Privacy Policy

This Privacy Policy describes how Dave's Hot Chicken ("we," "us," "our," or the "Company") collects, uses, discloses, and safeguards your personal information when you visit our website at daves-chicken.rest, place orders, use our services, or otherwise interact with us. Please read this policy carefully. By accessing or using our website and services, you acknowledge that you have read, understood, and agree to the practices described herein.

We are committed to protecting your privacy and handling your personal data in a transparent, lawful, and responsible manner. This Privacy Policy has been drafted in compliance with applicable United States federal and state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission (FTC) Act, and other relevant privacy regulations.

1. Who We Are

Dave's Hot Chicken is a food service business operating in the United States. For all privacy-related matters, you may contact us using the information below:

2. Scope of This Privacy Policy

This Privacy Policy applies to all personal information collected through:

• Our website located at daves-chicken.rest
• Online ordering systems, forms, and portals we operate or utilize
• Email communications, customer support interactions, and feedback forms
• Loyalty programs, promotions, sweepstakes, or surveys we may conduct
• Social media pages and channels maintained by Dave's Hot Chicken
• In-person transactions and point-of-sale systems at our restaurant locations
• Any other interaction you have with us as a customer, visitor, or prospective customer

This policy does not apply to third-party websites, apps, or services that may be linked to or from our website. We encourage you to review the privacy policies of any third-party platforms you visit independently of our services.

3. Information We Collect

We collect various categories of personal information, depending on how you interact with us. Below is a comprehensive breakdown of the data we may collect:

3.1 Personal Identification Information

When you register an account, place an order, subscribe to our newsletter, participate in a promotion, or contact us, we may collect:

• Full name
• Email address
• Telephone number
• Mailing or delivery address
• Date of birth (where applicable for age verification or promotional purposes)
• Username and password (for registered accounts)

3.2 Payment and Transaction Information

When you make a purchase through our website or at our restaurant locations, we collect:

• Payment card details (processed securely through third-party payment processors; we do not store full card numbers)
• Billing address
• Order history and transaction records
• Loyalty program points and redemption history

3.3 Usage Data and Online Activity

When you visit our website, we automatically collect certain technical and behavioral data, including:

• IP address and approximate geographic location derived therefrom
• Browser type and version
• Operating system and device type
• Pages visited, time spent on each page, and navigation paths
• Referring URLs (how you arrived at our website)
• Search queries submitted through our website's internal search function
• Date and time of access
• Clickstream data and interactions with page elements

3.4 Device Information

We may collect device-specific information such as:

• Device identifiers (e.g., mobile advertising IDs, where applicable)
• Mobile carrier information
• Screen resolution and display settings
• Hardware model and firmware version

3.5 Cookie and Tracking Technology Data

We use cookies, pixel tags, web beacons, and similar tracking technologies to collect information about your browsing behavior on our website. This data includes session identifiers, preferences you have set, and analytics data. Please see Section 10 of this policy for more information on our cookie practices.

3.6 Communications and Customer Support Data

When you contact us via email, phone, or contact forms, we may collect:

• The content of your message, inquiry, or complaint
• Attachments or files you submit
• Records of our correspondence with you
• Call recordings or transcripts (where permitted by law and disclosed at the time of the call)

3.7 User-Generated Content

If you submit reviews, ratings, photos, comments, or other content on our website or social media pages, we may collect and store such content along with associated metadata.

3.8 Information Collected from Third Parties

We may receive information about you from third-party sources, including:

• Social media platforms (if you connect your social media account or interact with our social media pages)
• Third-party food delivery and ordering platforms that process orders on our behalf
• Marketing partners and data analytics providers
• Public databases and commercially available data sources

4. How We Use Your Information

We use the personal information we collect for a variety of lawful business purposes, including but not limited to:

4.1 Providing and Managing Our Services

• Processing and fulfilling your food orders, whether placed online or in person
• Managing your account, including authentication and account security
• Communicating with you about the status of your order, reservations, or inquiries
• Processing payments and managing billing
• Operating and maintaining our loyalty and rewards programs
• Facilitating delivery or pickup arrangements

4.2 Customer Support and Communications

• Responding to your questions, comments, complaints, or support requests
• Sending transactional communications such as order confirmations, receipts, and delivery updates
• Notifying you of changes to our menu, services, or policies

4.3 Marketing and Promotional Activities

• Sending you promotional emails, newsletters, and special offers about Dave's Hot Chicken products, limited-time deals, and events (with your consent where required)
• Personalizing marketing content based on your order history and preferences
• Running contests, sweepstakes, and other promotional campaigns
• Displaying targeted advertisements on our website and third-party platforms
• Conducting surveys and collecting feedback to improve our offerings

4.4 Analytics and Business Intelligence

• Analyzing website traffic, usage patterns, and user behavior to improve website functionality and user experience
• Conducting market research and demand forecasting
• Measuring the effectiveness of our marketing campaigns
• Generating internal reports and business analytics

4.5 Legal Compliance and Safety

• Complying with applicable federal, state, and local laws and regulations
• Responding to lawful requests from law enforcement or government authorities
• Enforcing our Terms of Service and other applicable agreements
• Detecting, preventing, and investigating fraud, security incidents, and other unlawful activities
• Protecting the rights, property, and safety of Dave's Hot Chicken, our employees, customers, and the public

4.6 Business Operations

• Managing internal administrative functions
• Carrying out due diligence in connection with potential business transactions such as mergers, acquisitions, or asset sales
• Improving our products, menu items, and overall customer experience

5. How We Share Your Information

We do not sell your personal information to third parties for their own independent marketing purposes. However, we may share your information in the following circumstances:

5.1 Service Providers and Business Partners

We engage trusted third-party companies and individuals to perform services on our behalf, including:

• Payment processors: To securely process credit, debit, and digital payments
• Delivery and logistics partners: To fulfill delivery orders
• Email marketing platforms: To distribute newsletters and promotional messages
• Web hosting and cloud infrastructure providers: To maintain our website and data systems
• Analytics providers: To analyze website usage and measure campaign performance (e.g., Google Analytics)
• Customer relationship management (CRM) platforms: To manage customer interactions and data
• IT security and fraud prevention providers: To protect our systems and detect unauthorized activity

These service providers are contractually obligated to use your personal information only for the purposes for which it was disclosed to them and to maintain appropriate security standards.

5.2 Legal Requirements and Law Enforcement

We may disclose your personal information when required to do so by law or in response to valid legal processes, including:

• Court orders, subpoenas, or other judicial processes
• Requests from law enforcement or government agencies
• Situations where disclosure is necessary to protect our legal rights or the rights and safety of others
• Emergency situations involving a risk to the health or safety of any individual

5.3 Business Transfers

In the event that Dave's Hot Chicken is involved in a merger, acquisition, reorganization, asset sale, or similar business transaction, your personal information may be transferred to the successor entity as part of that transaction. We will notify you via email and/or a prominent notice on our website prior to the transfer becoming effective and will indicate any changes to the applicable privacy policy.

5.4 Affiliates and Related Entities

We may share your personal information with our affiliated companies or franchise partners to the extent necessary to provide you with our services or to improve our business operations. Such entities are required to adhere to privacy practices consistent with this policy.

5.5 With Your Consent

We may share your personal information with other third parties where you have provided explicit consent for us to do so, such as when you participate in a joint promotion or agree to share your information with a co-sponsoring partner.

6. Data Security

We take the security of your personal information seriously and have implemented a range of technical, administrative, and physical safeguards designed to protect your data from unauthorized access, disclosure, alteration, and destruction.

6.1 Security Measures We Employ

• Encryption: We use Secure Sockets Layer (SSL) / Transport Layer Security (TLS) encryption for all data transmitted between your browser and our servers.
• Access Controls: Access to personal data is restricted to authorized employees and contractors who need it to perform their job functions. All personnel with access to personal data are subject to confidentiality obligations.
• Firewalls and Intrusion Detection: Our systems are protected by firewalls, intrusion detection systems, and other network security technologies.
• Payment Card Security: We comply with the Payment Card Industry Data Security Standard (PCI DSS) requirements for the handling of payment card information.
• Regular Security Assessments: We periodically review and test our security infrastructure and practices to identify and address vulnerabilities.
• Data Minimization: We collect only the personal data that is necessary for the purposes described in this policy.

6.2 Limitations

While we employ industry-standard security practices, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee the absolute security of your personal information. In the event of a data breach that is likely to affect your rights and freedoms, we will notify you as required by applicable law.

7. Your Privacy Rights

Depending on your state of residence within the United States, you may have specific rights regarding your personal information. We are committed to honoring these rights in accordance with applicable law.

7.1 Rights Available to California Residents (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

7.2 Rights Available to All Users

Regardless of your location within the United States, we extend the following rights to all users of our website and services:

• Right to Access: You may request access to the personal information we hold about you by contacting us at [email protected].
• Right to Correction: You may request that we correct any inaccurate or incomplete personal information we hold about you.
• Right to Deletion: You may request that we delete your personal information, subject to legal and business retention requirements.
• Right to Data Portability: Where technically feasible, you may request that we provide your personal data in a structured, commonly used, and machine-readable format.
• Right to Withdraw Consent: Where our processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to Opt-Out of Marketing: You may opt out of receiving marketing communications from us at any time by clicking the "unsubscribe" link in our emails or by contacting us directly.

7.3 How to Submit a Privacy Rights Request

To exercise any of your privacy rights, please submit your request by:

• Email: [email protected] with the subject line "Privacy Rights Request"

We will acknowledge receipt of your request within 10 business days and respond substantively within 45 days of receipt. In certain circumstances, we may require an extension of up to an additional 45 days, in which case we will notify you of the extension and the reason for the delay. We may need to verify your identity before processing your request to protect your privacy and ensure that your data is not disclosed to unauthorized parties.

8. Data Retention

We retain your personal information for as long as is necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by applicable law.

8.1 Retention Guidelines

After the applicable retention period expires, we will securely delete or anonymize your personal information. In some cases, we may retain anonymized data indefinitely for analytical and research purposes, as it can no longer be used to identify you.

9. Children's Privacy

Dave's Hot Chicken does not direct its website or online services to minors under the age of 18, and we do not knowingly collect, use, or disclose personal information from children under the age of 18. By using our website or services, you represent and warrant that you are at least 18 years old.

If you are a parent or guardian and believe that your minor child has provided us with personal information without your consent, please contact us immediately at [email protected]. Upon receiving notice and verification, we will take prompt steps to delete the child's personal information from our systems.

We comply with the Children's Online Privacy Protection Act (COPPA), which restricts the online collection of personal information from children under 13 years of age. We have no actual knowledge of collecting personal information from children under 13, and we do not market our online services to such individuals.

10. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and support our marketing activities.

10.1 What Are Cookies?

Cookies are small text files that are placed on your device by websites you visit. They are widely used to make websites work more efficiently and to provide analytical information to website owners.

10.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the website to function properly. These include cookies that enable you to log into your account, add items to your cart, and complete purchases. These cannot be disabled.
• Performance and Analytics Cookies: These cookies collect information about how visitors use our website, such as which pages are visited most frequently. We use this data to improve our website. We may use services such as Google Analytics for this purpose.
• Functionality Cookies: These allow the website to remember choices you make (such as your preferred language or delivery address) and provide enhanced, more personalized features.
• Targeting and Advertising Cookies: These cookies are used to deliver advertisements that are relevant to you and your interests. They may also be used to limit how many times you see an advertisement and to measure the effectiveness of advertising campaigns.

10.3 Managing Cookie Preferences

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies or to delete cookies that have already been set. However, please be aware that disabling certain cookies may affect the functionality of our website and limit your ability to use certain features.

For more detailed information about the specific cookies we use, their purposes, and how to manage your preferences, please refer to our Cookie Policy, which is available on our website at daves-chicken.rest.

10.4 Do Not Track Signals

Some browsers include a "Do Not Track" (DNT) feature that signals websites not to track your online activity. At this time, there is no universally accepted standard for how websites should respond to DNT signals, and our website does not currently alter its data collection and use practices in response to DNT signals. We will revisit this practice if a uniform standard is established.

11. International Data Transfers

Dave's Hot Chicken is based in the United States, and the personal information we collect is primarily processed and stored within the United States. However, some of our third-party service providers may operate in other countries, which means that your personal information may be transferred to, stored in, or processed in countries outside the United States.

Where your personal information is transferred internationally, we take steps to ensure that appropriate safeguards are in place to protect your information in a manner consistent with applicable data protection laws. These safeguards may include:

• Entering into data processing agreements with third-party providers that include standard contractual clauses or equivalent protections
• Transferring data only to countries that offer an adequate level of protection as determined by relevant authorities
• Implementing technical and organizational security measures to protect data during transfer and storage

If you are located outside the United States and choose to use our website or services, please be aware that your information will be transferred to and processed in the United States. Data privacy laws in the United States may differ from those in your country of residence.

12. Third-Party Links and Services

Our website may contain links to third-party websites, including social media platforms, food delivery apps, and partner websites. These third-party sites have their own privacy policies, which we encourage you to review. We are not responsible for the privacy practices or content of any third-party websites, and our Privacy Policy does not apply to those sites.

Similarly, our website may incorporate third-party tools, widgets, or plugins (such as social media sharing buttons or embedded videos). These third parties may collect information about your visit to our website independently of our own data collection practices.

13. Marketing Communications and Opt-Out

With your consent, we may send you promotional emails, text messages, or push notifications about our menu, special offers, new locations, events, and other updates related to Dave's Hot Chicken.

13.1 Email Marketing

You may opt out of receiving marketing emails at any time by:

• Clicking the "Unsubscribe" link included at the bottom of every marketing email we send
• Logging into your account and updating your communication preferences
• Contacting us at [email protected]

Please note that even if you opt out of marketing communications, you will continue to receive transactional communications related to your orders, account activity, and customer support inquiries.

13.2 SMS/Text Marketing

If you have opted in to receive SMS marketing messages, you may opt out at any time by replying "STOP" to any SMS message you receive from us, or by contacting us at the email address provided above.

13.3 Push Notifications

If you have enabled push notifications through your browser or device settings, you can disable these at any time through your device or browser settings.

14. California-Specific Disclosures

In addition to the rights described in Section 7, California residents are entitled to certain additional disclosures under California law, including the Shine the Light Law (Cal. Civ. Code § 1798.83).

California residents may request information once per year about disclosures of personal information to third parties for their own direct marketing purposes. To make such a request, please contact us at [email protected] with "California Privacy Request" in the subject line.

15. How to File a Privacy Complaint

If you believe that we have not handled your personal information in accordance with this Privacy Policy or applicable privacy laws, we encourage you to contact us first so that we may address your concern directly.

15.1 Contact Us

You may submit a privacy complaint to us by:

• Email: [email protected] (Subject: "Privacy Complaint")

We will acknowledge receipt of your complaint promptly and will work with you to resolve the matter in a timely and fair manner.

15.2 Filing a Complaint with a Regulatory Authority

If you are a California resident and are dissatisfied with our response, you may file a complaint with the California Privacy Protection Agency (CPPA) or the California Attorney General's Office:

• California Privacy Protection Agency: cppa.ca.gov
• California Attorney General: oag.ca.gov/privacy

If you are located in another state, you may contact your state's attorney general or relevant consumer protection authority. Additionally, you may file a complaint with the Federal Trade Commission (FTC) regarding unfair or deceptive practices:

• FTC Complaint Center: reportfraud.ftc.gov

16. Changes to This Privacy Policy

We reserve the right to modify or update this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. When we make material changes to this policy, we will:

• Update the "Last Updated" date at the top of this page
• Post a prominent notice on our website informing you of the changes
• Where required by law, notify you by email or other direct means

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website and services following the posting of changes constitutes your acknowledgment of the updated policy.

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to reach out to us:

We are committed to working with you to resolve any privacy-related concerns in a fair, transparent, and timely manner. Our team will respond to all inquiries as promptly as possible and within the timeframes required by applicable law.