Privacy Policy

This Privacy Policy describes how Dave's Hot Chicken ("we," "us," "our," or the "Company") collects, uses, discloses, and protects your personal information when you visit our website at newdaveshotchicken.click, place orders, interact with our digital services, or otherwise engage with us. Please read this policy carefully. By using our website or services, you agree to the practices described herein.

We are committed to protecting your privacy and handling your personal data in an open and transparent manner. This Privacy Policy has been prepared in compliance with applicable United States federal and state privacy laws, including the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), and other applicable consumer protection statutes.

If you do not agree with this Privacy Policy, please discontinue use of our website and services immediately. For any questions regarding this policy, please contact us using the information provided at the end of this document.

1. About Us

Dave's Hot Chicken operates the website located at newdaveshotchicken.click and provides food-related products and services to consumers in the United States. We act as the data controller for personal information collected through our digital platforms.

2. Information We Collect

We collect several categories of personal information, depending on how you interact with our website and services. The categories below outline what we collect, why we collect it, and the sources from which we obtain it.

2.1 Personal Identification Information

When you create an account, place an order, subscribe to our newsletter, or contact our customer support team, we may collect the following personally identifiable information:

• Full name
• Email address
• Phone number
• Billing and delivery address
• Date of birth (for age verification purposes)
• Username and password (encrypted)
• Profile photo (if voluntarily uploaded)

2.2 Transaction and Order Information

When you make a purchase through our platform, we collect information necessary to process and fulfill your order, including:

• Items ordered, quantity, and pricing
• Payment method type (e.g., credit card, debit card, digital wallet)
• Partial payment card information (last four digits only; full card data is processed by PCI-DSS compliant third-party payment processors)
• Order history and purchase frequency
• Special dietary preferences or notes submitted with orders
• Delivery instructions and location data

2.3 Usage and Behavioral Data

We automatically collect data about how you interact with our website and digital services, including:

• Pages viewed and time spent on each page
• Links and buttons clicked
• Search queries entered on our website
• Referral URLs (the website that directed you to ours)
• Scrolling behavior and interaction patterns
• Cart abandonment data
• Session duration and frequency of visits

2.4 Device and Technical Information

We collect technical information from the devices you use to access our services, including:

• IP address
• Browser type and version
• Operating system and device type
• Screen resolution
• Mobile device identifiers (such as device ID or advertising ID)
• Time zone and language settings
• Network connection type

2.5 Location Data

With your permission, we may collect precise or approximate location data to facilitate delivery services, show nearby restaurant locations, and improve our services. You may disable location tracking at any time through your device settings. We may also infer general location from your IP address.

2.6 Communications Data

If you contact us via email, chat, phone, or social media, we collect the content of those communications for customer service purposes, including your name, contact details, and the details of your inquiry or complaint.

2.7 Cookies and Tracking Technologies

We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about your browsing activity. For a complete description of the cookies we use and how to manage them, please refer to Section 9 of this policy.

2.8 Information from Third Parties

We may receive personal information about you from third parties, including:

• Social media platforms (if you log in using a social account such as Google or Facebook)
• Delivery partners and logistics providers
• Payment processors and fraud detection services
• Marketing analytics platforms
• Publicly available data sources

3. How We Use Your Information

We use the personal information we collect for a variety of legitimate business purposes. We will only use your data in ways that are compatible with the purpose for which it was originally collected, or where we have a legal basis to do so.

3.1 Service Provision and Order Fulfillment

• Processing and fulfilling your food orders
• Managing your account and customer profile
• Facilitating delivery, including sharing your address with delivery partners
• Processing payments and refunds
• Sending order confirmations, receipts, and status updates
• Responding to customer service inquiries and complaints
• Enforcing our Terms of Service

3.2 Analytics and Service Improvement

• Analyzing usage trends to understand how customers use our services
• Improving the design, functionality, and content of our website
• Personalizing your browsing and ordering experience
• Conducting internal research and testing
• Identifying and resolving technical problems
• Monitoring website performance and uptime

3.3 Marketing and Communications

• Sending you promotional offers, newsletters, and special deals (with your consent)
• Notifying you of new menu items, seasonal promotions, and limited-time offers
• Displaying personalized advertisements based on your interests and browsing behavior
• Conducting customer satisfaction surveys and collecting feedback
• Sending push notifications (where enabled on your device)

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any marketing email or by contacting us at [email protected].

3.4 Legal Compliance and Safety

• Complying with applicable laws, regulations, and legal processes
• Preventing fraud, unauthorized access, and other illegal activities
• Protecting the safety and security of our customers, employees, and the public
• Responding to lawful requests from government or law enforcement authorities
• Enforcing our legal rights and defending against legal claims

3.5 Age Verification

We use date of birth and other verification methods to ensure that our online services are not used by individuals under the age of 13 (or 18 where required). Children's privacy is addressed in detail in Section 11 of this policy.

4. Legal Basis for Processing

While the United States does not have a single comprehensive federal privacy law equivalent to the GDPR, we rely on the following bases for processing personal data:

• Contractual Necessity: Processing necessary to fulfill your order or provide the services you have requested.
• Legitimate Interests: Processing for business analytics, fraud prevention, website security, and improving our services, where these interests are not overridden by your rights.
• Consent: Processing for marketing communications and optional cookies, where you have provided explicit consent.
• Legal Obligation: Processing required to comply with applicable federal and state laws.

5. Sharing of Your Personal Information

We do not sell, rent, or trade your personal information to third parties for their independent marketing purposes. However, we may share your information in the following circumstances:

5.1 Service Providers and Business Partners

We engage trusted third-party service providers who assist us in operating our business. These providers are contractually obligated to use your data only for the purposes for which it was provided and to maintain appropriate security measures. Categories of service providers include:

• Payment Processors: To securely process credit/debit card transactions (e.g., Stripe, Square)
• Delivery Partners: To fulfill food delivery orders to your address
• Cloud Hosting Providers: To store and manage website data and customer databases
• Email and SMS Marketing Platforms: To send promotional communications
• Analytics Providers: To analyze website traffic and user behavior (e.g., Google Analytics)
• Customer Support Tools: To manage customer service interactions
• Fraud Prevention Services: To detect and prevent unauthorized transactions

5.2 Legal Requirements and Law Enforcement

We may disclose your personal information if we are required to do so by law, or in good faith belief that such disclosure is necessary to:

• Comply with a legal obligation, court order, subpoena, or governmental regulation
• Protect the rights, property, or personal safety of Dave's Hot Chicken, its customers, or the public
• Prevent or investigate possible illegal activity, fraud, or security breaches
• Respond to requests from federal, state, or local law enforcement agencies

5.3 Business Transfers

In the event that Dave's Hot Chicken undergoes a merger, acquisition, restructuring, bankruptcy, or sale of all or a portion of its assets, your personal information may be transferred to the acquiring entity as part of that transaction. We will notify you via email and/or a prominent notice on our website prior to such a transfer and will inform you of any changes to this Privacy Policy.

5.4 With Your Consent

We may share your information with other third parties when you have given us explicit consent to do so, such as when participating in co-branded promotions or loyalty programs.

5.5 California-Specific Disclosures (CCPA/CPRA)

Under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), California residents have specific rights regarding the "sale" or "sharing" of personal information. We do not sell personal information in the traditional sense. However, we may share certain data with advertising partners, which may constitute "sharing" under the CPRA. California residents may opt out of such sharing by contacting us at [email protected] or using the opt-out mechanism described in Section 8.

6. Data Security

We take the security of your personal information seriously. We implement a comprehensive set of technical, administrative, and physical safeguards designed to protect your data against unauthorized access, disclosure, alteration, or destruction.

6.1 Technical Measures

• SSL/TLS encryption for all data transmitted between your browser and our servers
• Encryption of sensitive data at rest, including stored payment and personal information
• Firewalls, intrusion detection systems, and regular vulnerability scanning
• Secure access controls and multi-factor authentication for internal systems
• Regular software patches and security updates

6.2 Administrative Measures

• Employee training on data privacy and security protocols
• Access to personal data limited to authorized personnel on a need-to-know basis
• Confidentiality agreements with employees and contractors who handle personal data
• Regular internal audits of data handling practices

6.3 Physical Measures

• Secure server environments with restricted physical access
• Secure disposal of physical records containing personal information

6.4 Data Breach Response

Despite our best efforts, no data transmission or storage system can be guaranteed to be 100% secure. In the event of a data breach that affects your personal information, we will notify you in accordance with applicable state and federal breach notification laws, including any applicable notification requirements under state consumer protection statutes. We will take prompt steps to investigate, contain, and remediate any security incidents.

7. Your Privacy Rights

Depending on your state of residence, you may have certain rights with respect to your personal information. We are committed to honoring these rights. To exercise any of the rights described below, please contact us at [email protected].

7.1 Right to Know / Right of Access

You have the right to request that we disclose what personal information we have collected about you, including the categories of data, the purposes for which it is used, the sources from which it was collected, and the categories of third parties with whom we have shared it.

7.2 Right to Correction

You have the right to request that we correct inaccurate personal information we hold about you. You may also update your information directly through your account settings on our website.

7.3 Right to Deletion

You have the right to request that we delete personal information we have collected from you, subject to certain exceptions (such as where we are required by law to retain the data, or where the data is necessary to complete a transaction you initiated).

7.4 Right to Data Portability

Where technically feasible, you may request a copy of your personal information in a structured, machine-readable format so that you can transfer it to another service provider.

7.5 Right to Opt Out of Sale or Sharing

Under CCPA/CPRA, California residents have the right to opt out of the sale or sharing of their personal information for cross-context behavioral advertising. To exercise this right, please contact us at [email protected].

7.6 Right to Limit Use of Sensitive Personal Information

Under the CPRA, California residents have the right to limit the use and disclosure of sensitive personal information (such as precise geolocation, account credentials, or biometric data) to specific permitted purposes.

7.7 Right to Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights. We will not deny you goods or services, charge you different prices, or provide a different level of service based on your exercise of privacy rights, except as permitted by applicable law.

7.8 How to Submit a Request

To submit a privacy rights request, please contact us using one of the following methods:

• Email: [email protected] (subject line: "Privacy Rights Request")
• Website: newdaveshotchicken.click

We will verify your identity before processing your request and will respond within the timeframe required by applicable law (generally within 45 days, with a possible extension of an additional 45 days where necessary). We may ask you to provide additional identifying information to verify your identity.

7.9 Authorized Agents

California residents may designate an authorized agent to submit privacy rights requests on their behalf. The authorized agent must provide written authorization signed by you, and we may verify your identity directly before processing the request.

8. Your Choices and Opt-Out Options

8.1 Marketing Communications

You can opt out of receiving promotional emails by clicking the "unsubscribe" link at the bottom of any marketing email we send. You may also opt out of SMS marketing by replying "STOP" to any text message we send. Please note that even if you opt out of marketing communications, we may still send you transactional messages related to your orders and account.

8.2 Cookie Preferences

You can manage your cookie preferences through your browser settings or by using our cookie consent tool available on our website. For more information, see Section 9 below.

8.3 Location Data

You can disable location tracking on your mobile device through your device's privacy settings. Note that disabling location data may affect the functionality of delivery features.

8.4 Do Not Track

Some browsers have a "Do Not Track" (DNT) feature that signals to websites that you do not want your online activities tracked. Currently, our website does not respond to DNT signals due to the lack of a uniform industry standard. We will update this policy if the industry adopts a standardized approach.

9. Cookie Policy

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and deliver targeted advertising. This section provides a brief overview of our cookie practices.

9.1 What Are Cookies?

Cookies are small text files placed on your device by websites you visit. They are widely used to make websites work more efficiently and to provide information to website owners.

9.2 Types of Cookies We Use

9.3 Managing Cookies

You can control and manage cookies in several ways:

• Through our website's cookie consent banner
• Through your browser settings (note: disabling cookies may affect website functionality)
• Through third-party opt-out tools, such as the Network Advertising Initiative or Digital Advertising Alliance opt-out page

10. Data Retention

We retain your personal information only for as long as is necessary to fulfill the purposes for which it was collected, including legal, accounting, and reporting obligations.

After the applicable retention period, we will securely delete or anonymize your personal information so that it can no longer be associated with you.

11. Children's Privacy

Our website and services are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. We strongly recommend that individuals under 18 obtain parental consent before using our services.

In compliance with the Children's Online Privacy Protection Act (COPPA), we do not knowingly collect, use, or disclose personal information from children under 13 without verifiable parental consent. If we become aware that we have inadvertently collected personal information from a child under 13, we will take immediate steps to delete that information from our records.

If you believe that we may have collected information from a child under 13, please contact us immediately at [email protected].

Parents and guardians who believe their child has provided us with personal information may request its deletion by contacting us at the email address above. We will promptly investigate and, where required, delete the information.

12. International Data Transfers

Dave's Hot Chicken is based in the United States, and the personal information we collect is primarily processed and stored within the United States. If you are accessing our website from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country of residence.

By using our website and submitting your personal information, you consent to the transfer of your data to the United States. Where we transfer data internationally, we take steps to ensure that adequate safeguards are in place to protect your personal information in accordance with this Privacy Policy and applicable law.

If you have questions about how your information is handled when transferred internationally, please contact us at [email protected].

13. Third-Party Websites and Links

Our website may contain links to third-party websites, social media platforms, delivery applications, and other external services that are not operated by us. This Privacy Policy applies solely to our website and services. We are not responsible for the privacy practices of any third-party websites. We encourage you to review the privacy policies of any third-party sites you visit.

We may also embed content from third-party platforms (such as YouTube videos or social media widgets) that may collect data about your interaction with that content. Please review the privacy policies of those platforms for more information.

14. California Privacy Rights (CCPA/CPRA)

California residents have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA). In addition to the rights described in Section 7, California residents may also:

• Request that we disclose the categories and specific pieces of personal information we have collected about them in the preceding 12 months
• Request information about the commercial purposes for which we have shared personal information with third parties
• Opt out of the "sale" or "sharing" of personal information as defined under CPRA
• Request correction of inaccurate personal information
• Request deletion of personal information (subject to legal exceptions)
• Not be discriminated against for exercising any of their California privacy rights

To exercise any of these rights, please submit a verifiable consumer request by emailing us at [email protected] with the subject line "California Privacy Rights Request." We will respond within 45 calendar days.

15. Nevada Privacy Rights

Residents of Nevada have the right to opt out of the sale of certain personally identifiable information to third parties who intend to license or sell that information. We do not currently sell personally identifiable information as defined under Nevada Revised Statutes Chapter 603A. However, if you have questions or wish to submit an opt-out request, please contact us at [email protected].

16. Federal Trade Commission (FTC) Compliance

We operate in accordance with the Federal Trade Commission Act, which prohibits unfair or deceptive practices in commerce, including in the collection and use of consumer data. Our data practices are designed to be transparent, honest, and consistent with consumer expectations. We do not engage in deceptive data collection or misrepresent the purposes for which we use your information.

If you believe that we have engaged in unfair or deceptive practices, you may file a complaint with the Federal Trade Commission at www.ftc.gov or by calling 1-877-382-4357.

17. Filing a Complaint

If you have concerns about how we handle your personal information and are not satisfied with our response, you have the right to file a complaint with the appropriate data protection or consumer protection authority. Depending on your state of residence, the relevant authority may be:

17.1 Federal Authorities

• Federal Trade Commission (FTC): www.ftc.gov/complaint
• FTC Phone: 1-877-382-4357

17.2 State Authorities

• California: California Privacy Protection Agency (CPPA) — cppa.ca.gov
• California Attorney General's Office: oag.ca.gov/privacy
• Other States: Contact your state's Attorney General's office for consumer protection complaints

We encourage you to contact us first so that we have an opportunity to address your concerns directly before you submit a complaint to a regulatory authority.

18. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. When we make material changes, we will notify you by updating the "Last Updated" date at the top of this page and, where required by law, by providing additional notice such as a notification on our website homepage or by sending an email to the address associated with your account.

Your continued use of our website and services after any changes to this Privacy Policy constitutes your acceptance of the updated policy. We encourage you to review this policy periodically to stay informed about how we protect your information.

If you disagree with any changes to this Privacy Policy, you should stop using our website and services and may request deletion of your personal information as described in Section 7.3.

19. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact us. We are committed to resolving privacy-related inquiries promptly and transparently.