Privacy Policy

Welcome to Davanni's. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website davannis.digital, place orders online, sign up for our loyalty programs, or otherwise interact with us. Please read this policy carefully. If you disagree with its terms, please discontinue use of our website and services.

This Privacy Policy applies to all personal information processed by Davanni's in connection with our food services, online ordering platform, marketing communications, and any other digital or in-person touchpoints we maintain. By accessing or using our services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

1. About Us

Davanni's is a food service business operating in the United States. We are dedicated to providing high-quality food products and an exceptional customer experience. As a business that collects and processes customer data, we take our privacy obligations seriously and strive to comply with all applicable federal and state privacy laws, including but not limited to the Federal Trade Commission Act (FTC Act), the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and other applicable state privacy regulations.

2. Information We Collect

We collect various types of information in connection with your use of our services. This information can be broadly categorized as information you provide to us directly, information we collect automatically, and information we receive from third parties.

2.1 Personal Information You Provide to Us

When you interact with Davanni's — whether placing an order, creating an account, signing up for our newsletter, or contacting customer support — you may provide us with personal information, including:

• Identity Information: Your full name, username, or similar identifiers.
• Contact Information: Email address, mailing address, billing address, delivery address, and telephone number.
• Account Credentials: Password and similar security information used for authentication and account access.
• Payment Information: Credit or debit card numbers, bank account details, and other financial information necessary to process your orders. Please note that we use third-party payment processors and do not store full payment card numbers on our servers.
• Order Information: Details about the food items you have ordered, your preferences, special instructions, and dietary requirements you choose to share with us.
• Communications Data: Any messages, feedback, reviews, or other communications you send to us through our website, email, social media, or other channels.
• Loyalty and Rewards Program Data: Information related to your participation in any loyalty, rewards, or promotional programs we operate, including points accumulated and redemption history.
• Survey and Feedback Data: Responses to surveys, questionnaires, or feedback forms we may send you from time to time.

2.2 Information We Collect Automatically

When you visit our website or use our online ordering platform, we automatically collect certain technical and usage information, including:

• Device Information: Information about the device you use to access our services, including hardware model, operating system and version, unique device identifiers, mobile network information, and browser type and version.
• Log Data: Our servers automatically record information when you use our website, including your Internet Protocol (IP) address, browser type, referring/exit pages, the date and time of your visit, and pages viewed.
• Usage Data: Information about how you interact with our website and services, including the links you click, items you add to your cart, search queries you enter, and features you use.
• Location Data: With your permission, we may collect information about your approximate geographic location based on your IP address or, if you choose to enable location services, your precise GPS location to facilitate delivery services and show you nearby locations.
• Cookie and Tracking Data: We use cookies, pixel tags, web beacons, and similar tracking technologies to collect information about your browsing behavior and preferences. Please see Section 8 of this policy for more details on our use of cookies.

2.3 Information We Receive from Third Parties

We may receive information about you from third-party sources, including:

• Social Media Platforms: If you connect your social media accounts to our services or interact with our social media pages, we may receive certain profile information from those platforms in accordance with their privacy policies and your privacy settings.
• Third-Party Delivery Partners: If you order through a third-party food delivery platform that has a partnership arrangement with us, we may receive order-related information from those platforms.
• Analytics Providers: We work with analytics providers who help us understand how our website is being used.
• Marketing Partners: We may receive information from advertising and marketing partners who help us reach potential customers.
• Payment Processors: Our payment processing partners may provide us with transaction confirmation and fraud detection information.

3. How We Use Your Information

We use the personal information we collect for a variety of purposes, all of which are designed to help us provide you with excellent food and service, improve our business operations, and communicate with you effectively. Specifically, we use your information to:

3.1 Service Provision and Order Fulfillment

• Process and fulfill your food orders, including arranging delivery or pickup.
• Manage your account and provide you with access to our online ordering platform.
• Process payments and issue receipts.
• Communicate with you about your orders, including order confirmations, updates, and any issues that arise.
• Provide customer support and respond to your inquiries, comments, and complaints.
• Administer loyalty programs, rewards, and promotional offers you participate in.
• Customize your experience on our website based on your preferences and order history.

3.2 Business Operations and Improvement

• Monitor and analyze usage patterns and trends to improve our website, menu offerings, and overall service quality.
• Conduct internal research and analytics to better understand customer preferences and behaviors.
• Develop new products, services, and features based on customer feedback and usage data.
• Maintain the security and integrity of our systems and services.
• Detect, investigate, and prevent fraudulent transactions, abuse, and other harmful or illegal activities.
• Comply with our legal obligations and enforce our terms and agreements.

3.3 Marketing and Communications

• Send you promotional communications, special offers, and information about new menu items if you have opted in to receive such communications.
• Deliver personalized marketing messages based on your order history and preferences.
• Conduct surveys and collect feedback to improve our products and services.
• Manage our social media presence and engage with you on social platforms.
• Measure the effectiveness of our marketing campaigns and advertising.

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any marketing email, by contacting us at [email protected], or by updating your communication preferences in your account settings. Please note that even if you opt out of marketing communications, we will still send you transactional and service-related communications necessary for the provision of our services.

3.4 Legal Basis for Processing

We process your personal information on the following legal grounds:

• Contract Performance: Processing necessary to fulfill orders you place with us and manage your account.
• Legitimate Interests: Processing for our legitimate business interests, such as fraud prevention, security, and service improvement, where these interests are not overridden by your rights.
• Legal Obligation: Processing required to comply with applicable laws and regulations.
• Consent: Processing based on your explicit consent, such as sending marketing communications, which you may withdraw at any time.

4. Sharing Your Information with Third Parties

We do not sell your personal information to third parties. However, we may share your information with certain third parties in the following circumstances:

4.1 Service Providers and Business Partners

We engage trusted third-party companies and individuals to perform certain services on our behalf. These service providers are given access to your personal information only to the extent necessary to perform their designated functions and are contractually prohibited from using it for any other purpose. Our service providers include:

• Payment Processors: Companies that securely process credit card and other payment transactions.
• Delivery Services: Third-party delivery companies and drivers who fulfill delivery orders.
• Cloud Hosting Providers: Companies that host our website and store our data securely.
• Analytics Providers: Services such as Google Analytics that help us understand how our website is used.
• Email and Communication Services: Platforms that help us send transactional and marketing emails.
• Customer Support Platforms: Tools that help us manage customer inquiries and support tickets.
• Advertising and Marketing Partners: Companies that help us deliver targeted advertising and measure campaign effectiveness.

4.2 Legal Requirements and Law Enforcement

We may disclose your personal information if required to do so by law or in response to valid legal processes, including:

• Compliance with a subpoena, court order, or other legal obligation.
• Requests from law enforcement agencies or government authorities.
• Protection of our legal rights, property, or safety, or the rights, property, or safety of others.
• Investigation of suspected or actual illegal activity, fraud, or breaches of our Terms of Service.

4.3 Business Transfers

In the event that Davanni's undergoes a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal information may be transferred to the acquiring entity. We will notify you of any such change in ownership or control of your personal information by posting a notice on our website or sending you a direct communication.

4.4 With Your Consent

We may share your personal information with other third parties for purposes not described in this policy when we have obtained your explicit consent to do so.

5. Data Security

The security of your personal information is important to us. We implement a range of technical, administrative, and physical safeguards designed to protect your information from unauthorized access, disclosure, alteration, and destruction. Our security measures include:

• Encryption: We use industry-standard Secure Socket Layer (SSL) and Transport Layer Security (TLS) encryption to protect data transmitted between your browser and our servers.
• Access Controls: We restrict access to personal information to authorized employees, contractors, and service providers who need it to perform their job functions.
• Payment Security: Our payment processing systems comply with the Payment Card Industry Data Security Standard (PCI-DSS) to protect your payment card information.
• Regular Security Assessments: We conduct periodic security reviews and vulnerability assessments to identify and address potential weaknesses in our systems.
• Employee Training: We provide regular privacy and security training to our employees to ensure they understand their obligations when handling personal information.
• Incident Response: We maintain procedures for detecting, reporting, and responding to data security incidents in accordance with applicable law.

6. Your Privacy Rights

Depending on where you reside, you may have certain rights regarding your personal information. We respect and honor these rights and have established processes to help you exercise them.

6.1 Rights for All Users

• Right to Access: You have the right to request a copy of the personal information we hold about you.
• Right to Correction: You have the right to request that we correct any inaccurate or incomplete personal information we hold about you.
• Right to Deletion: You have the right to request that we delete your personal information, subject to certain exceptions required by law or legitimate business necessity.
• Right to Opt-Out of Marketing: You have the right to opt out of receiving marketing communications from us at any time.
• Right to Data Portability: You have the right to receive a copy of your personal information in a structured, commonly used, and machine-readable format.

6.2 Additional Rights for California Residents (CCPA/CPRA)

If you are a resident of California, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), including:

• Right to Know: The right to know what personal information we collect, use, disclose, and sell about you, including the categories of personal information and the purposes for which it is used.
• Right to Delete: The right to request deletion of your personal information, subject to certain exceptions.
• Right to Correct: The right to request correction of inaccurate personal information we maintain about you.
• Right to Opt-Out of Sale or Sharing: The right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising. We do not sell personal information as defined under the CCPA/CPRA.
• Right to Limit Use of Sensitive Personal Information: The right to limit our use and disclosure of sensitive personal information to purposes reasonably necessary to provide our services.
• Right to Non-Discrimination: The right not to receive discriminatory treatment for exercising your CCPA/CPRA privacy rights. We will not deny you goods or services, charge you different prices, or provide you with a lesser quality of service because you exercised your rights under the CCPA/CPRA.

6.3 How to Exercise Your Rights

To exercise any of your privacy rights, please contact us using one of the following methods:

• Email: [email protected]
• Website: davannis.digital

We will acknowledge receipt of your request within 10 business days and respond substantively within 45 days of receiving your request. If we need additional time, we will notify you of the reason and extension period. We may need to verify your identity before processing your request to protect your privacy and prevent unauthorized access to your information.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The criteria we use to determine retention periods include:

When your personal information is no longer needed for the purposes described above, we will securely delete, destroy, or anonymize it in accordance with our data retention and disposal policies.

8. Cookies and Tracking Technologies

We use cookies, web beacons, pixel tags, and similar tracking technologies on our website to enhance your browsing experience, analyze website traffic, and deliver personalized content and advertising. Cookies are small text files placed on your device when you visit our website.

8.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the operation of our website, including enabling you to log in, add items to your cart, and complete transactions. These cookies cannot be disabled.
• Functional Cookies: Allow our website to remember your preferences and settings, such as your preferred language, location, and login information.
• Analytics Cookies: Help us understand how visitors interact with our website by collecting and reporting information anonymously, enabling us to improve website performance and content.
• Marketing and Advertising Cookies: Used to track your browsing behavior across websites to deliver targeted advertising that may be relevant to your interests.

8.2 Managing Your Cookie Preferences

You can manage or disable cookies through your browser settings. Please be aware that disabling certain cookies may affect the functionality of our website. For detailed information about the cookies we use and how to manage them, please refer to our Cookie Policy.

You can also opt out of interest-based advertising by visiting:

• The Network Advertising Initiative opt-out page at www.networkadvertising.org/choices
• The Digital Advertising Alliance opt-out page at www.aboutads.info/choices

9. Children's Privacy

Davanni's does not knowingly solicit, collect, or maintain personal information from children under the age of 18. Our website and online ordering platform are not directed at children. If we learn that we have inadvertently collected personal information from a child under 18, we will take prompt steps to delete that information from our records.

If you are a parent or guardian and believe that your child under the age of 18 has provided personal information to us without your consent, please contact us immediately at [email protected]. We will investigate the matter and take appropriate action to remove the information from our systems.

Our practices regarding children's privacy are consistent with applicable federal law, including the Children's Online Privacy Protection Act (COPPA), which imposes requirements on operators of websites directed to children under 13. Although our services are not directed at children, we comply with COPPA's requirements and will not knowingly collect information from children under 13 without verifiable parental consent.

10. International Data Transfers

Davanni's is a United States-based company and primarily operates within the United States. Your personal information is stored and processed on servers located in the United States. If you access our services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country of residence.

When we transfer personal information internationally, we take steps to ensure that appropriate safeguards are in place to protect your information and that such transfers comply with applicable privacy laws. If you have questions about international data transfers, please contact us at [email protected].

11. Third-Party Links and Services

Our website may contain links to third-party websites, applications, or services that are not owned or controlled by Davanni's. We are not responsible for the privacy practices or content of those third-party services. We encourage you to review the privacy policies of any third-party websites you visit. The inclusion of a link on our website does not imply our endorsement of the linked site or its privacy practices.

We may also integrate third-party tools and services into our platform, such as social media sharing buttons, embedded maps, or third-party payment widgets. These third-party services may collect information about you through their own cookies and tracking technologies, subject to their own privacy policies.

12. Federal and State Privacy Law Compliance

We are committed to complying with all applicable federal and state privacy laws in the United States. This includes:

12.1 Federal Trade Commission Act (FTC Act)

We comply with the Federal Trade Commission Act, which prohibits unfair or deceptive acts or practices in or affecting commerce. Our privacy practices are designed to be transparent, fair, and consistent with the representations we make to you in this Privacy Policy. We do not engage in deceptive data collection or use practices.

12.2 California Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA)

For California residents, we comply with the California Consumer Privacy Act of 2018 (CCPA) as amended by the California Privacy Rights Act of 2020 (CPRA). Under these laws, California residents have rights as described in Section 6.2 of this policy. To submit a privacy request under the CCPA/CPRA, please contact us at [email protected] or visit our website at davannis.digital.

12.3 Other State Privacy Laws

We monitor developments in state privacy legislation across the United States and update our practices as necessary to comply with applicable laws in states including, but not limited to, Virginia (Consumer Data Protection Act), Colorado (Colorado Privacy Act), Connecticut (Connecticut Data Privacy Act), Texas, Utah, and other states that have enacted or may enact comprehensive privacy legislation. We are committed to honoring the privacy rights of all our customers regardless of their state of residence.

If you reside in a state with specific privacy rights applicable to you, please contact us to inquire about your rights and how to exercise them. We will make reasonable efforts to accommodate requests from residents of states with applicable privacy laws.

13. How to File a Privacy Complaint

If you have concerns about how we handle your personal information and are not satisfied with our response to your inquiry, you have the right to lodge a complaint with the appropriate regulatory authority.

13.1 Contacting Us First

We encourage you to contact us first so that we have an opportunity to address your concerns directly. You can reach our privacy team at:

• Email: [email protected]
• Website: davannis.digital

We will acknowledge your complaint within 10 business days and work to resolve it within 45 days.

13.2 Filing a Complaint with Regulatory Authorities

If you are not satisfied with our response, you may file a complaint with the following authorities:

Residents of other states may contact their state attorney general's office for assistance with privacy-related complaints. Many state attorneys general have consumer protection divisions that handle privacy complaints.

14. Do Not Track Signals

Some web browsers offer a "Do Not Track" (DNT) feature that signals to websites that you do not want your online activities tracked. Currently, there is no universally accepted standard for how websites should respond to DNT signals. Our website does not currently alter its data collection and use practices in response to DNT signals. We will continue to monitor developments regarding DNT and update our practices if and when a clear standard is established.

For California residents, please note that under the California "Shine the Light" law (California Civil Code Section 1798.83), California residents may request certain information about our disclosure of personal information to third parties for direct marketing purposes. If you are a California resident and would like to make such a request, please contact us at [email protected].

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business practices, applicable laws, or our information handling practices. When we make material changes to this policy, we will:

• Post the updated Privacy Policy on our website at davannis.digital with a revised effective date.
• Send you an email notification if you have an account with us and the changes are material.
• Display a prominent notice on our website to alert you to any significant changes.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website and services after the effective date of any changes to this Privacy Policy constitutes your acceptance of those changes.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please do not hesitate to contact our privacy team. We are committed to addressing your inquiries in a timely and thorough manner.

When contacting us regarding your privacy rights or with a privacy-related inquiry, please include your name, contact information, and a clear description of your request or concern so that we can assist you as efficiently as possible. We will respond to all privacy inquiries within 10 business days of receipt.