Privacy Policy

This Privacy Policy describes how Round Table Pizza ("we," "us," "our," or "the Company") collects, uses, discloses, retains, and protects the personal information of visitors and customers who interact with our website located at cafe-roundtable.digital, our online ordering systems, our mobile applications, and our in-store services (collectively, the "Services"). We are committed to protecting your privacy and handling your personal data in a transparent, lawful, and responsible manner in accordance with applicable United States federal and state privacy laws, including the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), and the Federal Trade Commission Act (FTC Act).

Please read this Privacy Policy carefully before using our Services. By accessing or using our website, placing an order, creating an account, or otherwise engaging with our Services, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue your use of our Services immediately.

For any privacy-related questions, concerns, or requests, you may contact us directly using the information provided in the Contact Us section at the end of this document.

1. Who We Are

Round Table Pizza is a food service business operating in the United States. We provide pizza and related food and beverage products through in-restaurant dining, carry-out, and online ordering channels. Our digital presence is managed through the website cafe-roundtable.digital.

As the data controller for purposes of this Privacy Policy, we are responsible for determining how and why your personal information is processed. Our contact details are as follows:

2. Information We Collect

We collect various categories of personal information depending on how you interact with us. This collection may occur automatically, through your voluntary submissions, or through third-party sources. The categories below describe the types of personal information we may collect about you.

2.1 Personal Identification Information

When you create an account, place an order, sign up for our loyalty or rewards program, participate in promotions, or contact our customer service team, we may collect the following personal identification details:

• Full name (first and last)
• Email address
• Phone number or mobile number
• Billing address and delivery address
• Date of birth (where required for age verification or birthday promotions)
• Username and password for account access
• Loyalty program membership number

2.2 Payment and Transaction Information

When you make a purchase through our website or mobile application, we collect information necessary to process your transaction, including:

• Credit or debit card details (processed securely through PCI-DSS compliant third-party payment processors — we do not store full card numbers on our servers)
• Transaction amount, order history, and itemized purchase records
• Gift card numbers and redemption history
• Billing information associated with your payment method

2.3 Usage Data and Behavioral Information

When you visit our website or use our digital Services, we automatically collect certain information about your browsing behavior and interactions, including:

• Pages visited, time spent on each page, and navigation paths
• Links clicked and features used
• Search queries entered on our website
• Items added to or removed from your cart
• Order frequency and purchasing patterns
• Time and date of your visits
• Referring website or URL (the website you came from before visiting ours)

2.4 Device and Technical Information

We automatically collect certain technical information from the devices you use to access our Services, which may include:

• IP address
• Browser type and version
• Operating system type and version
• Device type (desktop, mobile, tablet)
• Device identifiers (such as mobile advertising IDs)
• Screen resolution and display settings
• Language preferences
• Internet service provider (ISP)

2.5 Location Information

With your consent, we may collect precise geolocation data from your mobile device to help you locate the nearest Round Table Pizza location, enable delivery services, or improve your in-app experience. You may disable location tracking at any time through your device settings. We may also collect your approximate location based on your IP address.

2.6 Communications and Customer Support Data

When you contact us by email, phone, or through any feedback or support form on our website, we collect and retain the contents of those communications, including:

• The nature of your inquiry, complaint, or feedback
• Any personal information you voluntarily provide in your message
• Records of correspondence and responses sent to you

2.7 Cookie and Tracking Technology Data

We use cookies, web beacons, pixel tags, and similar tracking technologies to collect data about your browsing activity. Please see Section 8 of this Privacy Policy for a full description of our cookie practices and how to manage your preferences.

2.8 Information from Third Parties

We may receive personal information about you from third-party sources, including:

• Third-party delivery platforms (such as DoorDash, Uber Eats, or Grubhub) when you place an order through those services
• Social media platforms if you connect your social media account to your Round Table Pizza account or interact with our social media pages
• Analytics providers that supplement our own data with demographic or behavioral insights
• Marketing partners involved in co-branded promotions or campaigns

3. How We Use Your Information

We use the personal information we collect for the following purposes, always in accordance with applicable law and our legitimate business interests:

3.1 Providing and Managing Our Services

• Processing your food orders and managing delivery or pick-up logistics
• Creating and managing your customer account
• Processing payments and issuing refunds or credits
• Administering our loyalty and rewards program
• Responding to your inquiries, complaints, and support requests
• Sending you order confirmations, receipts, and status updates

3.2 Analytics and Service Improvement

• Analyzing website and app usage patterns to improve performance, design, and user experience
• Conducting internal research and development to improve our menu offerings and operational efficiency
• Monitoring and analyzing trends, usage, and activity in connection with our Services
• Troubleshooting technical issues and preventing errors

3.3 Marketing and Promotional Communications

• Sending you promotional emails, special offers, coupons, and newsletters, subject to your communication preferences and applicable opt-out rights
• Delivering personalized promotions and recommendations based on your order history and preferences
• Conducting sweepstakes, contests, and other promotional activities
• Displaying targeted advertisements on our website and on third-party platforms
• Measuring the effectiveness of our marketing campaigns

You may opt out of marketing communications at any time by following the unsubscribe link in any promotional email or by contacting us directly at [email protected].

3.4 Legal Compliance and Safety

• Complying with applicable federal and state laws and regulations
• Responding to lawful requests from government authorities, courts, or law enforcement agencies
• Detecting, preventing, and investigating fraud, security incidents, or other illegal or unauthorized activity
• Protecting the rights, property, and safety of our customers, employees, and the general public
• Enforcing our Terms of Service and other agreements

4. Sharing Your Information with Third Parties

We do not sell your personal information in the traditional commercial sense. However, as described below, we may share your information with trusted third parties under certain circumstances. California residents should refer to Section 10 for additional disclosure regarding "sales" and "sharing" of personal information under the CCPA/CPRA.

4.1 Service Providers and Business Partners

We engage third-party companies and individuals to perform services on our behalf. These service providers are permitted to use your personal information only as necessary to perform their contractual obligations to us, and they are required to protect your information in a manner consistent with this Privacy Policy. Service providers include:

• Payment processors: To securely process credit card and debit card transactions
• Delivery and logistics partners: To fulfill your food delivery orders
• Email and marketing platforms: To send promotional and transactional emails on our behalf
• Analytics providers: Such as Google Analytics, to help us understand website usage
• Customer support platforms: To manage and respond to customer inquiries
• Cloud hosting and data storage providers: To securely store and manage our databases
• Advertising technology companies: To deliver targeted advertisements

4.2 Legal Requirements and Law Enforcement

We may disclose your personal information if we believe in good faith that such disclosure is necessary to:

• Comply with a subpoena, court order, legal process, or other governmental request
• Enforce our Terms of Service or protect our legal rights
• Prevent or investigate potential wrongdoing in connection with our Services
• Protect the personal safety of users or the public

4.3 Business Transfers

In the event that Round Table Pizza undergoes a merger, acquisition, sale of all or substantially all of its assets, reorganization, or similar corporate transaction, your personal information may be transferred to the successor entity as part of that transaction. We will notify you via email and/or a prominent notice on our website if your information becomes subject to a materially different privacy policy as a result of such a transaction.

4.4 Aggregated and De-Identified Data

We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you with third parties for research, analytics, marketing, or other business purposes. This information is not subject to the restrictions of this Privacy Policy.

5. Data Security

We take the security of your personal information seriously and have implemented a range of technical, administrative, and physical security measures designed to protect your information from unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• Encryption: We use Secure Sockets Layer (SSL) / Transport Layer Security (TLS) encryption to protect data transmitted between your browser and our servers. Sensitive data such as payment information is encrypted both in transit and at rest.
• Access controls: Access to personal information within our organization is restricted to employees, contractors, and service providers who have a legitimate need to access it for the purposes described in this policy. All personnel with access to personal data are bound by confidentiality obligations.
• PCI-DSS Compliance: Our payment processing systems comply with the Payment Card Industry Data Security Standard (PCI-DSS) to protect cardholder data.
• Regular security assessments: We conduct periodic vulnerability assessments and security audits of our digital infrastructure.
• Incident response: We maintain an incident response plan to promptly identify, contain, and remediate any potential data breaches, and we will notify affected individuals and relevant authorities as required by law.

6. Data Retention

We retain your personal information only for as long as is necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Our general data retention practices are as follows:

When personal data is no longer required for any of the purposes listed above, we will securely delete or anonymize it. In some cases, we may retain aggregated, de-identified data indefinitely for statistical or analytical purposes.

7. Your Rights and Choices

Depending on your state of residence within the United States, you may have certain rights with respect to your personal information. We are committed to honoring these rights in accordance with applicable law.

7.1 Right to Know and Access

You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which we collected it, the purposes for which we collected it, and the categories of third parties with whom we shared it.

7.2 Right to Correction

You have the right to request that we correct inaccurate personal information we maintain about you. You may also update many of your account details directly through your account settings page on our website.

7.3 Right to Deletion

You have the right to request that we delete personal information we have collected about you, subject to certain exceptions provided by law (such as when retention is necessary to complete a transaction, comply with a legal obligation, or exercise our legal rights).

7.4 Right to Data Portability

Where technically feasible and required by applicable law, you may request a copy of the personal information you have provided to us in a structured, commonly used, and machine-readable format.

7.5 Right to Opt Out of Marketing

You may opt out of receiving marketing emails from us at any time by clicking the "unsubscribe" link in any marketing email you receive from us. You may also opt out of SMS marketing by replying "STOP" to any marketing text message. Please note that even if you opt out of marketing communications, we will still send you transactional communications related to your orders and account.

7.6 Right to Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights. We will not deny you goods or services, charge you different prices, provide you a different quality of service, or suggest that you will receive a different level of service simply because you have exercised a privacy right.

7.7 How to Submit a Privacy Request

To exercise any of the rights described above, please contact us using one of the following methods:

• Email: [email protected]
• Website: cafe-roundtable.digital

We will acknowledge receipt of your request within 10 business days and fulfill your request within 45 calendar days of receipt, unless we require an extension, in which case we will notify you in writing. We may ask you to verify your identity before processing your request to protect your privacy and prevent unauthorized access to your information.

You may authorize an agent to submit a privacy rights request on your behalf, provided that you provide written authorization and we can verify the agent's identity and authority.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies (including web beacons, pixel tags, and local storage objects) to enhance your experience on our website, analyze usage, and support our marketing activities. Below is a summary of the types of cookies we use:

8.1 Types of Cookies We Use

8.2 Managing Your Cookie Preferences

You can manage or disable cookies through your web browser settings. Most modern browsers allow you to refuse all cookies, accept only certain types, or delete existing cookies. Please be aware that disabling certain cookies may affect the functionality of our website and your ability to place orders online.

You may also opt out of interest-based advertising through the Network Advertising Initiative (NAI) at optout.networkadvertising.org or the Digital Advertising Alliance (DAA) at optout.aboutads.info.

For a full description of our cookie practices, please refer to our dedicated Cookie Policy, available on our website at cafe-roundtable.digital.

9. Children's Privacy

Our Services are intended for use by individuals who are 18 years of age or older. We do not knowingly collect, solicit, or process personal information from anyone under the age of 18. Our website, online ordering system, and digital services are not directed at, designed for, or marketed to children.

If you are a parent or legal guardian and you believe that your child under the age of 18 has provided us with personal information without your consent, please contact us immediately at [email protected]. Upon receiving a verified request, we will take prompt steps to delete the minor's information from our records.

We comply with the Children's Online Privacy Protection Act (COPPA), which prohibits the collection of personal information from children under 13 without verifiable parental consent. If we discover that we have inadvertently collected information from a child under 13, we will delete it immediately.

10. Additional Rights for California Residents

If you are a resident of California, the California Consumer Privacy Act (CCPA), as amended and expanded by the California Privacy Rights Act (CPRA) effective January 1, 2023, grants you certain additional rights with respect to your personal information. This section supplements the rights described in Section 7 and applies specifically to California residents.

10.1 Categories of Personal Information Collected

In the preceding 12 months, we have collected the following categories of personal information as defined by the CCPA:

• Identifiers (name, email address, IP address, phone number)
• Commercial information (order history, products purchased)
• Internet or other electronic network activity information (browsing history on our website, interaction with our ads)
• Geolocation data (approximate or precise location, with consent)
• Inferences drawn from personal information to create a profile about consumer preferences

10.2 Selling and Sharing of Personal Information

Under the CPRA, "sharing" includes making personal information available to third parties for cross-context behavioral advertising. We may share certain categories of data (such as device identifiers and browsing activity) with advertising technology partners for this purpose. California residents have the right to opt out of this sharing by contacting us at [email protected] or by using a Global Privacy Control (GPC) signal from your browser.

10.3 Sensitive Personal Information

We do not intentionally collect or use sensitive personal information (as defined by the CPRA, including Social Security numbers, precise geolocation without consent, racial or ethnic origin, or health information) beyond what is strictly necessary to provide our Services.

10.4 Shine the Light Law

California Civil Code Section 1798.83 ("Shine the Light" law) permits California residents to request information about the disclosure of personal information to third parties for direct marketing purposes. To submit such a request, please email us at [email protected] with the subject line "Shine the Light Request."

11. International Data Transfers

Round Table Pizza is a United States-based business, and your personal information is primarily collected, stored, and processed within the United States. Our servers, databases, and primary service providers are located in the United States.

If you access our Services from outside the United States, please be aware that your information may be transferred to, stored in, and processed in the United States, where data protection laws may differ from those in your country of residence. By using our Services and providing your personal information, you acknowledge and consent to this transfer and processing in the United States in accordance with this Privacy Policy.

We take appropriate steps to ensure that any international transfers of personal data are conducted in a manner consistent with applicable data protection laws and that your information receives an adequate level of protection wherever it is processed.

12. Third-Party Websites and Services

Our website may contain links to third-party websites, social media platforms, delivery service applications, and other external services that are not operated or controlled by Round Table Pizza. This Privacy Policy applies solely to information collected by us through our own Services. We are not responsible for the privacy practices or content of any third-party websites or services.

We encourage you to review the privacy policies of any third-party websites you visit through links on our website. The inclusion of a link on our website does not imply our endorsement of the linked site or its privacy practices.

13. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, our Services, or applicable legal requirements. When we make material changes to this Privacy Policy, we will:

• Post the updated Privacy Policy on this page with a new "Last Updated" date
• Send an email notification to registered account holders
• Display a prominent notice on our website for a reasonable period following the change

Your continued use of our Services after the effective date of any changes constitutes your acceptance of the revised Privacy Policy. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

14. How to File a Complaint

If you have concerns about how we handle your personal information, we encourage you to contact us first so that we can attempt to resolve your concern directly.

If you are a California resident and believe we have violated your rights under the CCPA/CPRA, you may file a complaint with:

If you believe we have engaged in unfair or deceptive trade practices in violation of the FTC Act, you may file a complaint with:

Residents of other states may also have the right to file complaints with their state Attorney General's office or relevant state data protection authority. We encourage you to contact your state's consumer protection office for guidance on how to file a complaint.

15. Contact Us

If you have any questions, comments, or concerns about this Privacy Policy, or if you wish to exercise any of your privacy rights, please do not hesitate to contact our privacy team using the information below:

We will make every effort to respond to your privacy inquiry or request within 10 business days of receipt. For formal privacy rights requests (such as access, deletion, or correction), please be prepared to verify your identity to protect your information from unauthorized requests.