Privacy Policy

At Dions, we are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website delivery-dions.rest, place orders through our online platform, or otherwise interact with our food delivery services. Please read this policy carefully. If you disagree with its terms, please discontinue use of our site.

We take your privacy seriously. This document is designed to help you understand exactly what happens to your personal data, your rights under applicable United States privacy laws, and how you can contact us with questions or concerns. By accessing or using our services, you acknowledge that you have read, understood, and agree to be bound by all the terms of this Privacy Policy.

1. Who We Are

Dions is a food service and online delivery business operating in the United States. We provide online food ordering and delivery services through our website and associated digital platforms.

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at the details listed above or in the Contact Us section at the end of this document.

2. Information We Collect

We collect several different types of information in connection with the services we provide. The categories of information we may collect include the following:

2.1 Personal Identification Information

When you create an account, place an order, or contact us directly, we may collect personally identifiable information including, but not limited to:

• Full name
• Email address
• Phone number
• Delivery address (street address, city, state, ZIP code)
• Billing address
• Date of birth (where required for age verification)
• Username and password (encrypted)
• Profile photo (if voluntarily provided)
• Dietary preferences or food allergy information (if voluntarily provided)

2.2 Payment and Financial Information

To process your orders, we collect payment-related information. We use industry-standard third-party payment processors and do not store your full credit or debit card details on our own servers. We may collect and store the following limited payment information:

• Last four digits of your credit or debit card
• Card type (Visa, Mastercard, etc.)
• Billing ZIP code
• Transaction IDs and order confirmation numbers
• PayPal or other digital wallet identifiers

Full payment card details are handled exclusively by our PCI-DSS-compliant payment processors. Please refer to the relevant processor's privacy policy for information on how they handle your financial data.

2.3 Order and Transaction Data

We collect and store information related to your orders and interactions with our food service platform, including:

• Items ordered and customizations requested
• Order date, time, and frequency
• Order history and past purchases
• Special instructions or notes
• Feedback, ratings, and reviews you submit
• Loyalty points or promotional code usage

2.4 Usage and Technical Data

When you visit our website, we automatically collect certain technical information about your device and how you interact with our platform. This includes:

• IP address
• Browser type and version
• Operating system and device type
• Referring website URLs
• Pages visited on our website
• Time and date of your visit
• Time spent on individual pages
• Links clicked within our site
• Search queries made on our platform
• Geographic location data (city/region level, derived from IP address)

2.5 Communications Data

When you contact our customer support team, submit feedback, or communicate with us through any channel, we may retain records of those communications, including:

• Email correspondence
• Live chat transcripts
• Phone call records (where permitted by law and with appropriate notice)
• Social media messages directed to us

2.6 Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies (such as web beacons, pixels, and local storage) to enhance your experience. Please see Section 8 of this policy for detailed information about our cookie practices. You may also refer to our dedicated Cookie Policy available on our website.

2.7 Information from Third Parties

We may receive information about you from third parties in certain circumstances, including:

• Social media platforms if you choose to link your account or log in via social media
• Payment processors providing transaction confirmation data
• Analytics providers enriching our usage data
• Marketing partners and advertising networks
• Delivery partners who fulfill your orders

3. How We Use Your Information

We use the information we collect for a variety of legitimate business purposes, all aimed at providing you with the best possible food ordering and delivery experience. Specifically, we use your information to:

3.1 Provide and Manage Our Services

• Process, fulfill, and track your food orders
• Create and manage your user account
• Facilitate payment processing through our third-party payment partners
• Coordinate delivery logistics and communicate estimated delivery times
• Provide customer support and respond to your inquiries
• Send order confirmations, receipts, and service-related notifications
• Handle returns, refunds, and complaints

3.2 Improve and Personalize Our Platform

• Analyze website usage data to improve site functionality and user experience
• Personalize your experience by showing relevant menu items, promotions, and recommendations based on your order history
• Conduct internal research and analytics to understand customer behavior
• Test new features, layouts, and service improvements
• Detect and fix bugs or technical issues

3.3 Marketing and Communications

• Send you promotional emails, newsletters, and special offers (where you have consented or where permitted by applicable law)
• Notify you of new menu items, seasonal specials, or limited-time promotions
• Run targeted advertising campaigns on third-party platforms based on aggregated interest data
• Administer contests, loyalty programs, surveys, and other promotions

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any promotional email or by contacting us at [email protected]. Please note that even after opting out of marketing communications, you will still receive transactional and service-related messages.

3.4 Legal Compliance and Safety

• Comply with applicable federal and state laws and regulations
• Respond to lawful requests from government authorities, courts, or law enforcement agencies
• Detect, investigate, and prevent fraud, unauthorized access, and other illegal activities
• Enforce our Terms of Service and other agreements
• Protect the rights, property, and safety of Dions, our customers, employees, and the public

3.5 Business Operations

• Maintain financial and operational records
• Manage our relationships with suppliers, delivery partners, and other vendors
• Plan and execute business strategies, including potential mergers or acquisitions

4. Sharing of Your Information with Third Parties

We do not sell, trade, or rent your personal information to third parties for their own marketing purposes. However, we may share your information with trusted third parties in the following circumstances:

4.1 Service Providers and Business Partners

We work with a range of third-party companies that assist us in operating our website and delivering our services. These service providers are granted access to your personal information only to the extent necessary to perform their designated functions and are contractually obligated to keep your information confidential and secure. Service providers may include:

• Payment Processors: Companies that securely handle credit card transactions and digital payments
• Delivery Partners: Third-party couriers or delivery services who fulfill your orders and require your name, delivery address, and phone number
• Cloud Hosting Providers: Companies that host and maintain our website infrastructure and databases
• Email Service Providers: Platforms used to send transactional and marketing emails
• Customer Support Tools: Software platforms used to manage customer service inquiries
• Analytics Providers: Companies such as Google Analytics that help us understand website traffic and user behavior
• Marketing and Advertising Platforms: Companies that help us serve targeted advertisements

4.2 Legal Requirements and Law Enforcement

We may disclose your personal information when we are required to do so by law, or when we believe in good faith that disclosure is necessary to:

• Comply with a court order, subpoena, or other legal process
• Respond to requests from governmental or regulatory authorities
• Investigate, prevent, or take action regarding illegal activities or suspected fraud
• Enforce our agreements and protect the legal rights of Dions
• Protect the safety and security of our users or the general public

4.3 Business Transfers

In the event that Dions undergoes a merger, acquisition, asset sale, reorganization, or bankruptcy, your personal information may be transferred to the relevant successor entity. We will provide notice before your personal data is transferred and becomes subject to a different privacy policy.

4.4 Aggregated and De-identified Data

We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you with third parties for research, marketing, analytics, or other business purposes.

4.5 With Your Consent

We may share your personal information with other third parties where you have provided explicit consent to such sharing.

5. Data Security

We take the security of your personal information seriously and implement a range of technical, administrative, and physical measures designed to protect your data from unauthorized access, disclosure, alteration, or destruction.

5.1 Security Measures We Use

• Encryption: We use Secure Socket Layer (SSL) / Transport Layer Security (TLS) encryption to protect data transmitted between your browser and our servers.
• Access Controls: Access to personal data is restricted to authorized personnel only, on a need-to-know basis. All staff with access to personal data are subject to confidentiality obligations.
• Secure Payment Processing: Payment card information is handled by PCI-DSS-compliant third-party payment processors. We do not store full card numbers on our systems.
• Password Security: Passwords are stored in hashed and salted format using industry-standard cryptographic algorithms.
• Regular Security Assessments: We conduct periodic security reviews and vulnerability assessments of our systems.
• Data Minimization: We collect only the information necessary to provide our services and limit access accordingly.
• Incident Response: We maintain a data breach response plan to promptly address any security incidents and notify affected users and authorities as required by law.

5.2 Limitations of Security

While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security of your data. You are also responsible for maintaining the confidentiality of your account credentials and for any activities that occur under your account.

If you suspect any unauthorized access to your account or believe your data has been compromised, please contact us immediately at [email protected].

6. Your Privacy Rights

Depending on your state of residence within the United States, you may have certain rights regarding your personal information. We are committed to honoring these rights to the extent required by applicable law.

6.1 Rights Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA)

If you are a California resident, you have the following rights under the CCPA and CPRA:

6.2 General Privacy Rights (All Users)

Regardless of your state of residence, we offer all users the following rights and options:

• Access: You may request a copy of the personal information we hold about you by logging into your account or contacting us directly.
• Correction: You may update or correct inaccurate personal information through your account settings or by contacting us.
• Deletion: You may request that we delete your account and associated personal data. Please note that we may be required to retain certain information for legal, regulatory, or legitimate business purposes.
• Portability: You may request a machine-readable copy of the personal information you have provided to us.
• Objection to Marketing: You may opt out of receiving marketing communications at any time.
• Withdraw Consent: Where our processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

6.3 How to Exercise Your Rights

To exercise any of the rights described above, please submit a verifiable consumer request by:

• Emailing us at: [email protected]
• Visiting our website at: delivery-dions.rest

We will respond to verifiable consumer requests within 45 days of receipt. If we require more time (up to an additional 45 days), we will inform you of the reason and extension period in writing. We do not charge a fee for processing verifiable consumer requests unless the request is manifestly unfounded or excessive.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

7.1 Retention Periods

When personal data is no longer required for the purposes for which it was collected, we will securely delete or anonymize it in accordance with our internal data retention and destruction procedures.

8. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to provide a better browsing and ordering experience, analyze website traffic, and support our marketing activities.

8.1 What Are Cookies?

Cookies are small text files placed on your device (computer, smartphone, or tablet) when you visit a website. They allow the website to recognize your device and remember certain information about your preferences and past actions.

8.2 Types of Cookies We Use

• Essential / Strictly Necessary Cookies: These cookies are required for the website to function properly, including maintaining your session, managing your shopping cart, and processing orders. These cannot be disabled without affecting core site functionality.
• Performance and Analytics Cookies: These cookies help us understand how visitors use our website (e.g., which pages are visited most frequently, how long users spend on pages). We use tools like Google Analytics for this purpose.
• Functionality Cookies: These cookies allow us to remember your preferences (such as your location for delivery, language settings, and past order preferences) to provide a more personalized experience.
• Marketing and Advertising Cookies: These cookies are used to deliver advertisements that are relevant to you and your interests, and to track the effectiveness of our marketing campaigns across third-party websites.

8.3 Managing Your Cookie Preferences

You can manage or disable cookies through your browser settings at any time. Most browsers allow you to refuse cookies or delete existing cookies. Please note that disabling certain cookies may affect the functionality of our website and your ability to use some of our services. For more detailed information about cookies and how to manage them, please visit www.allaboutcookies.org.

For a complete description of the cookies we use and detailed guidance on managing your preferences, please refer to our Cookie Policy available on our website.

9. Children's Privacy

Our food delivery services and website are intended for use by individuals who are 18 years of age or older. We do not knowingly collect, solicit, or process personal information from individuals under the age of 18.

In compliance with the Children's Online Privacy Protection Act (COPPA) and other applicable laws, if we become aware that we have inadvertently collected personal information from a child under the age of 13, we will take immediate steps to delete that information from our records.

If you are a parent or guardian and believe that your child under the age of 18 has provided us with personal information without your consent, please contact us immediately at [email protected]. We will investigate and take appropriate action, including deletion of the relevant data.

By using our website and services, you represent and warrant that you are at least 18 years of age.

10. International Data Transfers

Dions is based in the United States and primarily operates within the United States. However, some of the third-party service providers we use (such as cloud hosting companies, analytics providers, and email platforms) may store or process data in servers located outside the United States.

If your personal information is transferred to or processed in countries outside the United States, we take steps to ensure that appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable law. These safeguards may include:

• Entering into data processing agreements with service providers that incorporate standard contractual protections
• Ensuring service providers adhere to recognized privacy frameworks
• Verifying that receiving countries provide an adequate level of data protection

By using our services, you acknowledge and consent to the potential transfer of your personal information to countries outside your country of residence, including countries that may not provide the same level of data protection as your home country.

11. Third-Party Websites and Links

Our website may contain links to third-party websites, applications, or services that are not operated by Dions. These may include social media platforms, payment processors, or partner websites. Please be aware that we have no control over the content or privacy practices of these third-party sites.

We encourage you to review the privacy policies of any third-party websites you visit. The inclusion of a link to a third-party website does not imply our endorsement of that site or its privacy practices. Dions is not responsible for the privacy practices of third-party websites.

12. Legal Basis for Processing (FTC Compliance)

In accordance with the Federal Trade Commission Act (FTC Act) and applicable US consumer protection laws, Dions processes your personal information based on the following lawful grounds:

• Contractual Necessity: Processing necessary to fulfill your orders and provide our food delivery services under our contract (or pre-contractual steps) with you.
• Legal Obligation: Processing necessary to comply with federal and state laws, including tax obligations, food safety regulations, and other regulatory requirements.
• Legitimate Business Interest: Processing for fraud prevention, security, analytics, and service improvement, where such interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and non-essential cookies where you have provided your explicit consent. You may withdraw consent at any time.

We are committed to the FTC's principles of transparency, fairness, and non-deception in all our data practices. We will not use deceptive or unfair practices in relation to the collection or use of your personal information.

13. State-Specific Privacy Rights

In addition to California privacy rights described under Section 6, residents of other states may have additional privacy rights under their respective state laws. We are committed to honoring applicable state privacy requirements, including but not limited to:

• Virginia (CDPA): Virginia residents may have rights to access, correct, delete, and opt out of certain processing of personal data.
• Colorado (CPA): Colorado residents may have similar rights to access, correct, delete, and opt out of targeted advertising and the sale of personal data.
• Connecticut (CTDPA): Connecticut residents may have rights related to data access, correction, deletion, portability, and opt-out of sale and targeted advertising.
• Texas (TDPSA): Texas residents may have rights to access, correct, delete, and opt out of the sale of personal data and targeted advertising.

To exercise rights under any applicable state privacy law, please contact us using the details provided in Section 15 below. We will respond within the timeframes required by your applicable state law.

14. How to File a Complaint

If you believe that Dions has violated your privacy rights or this Privacy Policy, we encourage you to contact us first so we can attempt to resolve your concern directly and promptly.

14.1 Contact Us Directly

Please send your complaint or concern in writing to:
Email: [email protected]
Website: delivery-dions.rest

We will acknowledge receipt of your complaint within 10 business days and will investigate and respond to your complaint within 30 to 45 days, depending on the complexity of the issue.

14.2 Report to Regulatory Authorities

If you are not satisfied with our response, you may have the right to file a complaint with the relevant regulatory authority. In the United States, relevant authorities include:

15. Contact Us

If you have any questions, concerns, requests, or comments about this Privacy Policy or our data practices, please do not hesitate to reach out to us. We are happy to assist you.

When contacting us regarding a privacy request, please include your full name, email address associated with your account (if applicable), and a clear description of your request so that we can process it efficiently.

16. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our business practices, legal requirements, or service offerings. When we make material changes to this policy, we will notify you by:

• Posting the updated Privacy Policy on our website with a revised "Last Updated" date at the top of this page
• Sending you an email notification to the email address associated with your account (where we have your contact information)
• Displaying a prominent notice on our website for a reasonable period following the change

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website and services after any changes have been posted constitutes your acceptance of the updated Privacy Policy.

If you disagree with any changes to this Privacy Policy, you should stop using our services and may request deletion of your account by contacting us at [email protected].