Privacy Policy

1. Introduction

Church's Chicken ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile applications, visit our restaurants, or interact with our services.

This policy applies to all information collected through our digital platforms, in-store interactions, delivery services, catering orders, and any related services. By using our services, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide to Us

• Personal Identification Information: Name, email address, phone number, mailing address, date of birth
• Account Information: Username, password, order history, favorite items, dietary preferences
• Payment Information: Credit/debit card details, billing address (encrypted and securely stored)
• Order Details: Food preferences, special dietary requirements (vegan, halal, kosher, gluten-free), allergen information
• Delivery Information: Delivery addresses, location data, delivery instructions
• Loyalty Program Data: Rewards points, membership level, transaction history
• Reservation Information: Table bookings, party size, special occasion details
• Catering Details: Event information, guest count, menu selections, delivery requirements
• Communication Data: Contact form submissions, customer service interactions, reviews and feedback
• Marketing Preferences: Email subscription choices, promotional preferences, communication frequency

2.2 Information Automatically Collected

• Device Information: IP address, browser type and version, operating system, device identifiers
• Usage Data: Pages viewed, time spent on site, click patterns, search queries, session recordings
• Location Information: Approximate location from IP address, GPS data (with permission), store proximity
• Cookie Data: Session IDs, user preferences, shopping cart contents, analytics data
• Performance Data: Website loading times, error reports, feature usage statistics

2.3 Information from Third Parties

• Social Media Platforms: Profile information when you connect social accounts
• Payment Processors: Transaction verification, fraud detection data
• Delivery Partners: Order status updates, delivery confirmation, driver ratings
• Marketing Partners: Advertising effectiveness data, demographic insights
• Data Brokers: Publicly available information for fraud prevention

3. How We Use Your Information

3.1 Service Provision

• Order Processing: Processing food orders, coordinating preparation and delivery
• Account Management: Creating and maintaining your account, authentication, password resets
• Customer Support: Responding to inquiries, resolving issues, providing assistance
• Quality Improvement: Analyzing usage patterns to enhance user experience and service quality
• Personalization: Customizing menu recommendations based on dietary preferences and order history

3.2 Communication

• Order Confirmations: Sending order receipts, preparation status, delivery notifications
• Customer Service: Responding to questions, handling complaints, providing order updates
• Important Notices: Policy changes, security alerts, service interruptions
• Marketing Communications: Promotional offers, new menu items, special events (with your consent)

3.3 Marketing and Analytics

• Personalized Advertising: Showing relevant ads based on your preferences and behavior
• Website Analytics: Understanding traffic patterns, popular menu items, user engagement
• Campaign Measurement: Evaluating the effectiveness of marketing campaigns
• Market Research: Developing new products and services based on customer insights

3.4 Legal Compliance and Security

• Legal Requirements: Complying with applicable laws and regulations
• Fraud Prevention: Detecting and preventing fraudulent activities
• Security Protection: Protecting our systems, customers, and business from threats
• Dispute Resolution: Resolving conflicts and legal claims

4. Information Sharing and Disclosure

4.1 Service Providers

• Payment Processors: Secure processing of credit card and digital payment transactions
• Delivery Companies: Third-party delivery services for order fulfillment
• Cloud Storage Providers: Secure data storage and backup services
• Email Service Providers: Managing email campaigns and customer communications
• Analytics Tools: Google Analytics and similar services for website usage analysis
• Customer Support Tools: Helpdesk software for managing customer inquiries

4.2 Legal Requirements

• Court Orders: Complying with subpoenas and court-mandated disclosures
• Law Enforcement: Cooperating with police investigations and regulatory inquiries
• Legal Compliance: Meeting tax, audit, and regulatory reporting requirements
• Emergency Situations: Protecting public safety and preventing harm

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal information may be transferred to the new entity. We will notify you before your information is transferred and becomes subject to a different privacy policy.

4.4 With Your Consent

We may share your information for other purposes with your explicit consent, such as participating in surveys or promotional campaigns.

5. Data Security

5.1 Technical Measures

• Encryption: SSL/TLS encryption for all data transmission between your device and our servers
• Firewall Protection: Advanced firewall systems to prevent unauthorized access
• Access Controls: Strict access controls ensuring only authorized personnel can access personal data
• Monitoring: 24/7 security monitoring and threat detection systems
• Data Backups: Regular encrypted backups stored in secure, geographically distributed locations
• Vulnerability Testing: Regular penetration testing and security assessments

5.2 Organizational Measures

• Employee Training: Regular security awareness training for all staff members
• Data Handling Procedures: Established protocols for processing and protecting personal information
• Third-Party Agreements: Confidentiality agreements with all service providers
• Incident Response Plan: Comprehensive plan for responding to security incidents
• Security Audits: Regular internal and external security audits

5.3 Your Security Responsibilities

• Strong Passwords: Use complex, unique passwords for your account
• Password Confidentiality: Never share your login credentials with others
• Public Computer Safety: Always log out when using shared or public computers
• Phishing Awareness: Be cautious of suspicious emails or links claiming to be from us
• Report Incidents: Contact us immediately if you suspect unauthorized access to your account

6. Cookies and Tracking Technologies

Cookie Type	Purpose	Duration
Essential Cookies	Basic site functionality, user authentication, shopping cart	Session
Functional Cookies	User preferences, language settings, location data	Up to 1 year
Analytics Cookies	Website usage analysis, performance monitoring	Up to 2 years
Marketing Cookies	Personalized advertising, campaign tracking	Up to 1 year

Tracking Technologies Used

• Google Analytics: Website traffic analysis and user behavior insights
• Facebook Pixel: Advertisement effectiveness measurement and audience building
• Web Beacons: Email open rates and engagement tracking
• Local Storage: Browser-based storage for enhanced user experience
• Session Storage: Temporary storage for current browsing session

Cookie Management

You can control cookies through your browser settings. Most browsers allow you to accept, reject, or delete cookies. However, disabling certain cookies may affect website functionality. You can also use our cookie preference center to customize your cookie settings.

7. Your Privacy Rights

How to Exercise Your Rights

To exercise any of these rights, contact us using the information provided in the Contact section. We will respond to your request within 30 days. Some requests may require identity verification for your protection.

8. Children's Privacy

Our services are not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

If we discover that we have collected personal information from a child under 16 without parental consent, we will promptly delete such information from our records.

9. International Data Transfers

9.1 Protection Measures

When transferring your personal data internationally, we implement appropriate safeguards:

• Adequacy Decisions: Transfers to countries recognized by the EU as providing adequate protection
• Standard Contractual Clauses (SCCs): EU-approved contract terms for international transfers
• Data Processing Agreements: Contractual obligations for all data processors
• Security Measures: Technical and organizational measures to protect transferred data
• Regular Audits: Ongoing compliance monitoring and assessment

9.2 Transfer Destinations

• United States: Cloud storage and data processing services
• European Union: Data analytics and customer support
• Other Countries: As needed for service provision with appropriate protections

10. Data Retention Periods

Information Type	Retention Period	Reason for Retention
Account Information	6 months after account deletion	Legal obligations, dispute resolution
Order and Purchase History	7 years	Tax requirements, warranty claims
Marketing Consent Records	3 months after withdrawal	Consent documentation, compliance
Website Usage Logs	Up to 2 years	Security analysis, fraud prevention
Customer Support Records	3 years	Service quality improvement, training
Loyalty Program Data	Until program termination + 1 year	Points tracking, member benefits
Payment Information	As required by payment processors	Chargebacks, refunds, fraud prevention

Safe Data Disposal

When data reaches the end of its retention period, we ensure secure disposal through:

• Electronic Deletion: Complete and unrecoverable deletion from all systems
• Physical Destruction: Secure shredding of any physical records
• Backup Removal: Deletion from all backup systems and archives
• Documentation: Maintaining records of disposal activities for compliance

11. Third-Party Links and Services

Our website and applications may contain links to third-party websites, social media platforms, and other services. We are not responsible for the privacy practices or content of these external sites.

We recommend reviewing the privacy policies of any third-party services before providing your personal information. Your interactions with third-party sites are governed by their respective privacy policies, not this one.

12. Privacy Policy Changes

12.1 Change Notification Process

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. When we make changes, we will notify you through:

• Website Notice: Prominent notification on our homepage
• Email Notification: Direct email to registered users for significant changes
• In-App Notification: Push notification through our mobile application
• Account Dashboard: Notice in your account dashboard upon login

12.2 Checking for Updates

The latest version of this Privacy Policy is always available on our website. We recommend checking the "Last Updated" date at the top of this page periodically. Continued use of our services after changes constitutes acceptance of the updated policy.

13. Contact Information

14. Withdrawal of Consent

14.1 Marketing Communications

You can withdraw consent for marketing communications at any time through:

• Unsubscribe Link: Click the unsubscribe link in any promotional email
• Account Settings: Update your communication preferences in your account dashboard
• Customer Support: Contact our support team to opt out
• Phone: Call us at +1 971-489-2202

14.2 Account Deletion

To delete your account and associated data:

1. Log into your account dashboard
2. Navigate to "Account Settings"
3. Select "Delete Account"
4. Follow the confirmation process
5. You will receive email confirmation of deletion

Note: Some information may be retained for legal compliance, such as transaction records for tax purposes. We will inform you of any retained data during the deletion process.

15. Conclusion

At Church's Chicken, we are committed to protecting your privacy and maintaining your trust. This Privacy Policy reflects our dedication to transparency and your right to control your personal information.

We understand that privacy is fundamental to the digital experience, and we continuously work to improve our practices and stay current with evolving privacy standards and regulations.

Thank you for choosing Church's Chicken. If you have any questions or concerns about our privacy practices, please don't hesitate to reach out to us. We value your feedback and are here to help.