Privacy Policy

Welcome to Giordano's. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website newgiordanos.click, place orders, sign up for our loyalty program, or otherwise interact with our services. Please read this policy carefully. If you disagree with the terms of this Privacy Policy, please discontinue use of our website and services immediately.

This Privacy Policy applies to all users located in the United States and is designed to comply with applicable federal and state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), and other applicable United States privacy regulations.

1. About Us

Giordano's is a food service company operating through the website newgiordanos.click. We offer online ordering, delivery, catering services, and related food services to customers throughout the United States.

For all privacy-related inquiries, please contact us at the email address listed above.

2. Information We Collect

We collect information about you in a variety of ways when you interact with our website and services. The categories of personal information we collect include:

2.1 Personal Identification Information

When you create an account, place an order, sign up for our newsletter, or contact us, we may collect the following personal identification information:

• Full name
• Email address
• Phone number
• Billing and shipping address (including street address, city, state, and ZIP code)
• Date of birth (when applicable, for age verification purposes)
• Username and password for your account
• Profile photo (if you choose to upload one)

2.2 Payment and Transaction Information

When you make a purchase through our website, we collect payment-related information necessary to process your transaction. This includes:

• Credit or debit card information (processed securely through our payment processors; we do not store full card numbers)
• Billing address associated with your payment method
• Order history, including items purchased, order dates, and amounts paid
• Refund and return records
• Gift card or promotional code usage

2.3 Usage Data and Technical Information

When you visit our website, our servers and analytics tools automatically collect certain technical information about your device and browsing activity, including:

• IP address
• Browser type and version
• Operating system and device type
• Pages visited on our website, including the order and duration of visits
• Referring URLs (the website that directed you to ours)
• Time zone settings and geographic location data derived from your IP address
• Search queries entered on our website
• Clickstream data and interactions with website elements
• Error logs and crash reports

2.4 Cookie and Tracking Data

We use cookies, web beacons, pixel tags, and similar tracking technologies to enhance your experience on our website, understand how visitors interact with our content, and deliver targeted advertising. For a full description of the cookies we use and how to manage your cookie preferences, please refer to Section 9 of this policy (Cookie Usage).

2.5 Communications Data

If you contact us via email, our contact form, or any other communication channel, we may retain records of those communications, including:

• The content of your messages
• Your contact information provided in the communication
• Date and time of contact
• Customer service records and notes

2.6 Social Media Information

If you choose to connect your social media accounts to our services or log in through a third-party social media platform, we may receive certain profile information from that platform, subject to your privacy settings on those platforms. This may include your name, email address, and profile picture.

2.7 Loyalty Program and Marketing Data

If you enroll in our loyalty or rewards program, we may collect additional information related to your participation, including points accumulated, rewards redeemed, and your preferences for communications and offers.

2.8 Information You Provide Voluntarily

You may also provide us with information when you participate in surveys, contests, or promotional activities, submit reviews or feedback, or otherwise choose to share information with us through our website or social media channels.

3. How We Use Your Information

We use the information we collect about you for a variety of legitimate business purposes, including:

3.1 Service Provision and Order Fulfillment

• Processing your food orders, payments, and deliveries
• Managing your account and providing customer support
• Sending order confirmations, receipts, and delivery status updates
• Facilitating refunds, exchanges, or dispute resolution
• Providing catering or event services you have requested

3.2 Website Operations and Improvement

• Maintaining the security and proper functioning of our website
• Diagnosing technical problems and fixing errors
• Analyzing usage patterns to improve website design and content
• Conducting A/B testing to optimize user experience
• Developing new features, products, and services

3.3 Marketing and Communications

• Sending promotional emails, newsletters, and special offers (with your consent where required)
• Delivering personalized content and recommendations based on your order history and preferences
• Running loyalty and rewards programs
• Retargeting advertising across third-party platforms and websites
• Conducting surveys to understand customer satisfaction

3.4 Analytics and Research

• Generating aggregate, anonymized reports about website traffic and user behavior
• Conducting market research and competitive analysis
• Measuring the effectiveness of our marketing campaigns
• Identifying trends in customer ordering behavior to optimize our menu and service offerings

3.5 Legal Compliance and Safety

• Complying with applicable federal and state laws and regulations
• Responding to lawful requests from government authorities or law enforcement
• Enforcing our Terms of Service and other agreements
• Preventing fraudulent transactions, abuse, or other illegal activity
• Protecting the rights, property, and safety of Giordano's, our customers, and the public

4. How We Share Your Information

We do not sell your personal information to third parties for their own independent marketing purposes. However, we may share your information in the following circumstances:

4.1 Service Providers and Business Partners

We engage trusted third-party service providers to perform functions on our behalf. These providers are granted access only to the information necessary to perform their specific services and are contractually obligated to maintain the confidentiality and security of your data. Our service providers include:

• Payment processors: To securely process credit card and other payment transactions
• Delivery partners: To fulfill delivery orders to your address
• Email and marketing platforms: To send promotional communications and newsletters
• Analytics providers: Such as Google Analytics, to help us understand website traffic and user behavior
• Cloud hosting and infrastructure providers: To host our website and store data securely
• Customer support tools: To manage customer inquiries and support tickets
• Fraud prevention services: To detect and prevent fraudulent transactions

4.2 Business Transfers

In the event that Giordano's undergoes a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of its assets, your personal information may be transferred as part of that transaction. We will notify you via email or a prominent notice on our website if such a transfer occurs, and we will inform you of any changes to this Privacy Policy that may result from such a transaction.

4.3 Legal Requirements and Law Enforcement

We may disclose your personal information if we are required to do so by law, or if we believe in good faith that such disclosure is necessary to:

• Comply with a legal obligation, subpoena, court order, or government request
• Investigate potential violations of our Terms of Service
• Protect the rights, property, or safety of Giordano's, our users, or others
• Prevent fraud, cybersecurity threats, or other illegal activities

4.4 With Your Consent

We may share your personal information with third parties in ways not described above when we have obtained your explicit consent to do so. You may withdraw your consent at any time by contacting us at [email protected].

4.5 Aggregated and Anonymized Data

We may share aggregated or de-identified information that cannot reasonably be used to identify you with third parties for research, marketing, analytics, or other purposes. This type of sharing does not constitute the sale of personal information.

5. Data Security

We take the security of your personal information very seriously and implement a range of technical, administrative, and physical safeguards designed to protect your data from unauthorized access, disclosure, alteration, or destruction.

5.1 Technical Security Measures

• Encryption: We use Secure Socket Layer (SSL) / Transport Layer Security (TLS) encryption to protect data transmitted between your browser and our servers.
• Secure data storage: Personal and payment data is stored in secure, access-controlled environments.
• Tokenization: Payment card information is tokenized through our payment processor; we do not store full payment card numbers on our servers.
• Firewalls and intrusion detection: We deploy firewalls and monitoring systems to detect and prevent unauthorized access.
• Regular security audits: We conduct periodic reviews of our security practices and systems.

5.2 Administrative Security Measures

• Access to personal information is restricted to employees and contractors who need it to perform their job functions.
• All staff with access to personal data are trained on data privacy and security best practices.
• We require service providers to implement appropriate security measures when handling your data.

5.3 Limitations

While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security of your data. If you have reason to believe that your interaction with us is no longer secure, please notify us immediately at [email protected].

6. Your Privacy Rights

Depending on your state of residence, you may have certain rights with respect to your personal information. We are committed to honoring these rights in accordance with applicable law.

6.1 Rights Under the California Consumer Privacy Act (CCPA/CPRA)

If you are a California resident, you have the following rights under the CCPA, as amended by the CPRA:

• Right to Know: You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you, the categories of sources from which it was collected, the business purposes for collection, and the categories of third parties with whom we share it.
• Right to Delete: You have the right to request deletion of personal information we have collected about you, subject to certain exceptions (e.g., where retention is necessary to complete a transaction, comply with a legal obligation, or detect fraud).
• Right to Correct: You have the right to request correction of inaccurate personal information we maintain about you.
• Right to Opt-Out of Sale or Sharing: You have the right to opt out of the sale or sharing of your personal information. While we do not sell personal information in the traditional sense, if any of our advertising practices qualify as a "sale" or "sharing" under the CPRA, you may opt out by using the "Do Not Sell or Share My Personal Information" link on our website or by contacting us directly.
• Right to Limit Use of Sensitive Personal Information: Under the CPRA, you have the right to limit the use and disclosure of sensitive personal information to purposes reasonably necessary to provide the services you requested.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you goods or services, charge you different prices, or provide a different quality of service because you exercised your rights.

6.2 General Privacy Rights for All Users

Regardless of your state of residence, we provide all users with the following options:

• Access and Review: You may log into your account at any time to view and update your personal information.
• Correction: You may correct inaccuracies in your profile by updating your account settings or contacting us.
• Deletion: You may request deletion of your account and associated personal data by contacting us at [email protected].
• Opt-Out of Marketing: You may opt out of receiving promotional emails at any time by clicking the "unsubscribe" link in any marketing email or by contacting us directly.
• Data Portability: Upon request, we will provide you with a copy of your personal information in a commonly used, machine-readable format where technically feasible.

6.3 How to Submit a Privacy Rights Request

To exercise any of the rights described above, please contact us using one of the following methods:

• Email: [email protected] — Please include "Privacy Rights Request" in the subject line.

We will respond to verifiable consumer requests within 45 days of receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing. We may need to verify your identity before processing your request. We will not charge a fee for responding to your request unless it is excessive, repetitive, or manifestly unfounded.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The criteria we use to determine retention periods include:

• Account information: Retained for as long as your account remains active, plus a reasonable period thereafter to facilitate account reactivation or resolve disputes.
• Order and transaction records: Retained for a minimum of 7 years in accordance with applicable tax and financial record-keeping requirements under federal and state law.
• Marketing data: Retained until you opt out of marketing communications or request deletion, whichever occurs first.
• Customer communications: Retained for up to 3 years from the date of the communication to facilitate ongoing customer support and dispute resolution.
• Usage and analytics data: Typically retained in aggregate or anonymized form indefinitely; identifiable usage data retained for up to 2 years.
• Legal hold data: If your data becomes subject to a legal investigation, litigation, or regulatory inquiry, we may retain it for the duration of such proceedings plus any applicable statute of limitations period.

When your personal information is no longer needed, we will securely delete or anonymize it. If deletion is not immediately possible (for example, because data is stored in backup archives), we will securely store your data and isolate it from further processing until deletion is feasible.

8. Children's Privacy

Giordano's does not knowingly collect, solicit, or use personal information from individuals under the age of 18. Our website and services are not directed toward children. If you are a parent or guardian and believe that your child under the age of 18 has provided us with personal information without your consent, please contact us immediately at [email protected].

Upon receiving such a notification, we will take prompt steps to delete the child's personal information from our systems. We do not knowingly allow minors to create accounts, place orders, or sign up for marketing communications. If we discover that we have inadvertently collected personal information from a person under 18, we will delete that information as quickly as possible.

This policy is consistent with the Children's Online Privacy Protection Act (COPPA), which prohibits the collection of personal information from children under 13 without verified parental consent. We go beyond the minimum COPPA requirements by setting our minimum age at 18, consistent with our service terms.

9. Cookie Usage

We use cookies and similar tracking technologies on our website to improve your browsing experience, analyze website traffic, and deliver personalized content and advertising.

9.1 Types of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for the operation of our website. They enable core functionality such as shopping cart management, user authentication, and security features. You cannot opt out of these cookies.
• Performance and Analytics Cookies: These cookies collect information about how visitors use our website, such as which pages are visited most often and whether any error messages are received. This data is used to improve the performance and usability of our site. Examples include Google Analytics cookies.
• Functionality Cookies: These cookies allow our website to remember your preferences and choices (such as your location or language) to provide a more personalized experience.
• Targeting and Advertising Cookies: These cookies are used to deliver advertisements that are relevant to you and your interests. They also limit the number of times you see an advertisement and help measure the effectiveness of advertising campaigns.

9.2 Managing Your Cookie Preferences

You can control and manage cookies in several ways. Most browsers allow you to refuse or accept cookies, delete existing cookies, and set preferences for certain websites. Please note that if you choose to disable certain cookies, some features of our website may not function properly.

To opt out of interest-based advertising through participating third-party advertisers, you may visit:

• Network Advertising Initiative (NAI) Opt-Out
• Digital Advertising Alliance (DAA) Opt-Out

For more detailed information about the specific cookies we use and how to manage them, please refer to our full Cookie Policy available on our website.

10. International Data Transfers

Giordano's is a United States-based company and our primary data processing activities occur within the United States. However, some of our service providers and technology partners may process data in other countries. If you are accessing our website from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country of residence.

By using our website and services, you acknowledge and consent to the transfer of your information to the United States and to our service providers located in other countries. We take steps to ensure that any international transfers of personal data are conducted in accordance with applicable law, including, where applicable, implementing standard contractual clauses or other appropriate safeguards.

If you have questions about international data transfers, please contact us at [email protected].

11. Third-Party Websites and Links

Our website may contain links to third-party websites, applications, or services that are not operated by us. When you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the privacy policy of every site you visit, as we have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party websites or services.

Our website may also integrate with third-party platforms such as social media sites. If you interact with these features, the respective third-party companies may collect information about you in accordance with their own privacy policies. This Privacy Policy does not govern the data collection practices of third parties.

12. Do Not Track Signals

Some browsers have a "Do Not Track" (DNT) feature that sends a signal to websites requesting that your browsing activity not be tracked. At this time, our website does not respond to DNT signals, as there is no uniform industry standard for how companies should respond to such signals. We will continue to monitor developments in this area and update our practices as appropriate.

However, you may opt out of certain types of tracking through your cookie settings, as described in Section 9 of this policy. California residents also have rights related to "Do Not Sell or Share My Personal Information" under the CPRA, described in Section 6.

13. Your Choices and Opt-Out Options

We respect your right to control how your personal information is used for marketing and communications purposes. You have the following opt-out options:

13.1 Email Marketing

You may unsubscribe from our promotional email communications at any time by clicking the "Unsubscribe" link found at the bottom of every marketing email, or by sending an email to [email protected] with the subject line "Unsubscribe." Please note that even after opting out of marketing emails, you will continue to receive transactional emails related to your orders and account (e.g., order confirmations, delivery notifications, password resets).

13.2 Text Message Marketing

If you have opted in to receive text message marketing from us, you may opt out at any time by replying "STOP" to any marketing text message you receive from us. Standard message and data rates may apply.

13.3 Targeted Advertising

You can opt out of receiving targeted advertising based on your online behavior by adjusting your cookie preferences on our website or by visiting the opt-out tools described in Section 9.2.

14. How to File a Complaint

If you believe that we have violated your privacy rights or failed to comply with applicable privacy law, we encourage you to first contact us directly so that we may attempt to resolve your concern.

14.1 Contact Us First

Please send a detailed description of your complaint to:

• Email: [email protected]

We will acknowledge receipt of your complaint promptly and work to resolve it within a reasonable timeframe.

14.2 Complaint to the Federal Trade Commission (FTC)

If you believe your privacy rights have been violated and you are not satisfied with our response, you may file a complaint with the Federal Trade Commission (FTC), which enforces consumer protection laws in the United States, including privacy-related matters:

• Website: ftc.gov/complaint
• Phone: 1-877-FTC-HELP (1-877-382-4357)
• Mailing Address: Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, DC 20580

14.3 California Residents — California Privacy Protection Agency (CPPA)

If you are a California resident and believe your CCPA/CPRA rights have been violated, you may file a complaint with the California Privacy Protection Agency (CPPA):

• Website: cppa.ca.gov
• Email: [email protected]

You may also contact the California Attorney General's Office at oag.ca.gov/privacy.

15. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes to this policy, we will notify you by:

• Posting the revised Privacy Policy on our website at newgiordanos.click with an updated "Last Updated" date
• Sending a notification to the email address associated with your account (for material changes)
• Displaying a prominent notice on our website homepage

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our website and services after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact us. We are committed to addressing your inquiries promptly and transparently.

When contacting us regarding a privacy matter, please provide your full name, email address, a description of your request or concern, and, if applicable, the specific right you wish to exercise. This will help us verify your identity and process your request more efficiently.