Privacy Policy

This Privacy Policy explains how Dions ("we," "us," or "our") collects, uses, discloses, and protects your personal information when you visit our website at dionshot.click, place orders, interact with our food services, or otherwise engage with us. We are committed to protecting your privacy and handling your personal data in a transparent, responsible, and lawful manner consistent with applicable United States federal and state privacy laws.

Please read this Privacy Policy carefully. By accessing or using our website, placing an order, or otherwise interacting with our services, you acknowledge that you have read, understood, and agree to be bound by the terms of this Privacy Policy. If you do not agree with the practices described herein, please discontinue use of our website and services immediately.

For any questions, concerns, or requests regarding this Privacy Policy, you may contact us at any time using the contact information provided at the end of this document.

1. About Us

Dions is a food business operating in the United States. We provide food-related products and services to customers through our website and other channels.

2. Scope of This Privacy Policy

This Privacy Policy applies to all personal information collected by Dions through:

• Our website located at dionshot.click
• Online food ordering and delivery services
• Customer support communications (email, phone, chat)
• Newsletters, promotional emails, and marketing communications
• Loyalty programs or promotional campaigns we may operate
• Any other interactions you may have with us as a customer, visitor, or prospective customer

This policy does not apply to third-party websites, services, or applications that may be linked from our website. We encourage you to review the privacy policies of those third parties independently.

3. Information We Collect

We collect several types of information in connection with our food services and website operations. The categories of personal information we may collect include the following:

3.1 Personal Identification Information

When you create an account, place a food order, or contact us, we may collect:

• Full name
• Email address
• Phone number
• Billing and delivery address (street address, city, state, ZIP code)
• Date of birth (where applicable for age verification or loyalty programs)
• Username and password (for registered accounts)
• Profile photo (if voluntarily uploaded)

3.2 Payment and Transaction Information

To process your food orders and payments, we collect:

• Credit or debit card details (processed securely through our payment processors — we do not store full card numbers)
• Billing address associated with your payment method
• Order history, including items ordered, order value, dates, and transaction IDs
• Refund and dispute history

3.3 Usage and Technical Data

When you visit or use our website, we automatically collect certain technical and usage information, including:

• IP address
• Browser type and version
• Operating system and device type
• Pages visited and time spent on each page
• Referring URLs (how you found our website)
• Clickstream data and navigation behavior
• Date and time of your visit
• Error logs and crash reports

3.4 Location Data

With your permission, or as part of the delivery process, we may collect:

• General geographic location based on your IP address
• Precise delivery location as provided by you during checkout
• GPS location data, if you grant permission through our mobile-compatible website

3.5 Communications and Customer Service Data

When you contact us by email, phone, or through any contact form, we collect:

• Your name and contact details
• The content and substance of your communication
• Records of communications for quality assurance and dispute resolution purposes
• Feedback, reviews, and survey responses

3.6 Cookies and Tracking Technologies

We use cookies, web beacons, pixels, and similar tracking technologies to collect information about your browsing behavior on our website. Please refer to Section 9 of this Privacy Policy for detailed information about our cookie practices.

3.7 Information You Provide Voluntarily

You may voluntarily provide additional information to us, such as:

• Food preferences, dietary restrictions, or allergy information
• Special delivery instructions
• Promotional code usage
• Participation in contests, giveaways, or surveys

4. How We Use Your Information

We use the personal information we collect for the following purposes, all of which are either necessary for the performance of our services, based on your consent, or in pursuit of legitimate business interests:

4.1 Service Provision and Order Fulfillment

• Processing and fulfilling your food orders
• Coordinating delivery or pickup of your orders
• Sending order confirmations, receipts, and status updates
• Managing your customer account and preferences
• Processing payments and issuing refunds

4.2 Customer Support

• Responding to your inquiries, complaints, and support requests
• Investigating and resolving disputes or issues with your orders
• Maintaining records of interactions for training and quality assurance

4.3 Marketing and Promotional Communications

• Sending you promotional offers, discounts, and news about our food offerings (with your consent or where permitted by law)
• Personalizing marketing content based on your order history and preferences
• Conducting surveys and gathering customer feedback
• Running loyalty programs or referral campaigns

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any promotional email or by contacting us directly at [email protected].

4.4 Website Improvement and Analytics

• Analyzing website traffic and user behavior to improve usability and design
• Monitoring and diagnosing technical issues
• Developing new features, menu items, and services based on usage patterns
• Conducting internal research and business analytics

4.5 Legal and Compliance Purposes

• Complying with applicable federal and state laws and regulations
• Responding to legal process, subpoenas, court orders, or government requests
• Preventing fraud, unauthorized use, and other illegal activities
• Enforcing our Terms of Service and other legal agreements
• Protecting the rights, property, and safety of Dions, our customers, and the public

4.6 Food Safety and Allergen Management

• Using dietary restriction and allergy information you provide to ensure appropriate food preparation and labeling
• Maintaining records where required by applicable food safety regulations

5. Legal Basis for Processing (Federal and State Law Compliance)

As a business operating in the United States, our data practices are governed by applicable federal law, including the Federal Trade Commission Act (FTC Act), which prohibits unfair or deceptive practices in connection with the collection and use of consumer data. Where we operate in or serve customers in California, we comply with the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA).

We process your personal information on the following grounds:

• Contractual Necessity: Processing is necessary to fulfill your food orders and deliver services you have requested.
• Consent: Where you have explicitly consented to specific uses, such as marketing communications or the use of non-essential cookies.
• Legitimate Business Interests: Where processing is necessary for our legitimate interests, such as fraud prevention, website analytics, and business improvement, provided those interests are not overridden by your rights.
• Legal Obligation: Where processing is necessary to comply with a legal obligation under federal or applicable state law.

6. Sharing Your Information with Third Parties

We do not sell your personal information to third parties for monetary compensation. However, we may share your information in the following limited circumstances:

6.1 Service Providers and Business Partners

We engage trusted third-party service providers to assist in operating our business. These providers are contractually obligated to use your information only as directed by us and to maintain appropriate security measures. Categories of service providers include:

• Payment Processors: To securely process credit and debit card transactions
• Delivery Partners: To coordinate food delivery to your address
• Email and Communication Platforms: To send order confirmations, marketing emails, and support communications
• Cloud Hosting and Infrastructure Providers: To host our website and store data securely
• Analytics Providers: To analyze website traffic and user behavior (e.g., Google Analytics)
• Customer Support Tools: To manage customer service interactions

6.2 Legal Requirements and Law Enforcement

We may disclose your personal information to government authorities, regulators, or law enforcement agencies when:

• Required by applicable federal or state law
• Responding to a valid subpoena, court order, or legal process
• We believe disclosure is necessary to protect the rights, property, or safety of Dions, our customers, or the public
• Investigating fraud, security breaches, or other illegal activity

6.3 Business Transfers

In the event of a merger, acquisition, sale of assets, or other corporate restructuring involving Dions, your personal information may be transferred to the successor entity as part of that transaction. We will provide notice through our website or by email if such a transfer occurs and your data is subject to a materially different privacy policy.

6.4 With Your Consent

We may share your personal information with other third parties if you have given us explicit consent to do so, for instance when participating in joint promotions or partnerships.

6.5 Aggregated and De-Identified Data

We may share aggregated or de-identified data that cannot reasonably be used to identify you with third parties for research, marketing, analytics, or other business purposes.

7. Your Privacy Rights

Depending on your state of residence and applicable law, you may have certain rights regarding your personal information. We are committed to honoring these rights promptly and transparently.

7.1 Rights Under the California Consumer Privacy Act (CCPA/CPRA)

If you are a California resident, you have the following rights:

7.2 General Privacy Rights for All U.S. Residents

Regardless of your state of residence, we provide the following general privacy rights to all customers:

• Right to Access: You may request a copy of the personal information we hold about you.
• Right to Correction: You may request that we update or correct inaccurate information in your account or records.
• Right to Deletion: You may request that we delete your personal information from our systems, subject to applicable legal retention requirements.
• Right to Data Portability: You may request that we provide your personal information in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Where we process your data based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to Opt-Out of Marketing: You may unsubscribe from promotional communications at any time.

7.3 How to Exercise Your Rights

To submit a privacy rights request, please contact us using one of the following methods:

• Email: [email protected]
• Website: dionshot.click

We will verify your identity before processing your request to protect against unauthorized access. We will respond to verifiable requests within 45 days as required under the CCPA/CPRA, with the possibility of a single 45-day extension where reasonably necessary. There is no fee for making a request unless it is manifestly unfounded, excessive, or repetitive.

8. Data Security

We take the security of your personal information seriously and implement reasonable and appropriate technical, administrative, and physical safeguards designed to protect your data from unauthorized access, disclosure, alteration, or destruction. Our security measures include, but are not limited to:

• Encryption: We use SSL/TLS encryption to protect data transmitted between your browser and our website.
• Secure Payment Processing: Payment card information is processed through PCI-DSS compliant payment processors. We do not store full card numbers on our systems.
• Access Controls: Access to personal data is restricted to authorized personnel with a legitimate need to know, and all staff are trained on data protection practices.
• Firewalls and Intrusion Detection: We use firewalls and security monitoring tools to protect our systems from unauthorized access.
• Regular Security Reviews: We conduct periodic reviews of our data security practices and update them as necessary to address emerging threats.
• Data Minimization: We collect only the personal information necessary for the purposes described in this Privacy Policy.

In the event of a data breach that is likely to result in a risk to the rights and freedoms of individuals, we will notify affected users and relevant authorities as required by applicable federal and state law, including applicable state breach notification laws.

9. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and deliver relevant content. This section provides a summary of our cookie practices.

9.1 What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They allow the website to recognize your device and remember certain information about your visit, such as your preferences and login status.

9.2 Types of Cookies We Use

• Essential Cookies: Necessary for the functioning of our website, including maintaining your shopping cart, enabling secure login, and completing transactions. These cannot be disabled.
• Analytical/Performance Cookies: Used to collect information about how visitors use our website, helping us improve functionality and user experience (e.g., Google Analytics).
• Functional Cookies: Used to remember your preferences and personalize your experience, such as saved delivery addresses or language settings.
• Marketing and Advertising Cookies: Used to deliver relevant promotional content based on your interests and browsing behavior. These are only placed with your consent.

9.3 Managing Your Cookie Preferences

You can manage or disable cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of our website, including the ability to place orders. You may also opt out of Google Analytics data collection by using the Google Analytics Opt-out Browser Add-on.

For more detailed information about the specific cookies we use and how to manage your preferences, please refer to our Cookie Policy available on our website at dionshot.click.

10. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with our legal obligations, resolve disputes, and enforce our agreements. The following general retention periods apply:

When personal information is no longer required, we securely delete or anonymize it in accordance with our data retention procedures. In some cases, we may retain anonymized or aggregated data indefinitely for analytical purposes, where such data can no longer be linked to any individual.

11. Children's Privacy

We do not knowingly collect, solicit, or maintain personal information from minors under 18 years of age. If you are under 18, please do not use our website or submit any personal information to us. If a parent or guardian believes that a child under 18 has provided personal information to us without appropriate consent, please contact us immediately at [email protected]. Upon verification, we will take prompt steps to delete any such information from our systems.

Our practices are consistent with the requirements of the Children's Online Privacy Protection Act (COPPA), which prohibits the collection of personal information from children under 13 without verified parental consent. As our services are directed exclusively at adults aged 18 and over, we maintain a blanket restriction on data collection from minors.

12. International Data Transfers

Dions is a United States-based business and primarily processes and stores personal information within the United States. If you are accessing our website from outside the United States, please be aware that your information may be transferred to, stored in, and processed in the United States, where data protection laws may differ from those in your country of residence.

Where we engage service providers or partners located outside the United States, we take reasonable steps to ensure that appropriate safeguards are in place to protect your personal information, including contractual data protection obligations that are consistent with applicable U.S. law and international data protection standards.

By using our website and services from outside the United States, you acknowledge and consent to the transfer, storage, and processing of your information in the United States as described in this Privacy Policy.

13. Third-Party Links and Services

Our website may contain links to third-party websites, social media platforms, payment gateways, or other external services. These third-party sites operate independently and have their own privacy policies that govern their collection and use of your personal information. Dions is not responsible for the privacy practices of any third-party websites or services, and we encourage you to review their privacy policies before providing any personal information to them.

Our inclusion of third-party links does not constitute an endorsement of those websites or their content, products, or services.

14. Do Not Track Signals

Some browsers include a "Do Not Track" (DNT) feature that signals to websites that you do not want your online activity tracked. At this time, our website does not respond to Do Not Track signals due to the lack of a uniform standard for how such signals should be interpreted. We will continue to monitor developments in this area and update our practices accordingly.

15. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our business practices, applicable law, or technological developments. When we make material changes to this Privacy Policy, we will:

• Update the "Last Updated" date at the top of this page
• Post the revised Privacy Policy on our website at dionshot.click
• Where required by law or where changes are significant, notify you by email or through a prominent notice on our website

Your continued use of our website and services after the effective date of any changes constitutes your acceptance of the revised Privacy Policy. We encourage you to periodically review this page to stay informed about how we are protecting your information.

16. How to File a Complaint

If you have concerns about our privacy practices or believe that we have handled your personal information in a manner inconsistent with this Privacy Policy or applicable law, we encourage you to first contact us directly so that we can address your concerns:

• Email: [email protected]
• Website: dionshot.click

We are committed to resolving privacy complaints promptly and fairly. We will acknowledge receipt of your complaint within 5 business days and aim to resolve it within 30 days, though complex matters may require additional time.

16.1 Regulatory Complaints — Federal Level

If you are not satisfied with our response, you have the right to file a complaint with the Federal Trade Commission (FTC), the primary federal consumer protection agency in the United States:

• FTC Online Complaint Portal: reportfraud.ftc.gov
• FTC Website: www.ftc.gov
• FTC Phone: 1-877-382-4357

16.2 Regulatory Complaints — California Residents

California residents who wish to file a complaint regarding our CCPA/CPRA compliance may contact the California Privacy Protection Agency (CPPA):

• California Privacy Protection Agency: cppa.ca.gov
• California Attorney General: oag.ca.gov/privacy/ccpa

16.3 State-Specific Rights and Regulatory Bodies

Residents of other states with applicable privacy laws may contact their relevant state attorney general's office or designated privacy regulatory authority for guidance on filing a complaint or exercising state-specific privacy rights. We encourage all users to familiarize themselves with the privacy rights available under their state of residence.

17. Contact Us

If you have any questions, requests, or concerns regarding this Privacy Policy, the personal information we hold about you, or your privacy rights, please do not hesitate to contact us. We are dedicated to addressing your inquiries in a timely and transparent manner.

When contacting us regarding a privacy rights request, please include your full name, email address associated with your account (if applicable), and a clear description of your request or concern. This will help us verify your identity and process your request efficiently.