Privacy Policy

Welcome to Dave's Hot Chicken. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website daves-chicken.click, place an order, subscribe to our communications, or otherwise interact with us. Please read this policy carefully. If you disagree with its terms, please discontinue use of our site and services.

This Privacy Policy applies to all information collected through our website, mobile experience, and any related services, sales, marketing, or events (collectively, the "Services").

1. Who We Are

Dave's Hot Chicken is a food service business operating in the United States. We are the data controller responsible for your personal information collected through our Services.

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at the email address listed above. We will make every effort to respond promptly and transparently.

2. Information We Collect

We collect information about you in a variety of ways depending on how you interact with our Services. The categories below describe what we collect, why we collect it, and how.

2.1 Personal Information You Provide to Us

When you voluntarily provide information to us — such as when creating an account, placing an online order, signing up for our newsletter, submitting a contact form, participating in a promotion, or contacting our customer support — we may collect the following:

• Identity Data: First name, last name, username, or similar identifier.
• Contact Data: Email address, billing address, delivery address, and telephone number.
• Financial Data: Payment card details (note: full card details are processed by our secure third-party payment processors and are not stored on our servers).
• Transaction Data: Details about purchases you have made, including items ordered, order history, preferences, and pricing.
• Profile Data: Your username and password, orders or purchases made by you, your preferences, feedback, and survey responses.
• Marketing and Communications Data: Your preferences in receiving marketing from us and our third parties, and your communication preferences.
• User-Generated Content: Reviews, comments, photos, or other content you choose to submit to us.

2.2 Information Collected Automatically

When you visit our website or use our Services, certain information is collected automatically through cookies, web beacons, pixels, log files, and similar technologies. This includes:

• Usage Data: Pages visited, links clicked, referring URLs, time spent on pages, and navigation paths through our website.
• Device Information: IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access our website.
• Location Data: General geographic location based on your IP address (not precise GPS location unless you explicitly grant permission).
• Log Data: Server logs that record requests to our servers, including date and time, the feature or page requested, browser details, and crash data.
• Cookie and Tracking Data: Information collected through cookies, pixels, and similar tracking technologies as described in Section 8 below.

2.3 Information Collected from Third Parties

We may receive information about you from third parties such as:

• Social media platforms (e.g., if you interact with our pages or log in through a social media account).
• Third-party delivery partners and food ordering platforms.
• Analytics providers that help us understand how our Services are used.
• Advertising networks and marketing partners.
• Business partners with whom we run co-promotional activities.

3. How We Use Your Information

We use the information we collect for various business and operational purposes, always in accordance with applicable United States law, including the Federal Trade Commission (FTC) Act, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and other relevant state privacy regulations.

3.1 Service Provision and Order Fulfillment

• To process and fulfill your food orders and manage your account.
• To communicate with you about your order status, delivery updates, and related inquiries.
• To process payments and prevent fraudulent transactions.
• To provide customer support and respond to your requests, complaints, and inquiries.
• To manage our relationship with you and notify you about changes to our terms, policies, or Services.

3.2 Analytics and Service Improvement

• To understand how users navigate and interact with our website and Services.
• To analyze trends, usage patterns, and the effectiveness of our features and menu offerings.
• To conduct research and analysis to improve our products, services, and website.
• To troubleshoot technical problems and ensure the security and integrity of our platform.

3.3 Marketing and Advertising

• To send you promotional communications, special offers, and news about Dave's Hot Chicken products and events, where you have opted in to receive such communications.
• To personalize your experience and deliver content and product recommendations that are relevant to your interests.
• To administer contests, promotions, surveys, and other marketing activities.
• To deliver targeted advertising through third-party platforms based on your interactions with our Services.
• You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any email or by contacting us at [email protected].

3.4 Legal Compliance and Protection

• To comply with applicable legal obligations, regulatory requirements, and law enforcement requests.
• To enforce our Terms of Service and other agreements.
• To protect the rights, property, and safety of Dave's Hot Chicken, our customers, and the public.
• To detect, prevent, and address fraud, security breaches, and other potentially prohibited or illegal activities.

3.5 Legal Basis for Processing

In the United States, we process your personal information based on the following legal justifications:

• Contract Performance: Processing is necessary to fulfill orders and provide our Services.
• Legitimate Interests: We process data where it is in our legitimate business interests, such as for analytics, fraud prevention, and improving our Services, and where these interests are not overridden by your rights.
• Legal Obligation: Where we are required to process data to comply with applicable laws.
• Consent: Where you have given us explicit consent to process your data for a specific purpose, such as marketing emails.

4. Sharing Your Information with Third Parties

We do not sell, trade, or rent your personal information to third parties for their own marketing purposes without your explicit consent. However, we may share your information in the following circumstances:

4.1 Service Providers and Business Partners

We share your information with trusted third-party vendors and service providers who assist us in operating our website and delivering our Services, including:

• Payment Processors: Secure, PCI-DSS-compliant third-party processors who handle your payment card transactions.
• Delivery Partners: Third-party delivery services that fulfill food orders on our behalf.
• Cloud Hosting Providers: Companies that host our website and data infrastructure.
• Email and Marketing Platforms: Tools used to send transactional and promotional communications.
• Analytics Providers: Services such as Google Analytics that help us analyze website traffic and user behavior.
• Customer Support Tools: Platforms used to manage and respond to customer inquiries.

All third-party service providers are contractually obligated to use your information only as directed by us, to maintain appropriate security measures, and not to disclose your information to others.

4.2 Legal Requirements

We may disclose your personal information if required to do so by law or in response to valid requests by public authorities (e.g., a court order, subpoena, or government agency request), including to:

• Comply with a legal obligation or enforceable governmental request.
• Protect and defend the rights or property of Dave's Hot Chicken.
• Prevent or investigate possible wrongdoing in connection with the Services.
• Protect the personal safety of users of the Services or the public.

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal information may be transferred to the acquiring entity. We will notify you via email and/or a prominent notice on our website of any change in ownership or uses of your personal information.

4.4 Aggregated or De-Identified Data

We may share aggregated or de-identified information — which cannot reasonably be used to identify you — with third parties for research, marketing, analytics, and other purposes without restriction.

5. Data Security

We take the security of your personal information seriously and implement a variety of technical, administrative, and physical safeguards designed to protect it from unauthorized access, use, disclosure, alteration, or destruction.

5.1 Security Measures We Implement

• Encryption: Data transmitted between your browser and our servers is protected using industry-standard SSL/TLS encryption.
• Access Controls: Access to personal data is restricted to authorized personnel who need it to perform their job functions.
• Secure Payment Processing: We use PCI-DSS-compliant third-party payment processors and do not store full payment card numbers on our servers.
• Regular Security Assessments: We conduct periodic reviews of our data collection, storage, and processing practices.
• Incident Response: We maintain a data breach response plan and will notify affected users and applicable authorities in the event of a breach, as required by applicable law.
• Employee Training: Our staff are trained on data privacy and security best practices.

6. Your Privacy Rights

Depending on where you reside, you may have certain rights regarding your personal information. We respect and honor these rights in accordance with applicable United States privacy laws, including the CCPA/CPRA for California residents.

6.1 Rights Available to All U.S. Users

• Right to Know / Access: You have the right to request that we disclose to you the categories and specific pieces of personal information we have collected about you, the sources from which it was collected, the business purpose for collecting it, and the categories of third parties with whom we share it.
• Right to Correct: You have the right to request that we correct inaccurate personal information we hold about you.
• Right to Delete: You have the right to request that we delete personal information we have collected from you, subject to certain exceptions (e.g., where retention is required by law or to complete a transaction).
• Right to Data Portability: You have the right to receive a copy of your personal information in a structured, commonly used, and machine-readable format.
• Right to Opt Out of Sale or Sharing: We do not sell your personal information. However, if our data practices change, California residents will have the right to opt out of the sale or sharing of their personal information.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights. We will not deny you goods or services, charge you different prices, or provide a different level of quality of service because you exercised your rights.
• Right to Limit Use of Sensitive Personal Information: Under the CPRA, California residents have the right to limit our use of sensitive personal information to certain permitted purposes.

6.2 How to Exercise Your Rights

To exercise any of your rights, please submit a verifiable request to us by:

• Email: [email protected] with the subject line "Privacy Rights Request"
• Website: daves-chicken.click

We will need to verify your identity before processing your request to protect your privacy and security. We will respond to your request within 45 days of receipt. If we require more time, we will inform you of the reason and extension period in writing. We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive or repetitive.

6.3 Authorized Agents

California residents may designate an authorized agent to submit a rights request on their behalf. To use an authorized agent, you must provide the agent with written permission to submit the request, and we may require you to verify your identity directly with us. We may deny a request from an agent who does not submit proof that they have been authorized to act on your behalf.

7. Data Retention

We retain your personal information only for as long as is necessary for the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

When your personal information is no longer needed, we will securely delete or anonymize it in accordance with our data retention and disposal procedures.

8. Cookie Policy and Tracking Technologies

Our website uses cookies and similar tracking technologies (such as web beacons and pixels) to enhance your browsing experience, analyze website traffic, and deliver targeted advertising.

8.1 What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They help the website remember your preferences and activity over time. Some cookies are essential for the website to function, while others are used for analytics, functionality, or marketing purposes.

8.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the website to function properly. These cannot be switched off in our systems as they are required for core functions such as logging in or placing an order.
• Performance/Analytics Cookies: These allow us to count visits and traffic sources so we can measure and improve site performance. All information these cookies collect is aggregated and anonymous.
• Functionality Cookies: These enable enhanced functionality and personalization, such as remembering your preferences or language settings.
• Targeting/Advertising Cookies: These may be set through our website by our advertising partners to build a profile of your interests and show you relevant ads on other sites.

8.3 Managing Your Cookie Preferences

You can control and manage cookies in various ways. Most web browsers allow you to refuse or accept cookies, delete existing cookies, and set preferences for certain websites. Please note that if you choose to block all cookies, you may not be able to use all features of our website. For more information about how to manage cookies, visit your browser's help section or a resource like www.allaboutcookies.org.

For more detailed information about the specific cookies we use and how to manage your preferences, please refer to our full Cookie Policy available on our website at daves-chicken.click.

9. Children's Privacy

Our website and Services are not directed at children under the age of 13. We do not knowingly solicit data from or market to children under 13 years of age. In compliance with the Children's Online Privacy Protection Act (COPPA), if we learn that we have inadvertently collected personal information from a child under the age of 13, we will delete that information from our records as quickly as possible.

If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at [email protected] so that we can take appropriate action.

We recommend that minors between the ages of 13 and 17 obtain permission from a parent or legal guardian before using our Services or submitting any personal information to us.

10. International Data Transfers

Dave's Hot Chicken is based in the United States. If you access our Services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where our servers are located and our central database is operated.

The data protection and privacy laws of the United States may differ from those of your country of residence. By using our Services and providing us with your information, you consent to the transfer of your data to the United States and the processing of your data in accordance with this Privacy Policy.

We take steps to ensure that any international transfer of personal information complies with applicable laws and that appropriate safeguards are in place to protect your information. If you have questions about international data transfers, please contact us at [email protected].

11. California Residents — Additional Rights Under CCPA/CPRA

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), which became fully effective on January 1, 2023.

11.1 Categories of Personal Information Collected

In the past 12 months, we have collected the following categories of personal information as defined by the CCPA:

• Identifiers (e.g., name, email address, IP address)
• Personal information listed in the California Customer Records statute (e.g., name, address, telephone number)
• Commercial information (e.g., purchase history, ordering preferences)
• Internet or other electronic network activity information (e.g., browsing history, interactions with our website)
• Geolocation data (general location based on IP address)
• Inferences drawn from other personal information to create a profile about a consumer's preferences

11.2 "Do Not Sell or Share My Personal Information"

We do not sell your personal information to third parties for monetary compensation. We may share personal information with third parties for cross-context behavioral advertising, which may be considered "sharing" under the CPRA. California residents may opt out of this sharing by contacting us at [email protected] or through our cookie preference settings.

11.3 Shine the Light Law

California's "Shine the Light" law (Civil Code Section § 1798.83) permits users of our website who are California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please contact us at [email protected].

12. State-Specific Privacy Rights

In addition to California rights, residents of certain other states have been granted specific privacy rights under their state laws. These may include residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Texas (TDPSA), and other states that have enacted comprehensive privacy legislation. If you reside in one of these states, you may have rights similar to those described in Section 6, including rights to access, correct, delete, and opt out of certain processing of your personal information.

To exercise any state-specific privacy rights, please contact us at [email protected] with the subject line "State Privacy Rights Request." We will respond in accordance with the applicable law in your state.

13. Third-Party Links and Websites

Our website may contain links to third-party websites, plug-ins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy practices or content.

When you leave our website, we encourage you to read the privacy notice of every website you visit. This Privacy Policy applies only to our website and Services at daves-chicken.click.

14. Social Media Features

Our website may include social media features, such as Facebook Like buttons, Instagram share buttons, or other interactive mini-programs. These features may collect your IP address, which page you are visiting on our website, and may set a cookie to enable the feature to function properly. Social media features and widgets are either hosted by a third party or hosted directly on our website. Your interactions with these features are governed by the privacy policy of the company providing the feature.

We are not responsible for the privacy practices of social media platforms. We encourage you to review the privacy policies of any social media networks you use in connection with our Services.

15. Marketing Communications and Opt-Out

We may use your personal information to send you promotional materials, special offers, and news about Dave's Hot Chicken. We will only send you marketing communications where we have your consent or where we have a legitimate interest in doing so.

You can opt out of marketing communications at any time by:

• Clicking the "unsubscribe" or "opt-out" link at the bottom of any marketing email we send you.
• Emailing us at [email protected] with the subject line "Unsubscribe."
• Updating your communication preferences in your account settings on our website.

Please note that even if you opt out of marketing communications, we may still send you non-promotional messages related to your account or orders, such as order confirmations, receipts, and customer service responses.

16. How to File a Complaint with a Data Protection Authority

We take your privacy rights seriously and encourage you to contact us first if you have concerns about how we handle your personal information. However, if you believe your rights have been violated and our response is unsatisfactory, you have the right to file a complaint with the relevant regulatory authority.

16.1 United States — Federal Trade Commission (FTC)

In the United States, the Federal Trade Commission (FTC) is the primary federal agency responsible for enforcing consumer protection and privacy laws. If you believe we have engaged in unfair or deceptive practices, you may file a complaint with the FTC at:

• Website: www.ftc.gov/complaint
• Phone: 1-877-FTC-HELP (1-877-382-4357)
• Address: Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, DC 20580

16.2 California Residents — California Privacy Protection Agency (CPPA)

California residents may file a complaint with the California Privacy Protection Agency (CPPA), which is responsible for enforcing the CCPA/CPRA:

• Website: cppa.ca.gov
• Address: California Privacy Protection Agency, 2101 Arena Blvd., Sacramento, CA 95834

16.3 State Attorneys General

Residents of other states may also file complaints with their state Attorney General's office or applicable state privacy authority. We encourage you to visit your state government's official website to find the appropriate contact information.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons. When we make changes, we will update the "Last Updated" date at the top of this page.

If we make material changes to this Privacy Policy, we will notify you by:

• Posting a prominent notice on our website homepage.
• Sending an email notification to the email address associated with your account (if applicable).

We encourage you to review this Privacy Policy periodically to stay informed about our data practices. Your continued use of our Services after any changes constitutes your acceptance of the updated Privacy Policy.

18. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to reach out to us. We are committed to addressing your inquiries promptly and transparently.

This Privacy Policy was last reviewed and updated on May 10, 2026. Dave's Hot Chicken operates in compliance with the Federal Trade Commission (FTC) Act, the Children's Online Privacy Protection Act (COPPA), the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and other applicable United States federal and state privacy laws. This document does not constitute legal advice. Consult a qualified attorney for advice specific to your legal situation.