Privacy Policy

Effective Date: June 21, 2026  |  Last Updated: June 21, 2026

1. Introduction and Overview

Welcome to Dave's Hot Chicken ("we," "us," "our," or "the Company"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy applies to all information collected through our website daveshotchicken.click, our online ordering systems, mobile applications, in-store interactions, loyalty programs, and any other services we provide (collectively referred to as the "Services").

As a food service business operating in the United States, we are subject to applicable federal and state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), and other applicable state consumer protection laws. We take our obligations under these laws seriously and have designed this Privacy Policy to be transparent, comprehensive, and easy to understand.

By accessing or using our website at daveshotchicken.click, placing an order, signing up for our loyalty program, or otherwise engaging with our Services, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our Services immediately.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. We will notify you of any material changes by posting the updated policy on our website with a new effective date. Your continued use of our Services after such changes constitutes your acceptance of the revised policy.

2. Information We Collect

We collect various types of information to provide and improve our Services. The categories of information we collect include:

2.1 Personal Information You Provide Directly

When you interact with us voluntarily, you may provide us with personal information, including but not limited to:

• Contact Information: Your full name, email address, phone number, and mailing or delivery address when you place an order, create an account, or sign up for our newsletter or loyalty program.
• Account Credentials: Username, password, and security questions when you create an account on our platform.
• Payment Information: Credit card numbers, debit card numbers, billing address, and other financial information necessary to process your orders. Note that full payment card details are processed through secure, PCI-DSS compliant third-party payment processors and are not stored on our servers.
• Order History and Preferences: Details about the food items you have ordered, your dietary preferences, allergies or dietary restrictions you voluntarily share with us, and your customization preferences.
• Communications: Messages, feedback, reviews, complaints, or inquiries you submit to us via email, contact forms, or customer service channels.
• Loyalty Program Information: Details you provide when enrolling in our rewards or loyalty program, including your preferences and redemption history.
• Survey and Contest Participation: Information you submit when participating in surveys, promotions, sweepstakes, or contests we may offer from time to time.

2.2 Information Collected Automatically

When you visit our website daveshotchicken.click or use our digital services, we automatically collect certain technical and usage information, including:

• Device Information: The type of device you are using (desktop, laptop, tablet, smartphone), operating system and version, browser type and version, device identifiers, and hardware model information.
• Log Data: Internet Protocol (IP) address, browser type, referring and exit pages, date and time stamps, pages viewed, time spent on pages, click patterns, and other diagnostic data.
• Location Data: General geographic location based on your IP address. If you have enabled location services on your device and consented to location tracking, we may collect more precise location data to facilitate delivery services or show you nearby locations.
• Usage Data: Information about how you use our website and Services, including the pages you visit, the features you use, the searches you perform, and your interaction patterns with our digital platforms.
• Cookie and Tracking Data: Information collected through cookies, web beacons, pixel tags, local storage, and similar tracking technologies. See Section 9 of this policy for more details on our cookie practices.

2.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Third-Party Delivery Platforms: If you order through third-party delivery services or food ordering platforms, they may share certain order-related information with us.
• Social Media Platforms: If you choose to connect your social media account with our Services or interact with our social media pages, we may receive information such as your public profile, name, and email address.
• Analytics Providers: We work with third-party analytics companies that help us understand how users interact with our Services.
• Marketing Partners: Information from marketing partners to help us better understand our customer base and improve our advertising efforts.
• Background and Verification Services: For catering or corporate orders, we may use verification services to confirm identity and prevent fraud.

3. How We Use Your Information

We use the information we collect for various legitimate business purposes, including:

3.1 Service Provision and Order Fulfillment

• Processing and fulfilling your food orders, including delivery or pickup coordination
• Creating and managing your account on our platform
• Processing payments and preventing fraudulent transactions
• Communicating with you about your orders, including confirmations, updates, and receipts
• Providing customer support and responding to your inquiries, complaints, and feedback
• Administering our loyalty and rewards programs
• Managing reservations or catering requests

3.2 Business Operations and Improvement

• Analyzing usage patterns and trends to understand how customers interact with our Services
• Improving our website functionality, menu offerings, and overall customer experience
• Conducting internal research and development to innovate our food products and services
• Monitoring and ensuring the security and integrity of our systems
• Detecting, investigating, and preventing fraudulent activity, unauthorized access, and other illegal activities
• Complying with applicable laws, regulations, and legal obligations

3.3 Marketing and Communications

• Sending you promotional emails, newsletters, special offers, and marketing communications about our products and services (where you have opted in or where permitted by law)
• Personalizing your experience on our website, including displaying relevant menu items and promotions based on your preferences and order history
• Conducting marketing analytics and measuring the effectiveness of our advertising campaigns
• Delivering targeted advertisements through social media and other digital platforms
• Inviting you to participate in surveys, contests, and promotions

You have the right to opt out of marketing communications at any time. Each marketing email we send will include an unsubscribe link, or you may contact us directly at [email protected] to update your communication preferences.

3.4 Legal and Compliance Purposes

• Fulfilling our legal obligations under applicable federal and state laws
• Enforcing our Terms of Service and other agreements
• Responding to lawful requests from government authorities, regulators, or law enforcement
• Protecting the rights, property, and safety of Dave's Hot Chicken, our customers, employees, and the public
• Resolving disputes and managing legal claims

4. Sharing Your Information with Third Parties

We do not sell your personal information to third parties for monetary compensation. However, we may share your information in the following circumstances:

4.1 Service Providers and Business Partners

We work with carefully selected third-party service providers who assist us in operating our business and delivering our Services. These providers may have access to your personal information solely for the purpose of performing services on our behalf and are contractually obligated to maintain the confidentiality and security of your information. Our service providers include:

• Payment Processors: Companies that handle credit and debit card transactions securely on our behalf
• Delivery and Logistics Partners: Third-party delivery services that help fulfill your food orders
• Cloud Hosting and Infrastructure Providers: Companies that provide the technology infrastructure to host and operate our website and systems
• Email and Communication Services: Providers that help us send transactional and marketing emails
• Analytics and Data Analysis Providers: Companies like Google Analytics that help us understand website traffic and user behavior
• Customer Relationship Management (CRM) Systems: Software platforms that help us manage customer interactions and support requests
• Marketing and Advertising Platforms: Digital advertising networks and social media platforms for targeted advertising
• Fraud Detection and Security Services: Companies that help us identify and prevent fraudulent activity

4.2 Legal Requirements and Law Enforcement

We may disclose your personal information if we believe in good faith that such disclosure is necessary to:

• Comply with a legal obligation, subpoena, court order, or other lawful request from governmental authorities
• Enforce our Terms of Service or other agreements
• Investigate potential violations of our policies
• Protect the rights, property, or safety of Dave's Hot Chicken, our users, employees, or the public
• Detect, prevent, or address fraud, security issues, or technical problems

4.3 Business Transfers

In the event that Dave's Hot Chicken undergoes a merger, acquisition, asset sale, reorganization, bankruptcy, or other business transition, your personal information may be transferred as part of such transaction. We will notify you via email and/or a prominent notice on our website of any such change in ownership and your choices regarding your information.

4.4 With Your Consent

We may share your information with additional third parties when you have given us explicit consent to do so, such as when you participate in co-branded promotions or partnership programs.

4.5 Aggregated and De-Identified Data

We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you with third parties for marketing, research, analytics, and business purposes. This information is not considered personal information under applicable privacy laws.

5. Data Security

Protecting your personal information is a top priority for Dave's Hot Chicken. We have implemented a comprehensive set of technical, administrative, and physical security measures designed to protect your information from unauthorized access, disclosure, alteration, and destruction.

5.1 Technical Security Measures

• Encryption: We use industry-standard Secure Socket Layer (SSL) / Transport Layer Security (TLS) encryption to protect data transmitted between your browser and our website. Sensitive data such as payment information is encrypted both in transit and at rest.
• Access Controls: We restrict access to personal information to authorized employees, contractors, and service providers who need such access to perform their job functions. All personnel with access to sensitive data undergo background checks and receive regular privacy and security training.
• Firewalls and Intrusion Detection: We employ advanced firewalls and intrusion detection systems to monitor and protect our network infrastructure against unauthorized access.
• Regular Security Assessments: We conduct periodic security audits, vulnerability assessments, and penetration testing to identify and address potential security weaknesses.
• PCI-DSS Compliance: Our payment processing systems comply with the Payment Card Industry Data Security Standard (PCI-DSS) to protect cardholder data.

5.2 Organizational Security Measures

• Employee privacy and security awareness training programs
• Confidentiality agreements with employees and contractors who handle personal data
• Data breach response and incident management procedures
• Vendor security assessment processes for third-party service providers

Despite our best efforts, no security system is completely impenetrable. In the unlikely event of a data breach that affects your personal information, we will notify you and relevant authorities as required by applicable law, including state data breach notification laws.

6. Your Privacy Rights

Depending on your state of residence, you may have specific rights regarding your personal information. We are committed to honoring these rights and providing you with meaningful control over your data.

6.1 Rights Under the California Consumer Privacy Act (CCPA/CPRA)

If you are a California resident, you have the following rights under the CCPA as amended by the CPRA:

6.2 General Privacy Rights for All Users

Regardless of your location, we offer all users the following privacy controls:

• Access and Review: You may request a copy of the personal information we hold about you by contacting us at [email protected].
• Correction and Update: If any of your personal information is inaccurate or incomplete, you may request that we correct or update it.
• Account Deletion: You may request the deletion of your account and associated personal information, subject to our legal obligations to retain certain data.
• Marketing Opt-Out: You may opt out of receiving marketing communications from us at any time by clicking the "unsubscribe" link in any marketing email or contacting us directly.
• Cookie Preferences: You can manage your cookie preferences through your browser settings or our cookie preference center on the website.

6.3 How to Exercise Your Rights

To exercise any of the rights described above, you may:

• Send an email to [email protected] with the subject line "Privacy Rights Request"
• Visit our website at daveshotchicken.click and use the privacy request form

We will verify your identity before processing your request to ensure the security of your personal information. We will respond to verifiable consumer requests within 45 days. If we require more time, we will inform you of the reason and extension period in writing. We will not charge a fee for processing your request unless it is excessive, repetitive, or manifestly unfounded.

7. Cookie Usage and Tracking Technologies

Our website daveshotchicken.click uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and support our marketing efforts.

7.1 What Are Cookies?

Cookies are small text files that are placed on your device when you visit a website. They allow the website to remember your actions and preferences over a period of time, so you don't have to keep re-entering information every time you return to the site.

7.2 Types of Cookies We Use

• Essential/Strictly Necessary Cookies: These cookies are required for the basic functioning of our website, such as maintaining your shopping cart, processing orders, and enabling secure login. These cannot be disabled without significantly impacting your experience.
• Performance and Analytics Cookies: These cookies help us understand how visitors interact with our website by collecting anonymous information about page visits, traffic sources, and user behavior.
• Functional Cookies: These cookies allow us to remember your preferences and settings, such as your language preference, location, and personalized menu choices.
• Marketing and Advertising Cookies: These cookies track your browsing activity across websites to deliver targeted advertisements relevant to your interests. They may be placed by our advertising partners.

You can manage your cookie preferences through your web browser settings. Most browsers allow you to block or delete cookies. However, if you block essential cookies, some parts of our website may not function properly.

For more detailed information about our cookie practices, please refer to our full Cookie Policy available at daveshotchicken.click/cookie-policy.

8. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by applicable law.

8.1 Retention Periods

When your personal information is no longer needed, we will securely delete or anonymize it in accordance with our data disposal procedures. Anonymized or aggregated data that cannot be linked back to you may be retained indefinitely for analytical and business purposes.

9. Children's Privacy

Dave's Hot Chicken takes the privacy and safety of minors extremely seriously. Our Services are intended for use by individuals who are 18 years of age or older. We do not knowingly collect, solicit, or retain personal information from children under the age of 13, or from individuals under the age of 18 in states where additional protections apply.

Our website daveshotchicken.click is not directed at or designed to attract children under the age of 18. We do not knowingly market to minors or collect their personal information for commercial purposes. If we become aware that we have inadvertently collected personal information from a child under 13 years of age without verifiable parental consent, we will take immediate steps to delete that information from our records.

In compliance with the Children's Online Privacy Protection Act (COPPA), if you are a parent or guardian and believe that your child under the age of 13 has provided us with personal information without your consent, please contact us immediately at [email protected]. We will investigate the matter and take appropriate corrective action, including deletion of the child's information from our systems.

We encourage parents and guardians to monitor their children's online activity and to educate them about safe internet use. If you are under the age of 18, please do not use our Services or provide any personal information to us without the explicit consent and supervision of a parent or legal guardian.

10. International Data Transfers

Dave's Hot Chicken is based in the United States, and our Services are primarily directed at customers within the United States. However, some of our third-party service providers and technology partners may be located in other countries, which means that your personal information may be transferred to, stored, and processed outside of the United States.

When we transfer personal information internationally, we take appropriate steps to ensure that such transfers comply with applicable data protection laws and that your information receives an adequate level of protection. These safeguards may include:

• Relying on adequacy decisions where applicable
• Implementing Standard Contractual Clauses (SCCs) or other legally approved mechanisms
• Ensuring our service providers implement appropriate security measures equivalent to those required under applicable U.S. privacy laws
• Obtaining your explicit consent for specific international transfers where required

By using our Services, you understand and acknowledge that your personal information may be processed in countries outside of the United States, and that the data protection laws in those countries may differ from those in your home state or country. We will always treat your information with the same level of care and security described in this Privacy Policy, regardless of where it is processed.

11. Third-Party Links and Services

Our website daveshotchicken.click may contain links to third-party websites, social media platforms, delivery applications, and other external services that are not operated by us. These links are provided for your convenience and information only. We have no control over the content, privacy practices, or data collection activities of these third-party sites.

We strongly encourage you to review the privacy policies of any third-party websites or services you visit through links on our platform. Dave's Hot Chicken is not responsible for the privacy practices or content of third-party websites and services. This Privacy Policy applies solely to information collected by us through our own Services.

12. How to File Privacy Complaints

If you have concerns about how we handle your personal information, we encourage you to contact us first so that we can attempt to resolve your complaint directly. We take all privacy concerns seriously and will investigate and respond to your inquiry promptly.

12.1 Contact Us Directly

To file a privacy complaint or raise a concern, please contact us using the information provided in Section 13 of this policy. We will acknowledge your complaint within 5 business days and provide a substantive response within 30 days.

12.2 California Residents — California Attorney General

If you are a California resident and are not satisfied with our response to your privacy complaint, you have the right to file a complaint with the California Privacy Protection Agency (CPPA) or the California Attorney General's Office:

12.3 Federal Trade Commission (FTC)

You may also file a complaint with the Federal Trade Commission (FTC), which enforces consumer protection laws, including those related to privacy and data security:

12.4 State-Specific Data Protection Authorities

Residents of other states with enacted privacy legislation (including Virginia, Colorado, Connecticut, Texas, and others) may also have the right to appeal our decisions regarding your privacy rights to your state's relevant regulatory authority. Please refer to your state government's official website for information on the appropriate regulatory body and complaint procedures.

13. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact us. We are committed to responding to all privacy-related inquiries in a timely and transparent manner.

14. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes to this policy, we will:

• Post the updated Privacy Policy on our website at daveshotchicken.click with a new "Last Updated" date
• Send a notification email to registered users at the email address associated with their account
• Display a prominent notice on our website informing users of the material changes

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our Services after any changes to this Privacy Policy constitutes your acceptance of the revised terms. If you disagree with any changes, you should discontinue use of our Services and may request deletion of your account and personal data as described in Section 6 of this policy.

15. Applicable Law and Jurisdiction

This Privacy Policy is governed by and construed in accordance with the laws of the United States of America and applicable state laws. In particular, we comply with:

• Federal Trade Commission Act (FTC Act), 15 U.S.C. § 45: Which prohibits unfair or deceptive acts or practices in commerce, including misrepresentations about privacy practices.
• California Consumer Privacy Act (CCPA), Cal. Civ. Code § 1798.100 et seq.: As amended by the California Privacy Rights Act (CPRA), providing California residents with specific privacy rights.
• Children's Online Privacy Protection Act (COPPA), 15 U.S.C. § 6501 et seq.: Governing the collection of personal information from children under 13.
• CAN-SPAM Act, 15 U.S.C. § 7701 et seq.: Governing commercial email communications.
• Applicable State Privacy Laws: Including laws enacted in Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Texas (TDPSA), and other states with comprehensive consumer privacy legislation.
• State Data Breach Notification Laws: All 50 U.S. states have enacted data breach notification laws that we comply with in the event of a security incident.

This Privacy Policy was last reviewed and updated on June 21, 2026. By using daveshotchicken.click and our associated Services, you confirm that you have read, understood, and agreed to this Privacy Policy in its entirety.