Privacy Policy

Effective Date: June 19, 2026  |  Last Updated: June 19, 2026

1. Introduction and Who We Are

Welcome to Dave's Hot Chicken ("we," "us," "our," or "the Company"). We are a food service business dedicated to delivering exceptional hot chicken experiences to our customers across the United States. We take your privacy seriously and are committed to protecting your personal information in accordance with applicable federal and state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), and other applicable United States privacy regulations.

This Privacy Policy applies to all users of our website located at hotchicken-daves.rest (the "Website"), our online ordering systems, mobile applications (if applicable), and any other digital or physical touchpoints where we collect personal information from you. By accessing or using our Website and services, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy.

If you do not agree with the terms of this Privacy Policy, please do not access or use our Website or services. We encourage you to review this policy periodically, as we may update it from time to time to reflect changes in our practices, legal requirements, or the services we offer.

2. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us using the following details:

We aim to respond to all privacy-related inquiries within 30 business days. For urgent matters, please clearly indicate the nature of your inquiry in your communication.

3. Information We Collect

We collect various types of information to provide you with our services, improve our offerings, and fulfill our legal and business obligations. The categories of personal information we collect are described below.

3.1 Personal Information You Provide to Us

When you interact with our Website, place orders, create an account, or communicate with us, you may voluntarily provide us with the following personal information:

• Identity Information: Full name, username or display name, and profile photographs (if applicable).
• Contact Information: Email address, telephone number, mailing address, and delivery address.
• Account Credentials: Username and encrypted password when you create an account on our platform.
• Order Information: Details of food items ordered, order history, special dietary requests, and delivery instructions.
• Payment Information: Credit or debit card numbers, billing address, and other financial information necessary to process transactions. Note that we do not store complete payment card numbers; this information is processed securely through our third-party payment processors.
• Communication Data: Messages, feedback, reviews, and other content you submit through contact forms, customer service inquiries, or reviews.
• Loyalty Program Information: Points balances, redemption history, and preferences if you participate in any loyalty or rewards programs we offer.
• Survey and Research Data: Responses to surveys, questionnaires, or feedback requests that we may conduct from time to time.

3.2 Information We Collect Automatically

When you visit our Website or use our digital services, we automatically collect certain technical and usage information, including:

• Device Information: Device type, operating system, browser type and version, device identifiers, screen resolution, and language settings.
• Usage Data: Pages visited, time spent on pages, links clicked, referring URLs, exit pages, and navigation paths through our Website.
• Log Data: IP address, access times, date and time stamps, server logs, and error logs.
• Location Data: Approximate geographic location derived from your IP address. If you use mobile features, we may request access to more precise location data with your explicit consent.
• Cookie and Tracking Data: Information collected through cookies, web beacons, pixel tags, and similar tracking technologies (see Section 9 for more details on our Cookie Policy).

3.3 Information from Third Parties

We may receive personal information about you from third-party sources, including:

• Social Media Platforms: If you connect your social media accounts to our services or interact with us on social media, we may receive profile information and interaction data from those platforms.
• Delivery Service Partners: Information shared by our delivery partners to facilitate the delivery of your orders.
• Analytics Providers: Aggregated and individual data from analytics service providers to help us understand how users interact with our Website.
• Marketing Partners: Information from advertising networks and marketing partners to help us display relevant advertisements and promotions.
• Payment Processors: Confirmation and status information from payment processing companies to verify and complete transactions.
• Review Platforms: Information shared when you review our services on third-party review platforms that we partner with.

4. How We Use Your Information

We use the personal information we collect for the following purposes, all of which are grounded in legitimate business needs, contractual necessity, legal compliance, or your explicit consent:

4.1 Service Provision and Order Fulfillment

• Processing and fulfilling your food orders, including coordinating with delivery partners and restaurant staff.
• Creating and managing your user account, including maintaining your order history and preferences.
• Processing payments and issuing receipts, refunds, or credits where applicable.
• Sending order confirmations, status updates, and delivery notifications.
• Responding to your customer service inquiries and resolving complaints or disputes.
• Administering loyalty programs, promotional offers, and discount codes.

4.2 Website Operation and Improvement

• Ensuring the technical functionality, security, and performance of our Website.
• Analyzing usage patterns and trends to improve the user experience and our service offerings.
• Conducting research and development to enhance our menu, website features, and overall customer experience.
• Troubleshooting errors, bugs, and technical issues on our platform.
• Testing new features, products, and service improvements before broader deployment.

4.3 Marketing and Communications

• Sending promotional emails, newsletters, and special offers about our menu items, seasonal promotions, and events (with your consent where required by law).
• Personalizing the content, advertisements, and recommendations you see on our Website and in our communications.
• Conducting targeted advertising campaigns on third-party platforms, such as social media networks and search engines.
• Inviting you to participate in surveys, feedback requests, and market research activities.
• Notifying you about changes to our menu, services, policies, or terms of service.

4.4 Legal Compliance and Safety

• Complying with applicable federal, state, and local laws, regulations, and legal processes, including food safety regulations, tax obligations, and consumer protection laws enforced by the Federal Trade Commission (FTC).
• Detecting, preventing, and investigating fraud, security breaches, and other illegal activities.
• Enforcing our Terms of Service and other agreements with you.
• Protecting the rights, property, and safety of Dave's Hot Chicken, our customers, employees, and the public.
• Responding to lawful requests from government authorities and law enforcement agencies.

5. Data Sharing and Disclosure

We do not sell your personal information for monetary compensation. However, we may share your personal information with third parties in the following circumstances:

5.1 Service Providers and Business Partners

We engage trusted third-party service providers to assist us in operating our business and delivering our services. These service providers are contractually obligated to use your personal information only as directed by us and in accordance with this Privacy Policy. Categories of service providers include:

• Payment Processors: Companies that securely process credit and debit card transactions on our behalf.
• Delivery Partners: Third-party delivery services that fulfill and deliver your food orders to your specified address.
• Cloud Hosting and IT Providers: Companies that host our Website, databases, and digital infrastructure.
• Analytics Providers: Services such as Google Analytics and similar platforms that help us understand Website usage and user behavior.
• Email and Communication Services: Platforms that enable us to send transactional and marketing emails to our customers.
• Customer Support Tools: Software platforms used to manage customer service tickets and communications.
• Marketing and Advertising Networks: Companies that assist us in delivering targeted advertisements and promotional campaigns.

5.2 Legal Requirements and Enforcement

We may disclose your personal information to government authorities, law enforcement agencies, regulators, or other third parties when we believe in good faith that such disclosure is necessary to:

• Comply with a legal obligation, court order, subpoena, or other lawful government request.
• Protect and defend the rights or property of Dave's Hot Chicken.
• Prevent or investigate possible wrongdoing or illegal activity in connection with our services.
• Protect the personal safety of our customers, employees, or the public.
• Protect against legal liability in connection with our business operations.

5.3 Business Transfers

In the event that Dave's Hot Chicken undergoes a merger, acquisition, reorganization, bankruptcy, dissolution, or sale of all or a portion of its assets, your personal information may be transferred to the acquiring entity or successor organization as part of that transaction. We will provide you with notice via email and/or a prominent notice on our Website if such a transaction occurs and your personal information becomes subject to a different privacy policy.

5.4 Aggregated and De-Identified Data

We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you with third parties for research, analysis, marketing, or other business purposes. This information does not constitute personal information for the purposes of this Privacy Policy.

6. Data Security

We take the security of your personal information seriously and implement a range of technical, administrative, and physical safeguards to protect it from unauthorized access, disclosure, alteration, or destruction. Our security measures include, but are not limited to:

6.1 Technical Safeguards

• Encryption: All data transmitted between your browser and our servers is encrypted using industry-standard Transport Layer Security (TLS) protocols. Sensitive stored data, including payment information and passwords, is encrypted at rest using AES-256 encryption.
• Secure Payment Processing: We use Payment Card Industry Data Security Standard (PCI-DSS) compliant payment processors to handle all financial transactions.
• Access Controls: Access to personal information is restricted to employees and contractors who have a legitimate business need and are bound by confidentiality obligations.
• Firewalls and Intrusion Detection: We deploy firewalls, intrusion detection systems, and regular security audits to protect our digital infrastructure.
• Multi-Factor Authentication: Where applicable, we implement multi-factor authentication for internal systems that store or process personal information.

6.2 Organizational Safeguards

• Regular employee training on data privacy and security best practices.
• Internal data handling procedures and policies governing the collection, storage, and use of personal information.
• Vendor due diligence processes to ensure that our service providers maintain adequate security standards.
• Data breach response procedures designed to detect, investigate, and respond to security incidents promptly.

Despite our best efforts, no method of data transmission or storage is completely secure. While we strive to protect your personal information, we cannot guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected individuals and relevant authorities as required by applicable law.

7. Your Privacy Rights

Depending on your state of residence and applicable laws, you may have certain rights regarding your personal information. We are committed to honoring these rights as required by law.

7.1 Rights Under the California Consumer Privacy Act (CCPA/CPRA)

If you are a California resident, you have the following rights under the CCPA as amended by the CPRA:

• Right to Know: You have the right to request that we disclose what personal information we have collected about you, the sources from which it was collected, the purposes for which it is used, and the categories of third parties with whom it has been shared.
• Right to Delete: You have the right to request the deletion of personal information we have collected from you, subject to certain exceptions under applicable law.
• Right to Correct: You have the right to request that we correct inaccurate personal information that we maintain about you.
• Right to Opt-Out of Sale or Sharing: You have the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising purposes. You may exercise this right by clicking the "Do Not Sell or Share My Personal Information" link on our Website.
• Right to Limit Use of Sensitive Personal Information: You have the right to limit our use and disclosure of sensitive personal information to purposes necessary for providing the services you requested.
• Right to Non-Discrimination: You have the right not to be discriminated against for exercising any of your privacy rights. We will not deny you services, charge you different prices, or provide you with a lower quality of service because you exercised your privacy rights.
• Right to Data Portability: You may request that we provide your personal information in a portable, readily usable format that allows you to transmit it to another entity.

7.2 General Privacy Rights (All Users)

Regardless of your state of residence, we offer the following rights to all users of our services:

• Access and Review: You may request a copy of the personal information we hold about you by contacting us at [email protected].
• Correction: You may request that we correct any inaccurate or outdated personal information we hold about you.
• Deletion: You may request that we delete your personal information, subject to our legal and business retention obligations.
• Marketing Opt-Out: You may opt out of receiving promotional and marketing communications from us at any time by using the unsubscribe link included in our emails or by contacting us directly.
• Account Management: If you have created an account with us, you may update, correct, or delete certain personal information directly through your account settings.

7.3 How to Submit a Privacy Rights Request

To exercise any of your privacy rights, please contact us by:

• Email: [email protected]

When submitting a request, please provide sufficient information to allow us to verify your identity and locate your personal information in our systems. We may ask you to confirm your email address, order history details, or other identifying information before processing your request. We will respond to verifiable consumer requests within 45 days as required by California law, with the option to extend by an additional 45 days when reasonably necessary, with prior notice.

You may also designate an authorized agent to submit privacy rights requests on your behalf. Authorized agents must provide written authorization from you and may be required to verify their own identity.

8. Data Retention

We retain your personal information only for as long as is necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by applicable law. The following general retention guidelines apply:

When personal information is no longer needed for the purposes for which it was collected, we will securely delete, anonymize, or destroy it in accordance with our data disposal procedures. In some cases, we may retain anonymized or aggregated data for longer periods for statistical analysis and research purposes.

9. Cookie Usage and Tracking Technologies

Our Website uses cookies and similar tracking technologies to enhance your browsing experience, analyze Website traffic, and deliver personalized content and advertisements. Cookies are small text files that are stored on your device when you visit our Website.

9.1 Types of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for the operation of our Website and enable core functionalities such as user authentication, shopping cart management, and security. These cannot be disabled without affecting Website functionality.
• Performance and Analytics Cookies: These cookies help us understand how visitors interact with our Website by collecting anonymous information about page visits, time spent on pages, and navigation patterns.
• Functional Cookies: These cookies enable enhanced functionality and personalization, such as remembering your preferences, language settings, and previous orders.
• Targeting and Advertising Cookies: These cookies are used by us and our advertising partners to deliver relevant advertisements and track the effectiveness of our marketing campaigns.

9.2 Managing Your Cookie Preferences

You can manage your cookie preferences through your browser settings, which allow you to block, delete, or limit the use of cookies. Please note that disabling certain cookies may affect the functionality of our Website and your ability to use some of our features. Most modern browsers also support "Do Not Track" signals; however, our Website may not currently respond to such signals in a standardized manner.

For detailed information about the specific cookies we use, their purposes, and how to opt out, please refer to our Cookie Policy, which is available on our Website. You may also opt out of interest-based advertising by visiting the Network Advertising Initiative opt-out page or the Digital Advertising Alliance opt-out page.

10. Children's Privacy

Dave's Hot Chicken does not knowingly collect, solicit, or process personal information from individuals under the age of 18 years. Our services are designed for adult consumers, and we do not intentionally target minors with our Website content or marketing activities.

In compliance with the Children's Online Privacy Protection Act (COPPA) and applicable state laws, if we become aware that we have inadvertently collected personal information from a child under the age of 13, we will take immediate steps to delete such information from our records. If you are a parent or guardian and believe that your child under the age of 18 has provided us with personal information without your consent, please contact us immediately at [email protected], and we will take appropriate action to delete that information.

By using our Website and services, you represent and warrant that you are at least 18 years of age. If you are between the ages of 13 and 17, you may only use our services under the direct supervision of a parent or legal guardian who agrees to be bound by this Privacy Policy.

11. International Data Transfers

Dave's Hot Chicken is a United States-based business, and your personal information is primarily collected, stored, and processed within the United States. The United States may not have the same level of data protection laws as your home country, particularly if you are accessing our services from outside the United States.

If we transfer personal information internationally — for example, if we use cloud service providers or technology partners with servers located in other countries — we will take appropriate safeguards to ensure that your personal information remains protected in accordance with this Privacy Policy and applicable law. Such safeguards may include:

• Entering into data processing agreements with our international service providers that include standard contractual clauses or equivalent protections.
• Ensuring that international recipients of personal information maintain appropriate security and privacy practices consistent with applicable U.S. law.
• Conducting due diligence on the privacy and security practices of our international service providers before engaging their services.

By using our Website and services, you consent to the transfer, storage, and processing of your personal information in the United States and, where applicable, in other countries where our service providers operate, subject to the protections described in this Privacy Policy.

12. Third-Party Links and Services

Our Website may contain links to third-party websites, social media platforms, or services that are not owned or controlled by Dave's Hot Chicken. This Privacy Policy applies only to our own Website and services. We are not responsible for the privacy practices of third-party websites, and we encourage you to review the privacy policies of any third-party sites you visit through links on our Website.

Third-party integrations on our Website, such as social media sharing buttons, payment gateways, and mapping services, may collect information about you independently of our own data collection practices. Please review the privacy policies of these third-party services to understand how they use your information.

13. Your Choices and Opt-Out Options

We respect your right to control how your personal information is used. The following options are available to you:

13.1 Marketing Communications

You may opt out of receiving promotional emails and newsletters from us at any time by:

• Clicking the "Unsubscribe" link at the bottom of any marketing email we send you.
• Contacting us directly at [email protected] with a request to be removed from our marketing lists.
• Updating your communication preferences in your account settings (if you have an account).

Please note that even if you opt out of marketing communications, we may still send you transactional emails related to your orders, account, or other service-related matters.

13.2 Targeted Advertising

You may opt out of interest-based advertising by adjusting your cookie preferences on our Website, using your browser's opt-out tools, or visiting the Network Advertising Initiative or Digital Advertising Alliance opt-out pages referenced in Section 9.

13.3 Push Notifications

If you have enabled push notifications through our Website or mobile applications, you may disable them at any time through your device settings or browser notification preferences.

14. California Privacy Rights — Additional Disclosures

In addition to the rights described in Section 7, California residents are entitled to the following additional disclosures under the CCPA/CPRA:

14.1 Categories of Personal Information Collected in the Past 12 Months

In the past 12 months, we have collected the following categories of personal information:

• Identifiers (name, email address, IP address)
• Commercial information (order history, purchasing preferences)
• Internet or other electronic network activity (browsing history on our Website, cookie data)
• Geolocation data (approximate location derived from IP address)
• Inferences drawn from the above categories to create customer profiles

14.2 Do Not Sell or Share My Personal Information

California residents have the right to opt out of the sale or sharing of their personal information. While we do not sell personal information for monetary compensation, we may share certain identifiers and usage data with advertising partners for cross-context behavioral advertising purposes, which may constitute "sharing" under California law. To opt out, please contact us at [email protected] or use the opt-out mechanisms described in this policy.

15. Filing Complaints with Data Protection Authorities

If you believe that we have handled your personal information in a manner that violates applicable privacy laws, you have the right to file a complaint with the relevant data protection or consumer protection authority. In the United States, the following avenues are available:

15.1 Federal Trade Commission (FTC)

The Federal Trade Commission enforces consumer protection laws, including those relating to unfair or deceptive data privacy practices under Section 5 of the FTC Act. You may file a complaint with the FTC at:

• Website: reportfraud.ftc.gov
• Phone: 1-877-FTC-HELP (1-877-382-4357)

15.2 California Privacy Protection Agency (CPPA)

California residents may file complaints with the California Privacy Protection Agency, which is responsible for enforcing the CCPA/CPRA:

• Website: cppa.ca.gov

15.3 State Attorney General

Many states have consumer protection divisions within their Attorney General's offices that handle privacy-related complaints. We encourage you to contact your state's Attorney General's office if you have concerns about our privacy practices that we have failed to resolve to your satisfaction.

Before filing a complaint with a regulatory authority, we encourage you to contact us directly at [email protected] so that we have an opportunity to address your concerns promptly and effectively.

16. Changes to This Privacy Policy

We reserve the right to update, modify, or revise this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes to this Privacy Policy, we will:

• Post the updated Privacy Policy on our Website with a revised "Last Updated" date at the top of the page.
• Send an email notification to registered users with an active account, where required by applicable law.
• Display a prominent notice on our Website for a reasonable period following any material changes.

Your continued use of our Website and services after the effective date of any changes to this Privacy Policy constitutes your acceptance of those changes. If you do not agree with the revised Privacy Policy, you should discontinue your use of our services and may request the deletion of your personal information as described in Section 7.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your personal information and any updates to our practices.

17. Governing Law

This Privacy Policy is governed by and shall be construed in accordance with the laws of the United States and applicable state laws, including without limitation the California Consumer Privacy Act (CCPA/CPRA), the Children's Online Privacy Protection Act (COPPA), and the Federal Trade Commission Act (FTC Act). Any disputes arising under or in connection with this Privacy Policy shall be subject to the jurisdiction of the applicable courts in the United States.

This Privacy Policy was last updated on June 19, 2026. © 2026 Dave's Hot Chicken. All rights reserved.