Privacy Policy

This Privacy Policy describes how Dions ("we," "us," or "our") collects, uses, discloses, and protects your personal information when you visit our website at dionshot.rest, place orders, use our services, or otherwise interact with us. We are committed to protecting your privacy and handling your personal data in a transparent and responsible manner in compliance with applicable United States federal and state privacy laws.

Please read this Privacy Policy carefully before using our website or services. By accessing or using dionshot.rest, you acknowledge that you have read, understood, and agree to be bound by the terms of this Privacy Policy. If you do not agree with the practices described in this policy, please do not use our website or services.

1. About Us

Dions is a food service business operating in the United States. We provide food and dining-related services to our customers through our website and physical locations.

For any privacy-related questions, concerns, or requests, you may contact us directly using the contact information provided in Section 15 of this Privacy Policy.

2. Scope of This Privacy Policy

This Privacy Policy applies to all personal information collected through:

• Our website located at dionshot.rest and any related subdomains
• Online ordering systems and food delivery platforms we operate or partner with
• Email communications, newsletters, and marketing campaigns
• Customer loyalty or rewards programs
• Social media pages and interactions
• In-person interactions at our physical locations
• Phone or text message communications
• Any other means by which you provide personal information to us

This Privacy Policy does not apply to third-party websites, applications, or services that may be linked to or from our website. We are not responsible for the privacy practices of those third parties, and we encourage you to review their respective privacy policies.

3. Information We Collect

We collect various types of information in connection with the services we provide. The categories of personal information we may collect include the following:

3.1 Personal Identification Information

When you create an account, place an order, contact us, or otherwise interact with our services, we may collect:

• Full name
• Email address
• Phone number
• Mailing or delivery address
• Date of birth (for age verification purposes)
• Username and password (for registered accounts)
• Profile photo (if provided voluntarily)

3.2 Payment and Financial Information

When you make a purchase through our website or ordering systems, we collect payment-related information, including:

• Credit or debit card information (processed securely through third-party payment processors)
• Billing address
• Transaction history and purchase records
• Digital wallet credentials (e.g., Apple Pay, Google Pay)

3.3 Order and Food Preference Information

To provide our food services effectively, we collect:

• Order history and itemized purchase details
• Dietary preferences, restrictions, or allergies (when voluntarily provided)
• Special instructions or customization requests
• Favorite items or saved orders
• Delivery preferences and instructions

3.4 Usage and Behavioral Data

When you visit our website or use our online services, we automatically collect certain technical and usage information, including:

• Pages viewed and time spent on each page
• Links clicked and features used
• Search queries entered on our website
• Items added to cart or wishlist
• Referral URLs (the website that directed you to ours)
• Exit pages and navigation paths
• Session duration and frequency of visits

3.5 Device and Technical Information

We collect information about the devices and technology you use to access our services, including:

• IP address and approximate geographic location
• Device type (smartphone, tablet, desktop, etc.)
• Operating system and version
• Browser type and version
• Device identifiers and hardware specifications
• Network information and internet service provider
• Screen resolution and display settings

3.6 Location Information

With your consent, we may collect precise or approximate location data to:

• Facilitate food delivery to your location
• Show you nearby restaurant locations or pickup points
• Provide location-based promotions or offers
• Estimate delivery times accurately

3.7 Communications and Feedback

When you contact us directly or engage with our customer service, we collect:

• The content of your messages, emails, or chat communications
• Customer reviews, ratings, and feedback you submit
• Survey responses
• Complaint details and resolution records
• Social media comments and interactions

3.8 Cookies and Tracking Technologies

We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about your browsing behavior. Please see Section 9 of this Privacy Policy for detailed information about our cookie practices.

3.9 Information from Third Parties

We may receive information about you from third-party sources, including:

• Food delivery platforms and aggregator services
• Social media platforms (if you connect your account or interact with our social media pages)
• Marketing and analytics partners
• Publicly available databases
• Fraud prevention and identity verification services

4. How We Use Your Information

We use the personal information we collect for the following purposes:

4.1 Service Provision and Order Fulfillment

• Processing and fulfilling your food orders
• Managing your account and profile
• Coordinating delivery or pickup logistics
• Sending order confirmations, receipts, and status updates
• Handling returns, refunds, or order modifications
• Providing customer support and resolving disputes

4.2 Analytics and Service Improvement

• Analyzing usage patterns to improve our website and app functionality
• Understanding customer preferences to enhance our menu offerings
• Conducting market research and business analytics
• Monitoring website performance and identifying technical issues
• Developing new features, products, and services
• Measuring the effectiveness of our marketing campaigns

4.3 Marketing and Promotional Communications

With your consent or where permitted by applicable law, we may use your information to:

• Send promotional emails, newsletters, or text messages about special offers and new menu items
• Display personalized advertisements on our website or third-party platforms
• Notify you about loyalty program benefits, rewards, and promotions
• Invite you to participate in surveys, contests, or special events
• Deliver targeted marketing based on your order history and preferences

You may opt out of marketing communications at any time by following the unsubscribe instructions in our emails or by contacting us directly at [email protected].

4.4 Legal and Compliance Purposes

• Complying with applicable federal and state laws and regulations
• Enforcing our Terms of Service and other agreements
• Preventing and detecting fraud, abuse, or security threats
• Responding to legal requests, court orders, or government inquiries
• Protecting the rights, property, and safety of our business, customers, and third parties

4.5 Personalization

• Remembering your preferences and settings for a more convenient experience
• Recommending menu items based on your previous orders
• Customizing the content and offers you see on our website

5. Legal Bases for Processing (Applicable Law)

As a food business operating in the United States, we process your personal information in compliance with applicable federal and state laws, including:

• Federal Trade Commission Act (FTC Act): We adhere to fair information practices and do not engage in unfair or deceptive practices regarding the collection and use of consumer data.
• California Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA): If you are a California resident, you have specific rights regarding your personal information. Please see Section 11 for details about your California privacy rights.
• CAN-SPAM Act: We comply with the requirements for commercial email communications.
• Children's Online Privacy Protection Act (COPPA): We do not knowingly collect personal information from children under 13 years of age.
• Other applicable state and local privacy and consumer protection laws.

6. Sharing Your Information with Third Parties

We do not sell your personal information to third parties for their own marketing purposes. However, we may share your information in the following circumstances:

6.1 Service Providers and Business Partners

We engage trusted third-party service providers who assist us in operating our business and delivering services to you. These providers are contractually obligated to protect your information and may only use it for the specific purposes for which they are engaged. Such providers may include:

• Payment Processors: To securely process credit card and other payment transactions
• Delivery Partners: Third-party delivery companies or logistics providers who fulfill your food orders
• Cloud Hosting Providers: Companies that host our website and data infrastructure
• Email Marketing Platforms: Services that help us send newsletters and promotional communications
• Analytics Providers: Services such as Google Analytics that help us understand how our website is used
• Customer Support Tools: Platforms used to manage customer service inquiries
• Fraud Prevention Services: Companies that help us detect and prevent fraudulent activity

6.2 Legal Requirements and Law Enforcement

We may disclose your personal information when we believe in good faith that disclosure is necessary to:

• Comply with a legal obligation, court order, subpoena, or government request
• Protect and defend our legal rights and interests
• Investigate potential violations of our Terms of Service
• Protect the safety and security of our users, employees, or the public
• Prevent or address fraud, security breaches, or technical issues

6.3 Business Transfers

In the event that Dions undergoes a merger, acquisition, reorganization, sale of assets, or bankruptcy proceeding, your personal information may be transferred as part of that transaction. We will notify you via email or a prominent notice on our website before your personal information is transferred and becomes subject to a different privacy policy.

6.4 With Your Consent

We may share your information with third parties in other cases where we have obtained your explicit consent to do so.

6.5 Aggregated and De-Identified Data

We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you with third parties for industry research, analytics, marketing, or other business purposes.

7. Data Security Measures

We take the security of your personal information seriously and implement a variety of technical, administrative, and physical safeguards designed to protect your data from unauthorized access, use, disclosure, alteration, or destruction.

7.1 Technical Safeguards

• SSL/TLS Encryption: All data transmitted between your browser and our website is encrypted using Secure Sockets Layer (SSL) / Transport Layer Security (TLS) protocols.
• Encrypted Data Storage: Sensitive personal data is encrypted at rest using industry-standard encryption algorithms.
• Firewalls and Intrusion Detection: We use firewalls, intrusion detection systems, and other network security tools to protect our infrastructure.
• Access Controls: Access to personal data is restricted to authorized personnel on a need-to-know basis, with multi-factor authentication required for administrative access.
• Regular Security Audits: We conduct periodic security assessments and vulnerability testing of our systems.

7.2 Administrative Safeguards

• Employee privacy and security training programs
• Strict data handling policies and procedures
• Confidentiality agreements with employees and contractors
• Incident response plans for potential data breaches

7.3 Data Breach Notification

In the event of a data breach that affects your personal information, we will notify you and applicable regulatory authorities as required by law. We will provide timely notification and take appropriate steps to mitigate any harm resulting from such an incident.

8. Your Privacy Rights

Depending on your location and applicable law, you may have the following rights regarding your personal information:

8.1 Right to Access

You have the right to request confirmation of whether we process your personal information and, if so, to receive a copy of the personal information we hold about you, along with information about how we use it.

8.2 Right to Correction

You have the right to request that we correct any inaccurate or incomplete personal information we hold about you. You may also update your information directly through your account settings on our website.

8.3 Right to Deletion

You have the right to request that we delete your personal information. We will honor such requests unless we are required to retain the information for legal, regulatory, or legitimate business purposes, such as maintaining transaction records for tax compliance or resolving outstanding disputes.

8.4 Right to Data Portability

You have the right to receive a copy of your personal information in a structured, commonly used, machine-readable format, and to request that we transmit that data to another organization where technically feasible.

8.5 Right to Opt Out of Marketing

You have the right to opt out of receiving marketing communications from us at any time. You can exercise this right by:

• Clicking the "Unsubscribe" link in any marketing email we send
• Replying "STOP" to any marketing text message
• Contacting us directly at [email protected]
• Adjusting your communication preferences in your account settings

8.6 Right to Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights. We will not deny you services, charge you different prices, or provide you a lower quality of service because you exercised your privacy rights.

8.7 How to Submit a Privacy Rights Request

To exercise any of the rights described above, please submit a request to us by:

• Email: [email protected]
• Website: dionshot.rest

We will verify your identity before processing your request to ensure the security of your personal information. We aim to respond to all legitimate privacy rights requests within 45 days of receipt. If we require additional time, we will notify you of the extension and the reason for the delay.

9. Cookie Policy

Our website uses cookies and similar tracking technologies to enhance your browsing experience and provide you with a personalized service.

9.1 What Are Cookies?

Cookies are small text files that are placed on your device when you visit a website. They allow websites to recognize your device and remember certain information about your visit, such as your preferences and login status.

9.2 Types of Cookies We Use

9.3 Managing Your Cookie Preferences

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies or delete existing cookies. However, please note that disabling certain cookies may affect the functionality of our website and your ability to place orders or use certain features.

For more detailed information about our cookie practices and how to manage your preferences, please refer to our full Cookie Policy available on our website.

10. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

When your personal information is no longer needed, we will securely delete or anonymize it in accordance with our data retention procedures.

11. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). This section supplements the rest of this Privacy Policy and applies specifically to California residents.

11.1 Categories of Personal Information Collected

In the past 12 months, we have collected the following categories of personal information as defined by the CCPA:

• Identifiers (name, email address, phone number, IP address)
• Personal information categories listed in California Civil Code Section 1798.80(e)
• Internet or electronic network activity information
• Geolocation data
• Commercial information (purchase history, order records)
• Inferences drawn from the above to create a consumer profile

11.2 Your California Privacy Rights

As a California resident, you have the right to:

• Know: Request information about the categories and specific pieces of personal information we have collected about you
• Delete: Request deletion of your personal information, subject to certain exceptions
• Correct: Request correction of inaccurate personal information
• Opt Out of Sale or Sharing: We do not sell your personal information. However, we may share certain information with advertising partners. You may opt out of such sharing.
• Limit Use of Sensitive Personal Information: Request that we limit the use of your sensitive personal information to purposes necessary for providing our services
• Non-Discrimination: Not be discriminated against for exercising your CCPA rights

11.3 Submitting a California Privacy Rights Request

California residents may submit privacy rights requests by contacting us at [email protected]. You may also designate an authorized agent to submit requests on your behalf. We will verify the identity of the requesting party before processing any request.

We do not respond to Do Not Track (DNT) signals at this time, as there is no industry-wide standard for DNT compliance. However, California residents may opt out of certain tracking activities as described in this Privacy Policy.

12. Children's Privacy

Our website and services are intended for use by individuals who are 18 years of age or older. We do not knowingly collect, use, or disclose personal information from children under the age of 13, or in certain contexts, under the age of 18.

If you are under 18 years of age, you are not permitted to create an account, place orders, or otherwise provide personal information through our website or services. We encourage parents and guardians to monitor their children's internet usage and to help enforce this policy by instructing their children not to provide personal information through our services without parental permission.

If we become aware that we have inadvertently collected personal information from a child under the age of 13 without verifiable parental consent, we will take prompt steps to delete such information from our records. If you believe we may have collected information from a child in violation of this policy, please contact us immediately at [email protected].

13. International Data Transfers

Dions is a United States-based business, and your personal information is primarily collected, stored, and processed within the United States. If you are accessing our services from outside the United States, please be aware that your information may be transferred to, stored in, and processed in the United States, where data protection laws may differ from those in your country of residence.

By using our website or services, you consent to the transfer of your personal information to the United States and its processing in accordance with this Privacy Policy. We take appropriate safeguards to ensure that your personal information remains protected in accordance with this Privacy Policy regardless of where it is processed.

If you are located in a jurisdiction with specific data transfer requirements (such as the European Economic Area), please contact us at [email protected] for more information about the safeguards we have in place.

14. How to File a Privacy Complaint

If you have concerns about our privacy practices or believe that we have not complied with this Privacy Policy or applicable privacy laws, we encourage you to contact us first so that we may attempt to resolve the issue.

14.1 Contact Us Directly

Please send your complaint or concern to:

• Email: [email protected]
• Website: dionshot.rest

We will acknowledge receipt of your complaint within 5 business days and aim to resolve the matter within 30 days.

14.2 Filing a Complaint with a Regulatory Authority

If you are not satisfied with our response, or if you believe your privacy rights have been violated, you may file a complaint with the following authorities:

15. Contact Information for Privacy Inquiries

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact us:

Our privacy team is dedicated to responding to all legitimate privacy inquiries promptly and thoroughly. When contacting us, please provide sufficient detail about your inquiry or request to help us assist you effectively. We may need to verify your identity before processing certain types of requests.

16. Third-Party Links and Services

Our website may contain links to third-party websites, applications, or services, including food delivery aggregators, social media platforms, and payment portals. These third-party services have their own privacy policies and data collection practices, which are independent of ours.

We are not responsible for the privacy practices or content of any third-party websites or services. We encourage you to review the privacy policies of any third-party services you access through links on our website before providing any personal information to them.

17. Do Not Track Signals

Some browsers include a "Do Not Track" (DNT) feature that signals to websites that you do not want to have your online activities tracked. At this time, our website does not respond to DNT signals because there is no industry consensus on how to interpret or respond to these signals. We will continue to monitor developments in this area and update our practices if a standardized approach is established.

18. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or the services we offer. When we make material changes to this Privacy Policy, we will:

• Update the "Last Updated" date at the top of this Privacy Policy
• Post a prominent notice on our website informing users of the change
• Send an email notification to registered users where the changes are material and significant

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information. Your continued use of our website or services after any changes to this Privacy Policy constitutes your acceptance of the revised policy.

19. Accessibility

We are committed to making this Privacy Policy accessible and easy to understand. If you require this Privacy Policy in an alternative format due to a disability or other accessibility need, please contact us at [email protected] and we will do our best to accommodate your request.