Privacy Policy

Welcome to Dave's Hot Chicken. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website daves-cafe.click, place orders, sign up for promotions, or otherwise interact with us. Please read this policy carefully. If you disagree with its terms, please discontinue use of our website and services immediately.

This Privacy Policy applies to all information collected through our website (daves-cafe.click), any related online ordering platforms, mobile applications, and any other digital or offline interactions you may have with Dave's Hot Chicken (collectively referred to as the "Services").

By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by the terms of this Privacy Policy. We reserve the right to update or change our Privacy Policy at any time. We will notify you of any changes by updating the "Last Updated" date at the top of this page. Your continued use of our Services after we post any modifications to the Privacy Policy will constitute your acknowledgment of the modifications and your consent to abide and be bound by the modified Privacy Policy.

1. About Us

Dave's Hot Chicken is a food service business operating in the United States. We are dedicated to providing our customers with exceptional hot chicken and a memorable dining experience. Below are our contact details:

2. Information We Collect

We collect information about you in a variety of ways depending on how you interact with us. This includes information you provide directly, information collected automatically, and information obtained from third parties.

2.1 Personal Information You Provide to Us

When you register an account, place an order, subscribe to our newsletter, participate in promotions, fill out a form, or contact us, we may ask you to provide certain personally identifiable information, including but not limited to:

• Identity Information: Full name, username, or similar identifier
• Contact Information: Email address, telephone number, and mailing or delivery address
• Account Credentials: Username and password for your account
• Payment Information: Credit or debit card numbers, billing address, and other financial details necessary to process transactions (note: we do not store full card numbers; payment processing is handled by secure third-party processors)
• Order Information: Details of products ordered, dietary preferences, delivery instructions, and order history
• Communications: Any messages, feedback, reviews, or inquiries you send us
• Promotional Preferences: Your preferences regarding receiving marketing communications from us

2.2 Information Collected Automatically

When you visit our website or use our Services, certain information is automatically collected by our systems. This includes:

• Usage Data: Pages viewed, links clicked, time spent on pages, search queries made, and other actions taken on our website
• Device Information: IP address, browser type and version, operating system, device type (desktop, mobile, tablet), screen resolution, and language settings
• Log Data: Server logs that record your interactions with our website, including the date and time of your visit, the referring URL, and error reports
• Location Data: General geographic location based on your IP address; more precise location data only if you grant permission through your device settings
• Cookie and Tracking Data: Information collected through cookies, web beacons, pixel tags, and similar tracking technologies (see Section 7 for more details)

2.3 Information from Third Parties

We may receive information about you from third parties, including:

• Social Media Platforms: If you connect your social media accounts or interact with us on social media, we may receive your public profile information
• Payment Processors: Confirmation of payment success or failure from our payment processing partners
• Analytics Providers: Aggregated and anonymized reports on website traffic and user behavior
• Marketing Partners: Contact and preference data from partners with whom we run joint promotions, where you have given consent to share your information
• Online Ordering Platforms: Order and contact data from third-party delivery or ordering services through which you place orders for Dave's Hot Chicken products

3. How We Use Your Information

We use the information we collect about you for various legitimate business purposes. These purposes include:

3.1 Service Provision and Order Fulfillment

• To process and fulfill your food orders, including communicating order confirmations and delivery updates
• To create and manage your customer account
• To process payment transactions securely
• To provide customer support and respond to your inquiries, complaints, and feedback
• To arrange delivery of orders and coordinate with third-party delivery providers

3.2 Marketing and Promotions

• To send you promotional emails, newsletters, special offers, and information about new menu items or promotions, where you have opted in or where permitted by applicable law
• To personalize your experience on our website and show you content relevant to your preferences and order history
• To conduct sweepstakes, contests, surveys, and other promotional activities
• To display targeted advertising on our website and third-party platforms based on your interests and browsing behavior

3.3 Analytics and Service Improvement

• To analyze usage patterns and trends on our website to improve its functionality and user experience
• To measure the effectiveness of our marketing campaigns
• To understand customer preferences and improve our menu offerings and services
• To conduct research and development for new products and features

3.4 Legal Compliance and Security

• To comply with applicable laws, regulations, and legal obligations under United States federal and state law
• To detect, prevent, and address fraudulent transactions, unauthorized access, and other illegal activities
• To enforce our Terms of Service and other agreements
• To protect the rights, property, and safety of Dave's Hot Chicken, our customers, and others
• To respond to legal requests and prevent harm

3.5 Communication

• To send you transactional communications, such as order confirmations, receipts, and account notifications
• To respond to your comments, questions, and requests
• To notify you of updates to our Privacy Policy, Terms of Service, or other important information

4. Legal Bases for Processing

We process your personal information on the following legal grounds under applicable United States law and, where relevant, the laws of individual states:

• Contractual Necessity: Processing is necessary to fulfill our contract with you, such as processing your orders and managing your account
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as improving our services, preventing fraud, and conducting marketing, provided those interests are not overridden by your rights
• Consent: Where you have provided your explicit consent, such as opting in to receive marketing communications
• Legal Obligation: Processing is necessary to comply with applicable laws and regulations, including tax, food safety, and consumer protection laws

5. Sharing Your Information with Third Parties

We do not sell, trade, or rent your personal information to unrelated third parties for their own marketing purposes without your explicit consent. However, we do share your information in the following circumstances:

5.1 Service Providers

We share your information with trusted third-party vendors and service providers who assist us in operating our website and delivering our services. These partners are contractually required to protect your data and may only use it for the specific purposes we authorize. They include:

• Payment processing companies (e.g., Stripe, Square, or similar)
• Delivery and logistics partners
• Email marketing platforms
• Website hosting and cloud infrastructure providers
• Customer relationship management (CRM) software providers
• Analytics and data analysis services (e.g., Google Analytics)
• Fraud prevention and cybersecurity services

5.2 Legal Requirements and Law Enforcement

We may disclose your personal information if required to do so by law or if we believe in good faith that such disclosure is necessary to:

• Comply with a legal obligation, court order, or government request
• Enforce our Terms of Service or other agreements
• Protect and defend the rights or property of Dave's Hot Chicken
• Prevent or investigate possible wrongdoing in connection with our Services
• Protect the personal safety of users of our Services or the public

5.3 Business Transfers

If Dave's Hot Chicken is involved in a merger, acquisition, asset sale, financing, reorganization, or other business transaction, your personal information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website if such a transfer occurs, and we will describe your choices at that time.

5.4 Aggregated and Anonymized Data

We may share aggregated or de-identified information that cannot reasonably be used to identify you with third parties for research, marketing, analytics, or other purposes. This information is not considered personal information under applicable law.

5.5 With Your Consent

We may share your information with other third parties when you have given us your explicit consent to do so.

6. Data Security

The security of your personal information is extremely important to us. We implement a variety of technical, administrative, and physical security measures designed to protect your personal information from unauthorized access, disclosure, alteration, and destruction. These measures include:

• Encryption: We use Secure Socket Layer (SSL) / Transport Layer Security (TLS) encryption to protect data transmitted between your browser and our servers
• Access Controls: We restrict access to personal information to authorized employees, contractors, and service providers who need it to perform their job functions
• Secure Payment Processing: Payment card information is processed using PCI-DSS compliant third-party payment processors. We do not store your full card numbers on our servers
• Regular Security Assessments: We conduct periodic security audits and vulnerability assessments to identify and address potential risks
• Employee Training: Our staff receives regular training on data privacy and security best practices
• Data Minimization: We collect only the information necessary for the purposes described in this policy

7. Cookie Policy

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and serve targeted advertisements. Cookies are small text files placed on your device when you visit our website.

7.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the website to function properly, such as maintaining your session and shopping cart
• Performance and Analytics Cookies: Help us understand how visitors interact with our website by collecting and reporting information anonymously (e.g., Google Analytics)
• Functional Cookies: Allow the website to remember your preferences, such as your location and language settings
• Marketing and Targeting Cookies: Used to deliver relevant advertisements and track the effectiveness of our marketing campaigns

7.2 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse or accept cookies, delete existing cookies, and set preferences for certain websites. Please note that disabling certain cookies may affect the functionality of our website and your ability to use certain features, such as online ordering.

For more detailed information about the cookies we use and how to manage them, please refer to our full Cookie Policy. You may also opt out of interest-based advertising by visiting the Network Advertising Initiative opt-out page or the Digital Advertising Alliance opt-out page.

8. Your Privacy Rights

Depending on your state of residence within the United States, you may have specific rights regarding your personal information. We are committed to honoring these rights in compliance with applicable federal and state laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and the Federal Trade Commission (FTC) Act.

8.1 Rights Available to All U.S. Residents

• Right to Access: You have the right to request a copy of the personal information we hold about you
• Right to Correction: You have the right to request that we correct any inaccurate or incomplete personal information we hold about you
• Right to Deletion: You have the right to request that we delete your personal information, subject to certain legal exceptions
• Right to Opt-Out of Marketing: You have the right to opt out of receiving marketing communications from us at any time by clicking the "unsubscribe" link in our emails or contacting us directly

8.2 Additional Rights for California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), effective January 1, 2023:

• Right to Know: The right to know what personal information we collect, use, disclose, and sell about you
• Right to Delete: The right to request deletion of personal information we have collected about you, subject to certain exceptions
• Right to Correct: The right to request correction of inaccurate personal information
• Right to Opt-Out of Sale or Sharing: The right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising. We do not sell personal information in the traditional sense, but if we share data for advertising purposes, you may opt out
• Right to Limit Use of Sensitive Personal Information: The right to limit our use of sensitive personal information to purposes necessary to perform the services you request
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you goods or services, charge different prices, or provide a different level or quality of service based on your exercise of these rights
• Right to Data Portability: The right to receive your personal information in a structured, commonly used, machine-readable format

8.3 How to Exercise Your Rights

To exercise any of your privacy rights, please submit a verifiable request to us using one of the following methods:

• Email: [email protected]
• Website: daves-cafe.click

We will respond to verifiable consumer requests within 45 days of receipt. If we require more time, we will inform you of the reason and the extension period in writing. We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded.

To verify your identity, we may ask you to provide certain information that matches the information we have on file for you. We will only use personal information provided in a verifiable consumer request to verify the requestor's identity or authority to make the request.

8.4 Authorized Agents

California residents may designate an authorized agent to submit a privacy rights request on their behalf. To use an authorized agent, we require written authorization signed by you or proof of power of attorney. We may also contact you directly to verify your identity before processing the request.

9. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The specific retention periods depend on the nature of the information and the purpose for which it was collected:

When your personal information is no longer needed, we will securely delete, destroy, or anonymize it in accordance with our data retention procedures and applicable law.

10. Children's Privacy

Dave's Hot Chicken is committed to protecting the privacy of children. Our website, online ordering platform, and other digital Services are not directed to children under the age of 18. We do not knowingly solicit or collect personal information from anyone under the age of 18. If you are under 18 years old, please do not use our Services or provide any personal information to us.

If we learn that we have inadvertently collected personal information from a child under the age of 18, we will take immediate steps to delete that information from our records. If you are a parent or guardian and believe that your child under 18 has provided us with personal information without your consent, please contact us immediately at [email protected].

Our practices are consistent with the Children's Online Privacy Protection Act (COPPA), which prohibits the collection of personal information from children under 13 without verifiable parental consent. While our minimum age requirement is 18, we fully comply with COPPA as well.

11. International Data Transfers

Dave's Hot Chicken is based in the United States, and our primary operations are conducted within the United States. If you are accessing our Services from outside the United States, please be aware that your personal information may be transferred to, stored, and processed in the United States or other countries where our service providers operate.

The data protection laws in the United States and other countries may differ from those in your country of residence. By using our Services and providing us with your personal information, you acknowledge and consent to the transfer of your information to the United States and other countries as described in this Privacy Policy.

When we transfer personal information internationally, we take appropriate steps to ensure that your information receives an adequate level of protection, including through the use of data transfer agreements and other lawful mechanisms as required by applicable law.

12. Third-Party Websites and Links

Our website may contain links to third-party websites, applications, or services that are not owned or controlled by Dave's Hot Chicken. This Privacy Policy does not apply to third-party websites. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

We encourage you to review the privacy policies of any third-party websites you visit. The inclusion of a link to a third-party website on our platform does not imply our endorsement of that website or its privacy practices.

Third-party services that may be integrated with our website include:

• Google Analytics (analytics)
• Social media platforms (Facebook, Instagram, Twitter/X)
• Online ordering and delivery platforms
• Payment processing services

13. Do Not Track Signals

Some browsers have a "Do Not Track" (DNT) feature that signals to websites that you do not want to have your online activities tracked. Currently, our website does not respond to DNT signals because there is no industry-standard interpretation of how to respond to such signals. However, you can manage your privacy preferences through your browser settings and by adjusting your cookie preferences on our website.

We will continue to monitor developments in DNT technology and standards and may update our practices accordingly.

14. Your Choices and Opt-Out Options

We provide you with choices about how we use your personal information:

14.1 Marketing Communications

You may opt out of receiving marketing emails from us at any time by:

• Clicking the "unsubscribe" link in any marketing email we send you
• Contacting us at [email protected] with the subject line "Unsubscribe"
• Adjusting your notification preferences in your account settings

Please note that even after opting out of marketing communications, you will continue to receive transactional emails related to your orders and account activity.

14.2 Cookies and Tracking Technologies

You can manage your cookie preferences through your browser settings or by using our cookie preference center on our website. Please see Section 7 for more information.

14.3 Account Information

You may review, update, or delete the information in your account by logging into your account on our website or by contacting us at [email protected].

15. How to File a Complaint

If you believe that your privacy rights have been violated or that we have not handled your personal information in accordance with this Privacy Policy or applicable law, we encourage you to contact us first so we can work to resolve the issue.

15.1 Contact Us Directly

Please send your complaint or concern to:

• Email: [email protected]
• Website: daves-cafe.click

We will acknowledge your complaint within 5 business days and work to resolve it within 45 days.

15.2 File a Complaint with a Regulatory Authority

If you are not satisfied with our response, or if you believe we are processing your personal information in violation of applicable law, you have the right to file a complaint with the appropriate regulatory authority:

• Federal Trade Commission (FTC): The FTC enforces consumer protection laws in the United States, including laws related to unfair or deceptive privacy practices under the FTC Act (15 U.S.C. § 45). You can file a complaint at www.ftc.gov/complaint or by calling 1-877-FTC-HELP (1-877-382-4357).
• California Residents – California Privacy Protection Agency (CPPA): If you are a California resident and believe your CCPA/CPRA rights have been violated, you may file a complaint with the California Privacy Protection Agency at cppa.ca.gov.
• California Attorney General: You may also contact the California Attorney General's office for privacy-related complaints at oag.ca.gov/privacy.
• Other State Attorneys General: Residents of other states may contact their respective state Attorney General's office for consumer protection and privacy-related complaints.

16. Applicable Law

This Privacy Policy is governed by and construed in accordance with the laws of the United States and the applicable laws of the state in which Dave's Hot Chicken operates. Our privacy practices are designed to comply with the following laws and regulations, among others:

• Federal Trade Commission Act (FTC Act), 15 U.S.C. § 45: Governs unfair or deceptive acts or practices in commerce, including privacy and data security
• California Consumer Privacy Act (CCPA), Cal. Civ. Code § 1798.100 et seq., as amended by the California Privacy Rights Act (CPRA): Provides California residents with specific privacy rights
• Children's Online Privacy Protection Act (COPPA), 15 U.S.C. § 6501 et seq.: Governs the online collection of personal information from children under 13
• CAN-SPAM Act, 15 U.S.C. § 7701 et seq.: Governs commercial email communications
• Telephone Consumer Protection Act (TCPA), 47 U.S.C. § 227: Governs marketing communications via telephone and text message
• State-specific privacy laws: Including but not limited to the Virginia Consumer Data Protection Act (VCDPA), Colorado Privacy Act (CPA), and other applicable state privacy laws

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes to this Privacy Policy, we will notify you by:

• Updating the "Last Updated" date at the top of this page
• Sending an email notification to the address associated with your account (for significant changes)
• Displaying a prominent notice on our website

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our Services after any changes to this Privacy Policy constitutes your acceptance of the revised policy.

18. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact us. We are committed to resolving any privacy-related concerns promptly and transparently.

This Privacy Policy was last updated on June 14, 2026 and is effective as of that date. Previous versions of this policy are available upon request by contacting us at [email protected].