Privacy Policy

This Privacy Policy describes how churchzchickens.rest ("we," "us," or "our") collects, uses, discloses, and protects your personal information when you visit our website at churchzchickens.rest, place orders, use our digital services, or otherwise interact with us. Please read this policy carefully to understand our practices regarding your personal data and how we treat it.

By accessing or using our website, mobile applications, or any of our digital services, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy. If you do not agree with any part of this policy, please discontinue your use of our services immediately.

We are committed to protecting your privacy and handling your data in an open and transparent manner. This Privacy Policy is governed by applicable United States federal and state privacy laws, including but not limited to the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission (FTC) Act, and other applicable consumer protection regulations.

1. Who We Are

For the purposes of this Privacy Policy, the data controller responsible for your personal information is:

If you have any questions, concerns, or requests related to this Privacy Policy or the way we handle your personal data, you may contact us using the details provided in the Contact Us section at the end of this document.

2. Information We Collect

We collect various categories of personal information from and about you depending on how you interact with us. The categories of data we may collect include the following:

2.1 Personal Identification Information

When you create an account, place an order, sign up for our loyalty or rewards program, or contact our customer support team, we may collect personal identification information, including but not limited to:

• Full name
• Email address
• Phone number
• Billing and delivery address (street address, city, state, ZIP code)
• Date of birth (when required for age verification or promotional purposes)
• Account username and password (stored in encrypted form)
• Profile picture or avatar (if voluntarily provided)

2.2 Payment and Financial Information

When you place an order or make a purchase through our website or mobile application, we collect payment-related information necessary to process your transaction. This may include:

• Credit or debit card details (card number, expiration date, CVV — processed through secure, PCI-DSS-compliant third-party payment processors)
• Billing address
• Transaction history and purchase records
• Gift card or promotional code information

Please note that we do not store your full credit or debit card number on our servers. All payment processing is conducted through secure third-party payment processors in compliance with Payment Card Industry Data Security Standards (PCI-DSS).

2.3 Usage and Behavioral Data

When you browse and interact with our website or mobile application, we automatically collect certain usage and behavioral data, including:

• Pages viewed and content accessed
• Time and duration of your visit
• Search queries entered on our platform
• Links clicked and features used
• Items added to your cart or wishlist
• Order history and frequency of purchases
• Referral source (e.g., search engine, social media, advertising campaign)

2.4 Device and Technical Information

We automatically collect certain technical information about the device and network you use to access our services, including:

• IP address
• Device type (desktop, mobile, tablet)
• Operating system and version
• Browser type and version
• Device identifiers and advertising IDs
• Mobile network information
• Time zone settings and language preferences
• Crash logs and error reports

2.5 Location Data

With your permission, we may collect precise or approximate geographic location data from your device. We use this information to provide location-based services, such as helping you find the nearest restaurant location, enabling delivery services, or personalizing your experience based on your geographic area. You may disable location services through your device settings at any time.

2.6 Communications and Customer Support Data

When you contact us for customer support, submit feedback, participate in surveys, or communicate with us through email, chat, or social media, we collect the content of those communications, including:

• Email correspondence
• Chat transcripts
• Customer complaint or feedback records
• Survey or review responses
• Social media interactions and messages

2.7 Cookies and Tracking Technologies

We use cookies, web beacons, pixel tags, local storage, and similar tracking technologies to collect data about your activity on our website. For detailed information about our use of cookies and how to manage your preferences, please refer to Section 8 – Cookie Policy of this document.

2.8 Information from Third Parties

We may receive personal information about you from third-party sources, including:

• Social media platforms (when you connect your social media account or log in via social media)
• Third-party delivery partners and food aggregator platforms
• Marketing and analytics partners
• Publicly available data sources
• Business partners and affiliated entities

3. How We Use Your Information

We use the personal information we collect for the following purposes:

3.1 Service Provision and Order Fulfillment

• Processing and fulfilling your food orders, including dine-in, takeaway, and delivery orders
• Managing your account and providing access to your order history and preferences
• Facilitating payment transactions and issuing receipts or invoices
• Coordinating delivery services, including sharing necessary information with delivery partners
• Operating our loyalty and rewards programs
• Responding to your customer service inquiries and resolving complaints

3.2 Communications and Marketing

• Sending you transactional communications (order confirmations, delivery updates, account notifications)
• Sending promotional emails, newsletters, and offers about our products, services, and events — with your consent where required by law
• Personalizing marketing communications based on your preferences and purchase history
• Conducting surveys and collecting feedback to improve our services
• Sending push notifications through our mobile application (with your consent)

3.3 Analytics and Service Improvement

• Analyzing website and app usage patterns to improve user experience and functionality
• Conducting internal research and analytics to understand customer preferences and behavior
• Testing new features, products, and promotions
• Monitoring the performance and security of our digital platforms
• Generating aggregated, anonymized statistical reports for business planning purposes

3.4 Legal and Compliance Purposes

• Complying with applicable laws, regulations, and legal obligations
• Responding to lawful requests from government authorities or law enforcement agencies
• Enforcing our Terms of Service and other agreements
• Detecting, preventing, and investigating fraudulent activity, security breaches, and other harmful conduct
• Protecting the rights, property, and safety of our company, customers, and the public

3.5 Advertising and Targeted Marketing

• Displaying relevant advertisements on our website and third-party platforms based on your interests and browsing behavior
• Participating in retargeting campaigns to re-engage users who have previously visited our website
• Measuring the effectiveness of our advertising campaigns

4. Legal Basis for Processing

We process your personal information based on the following legal grounds:

• Contractual Necessity: Processing is necessary to fulfill orders you place with us and to provide the services you request.
• Legitimate Interests: We may process your data for our legitimate business interests, such as fraud prevention, network security, and improving our products and services, provided that such interests are not overridden by your rights and interests.
• Consent: Where required by law, we will obtain your explicit consent before processing your data for marketing purposes or before placing non-essential cookies on your device.
• Legal Obligation: Processing may be necessary to comply with a legal obligation to which we are subject.

5. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes. However, we may share your information with selected third parties in the following circumstances:

5.1 Service Providers and Business Partners

We engage third-party companies and individuals to perform services on our behalf. These service providers may have access to your personal information only to the extent necessary to perform their functions and are contractually obligated to maintain the confidentiality and security of your data. Our service providers include:

• Payment processors (e.g., Stripe, PayPal, Square)
• Delivery and logistics partners
• Cloud hosting and IT infrastructure providers
• Email and communication service providers
• Marketing and advertising platforms (e.g., Google Ads, Meta Advertising)
• Customer relationship management (CRM) software providers
• Analytics service providers (e.g., Google Analytics)
• Fraud prevention and security vendors

5.2 Legal Requirements and Law Enforcement

We may disclose your personal information if required to do so by law or in response to a valid legal process, including:

• Compliance with applicable federal, state, or local laws and regulations
• Court orders, subpoenas, or other legal processes
• Requests from law enforcement agencies or government authorities
• Situations where disclosure is necessary to protect our legal rights or those of our customers

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal information may be transferred as part of that transaction. We will provide notice before your personal information is transferred and becomes subject to a different privacy policy.

5.4 With Your Consent

We may share your personal information with third parties when you have given us explicit consent to do so, such as when you opt in to third-party promotional offers or connect your account with a third-party service.

6. Data Security

We take the security of your personal information seriously and implement a comprehensive range of technical, administrative, and physical security measures to protect your data from unauthorized access, disclosure, alteration, loss, or destruction. Our security measures include:

• Encryption: We use industry-standard Secure Sockets Layer (SSL) and Transport Layer Security (TLS) encryption to protect data transmitted between your browser and our servers.
• Access Controls: Access to personal information is restricted to authorized employees, contractors, and service providers who need it to perform their job functions. All personnel with access to personal data are subject to confidentiality obligations.
• Secure Data Storage: Personal data is stored on secure servers protected by firewalls, intrusion detection systems, and other security technologies.
• Password Protection: Account passwords are stored using strong, one-way hashing algorithms. We recommend that you use a strong, unique password for your account and never share it with anyone.
• Regular Security Audits: We conduct periodic security assessments, penetration testing, and vulnerability scans to identify and address potential security risks.
• PCI-DSS Compliance: Our payment processing systems comply with Payment Card Industry Data Security Standards to protect your financial information.
• Incident Response: We have a data breach response plan in place to promptly identify, contain, and remediate security incidents, and to notify affected individuals and authorities as required by law.

While we implement these measures, please be aware that no method of data transmission or storage is 100% secure. We cannot guarantee the absolute security of your personal information, and you provide your data to us at your own risk. If you believe your account has been compromised, please contact us immediately at [email protected].

7. Your Privacy Rights

Depending on your state of residence and applicable law, you may have the following rights regarding your personal information. We will respond to verified requests within the timeframes required by applicable law (generally within 45 days for most U.S. state privacy laws).

7.1 Right to Know and Access

You have the right to request that we disclose to you the categories and specific pieces of personal information we have collected about you, the categories of sources from which your information was collected, the purposes for which we use your information, and the categories of third parties with whom we share your information.

7.2 Right to Correction

You have the right to request that we correct inaccurate or incomplete personal information we hold about you, subject to certain exceptions. You may update much of your personal information directly through your account settings.

7.3 Right to Deletion

You have the right to request that we delete the personal information we have collected from you, subject to certain exceptions (such as where we need to retain the information to comply with a legal obligation, complete a transaction, or detect and prevent fraud).

7.4 Right to Data Portability

You have the right to receive a copy of the personal information you have provided to us in a structured, commonly used, and machine-readable format, and to request that we transmit this data to another service provider where technically feasible.

7.5 Right to Opt-Out of Sale or Sharing

Under the CCPA/CPRA, California residents have the right to opt out of the sale or sharing of their personal information for cross-context behavioral advertising. If you are a California resident, you may exercise this right by contacting us at [email protected] or by using any opt-out mechanism we make available on our website.

7.6 Right to Limit Use of Sensitive Personal Information

Under the CPRA, California residents have the right to limit our use and disclosure of their sensitive personal information (such as precise geolocation, biometric data, or financial account details) to what is necessary to provide the requested services.

7.7 Right to Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights. We will not deny you goods or services, charge you different prices, or provide you with a lower quality of service because you have exercised your data protection rights.

7.8 Opt-Out of Marketing Communications

You may opt out of receiving promotional emails from us at any time by clicking the "unsubscribe" link in any marketing email we send, by updating your communication preferences in your account settings, or by contacting us directly at [email protected]. Please note that even if you opt out of marketing communications, we may still send you transactional and service-related communications.

7.9 How to Submit a Privacy Request

To exercise any of the rights described above, please contact us by:

• Email: [email protected]
• Website: churchzchickens.rest

We may need to verify your identity before processing your request. We will ask you to provide certain information to confirm your identity, such as your account email address, order history, or other identifying information. We will not fulfill requests unless we can verify that the requestor is the person about whom we have collected information, or an authorized representative of that person.

8. Cookie Policy

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and deliver personalized content and advertising. Cookies are small text files placed on your device when you visit our website.

8.1 Types of Cookies We Use

You may manage your cookie preferences through your browser settings or through any cookie consent tool we provide on our website. Please note that disabling certain cookies may affect the functionality of our website.

9. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, to comply with our legal obligations, resolve disputes, and enforce our agreements. The specific retention periods depend on the category of data and the purpose for which it was collected:

When your personal information is no longer needed, we will securely delete, anonymize, or destroy it in accordance with our data retention and disposal procedures.

10. Children's Privacy

We are committed to complying with the Children's Online Privacy Protection Act (COPPA) and other applicable laws regarding the protection of children's privacy online. Our online food ordering services, loyalty programs, and marketing activities are directed at adults aged 18 and over.

If you are under 18 years of age, please do not use our website or provide any personal information to us. If you are a parent or guardian and believe that your child under the age of 13 has provided personal information to us without your consent, please contact us immediately at [email protected], and we will take steps to delete that information from our systems as promptly as possible.

We do not knowingly allow children under 18 to create accounts on our platform. If we become aware that we have inadvertently collected personal information from a minor under the age of 13, we will delete such information from our records without delay.

11. International Data Transfers

Our primary operations are based in the United States, and the personal information we collect is primarily stored and processed within the United States. However, in some cases, your personal information may be transferred to, stored in, or processed in countries outside of the United States, particularly when we use cloud-based service providers or business partners that operate internationally.

If your personal information is transferred outside the United States, we will ensure that such transfers are conducted in accordance with applicable data protection laws. We take appropriate safeguards to ensure that your personal information remains protected regardless of where it is processed, including:

• Implementing contractual clauses and data processing agreements with our international service providers
• Ensuring that recipient countries or organizations provide an adequate level of data protection
• Applying consistent data security standards across all locations where your data is processed

By using our website and services, you acknowledge and consent to the transfer of your personal information to the United States and other countries as described in this Privacy Policy.

12. Third-Party Websites and Links

Our website may contain links to third-party websites, social media platforms, delivery partner portals, and other external services that are not operated or controlled by us. This Privacy Policy applies only to our website and services. We are not responsible for the privacy practices or content of any third-party websites. We encourage you to review the privacy policies of any third-party websites you visit before providing them with your personal information.

We also integrate third-party services such as social media sharing buttons, payment gateways, and maps. These third-party services may collect data about you in accordance with their own privacy policies. We encourage you to review those policies directly.

13. California Privacy Rights (CCPA / CPRA)

If you are a resident of California, you have specific privacy rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), effective January 1, 2023. In addition to the rights described in Section 7 of this policy, California residents have the following additional rights:

• Right to Know: The right to know what personal information has been collected, used, disclosed, and sold about you in the preceding 12 months.
• Right to Delete: The right to request deletion of your personal information, subject to certain exceptions.
• Right to Correct: The right to request correction of inaccurate personal information.
• Right to Opt-Out of Sale/Sharing: The right to opt out of the sale or sharing of your personal information.
• Right to Limit Use of Sensitive Personal Information: The right to limit the use and disclosure of sensitive personal information.
• Right to Non-Discrimination: The right not to receive discriminatory treatment for exercising your CCPA/CPRA rights.
• Authorized Agent: You may designate an authorized agent to submit requests on your behalf. We may require verification of the agent's authorization before processing such requests.

To submit a California privacy rights request, please contact us at [email protected].

14. Filing a Complaint with a Data Protection Authority

If you believe that we have handled your personal information in a manner that violates applicable privacy laws, you have the right to file a complaint with the appropriate regulatory authority.

14.1 United States Residents

In the United States, privacy and consumer protection matters are overseen by several federal and state agencies. You may file a complaint with:

• Federal Trade Commission (FTC):
  Website: www.ftc.gov
  FTC Consumer Response Center: 600 Pennsylvania Avenue NW, Washington, D.C. 20580
  Phone: 1-877-382-4357
• California Attorney General (for California residents):
  Website: oag.ca.gov/privacy
  Office of the Attorney General, 1300 I Street, Suite 1740, Sacramento, CA 95814
• California Privacy Protection Agency (CPPA):
  Website: cppa.ca.gov

Before filing a complaint with a regulatory authority, we encourage you to contact us first at [email protected] so that we have the opportunity to address your concerns directly and resolve any issues as promptly as possible.

15. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our business practices, applicable laws, or technological developments. When we make material changes to this policy, we will:

• Update the "Last Updated" date at the top of this page
• Post a prominent notice on our website or send you an email notification (if we have your email address)
• Where required by law, obtain your consent before implementing significant changes

Your continued use of our website or services after we post any changes to this Privacy Policy constitutes your acceptance of those changes. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, or if you wish to exercise any of your privacy rights, please contact us using the following information:

We are committed to resolving any privacy-related concerns promptly and professionally. Upon receiving your request or inquiry, we will acknowledge receipt and provide a substantive response within the timeframe required by applicable law — typically within 45 days of receiving a verified request, with an extension of up to an additional 45 days where reasonably necessary.