Privacy Policy

Effective Date: June 19, 2026  |  Last Updated: June 19, 2026

1. Introduction and Who We Are

Welcome to Dave's Hot Chicken. We are a food service business operating in the United States, dedicated to providing our customers with an exceptional dining and ordering experience. As part of our commitment to transparency and your right to privacy, we have prepared this comprehensive Privacy Policy to explain exactly how we handle your personal information.

Throughout this Privacy Policy, references to "Dave's Hot Chicken," "we," "us," or "our" refer to the company operating the website hotchicken-daves.digital. References to "you," "your," or "user" refer to any individual who accesses or uses our website, places an order, subscribes to our communications, or otherwise interacts with us.

Our contact details for privacy-related matters are as follows:

This Privacy Policy applies to all personal information collected through our website, online ordering platforms, marketing communications, loyalty programs (if applicable), customer service interactions, and any other digital or physical touchpoints through which we collect your data.

2. Applicable Laws and Legal Framework

As a business operating in the United States, we are committed to complying with all applicable federal and state privacy laws. These include, but are not limited to:

• The California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) — which grants specific rights to California residents regarding their personal information.
• The Federal Trade Commission (FTC) Act — which prohibits unfair or deceptive acts or practices in commerce and governs our overall data handling standards.
• The CAN-SPAM Act — which governs our commercial email communications.
• The Children's Online Privacy Protection Act (COPPA) — which restricts data collection from children under the age of 13.
• All other applicable state and federal privacy regulations in effect at the time of this policy.

Where specific state laws grant you additional rights, we will honor those rights to the fullest extent required by law. If you are a California resident, please pay particular attention to Section 11 of this Privacy Policy, which outlines your rights under the CCPA/CPRA.

3. Information We Collect

We collect different categories of information depending on how you interact with us. Below is a comprehensive breakdown of the types of personal information we may collect.

3.1 Personal Identification Information

When you create an account, place an order, contact us, or sign up for our marketing communications, we may collect the following personally identifiable information:

• Full name (first and last)
• Email address
• Phone number
• Billing and delivery address (including street address, city, state, and ZIP code)
• Date of birth (for age verification or promotional purposes, where applicable)
• Username and password (for account holders)
• Profile picture or avatar (if uploaded voluntarily)

3.2 Payment and Transaction Information

When you place an order or make a purchase through our website, we collect information necessary to process your payment. This may include:

• Credit or debit card details (processed securely through our third-party payment processors — we do not store full card numbers)
• Billing address associated with your payment method
• Order history and transaction records
• Gift card or promotional code information

3.3 Usage and Behavioral Data

When you browse our website, we automatically collect certain technical and behavioral data about your visit, including:

• Pages visited and content viewed
• Time and date of your visit
• Duration of your session
• Clickstream data (links clicked, buttons pressed)
• Search queries entered on our website
• Shopping cart contents and abandoned cart data
• Referral source (how you arrived at our website)

3.4 Device and Technical Information

Our website automatically collects certain technical information from your device, including:

• IP address
• Browser type and version
• Operating system and device type (desktop, mobile, tablet)
• Screen resolution
• Device identifiers (where applicable)
• Geolocation data (approximate location based on IP address, or precise location if you grant permission through your device)
• Time zone settings and language preferences

3.5 Cookie and Tracking Data

We use cookies and similar tracking technologies (such as web beacons, pixels, and local storage) to enhance your browsing experience, analyze website traffic, and deliver personalized content and advertising. Please refer to Section 8 of this Privacy Policy for detailed information about our use of cookies.

3.6 Communications and Customer Service Data

When you contact us via email, phone, social media, or any other channel, we may collect and retain:

• The content of your messages or inquiries
• Records of phone conversations (where permitted by law and with appropriate notice)
• Your communication preferences
• Complaint and feedback records

3.7 Marketing and Preference Data

If you opt in to receive marketing communications from us, we may collect:

• Email marketing engagement data (open rates, click rates)
• Your stated dietary preferences or food interests
• Promotional code usage history
• Loyalty program membership data and points balances
• Survey responses and competition entries

3.8 Information from Third Parties

We may also receive personal information about you from third-party sources, such as:

• Food delivery platforms (e.g., DoorDash, Uber Eats, Grubhub) through which you place orders
• Social media platforms if you connect your account or interact with our social media presence
• Advertising partners and analytics providers
• Fraud prevention and identity verification services

4. How We Use Your Information

We use the personal information we collect for a variety of legitimate business purposes. We will only use your data in ways that are compatible with the purposes described at the time of collection.

4.1 Providing and Managing Our Services

• Processing and fulfilling your food orders
• Managing your customer account
• Facilitating payment processing and issuing receipts
• Arranging delivery or confirming in-store pickup details
• Communicating order status updates and confirmations
• Managing loyalty program memberships and rewards

4.2 Customer Service and Support

• Responding to your inquiries, complaints, and feedback
• Resolving disputes and processing refunds or returns where applicable
• Improving our response procedures and customer service quality

4.3 Analytics and Business Improvement

• Analyzing website usage patterns to improve site performance and user experience
• Conducting market research and customer satisfaction surveys
• Tracking and analyzing sales trends to improve our menu offerings
• Testing new features, website designs, and promotional strategies
• Generating internal business reports and analytics

4.4 Marketing and Promotional Communications

• Sending you promotional emails, special offers, and news about Dave's Hot Chicken (with your consent where required)
• Delivering personalized offers based on your order history and preferences
• Serving targeted advertisements on third-party platforms and websites
• Running contests, sweepstakes, and loyalty reward programs

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any of our marketing emails, or by contacting us at [email protected].

4.5 Legal Compliance and Safety

• Complying with applicable federal, state, and local laws and regulations
• Preventing fraud, unauthorized access, and other illegal activities
• Enforcing our Terms of Service and other applicable agreements
• Protecting the rights, property, and safety of Dave's Hot Chicken, our customers, and others
• Responding to lawful requests from law enforcement or government authorities

5. How We Share Your Information

We do not sell your personal information to third parties for monetary compensation. However, we may share your information with trusted third parties in the following circumstances:

5.1 Service Providers and Business Partners

We work with carefully selected third-party service providers who assist us in operating our business. These providers are permitted to use your information only to the extent necessary to perform their services on our behalf and are bound by confidentiality obligations. Categories of service providers include:

• Payment Processors: To securely process credit card and electronic payments
• Delivery Platform Partners: To facilitate food delivery services
• Email Marketing Platforms: To send promotional communications on our behalf
• Website Analytics Providers: Such as Google Analytics, to help us understand website usage
• Cloud Hosting Providers: To store and manage website data securely
• Customer Relationship Management (CRM) Tools: To manage customer interactions
• Fraud Prevention Services: To detect and prevent fraudulent transactions

5.2 Food Delivery Aggregators

If you place an order through a third-party food delivery platform (such as DoorDash, Uber Eats, or Grubhub), your information will also be subject to those platforms' own privacy policies. We encourage you to review those policies separately.

5.3 Legal Requirements and Law Enforcement

We may disclose your personal information if we are required to do so by law, or if we believe in good faith that such disclosure is necessary to:

• Comply with a legal obligation, court order, or government request
• Enforce our Terms of Service or other agreements
• Protect the rights, safety, or property of Dave's Hot Chicken, our employees, customers, or the public
• Prevent or investigate potential wrongdoing in connection with our services

5.4 Business Transfers

In the event that Dave's Hot Chicken is involved in a merger, acquisition, sale of assets, or other business reorganization, your personal information may be transferred as part of that transaction. We will notify you via email or a prominent notice on our website before your information is transferred and becomes subject to a different privacy policy.

5.5 With Your Consent

We may share your information with other third parties for purposes not described in this Privacy Policy when we have obtained your explicit consent to do so.

6. Data Security Measures

We take the security of your personal information seriously and have implemented a range of technical, administrative, and physical safeguards designed to protect your data from unauthorized access, use, disclosure, alteration, or destruction.

6.1 Technical Safeguards

• SSL/TLS Encryption: All data transmitted between your browser and our website is encrypted using industry-standard Secure Sockets Layer (SSL) / Transport Layer Security (TLS) protocols.
• Firewall Protection: Our servers are protected by firewalls and intrusion detection systems.
• Secure Payment Processing: All payment transactions are processed through PCI-DSS compliant payment gateways. We never store full credit card numbers on our systems.
• Access Controls: Access to personal data is restricted to authorized personnel only, on a need-to-know basis.
• Data Pseudonymization: Where possible, we use pseudonymization and anonymization techniques to reduce the risks associated with data processing.

6.2 Administrative Safeguards

• Regular employee training on data protection and privacy best practices
• Internal data handling policies and procedures
• Confidentiality agreements with employees and contractors who handle personal data
• Vendor due diligence and data processing agreements with third-party service providers

6.3 Data Breach Response

In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify affected individuals and, where required, the relevant authorities, in accordance with applicable law. We will take prompt steps to contain the breach, assess its scope, and mitigate any potential harm.

7. Data Retention

We retain your personal information only for as long as is necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

When your personal information is no longer needed, we will securely delete, destroy, or anonymize it in accordance with our internal data disposal procedures.

8. Cookies and Tracking Technologies

Our website, hotchicken-daves.digital, uses cookies and similar tracking technologies to enhance your experience, analyze site performance, and deliver relevant advertising.

8.1 What Are Cookies?

Cookies are small text files placed on your device by websites you visit. They are widely used to make websites work more efficiently, to provide website owners with analytical information, and to enable personalized advertising.

8.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the website to function properly (e.g., maintaining your shopping cart and login session). These cannot be disabled.
• Performance and Analytics Cookies: These help us understand how visitors interact with our website by collecting anonymous usage data. We use tools such as Google Analytics for this purpose.
• Functional Cookies: These remember your preferences (e.g., saved addresses, language settings) to provide a more personalized experience.
• Marketing and Advertising Cookies: These are used to deliver targeted advertisements based on your browsing behavior. They may be set by us or by third-party advertising partners.

8.3 Managing Your Cookie Preferences

You can manage or disable cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of our website. Most browsers allow you to refuse cookies or delete existing cookies. For more information on how to manage cookies, visit www.allaboutcookies.org.

For California residents, please note that certain uses of advertising and tracking cookies may constitute a "sale" or "sharing" of personal information under the CPRA. You have the right to opt out of such uses — please see Section 11 for more details.

9. Children's Privacy

Our website and services are intended for users who are 18 years of age or older. We do not knowingly collect, use, or disclose personal information from individuals under the age of 18.

In compliance with the Children's Online Privacy Protection Act (COPPA), we do not knowingly collect personal information from children under the age of 13. If you are a parent or guardian and you believe that your child under the age of 13 has provided us with personal information without your consent, please contact us immediately at [email protected].

Upon receiving such a notification, we will take prompt steps to verify the information and, if confirmed, delete the child's personal data from our systems as quickly as reasonably practicable. We also encourage parents and guardians to monitor their children's online activities and educate them about safe internet practices.

If you are between the ages of 13 and 17, you must have your parent's or guardian's permission to use our website and services. By using our website, you confirm that you are 18 years of age or older, or that you have obtained the necessary parental consent.

10. International Data Transfers

Dave's Hot Chicken is based in the United States, and all data we collect is primarily processed and stored within the United States. However, some of our third-party service providers may be located in, or may process data in, countries outside of the United States.

If we transfer your personal information to countries outside of the United States, we will ensure that appropriate safeguards are in place to protect your data, in compliance with applicable U.S. laws. These safeguards may include:

• Entering into legally binding data processing agreements with our service providers that incorporate appropriate data protection standards
• Transferring data only to countries that are recognized as providing an adequate level of data protection
• Implementing contractual clauses that require recipients to protect personal data to standards equivalent to those applicable in the United States

If you have questions about our international data transfer practices, please contact us at [email protected].

11. Your Privacy Rights

Depending on your state of residence, you may have certain rights with respect to your personal information. We are committed to honoring these rights and will respond to verified requests within the timeframes required by applicable law.

11.1 General Rights Available to All Users

• Right to Access: You have the right to request a copy of the personal information we hold about you.
• Right to Correction: You have the right to request that we correct any inaccurate or incomplete personal information about you.
• Right to Deletion: You have the right to request that we delete your personal information, subject to certain exceptions (such as where we are required to retain data for legal compliance purposes).
• Right to Opt Out of Marketing: You have the right to opt out of receiving marketing communications from us at any time.
• Right to Data Portability: Where technically feasible, you have the right to receive a copy of your personal information in a structured, commonly used, and machine-readable format.

11.2 Additional Rights for California Residents (CCPA/CPRA)

If you are a resident of California, you have the following additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

To exercise any of your California privacy rights, please contact us using the information provided in Section 13 of this Privacy Policy. We may need to verify your identity before processing your request. We will respond to verified requests within 45 days, with the possibility of a 45-day extension where reasonably necessary and with prior notice.

11.3 How to Submit a Privacy Rights Request

To submit a privacy rights request, you may:

• Send an email to: [email protected]
• Write to us at our business address (please see Section 13)

When submitting your request, please include sufficient information to allow us to verify your identity and understand the nature of your request. We may ask you to provide additional information for verification purposes.

You may also designate an authorized agent to submit requests on your behalf. If you use an authorized agent, we may require written authorization or proof of a power of attorney, and we may also require you to verify your identity directly with us.

12. Third-Party Websites and Links

Our website may contain links to third-party websites, applications, and services, including social media platforms, food delivery aggregators, and payment processors. These third-party services are not operated by us, and this Privacy Policy does not apply to them.

We strongly encourage you to review the privacy policies of any third-party websites or services you visit through links on our website. We are not responsible for the privacy practices, content, or security of third-party platforms.

13. Contact Information for Privacy Inquiries

If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please do not hesitate to contact us. We are committed to addressing your privacy concerns promptly and thoroughly.

14. How to File a Complaint with a Data Protection Authority

If you believe that we have violated your privacy rights or applicable privacy laws, we encourage you to first contact us directly so that we can work to resolve your concern. However, you also have the right to file a complaint with the relevant regulatory authority.

14.1 California Residents

California residents who believe their CCPA/CPRA rights have been violated may file a complaint with the California Privacy Protection Agency (CPPA):

• Website: https://cppa.ca.gov
• Mailing Address: California Privacy Protection Agency, 2101 Arena Blvd, Sacramento, CA 95834

14.2 Federal Complaints

If you believe our practices violate the FTC Act or other federal consumer protection laws, you may file a complaint with the Federal Trade Commission (FTC):

• Website: https://www.ftc.gov/complaint
• Phone: 1-877-FTC-HELP (1-877-382-4357)

14.3 Residents of Other States

Residents of other U.S. states that have enacted comprehensive privacy laws (such as Virginia, Colorado, Connecticut, Utah, and Texas) may have the right to appeal our decisions regarding their privacy requests and to contact their respective state attorney general's office if they believe their rights have been violated. Please refer to your state's specific privacy law for more information.

15. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our business practices, legal requirements, or the way we handle personal information. When we make material changes to this policy, we will:

• Update the "Last Updated" date at the top of this page
• Post a prominent notice on our website or send you an email notification (where required by law or where we deem it appropriate)

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our website and services after we post changes to this Privacy Policy constitutes your acceptance of those changes.

If we make changes that materially and adversely affect your rights under this Privacy Policy, we will provide at least 30 days' notice before the new policy takes effect, where required by applicable law.

16. Accessibility of This Privacy Policy

We are committed to making this Privacy Policy accessible to all users. If you require this Privacy Policy in an alternative format due to a disability or accessibility need, please contact us at [email protected], and we will do our best to accommodate your request.