Privacy Policy

We may collect the following categories of information:

• Account information: Name, email address, and phone number when you create an account.
• Order information: Items ordered, order history, special instructions, and payment method type (e.g., card, cash).
• Delivery information: Delivery address, zip code, and delivery instructions.
• Payment information: Payment processing is handled by Stripe. We receive only a payment confirmation and the last four digits of your card — we do not store full card numbers.
• Communication data: Email address and/or phone number for order notifications and marketing (with your consent).
• Technical data: Browser type, IP address, and general usage data collected automatically through our website to improve performance and security.

We collect information directly from you when you create an account, place an order, or contact us. We also collect limited technical data automatically as you browse our website.

We use the information we collect to:

• Process and fulfill your orders (delivery and pickup).
• Send order confirmations and status updates via email or SMS.
• Manage your account and loyalty rewards.
• Respond to your questions and customer service requests.
• Improve our menu, website, and service offerings.
• Prevent fraud and ensure security of our systems.
• Comply with applicable laws and regulations.

We do not sell your personal information to third parties for their marketing purposes.

When you place an order, we use your name, contact information, and delivery address to prepare and deliver your order. Order history is retained in your account to support repeat orders and loyalty tracking.

Guest orders (placed without a full account) still result in a minimal customer profile with your name and phone number, which is used solely to process your order and allow you to complete your account at a later time.

All online credit and debit card payments are processed by Stripe, Inc., a PCI-DSS Level 1 certified payment processor. When you pay online, your card details are submitted directly to Stripe and are never transmitted to or stored on our servers.

Stripe's use of your payment information is governed by their Privacy Policy. We receive only a payment confirmation and a token that references your transaction.

We may send you transactional communications (order confirmations, status updates, and delivery notifications) by email or SMS. These communications are necessary to process your order and cannot be opted out of while you have an active order.

We may also send promotional messages (special offers, loyalty rewards updates) if you have opted in to marketing communications. You may opt out of marketing emails at any time by clicking "Unsubscribe" in any email, or by contacting us at info@toledospizzeria.com.

We share your information only with trusted third-party service providers who assist us in operating our website and fulfilling orders. These may include:

• Stripe — payment processing
• Supabase — secure database hosting (your data is stored in their cloud infrastructure)
• Email and SMS providers — for sending order notifications
• Vercel — website hosting and deployment

All service providers are contractually required to handle your data securely and only for the specific purposes we authorize. We do not sell, rent, or trade your personal information.

We may disclose your information if required by law, subpoena, or other legal process, or if we believe disclosure is necessary to protect our rights, property, or the safety of others.

We take reasonable technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include encrypted data storage, secure HTTPS connections, and access controls.

However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security and encourage you to use a strong, unique password for your account.

We retain your personal information for as long as your account is active or as needed to provide our services. Order records may be retained for business and tax purposes for up to seven years.

If you request deletion of your account, we will delete or anonymize your personal data, except where retention is required by law or for legitimate business purposes (such as resolving disputes or preventing fraud).

As a customer, you have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your account and associated personal data.
• Opt out of marketing communications at any time.

To exercise any of these rights, please contact us at info@toledospizzeria.com. We will respond to your request within a reasonable timeframe.

Our website and services are not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe we have collected information from a child under 13, please contact us immediately.

We may update this Privacy Policy from time to time. When we make changes, we will update the effective date at the top of this page. Continued use of our Service after any changes constitutes your acceptance of the revised policy.

We encourage you to review this policy periodically to stay informed about how we protect your information.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please reach out to us: