Privacy Policy

This Privacy Policy describes how Dave's Hot Chicken ("we," "us," "our," or the "Company") collects, uses, discloses, retains, and protects your personal information when you visit our website at daves-hotchicken.digital (the "Site"), place orders, use our digital services, or interact with us in any way. We are committed to protecting your privacy and handling your personal data with transparency, integrity, and care.

Please read this Privacy Policy carefully. By accessing or using our Site or services, you acknowledge that you have read, understood, and agree to the practices described in this document. If you do not agree with any part of this Privacy Policy, please discontinue use of our Site and services immediately.

This Privacy Policy applies to all users located in the United States, including residents of California who have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). We also comply with the Federal Trade Commission Act (FTC Act) regarding unfair or deceptive practices in commerce.

1. Who We Are

Dave's Hot Chicken is a food service company operating through its digital platform at daves-hotchicken.digital. We provide online ordering, promotional information, menu browsing, loyalty programs, catering inquiries, and other food-related digital services to our customers across the United States.

For all privacy-related questions, concerns, or requests, please contact us at the email address listed above. We will respond to all legitimate inquiries within a reasonable timeframe.

2. Information We Collect

We collect various types of information in connection with your use of our Site and services. This information falls into several broad categories, described in detail below.

2.1 Personal Information You Provide Directly

When you interact with Dave's Hot Chicken through our website, you may voluntarily provide us with personal information, including but not limited to:

• Identity Information: Your full name, username, or similar identifiers used to create an account or place an order.
• Contact Information: Email address, phone number, mailing address, and delivery address.
• Payment Information: Credit card numbers, debit card details, billing address, and other financial information necessary to process transactions. Note: payment data is processed by PCI-DSS compliant third-party payment processors; we do not store full card numbers on our servers.
• Order History: Details of food items ordered, special instructions, dietary preferences, and purchase frequency.
• Account Credentials: Usernames and encrypted passwords for registered accounts.
• Communications: Any messages, feedback, reviews, complaints, or other correspondence you send us via email, contact forms, or customer service channels.
• Marketing Preferences: Your preferences regarding receiving promotional communications, newsletters, and special offers from us.
• Loyalty Program Data: Points balances, redemption history, tier status, and participation records in any rewards or loyalty program we operate.

2.2 Information Collected Automatically

When you visit our Site, we and our third-party service providers automatically collect certain information about your device and browsing behavior, including:

• Device Information: IP address, device type, operating system and version, browser type and version, screen resolution, and device identifiers.
• Usage Data: Pages visited, time and date of your visit, time spent on each page, clickstream data, referring URL, and exit pages.
• Location Data: General geographic location inferred from your IP address. If you grant permission, we may also collect precise geolocation data to help you find nearby restaurant locations.
• Log Data: Server logs that record activity on our Site, including access times, errors encountered, and the actions you took while browsing.
• Session Information: Information about your browsing session, including how long you stayed on the Site and what features you interacted with.

2.3 Cookies and Tracking Technologies

We use cookies, web beacons, pixel tags, local storage objects, and similar tracking technologies to collect information about your interactions with our Site. These technologies help us provide a better user experience, remember your preferences, and understand how our Site is used. For detailed information about the types of cookies we use and how to manage them, please see Section 8 of this Privacy Policy and our separate Cookie Policy available on our website.

2.4 Information from Third Parties

We may receive additional information about you from third-party sources, including:

• Social Media Platforms: If you choose to connect your social media accounts (e.g., Facebook, Google, Apple) to log in or share content, we may receive your public profile information and any other data you authorize the platform to share.
• Delivery Partners: Third-party delivery platforms may share order fulfillment data, delivery addresses, and transaction confirmation details with us.
• Analytics Providers: We may receive aggregated or anonymized analytics data from third-party analytics services to help us understand usage trends.
• Marketing Partners: We may receive information from advertising and marketing partners to improve the relevance of promotional content we serve to you.

3. How We Use Your Information

Dave's Hot Chicken uses the information we collect for a variety of legitimate business purposes, including:

3.1 Providing and Managing Our Services

• Processing and fulfilling your food orders, including coordinating pickup and delivery.
• Creating and managing your customer account.
• Processing payments and preventing fraudulent transactions.
• Sending order confirmations, receipts, and transactional notifications.
• Facilitating loyalty program enrollment, point accumulation, and reward redemption.
• Responding to your customer service inquiries, complaints, and feedback.
• Providing technical support and troubleshooting issues with our Site.

3.2 Improving and Personalizing Our Services

• Analyzing how users interact with our Site to improve navigation, design, and content.
• Personalizing your experience by displaying menu recommendations based on your order history and preferences.
• Conducting research and analysis to develop new menu items, promotions, and services.
• Testing new features and functionality before broader deployment.

3.3 Marketing and Promotional Communications

• Sending you promotional emails, newsletters, and special offers about our products and services, subject to your consent where required by applicable law.
• Displaying targeted advertisements on our Site and third-party platforms based on your interests and browsing behavior.
• Conducting sweepstakes, contests, and other promotional activities.
• Measuring the effectiveness of our marketing campaigns.

You may opt out of receiving marketing communications at any time by clicking the "unsubscribe" link in any promotional email we send you, or by contacting us at [email protected]. Please note that opting out of marketing communications does not opt you out of transactional communications related to your orders or account.

3.4 Legal and Compliance Purposes

• Complying with applicable federal, state, and local laws and regulations.
• Enforcing our Terms of Service and other agreements.
• Protecting the rights, property, and safety of Dave's Hot Chicken, our customers, and the public.
• Detecting, investigating, and preventing fraudulent transactions, unauthorized access, and other illegal activities.
• Responding to lawful requests from courts, government agencies, and law enforcement authorities.

4. How We Share Your Information

We do not sell your personal information for monetary compensation. However, we may share your information with certain third parties under the following circumstances:

4.1 Service Providers and Business Partners

We work with carefully selected third-party companies and individuals that provide services on our behalf, such as:

• Payment Processors: To securely process credit card and electronic payments.
• Delivery Partners: To coordinate and fulfill food delivery orders.
• Cloud Hosting Providers: To host our website, databases, and digital infrastructure.
• Analytics Providers: To help us analyze Site traffic and user behavior (e.g., Google Analytics).
• Email and Communications Platforms: To send transactional emails, newsletters, and promotional messages.
• Customer Support Tools: To manage and respond to customer service requests.
• Marketing and Advertising Partners: To help us deliver targeted promotional content.

All service providers are contractually obligated to use your information only for the purposes of providing services to us, and to implement appropriate security measures to protect your data. We do not authorize them to use or disclose your personal information for their own independent marketing purposes.

4.2 Legal Requirements and Safety

We may disclose your personal information if we believe in good faith that such disclosure is necessary to:

• Comply with a legal obligation, court order, subpoena, or other governmental request.
• Enforce our Terms of Service or other agreements.
• Protect the rights, property, or safety of Dave's Hot Chicken, our employees, customers, or the general public.
• Investigate, prevent, or take action against suspected fraud, illegal activities, or violations of our policies.

4.3 Business Transfers

In the event that Dave's Hot Chicken undergoes a merger, acquisition, sale of assets, reorganization, or bankruptcy, your personal information may be transferred to the acquiring entity as part of that transaction. We will notify you via email and/or a prominent notice on our Site in advance of any such transfer and inform you of any material changes to how your personal information will be handled.

4.4 With Your Consent

We may share your personal information with third parties for any other purpose with your explicit consent.

5. Data Security

Dave's Hot Chicken takes the security of your personal information seriously and implements a range of technical, administrative, and physical safeguards designed to protect your data from unauthorized access, use, disclosure, alteration, or destruction.

5.1 Security Measures We Implement

• Encryption: We use industry-standard SSL/TLS encryption to protect data transmitted between your browser and our servers.
• Access Controls: Access to personal information is restricted to authorized employees and contractors who need it to perform their job functions. All access is governed by strict role-based permissions.
• Payment Security: All payment transactions are processed through PCI-DSS compliant payment processors. We do not store complete credit card numbers on our systems.
• Regular Security Assessments: We conduct periodic security reviews, vulnerability assessments, and penetration testing to identify and address potential weaknesses in our systems.
• Incident Response: We maintain an incident response plan to quickly identify, contain, and remediate any data security incidents.
• Employee Training: Our team members receive regular training on data protection best practices and privacy compliance.

5.2 Limitations

While we strive to protect your personal information, no method of data transmission over the Internet or electronic storage is completely secure. We cannot guarantee absolute security of your data. If you have reason to believe that your interaction with us is no longer secure, please contact us immediately at [email protected].

6. Your Privacy Rights

Depending on your state of residence and applicable law, you may have the following rights regarding your personal information:

6.1 Rights Available to All U.S. Users

• Right to Know: You have the right to request that we disclose what personal information we have collected about you, the sources from which it was collected, the purposes for which we use it, and the categories of third parties with whom we share it.
• Right to Access: You have the right to request a copy of the personal information we hold about you.
• Right to Correction: You have the right to request that we correct any inaccurate or incomplete personal information we hold about you.
• Right to Deletion: You have the right to request that we delete your personal information, subject to certain exceptions (e.g., where we are required to retain it by law or for legitimate business purposes).
• Right to Opt Out of Marketing: You have the right to opt out of receiving marketing communications from us at any time.

6.2 Additional Rights for California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Opt Out of Sale or Sharing: You have the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising purposes. To exercise this right, click the "Do Not Sell or Share My Personal Information" link on our website or contact us directly.
• Right to Limit Use of Sensitive Personal Information: You have the right to limit our use and disclosure of sensitive personal information (such as precise geolocation, financial data, or health information) to only those purposes necessary to provide our services.
• Right to Data Portability: You have the right to receive your personal information in a portable, readily usable format that allows you to transmit it to another entity.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you goods or services, charge you different prices, or provide you with a lower quality of service because you exercised your privacy rights.

6.3 How to Exercise Your Rights

To exercise any of the rights described above, you may contact us using the following methods:

• Email: [email protected]
• Website: daves-hotchicken.digital (via our Privacy Request Form)

We will verify your identity before processing your request to protect the security of your personal information. We will respond to your request within 45 days of receipt. If we need additional time, we will notify you and may extend the response period by an additional 45 days, as permitted by law. We do not charge a fee for processing your privacy rights requests unless they are excessive, repetitive, or manifestly unfounded.

You may also designate an authorized agent to make a request on your behalf. Authorized agents must provide written authorization signed by you or a power of attorney, and we may verify your identity directly.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law. The specific retention periods we apply are outlined below:

When your personal information is no longer required, we will securely delete or anonymize it in accordance with our data destruction procedures. In some cases, we may retain anonymized or aggregated data (which cannot be linked back to you) for longer periods for statistical analysis and business planning purposes.

8. Cookies and Tracking Technologies

Our Site uses cookies and similar tracking technologies to enhance your browsing experience, analyze how our Site is used, personalize content, and deliver targeted advertising. This section provides a brief overview; for more detailed information, please refer to our separate Cookie Policy available on our website.

8.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Site to function properly. These cookies enable core functionalities such as shopping cart management, account authentication, and secure checkout. They cannot be disabled.
• Performance and Analytics Cookies: These cookies collect information about how visitors use our Site (e.g., which pages are most frequently visited, error messages encountered) to help us improve Site performance and usability.
• Functional Cookies: These cookies remember your preferences (e.g., preferred location, language settings, saved items) to provide a more personalized experience.
• Targeting and Advertising Cookies: These cookies track your browsing habits to deliver advertisements that are more relevant to your interests, both on our Site and across the web. We may share this data with advertising partners.

8.2 Managing Your Cookie Preferences

You can control and manage cookies in the following ways:

• Cookie Consent Tool: When you first visit our Site, you will be presented with a cookie consent banner that allows you to accept or decline non-essential cookies.
• Browser Settings: Most web browsers allow you to control cookies through their settings. You can typically find these settings in the "Options," "Settings," or "Preferences" menu of your browser.
• Opt-Out Links: For advertising cookies, you can also opt out through industry tools such as the Digital Advertising Alliance's opt-out page at optout.aboutads.info or the Network Advertising Initiative at optout.networkadvertising.org.

Please note that disabling certain cookies may affect the functionality of our Site and your ability to place orders or access certain features.

9. Children's Privacy

Our Site and services are intended for use by individuals who are at least 18 years of age or older. We do not knowingly collect, use, or disclose personal information from children under the age of 13, as defined under the Children's Online Privacy Protection Act (COPPA), or from individuals under 18 years of age without verifiable parental consent.

If you are under 18 years of age, you are not permitted to use our Site or create an account without the supervision and consent of a parent or legal guardian. If you are a parent or guardian and you believe that your child has provided us with personal information without your consent, please contact us immediately at [email protected], and we will take prompt steps to delete such information from our records.

10. International Data Transfers

Dave's Hot Chicken is based in the United States, and our primary data processing operations occur within the United States. If you are accessing our Site from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States, where our servers are located and our central database is operated.

The data protection laws of the United States may differ from those in your country of residence and may not offer the same level of protection. By using our Site and providing us with your personal information, you consent to the transfer of your information to the United States and the processing of your data in the United States in accordance with this Privacy Policy.

Where we transfer data internationally in connection with our service providers or partners located outside the United States, we take appropriate steps to ensure that adequate protections are in place, such as standard contractual clauses or other lawful transfer mechanisms recognized under applicable data protection laws.

11. Third-Party Links and Services

Our Site may contain links to third-party websites, applications, social media platforms, and delivery partner portals that are not owned or controlled by Dave's Hot Chicken. We have no control over the privacy practices or content of these third-party sites and are not responsible for their privacy policies or how they handle your personal information.

We encourage you to review the privacy policies of any third-party websites you visit. The inclusion of a link on our Site does not imply our endorsement of that website or its privacy practices.

12. Do Not Track Signals

Some browsers transmit "Do Not Track" (DNT) signals to websites. At this time, there is no universally accepted standard for how websites should respond to DNT signals, and our Site does not currently alter its data collection or use practices in response to DNT signals. We will continue to monitor developments in this area and update our practices as new standards emerge.

California residents who wish to opt out of the sale or sharing of their personal information may use the mechanisms described in Section 6.2 of this Privacy Policy.

13. How to File a Privacy Complaint

If you have concerns about how we handle your personal information, we encourage you to contact us first so that we can address your concerns directly and promptly.

13.1 Contacting Us

Please submit your privacy complaint or concern to:

• Email: [email protected]
• Website: daves-hotchicken.digital

We will acknowledge receipt of your complaint within 10 business days and will strive to resolve the matter within 45 days of receipt. If we need more time, we will notify you of the extended timeline and provide a reason for the delay.

13.2 Regulatory Complaints

If you are not satisfied with our response to your privacy complaint, you have the right to file a complaint with the appropriate regulatory authority:

• Federal Trade Commission (FTC): The FTC enforces federal consumer protection laws, including privacy-related unfair or deceptive practices. You can file a complaint at reportfraud.ftc.gov or by calling 1-877-382-4357.
• California Privacy Protection Agency (CPPA): California residents may file complaints with the California Privacy Protection Agency, which enforces the CPRA. Visit cppa.ca.gov for more information on how to submit a complaint.
• State Attorney General Offices: Residents of other states may contact their respective State Attorney General's office for consumer protection matters relating to privacy.

14. Legal Basis for Processing (Where Applicable)

Where required by applicable law, we process your personal information on the following legal bases:

• Contractual Necessity: Processing is necessary to perform our contract with you, including fulfilling your food orders, managing your account, and providing customer support.
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as improving our services, preventing fraud, and maintaining the security of our systems, provided that these interests are not overridden by your privacy rights.
• Legal Obligation: Processing is necessary to comply with applicable federal, state, or local laws and regulations.
• Consent: Where we rely on your consent to process your personal information (e.g., for marketing communications or non-essential cookies), you have the right to withdraw your consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

15. Updates to This Privacy Policy

We reserve the right to update, modify, or revise this Privacy Policy at any time to reflect changes in our business practices, legal requirements, or the services we offer. When we make material changes to this Privacy Policy, we will notify you by:

• Posting the updated Privacy Policy on our website with a new "Last Updated" date at the top of the document.
• Sending you an email notification if you have provided us with your email address and the changes are significant.
• Displaying a prominent notice on our Site homepage for a reasonable period following the update.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our Site and services after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please do not hesitate to contact our privacy team using the information below:

We are committed to addressing your privacy concerns in a timely, thorough, and transparent manner. Thank you for trusting Dave's Hot Chicken with your personal information. We value your privacy and are dedicated to keeping your data safe.