Privacy Policy

• Identifiers such as a real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol (IP) address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers.
  ‍
• Physical characteristics or description, passport number, state identification card number, insurance policy number, education, employment or employment history, bank account number, credit or debit card number, any other financial information, medical information, or health insurance information.
  ‍
• Characteristics of protected classifications under federal law, such as race, religious creed, color, national origin, ancestry, physical or mental disability, medical condition, marital status, sex, age, sexual orientation.
  ‍
• Commercial information, including records of personal property, products or services purchased, obtained, or considered, or other purchasing or consumer histories or tendencies.
  ‍
• Biometric information
  ‍
• Internet or other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an internet website, application, or advertisement.
  ‍
• Geolocation data
  ‍
• Audio, electronic, visual, thermal, olfactory, or similar information.
  ‍
• Professional or employment-related information.
  ‍
• Education information, defined as information that is not publicly available personally indefinable information as defined in the Family Educational Rights and Privacy Act (20 USC section 1232g, 34 CFR, Part 99).
  ‍
• Inferences drawn from any of the information identified in this subdivision to create a profile about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.
  ‍

Personal Information does not include publicly available information or lawfully obtained truthful information that is a matter of public concern.  For purposes of this paragraph, “publicly available” means: information that is lawfully made available from federal, state, or local government records, or information that a business has a reasonable basis to believe is lawfully made available to the general public by the consumer or from widely distributed media, or by the consumer; or information made available by a person to whom the consumer has disclosed the information if the consumer has not restricted the information to a specific audience. “Publicly available” does not mean biometric information collected by a business about a consumer without the consumer’s knowledge.

“Sale” or “sell” means selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, a consumer’s personal information by the business to a third party for monetary or other valuable consideration.

“Sensitive personal information” means: (1) personal information that reveals (A) a consumer’s social security, driver’s license, state identification card, or passport number; (B) a consumer’s account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account; (C) a consumer’s precise geolocation; (D) a consumer’s racial or ethnic origin, religious or philosophical beliefs, or union membership; (E) the contents of a consumer’s mail, email and text messages, unless the business is the intended recipient of the communication; (F) a consumer’s genetic data; and(2)(A) the processing of biometric information for the purpose of uniquely identifying a consumer; (B) personal information collected and analyzed concerning a consumer’s health; or (C) personal information collected and analyzed concerning a consumer’s sex life or sexual orientation.  Sensitive personal information that is “publicly available” is not considered sensitive personal information or personal information.

“Service Provider”  means a person that processes personal information on behalf of a business and which receives from or on behalf of the business a consumer’s personal information for a business purpose pursuant to a written contract, provided the contract prohibits the person from: (A) selling or sharing the personal information; (B) retaining, using, or disclosing the personal information for any purpose other than for the business purposes specified in the contract for the business, including retaining, using, or disclosing the personal information for a commercial purpose other than the business purposes specified in the contract with the business, or as otherwise permitted by law; (C) retaining, using, or disclosing the information outside of the direct business relationship between the service provider and the business; and (D) combining the personal information which the service provider receives from or on behalf of the business, with personal information which it receives from or on behalf of another person or persons, or collects from its own interaction with the consumer, provided that the service provider may combine personal information to perform any business purpose permitted by law.

“Share” means sharing, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, a consumer’s personal information by the business to a third party for cross-context behavioral advertising whether or not for monetary or other valuable consideration, including transactions between a business and a third party for cross-context behavioral advertising for the benefit of a business in which no money is exchanged.

“Third Party” means a person which is not any of the following: (1) the business with whom the consumer intentionally interacts and that collects personal information from the consumer as part of the consumer’s current interaction with the business; (2) a service provider to the business; or (3) a contractor.

‍The Personal Information We Collect [and Disclose]

‍We do not collect Sensitive Personal Information. The chart below shows the categories of Personal Information we collect; the types of Personal Information in each category; the types of sources from which each category of Personal Information is collected; the business purpose(s) for which the categories of Personal Information are collected; and all types of third parties with whom that category of Personal Information is disclosed.  As this chart shows, we disclose Personal Information to our service providers for business purposes.  We do not sell or share your personal information, including the personal information of minors under 16years old, and we do not engage in cross-context behavioral advertising.  This information covers the past 12 months.
‍

We will not collect a category of Personal Information not listed above, or use any Personal Information collected in any of the above categories for a business purpose not listed above, without first providing you with notice and an opportunity to exercise your privacy rights.

You have the right to request certain information regarding the Personal Information we have collected about you in the preceding 12 months.  You can request information beyond the 12-month period if it was collected after January 1, 2022.  We will do our best to accommodate such requests if we are reasonably able to do so.  You may make informational requests up to two times in a 12-month span.  Please note that there are circumstances in which we may not be able to comply with your request, including when we cannot verify your request and/or when there is a conflict with our own obligations to comply with other legal or regulatory requirements.  We will notify you following submission of your request if this is the case.

• If you would like to request (1) the categories of Personal Information collected about you; (2) the categories of sources providing that Personal Information;(3) the categories of third parties with whom we have disclosed that Personal Information; and (4) the business purpose for collecting that Personal Information, please review the table above, click here Categories of Information, or call 866-467-8688 (Code 726).  The link will take you to an interactive webform that you can complete and submit to make a request for information that we will then verify; if you use the telephone number, you will be guided through a process that will allow you to submit a verifiable request.
• If you would like to request the specific pieces of Personal Information we collected about you, please review the table above, click here Specific Pieces of Information, or call 866-467-8688 (Code 726).  The link will take you to an interactive webform that you can complete and submit to make a request for information that we will then verify; if you use the telephone number, you will be guided through a process that will allow you to submit a verifiable request.
• If you would like to request (1) the categories of Personal Information collected about you; (2) the categories of Personal Information sold or shared; (3) the categories of third parties to whom the information was sold or shared; and (4) the categories of Personal Information that were disclosed for a business purpose, please review the table above, click here Categories of Information, or call 866-467-8688 (Code 726). The link will take you to an interactive webform that you can complete and submit to make a request for information that we will then verify; if you use the telephone number, you will be guided through a process that will allow you to submit a verifiable request. Please remember, we do not sell or share your personal information.

You also have the right to ask us to correct any incorrect personal information we possess.

• If you would like to request a correction to any incorrect personal information of yours which we possess, click here Correction of Information, or call 866-467-8688 (Code 726).  The link will take you to an interactive webform that you can complete and submit to make a correction request that we will then verify; if you use the telephone number, you will be guided through a process that will allow you to submit a verifiable correction request.
  ‍

Verification Process 
‍
If you request the categories of Personal Information we have collected about you, including the categories of sources of this data, the purpose behind the collection, the categories of third parties which we have sold (again, we do not sell your information), shared (we do not share your information), or disclosed for a business purpose, and the business purpose for these disclosures, the verification process is as follows:

1. If you have a loyalty app account, we will ask you to verify your request through the app after you submit the request through an interactive webpage.
2. We will also ask you to provide your email address, name, phone number, and city and state of the Pita Pit restaurant you most frequently visit.  You will be prompted to provide this information when you submit a request through our website or through our toll-free number.  We will then attempt to match two of those data points with information we already have on file.
3. If we cannot verify your request, the scope of your request may be altered, or the request may be denied entirely.

If you request the specific pieces of Personal Information we have collected about you, the verification process is as follows:

1. If you have a loyalty app account, we will ask you to verify your request through the app after you submit the request through an interactive webpage.
2. We will also ask you to provide your email address, name, phone number, and city and state of the Pita Pit restaurant you most frequently visit.  You will be prompted to provide this information when you submit a request through our website or through our toll-free number.  We will then attempt to match three data points with information we already have on file.
3. If you do not verify your request through an existing loyalty app account, you will also be asked to sign a declaration attesting that you are the person whose information is the subject of the request.  
4. If we cannot verify your request, the scope of your request may be altered, or the request may be denied entirely.

We do not sell or share your personal information so there is no related verification process or other related steps allowing us to safely identify your specific information that is the subject of such a request, reasonably protect against fraud, and so we can follow up with you after your request has been processed.

If you make a request to correct your personal information which we possess, the verification process is as follows:

1. If you have a loyalty app account, we will ask you to verify your request through the app after you submit the request through an interactive webpage.
2. We will also ask you to provide your email address, name, phone number, and city and state of the Pita Pit restaurant you most frequently visit.  You will be prompted to provide this information when you submit a request through our website or through our toll-free number.  We will then attempt to match two or three data points with information we already have on file.
3. After you submit your request, we will contact you through your email address either tied to your loyalty account or that you submitted through the webpage or tollfree number.  To finalize your request to correct your information, you must respond to that communication and confirm you want your information changed as specified in the request form.  If you do not respond to our message, depending on the sensitivity of the information, we may not be able to comply with your request.
4. If we cannot verify your request, the scope of your request may be altered, or the request may be denied entirely.

Non-Discrimination and Financial Incentives

‍We will not discriminate against you if you exercise any of the rights provided by this Privacy Policy. Please note that a legitimate denial of a request for information, deletion, correction, or to opt-out is not discriminatory, nor is charging a fee for excessive or repetitive consumer requests as permitted by applicable law. 

We provide financial incentives to consumers who allow us to retain and disclose their Personal Information, including the following categories: unique identifier information which includes your name, gender (if you choose to provide it), address, phone number, email address, Pita Pit account name, IP address, date of birth, and purchase history.  These incentives may include payments to consumers (e.g., free food), and a lower price for goods or services (e.g., discounts).

The incentives we provide are as follows:

• Spend based incentives, where you earn credit based upon spend levels
• Discounts and free products offered for frequent visitors
• Periodic promotional discounts and offers
• The following categories of personal information implicated are as follows: unique identifiers, purchase history, and protected class information (i.e., your gender IF you choose to provide that information).
• You may withdraw from the incentive at any time. If you have previously opted-in to the incentive below and wish to opt-out, click here Deletion of Information, or deactivate your account by uninstalling the loyalty app.  You can use the standard uninstall processes available through your mobile device or through the mobile application marketplace or network.

Our loyalty program provides participating consumers with a five-dollar ($5) credit for every ninety dollars ($90) spent.  After you make at least one purchase of six dollars ($6) or more in the preceding year, the program also provides a yearly free birthday pita – an estimated twelve-dollar ($12) value per year, to each participating loyalty program participant.  You can sign up for our loyalty program by downloading the Pita Pit® app, which is accessible through our website, the Apple App Store, or Google Play.  You may withdraw from the loyalty program at any time by simply uninstalling the app or by requesting that we delete your information. 

The financial incentive provided by our loyalty program is permissible because the information you are allowing us to keep is valuable to us.  We estimate the value at five dollars for every ninety dollars ($90) you spend, as well as the twelve-dollar ($12) value of the annual free birthday pita.   

‍Deletion of Your Personal Information
‍
‍You have the right to request that we delete certain Personal Information that we have collected. Please note that there are circumstances in which we may not be able to comply with your request pursuant to applicable law or circumstances, including when we cannot verify your request and/or when there is a conflict with our own obligations to comply with other legal or regulatory requirements. We will notify you following submission of your request if this is the case.

• If you would like to request that we delete your Personal Information, click here Deletion of Information, or call 866-467-8688 (Code 726).  The link will take you to an interactive webform that you can complete and submit to make a request for deletion that we will then verify; if you use the telephone number, you will be guided through a process that will allow you to submit a verifiable request.

Personal Information of Minors 
‍
‍We do not sell or share the Personal Information of any ofour consumers, including minors who are at least 13 years old and less than 16 years old.

‍Right to Opt-Out  

‍We do not sell or share the Personal Information we have collected about you.  Though if we ever elect to do so in the future, we will make sure you receive advance notice, and provide you with the right to request that we do sell or share your Personal Information before doing so.  Thereafter, we will also provide you with the ongoing right to opt-in to the sale and sharing of your Personal Information after you have opted out.   

‍Authorized Agents (California Residents Only)

‍ California residents may designate an authorized agent to exercise their rights under this Privacy Policy provided:  

• Only a business entity or natural person registered with the California Secretary of State may act as an authorized agent.
• You must provide the authorized agent written permission to exercise your rights.
• We may deny a request from an authorized agent on your behalf if the authorized agent does not submit proof that he, she, or it has been authorized by you to act on your behalf if we request such proof.
• Even if you use an authorized agent to exercise your rights, we may still require that you verify your own identity directly to us.  This provision does not apply if you have provided the authorized agent with a power of attorney under California Probate Code sections 4000 to 4465.

Additional California Privacy Rights

‍California Civil Code Section § 1798.83 permits users of our website that are California residents to request certain information regarding our disclosure of personal information to other parties for their direct marketing purposes. To make such a request, please send an email to ccpa@pitapitusa.com with the subject “Shine the Light Request.”

Changes to Our Privacy Policy
‍
Pita Pit Inc. reserves the right to amend this Privacy Policy at our discretion and at any time. When this happens, we will also update the “Last Revised” date at the top of this Privacy Policy.