Privacy Policy

Welcome to Dions ("we," "us," "our," or the "Company"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website dions.world, place orders, use our services, or otherwise interact with us. Please read this policy carefully. If you disagree with its terms, please discontinue use of our site and services.

This Privacy Policy applies to all information collected through our website (dions.world), mobile applications, social media pages, and any related services, sales, marketing, or events (collectively referred to as the "Services").

We operate in the United States and comply with applicable federal and state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), and other applicable consumer protection regulations.

1. Who We Are

Dions is a food service business dedicated to providing high-quality culinary experiences to our customers. We operate through our website and digital platforms to offer ordering, delivery, catering, and related food services.

For any privacy-related concerns or questions, you may contact us at any time using the contact details provided above or as outlined in Section 14 of this policy.

2. Information We Collect

We collect various types of information in connection with your use of our Services. The categories of information we collect include, but are not limited to, the following:

2.1 Personal Information You Provide Directly

When you create an account, place an order, subscribe to our newsletter, contact us, or engage with our Services, you may voluntarily provide us with the following personal information:

• Identity Data: Full name, username or similar identifier, date of birth (for age verification purposes)
• Contact Data: Billing address, delivery address, email address, and telephone numbers
• Financial Data: Payment card details (processed securely through third-party payment processors; we do not store full card numbers)
• Transaction Data: Details about orders, purchases, payments you have made, and other details of products or services you have obtained from us
• Account Data: Login credentials, preferences, dietary restrictions, saved orders, and wishlist items
• Communications Data: Messages, feedback, support requests, survey responses, or other communications you send us
• Marketing Preferences: Your preferences regarding receiving marketing communications from us and our third parties

2.2 Information Collected Automatically

When you access or use our website and Services, certain information is collected automatically through cookies, web beacons, pixels, and similar tracking technologies:

• Usage Data: Pages visited, time spent on pages, links clicked, search queries entered, order history browsing, and other actions taken on our platform
• Device Information: IP address, browser type and version, browser language, operating system, device type (desktop, mobile, tablet), unique device identifiers, and screen resolution
• Location Data: General geographic location based on your IP address, or precise geolocation if you grant us permission through your device settings (used for delivery radius and store availability)
• Log Data: Server logs, access timestamps, referring URLs, and error reports
• Cookie Data: Information stored through cookies and similar tracking technologies (see Section 8 for full details)

2.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Social Media Platforms: If you connect or log in using a social media account (e.g., Facebook, Google, Apple), we may receive your name, email address, and profile picture from that platform, subject to your privacy settings
• Payment Processors: Confirmation and transaction status information from our payment partners
• Delivery Partners: Delivery tracking information and logistics data from third-party delivery services we work with
• Analytics Providers: Aggregated demographic and behavioral data to help us understand how users interact with our platform
• Marketing Partners: Contact information and engagement data where you have given your consent to share your information with third parties

3. How We Use Your Information

We use the information we collect for various legitimate business purposes. We will only use your personal information when the law allows us to. Most commonly, we will use your personal information in the following circumstances:

3.1 Service Provision and Order Fulfillment

• To process and fulfill your food orders, including preparation, packaging, and delivery coordination
• To create and manage your account and ensure secure login
• To send you order confirmations, receipts, and updates regarding your orders
• To process payments and prevent fraudulent transactions
• To provide customer support and respond to your inquiries or complaints
• To manage delivery logistics and communicate estimated delivery times
• To accommodate special dietary requirements or food allergy notifications you provide

3.2 Analytics and Service Improvement

• To analyze usage patterns and improve the functionality, design, and content of our website and app
• To understand customer preferences and tailor our menu offerings accordingly
• To conduct research and develop new products and services
• To generate internal reports about website traffic and usage trends
• To troubleshoot technical issues and improve system performance

3.3 Marketing and Communications

• To send you promotional offers, newsletters, loyalty rewards, discount codes, and updates about our menu — but only if you have opted in to receive such communications
• To personalize your experience by showing content and offers relevant to your order history and preferences
• To conduct surveys, contests, and promotions you choose to participate in
• To retarget advertisements on third-party platforms based on your browsing behavior (subject to your consent and opt-out rights)

3.4 Legal and Safety Purposes

• To comply with applicable laws, regulations, and legal processes
• To enforce our Terms of Service and other agreements
• To detect, investigate, and prevent fraudulent transactions, security breaches, and other illegal activities
• To protect the rights, property, or safety of Dions, our customers, or others
• To respond to lawful requests from law enforcement agencies and regulatory authorities

4. Legal Basis for Processing

We rely on the following legal grounds to process your personal information under applicable U.S. law:

• Performance of a Contract: Processing is necessary to fulfill the orders you place and provide the Services you request
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, improving our services, and maintaining the security of our platform, provided these interests are not overridden by your rights
• Consent: Where you have given us explicit consent to process your data for a specific purpose, such as receiving marketing communications or enabling precise location tracking
• Legal Obligation: Processing is necessary to comply with applicable laws and regulations, including tax laws, food safety regulations, and consumer protection requirements

5. Sharing Your Information with Third Parties

We value your privacy and do not sell, rent, or trade your personal information to third parties for their own marketing purposes. However, we may share your information in the following circumstances:

5.1 Service Providers and Business Partners

We engage trusted third-party companies to perform functions and provide services on our behalf. These service providers have access to your personal information only to the extent necessary to perform their functions and are contractually obligated to protect it. Categories of service providers include:

• Payment Processors: To securely process credit card and digital payment transactions (e.g., Stripe, PayPal, or similar PCI-DSS compliant processors)
• Delivery and Logistics Partners: To fulfill delivery orders to your specified address
• Cloud Hosting Providers: To store and manage our data infrastructure securely
• Email and SMS Communication Platforms: To send order confirmations, delivery notifications, and marketing messages
• Analytics Providers: Such as Google Analytics, to analyze website traffic and user behavior
• Customer Support Tools: Platforms that help us manage and respond to customer service inquiries
• Marketing and Advertising Platforms: To manage digital advertising campaigns (with appropriate privacy safeguards)

5.2 Legal Requirements and Law Enforcement

We may disclose your personal information if required to do so by law or in the good-faith belief that such action is necessary to:

• Comply with a legal obligation, court order, subpoena, or government request
• Cooperate with law enforcement agencies in criminal investigations
• Protect and defend the rights or property of Dions
• Prevent or investigate possible wrongdoing in connection with our Services
• Protect the personal safety of users of our Services or the public

5.3 Business Transfers

In the event that Dions undergoes a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal information may be transferred as part of that transaction. We will notify you via email and/or prominent notice on our website of any such change in ownership or use of your personal information, as well as any choices you may have regarding your information.

5.4 Aggregated or De-Identified Data

We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you with third parties for industry analysis, demographic profiling, research, and other business purposes.

6. Data Security

We take the security of your personal information very seriously and have implemented comprehensive technical and organizational measures to protect it against unauthorized access, alteration, disclosure, or destruction. Our security measures include:

• Encryption: We use industry-standard SSL/TLS encryption for all data transmitted between your browser and our servers. Sensitive payment data is encrypted in transit and at rest.
• Access Controls: Access to personal data is restricted to authorized employees and contractors who need it to perform their job functions. All personnel with access undergo background screening and are bound by confidentiality agreements.
• Secure Payment Processing: We work exclusively with PCI-DSS (Payment Card Industry Data Security Standard) compliant payment processors. We do not store full credit or debit card numbers on our servers.
• Regular Security Audits: We conduct periodic security assessments and vulnerability scans to identify and remediate potential security weaknesses.
• Incident Response: We maintain a data breach response plan and will notify affected users and relevant regulatory authorities as required by applicable law in the event of a security breach.
• Two-Factor Authentication: Where available, we encourage users to enable two-factor authentication on their accounts for added protection.

7. Your Privacy Rights

Depending on where you reside, you may have certain rights regarding your personal information. We are committed to honoring these rights and have established processes to facilitate your requests.

7.1 Rights for All Users

• Right to Access: You have the right to request a copy of the personal information we hold about you
• Right to Correction: You have the right to request that we correct any inaccurate or incomplete personal information we hold about you
• Right to Deletion: You have the right to request that we delete your personal information, subject to certain legal exceptions
• Right to Opt-Out of Marketing: You can unsubscribe from marketing emails at any time by clicking the "unsubscribe" link in any marketing email or by contacting us directly
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format

7.2 Additional Rights for California Residents (CCPA/CPRA)

If you are a California resident, you have the following additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Know: The right to know what personal information we have collected about you, including the categories of personal information, sources of collection, purposes of use, and categories of third parties with whom we share it
• Right to Delete: The right to request deletion of personal information we have collected from you, subject to limited exceptions
• Right to Correct: The right to request correction of inaccurate personal information we maintain about you
• Right to Opt-Out of Sale or Sharing: We do not sell your personal information. However, if applicable, you have the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising
• Right to Limit Use of Sensitive Personal Information: The right to limit the use and disclosure of your sensitive personal information to only that which is necessary for providing the requested services
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA/CPRA rights. We will not deny goods or services, charge different prices, or provide a different level or quality of service based on your exercise of these rights

7.3 How to Exercise Your Rights

To exercise any of the rights described above, you may submit a verifiable consumer request by:

• Emailing us at: [email protected] with the subject line "Privacy Rights Request"
• Visiting our website: dions.world

We will verify your identity before processing your request. We will respond to your request within 45 days of receipt. If we require additional time (up to 90 days), we will inform you of the reason and the extension period in writing. We will not charge a fee for processing your request unless it is excessive, repetitive, or manifestly unfounded.

You may designate an authorized agent to submit requests on your behalf. We may require documentation confirming the agent's authorization and may verify your identity directly.

8. Cookie Policy

Our website uses cookies and similar tracking technologies (such as web beacons, pixels, and local storage) to enhance your experience, analyze usage patterns, and deliver relevant content and advertisements.

8.1 Types of Cookies We Use

• Essential Cookies: Required for the operation of our website, including maintaining your shopping cart, login sessions, and security features. These cannot be disabled without affecting website functionality.
• Performance and Analytics Cookies: Help us understand how visitors interact with our website by collecting anonymized data about pages visited, time spent, and errors encountered. We use tools such as Google Analytics for this purpose.
• Functional Cookies: Remember your preferences (e.g., saved delivery addresses, language settings, dietary preferences) to improve your experience on return visits.
• Marketing and Targeting Cookies: Used to deliver advertisements relevant to your interests, both on our website and on third-party platforms. These cookies track your browsing activity across websites.

8.2 Managing Your Cookie Preferences

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies or be notified when cookies are set. Please note that disabling certain cookies may affect the functionality of our website and your ability to place orders. You can also opt out of interest-based advertising through the Digital Advertising Alliance's opt-out tool at optout.aboutads.info or the Network Advertising Initiative at optout.networkadvertising.org.

For a complete description of the cookies we use and detailed instructions on how to manage your preferences, please refer to our Cookie Policy available on our website.

9. Data Retention

We retain your personal information only for as long as is necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. Our general data retention practices are as follows:

When your personal information is no longer needed, we will securely delete or anonymize it in accordance with our data retention procedures. If deletion is not immediately possible (e.g., because the information has been stored in backup archives), we will securely store the information and isolate it from any further processing until deletion is possible.

10. Children's Privacy

We are committed to protecting the privacy of minors. Our website and Services are not directed to children under the age of 18, and we do not knowingly collect, use, or disclose personal information from anyone under 18 years of age without verifiable parental consent. We do not offer services designed to attract minors, and our marketing materials are not directed at children.

If you are a parent or guardian and believe that your child under the age of 18 has provided us with personal information without your consent, please contact us immediately at [email protected]. Upon receiving such notification, we will take prompt steps to verify the information and, if confirmed, delete the child's personal information from our systems as quickly as reasonably practicable.

In addition, pursuant to the Children's Online Privacy Protection Act (COPPA), we comply with all applicable requirements regarding the collection, use, and disclosure of personal information from children under 13 years of age.

11. International Data Transfers

Dions is based in the United States, and our primary data processing occurs within the United States. However, some of our service providers, partners, and cloud infrastructure providers may be located in or operate from other countries. When your personal information is transferred to other countries, it may be subject to different privacy laws than those in your home jurisdiction.

If we transfer personal data outside of the United States, we take appropriate safeguards to ensure that your personal information receives an adequate level of protection, including:

• Using service providers that are Privacy Shield certified or have entered into Standard Contractual Clauses approved by relevant data protection authorities
• Conducting due diligence on third-party data processors to ensure they maintain appropriate security standards
• Including data protection provisions in our contracts with third-party service providers

By using our Services and providing us with your information, you acknowledge and consent to the transfer of your personal information to the United States and to other countries as described in this Privacy Policy. We will always handle your information in accordance with this Privacy Policy regardless of where it is processed.

12. Third-Party Websites and Links

Our website may contain links to third-party websites, applications, and services (such as social media platforms, delivery tracking portals, or payment gateways). These third-party sites operate independently of Dions and have their own privacy policies, which we strongly encourage you to review. We have no control over the content, privacy practices, or security of third-party websites and are not responsible for their privacy practices or any personal information you provide to them.

The inclusion of a link to a third-party website does not imply our endorsement of that website or its operators. If you have questions about how those third parties use your information, please refer directly to their privacy policies.

13. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our business practices, legal requirements, or the Services we offer. We will notify you of any material changes by:

• Posting the updated Privacy Policy on our website at dions.world with a new "Last Updated" date
• Sending a notification to the email address associated with your account (for significant changes)
• Displaying a prominent notice on our website for a reasonable period following the update

Your continued use of our Services after the effective date of the revised Privacy Policy constitutes your acceptance of the changes. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. If you do not agree with any changes, you should discontinue use of our Services and may request deletion of your account.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please do not hesitate to contact us. We are committed to addressing your concerns in a timely and transparent manner.

When contacting us about a privacy request, please include the following information to help us respond efficiently:

• Your full name and the email address associated with your account
• The nature of your request (e.g., access, deletion, correction, opt-out)
• A clear description of your concern or the information you wish to access, correct, or delete
• Any relevant documentation that may help us verify your identity and process your request

15. How to File a Complaint with a Data Protection Authority

If you are not satisfied with our response to your privacy inquiry or believe that we are processing your personal information in violation of applicable law, you have the right to file a complaint with the appropriate regulatory authority.

15.1 For California Residents

California residents may file a complaint with the California Privacy Protection Agency (CPPA), which is the state agency responsible for enforcing the CCPA/CPRA:

• California Privacy Protection Agency (CPPA)
• Website: cppa.ca.gov
• Email: [email protected]

15.2 For All U.S. Consumers

You may also file a complaint with the Federal Trade Commission (FTC), which enforces consumer protection laws including privacy-related deception and unfair practices:

• Federal Trade Commission (FTC)
• Website: www.ftc.gov/complaint
• Phone: 1-877-FTC-HELP (1-877-382-4357)

15.3 State Attorney General Offices

Depending on your state of residence, you may also have the right to file a complaint with your state's Attorney General office. Many state attorneys general have consumer protection divisions that handle privacy complaints. We encourage you to visit your state government's official website to find the appropriate contact information.

We request that you contact us first before filing a complaint with a regulatory authority, so that we have the opportunity to address your concern directly and promptly.

16. Do Not Track Signals

Some web browsers have a "Do Not Track" (DNT) feature that signals to websites that you do not want your online activity tracked. At this time, there is no universally accepted standard for how companies should respond to DNT signals. As a result, we currently do not alter our data collection or use practices in response to DNT browser signals. However, you can use the cookie management tools described in Section 8 to control tracking technologies on our website.

We will continue to monitor developments in DNT standards and may update our practices accordingly if a universal standard is established.

17. Your California Privacy Rights — Shine the Light

California Civil Code Section 1798.83 (California's "Shine the Light" law) permits California residents to request information about our disclosures of personal information to third parties for their direct marketing purposes. If you are a California resident and would like to make such a request, please contact us at [email protected] with the subject line "California Shine the Light Request." We will respond within 30 days of receiving your request.

This Privacy Policy was drafted in compliance with applicable United States federal and state privacy laws, including the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), the Children's Online Privacy Protection Act (COPPA), the CAN-SPAM Act, and the Federal Trade Commission Act (FTC Act). For questions about this policy, please contact us at [email protected].