Privacy Policy

This Privacy Policy describes how Dave's Hot Chicken ("we," "us," "our," or "the Company") collects, uses, discloses, retains, and protects your personal information when you visit our website at daves.click, place orders online, participate in our loyalty programs, or otherwise interact with our services. Please read this policy carefully before using our website or submitting any personal information to us.

By accessing or using daves.click, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue your use of our website and services immediately.

We are committed to protecting your privacy and complying with all applicable federal and state privacy laws in the United States, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), the Children's Online Privacy Protection Act (COPPA), and other applicable federal and state regulations.

1. About Us and How to Contact Us

Dave's Hot Chicken operates the website located at daves.click and provides food-related products and services to consumers across the United States.

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact our privacy team using the contact details above. We aim to respond to all privacy-related inquiries within 30 business days.

2. Scope of This Privacy Policy

This Privacy Policy applies to:

• All visitors to the daves.click website, regardless of location;
• Customers who place online food orders through our website or affiliated platforms;
• Users who create accounts, register for loyalty programs, or sign up for newsletters;
• Individuals who contact us for customer service, support, or feedback;
• Users who interact with us through social media channels or third-party delivery platforms linked to our brand.

This policy does not apply to third-party websites, applications, or services that may be linked from our website. We encourage you to review the privacy policies of any third-party platforms you visit.

3. Information We Collect

We collect several categories of personal information depending on how you interact with our services. Below is a detailed breakdown of the data we may collect.

3.1 Personal Identification Information

When you create an account, place an order, or contact us, we may collect:

• Full name;
• Email address;
• Phone number;
• Billing and shipping address (including city, state, zip code);
• Date of birth (for age verification and birthday promotions);
• Username and password (encrypted);
• Payment information (processed securely through third-party payment processors — we do not store full credit card numbers).

3.2 Order and Transaction Data

When you make a purchase or place an order through our website, we collect:

• Order history, including items ordered, quantities, and customizations;
• Order confirmation numbers and timestamps;
• Delivery preferences and special instructions;
• Payment method type (e.g., credit/debit card, digital wallet);
• Transaction amounts and applicable taxes or fees.

3.3 Usage and Behavioral Data

As you browse and interact with our website, we automatically collect certain information, including:

• Pages visited, time spent on each page, and navigation paths;
• Links clicked and features used;
• Search queries entered on our website;
• Referring URLs (the page you visited before coming to our site);
• Shopping cart activity, including items added or abandoned;
• Frequency and timing of visits.

3.4 Device and Technical Information

We automatically collect technical information about the device and browser you use to access our website:

• IP address (which may be used to infer approximate geographic location);
• Browser type and version;
• Operating system and device type (desktop, mobile, tablet);
• Screen resolution and display settings;
• Device identifiers;
• Time zone settings;
• Network connection type.

3.5 Cookies and Tracking Technologies

We use cookies, web beacons, pixels, local storage, and similar tracking technologies to collect data about your interactions with our website. Please refer to Section 8 of this policy for detailed information about our cookie practices.

3.6 Communications and Feedback

If you contact us by email, phone, or through online forms, we collect:

• The content of your messages or inquiries;
• Your name and contact information as provided;
• Records of correspondence and responses;
• Survey responses or reviews submitted voluntarily.

3.7 Location Data

With your permission, we may collect precise geolocation data to assist with finding nearby restaurant locations, enabling delivery services, or improving local marketing. You may disable location sharing in your device settings at any time.

3.8 Information from Third Parties

We may receive information about you from third-party sources, including:

• Third-party food delivery platforms (e.g., DoorDash, Uber Eats, Grubhub);
• Social media platforms (if you connect your account or interact with our social media pages);
• Marketing and analytics partners;
• Publicly available sources.

4. How We Use Your Information

We use the personal information we collect for the following purposes:

4.1 Order Fulfillment and Service Delivery

• Processing and confirming your food orders;
• Coordinating delivery or pickup services;
• Sending order confirmations, updates, and receipts;
• Communicating with you about your account or order status;
• Providing customer support and resolving disputes.

4.2 Account Management

• Creating and managing your customer account;
• Administering loyalty programs and rewards;
• Enabling saved preferences, such as favorite orders and payment methods;
• Verifying your identity and maintaining account security.

4.3 Marketing and Promotional Communications

• Sending promotional emails, newsletters, and special offers (with your consent where required);
• Providing personalized menu recommendations and deals based on your order history;
• Running contests, sweepstakes, and loyalty promotions;
• Delivering targeted advertisements on our website and third-party platforms.

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any promotional email, or by contacting us at [email protected].

4.4 Analytics and Service Improvement

• Analyzing website traffic patterns and user behavior;
• Improving website functionality, design, and content;
• Developing new products, menu items, and services;
• Conducting internal research and market analysis;
• Monitoring and preventing fraud and unauthorized activity.

4.5 Legal Compliance and Safety

• Complying with applicable federal, state, and local laws and regulations;
• Responding to lawful requests from government authorities or law enforcement;
• Enforcing our Terms of Service and other agreements;
• Protecting the rights, property, and safety of Dave's Hot Chicken, our customers, and the public.

5. Sharing Your Information with Third Parties

We do not sell your personal information to third parties for monetary compensation. However, we may share your data in the following circumstances:

5.1 Service Providers and Business Partners

We engage trusted third-party vendors to assist in operating our website and delivering our services. These service providers are contractually obligated to protect your data and may only use it for the specific purposes we authorize. Categories of service providers include:

• Payment processors (e.g., Stripe, Square) to handle secure payment transactions;
• Delivery platform partners (e.g., DoorDash, Uber Eats, Grubhub) for order fulfillment;
• Email marketing platforms for sending promotional and transactional communications;
• Analytics providers (e.g., Google Analytics) for website performance analysis;
• Cloud hosting and data storage providers to maintain website infrastructure;
• Customer relationship management (CRM) platforms;
• Fraud detection and security service providers.

5.2 Legal Requirements and Law Enforcement

We may disclose your personal information if required to do so by law, court order, or in response to a lawful request from governmental authorities. This includes situations where disclosure is necessary to:

• Comply with a subpoena, court order, or other legal process;
• Protect the rights or safety of our company, customers, or the public;
• Investigate, prevent, or take action regarding illegal activities, fraud, or misuse of our services;
• Respond to requests from regulatory bodies or law enforcement agencies.

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy proceeding, your personal information may be transferred as part of the transaction. We will notify you of any such change via email or a prominent notice on our website, and you will have the opportunity to opt out where required by law.

5.4 Advertising and Analytics Partners

We may share anonymized, aggregated, or pseudonymized data with advertising and analytics partners for the purpose of improving our marketing campaigns and understanding user behavior. We do not share directly identifiable information with advertisers without your explicit consent.

5.5 Affiliated Entities

We may share information with our corporate affiliates, subsidiaries, or parent companies, subject to the same privacy protections outlined in this policy.

6. Data Security

We take the security of your personal information seriously and have implemented a range of technical, administrative, and physical safeguards to protect your data against unauthorized access, disclosure, alteration, or destruction. Our security measures include:

• SSL/TLS Encryption: All data transmitted between your browser and our website is encrypted using industry-standard Secure Socket Layer (SSL) or Transport Layer Security (TLS) protocols;
• Encrypted Storage: Sensitive data, including passwords, is stored using strong hashing and encryption algorithms;
• Access Controls: Access to personal data is restricted to authorized personnel on a need-to-know basis, using role-based access controls;
• Payment Security: Payment card data is processed through PCI-DSS compliant third-party payment processors; we do not store complete payment card information on our servers;
• Regular Security Audits: We conduct periodic reviews and testing of our security infrastructure;
• Incident Response Plan: We maintain a data breach response plan and will notify affected users and relevant authorities as required by applicable law in the event of a security breach.

7. Your Privacy Rights

Depending on your state of residence, you may have certain rights with respect to your personal information. We honor these rights regardless of where you are located in the United States, to the extent permitted by applicable law.

7.1 Right to Know and Access

You have the right to request information about the categories and specific pieces of personal information we have collected about you, the sources from which it was collected, the purposes for which it is used, and the third parties with whom it has been shared.

7.2 Right to Correction

You have the right to request that we correct inaccurate or incomplete personal information we hold about you.

7.3 Right to Deletion

You have the right to request that we delete your personal information, subject to certain exceptions (e.g., where we need to retain information for legal compliance, fraud prevention, or order fulfillment purposes).

7.4 Right to Data Portability

Where technically feasible, you have the right to receive a copy of your personal information in a structured, commonly used, and machine-readable format, and to transmit that data to another entity.

7.5 Right to Opt Out of Sale or Sharing

Under the California Consumer Privacy Act (CCPA) and its amendment by the California Privacy Rights Act (CPRA), California residents have the right to opt out of the "sale" or "sharing" of their personal information for cross-context behavioral advertising purposes. Although we do not sell personal information for monetary compensation, if any of our data practices constitute "sharing" under CPRA definitions, you may submit an opt-out request by emailing us at [email protected].

7.6 Right to Limit Use of Sensitive Personal Information

California residents under the CPRA have the right to direct us to limit the use and disclosure of sensitive personal information to what is necessary to perform the services you requested.

7.7 Right to Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights. This means we will not deny you services, charge you different prices, or provide you with a lower quality of service because you exercised your privacy rights.

7.8 How to Submit a Privacy Rights Request

To exercise any of the rights described above, please contact us by:

• Email: [email protected] (include "Privacy Rights Request" in the subject line);
• Website: daves.click.

We will verify your identity before processing any request. We aim to respond to verified requests within 45 days as required under CCPA/CPRA. If we require additional time, we will notify you of the extension and the reason for the delay. You may designate an authorized agent to submit a request on your behalf, subject to identity verification.

8. Cookie Policy

We use cookies and similar tracking technologies on our website to enhance your browsing experience, analyze site traffic, and serve relevant advertisements. Below is a summary of how we use these technologies.

8.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help websites remember your preferences, login status, shopping cart contents, and other information to improve your experience.

8.2 Types of Cookies We Use

8.3 Managing Your Cookie Preferences

You can manage or disable cookies through your browser settings. Note that disabling certain cookies may affect the functionality of our website. Most browsers allow you to:

• View and delete existing cookies;
• Block all or specific cookies from being set;
• Receive notifications before cookies are placed.

For more detailed information about our use of cookies and how to manage your preferences, please review our full Cookie Policy available on our website at daves.click.

9. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, to comply with our legal obligations, to resolve disputes, and to enforce our agreements. The following retention guidelines apply:

Upon expiration of the applicable retention period, we will securely delete or anonymize your personal information in accordance with our data disposal procedures.

10. Children's Privacy

Dave's Hot Chicken complies with the Children's Online Privacy Protection Act (COPPA) and does not knowingly collect, use, or disclose personal information from children under the age of 13 without verifiable parental consent. Our general services are directed toward users aged 18 and older.

If you are a parent or guardian and believe that your child under the age of 18 has provided us with personal information without your consent, please contact us immediately at [email protected]. We will promptly investigate and, if confirmed, delete the child's personal information from our records.

We do not use any personal information collected from minors for marketing or advertising purposes.

11. International Data Transfers

Dave's Hot Chicken is based in the United States. If you are accessing our website from outside the United States, please be aware that your personal information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country of residence.

By using our website and providing us with your personal information, you acknowledge that your data may be processed in the United States. We take appropriate steps to ensure that any international data transfers are conducted in accordance with applicable legal requirements, and we implement safeguards such as standard contractual clauses or other legally recognized mechanisms where applicable.

If you are located in a jurisdiction with specific data transfer restrictions, please contact us at [email protected] for more information about the safeguards we have in place.

12. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), effective January 1, 2023. These rights include:

• The right to know what personal information we have collected, used, disclosed, or sold;
• The right to delete personal information we have collected from you (subject to exceptions);
• The right to correct inaccurate personal information;
• The right to opt out of the sale or sharing of personal information;
• The right to limit the use and disclosure of sensitive personal information;
• The right to non-discrimination for exercising your CCPA/CPRA rights.

To submit a California privacy rights request, please email us at [email protected] with the subject line "California Privacy Rights Request." You may also designate an authorized agent to make a request on your behalf by providing written authorization and proof of your identity.

California residents may also contact the California Privacy Protection Agency (CPPA) at cppa.ca.gov for information about your rights and how to file a complaint.

13. Other State Privacy Rights

Residents of certain other U.S. states may also have privacy rights under their respective state laws. We are committed to honoring these rights to the extent required by applicable law. States with comprehensive consumer privacy laws include, but may not be limited to:

• Virginia – Consumer Data Protection Act (CDPA);
• Colorado – Colorado Privacy Act (CPA);
• Connecticut – Connecticut Data Privacy Act (CTDPA);
• Utah – Utah Consumer Privacy Act (UCPA);
• Texas – Texas Data Privacy and Security Act (TDPSA);
• Oregon – Oregon Consumer Privacy Act (OCPA).

Regardless of your state of residence, you may contact us at [email protected] to exercise rights available to you under applicable state law.

14. Third-Party Links and Services

Our website may contain links to third-party websites, services, or applications that are not operated by Dave's Hot Chicken. These may include food delivery platforms, social media channels, payment gateways, or promotional partners. We have no control over the privacy practices of these third parties and are not responsible for their content or privacy policies.

We strongly encourage you to review the privacy policies of any third-party websites you visit. The inclusion of a link on our website does not imply endorsement or any affiliation with the third-party site or service.

15. Do Not Track Signals

Some browsers include a "Do Not Track" (DNT) feature that sends a signal to websites requesting that your browsing activity not be tracked. Currently, there is no universally accepted standard for how websites should respond to DNT signals. Our website does not currently alter its data collection practices in response to DNT signals. However, you may manage your tracking preferences through our cookie consent tool and your browser settings.

16. How to File a Complaint with a Data Protection Authority

If you believe that we have not handled your personal information in accordance with applicable law, you have the right to file a complaint with the appropriate regulatory authority. In the United States, relevant authorities include:

• Federal Trade Commission (FTC): The FTC enforces federal consumer protection laws, including privacy-related violations. You can file a complaint at reportfraud.ftc.gov or www.ftc.gov.
• California Privacy Protection Agency (CPPA): California residents may contact the CPPA at cppa.ca.gov.
• State Attorney General Offices: Residents of other states may contact their state's Attorney General office to report privacy violations under applicable state law.

Before filing a complaint with a regulatory authority, we encourage you to contact us first at [email protected] so that we may have the opportunity to resolve your concern directly and promptly.

17. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or business operations. When we make material changes to this policy, we will:

• Update the "Last Updated" date at the top of this page;
• Post a prominent notice on our website homepage;
• Where required by law, notify you directly via email if you have an account with us.

Your continued use of our website and services after any such changes constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your information.

18. Contact Information for Privacy Inquiries

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal information, please do not hesitate to reach out to us using the contact details below:

When contacting us about a privacy matter, please include your full name, the email address associated with your account (if applicable), and a clear description of your request or concern. This will help us process your inquiry as efficiently as possible.

We are committed to resolving all privacy inquiries promptly, fairly, and in full compliance with applicable United States federal and state privacy laws, including the California Consumer Privacy Act (CCPA/CPRA) and the Federal Trade Commission Act (FTC Act).

This Privacy Policy was last reviewed and updated on May 8, 2026. All rights reserved. Dave's Hot Chicken © 2026.