Privacy Policy

Effective Date: June 24, 2026  |  Last Updated: June 24, 2026

1. Introduction and Who We Are

Welcome to Dave's Hot Chicken ("we," "us," "our," or "the Company"). We are a food service business operating in the United States, committed to providing our customers with an exceptional dining experience both online and in person. We understand that your privacy is important to you, and we take our responsibility to protect your personal information seriously.

This Privacy Policy applies to all personal information collected through our website located at daveshot-cafe.click (the "Site"), our online ordering systems, mobile applications, in-store interactions, loyalty programs, promotional campaigns, and any other services we offer (collectively referred to as the "Services").

By accessing or using our Services, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy. If you do not agree with the practices described in this policy, please discontinue use of our Services immediately.

1.1 Our Contact Information

For any privacy-related questions, concerns, or requests, you may contact us using the following details:

• Company Name: Dave's Hot Chicken
• Email Address: [email protected]
• Website: daveshot-cafe.click

2. Scope and Applicable Law

Dave's Hot Chicken operates in the United States and is subject to applicable federal and state privacy laws, including but not limited to:

• The California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) — applicable to California residents
• The Federal Trade Commission (FTC) Act — which governs unfair or deceptive trade practices, including misrepresentation in data collection and use
• The Children's Online Privacy Protection Act (COPPA) — which restricts data collection from children under 13 years of age
• The CAN-SPAM Act — which regulates commercial email communications
• Other applicable state-level privacy laws where we operate

We are committed to complying with all applicable privacy regulations and updating this policy as laws evolve or our practices change.

3. Information We Collect

We collect various categories of personal information depending on how you interact with us. Below is a detailed description of the types of data we may collect:

3.1 Personal Identification Information

When you create an account, place an order, sign up for our newsletter, or otherwise engage with our Services, we may collect:

• Full name
• Email address
• Phone number
• Mailing or delivery address
• Date of birth (for age verification and promotional purposes)
• Username and password for account access
• Profile photo (if voluntarily submitted)

3.2 Payment and Financial Information

When you make a purchase or process a transaction through our website, we collect:

• Credit or debit card details (processed securely through third-party payment processors)
• Billing address
• Transaction history and order details
• Gift card or voucher redemption information

3.3 Order and Transaction Data

To fulfill your food orders and improve our service offerings, we collect:

• Items ordered and customization preferences
• Order frequency and history
• Pickup or delivery preferences
• Special dietary requests or allergy information you voluntarily provide
• Loyalty points or rewards activity

3.4 Usage and Behavioral Data

As you interact with our website and digital services, we automatically collect certain technical information, including:

• Pages visited and time spent on each page
• Links clicked and navigation patterns
• Search queries entered on our Site
• Referring URLs and exit pages
• Frequency and recency of visits
• Features used and interactions made

3.5 Device and Technical Information

We automatically collect device-related information when you access our Site or digital platforms:

• IP address
• Browser type and version
• Operating system and version
• Device type (mobile, tablet, desktop)
• Device identifiers and hardware model
• Screen resolution and display settings
• Time zone and language settings

3.6 Location Data

To provide location-based services such as finding the nearest Dave's Hot Chicken location or facilitating delivery, we may collect:

• Precise GPS location (with your explicit consent)
• Approximate location inferred from IP address
• Delivery address information you provide

3.7 Communications and Customer Support Data

When you contact us for support, leave a review, or communicate with us by any means, we collect:

• Content of emails, chats, or messages sent to us
• Records of customer service interactions
• Survey responses and feedback submissions
• Social media comments, tags, or direct messages involving our brand

3.8 Cookies and Tracking Technologies

We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about your interactions with our Site. For detailed information about how we use cookies, please refer to Section 8 of this policy.

4. How We Use Your Information

The information we collect is used for a variety of purposes, all aimed at improving your experience with Dave's Hot Chicken, fulfilling our contractual obligations, and operating our business effectively and lawfully.

4.1 Service Provision and Order Fulfillment

• Processing and completing your food orders (online and in-store)
• Managing your account and maintaining your order history
• Facilitating delivery or pickup of your orders
• Sending order confirmation, preparation, and delivery notifications
• Handling refunds, cancellations, and order disputes

4.2 Customer Communication

• Responding to your inquiries, complaints, and customer service requests
• Sending transactional emails related to your account activity
• Notifying you of important changes to our services, menu, or policies
• Providing updates regarding your loyalty rewards and promotional offers

4.3 Marketing and Promotional Activities

• Sending you promotional offers, discount codes, and special deals (with your consent where required)
• Personalizing marketing content based on your purchase history and preferences
• Running targeted advertising campaigns on third-party platforms such as Google, Meta (Facebook/Instagram), and others
• Administering contests, sweepstakes, or promotional events
• Retargeting website visitors through advertising networks

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any of our emails or by contacting us at [email protected].

4.4 Analytics and Business Improvement

• Analyzing website traffic and user behavior to improve our Site's functionality and usability
• Evaluating the performance of our menu items and promotions
• Conducting internal research and data analysis to inform business decisions
• Generating aggregate, anonymized reports on customer trends

4.5 Legal Compliance and Safety

• Complying with applicable federal, state, and local laws and regulations
• Detecting, investigating, and preventing fraudulent transactions or unauthorized use of our Services
• Enforcing our Terms of Service and other agreements
• Responding to legal requests, court orders, or government inquiries
• Protecting the rights, property, and safety of our customers, employees, and the public

5. Sharing Your Information with Third Parties

We do not sell your personal information to third parties for their own direct marketing purposes. However, we do share your information in certain circumstances as described below.

5.1 Service Providers and Business Partners

We work with trusted third-party vendors and service providers who assist us in operating our business. These entities are granted access to your personal information only as necessary to perform their services on our behalf and are contractually obligated to protect your data. These service providers may include:

• Payment Processors: To securely handle credit card and digital payment transactions
• Delivery Partners: Third-party delivery platforms (e.g., DoorDash, Uber Eats, Grubhub) to fulfill your food delivery orders
• Cloud Hosting Providers: To store and manage our website and application infrastructure
• Email Marketing Platforms: To manage and send promotional and transactional emails
• Analytics Providers: Such as Google Analytics, to understand how users interact with our Site
• Customer Support Tools: To manage and respond to customer service inquiries
• Loyalty Program Administrators: To manage rewards, points, and member benefits

5.2 Legal and Regulatory Disclosures

We may disclose your personal information to government authorities, law enforcement agencies, courts, or other regulatory bodies when required to do so by law, or when we believe in good faith that such disclosure is necessary to:

• Comply with a legal obligation, subpoena, or court order
• Protect and defend our legal rights or property
• Prevent or investigate potential wrongdoing in connection with our Services
• Protect the personal safety of users of our Services or the public

5.3 Business Transfers

In the event of a merger, acquisition, sale of assets, corporate restructuring, or bankruptcy, your personal information may be transferred as part of the business assets. We will provide notice before your information becomes subject to a different privacy policy.

5.4 Aggregated and Anonymized Data

We may share aggregated, non-personally identifiable data with partners, advertisers, and the public for research, marketing, or general business purposes. This data cannot be used to identify you individually.

6. Data Security

Dave's Hot Chicken takes the security of your personal information seriously. We implement a range of technical, administrative, and physical safeguards designed to protect your data against unauthorized access, loss, misuse, alteration, or disclosure.

6.1 Security Measures We Employ

• Encryption: We use SSL/TLS encryption for all data transmitted between your browser and our servers
• Access Controls: Access to personal data is restricted to authorized personnel who need it for legitimate business purposes
• Secure Payment Processing: All payment transactions are processed through PCI-DSS compliant payment gateways
• Firewalls and Intrusion Detection: We employ firewalls and network monitoring tools to detect and respond to security threats
• Regular Security Audits: We conduct periodic reviews of our security practices and systems
• Employee Training: Our staff members are trained on data privacy and security best practices
• Data Minimization: We only collect the data that is necessary for the purposes outlined in this policy

6.2 Data Breach Response

In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify affected individuals and relevant authorities in accordance with applicable law, including state data breach notification requirements. Notification will be provided within the timeframes mandated by applicable regulations.

7. Your Privacy Rights

Depending on your state of residence, you may have certain rights regarding your personal information. We are committed to honoring these rights in accordance with applicable law.

7.1 Rights Available to All Users

• Right to Access: You may request a copy of the personal information we hold about you
• Right to Correction: You may request that we correct any inaccurate or incomplete information we have on file
• Right to Deletion: You may request that we delete your personal information, subject to certain legal exceptions
• Right to Opt-Out of Marketing: You may unsubscribe from our marketing communications at any time

7.2 Additional Rights for California Residents (CCPA/CPRA)

If you are a resident of California, you are entitled to additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to Know: You have the right to know what categories of personal information we collect, use, disclose, or sell, and the specific pieces of information we have collected about you in the past 12 months
• Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions
• Right to Correct: You have the right to request correction of inaccurate personal information
• Right to Opt-Out of Sale or Sharing: You have the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising
• Right to Limit Use of Sensitive Personal Information: You may request that we limit our use of your sensitive personal information to specific permissible purposes
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you services, charge you different prices, or provide a different quality of service based solely on your exercise of these rights
• Right to Data Portability: You may request a copy of your personal information in a portable and readily usable format

7.3 How to Submit a Privacy Rights Request

To exercise any of the rights described above, you may contact us through the following methods:

• Email: [email protected] (subject line: "Privacy Rights Request")
• Website: daveshot-cafe.click

We will respond to verifiable consumer requests within 45 days of receipt. In certain complex situations, we may extend this period by an additional 45 days, in which case we will notify you of the extension. We may need to verify your identity before processing your request to ensure the security of your personal information.

8. Cookie Policy Overview

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze traffic, and deliver relevant content and advertising. This section provides a summary of our cookie practices.

8.1 What Are Cookies?

Cookies are small text files placed on your device by a website you visit. They are widely used to make websites work efficiently and to provide information to website owners about visitor behavior and preferences.

8.2 Types of Cookies We Use

8.3 Managing Your Cookie Preferences

You can manage or disable cookies through your browser settings. Most modern browsers allow you to refuse all or some cookies. Please be aware that disabling certain cookies may affect the functionality and performance of our website. You may also opt out of interest-based advertising through industry opt-out tools such as:

• Network Advertising Initiative (NAI) Opt-Out
• Digital Advertising Alliance (DAA) Opt-Out

9. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

9.1 Retention Periods

When your personal information is no longer needed, we will securely delete or anonymize it in accordance with our data retention schedules.

10. Children's Privacy

Dave's Hot Chicken does not knowingly collect personal information from children under the age of 13. Our Services are intended for use by individuals who are at least 13 years of age. Certain features of our Services — including the ability to create an account, place online orders, and participate in our loyalty program — are intended for users who are at least 18 years of age or the age of majority in their state of residence, whichever is greater.

If you are under 18 years of age, please do not use our Services without the supervision and consent of a parent or legal guardian.

If we become aware that we have inadvertently collected personal information from a child under 13 without verifiable parental consent, we will take immediate steps to delete that information from our records. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately at [email protected].

We comply with the Children's Online Privacy Protection Act (COPPA) and take all reasonable measures to prevent the unauthorized collection of children's personal data.

11. International Data Transfers

Dave's Hot Chicken is based in the United States, and your personal information is collected and processed in the United States. If you are accessing our Services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country of residence.

By using our Services, you consent to the transfer of your information to the United States and its processing in accordance with this Privacy Policy.

We take appropriate measures to ensure that any international transfers of personal data are conducted lawfully and that your information receives an adequate level of protection regardless of where it is processed. These measures may include the use of data processing agreements with our service providers that incorporate standard contractual clauses or other approved transfer mechanisms.

12. Third-Party Links and Services

Our website may contain links to third-party websites, applications, or services that are not owned or controlled by Dave's Hot Chicken. These may include third-party delivery platforms, payment processors, social media networks, and advertising partners. Please be aware that we are not responsible for the privacy practices of these third parties.

We encourage you to review the privacy policies of any third-party websites you visit. This Privacy Policy applies solely to information collected by Dave's Hot Chicken through our own Services.

13. Social Media and User-Generated Content

Dave's Hot Chicken maintains active profiles on various social media platforms, including but not limited to Instagram, Facebook, Twitter/X, and TikTok. When you interact with our brand on these platforms, the social media companies also collect data about your interactions in accordance with their own privacy policies, which we encourage you to review.

If you share photos, reviews, or content tagging Dave's Hot Chicken on social media, we may repost, share, or feature such content in our own marketing materials. By tagging or mentioning us in public posts, you grant us a non-exclusive, royalty-free license to use your publicly available content for promotional purposes. We will make reasonable efforts to credit original creators.

14. Do Not Track Signals

Some web browsers include a "Do Not Track" (DNT) feature that signals to websites that you do not want your online activity tracked. Currently, there is no universally accepted standard for how websites should respond to DNT signals. At this time, our Site does not respond to browser DNT signals. However, you can manage your tracking preferences through our cookie consent tools and the opt-out mechanisms described in Section 8 of this policy.

15. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our business practices, legal obligations, or data handling procedures. When we make material changes to this policy, we will:

• Update the "Last Updated" date at the top of this page
• Post a prominent notice on our website
• Send an email notification to registered account holders (where required by law)

Your continued use of our Services after any changes to this Privacy Policy take effect constitutes your acceptance of the updated policy. We encourage you to review this policy periodically to stay informed about how we protect your information.

16. Filing a Complaint with a Data Protection Authority

If you have concerns about how we handle your personal information and you are not satisfied with our response to your privacy request, you have the right to file a complaint with the appropriate regulatory authority.

16.1 For California Residents

California residents who wish to exercise their CCPA/CPRA rights or file a complaint may contact the California Privacy Protection Agency (CPPA):

• Website: cppa.ca.gov
• Email: [email protected]

You may also contact the California Attorney General's Office:

• Website: oag.ca.gov/privacy

16.2 For All U.S. Consumers

For general consumer privacy and data protection complaints, you may contact the Federal Trade Commission (FTC):

• Website: ftc.gov
• Phone: 1-877-FTC-HELP (1-877-382-4357)
• Online Complaint Assistant: reportfraud.ftc.gov

16.3 Other State Regulatory Agencies

Residents of other states may have additional rights and recourse options under emerging state privacy laws. We encourage you to consult your state's Attorney General's office or consumer protection agency for information about your rights and complaint procedures.

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please do not hesitate to contact our privacy team. We are committed to addressing your inquiries promptly and transparently.

This Privacy Policy was last reviewed and updated on June 24, 2026.