Privacy Policy

1. Introduction

At Lou Malnati's, we are deeply committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, store, and protect your data when you visit our website, order food, dine at our restaurants, or use our services.

This policy covers all interactions with Lou Malnati's, including online ordering, in-restaurant dining, catering services, delivery, and marketing communications. By using our services, you agree to the terms outlined in this Privacy Policy.

2. Information We Collect

2.1 Information You Provide Directly

• Personal Identification: Name, email address, phone number, billing and delivery addresses
• Account Information: Username, password, order history, and account preferences
• Payment Information: Credit card details, billing information (stored securely and encrypted)
• Order Details: Food preferences, dietary restrictions, special instructions, allergen information
• Dietary Preferences: Vegan, vegetarian, halal, kosher, gluten-free requirements
• Allergen Information: Food allergies and sensitivities for safe food preparation
• Loyalty Program Data: Rewards points, membership status, favorite orders
• Reservation Information: Table booking details, party size, special occasions
• Catering Requests: Event details, guest count, menu preferences, delivery information
• Contact Forms: Customer service inquiries, feedback, reviews, and suggestions
• Marketing Preferences: Communication preferences and consent for promotional emails

2.2 Information Collected Automatically

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Data: Pages visited, time spent on site, click patterns, search terms
• Location Data: Approximate location from IP address for delivery services
• Cookie Data: Session identifiers, user preferences, analytics information
• Performance Data: Site loading times, error reports, technical diagnostics

2.3 Information from Third Parties

• Social Media: Profile information if you connect social media accounts
• Payment Processors: Transaction confirmations and fraud prevention data
• Delivery Partners: Delivery status updates and location tracking
• Marketing Partners: Campaign performance and audience insights
• Review Platforms: Customer reviews and ratings from third-party sites

3. How We Use Your Information

3.1 Service Provision

• Order Processing: Taking, preparing, and delivering your food orders
• Account Management: Creating and maintaining your customer account
• Payment Processing: Securely handling transactions and billing
• Customer Support: Responding to inquiries and resolving issues
• Quality Assurance: Monitoring service quality and food safety
• Personalization: Customizing your experience based on preferences

3.2 Communication

• Order Confirmations: Confirming orders and providing updates
• Delivery Notifications: Real-time delivery tracking and arrival alerts
• Customer Support: Responding to questions and feedback
• Important Notices: Policy changes, security alerts, service updates
• Marketing Communications: Promotional offers (only with your consent)

3.3 Marketing and Analytics

• Personalized Advertising: Showing relevant promotions and menu items
• Performance Analysis: Understanding website usage and customer behavior
• Campaign Measurement: Evaluating marketing effectiveness
• Menu Development: Using preferences to create new offerings
• Market Research: Understanding customer needs and trends

3.4 Legal Compliance and Safety

• Legal Requirements: Complying with applicable laws and regulations
• Fraud Prevention: Detecting and preventing fraudulent activities
• Food Safety: Managing allergen information and dietary restrictions
• Dispute Resolution: Handling customer complaints and legal matters
• Safety Protection: Protecting customers, employees, and property

4. Information Sharing and Disclosure

4.1 Service Providers

• Payment Processors: Secure transaction processing (Stripe, PayPal)
• Delivery Services: Third-party delivery companies for order fulfillment
• Cloud Storage: Secure data hosting and backup services (AWS, Google Cloud)
• Email Services: Marketing and transactional email platforms
• Analytics Tools: Website performance and user behavior analysis
• Customer Support: Help desk and communication platforms

4.2 Legal Requirements

• Court Orders: When required by valid legal process
• Law Enforcement: To assist in criminal investigations
• Regulatory Compliance: Health department inspections and requirements
• Emergency Situations: To protect health, safety, or prevent harm

4.3 Business Transfers

• Mergers and Acquisitions: In case of business sale or merger
• Asset Sales: Transfer of business assets including customer data
• Customer Notification: We will inform you before any transfer
• Policy Compliance: New owners must honor existing privacy commitments

4.4 With Your Consent

We may share information for other purposes only with your explicit consent, such as:

• Marketing partnerships you specifically approve
• Social media integration you authorize
• Third-party services you request

5. Data Security

5.1 Technical Security Measures

• SSL/TLS Encryption: All data transmission is encrypted using industry-standard protocols
• Advanced Firewalls: Multi-layer network security to prevent unauthorized access
• Access Controls: Strict employee access based on job requirements only
• 24/7 Monitoring: Continuous security surveillance and threat detection
• Secure Backups: Regular encrypted backups with secure off-site storage
• Penetration Testing: Regular security assessments by external experts
• Database Encryption: Customer data encrypted at rest and in transit

5.2 Organizational Security Measures

• Employee Training: Regular security awareness and data protection training
• Security Policies: Comprehensive data handling and protection procedures
• Confidentiality Agreements: All staff and contractors sign strict NDAs
• Incident Response: Detailed plan for handling security breaches
• Regular Audits: Quarterly security assessments and compliance reviews
• Vendor Management: Security requirements for all third-party partners

5.3 Your Security Responsibilities

• Strong Passwords: Use unique, complex passwords for your account
• Password Protection: Never share your login credentials
• Secure Logout: Always log out when using public computers
• Phishing Awareness: Be cautious of suspicious emails or links
• Report Issues: Immediately report any unauthorized access
• Software Updates: Keep your devices and browsers updated

6. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience, analyze usage, and provide personalized services. Below is a detailed breakdown of our cookie usage:

Tracking Technologies Used

• Google Analytics: Website traffic analysis and user behavior insights
• Facebook Pixel: Social media advertising measurement and optimization
• Web Beacons: Email open rates and engagement tracking
• Local Storage: Browser-based data storage for improved functionality
• Session Storage: Temporary data storage during your visit

Cookie Management

You can control cookies through your browser settings. Options include:

• Accept all cookies
• Reject all cookies
• Delete existing cookies
• Receive notifications before cookies are stored

Note: Disabling certain cookies may affect website functionality, including your ability to place orders or access account features.

7. Your Privacy Rights (GDPR/CCPA Compliance)

We respect your privacy rights and provide the following options to control your personal data:

7.1 Right of Access

You have the right to request and receive a copy of all personal data we hold about you, including order history, account information, and communication records.

7.2 Right to Rectification

You can request correction of any inaccurate or incomplete personal data, including updating contact information, preferences, and account details.

7.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal data, subject to legal retention requirements for tax, accounting, and food safety purposes.

7.4 Right to Restrict Processing

You can request limitation of how we process your data while maintaining your account for essential services.

7.5 Right to Data Portability

You have the right to receive your personal data in a structured, machine-readable format for transfer to another service provider.

7.6 Right to Object

You may object to processing of your data for marketing purposes, analytics, or other non-essential activities.

7.7 Right Against Automated Decision-Making

You have the right to request human review of any automated decisions that significantly affect you.

8. Children's Privacy

Protecting children's privacy is extremely important to us. Our services are not intended for children under the age of 16, and we do not knowingly collect personal information from minors.

• Age Verification: We require users to confirm they are 16 or older when creating accounts
• No Intentional Collection: We do not deliberately gather data from children under 16
• Parental Rights: Parents may contact us if they believe we have collected their child's information
• Immediate Deletion: We will promptly delete any child's data we discover in our systems
• Educational Content: Any child-friendly content is general information only

9. International Data Transfers

As part of our operations, we may transfer your personal data to countries outside your home country. We ensure all transfers are protected by appropriate safeguards.

9.1 Protection Measures

• Adequacy Decisions: We transfer data to countries with equivalent protection standards
• Standard Contractual Clauses (SCC): EU-approved contract terms for data protection
• Data Processing Agreements: Binding contracts with all international partners
• Security Standards: Same level of protection regardless of location
• Regular Audits: Ongoing compliance monitoring in all jurisdictions

9.2 Transfer Destinations

• United States: Cloud storage and data processing services
• European Union: Analytics and customer support services
• Other Countries: Only with adequate protection measures in place

10. Data Retention Periods

We retain your personal data only as long as necessary for the purposes outlined in this policy and as required by law.

Safe Data Disposal

• Complete Electronic Deletion: Secure, unrecoverable deletion of digital records
• Physical Record Destruction: Secure shredding of paper documents
• Backup Data Removal: Deletion from all backup systems
• Disposal Documentation: Records of all data destruction activities
• Third-Party Certification: Verified destruction by certified vendors

11. Third-Party Links and Services

Our website may contain links to external websites, social media platforms, and third-party services that are not operated by Lou Malnati's. This Privacy Policy does not cover these external services.

• External Links: Links to partner websites, supplier information, or related services
• Social Media: Facebook, Instagram, Twitter, and other social platforms
• Review Sites: Yelp, Google Reviews, TripAdvisor, and similar platforms
• Payment Processors: External payment gateways with their own policies
• Delivery Partners: Third-party delivery services with separate privacy practices

When you interact with these third-party services, you are subject to their terms and privacy policies. We recommend reviewing these policies to understand how your information will be handled.

12. Policy Changes and Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations.

12.1 Change Notification Methods

• Website Notice: Prominent banner on our homepage announcing changes
• Email Notification: Direct notification to all registered users
• Account Alert: In-app notification when you log in
• Social Media: Announcements on our official social channels

12.2 Checking for Changes

• Latest Version: Always available on our website
• Last Updated Date: Check the date at the top of this policy
• Continued Use: Ongoing use of our services indicates acceptance
• Opt-Out Option: You may stop using our services if you disagree

For significant changes that affect how we use your personal data, we will obtain your explicit consent before implementing the changes.

13. Contact Information

14. Withdrawal of Consent

You have the right to withdraw your consent for data processing at any time. Here's how you can manage your consent:

14.1 Marketing Consent Withdrawal

• Email Unsubscribe: Click the unsubscribe link in any marketing email
• Account Settings: Update your communication preferences in your account
• Customer Support: Contact us directly to update preferences
• Cookie Settings: Adjust marketing cookies through our cookie banner

14.2 Account Deletion Process

1. Login: Access your customer account
2. Account Settings: Navigate to account management section
3. Delete Account: Select the account deletion option
4. Confirmation: Follow the confirmation process
5. Final Notice: We will send confirmation of account deletion

15. Conclusion

At Lou Malnati's, protecting your privacy is not just a legal obligation—it's a fundamental aspect of our commitment to you as our valued customer. We understand that your personal information is sensitive and important, and we treat it with the utmost care and respect.

This Privacy Policy represents our ongoing pledge to transparency, security, and responsible data handling. We believe that by being open about our practices, we can build stronger, more trusting relationships with our customers while continuing to provide exceptional Chicago-style deep-dish pizza and outstanding service.

We encourage you to review this policy periodically and contact us with any questions or concerns. Your feedback helps us improve our privacy practices and better serve your needs.