Privacy Policy

Welcome to Dave's Hot Chicken. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website cafe-daveshotchicken.click, place orders, interact with our digital services, or otherwise engage with us. Please read this policy carefully. If you disagree with its terms, please discontinue use of our site and services.

This Privacy Policy has been prepared in compliance with applicable United States federal and state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), and other applicable consumer protection regulations. By using our website or services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

1. Who We Are

Dave's Hot Chicken is a food service business operating in the United States. We are dedicated to delivering exceptional food experiences to our customers both in-person and through our digital platforms.

2. Information We Collect

We collect various types of information in connection with your use of our website and services. The categories of personal information we may collect include the following:

2.1 Personal Information You Provide Directly

When you interact with our website, place an order, create an account, or contact us, you may voluntarily provide us with personal information such as:

• Full name — for account creation, order processing, and personalization.
• Email address — for order confirmations, promotional communications, and account management.
• Phone number — for delivery coordination, customer support, and order updates.
• Mailing or delivery address — for processing food delivery and shipping requests.
• Payment information — such as credit or debit card details processed securely through third-party payment processors (we do not store full card numbers on our servers).
• Username and password — if you create an online account on our platform.
• Dietary preferences and food allergies — provided voluntarily to customize your orders.
• Feedback and reviews — content you submit through surveys, review forms, or customer service interactions.
• Communications content — information you provide when you contact us via email, phone, or online forms.

2.2 Usage and Behavioral Data

When you visit our website, we automatically collect certain information about your interaction with our digital platforms, including:

• Pages visited, links clicked, and features used on our website.
• Time and date of your visit and duration of your session.
• Referring URLs (the website that directed you to ours).
• Search queries entered on our website.
• Menu items viewed and order history.
• Shopping cart activity and purchase behavior.

2.3 Device and Technical Information

We may collect technical information about the device and software you use to access our website, including:

• IP address and approximate geographic location derived from it.
• Browser type and version (e.g., Chrome, Firefox, Safari).
• Operating system and device type (e.g., desktop, tablet, mobile).
• Screen resolution and language settings.
• Cookie identifiers and session tokens (see our Cookie section below).
• Mobile device identifiers (if accessing via a mobile application or mobile browser).

2.4 Cookies and Tracking Technologies

We use cookies, web beacons, pixel tags, and similar tracking technologies to enhance your experience on our website, analyze traffic patterns, and deliver targeted advertising. For full details, please refer to Section 8 of this policy dedicated to Cookie Usage.

2.5 Information from Third Parties

We may also receive information about you from third-party sources, such as:

• Third-party food delivery platforms or partner services that process your orders.
• Social media platforms if you choose to connect your social media account or interact with our social content.
• Analytics and advertising partners who provide aggregated data about user demographics and interests.
• Fraud prevention and identity verification services.

3. How We Use Your Information

We use the information we collect for a variety of business and operational purposes. All data use is grounded in at least one lawful basis, including your consent, contractual necessity, legitimate business interests, or compliance with legal obligations.

3.1 Service Provision and Order Fulfillment

• To process and fulfill your food orders and delivery requests.
• To manage your account, including registration, login, and profile management.
• To send order confirmations, receipts, and status updates via email or SMS.
• To coordinate delivery logistics and communicate with delivery partners on your behalf.
• To process payments securely through our authorized payment processors.
• To manage loyalty programs, rewards, and promotional offers tied to your account.

3.2 Customer Support

• To respond to your questions, complaints, and feedback.
• To troubleshoot technical issues you may encounter on our platform.
• To investigate and resolve disputes or refund requests related to your orders.

3.3 Analytics and Service Improvement

• To analyze website traffic, user behavior, and performance metrics.
• To understand which menu items, features, and promotions resonate with our customers.
• To improve the functionality, layout, and user experience of our website.
• To conduct internal research and development to enhance our food and service offerings.

3.4 Marketing and Promotional Communications

• To send you newsletters, special offers, new menu announcements, and promotional campaigns — but only with your consent or where we have a legitimate interest.
• To deliver personalized advertisements on our website and on third-party platforms based on your preferences and browsing history.
• To conduct surveys and gather customer satisfaction feedback.
• To manage and measure the effectiveness of our marketing campaigns.

3.5 Legal Compliance and Safety

• To comply with applicable federal and state laws, regulations, and legal processes.
• To enforce our Terms of Service and other agreements.
• To detect, investigate, and prevent fraudulent transactions, abuse, and other illegal activities.
• To protect the rights, property, and safety of Dave's Hot Chicken, our customers, and the public.

4. Sharing Your Information with Third Parties

We do not sell your personal information to third parties for monetary compensation. However, we may share your information in the following limited circumstances:

4.1 Service Providers and Business Partners

We work with carefully selected third-party vendors who perform services on our behalf. These may include:

• Payment processors (e.g., Stripe, Square) who handle credit and debit card transactions securely.
• Delivery and logistics partners who fulfill food delivery orders.
• Email and SMS marketing platforms used to send promotional and transactional messages.
• Web analytics providers (e.g., Google Analytics) who help us understand website performance.
• Cloud hosting and IT infrastructure providers who store and secure our data.
• Customer support software providers who help us manage support tickets and inquiries.
• Advertising networks that deliver targeted advertisements based on your interests.

All service providers are contractually obligated to use your personal information only as directed by us and in accordance with this Privacy Policy. They are not permitted to use your data for their own independent marketing purposes.

4.2 Legal Requirements and Law Enforcement

We may disclose your personal information when required to do so by law, regulation, or legal process, including:

• In response to a valid court order, subpoena, or government investigation.
• To comply with applicable federal or state laws, including food safety regulations.
• To cooperate with law enforcement agencies investigating illegal activity.
• To protect against fraud, cyber threats, or imminent physical harm.

4.3 Business Transfers

In the event that Dave's Hot Chicken undergoes a merger, acquisition, reorganization, sale of assets, or bankruptcy proceeding, your personal information may be transferred to the acquiring or successor entity. We will notify you via email or a prominent notice on our website before your data becomes subject to a different privacy policy.

4.4 Aggregated and De-Identified Data

We may share aggregated or anonymized data that cannot reasonably be used to identify you with business partners, advertisers, researchers, or the public for purposes such as industry analysis, trend reporting, and marketing research.

5. Data Security

We take the security of your personal information seriously and implement a range of technical, administrative, and physical safeguards designed to protect your data from unauthorized access, disclosure, alteration, and destruction.

5.1 Security Measures We Employ

• SSL/TLS Encryption: All data transmitted between your browser and our website is encrypted using Secure Socket Layer (SSL) or Transport Layer Security (TLS) technology.
• Secure Payment Processing: Payment card information is handled exclusively by PCI-DSS compliant third-party processors. We do not store full card numbers on our servers.
• Access Controls: Access to personal data is restricted to authorized employees and contractors who have a legitimate need to access it for business purposes.
• Regular Security Audits: We conduct periodic reviews of our security practices and update our systems as necessary.
• Data Minimization: We collect only the information necessary to fulfill the purposes described in this policy.
• Incident Response Plan: We maintain a data breach response plan and will notify affected users and relevant authorities as required by law in the event of a security breach.

6. Your Privacy Rights

Depending on your state of residence, you may have specific rights regarding your personal information. We honor the rights of all users to the extent required by applicable law.

6.1 Rights Under California Law (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) grants you the following rights:

6.2 General Privacy Rights (All Users)

Regardless of your state of residence, we provide all users with the following rights as a matter of good practice:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of any inaccurate or incomplete personal information.
• Deletion: Request deletion of your personal data, subject to applicable legal obligations that require us to retain certain records.
• Opt-Out of Marketing: Unsubscribe from promotional emails and marketing communications at any time.
• Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

6.3 How to Submit a Privacy Request

To exercise any of the rights described above, please contact us using one of the following methods:

• Email: [email protected]
• Website: cafe-daveshotchicken.click

We will respond to your request within 45 days of receipt. If we require additional time (up to 90 days total), we will inform you of the reason for the extension within the initial 45-day period. We may need to verify your identity before processing your request to protect your privacy and security.

You may designate an authorized agent to submit requests on your behalf. Authorized agents must provide written proof of authorization, and we may require you to verify your identity directly with us.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including satisfying legal, regulatory, accounting, or reporting requirements. The following general retention periods apply:

When personal information is no longer needed for its original purpose and no legal obligation requires its retention, we will securely delete or anonymize it in accordance with our internal data retention procedures.

8. Cookie Usage

Our website uses cookies and similar tracking technologies to improve functionality, personalize content, and analyze usage patterns. Cookies are small text files stored on your device when you visit a website.

8.1 Types of Cookies We Use

• Essential Cookies: Necessary for the website to function properly (e.g., maintaining your session, shopping cart functionality). These cannot be disabled without affecting site performance.
• Performance/Analytics Cookies: Help us understand how visitors interact with our website by collecting and reporting information anonymously (e.g., Google Analytics).
• Functional Cookies: Remember your preferences and settings (e.g., language selection, location preferences) to provide a more personalized experience.
• Advertising/Targeting Cookies: Used to deliver relevant advertisements and track the effectiveness of our marketing campaigns on third-party platforms.

8.2 Managing Your Cookie Preferences

You can manage or disable cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or be notified when a new cookie is set. Please note that disabling certain cookies may affect the functionality of our website. You may also opt out of interest-based advertising through the Network Advertising Initiative (NAI) opt-out tool or the Digital Advertising Alliance (DAA) opt-out page.

For more detailed information about the cookies we use and how to manage them, please refer to our full Cookie Policy available on our website.

9. Children's Privacy

We are committed to complying with the Children's Online Privacy Protection Act (COPPA) and other applicable laws protecting minors. If we discover that we have inadvertently collected personal information from a child under the age of 13, we will take prompt steps to delete that information from our records.

If you are a parent or legal guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at [email protected] so that we can take appropriate action.

We strongly encourage parents and guardians to monitor their children's online activity and to educate them about safe internet practices.

10. International Data Transfers

Dave's Hot Chicken is based in the United States and primarily serves customers within the United States. All personal data we collect is stored and processed on servers located within the United States.

If you are accessing our website from outside the United States, please be aware that your information may be transferred to and processed in a country with data protection laws that may differ from those in your jurisdiction. By using our website and providing us with your personal information, you consent to the transfer of your information to the United States.

We take appropriate steps to ensure that any cross-border transfer of personal data is handled in accordance with applicable legal requirements and that your information remains protected regardless of where it is processed. Where required, we implement appropriate safeguards such as standard contractual clauses or data processing agreements with our service providers.

11. Third-Party Websites and Links

Our website may contain links to third-party websites, applications, or services that are not owned or controlled by Dave's Hot Chicken. These may include social media platforms, food delivery apps, payment gateways, or partner websites. This Privacy Policy applies solely to information collected by us through our website and services.

We are not responsible for the privacy practices or content of any third-party websites. We strongly encourage you to review the privacy policies of every website you visit or app you use. The inclusion of a link on our website does not imply our endorsement or approval of the linked site or its privacy practices.

12. Do Not Track Signals

Some browsers offer a "Do Not Track" (DNT) feature that signals to websites that you do not want your online browsing activity tracked. Currently, there is no universally accepted standard for how websites should respond to DNT signals. As a result, our website does not currently respond to DNT signals.

However, you may opt out of interest-based tracking and advertising through your browser cookie settings or through the opt-out mechanisms offered by third-party advertising networks, as described in our Cookie section above.

13. California-Specific Disclosures

13.1 "Shine the Light" Law

Under California Civil Code Section 1798.83 (the "Shine the Light" law), California residents may request information regarding our disclosure of personal information to third parties for direct marketing purposes. To submit such a request, please contact us at [email protected].

13.2 Categories of Personal Information Disclosed for Business Purposes

In the past 12 months, we have disclosed the following categories of personal information to service providers for business purposes:

• Identifiers (name, email, IP address, account ID)
• Commercial information (purchase history, menu preferences)
• Internet or other electronic network activity information (browsing history on our site)
• Geolocation data (approximate location derived from IP address)
• Inferences drawn from personal information (user preferences, interests)

13.3 No Sale of Personal Information

Dave's Hot Chicken does not sell your personal information to third parties in exchange for monetary compensation. To the extent that sharing data with advertising partners may constitute a "sale" or "sharing" under the CCPA/CPRA, you have the right to opt out. Please contact us at [email protected] to exercise this right.

14. How to File a Complaint

If you believe that we have not handled your personal information in accordance with this Privacy Policy or applicable law, we encourage you to contact us first so that we can attempt to resolve your concern:

• Email: [email protected]

We will acknowledge your complaint within 10 business days and aim to resolve it within 30 days. If you are not satisfied with our response, you have the right to file a complaint with the relevant data protection authority:

14.1 Federal Trade Commission (FTC)

The Federal Trade Commission enforces consumer protection laws and handles complaints related to unfair or deceptive business practices, including privacy violations:

• Website: ftc.gov/complaint
• Phone: 1-877-FTC-HELP (1-877-382-4357)

14.2 California Attorney General (California Residents)

California residents who believe their CCPA/CPRA rights have been violated may file a complaint with the California Privacy Protection Agency (CPPA) or the California Attorney General:

• California Privacy Protection Agency: cppa.ca.gov
• California Attorney General: oag.ca.gov/privacy/ccpa

14.3 State Attorney General Offices (Other States)

Residents of other states with applicable state privacy laws (such as Virginia, Colorado, Connecticut, Utah, and Texas) may also file complaints with their respective state Attorney General offices if they believe their privacy rights have been violated.

15. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our business practices, technological developments, or applicable laws. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page.
• Post a prominent notice on our website homepage or send you an email notification if the changes are significant.
• Where required by law, obtain your renewed consent before implementing changes that affect how we use your previously collected personal information.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our website and services after any modifications to this policy constitutes your acknowledgment and acceptance of the updated terms.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact our privacy team. We are committed to addressing your inquiries promptly and transparently.