Privacy Policy

This Privacy Policy describes how Dave's Hot Chicken ("we," "us," "our," or "the Company") collects, uses, discloses, and protects your personal information when you visit our website at daves-new.click, place orders, use our mobile application, or otherwise interact with our services. Please read this policy carefully. By using our website or services, you agree to the practices described in this Privacy Policy.

We are committed to protecting your privacy and handling your personal information in a transparent, secure, and lawful manner. This policy has been prepared in compliance with applicable United States federal and state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), and other applicable regulations.

1. About Us

Dave's Hot Chicken is a food service business operating in the United States. For any questions, concerns, or requests related to this Privacy Policy, you may contact us using the following information:

2. Scope of This Privacy Policy

This Privacy Policy applies to all personal information we collect through:

• Our website located at daves-new.click
• Online ordering systems and third-party delivery platforms we partner with
• Email communications, newsletters, and marketing campaigns
• In-store loyalty programs and promotional sign-ups
• Social media interactions and advertising platforms
• Any other digital or physical touchpoints where we collect your information

This policy does not apply to the practices of third-party companies or websites that we do not own or control, even if we link to them from our website. We encourage you to review the privacy policies of any third-party services you visit.

3. Information We Collect

We collect various types of information in connection with our services. The categories of personal information we may collect include:

3.1 Personal Identification Information

When you register for an account, place an order, sign up for our newsletter, or contact us, we may collect:

• Full name
• Email address
• Phone number
• Mailing or delivery address
• Date of birth (for age verification and promotional purposes)
• Username and password (for registered accounts)
• Profile photo (if voluntarily submitted)

3.2 Payment and Transaction Information

To process your orders and payments, we may collect:

• Credit card or debit card details (processed securely via third-party payment processors)
• Billing address
• Order history and transaction records
• Loyalty points, gift card balances, and redemption history

Please note: We do not store your full payment card numbers on our servers. All payment transactions are processed by PCI-DSS compliant third-party payment processors.

3.3 Usage Data and Website Activity

We automatically collect certain information when you visit our website, including:

• IP address and approximate geographic location
• Browser type and version
• Pages viewed, links clicked, and time spent on each page
• Referring website or source
• Date and time of your visit
• Search queries entered on our website
• Items added to your cart, wishlisted, or viewed

3.4 Device Information

We collect information about the device you use to access our website or application, such as:

• Device type (mobile, tablet, desktop)
• Operating system and version
• Unique device identifiers
• Mobile network information
• Screen resolution and display settings

3.5 Cookie and Tracking Data

We use cookies, web beacons, pixel tags, and similar technologies to collect data about your interactions with our website. This may include session cookies, persistent cookies, and third-party analytics cookies. For more detailed information, please refer to Section 9 of this Privacy Policy, dedicated to Cookie Usage.

3.6 Communications and Feedback

When you contact our customer support, respond to surveys, or submit feedback, we collect:

• The content of your messages and correspondence
• Your satisfaction ratings and reviews
• Records of complaints and resolutions
• Information you voluntarily provide about dietary preferences or special requests

3.7 Social Media Information

If you connect with us through social media platforms or log in using a social media account, we may collect information shared by those platforms in accordance with your privacy settings on those services, such as your public profile, email address, and friend lists (where permitted).

3.8 Information from Third Parties

We may receive information about you from third-party sources, including:

• Delivery partners and third-party ordering platforms
• Marketing analytics and advertising partners
• Fraud prevention and identity verification services
• Publicly available databases

4. How We Use Your Information

We use the personal information we collect for the following purposes:

4.1 Service Provision and Order Fulfillment

• Processing and fulfilling your food orders, whether placed online, by phone, or in person
• Managing your account and providing customer support
• Sending order confirmations, receipts, and delivery updates
• Processing payments and refunds
• Maintaining and managing our loyalty and rewards programs

4.2 Marketing and Communications

• Sending promotional emails, newsletters, and special offers (with your consent where required)
• Personalizing marketing messages based on your order history and preferences
• Conducting sweepstakes, contests, and promotional campaigns
• Retargeting advertisements on third-party websites and social media platforms
• Notifying you about new menu items, restaurant openings, or limited-time offers

4.3 Analytics and Service Improvement

• Analyzing usage trends to improve our website functionality and user experience
• Measuring the performance and effectiveness of our marketing campaigns
• Conducting research and development to enhance our menu and services
• Monitoring and resolving technical issues with our website and systems
• Generating aggregated, anonymized statistical reports

4.4 Legal Compliance and Safety

• Complying with applicable federal and state laws and regulations
• Responding to lawful requests from government authorities or law enforcement
• Detecting, investigating, and preventing fraudulent transactions and other illegal activities
• Protecting the rights, property, and safety of our customers, employees, and the public
• Enforcing our Terms of Service and other agreements

4.5 Business Operations

• Managing our internal business records and accounting
• Facilitating corporate transactions such as mergers, acquisitions, or asset sales
• Training our staff and improving customer service quality

5. Legal Basis for Processing

In the United States, we rely on the following legal justifications for processing your personal information:

• Performance of a Contract: Processing your order, managing your account, and providing the services you have requested.
• Legitimate Business Interests: Improving our services, preventing fraud, and ensuring the security of our systems.
• Consent: Sending marketing communications and placing non-essential cookies, where you have provided explicit consent.
• Legal Obligation: Complying with applicable federal and state laws, court orders, and regulatory requirements.

6. Sharing Your Information with Third Parties

We do not sell your personal information to third parties. However, we may share your information in the following limited circumstances:

6.1 Service Providers and Business Partners

We work with trusted third-party vendors who provide services on our behalf, including:

• Payment processing companies (e.g., Stripe, Square, or similar PCI-DSS compliant processors)
• Food delivery and logistics partners
• Email marketing platforms (e.g., Mailchimp, Klaviyo)
• Website hosting and cloud infrastructure providers
• Customer relationship management (CRM) systems
• Analytics and data intelligence platforms (e.g., Google Analytics)
• Social media advertising platforms (e.g., Meta, Google, TikTok)
• Fraud prevention and identity verification services

These service providers are contractually obligated to use your information only for the purposes for which it was shared and to maintain appropriate security safeguards.

6.2 Legal Requirements and Law Enforcement

We may disclose your personal information if required to do so by law, regulation, court order, or government authority, or if we believe in good faith that such disclosure is necessary to:

• Comply with a legal obligation or regulatory requirement
• Protect and defend our legal rights or property
• Prevent or investigate possible wrongdoing in connection with our services
• Protect the personal safety of our customers, employees, or the public

6.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal information may be transferred as part of that transaction. We will notify you via email or a prominent notice on our website of any change in ownership or use of your personal information.

6.4 With Your Consent

We may share your information with other third parties when we have obtained your explicit consent to do so, such as when you participate in co-branded promotions or partner programs.

7. Data Security

We take the security of your personal information seriously and implement a variety of technical, administrative, and physical safeguards designed to protect your data from unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption: All data transmitted between your browser and our website is encrypted using Secure Socket Layer (SSL) / Transport Layer Security (TLS) technology. Sensitive data stored in our systems is encrypted at rest.
• Access Controls: Access to personal information is restricted to authorized employees and contractors who need the information to perform their job functions.
• Firewalls and Intrusion Detection: Our servers are protected by industry-standard firewalls and intrusion detection systems.
• PCI-DSS Compliance: All payment transactions are handled by third-party processors that are compliant with the Payment Card Industry Data Security Standard (PCI-DSS).
• Regular Security Audits: We conduct periodic security assessments and vulnerability testing to identify and address potential risks.
• Incident Response Plan: We maintain a documented data breach response procedure in compliance with applicable state breach notification laws.

Despite these measures, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. If you believe your account or personal information has been compromised, please contact us immediately at [email protected].

8. Your Privacy Rights

Depending on your state of residence, you may have certain rights regarding your personal information. We are committed to honoring these rights in accordance with applicable law.

8.1 Rights for All U.S. Residents

• Right to Know: You have the right to know what categories of personal information we collect about you, the purposes for which we use it, and the categories of third parties with whom we share it.
• Right to Access: You may request a copy of the specific personal information we hold about you.
• Right to Correction: You have the right to request that we correct inaccurate or incomplete personal information about you.
• Right to Deletion: You may request that we delete your personal information, subject to certain exceptions (e.g., where retention is required for legal compliance or to complete a transaction).
• Right to Opt Out of Marketing: You may opt out of receiving marketing communications from us at any time by clicking the "unsubscribe" link in our emails or by contacting us directly.

8.2 Additional Rights for California Residents (CCPA/CPRA)

If you are a California resident, you have the following additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Know (Detailed): Request disclosure of the specific pieces of personal information collected, the categories of sources, the business or commercial purposes for collection, and the categories of third parties with whom information is shared.
• Right to Delete: Request deletion of your personal information held by us or our service providers, subject to certain exceptions.
• Right to Correct: Request correction of inaccurate personal information we maintain about you.
• Right to Opt Out of Sale or Sharing: Although we do not sell personal information in the traditional sense, to the extent that our use of certain advertising technologies constitutes a "sale" or "sharing" of personal information under CPRA, you have the right to opt out. You may exercise this right by contacting us or using the "Do Not Sell or Share My Personal Information" link on our website.
• Right to Limit Use of Sensitive Personal Information: You have the right to limit the use of sensitive personal information to what is necessary for providing our services.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you services, charge different prices, or provide a lower quality of service because you exercised your privacy rights.
• Right to Data Portability: You may request that we provide your personal information in a portable, readily usable format that allows you to transmit the data to another entity.

8.3 How to Exercise Your Rights

To exercise any of the rights described above, please submit a verifiable consumer request to us by:

• Email: [email protected] (with subject line: "Privacy Rights Request")
• Website: daves-new.click

We will verify your identity before processing your request. You may designate an authorized agent to submit a request on your behalf, provided you provide written authorization and the agent's identity can be verified. We will respond to verified requests within 45 days as required by applicable law, with the possibility of a 45-day extension where reasonably necessary.

9. Cookie Usage

Our website uses cookies and similar tracking technologies to enhance your experience, analyze website traffic, and deliver personalized content and advertising. Cookies are small text files stored on your device when you visit our website.

9.1 Types of Cookies We Use

You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website. For detailed information about the cookies we use and how to manage your cookie preferences, please refer to our full Cookie Policy available on our website at daves-new.click.

10. Data Retention

We retain personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Our general data retention guidelines are as follows:

When personal information is no longer needed, we will securely delete, destroy, or anonymize it in accordance with our data retention and disposal policies.

11. Children's Privacy

Our services, including online ordering, loyalty programs, and marketing campaigns, are directed toward adults aged 18 and above. We do not knowingly collect, use, or disclose personal information from children under the age of 13 in violation of the Children's Online Privacy Protection Act (COPPA).

If you are a parent or guardian and believe that your child under the age of 13 has provided us with personal information without your consent, please contact us immediately at [email protected]. We will take prompt steps to delete such information from our records.

We recommend that parents and guardians monitor their children's online activities and use parental controls and other tools to ensure age-appropriate internet usage.

12. International Data Transfers

Dave's Hot Chicken is based in the United States, and your personal information is primarily collected, stored, and processed within the United States. However, some of our third-party service providers may be located in, or process data in, other countries.

If your personal information is transferred outside of the United States, we take appropriate steps to ensure that such transfers comply with applicable privacy laws and that your information receives an adequate level of protection. These steps may include:

• Entering into data processing agreements with service providers that include standard contractual clauses or equivalent data protection terms
• Ensuring that third-party processors implement technical and organizational security measures consistent with U.S. standards
• Limiting international transfers to countries with adequate privacy protections recognized under applicable U.S. law

If you are located outside of the United States and use our website or services, please be aware that your information will be transferred to and processed in the United States, where data protection laws may differ from those in your country of residence. By using our services, you acknowledge and consent to such transfer and processing.

13. Do Not Track Signals

Some web browsers offer a "Do Not Track" (DNT) feature that signals to websites that you do not want your online activities tracked. Currently, there is no universally accepted standard for how companies should respond to DNT signals, and our website does not currently respond to DNT signals from browsers. We will continue to monitor developments in this area and update our practices as standards emerge.

You may also opt out of interest-based advertising by visiting the Network Advertising Initiative (NAI) at optout.networkadvertising.org or the Digital Advertising Alliance (DAA) at optout.aboutads.info.

14. Third-Party Links and Services

Our website may contain links to third-party websites, social media platforms, or integrated third-party services (such as online ordering platforms and delivery apps). These third-party services have their own privacy policies, which govern how they collect and use your information. We are not responsible for the privacy practices or content of any third-party websites or services.

We encourage you to review the privacy policies of any third-party services you access through links on our website or in connection with our services, including but not limited to:

• Food delivery platforms (e.g., DoorDash, Uber Eats, Grubhub)
• Social media platforms (e.g., Instagram, Facebook, TikTok, X/Twitter)
• Payment processors
• Review and rating platforms (e.g., Yelp, Google Reviews)

15. Marketing Communications and Opt-Out

With your consent, we may send you promotional emails, newsletters, loyalty program updates, and special offers related to Dave's Hot Chicken. You can opt out of receiving marketing communications from us at any time by:

• Clicking the "Unsubscribe" link at the bottom of any marketing email we send you
• Contacting us directly at [email protected] with the subject line "Unsubscribe"
• Logging into your account and updating your communication preferences

Please note that even if you opt out of marketing communications, we may still send you transactional emails related to your orders, account activity, or important service notices. These communications are not subject to the opt-out mechanism described above, as they are necessary to provide the services you have requested.

16. How to File a Complaint

If you believe that we have not complied with this Privacy Policy or applicable privacy laws, we encourage you to first contact us directly to resolve your concern:

• Email: [email protected]
• Subject Line: "Privacy Complaint"

We will investigate your complaint and respond within a reasonable time frame, typically within 30 days.

16.1 Filing a Complaint with a Data Protection Authority

If you are not satisfied with our response, or if you believe your privacy rights have been violated, you have the right to file a complaint with the appropriate regulatory authority:

17. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our business practices, legal requirements, or data processing activities. When we make material changes to this policy, we will:

• Post the updated Privacy Policy on our website at daves-new.click with a new "Last Updated" date
• Send an email notification to registered users where required by law
• Display a prominent notice on our homepage for a period of at least 30 days following a material change

Your continued use of our website or services after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

18. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, your personal information, or your privacy rights, please do not hesitate to contact our Privacy Team: