Privacy Policy

Effective Date: March 21, 2026  |  Last Updated: March 21, 2026

1. About Us

Dion's is a food service business operating in the United States. We are committed to protecting your privacy and handling your personal data in a transparent, fair, and lawful manner. This Privacy Policy applies to all personal information we collect through our website, mobile interactions, in-store experiences, and any other services we provide.

Our contact details for all privacy-related matters are as follows:

2. Scope of This Privacy Policy

This Privacy Policy covers:

• All personal information collected via our website at pizza-dions.world
• Personal information collected when you place orders online or by phone
• Information gathered through loyalty programs, promotional campaigns, or surveys
• Data collected through cookies, tracking technologies, and analytics tools
• Information provided when you contact our customer service team
• Any other interactions you have with our brand, both online and offline

This policy does not cover third-party websites, applications, or services that may be linked from our website. We encourage you to review the privacy policies of any third-party platforms you visit.

3. Information We Collect

We collect various types of information to provide and improve our services. The categories of personal information we collect include:

3.1 Personal Identification Information

When you register an account, place an order, or contact us, we may collect:

• Full name — to identify you and personalize your experience
• Email address — for order confirmations, receipts, and marketing communications
• Phone number — for delivery coordination and customer service follow-up
• Mailing and delivery address — to fulfill food delivery orders
• Date of birth — where applicable, to verify age eligibility for certain promotions
• Username and password — to secure your online account

3.2 Payment and Financial Information

When you complete a purchase on our platform, we collect payment information necessary to process your transaction. This may include:

• Credit or debit card details (processed securely via third-party payment processors)
• Billing address associated with your payment method
• Transaction history and order details

Please note that we do not store full credit card numbers on our servers. All payment data is processed and stored by PCI-DSS compliant third-party payment processors.

3.3 Order and Transaction Data

We maintain records of your orders and transactions, including:

• Items ordered and customizations requested
• Order dates, times, and amounts
• Delivery history and preferred delivery locations
• Special instructions, dietary preferences, and notes provided during ordering

3.4 Usage and Technical Data

We automatically collect certain technical information when you visit our website or use our digital services:

• IP address — used for security monitoring and geographic analytics
• Browser type and version — to ensure website compatibility
• Operating system — for technical support purposes
• Device identifiers — such as device ID and mobile device type
• Referring URLs — to understand how users find our website
• Pages visited and time spent — to analyze user behavior and improve our site
• Clickstream data — to understand navigation patterns
• Error logs — to diagnose and fix technical issues

3.5 Location Data

With your consent, we may collect precise or approximate location data from your mobile device or browser to:

• Identify the nearest Dion's location
• Provide accurate delivery estimates
• Offer location-based promotions and deals

3.6 Communications Data

When you contact our customer service team via email, phone, or web forms, we may collect and retain:

• The content of your messages and inquiries
• Your feedback, complaints, and suggestions
• Records of correspondence for quality assurance and training purposes

3.7 Marketing and Preference Data

If you opt in to receive marketing communications, we collect:

• Your communication preferences (email, SMS, push notifications)
• Your interactions with our marketing campaigns (open rates, click-through rates)
• Loyalty program participation and reward redemption history

4. How We Use Your Information

We use the personal information we collect for the following lawful purposes:

4.1 Service Provision and Order Fulfillment

• Processing and fulfilling your food orders accurately and efficiently
• Coordinating delivery services and providing delivery updates
• Managing your online account and profile
• Processing payments and issuing receipts and invoices
• Handling returns, refunds, and complaints

4.2 Customer Communications

• Sending order confirmation and status update notifications
• Responding to your customer service inquiries and support requests
• Sending important service announcements and policy updates
• Communicating information about changes to our menu, hours, or locations

4.3 Marketing and Promotional Activities

• Sending promotional offers, discount codes, and seasonal deals (with your consent)
• Personalizing marketing content based on your order history and preferences
• Administering loyalty programs, contests, sweepstakes, and promotional events
• Conducting surveys and gathering customer feedback

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any email we send, by texting STOP in response to any SMS communication, or by contacting us directly at [email protected].

4.4 Analytics and Business Improvement

• Analyzing website traffic, user behavior, and engagement metrics
• Understanding customer preferences to improve our menu offerings
• Conducting internal research and business intelligence activities
• Testing new features, website layouts, and service improvements

4.5 Legal Compliance and Safety

• Complying with applicable federal and state laws and regulations
• Responding to lawful requests from law enforcement and regulatory authorities
• Preventing fraud, unauthorized access, and other illegal activities
• Protecting the rights, safety, and interests of our customers, employees, and business
• Enforcing our Terms of Service and other agreements

5. Legal Basis for Processing

We process your personal information based on one or more of the following legal grounds under applicable United States law, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and the Federal Trade Commission (FTC) Act:

• Contractual necessity: Processing required to fulfill your orders and deliver our services
• Legitimate interests: Processing that serves our reasonable business interests, such as fraud prevention and service improvement, where these interests do not override your privacy rights
• Consent: Where you have given explicit permission, such as for marketing communications and non-essential cookies
• Legal obligation: Processing required to comply with applicable laws and regulatory requirements

6. Sharing Your Information with Third Parties

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes. However, we may share your information in the following limited circumstances:

6.1 Service Providers and Business Partners

We engage trusted third-party service providers who assist us in operating our business. These providers are contractually obligated to protect your information and may only use it for the specific services they provide to us. These include:

• Payment processors — to securely handle online transactions
• Delivery and logistics partners — to coordinate food delivery services
• Cloud hosting and IT infrastructure providers — to host our website and databases
• Email and SMS marketing platforms — to send communications on our behalf
• Analytics providers — such as Google Analytics, to analyze website usage
• Customer service software providers — to manage support tickets and inquiries

6.2 Legal and Regulatory Disclosures

We may disclose your personal information when required or permitted by law, including:

• In response to a valid court order, subpoena, or legal process
• To comply with requests from federal, state, or local law enforcement agencies
• To protect and defend our legal rights or property
• To investigate potential violations of our Terms of Service
• In emergency situations to protect the safety of our customers or the public

6.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal information may be transferred to the acquiring entity. We will provide notice before your personal information is transferred and becomes subject to a different privacy policy.

6.4 Aggregated and De-Identified Data

We may share aggregated or de-identified information that cannot reasonably be used to identify you with third parties for industry research, analytics, marketing, or other business purposes.

7. Cookies and Tracking Technologies

We use cookies, web beacons, pixel tags, and similar tracking technologies on our website to enhance your browsing experience and analyze how our site is used.

7.1 Types of Cookies We Use

You can manage your cookie preferences through your browser settings or through our cookie consent tool available on our website. Note that disabling certain cookies may impact the functionality of our website.

For more detailed information about the cookies we use, please refer to our Cookie Policy available on our website.

8. Data Security

Protecting your personal information is a top priority for us. We implement a range of technical, administrative, and physical security measures designed to protect your data from unauthorized access, disclosure, alteration, or destruction.

8.1 Security Measures We Employ

• SSL/TLS Encryption: All data transmitted between your browser and our website is encrypted using industry-standard Secure Socket Layer (SSL) technology
• Secure Payment Processing: Payment card information is processed through PCI-DSS compliant payment gateways and is never stored on our servers
• Access Controls: Access to personal information is restricted to authorized employees and service providers on a need-to-know basis
• Password Hashing: Account passwords are stored using strong cryptographic hashing algorithms
• Regular Security Audits: We conduct periodic reviews of our security practices and vulnerability assessments
• Employee Training: Our staff receive regular training on data protection best practices and privacy compliance
• Incident Response Plan: We maintain a data breach response procedure to address security incidents promptly

9. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

When your personal information is no longer required, we will securely delete or anonymize it in accordance with our data disposal procedures.

10. Your Privacy Rights

Depending on your state of residence, you may have specific rights regarding your personal information under applicable United States law. We are committed to honoring these rights for all our customers.

10.1 Rights Under the California Consumer Privacy Act (CCPA/CPRA)

If you are a California resident, you have the following rights under the CCPA as amended by the CPRA:

• Right to Know: You have the right to request information about the categories and specific pieces of personal information we have collected about you, the sources of that information, our business purposes for collecting it, and the categories of third parties with whom we share it.
• Right to Delete: You have the right to request that we delete personal information we have collected from you, subject to certain exceptions (e.g., completing a transaction, legal obligations).
• Right to Correct: You have the right to request correction of inaccurate personal information we maintain about you.
• Right to Opt-Out of Sale or Sharing: You have the right to direct us not to sell or share your personal information to third parties. We do not sell personal information as defined under the CCPA/CPRA.
• Right to Limit Use of Sensitive Personal Information: You may have the right to limit our use and disclosure of sensitive personal information to only what is necessary to provide the services you request.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA privacy rights. We will not deny you goods or services, charge different prices, or provide a different level of quality because you exercised your rights.
• Right to Data Portability: You may request a copy of your personal information in a portable, readily usable format.

10.2 Rights Available to All U.S. Customers

Regardless of your state of residence, we offer all customers the following privacy rights:

• Access: Request access to the personal information we hold about you
• Correction: Request correction of any inaccurate or incomplete personal information
• Deletion: Request deletion of your personal information, subject to legal obligations
• Opt-Out of Marketing: Unsubscribe from promotional communications at any time
• Account Closure: Request closure of your account and associated data

10.3 How to Exercise Your Rights

To exercise any of your privacy rights, please submit a verifiable consumer request by:

• Email: [email protected] with the subject line "Privacy Rights Request"
• Website: Through any privacy request form available at pizza-dions.world

We will acknowledge receipt of your request within 10 business days and respond substantively within 45 calendar days. If we require additional time (up to 90 days total), we will notify you of the extension and the reason for it.

To protect your privacy and security, we will verify your identity before processing your request. You may be asked to provide information sufficient to confirm your identity, such as your name, email address, and order history.

You may designate an authorized agent to submit a request on your behalf. Authorized agents must provide written authorization and we may require verification directly from you.

11. Children's Privacy

We comply with the Children's Online Privacy Protection Act (COPPA). If we become aware that we have inadvertently collected personal information from a child under the age of 13 without verifiable parental consent, we will take immediate steps to delete such information from our records.

If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us immediately at [email protected] so that we can promptly address the matter.

12. International Data Transfers

Our primary operations are based in the United States, and your personal information is collected and processed within the United States. If you access our website from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country of residence.

By using our services, you acknowledge and consent to the transfer of your personal information to and within the United States as described in this Privacy Policy. We take appropriate measures to ensure that any international transfers of personal data comply with applicable data protection requirements and that your information receives adequate protection.

13. Third-Party Links and Services

Our website may contain links to third-party websites, social media platforms, or services that are not operated by us. When you click on these links, you will be directed to those third parties' websites. We strongly advise you to review the privacy policies of every website you visit, as we have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

Dion's is not responsible for any information you submit to or any content available on third-party websites linked from our platform.

14. Social Media and User-Generated Content

Our website may include social media features such as share buttons, follow links, and embedded content from platforms such as Facebook, Instagram, and X (formerly Twitter). These features may collect your IP address, track which pages you visit on our site, and set cookies to enable proper functioning. Your interactions with these features are governed by the privacy policies of the respective social media companies.

If you post reviews, comments, or other user-generated content on our website or social media pages, please be aware that such content may be visible to the public. We encourage you not to share sensitive personal information in public-facing areas of our platform.

15. Do Not Track Signals

Some browsers include a "Do Not Track" (DNT) feature that signals to websites that you do not want your online activity tracked. Currently, there is no universally accepted standard for responding to DNT signals. Our website does not currently alter its data collection and use practices in response to DNT signals. However, you can manage tracking preferences through your browser settings and our cookie consent tools.

16. California Shine the Light Law

Under California Civil Code Section 1798.83 (the "Shine the Light" law), California residents may request information once per calendar year about the categories of personal information we disclosed to third parties for their direct marketing purposes during the preceding calendar year, and the names and addresses of those third parties.

To make such a request, please contact us at [email protected]. We will respond to your request within 30 days as required by applicable law.

17. Nevada Privacy Rights

Nevada law (NRS 603A) provides Nevada residents the right to opt out of the sale of certain covered information collected through websites. We do not sell covered information as defined under Nevada law. However, if you have any questions about our data practices regarding Nevada residents, please contact us at [email protected].

18. Filing a Complaint

If you have concerns about how we handle your personal information and we have not been able to resolve them to your satisfaction, you have the right to file a complaint with the relevant data protection or consumer protection authority.

18.1 Federal Trade Commission (FTC)

The Federal Trade Commission (FTC) oversees consumer protection and unfair or deceptive practices in the United States. You may file a complaint with the FTC at:

• Website: www.ftc.gov/complaint
• Phone: 1-877-382-4357
• Address: Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, DC 20580

18.2 California Privacy Protection Agency (CPPA)

If you are a California resident and believe your CCPA/CPRA rights have been violated, you may file a complaint with the California Privacy Protection Agency:

• Website: cppa.ca.gov
• Address: California Privacy Protection Agency, 2101 Arena Blvd, Sacramento, CA 95834

18.3 State Attorneys General

Many state attorneys general offices handle consumer privacy complaints. You may contact the attorney general's office in your state of residence for guidance on filing a complaint related to privacy rights violations.

19. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our business practices, legal requirements, or regulatory developments. When we make material changes, we will:

• Update the "Last Updated" date at the top of this Privacy Policy
• Post the revised Privacy Policy prominently on our website at pizza-dions.world
• Send a notification email to registered users where required by law or where the changes are significant

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our website and services after any changes to this Privacy Policy constitutes your acknowledgment of the updated terms.

20. Contact Us

If you have any questions, concerns, or requests related to this Privacy Policy or our data practices, please do not hesitate to reach out to us. We are committed to addressing your privacy inquiries promptly and transparently.

We aim to respond to all privacy-related inquiries within 10 business days of receipt. For complex requests or formal rights exercises, we will provide a full response within 45 calendar days as required by applicable law.