Privacy Policy

At Dion's Food, we are deeply committed to protecting your privacy and handling your personal information with transparency, integrity, and respect. This Privacy Policy explains how we collect, use, share, and safeguard your personal data when you visit our website at dionsfood.rest, place orders, interact with our services, or otherwise engage with us. Please read this document carefully, as it forms an important part of your relationship with us.

By accessing or using our website, placing an order, creating an account, or contacting us through any channel, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described herein, please discontinue use of our services immediately and contact us with any concerns.

This Privacy Policy applies to all users of our website and services located in the United States. Where applicable, we comply with the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission (FTC) Act, and all other applicable federal and state privacy laws.

1. Who We Are

Dion's Food is a food service business operating in the United States. We operate the website dionsfood.rest and provide food-related products and services to our customers. For the purposes of this Privacy Policy, Dion's Food acts as the data controller responsible for your personal information.

2. Information We Collect

We collect a variety of personal and non-personal information to provide you with our services effectively. The categories of information we collect are outlined below:

2.1 Personal Identification Information

When you create an account, place an order, or contact us, we may collect the following information:

• Full name
• Email address
• Postal or delivery address
• Phone number
• Date of birth (where required for age verification)
• Username and password (stored in encrypted form)
• Profile photograph (if voluntarily submitted)

2.2 Order and Transaction Information

When you make a purchase or place a food order through our platform, we collect:

• Order history and details (items ordered, quantities, special instructions)
• Billing and payment information (processed through secure third-party payment processors; we do not store full credit card numbers)
• Delivery address and preferred delivery times
• Loyalty program or rewards information
• Refund and dispute records

2.3 Usage and Behavioral Data

When you browse our website, we automatically collect certain technical and behavioral information, including:

• IP address and approximate geographic location
• Browser type and version
• Operating system and device type
• Pages visited, time spent on each page, and navigation paths
• Links clicked and features used
• Referring URL (how you found our website)
• Date and time stamps of your visits
• Search terms entered on our website

2.4 Cookie and Tracking Data

We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about your interactions with our website. This may include session identifiers, preference settings, authentication tokens, and analytics data. Please see Section 9 of this policy for detailed information about our use of cookies.

2.5 Communications Data

When you communicate with us, we may retain:

• Emails, messages, and inquiries sent to us
• Customer support chat transcripts
• Feedback, reviews, and survey responses
• Social media interactions related to our brand

2.6 User-Generated Content

If you submit food reviews, ratings, photos, or other content on our platform, this content may be associated with your account and retained as part of your profile data.

2.7 Sensitive Information

We do not intentionally collect sensitive personal information such as Social Security Numbers, government-issued identification numbers, racial or ethnic origin, political opinions, religious beliefs, genetic or biometric data, or health information. If you voluntarily provide dietary restriction or food allergy information to help us serve you better, this information is treated with the highest level of care and used solely to fulfill your order requirements.

3. How We Use Your Information

We use the personal information we collect for specific, lawful purposes. We do not use your data in any manner inconsistent with the purposes described in this policy.

3.1 Service Provision and Order Fulfillment

• Processing and fulfilling your food orders and deliveries
• Creating and managing your customer account
• Facilitating payment processing and invoicing
• Communicating order confirmations, updates, and delivery notifications
• Handling returns, refunds, and customer disputes
• Providing customer support and responding to inquiries

3.2 Website Operation and Improvement

• Maintaining the functionality and security of our website
• Diagnosing and resolving technical issues
• Analyzing website performance and user behavior to improve our services
• Conducting internal research and analytics
• Personalizing your experience on our platform (e.g., remembering your preferences)

3.3 Marketing and Communications

• Sending promotional emails, newsletters, and special offers (with your consent where required)
• Informing you about new menu items, seasonal promotions, and loyalty rewards
• Conducting customer satisfaction surveys
• Displaying targeted advertisements through digital advertising networks
• Retargeting website visitors through paid advertising platforms

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any promotional email or by contacting us at [email protected].

3.4 Legal Compliance and Safety

• Complying with applicable federal and state laws and regulations
• Responding to lawful requests from government authorities and law enforcement
• Enforcing our Terms of Service and other agreements
• Detecting, preventing, and investigating fraud, abuse, and security threats
• Protecting the rights, property, and safety of Dion's Food, our customers, and the public

4. How We Share Your Information

We do not sell your personal information to third parties. We do not rent or trade your personal data. However, we may share your information with trusted parties in the following circumstances:

4.1 Service Providers and Business Partners

We engage third-party vendors and service providers who assist us in operating our business. These parties process your data on our behalf and are contractually obligated to protect it. Examples include:

• Payment processors: To securely process credit card and digital payment transactions
• Delivery and logistics partners: To fulfill food orders and manage last-mile delivery
• Cloud hosting and IT infrastructure: To store and manage our website data securely
• Email marketing platforms: To send transactional and promotional communications
• Analytics providers: To help us understand how customers use our website (e.g., Google Analytics)
• Customer support tools: To manage and respond to customer inquiries efficiently
• Advertising networks: To deliver targeted digital advertising campaigns

4.2 Legal Requirements and Law Enforcement

We may disclose your personal information when required to do so by law or when we believe in good faith that such disclosure is necessary to:

• Comply with a subpoena, court order, or other legal process
• Respond to requests from government or regulatory authorities
• Protect national security or public safety
• Prevent or investigate criminal activity or fraud

4.3 Business Transfers

In the event that Dion's Food undergoes a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of its assets, your personal information may be transferred as part of that transaction. We will notify you via email or a prominent notice on our website if such a change materially affects how your data is handled.

4.4 With Your Consent

We may share your information with other third parties for purposes not listed above when we have obtained your explicit prior consent to do so.

4.5 California-Specific Disclosures (CCPA/CPRA)

For California residents, please note that we do not "sell" personal information as defined under the CCPA/CPRA. We do engage in "sharing" of certain data (such as cookie identifiers) with advertising partners for cross-context behavioral advertising purposes. California residents have the right to opt out of such sharing. Please see Section 7 for your full rights under California law.

5. Data Security

Protecting your personal information is a top priority at Dion's Food. We implement a comprehensive set of administrative, technical, and physical security measures designed to safeguard your data against unauthorized access, disclosure, alteration, and destruction.

5.1 Security Measures We Employ

• SSL/TLS Encryption: All data transmitted between your browser and our website is protected using industry-standard Secure Sockets Layer (SSL) and Transport Layer Security (TLS) encryption protocols.
• Encrypted Password Storage: User passwords are hashed using strong cryptographic algorithms and are never stored in plain text.
• Access Controls: Access to personal data is restricted to authorized personnel only, on a need-to-know basis, and is protected by multi-factor authentication where applicable.
• Secure Payment Processing: We use PCI-DSS compliant third-party payment processors to handle all financial transactions. We do not store full credit card numbers on our servers.
• Regular Security Audits: We conduct periodic reviews of our security practices, vulnerability assessments, and penetration testing to identify and address potential weaknesses.
• Data Minimization: We collect only the data necessary for the purposes outlined in this policy and avoid over-collection of personal information.
• Incident Response Plan: We maintain a formal data breach response plan and will notify affected users and relevant authorities as required by applicable law in the event of a security incident.

6. Data Retention

We retain personal information only for as long as is necessary to fulfill the purposes for which it was collected, to comply with our legal obligations, resolve disputes, and enforce our agreements. The specific retention periods vary depending on the type of data:

When data is no longer required, we securely delete or anonymize it in accordance with our data disposal procedures.

7. Your Privacy Rights

Depending on your location, you may have certain rights with respect to your personal information. We are committed to honoring these rights and making it easy for you to exercise them.

7.1 Rights Available to All Users

• Right to Access: You have the right to request a copy of the personal information we hold about you.
• Right to Correction: You have the right to request that we correct inaccurate or incomplete personal data.
• Right to Deletion: You have the right to request that we delete your personal information, subject to certain legal exceptions.
• Right to Opt-Out of Marketing: You can opt out of receiving promotional communications from us at any time.
• Right to Data Portability: You may request a copy of your data in a structured, commonly used, machine-readable format.

7.2 Additional Rights for California Residents (CCPA/CPRA)

If you are a resident of California, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), which came into full effect on January 1, 2023:

• Right to Know: You can request disclosure of the categories and specific pieces of personal information we have collected about you in the past 12 months, including the sources of collection, the purposes for collection, and the categories of third parties with whom we share it.
• Right to Delete: You may request deletion of your personal information, with some exceptions for data needed to complete transactions, detect security incidents, or comply with legal obligations.
• Right to Correct: You may request that we correct inaccurate personal information.
• Right to Opt-Out of Sale or Sharing: Although we do not sell personal information, you have the right to opt out of the sharing of your personal information for cross-context behavioral advertising. To exercise this right, contact us at [email protected].
• Right to Limit Use of Sensitive Personal Information: You may direct us to limit our use and disclosure of sensitive personal information to what is necessary to perform our services.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. You will not be denied goods or services, charged different prices, or provided a different level of quality as a result of exercising your rights.

7.3 How to Submit a Privacy Request

To exercise any of the rights described above, you may contact us through any of the following methods:

• Email: [email protected]
• Website: dionsfood.rest

We will verify your identity before processing your request to protect your privacy. We aim to respond to all verified requests within 45 days. If we require additional time, we will notify you in writing within the initial 45-day period and may extend our response by an additional 45 days in complex cases.

You may designate an authorized agent to submit requests on your behalf. The authorized agent must provide written proof of authorization, and we may still contact you directly to verify your identity.

8. Children's Privacy

Dion's Food does not knowingly collect, use, or disclose personal information from children under the age of 18. Our website, services, and food ordering platform are intended solely for adult consumers. If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at [email protected], and we will take prompt steps to delete such information from our records.

We comply with the Children's Online Privacy Protection Act (COPPA), which prohibits the collection of personal information from children under 13 without verifiable parental consent. Our policies go beyond COPPA by setting a minimum age of 18 for all account creation and service use.

If we discover that we have inadvertently collected data from a minor, we will delete that information as quickly as possible and take appropriate remedial action.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your browsing experience, remember your preferences, analyze website traffic, and support our marketing efforts.

9.1 Types of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for the operation of our website. They enable core functions such as security, account login, shopping cart functionality, and order processing. These cookies cannot be disabled without affecting the usability of the site.
• Performance and Analytics Cookies: These cookies collect information about how visitors use our website, such as which pages are most frequently visited and how users navigate our platform. This data helps us improve our website performance. We use tools such as Google Analytics for this purpose.
• Functional Cookies: These cookies allow our website to remember choices you make (such as your preferred language, delivery address, or previously ordered items) and provide enhanced, more personalized features.
• Marketing and Advertising Cookies: These cookies are used to deliver advertisements that are relevant to you and your interests. They may also be used to limit the number of times you see an advertisement and to measure the effectiveness of advertising campaigns. They are usually placed by advertising networks with our permission.

9.2 Managing Your Cookie Preferences

You can control and manage cookies in several ways. Most web browsers allow you to refuse some or all cookies through your browser settings. Please note that disabling certain cookies may impact the functionality of our website. For more detailed information about the cookies we use and how to manage your preferences, please visit our full Cookie Policy available at dionsfood.rest.

For California residents who wish to opt out of cookies used for behavioral advertising purposes, you may do so by contacting us at [email protected] or by adjusting your browser's privacy settings.

10. Third-Party Links and Services

Our website may contain links to third-party websites, social media platforms, embedded content (such as videos or maps), and payment gateways operated by other companies. This Privacy Policy applies solely to information collected by Dion's Food through our own website and services.

We are not responsible for the privacy practices of third-party websites or services. We encourage you to review the privacy policies of any third-party websites you visit through links on our platform. Third-party operators may have their own data collection and usage practices that differ substantially from ours.

11. International Data Transfers

Dion's Food is based in the United States and primarily serves customers within the United States. All personal data we collect is stored and processed on servers located in the United States.

However, certain service providers we work with may operate in or transfer data to countries outside of the United States. Where such transfers occur, we take reasonable steps to ensure that your personal information is protected in accordance with applicable U.S. law and that any international recipients provide an adequate level of data protection.

If you are accessing our services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your home country. By using our services, you consent to this transfer.

12. Marketing Communications and Opt-Out

From time to time, we may send you marketing communications about our food products, promotions, new menu items, loyalty rewards, and special events. We will only send such communications where we have a legal basis to do so — either your consent or a legitimate interest in marketing to existing customers.

You have the following options to manage your marketing preferences:

• Email Opt-Out: Click the "Unsubscribe" link found at the bottom of any promotional email we send you.
• Account Settings: Log into your account on dionsfood.rest and update your communication preferences.
• Direct Contact: Email us at [email protected] with your request to be removed from our marketing list.

Please note that even if you opt out of marketing communications, you will continue to receive transactional messages related to your orders, account activity, and essential service notifications.

13. Do Not Track Signals

Some web browsers include a "Do Not Track" (DNT) feature that signals to websites that you do not wish to have your online activities tracked. Currently, there is no universally accepted standard for how websites should respond to DNT signals. At this time, our website does not respond to DNT browser signals. However, you may manage your tracking preferences through our cookie settings and by contacting us directly.

14. FTC Compliance and Consumer Protection

Dion's Food is committed to complying with the Federal Trade Commission (FTC) Act, which prohibits unfair or deceptive acts or practices in commerce. Our privacy practices are designed to be transparent, honest, and consistent with what we represent to our customers. We do not engage in deceptive data collection practices or make false representations about how we use your personal information.

If you believe that our data practices are unfair or deceptive, you have the right to file a complaint with the Federal Trade Commission at www.ftc.gov or by calling 1-877-FTC-HELP (1-877-382-4357).

15. How to File a Privacy Complaint

If you have concerns about how Dion's Food handles your personal information and are not satisfied with our response to your inquiry, you have the right to escalate your complaint to the relevant data protection authorities.

15.1 Contact Us First

We encourage you to contact us first so that we can resolve your concern directly. Please reach out to our Privacy Team at:

• Email: [email protected]
• Website: dionsfood.rest

We will acknowledge your complaint within 5 business days and work to resolve it within 30 days.

15.2 Federal and State Regulatory Bodies

If you are not satisfied with our response, you may contact the following authorities:

• Federal Trade Commission (FTC):
  Website: www.ftc.gov/complaint
  Phone: 1-877-382-4357
  The FTC handles complaints about unfair or deceptive business practices affecting consumers in the United States.
• California Attorney General (for California residents):
  Website: oag.ca.gov/privacy
  California residents may submit CCPA/CPRA-related complaints to the California Attorney General's Office or the California Privacy Protection Agency (CPPA).
• California Privacy Protection Agency (CPPA):
  Website: cppa.ca.gov
  The CPPA is responsible for enforcing the CPRA and may investigate complaints related to violations of California privacy law.

16. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes to this policy, we will notify you by:

• Posting the updated policy on our website at dionsfood.rest with a revised "Last Updated" date
• Sending an email notification to registered users
• Displaying a prominent notice on our homepage

Your continued use of our website and services after the effective date of any changes constitutes your acceptance of the revised Privacy Policy. We encourage you to review this policy periodically to stay informed about how we protect your information.

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact our Privacy Team. We are committed to addressing your inquiries promptly and transparently.

We strive to respond to all privacy-related inquiries within 10 business days. For urgent matters, including potential data breaches or security incidents, please mark your communication as "URGENT – PRIVACY" in the subject line.