookie Policy, which is available on our website at imos-pizzza.click.

9. Children's Privacy

Our Services are intended for use by individuals who are 18 years of age or older. We do not knowingly collect, solicit, or process personal information from children under the age of 13, or in some jurisdictions, under the age of 16.

Our website and Services are not directed to minors, and we do not intentionally market our food products or Services to individuals under the age of 18. If you are under 18 years of age, please do not use our Services or provide any personal information to us.

If we become aware that we have inadvertently collected personal information from a child under the applicable age threshold without verifiable parental consent, we will take immediate steps to delete that information from our records. If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at [email protected], and we will take appropriate action.

We comply with the Children's Online Privacy Protection Act (COPPA) and take all necessary measures to ensure that our data practices with respect to children are lawful and protective.

10. International Data Transfers

Imos is based in the United States, and the information we collect is primarily stored and processed in the United States. If you are accessing our Services from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country of residence.

In some circumstances, we may transfer data to third-party service providers who operate in other countries. Where such transfers occur, we take steps to ensure that your personal information receives an adequate level of protection and that appropriate safeguards are in place, consistent with applicable law.

By using our Services and providing us with your personal information, you consent to the transfer, processing, and storage of your information in the United States and in such other countries as described in this Privacy Policy. If you have questions about our international data transfer practices, please contact us at [email protected].

11. Third-Party Websites and Links

Our website may contain links to third-party websites, applications, or services that are not operated or controlled by Imos. This Privacy Policy does not apply to those third-party websites, and we are not responsible for the privacy practices of such third parties. We encourage you to review the privacy policies of any third-party websites you visit.

We are also not responsible for the privacy practices of third-party delivery partners, payment processors, or social media platforms, even where our website links to or integrates with their services. Your interactions with those parties are governed by their respective privacy policies.

12. Do Not Track Signals

Some web browsers offer a "Do Not Track" (DNT) feature that signals to websites that you do not want to have your online activity tracked. At this time, there is no universally accepted standard for how companies should respond to DNT signals, and our website does not currently respond to DNT signals from web browsers. However, we honor the Global Privacy Control (GPC) opt-out preference signal where required by applicable law, including for California residents under the CPRA.

We will continue to monitor developments regarding DNT standards and will update this Privacy Policy if our practices change.

13. Your California Privacy Rights — "Shine the Light" Law

California Civil Code Section 1798.83, also known as the "Shine the Light" law, permits California residents to request and obtain from us, once per calendar year, information about categories of personal information (if any) we disclosed to third parties for their direct marketing purposes during the preceding calendar year, and the names and addresses of those third parties.

If you are a California resident and would like to make such a request, please submit your request in writing to us using the contact information provided in Section 15 of this Privacy Policy. Please allow up to 30 days for us to respond to your request.

14. How to File a Complaint with a Data Protection Authority

We are committed to resolving any privacy concerns you may have directly with you. If you have a concern or complaint about our privacy practices, we encourage you to contact us first so that we can work to resolve the matter promptly.

However, if you believe that we have not adequately addressed your concern, you may have the right to file a complaint with the relevant regulatory or governmental authority. In the United States, the following bodies may be relevant:

14.1 Federal Trade Commission (FTC)

The Federal Trade Commission is the primary federal agency responsible for consumer protection and enforcement of privacy-related practices under the FTC Act. You may file a complaint with the FTC at:

• Website: www.ftc.gov/complaint
• Phone: 1-877-FTC-HELP (1-877-382-4357)
• Address: Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, DC 20580

14.2 California Privacy Protection Agency (CPPA)

California residents may also file complaints with the California Privacy Protection Agency (CPPA), which is responsible for enforcing the CCPA/CPRA:

• Website: cppa.ca.gov
• Address: California Privacy Protection Agency, 2101 Arena Blvd., Sacramento, CA 95834

14.3 State Attorneys General

Many states have consumer protection offices or attorneys general who handle privacy-related complaints. You may contact the Attorney General's office in your state to inquire about your rights and how to file a complaint.

We encourage you to contact us first at [email protected] before lodging a formal complaint, as we are committed to working collaboratively with our customers to resolve any privacy concerns.

15. Contact Information for Privacy Inquiries

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please do not hesitate to contact us. We are committed to addressing your inquiries promptly and transparently.

When contacting us regarding a privacy matter, please provide your name, email address, and a clear description of your inquiry or request so that we can assist you efficiently. We will respond to your inquiry within the timeframe required by applicable law and, in any event, within 30 business days of receipt.

16. Changes to This Privacy Policy

We reserve the right to update, amend, or modify this Privacy Policy at any time in response to changes in applicable law, our business practices, or our data processing activities. Any changes we make will be posted on this page with an updated effective date at the top of the policy.

If we make material changes to this Privacy Policy that may significantly affect your privacy rights or the way we handle your personal information, we will provide you with prominent notice, such as by sending you an email notification to the email address associated with your account or by displaying a prominent notice on our website prior to the changes becoming effective.

Your continued use of our Services after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information.

17. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of the United States and the state in which our business operates. Any disputes arising from or relating to this Privacy Policy shall be subject to the jurisdiction of the courts in the applicable state, in addition to any applicable federal courts. Our privacy practices are designed to comply with applicable United States federal and state privacy laws, including the FTC Act, CCPA/CPRA, COPPA, and other relevant regulations.