Privacy Policy

1. Introduction

Wing Snob ("we," "us," or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, share, and protect information about you when you visit our website (chick-wingsnobs.digital), use our services, place orders, or interact with us in any other way.

This policy applies to all services we offer, including our restaurant services, online ordering, delivery, catering, loyalty programs, and table reservations. By using our services, you agree to the practices described in this Privacy Policy.

---

2. Information We Collect

2.1 Information You Provide to Us

We collect information that you voluntarily provide when you:

• Create an Account: Name, email address, phone number, username, password, date of birth, and delivery preferences
• Place Orders: Billing and delivery addresses, payment information, order history, dietary preferences, and special instructions
• Dining Preferences: Allergen information, dietary restrictions (vegan, vegetarian, halal, kosher, gluten-free), spice preferences, favorite menu items
• Loyalty Program: Participation in our rewards program, points balance, redemption history, and earned benefits
• Reservations: Table booking information, party size, special occasions, seating preferences, and accessibility requirements
• Catering Services: Event details, guest count, dietary requirements, venue information, and special requests
• Customer Support: Communications through our contact forms, live chat, email, or phone calls
• Reviews and Feedback: Restaurant reviews, ratings, comments, and survey responses
• Marketing Preferences: Email subscription preferences, communication choices, and promotional interests

2.2 Information Automatically Collected

When you visit our website or use our services, we automatically collect certain information:

• Device Information: IP address, browser type and version, operating system, device identifiers, and mobile device information
• Usage Data: Pages viewed, time spent on site, clicks, search queries, referral sources, and navigation patterns
• Location Data: Approximate location based on IP address, and precise location (with your consent) for delivery services
• Cookie Data: Session cookies, preference cookies, and tracking pixels (see our Cookie Policy for details)
• Order Analytics: Ordering patterns, popular items, peak ordering times, and delivery zones

2.3 Information from Third Parties

We may receive information about you from third-party sources:

• Social Media: If you connect your social media accounts, we may receive profile information
• Payment Processors: Transaction confirmations and payment verification data
• Delivery Partners: Delivery status updates and location information
• Marketing Partners: Aggregated demographic and interest data for advertising purposes
• Business Partners: Information from promotional campaigns or co-branded offerings

---

3. How We Use Your Information

3.1 Service Provision

• Order Processing: Preparing, confirming, and fulfilling your food orders
• Delivery Services: Coordinating delivery logistics and tracking orders
• Payment Processing: Securely processing transactions and handling refunds
• Account Management: Maintaining your account, login authentication, and profile updates
• Customer Support: Responding to inquiries, resolving issues, and providing assistance
• Quality Improvement: Analyzing service quality and optimizing restaurant operations
• Personalization: Customizing menu recommendations based on your preferences and order history

3.2 Communication

• Order Communications: Confirmation emails, delivery updates, and receipt notifications
• Customer Service: Responding to support requests and following up on issues
• Important Notices: Policy changes, service updates, and security alerts
• Marketing Communications: Promotional offers, new menu items, and special events (only with your consent)
• Loyalty Program: Points balance updates, reward notifications, and exclusive offers

3.3 Marketing and Analytics

• Personalized Advertising: Showing relevant ads based on your preferences and behavior
• Website Analytics: Understanding user behavior to improve our website and services
• Campaign Effectiveness: Measuring the success of marketing campaigns and promotions
• Market Research: Developing new menu items and services based on customer preferences
• Business Intelligence: Analyzing trends to optimize operations and customer experience

3.4 Legal Compliance and Safety

• Legal Requirements: Complying with applicable laws, regulations, and legal processes
• Fraud Prevention: Detecting and preventing fraudulent transactions and activities
• Security: Protecting the rights, property, and safety of our customers and business
• Dispute Resolution: Resolving conflicts, claims, and legal disputes
• Food Safety: Maintaining records for health department compliance and allergen tracking

---

4. Information Sharing and Disclosure

4.1 Service Providers

We share information with trusted third-party service providers who help us operate our business:

• Payment Processors: Stripe, PayPal, and other payment services for secure transaction processing
• Delivery Partners: Third-party delivery services for order fulfillment and logistics
• Cloud Storage Providers: AWS, Google Cloud for secure data storage and backup
• Email Services: Mailchimp, SendGrid for marketing campaigns and transactional emails
• Analytics Tools: Google Analytics, Hotjar for website performance and user behavior analysis
• Customer Support: Help desk software and live chat services

4.2 Legal Requirements

We may disclose your information when required by law or to protect our rights:

• Legal Process: Court orders, subpoenas, and law enforcement requests
• Regulatory Compliance: Health department inspections, food safety investigations
• Protection of Rights: Defending against legal claims and protecting intellectual property
• Public Safety: Emergency situations that threaten public health or safety

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets:

• Customer data may be transferred as part of business assets
• We will notify customers before any transfer occurs
• The new owner must comply with this Privacy Policy
• Customers will have the right to opt-out or delete their data

4.4 With Your Consent

We may share information for other purposes with your explicit consent, such as:

• Partner promotions and co-branded campaigns
• Social media integration and sharing
• Third-party loyalty programs
• Market research participation

---

5. Data Security

5.1 Technical Security Measures

• Encryption: All data transmission uses SSL/TLS encryption (256-bit) to protect information in transit
• Secure Storage: Personal data is stored on encrypted servers with industry-standard security protocols
• Access Controls: Multi-factor authentication and role-based access for employees handling personal data
• Monitoring: 24/7 security monitoring and intrusion detection systems
• Regular Updates: Security patches and system updates applied promptly
• Data Backups: Regular encrypted backups stored in geographically distributed locations
• Network Security: Advanced firewalls and network segmentation to prevent unauthorized access

5.2 Organizational Security Measures

• Employee Training: Regular security awareness training for all staff members
• Data Handling Procedures: Strict protocols for accessing, processing, and storing personal information
• Confidentiality Agreements: All employees and contractors sign confidentiality agreements
• Incident Response: Comprehensive plan for responding to security breaches or data incidents
• Regular Audits: Periodic security assessments and compliance reviews
• Vendor Management: Due diligence and security requirements for all third-party providers

5.3 Your Security Responsibilities

• Strong Passwords: Use unique, complex passwords for your account
• Account Security: Do not share your login credentials with others
• Public Computers: Always log out when using shared or public devices
• Suspicious Activity: Report any unauthorized account access immediately
• Phishing Awareness: Be cautious of suspicious emails or messages requesting personal information

---

6. Cookies and Tracking Technologies

We use various tracking technologies to enhance your experience and analyze website usage.

Tracking Technologies We Use:

• Google Analytics: Website traffic analysis and user behavior insights
• Facebook Pixel: Advertising effectiveness measurement and retargeting
• Web Beacons: Email open rates and interaction tracking
• Local Storage: Temporary browser data for improved functionality
• Session Replay Tools: Understanding user interactions to improve website design

Managing Cookies:

You can control cookies through your browser settings. Most browsers allow you to accept, reject, or delete cookies. However, disabling certain cookies may limit website functionality, such as:

• Staying logged in to your account
• Maintaining items in your shopping cart
• Receiving personalized recommendations
• Accessing location-based features

---

7. Your Rights (GDPR/CCPA Compliance)

Depending on your location, you may have certain rights regarding your personal information:

7.1 Right of Access

You have the right to know what personal information we collect, use, and share about you. You can request a copy of your personal data at any time.

7.2 Right to Rectification

If your personal information is inaccurate or incomplete, you have the right to have it corrected or updated.

7.3 Right to Erasure (Right to be Forgotten)

You can request that we delete your personal information, subject to certain legal exceptions (such as completed transaction records for tax purposes).

7.4 Right to Restrict Processing

You can ask us to limit how we use your personal information in certain circumstances, such as while we verify its accuracy.

7.5 Right to Data Portability

You can request to receive your personal data in a machine-readable format or have it transferred to another service provider.

7.6 Right to Object

You can object to certain processing of your personal information, especially for marketing purposes or automated decision-making.

7.7 Right Against Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing, including profiling, that significantly affects you.

How to Exercise Your Rights:

---

8. Children's Privacy

Wing Snob takes children's privacy seriously. Our services are not intended for individuals under the age of 16, and we do not knowingly collect personal information from children.

• We do not target advertising to children
• We do not create profiles specifically for minors
• We do not request personal information we know is from children
• If we become aware that we have collected information from a child under 16, we will promptly delete it

Parent/Guardian Notification: If you believe we have collected information from your child, please contact us immediately at [email protected]. We will investigate and take appropriate action, including deleting the information if necessary.

---

9. International Data Transfers

9.1 Protection Measures

When we transfer personal data internationally, we ensure appropriate safeguards are in place:

• Adequacy Decisions: Transfers to countries recognized by the EU as providing adequate protection
• Standard Contractual Clauses (SCCs): EU-approved contract terms for data protection
• Data Processing Agreements: Binding contracts with third-party processors
• Security Measures: Technical and organizational measures to protect data in transit
• Regular Compliance Audits: Ongoing monitoring of international data handling practices

9.2 Transfer Destinations

We may transfer your personal data to the following regions:

• United States: Cloud storage and data processing services
• European Union: Analytics and marketing services
• Canada: Customer support and technical services
• Other Countries: As needed for business operations, always with appropriate protections

---

10. Data Retention Periods

We retain personal information only as long as necessary for the purposes outlined in this policy or as required by law.

Safe Data Disposal

When retention periods expire, we securely dispose of personal data using:

• Electronic Data: Complete deletion with overwriting to ensure data is unrecoverable
• Physical Records: Professional shredding services for paper documents
• Backup Systems: Systematic purging from all backup and archive systems
• Documentation: Maintaining disposal records for compliance purposes

---

11. Third-Party Links and Services

Our website may contain links to external websites, social media platforms, and third-party services that are not operated by Wing Snob.

• No Responsibility: We are not responsible for the privacy practices or content of third-party websites
• Separate Policies: Each third-party site has its own privacy policy and terms of service
• Due Diligence: We recommend reviewing third-party privacy policies before providing personal information
• User Responsibility: Your interactions with third-party sites are at your own risk

Common Third-Party Services:

• Social media platforms (Facebook, Instagram, Twitter)
• Payment processors (Stripe, PayPal)
• Review platforms (Google Reviews, Yelp)
• Delivery tracking services
• Maps and location services

---

12. Policy Changes and Updates

12.1 Notification Methods

When we update this Privacy Policy, we will notify you through:

• Website Notice: Prominent banner on our website homepage
• Email Notification: Direct email to registered users about significant changes
• Account Dashboard: In-app notification when you log in
• Social Media: Updates posted on our official social media accounts

12.2 Types of Changes

• Minor Updates: Clarifications and administrative changes take effect immediately
• Significant Changes: Material changes to data collection or use require 30 days' notice
• Explicit Consent: Changes to sensitive data processing require your active consent

12.3 Your Options

• Review Changes: Check the "Last Updated" date at the top of this policy
• Accept Changes: Continued use of our services indicates acceptance
• Object to Changes: Contact us if you disagree with policy updates
• Stop Using Services: You may discontinue service use if you disagree with changes

---

13. Contact Information and Data Protection

13.1 How to Contact Us

• General Privacy Questions: Email [email protected] with "Privacy Inquiry" in the subject line
• Data Rights Requests: Use our online contact form or email with "Data Rights Request" in the subject
• Security Concerns: Report immediately to [email protected] with "Security Issue" in the subject
• Complaints: Contact us first; if unresolved, you may contact your local data protection authority

13.2 Supervisory Authority Contact

If you are not satisfied with our response to your privacy concerns, you may contact:

• California Residents: California Attorney General's Office - Privacy Enforcement
• EU Residents: Your local Data Protection Authority
• Other Jurisdictions: Your local privacy regulator or consumer protection agency

---

14. Withdrawal of Consent and Account Management

14.1 Marketing Consent Withdrawal

You can stop receiving marketing communications at any time:

• Email Unsubscribe: Click the "unsubscribe" link in any marketing email
• Account Settings: Update preferences in your online account dashboard
• Customer Support: Contact us directly to remove you from marketing lists
• Phone: Call +1 510-548-5525 to update your communication preferences

Processing Time: Marketing opt-out requests are processed within 10 business days. You may receive messages already in progress during this period.

14.2 Account Deletion Process

To permanently delete your account and personal data:

1. Request Submission: Email [email protected] with "Account Deletion Request"
2. Identity Verification: We may ask for verification to protect your account security
3. Grace Period: 30-day waiting period to ensure the request is intentional
4. Data Removal: Complete deletion of personal data within 60 days
5. Confirmation: Email confirmation when deletion is complete

Data Retention Notice: Some information may be retained as required by law, such as transaction records for tax purposes, but this data will be anonymized where possible.

---

15. Conclusion and Commitment

At Wing Snob, protecting your privacy is not just a legal obligation—it's fundamental to building trust with our valued customers. We are committed to transparency, security, and giving you control over your personal information.

Our privacy practices are designed to:

• Respect Your Choices: Honor your preferences for how your data is used
• Maintain Security: Protect your information with industry-leading security measures
• Provide Transparency: Clearly explain our data practices in understandable language
• Enable Control: Give you meaningful choices about your personal information
• Continuous Improvement: Regularly update our practices to meet evolving privacy standards

The trust you place in us when sharing your personal information is not taken lightly. We recognize that privacy is a fundamental right, and we are dedicated to upholding the highest standards of data protection while providing you with exceptional dining experiences.

If you have any questions, concerns, or suggestions about this Privacy Policy or our privacy practices, please don't hesitate to contact us. We value your feedback and are always working to improve how we protect and respect your privacy.