Privacy Policy

This Privacy Policy describes how Dave's Hot Chicken ("we," "us," "our," or the "Company") collects, uses, discloses, and protects your personal information when you visit our website at daveshotchicken-eat.rest (the "Website"), place orders, interact with our digital services, or otherwise engage with our business. Please read this policy carefully to understand our practices regarding your personal data and how we will treat it.

By accessing or using our Website, placing an order, or otherwise providing us with your personal information, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please discontinue your use of our Website and services immediately.

We are committed to protecting your privacy and handling your personal information in a transparent, lawful, and responsible manner in compliance with applicable United States federal and state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), and other applicable regulations.

1. About Us

Dave's Hot Chicken is a food service business operating through our Website and physical locations across the United States. We are dedicated to delivering exceptional food experiences and customer satisfaction. For all privacy-related inquiries, you may contact us using the details provided in the Contact Information section of this policy.

2. Information We Collect

We collect various types of information in connection with your use of our Website and services. The categories of personal information we may collect include the following:

2.1 Personal Identification Information

When you create an account, place an order, sign up for promotions, or contact us directly, we may collect personal identification information, including but not limited to:

• Full name
• Email address
• Phone number
• Mailing address and delivery address
• Date of birth (where required for age verification)
• Username and password (for registered accounts)
• Payment and billing information (processed securely through third-party payment processors)
• Order history and preferences
• Customer feedback, reviews, and communications

2.2 Usage Data and Website Activity

When you visit or interact with our Website, we automatically collect certain technical and behavioral data, including:

• IP address and approximate geographic location
• Browser type, version, and settings
• Operating system and device type
• Pages visited, links clicked, and time spent on pages
• Referring URLs and exit pages
• Search queries entered on our Website
• Date and time of your visit
• Frequency of visits and session duration

2.3 Device Information

We may collect specific information about the device you use to access our Website, including:

• Device identifiers (such as mobile advertising IDs)
• Hardware model and firmware version
• Network information and connection type
• Mobile carrier (if applicable)
• Screen resolution and display settings

2.4 Cookies and Tracking Technologies

We use cookies, web beacons, pixel tags, and similar tracking technologies to enhance your browsing experience and gather analytical data. For detailed information about our use of cookies and how to manage your preferences, please refer to Section 8 of this policy.

2.5 Voluntary Submissions

We may collect additional information that you voluntarily provide to us, including:

• Survey responses and feedback forms
• Messages sent through our contact forms or customer support channels
• Social media interactions with our brand accounts
• Participation in contests, promotions, or loyalty programs
• User-generated content such as reviews and photos

2.6 Information from Third Parties

We may receive personal information about you from third-party sources, such as:

• Social media platforms when you connect your account or interact with our social media content
• Third-party food delivery platforms and ordering services
• Analytics providers and advertising partners
• Publicly available sources
• Business partners and service providers

3. How We Use Your Information

We use the personal information we collect for a variety of legitimate business purposes. The specific purposes for which we process your data include:

3.1 Service Provision and Order Fulfillment

• Processing and completing your food orders and transactions
• Creating and managing your online account
• Coordinating delivery services and communicating delivery status
• Processing payments securely through our payment processors
• Providing customer support and resolving disputes or complaints
• Sending order confirmations, receipts, and transactional notifications

3.2 Analytics and Website Improvement

• Analyzing usage patterns and trends to improve our Website functionality
• Conducting research and development to enhance our products and services
• Monitoring and measuring the performance of our Website
• Identifying and resolving technical issues and errors
• Understanding customer preferences and behaviors to personalize your experience

3.3 Marketing and Communications

• Sending promotional emails, newsletters, and special offers (with your consent where required)
• Delivering targeted advertisements on our Website and third-party platforms
• Conducting loyalty programs and personalized promotions
• Notifying you about new menu items, seasonal specials, and events
• Retargeting campaigns based on your browsing and purchase history

You have the right to opt out of marketing communications at any time. Please see Section 6 for information about your rights and how to exercise them.

3.4 Legal and Compliance Purposes

• Complying with applicable federal, state, and local laws and regulations
• Responding to lawful requests from government authorities or courts
• Enforcing our Terms of Service and other legal agreements
• Preventing fraud, unauthorized access, and other illegal activities
• Protecting the rights, property, and safety of our business, employees, and customers

3.5 Business Operations

• Internal record-keeping and administrative functions
• Conducting due diligence in connection with potential business transactions
• Training and quality assurance purposes
• Auditing our data practices and compliance programs

4. Data Sharing with Third Parties

We value your privacy and do not sell your personal information to third parties for monetary compensation. However, we may share your information in the following circumstances:

4.1 Service Providers and Business Partners

We engage trusted third-party companies and individuals to perform services on our behalf. These service providers are only granted access to personal information necessary to perform their specific functions and are contractually required to maintain the confidentiality and security of your data. Categories of service providers include:

• Payment processors: To securely handle payment card transactions and financial data
• Delivery and logistics partners: To coordinate the delivery of food orders to your location
• Cloud hosting and infrastructure providers: To store and process data securely
• Analytics providers: Such as Google Analytics, to help us understand Website usage
• Email marketing platforms: To manage and send promotional communications
• Customer support tools: To manage and respond to customer inquiries
• Advertising networks: To display relevant advertisements on our behalf

4.2 Legal Requirements and Law Enforcement

We may disclose your personal information if we believe in good faith that such disclosure is necessary to:

• Comply with a legal obligation, court order, subpoena, or governmental request
• Enforce our Terms of Service or protect our legal rights
• Prevent or investigate potential fraud, security threats, or illegal activities
• Protect the safety and well-being of our customers, employees, or the public

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal information may be transferred to the acquiring entity. We will notify you of any such change in ownership or control of your personal data, and you will have the opportunity to exercise your privacy rights as described in this policy.

4.4 With Your Consent

We may share your information with additional third parties when you have provided your explicit consent or authorized us to do so. You may withdraw your consent at any time by contacting us as described in Section 12.

4.5 Aggregated and De-Identified Data

We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you with third parties for research, marketing, analytics, or other lawful purposes.

5. Data Security Measures

Protecting your personal information is a top priority for Dave's Hot Chicken. We implement a comprehensive range of technical, administrative, and physical security measures designed to safeguard your data from unauthorized access, use, alteration, or destruction.

5.1 Technical Safeguards

• SSL/TLS Encryption: All data transmitted between your browser and our Website is protected using industry-standard SSL/TLS encryption protocols.
• Secure Payment Processing: Payment card information is processed through PCI-DSS compliant payment processors. We do not store full credit card numbers on our servers.
• Firewalls and Intrusion Detection: We use firewalls and intrusion detection systems to monitor and protect our network infrastructure.
• Access Controls: Personal data is accessible only to authorized personnel who require it to perform their job duties.
• Data Minimization: We collect only the information that is necessary for the stated purposes.

5.2 Administrative Safeguards

• Regular employee training on data privacy and security best practices
• Internal policies governing the handling, storage, and disposal of personal information
• Confidentiality agreements with employees and contractors who have access to personal data
• Regular audits and assessments of our data handling practices

5.3 Breach Response

In the event of a data security breach that is reasonably likely to result in harm to you, we will notify you and the appropriate regulatory authorities in accordance with applicable state data breach notification laws. We will take prompt action to contain the breach, assess its scope, and implement remedial measures.

6. Your Privacy Rights

Depending on your state of residence, you may have a variety of rights with respect to your personal information. We are committed to honoring these rights in accordance with applicable law.

6.1 Rights Under the California Consumer Privacy Act (CCPA/CPRA)

If you are a California resident, you have the following rights under the CCPA and CPRA:

6.2 General Privacy Rights (All Users)

Regardless of your state of residence, we provide all users with the following general rights:

• Right to Access: You may request access to the personal information we hold about you.
• Right to Correction: You may request that we correct or update inaccurate or incomplete personal information.
• Right to Deletion: You may request that we delete your personal information from our records, subject to applicable legal requirements and exceptions.
• Right to Opt Out of Marketing: You may opt out of receiving promotional emails and other marketing communications at any time by clicking the "unsubscribe" link in any email or by contacting us directly.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

6.3 How to Exercise Your Rights

To exercise any of your privacy rights, please submit a verifiable request to us by:

• Email: [email protected]
• Website: daveshotchicken-eat.rest

We will respond to your verifiable request within 45 days of receipt. If we require additional time, we will notify you of the extension and the reasons for it. We will verify your identity before processing your request to protect your personal information from unauthorized access.

7. Data Retention

We retain your personal information only for as long as is necessary to fulfill the purposes for which it was collected, comply with our legal obligations, resolve disputes, and enforce our agreements. The specific retention periods we apply are as follows:

When personal information is no longer needed for the purposes described in this policy, we will securely delete or anonymize it in accordance with our data destruction procedures.

8. Cookie Usage

Our Website uses cookies and similar tracking technologies to enhance your user experience, analyze traffic patterns, and deliver targeted advertising. Cookies are small text files stored on your device when you visit a website.

8.1 Types of Cookies We Use

• Essential Cookies: Necessary for the Website to function properly, such as enabling you to add items to your cart and complete orders.
• Performance and Analytics Cookies: Help us understand how visitors interact with our Website by collecting aggregated usage data (e.g., Google Analytics).
• Functional Cookies: Enable enhanced features such as remembering your preferences, language settings, and login details.
• Marketing and Advertising Cookies: Used to deliver relevant advertisements and track the effectiveness of marketing campaigns.
• Third-Party Cookies: Set by external services integrated into our Website, such as social media plugins and payment processors.

8.2 Your Cookie Choices

You may manage your cookie preferences through your browser settings, which allow you to refuse or delete certain types of cookies. Please note that disabling essential cookies may affect the functionality of our Website. You may also opt out of interest-based advertising through the Network Advertising Initiative or Digital Advertising Alliance.

For a complete description of our cookie practices, including a list of specific cookies used and their purposes, please refer to our Cookie Policy available on our Website.

9. Children's Privacy

We are committed to protecting the privacy of minors. In compliance with the Children's Online Privacy Protection Act (COPPA) and other applicable laws, we do not knowingly collect, use, or disclose personal information from children under the age of 13. We extend our age-related protections to users under 18 years of age.

If you are under 18 years of age, please do not use our Website, create an account, or submit any personal information. If we learn that we have inadvertently collected personal information from a child under 18, we will take immediate steps to delete such information from our records.

If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at [email protected] so that we can take appropriate remedial action.

10. International Data Transfers

Dave's Hot Chicken operates primarily within the United States. If you are accessing our Website from outside the United States, please be aware that your personal information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country of residence.

By using our Website and providing us with your personal information, you consent to the transfer of your data to the United States and its processing in accordance with this Privacy Policy. We take appropriate safeguards to ensure that your personal information remains protected in accordance with applicable privacy standards, including through the use of contractual protections when transferring data to third-party service providers located outside the United States.

If you are located in a jurisdiction that restricts international data transfers, please contact us before using our services to discuss whether appropriate safeguards are in place for your specific situation.

11. Filing Complaints with Data Protection Authorities

If you believe that we have not handled your personal information in accordance with applicable law, you have the right to file a complaint with the appropriate regulatory authority.

11.1 California Residents

California residents may file a complaint with the California Privacy Protection Agency (CPPA) or the California Attorney General's Office:

• California Privacy Protection Agency: cppa.ca.gov
• California Attorney General: oag.ca.gov/privacy

11.2 Federal Consumer Protection

For concerns related to unfair or deceptive business practices under the Federal Trade Commission Act (FTC Act), you may file a complaint with the Federal Trade Commission (FTC):

• FTC Complaint Center: reportfraud.ftc.gov
• FTC Website: www.ftc.gov

11.3 State-Specific Authorities

Residents of other states may also have the right to file privacy complaints with their respective state attorney general's office or consumer protection agency. We encourage you to consult the appropriate regulatory body for your state of residence.

Before filing a complaint with a regulatory authority, we encourage you to contact us first so that we have the opportunity to resolve your concern directly and promptly.

12. Third-Party Links and Integrations

Our Website may contain links to third-party websites, social media platforms, and external services that are not operated by Dave's Hot Chicken. These third-party sites have their own privacy policies, and we are not responsible for their content, privacy practices, or data handling procedures.

We encourage you to review the privacy policies of any third-party websites you visit through links on our Website. Our inclusion of links to third-party sites does not imply any endorsement of their privacy practices or content.

When you interact with social media features embedded in our Website (such as "share" or "like" buttons), the social media platform may collect information about your visit. Your interactions with these features are governed by the privacy policies of the respective social media companies.

13. Do Not Track Signals

Some web browsers include a "Do Not Track" (DNT) feature that sends signals to websites requesting that your browsing activity not be tracked. Currently, there is no industry-wide consensus on how to respond to DNT signals. As a result, our Website does not currently respond to DNT browser signals. We will continue to monitor developments in this area and update our practices accordingly.

California residents may also exercise their rights under the California Shine the Light Law (Cal. Civ. Code § 1798.83), which allows California residents to request information about whether a business has disclosed personal information to third parties for direct marketing purposes during the preceding calendar year.

14. Changes to This Privacy Policy

We reserve the right to update, modify, or revise this Privacy Policy at any time to reflect changes in our business practices, legal requirements, or the services we offer. When we make material changes to this policy, we will:

• Update the "Last Updated" date at the top of this page
• Post a prominent notice on our Website notifying users of significant changes
• Where required by law, send a direct notification to registered users via email

Your continued use of our Website and services after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this policy periodically to stay informed about how we are protecting your information.

15. Legal Basis for Processing

We process your personal information on the following legal bases:

• Contract Performance: Processing necessary to fulfill your order and provide the services you have requested.
• Legal Obligation: Processing required to comply with applicable federal, state, and local laws and regulations.
• Legitimate Interests: Processing for our legitimate business interests, such as improving our services, preventing fraud, and conducting marketing, where such interests are not overridden by your rights.
• Consent: Processing based on your explicit consent, which you may withdraw at any time.

16. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please do not hesitate to contact our Privacy Team using the following details:

We are committed to responding to all privacy-related inquiries within a reasonable timeframe, and no later than 45 days from the date of receipt, unless an extension is required under applicable law.