Privacy Policy

Welcome to Dave's Hot Chicken. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website daves.rest, place orders, interact with our services, or otherwise engage with us. Please read this policy carefully. If you disagree with its terms, please discontinue use of our website and services.

This Privacy Policy applies to all information collected through our website (daves.rest), as well as any related services, sales, marketing, or events. By using our website and services, you acknowledge that you have read, understood, and agree to the collection and use of information in accordance with this Privacy Policy.

1. About Us

Dave's Hot Chicken is a food service business operating in the United States. We operate the website located at daves.rest and provide hot chicken dining, ordering, and related food services to our customers.

For any privacy-related questions, requests, or concerns, please contact us at [email protected].

2. Information We Collect

We collect various types of information in connection with your use of our website, services, and interactions with Dave's Hot Chicken. The categories of information we collect are described below.

2.1 Personal Information You Provide Directly

When you use our website or services, you may voluntarily provide us with personal information, including but not limited to:

• Contact Information: Your full name, email address, telephone number, and mailing or delivery address.
• Account Information: Username, password, and account preferences if you create an account with us.
• Order Information: Details of your food orders, special dietary requests, delivery instructions, and payment-related information (note: we do not store full payment card numbers; payment processing is handled by secure third-party processors).
• Communication Data: Any messages, feedback, reviews, or inquiries you send to us via email, contact forms, or other communication channels.
• Marketing Preferences: Your preferences for receiving promotional communications from us, including email newsletters and special offers.
• Loyalty Program Data: If you participate in any loyalty or rewards program, we collect information related to your participation, points balance, and redemption history.

2.2 Usage Data and Technical Information

When you access and use our website, we automatically collect certain technical information, including:

• Log Data: Your IP address, browser type and version, operating system, referring URLs, pages visited, time and date of your visit, and time spent on pages.
• Clickstream Data: Information about how you navigate through our website, including the links you click and features you use.
• Search Queries: Terms you search for on our website.
• Error Reports: Information about errors or crashes encountered while using our website.

2.3 Device Information

We collect information about the device you use to access our website, including:

• Device type (desktop, mobile, tablet)
• Device identifiers and hardware model
• Mobile network information
• Screen resolution and display settings
• Browser settings and language preferences

2.4 Location Information

With your consent or as permitted by your device settings, we may collect general location information (such as city or region based on your IP address) to help us provide relevant local services, show you nearby locations, and deliver accurate delivery services. We do not collect precise GPS location without your explicit permission.

2.5 Cookies and Tracking Technologies

We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about your browsing behavior and preferences. Please refer to Section 8 of this Privacy Policy for a detailed explanation of our cookie usage.

2.6 Information from Third Parties

We may receive information about you from third-party sources, such as:

• Social Media Platforms: If you interact with our social media pages or connect your social media account to our services, we may receive profile information as permitted by your privacy settings on those platforms.
• Delivery Partners: Third-party delivery platforms may share certain order and contact information with us to fulfill your food orders.
• Analytics Providers: Third-party analytics tools may provide aggregated or behavioral data about how users interact with websites similar to ours.
• Review Platforms: Public reviews or ratings you submit about Dave's Hot Chicken on third-party review platforms.

3. How We Use Your Information

We use the information we collect for various purposes related to operating our business and providing you with the best possible food and service experience. Specifically, we use your information to:

3.1 Service Provision and Order Fulfillment

• Process and fulfill your food orders and delivery requests
• Communicate with you about your order status, changes, or issues
• Manage your account and provide customer support
• Process payments and prevent fraudulent transactions
• Provide loyalty rewards and manage your participation in promotional programs

3.2 Website Operation and Improvement

• Operate, maintain, and improve our website and digital services
• Monitor and analyze usage patterns and trends to improve user experience
• Diagnose technical problems and ensure the security of our website
• Develop new features, products, and services based on user behavior and feedback
• Personalize your experience on our website and show content relevant to your preferences

3.3 Marketing and Communications

• Send you promotional emails, newsletters, and special offers (with your consent where required by law)
• Inform you about new menu items, seasonal specials, and upcoming events
• Conduct contests, sweepstakes, or other promotional activities
• Display targeted advertising based on your interests and browsing behavior
• Measure the effectiveness of our marketing campaigns

3.4 Analytics and Research

• Conduct market research and analyze customer preferences
• Generate statistical reports and analytics about our business operations
• Understand demographic trends among our customer base
• Improve our menu offerings and service quality based on customer feedback

3.5 Legal and Compliance

• Comply with applicable laws, regulations, and legal obligations
• Respond to lawful requests from government authorities or law enforcement
• Enforce our Terms of Service and other agreements
• Protect our legal rights and defend against legal claims
• Prevent fraud, abuse, and unauthorized access to our systems

4. Legal Basis for Processing

We collect and process your personal information based on several legal grounds, depending on the type of information and the context in which it is collected:

• Contract Performance: Processing is necessary to fulfill your orders, manage your account, and provide the services you request.
• Legitimate Interests: We process certain information based on our legitimate business interests, such as fraud prevention, improving our services, and direct marketing to existing customers, provided these interests are not overridden by your rights.
• Consent: Where required by law, we rely on your consent to process your data for marketing communications and certain cookie placements. You may withdraw consent at any time.
• Legal Obligations: Processing is necessary to comply with applicable laws and regulations, including tax, food safety, and consumer protection laws.

As a business operating in the United States, we comply with applicable federal and state privacy laws, including the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) for California residents, and the Federal Trade Commission (FTC) Act governing unfair or deceptive trade practices and consumer data protection at the federal level.

5. Sharing Your Information with Third Parties

We do not sell your personal information to third parties for monetary compensation. However, we may share your information in the following circumstances:

5.1 Service Providers and Business Partners

We engage trusted third-party companies and individuals to assist us in operating our business and providing services to you. These service providers may have access to your personal information to perform specific tasks on our behalf and are contractually obligated not to disclose or use it for any other purpose. Categories of service providers include:

• Payment Processors: Companies that securely process credit card and other payment transactions on our behalf.
• Delivery Partners: Third-party delivery services that fulfill food delivery orders.
• Cloud Hosting and IT Services: Providers that host our website and store our data securely.
• Email and Communication Services: Platforms used to send transactional and marketing emails.
• Analytics Providers: Services such as Google Analytics that help us understand website traffic and user behavior.
• Customer Support Tools: Software platforms used to manage customer inquiries and support tickets.
• Marketing and Advertising Platforms: Services used to deliver targeted advertising and measure campaign performance.

5.2 Legal Requirements and Law Enforcement

We may disclose your personal information if we are required to do so by law, court order, or governmental authority, or if we believe in good faith that such disclosure is necessary to:

• Comply with a legal obligation, subpoena, or regulatory requirement
• Protect the rights, property, or safety of Dave's Hot Chicken, our customers, or the public
• Detect, prevent, or address fraud, security, or technical issues
• Enforce our Terms of Service or other applicable agreements

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal information may be transferred to the acquiring entity. We will notify you via email and/or a prominent notice on our website before your information becomes subject to a different privacy policy.

5.4 Aggregated and Anonymized Data

We may share aggregated or anonymized information that does not identify you personally with third parties for industry research, analytics, marketing, or other business purposes.

6. Data Security

The security of your personal information is extremely important to us. We implement a range of administrative, technical, and physical security measures designed to protect your information from unauthorized access, disclosure, alteration, destruction, or misuse.

6.1 Security Measures We Employ

• Encryption: We use Secure Socket Layer (SSL) / Transport Layer Security (TLS) encryption to protect data transmitted between your browser and our website.
• Access Controls: Access to personal information is restricted to authorized personnel who require it to perform their job functions, and we use role-based access controls and strong authentication measures.
• Secure Payment Processing: Payment card information is processed by PCI-DSS compliant payment processors. We do not store full credit card numbers on our servers.
• Regular Security Assessments: We conduct periodic security assessments and vulnerability testing to identify and address potential risks.
• Data Minimization: We collect only the personal information that is necessary for the purposes described in this Privacy Policy.
• Employee Training: Our team members receive regular training on data privacy and security best practices.
• Incident Response: We maintain a data breach response plan to address security incidents promptly and notify affected individuals as required by law.

7. Your Privacy Rights

Depending on your location and applicable law, you may have certain rights with respect to your personal information. We are committed to honoring these rights and making it easy for you to exercise them.

7.1 Rights Available to All Users

• Right to Access: You have the right to request a copy of the personal information we hold about you.
• Right to Correction: You have the right to request that we correct any inaccurate or incomplete personal information we hold about you.
• Right to Deletion: You have the right to request that we delete your personal information, subject to certain exceptions (such as where retention is required by law or to fulfill contractual obligations).
• Right to Opt-Out of Marketing: You may opt out of receiving marketing communications from us at any time by clicking the "unsubscribe" link in our emails or contacting us directly.
• Right to Data Portability: You have the right to receive a copy of your personal information in a structured, commonly used, and machine-readable format, and to request that we transfer it to another service provider where technically feasible.

7.2 Additional Rights for California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including:

• Right to Know: The right to know what categories of personal information we collect, the purposes for which it is used, and the categories of third parties with whom it is shared.
• Right to Delete: The right to request deletion of your personal information, subject to certain exceptions.
• Right to Correct: The right to request correction of inaccurate personal information.
• Right to Opt-Out of Sale or Sharing: The right to opt out of the sale of your personal information or its sharing for cross-context behavioral advertising. We do not sell personal information for monetary compensation. However, certain sharing of information for targeted advertising may constitute "sharing" under the CPRA. You may opt out by contacting us.
• Right to Limit Use of Sensitive Personal Information: The right to limit our use and disclosure of sensitive personal information to purposes necessary to provide our services.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. You will not be denied goods or services, charged different prices, or provided a lower quality of service because you exercised your privacy rights.

7.3 How to Exercise Your Rights

To exercise any of the rights described above, please submit your request using one of the following methods:

• Email: [email protected]
• Website: daves.rest

We will respond to verifiable consumer requests within 45 days of receipt. If we require additional time (up to 90 days total), we will inform you of the reason and extension in writing. We may need to verify your identity before fulfilling your request. We will not charge a fee for processing your request unless it is excessive, repetitive, or manifestly unfounded.

8. Cookie Usage

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and deliver personalized content and advertising. Cookies are small text files placed on your device when you visit our website.

8.1 Types of Cookies We Use

8.2 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse or delete cookies. However, please note that disabling certain cookies may affect the functionality of our website and your ability to use some of our services. You may also opt out of interest-based advertising through industry opt-out tools such as the Digital Advertising Alliance (DAA) at optout.aboutads.info or the Network Advertising Initiative (NAI) at optout.networkadvertising.org.

For more detailed information about the cookies we use, please refer to our full Cookie Policy, available on our website at daves.rest.

9. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, comply with our legal obligations, resolve disputes, and enforce our agreements. The specific retention periods depend on the type of information and the purpose for which it was collected.

When personal information is no longer needed, we will securely delete, destroy, or anonymize it in accordance with our data retention and disposal procedures.

10. Children's Privacy

Dave's Hot Chicken does not knowingly solicit information from or market to children under the age of 18. If we learn that we have inadvertently collected personal information from a person under 18 without verifiable parental consent, we will take immediate steps to delete that information from our systems.

If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at [email protected]. We are committed to complying with the Children's Online Privacy Protection Act (COPPA) and other applicable laws regarding the privacy of minors.

We encourage parents and guardians to supervise their children's online activities and to help enforce this policy by instructing their children never to provide personal information on our website without parental permission.

11. International Data Transfers

Dave's Hot Chicken is based in the United States, and your personal information is primarily collected and processed within the United States. However, in the course of our business operations, your information may be transferred to, stored in, or processed by our service providers located in other countries.

When we transfer personal information outside of the United States, we take appropriate steps to ensure that your information receives an adequate level of protection in accordance with applicable privacy laws. These steps may include:

• Ensuring that the recipient country provides an adequate level of data protection as recognized by applicable authorities
• Entering into data transfer agreements with service providers that incorporate standard contractual clauses or other approved mechanisms for cross-border data transfers
• Relying on certifications or other compliance frameworks that ensure appropriate data protection safeguards

By using our website and services, you acknowledge and consent to the transfer of your personal information to the United States and other countries as described in this Privacy Policy. If you have questions about international data transfers, please contact us at [email protected].

12. Third-Party Links and Services

Our website may contain links to third-party websites, services, social media platforms, and applications that are not operated by us. This Privacy Policy does not apply to those third-party services, and we are not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any third-party websites or services you visit.

Third-party services that may be integrated with or linked from our website include, but are not limited to, social media platforms (such as Instagram, Facebook, TikTok, and Twitter/X), payment processors, food delivery platforms, and review sites. These services operate under their own privacy policies and terms of service.

13. Do Not Track Signals

Some browsers include a "Do Not Track" (DNT) feature that signals to websites that you do not want to be tracked. Currently, there is no universally accepted standard for how websites should respond to DNT signals. Our website does not currently respond to DNT browser signals. We will update our practices if a standardized approach to DNT is established by applicable regulatory authorities.

California residents may also utilize the Global Privacy Control (GPC) signal to opt out of the sale or sharing of their personal information. We are committed to honoring GPC signals where technically feasible and required by law.

14. Changes to This Privacy Policy

We reserve the right to update, modify, or replace this Privacy Policy at any time. When we make changes, we will update the "Last Updated" date at the top of this page. For significant changes that materially affect how we handle your personal information, we will provide more prominent notice, such as an email notification to the address associated with your account or a banner notification on our website.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website and services following the posting of changes constitutes your acceptance of the updated Privacy Policy.

15. Filing Complaints with Data Protection Authorities

If you believe that we have not handled your personal information in accordance with applicable privacy laws, you have the right to file a complaint with the relevant data protection or consumer protection authority.

15.1 California Residents

California residents who have concerns about our privacy practices may contact the California Privacy Protection Agency (CPPA), the state agency responsible for enforcing the CPRA:

• California Privacy Protection Agency (CPPA)
• Website: cppa.ca.gov
• Address: 2101 Arena Blvd, Sacramento, CA 95834

15.2 Federal Consumer Protection

Consumers who have concerns about unfair or deceptive practices related to privacy may also file a complaint with the Federal Trade Commission (FTC):

• Federal Trade Commission (FTC)
• Website: ftc.gov
• Complaint Center: reportfraud.ftc.gov

We kindly ask that before filing a complaint with a regulatory authority, you first contact us directly at [email protected] so that we have the opportunity to address your concern promptly and effectively.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please do not hesitate to contact our privacy team. We are committed to addressing your inquiries promptly and thoroughly.

When contacting us regarding a privacy request, please include your full name, contact information, and a clear description of your request or concern so that we can assist you efficiently. We will acknowledge receipt of your inquiry and respond within the timeframes required by applicable law.