Privacy policy

Who we are

Pizza Pod NYC (“Pizza Pod”, “we”, “us”) is a mobile pizza caterer in New York City. We run this site and decide how to use the personal information that this policy describes.

Personal information is any information about a person who can be identified. Some laws call it personal data. This policy covers this site, and the requests and messages that you send us about an event.

Our founder is responsible for privacy at Pizza Pod. Write to us at 405 W 44th St, New York, NY 10036, or email pizza@pizzapodnyc.com.

What we collect

What you send us through the quote form, the Rent a Pod form, email or social media. If you message us, we also get the name or handle on your account. The site also records a few technical details on its own, as described below.

The quote form asks for:

• Your name and email address, and your phone number if you give one
• Your company or organization, if the event is for work
• The event: what it is, the date, the guest count, the service window, the venue type, the area, indoor or outdoor, dietary needs and a budget range
• Anything you write in the notes field

The Rent a Pod request form

The package builder on the Rent a Pod page works the same way as the quote form: what you type arrives as one email in our inbox and nothing is stored on the website. It asks for your name, email and phone, the event date, time and address, the guest and pizza counts, your setup choices, any allergies or dietary needs you tell us about, and your acknowledgement of the safety requirements. The running estimate is calculated in your browser from the published prices and is sent with the request so we see what you saw.

What the site records on its own

Each visit sends the technical details that every website receives: your IP address, your browser and device type, the page and the time. Cloudflare, which hosts the site, keeps them in short-term logs to protect the site and to find faults.

During your visit, the site remembers the website or tagged link that sent you here. If you send a request, one line from that record goes with it: that website or link, and the first page you opened. If the link came from an ad, the record notes which ad platform it was. It never keeps the tracking ID that the platform adds to the link.

The site saves the record in your browser's storage for 30 days only while the Google Analytics cookies are allowed: in the United States and Canada unless you turn them off, and elsewhere only if you press Accept. Then a request from a later visit still shows how you found us. Otherwise the record stays in the open page and is gone when you close or reload it. Turning the cookies off, or a Global Privacy Control signal, deletes the saved record.

Google Analytics also records how the site is used. The section on cookies and tracking explains what it records, and your choices.

Allergies and dietary needs

Both forms let you tell us about allergies and dietary needs. We use these details only to plan and cook food that is safe for your guests. We need to know what the kitchen must avoid, not which guest has the allergy.

Some laws treat allergy and health details as sensitive. If you send them, you consent to their use for this one purpose. You can withdraw that consent by email, but then we cannot plan around the allergy.

Photos and reviews on this site

Our event photos can show guests. If you are in one and want it removed, email us and we will remove it.

The reviews on this site are public Google reviews. Each one shows the reviewer's name as it appears on Google, and links to the original. If a review is yours and you want it removed from this site, email us.

How we use it

We do not build a profile of you, we make no automated decisions about you, and we do not add you to a mailing list. We use personal information to:

• Answer your request, price the event and send you a quote
• Plan, run and invoice an event that you book
• Keep the business and tax records that the law requires
• See which websites, links and pages bring people to us, and where our request forms lose them
• Keep the site secure and find faults
• Protect our legal rights if there is a dispute

Who we share it with

We do not sell personal information, rent it out or share it for targeted advertising. We did not do any of these in the last 12 months.

We share it with the service providers below, and each one gets only what it needs. They can use it only to provide their service to us.

We also share it when the law requires it, or to protect someone's safety or our legal rights. If the business is sold, it goes to the new owner under this policy. If a venue or a planner needs your details for your event, we ask you first.

Our service providers:

• Cloudflare hosts the site and keeps its server logs.
• Resend sends each request to our inbox, and keeps a copy of that email for 30 days.
• Google Workspace holds our email inbox.
• Sanity stores the site's text and photos, and sends the photos to your browser.
• Google Analytics measures visits to the site.
• MadeByMe, our web developer in Canada, builds and maintains the site, and can see its server logs.

Cookies and tracking

Outside the United States and Canada, a banner asks for your choice on your first visit. In the United States and Canada, the Google Analytics cookies are on unless you turn them off. In Canada, a notice tells you so on your first visit, with a button to turn them off. One choice covers both the Google Analytics cookies and the saved lead-source record, and the site works the same either way.

Your choice stays in your browser's storage, not in a cookie. A yes, or OK on the notice in Canada, lasts 12 months. Then, outside the United States, the banner shows again. A no lasts until you change it. To change your choice at any time, use Cookie settings at the foot of every page.

Where you are decides what runs. On each page load, the site's own server checks which country your IP address is in, and it does not store the answer. If the check fails, the rules for outside the United States and Canada apply.

Outside the United States and Canada, Google Analytics does not load until you press Accept. If you press Decline later, the site switches it off at once, deletes its cookies and does not load it again.

In the United States, its territories and Canada, Google Analytics sets its cookies unless you turn them off: press Turn off on the notice in Canada, or open Cookie settings and press Decline. After either, or if your browser sends a Global Privacy Control signal, the site switches it off and deletes its cookies.

Without the Google Analytics cookies, in any country, the site still counts your visit anonymously. That includes a visit where your browser blocks Google Analytics. The page sends the site's own server each page address and title, the page or website that sent you, your browser's language, how long each page was on screen, and the actions listed below. The server adds your country, your state or province and your device type, and sends this count to Google Analytics. The site sets no cookie for it and stores nothing in your browser. To count each visitor once a day, the server turns your IP address and browser type into a code that changes every day. It stores neither, and Google receives only the code, never your IP address.

With its cookies, Google Analytics records the pages you view and the website or link that sent you. It also records your approximate location (the city), your device, browser and operating system, and whether you sent a request. It sets two cookies, _ga and one that starts with _ga_, to tell a new visitor from a returning one. They last up to 2 years.

Either way, the site records a few things you do on it, so we can see what works: which booking buttons you press, how far you get through a request form, which step stopped you and whether a request failed to send, and which videos, maps, email links and links to other websites you open. It records the name of a form's step or field, never what you type into it.

Google signals and Google's advertising features are always off, so none of this is used for ads or linked to a Google account. It never includes what you type into a form, and we never send Google your name or contact details. To block Google Analytics on every website, use Google's opt-out add-on.

Some parts of the site come from other companies, which then receive your IP address and the details of that request. Photos on some pages come from Sanity. The map on the booking page comes from Google Maps and loads only when you press Show the map. Google can then set its own cookies through it.

The videos on the home page load nothing from YouTube or Instagram until you press play. After that, the video comes from them. These companies act under their own privacy policies, and Google, YouTube and Instagram can collect information about your activity over time and across other websites.

The site does not act on Do Not Track signals. It does act on Global Privacy Control: if your browser sends that signal, we treat it as Decline until you press Accept. We do not sell or share personal information in any case.

• Google Analytics opt-out add-on ↗ (opens in a new tab)
• How Google uses information from sites that use its services ↗ (opens in a new tab)

How long we keep it

We keep personal information only while we need it for the purposes above. We keep it longer only if the law requires it or a dispute needs it.

• Requests and our emails about them, with any allergy and dietary details: if you do not book, we delete them within 2 years of our last contact. If you book, we keep the booking records for 7 years, for tax and accounting.
• Server logs, including a request that failed to send: up to 7 days
• Resend's copy of each request email: 30 days
• The lead-source record: until you close the page, or 30 days in your browser's storage while the Google Analytics cookies are allowed
• Your cookie choice, in your browser's storage: a yes for 12 months, a no until you change it
• The country from the region check, and the IP address and daily code of the anonymous count: not stored at all
• Google Analytics cookies: up to 2 years. Google Analytics data: up to 14 months.

Where it is processed

We are in the United States. Our service providers process personal information in the United States and Canada, and some of them in other countries as well.

If you live somewhere else, your information goes to these countries. Their privacy laws can differ from yours, and their courts and governments can lawfully get access to it.

Where the law requires it, our service providers protect these transfers with safeguards such as the European Commission's standard contractual clauses or the EU-U.S. Data Privacy Framework.

How we protect it

The site uses encrypted connections, and only the people who need personal information to do their work can see it. No system is perfectly secure. If a breach puts your information at risk, we tell you and the authorities as the law requires.

Your rights

Wherever you live, you can ask us to:

• Tell you what personal information we hold about you, and give you a copy
• Correct it
• Delete it
• Stop or limit a use of it that you object to
• Send it to you or to another company in a common format
• Withdraw a consent that you gave us

How to use your rights

Email pizza@pizzapodnyc.com and tell us what you want. We answer within 30 days. If we need more time, we tell you why and how long.

We can ask you to confirm who you are, usually by a reply from the email address that you used with us. Someone that you authorize in writing can ask for you. There is no charge, and we never treat you differently because you used a right.

The law lets us say no in some cases, for example to deleting a record that tax law requires us to keep. If we say no, we tell you why. You can appeal by replying to our answer, and we decide an appeal within 45 days. If you are still not satisfied, you can complain to the privacy authority or the attorney general where you live.

If you are in Europe

This covers the European Economic Area, the UK and Switzerland. You have the rights above, and you can complain to the data protection authority where you live or work.

The law asks us to name the legal basis for each use of your information:

• Answering a request and running a booked event: the steps you ask for before a contract, and the contract itself
• Business and tax records: our legal obligations
• Google Analytics (the Google tag and its cookies) and the saved lead-source record: your consent. You can withdraw it at any time under Cookie settings.
• The lead-source line in a request that you send, site security, the region check and the anonymous visit count: our legitimate interest in running and improving the business. You can object to this use at any time.
• Allergy and dietary details: your explicit consent

• Data protection authorities in the European Economic Area ↗ (opens in a new tab)
• The UK Information Commissioner's Office ↗ (opens in a new tab)
• The Swiss Federal Data Protection and Information Commissioner ↗ (opens in a new tab)

If you are in Canada

You have the rights above under Canadian privacy law, including Quebec's. Our founder is the person in charge of the protection of personal information at Pizza Pod, at the email address above.

In Canada, the Google Analytics cookies are on unless you turn them off, and a notice says so on your first visit. Press Turn off on that notice, or open Cookie settings at the foot of any page and press Decline. A Global Privacy Control signal turns them off too. Without them, the site keeps only an anonymous count of your visit, with your country and province.

You can complain to the Office of the Privacy Commissioner of Canada or, in Quebec, to the Commission d'accès à l'information.

• The Office of the Privacy Commissioner of Canada ↗ (opens in a new tab)
• The Commission d'accès à l'information du Québec ↗ (opens in a new tab)

If you are in the United States

Several state laws, including California's, give residents the rights above. They also give a right to opt out of the sale of personal information, targeted advertising and profiling. We do none of these, so there is nothing to opt out of. You can still turn off the Google Analytics cookies under Cookie settings.

We use sensitive information, such as allergies, only to provide the service that you ask for. In the last 12 months, we collected these categories of personal information, from the sources and for the purposes described above:

• Identifiers, such as your name, email address, phone number and IP address
• Professional information, such as your company
• Commercial information, such as event details and budget
• Internet activity, such as the pages you viewed and the link that sent you
• Approximate location, to the city
• Sensitive information that you chose to give, such as allergies

Children

This site is for adults who plan events. It is not directed to children, and we do not knowingly collect personal information from anyone under 16. If you think that a child sent us information, email us and we will delete it.

Changes to this policy

When we change this policy, we update this page and the date at the top. If a change affects information that we already hold about you, we tell you by email before the change applies.

Questions

Anything on this page, or anything you want removed, goes to pizza@pizzapodnyc.com. A person reads every request. We reply within 24 hours.

See also Terms of service, Credits and Accessibility.