Privacy Policy

1. Introduction

At Church's Chicken, we are deeply committed to protecting your privacy and personal information. This Privacy Policy outlines how we collect, use, store, and protect your data when you visit our website, order our delicious food, use our services, or interact with us in any way.

This policy applies to all information collected through our website (churchschicks.rest), mobile applications, in-store visits, phone orders, delivery services, and any other interaction with Church's Chicken. By using our services, you agree to the collection and use of information in accordance with this policy.

We never sell your personal data to third parties. Your trust is essential to our business, and we are committed to maintaining the highest standards of data protection and privacy.

2. Information We Collect

2.1 Information You Provide Directly

• Personal Identification: Name, email address, phone number, delivery address, billing address
• Account Information: Username, password (encrypted), order history, dining preferences
• Food Service Specific Data:
  • Order history and favorite menu items
  • Dietary preferences and restrictions
  • Allergen information you provide
  • Special dietary requirements (vegan, halal, kosher, gluten-free)
  • Loyalty program participation and rewards data
  • Table reservation information
  • Catering event details and requirements
  • Food preferences and customization requests
• Payment Information: Credit card details, billing information (stored securely with encryption)
• Communication: Contact form submissions, reviews, feedback, customer service interactions
• Marketing Preferences: Email newsletter subscriptions, promotional preferences

2.2 Automatically Collected Information

• Device Information: IP address, browser type and version, operating system, device type
• Usage Data: Pages visited, time spent on site, click patterns, referring websites
• Location Data: Approximate location from IP address, precise location (if you grant permission) for delivery services
• Cookie Data: Session identifiers, preferences, analytics data
• Order Data: Delivery times, order frequency, spending patterns

2.3 Information from Third Parties

• Social Media: Profile information if you connect social media accounts
• Payment Processors: Transaction verification and fraud prevention data
• Delivery Partners: Delivery status and location updates
• Marketing Partners: Campaign performance and demographic data (anonymized)

3. How We Use Your Information

3.1 Service Provision

• Processing and fulfilling food orders
• Managing deliveries and pickups
• Providing customer support and resolving issues
• Account management and authentication
• Processing payments and managing billing
• Improving service quality and menu offerings
• Managing table reservations and catering events
• Loyalty program management and rewards processing

3.2 Communication

• Order confirmations and delivery notifications
• Customer support responses and follow-ups
• Important service announcements and policy changes
• Marketing emails and promotional offers (only with your consent)
• Loyalty program updates and reward notifications

3.3 Marketing and Analytics

• Personalized menu recommendations
• Website traffic analysis and user behavior patterns
• Marketing campaign effectiveness measurement
• Market research for new menu items and services
• Customer satisfaction surveys and feedback analysis

3.4 Legal Compliance

• Responding to legal requests and court orders
• Fraud prevention and detection
• Protecting our rights, property, and safety
• Dispute resolution and legal proceedings
• Compliance with food safety regulations

4. Information Sharing and Disclosure

4.1 Service Providers

We may share your information with trusted third-party service providers who assist us in operating our business:

• Payment Processors: Secure payment processing and fraud prevention
• Delivery Companies: Order fulfillment and delivery services
• Cloud Storage Providers: Secure data storage and backup services
• Email Marketing Services: Newsletter and promotional email campaigns
• Analytics Tools: Website usage analysis and performance monitoring
• Customer Support Software: Help desk and ticket management

4.2 Legal Requirements

We may disclose your information when required by law or to protect our interests:

• Court orders, subpoenas, and legal proceedings
• Government regulations and compliance requirements
• Protection of rights, property, or safety of Church's Chicken or others
• Public safety and emergency situations
• Investigation of fraud or security incidents

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your personal information becomes subject to a different privacy policy.

4.4 With Your Consent

We may share your information for other purposes with your explicit consent.

5. Data Security

5.1 Technical Measures

• Encryption: All sensitive data is encrypted using SSL/TLS technology during transmission
• Firewall Protection: Advanced firewall systems protect against unauthorized access
• Access Controls: Strict access controls ensure only authorized personnel can access data
• Monitoring: 24/7 security monitoring and intrusion detection systems
• Backup Systems: Regular secure data backups to prevent data loss
• Vulnerability Testing: Regular security assessments and penetration testing

5.2 Organizational Measures

• Comprehensive employee security training programs
• Strict personal data handling procedures and protocols
• Confidentiality agreements with all third-party partners
• Incident response plan for security breaches
• Regular security audits and compliance assessments
• Data minimization practices - we only collect necessary information

5.3 Your Security Responsibilities

• Use strong, unique passwords for your account
• Never share your login credentials with others
• Log out of your account when using public computers
• Be cautious of phishing emails and suspicious links
• Report any unauthorized account access immediately

Security Breach Notification: In the unlikely event of a data breach that affects your personal information, we will promptly notify you and relevant authorities as required by law, typically within 72 hours of discovery.

6. Cookies and Tracking Technologies

We use various cookies and tracking technologies to enhance your experience on our website:

Cookie Type	Purpose	Duration
Essential Cookies	Basic site functions, login state, shopping cart	Session (deleted when you close browser)
Functional Cookies	User preferences, language settings, location	Up to 1 year
Analytics Cookies	Usage analysis, performance monitoring, improvement	Up to 2 years
Marketing Cookies	Personalized advertising, campaign measurement	Up to 1 year

Tracking Technologies Used:

• Google Analytics: Website traffic analysis and user behavior tracking
• Facebook Pixel: Social media advertising measurement and optimization
• Web Beacons: Email open rates and engagement tracking
• Local Storage: Browser-based data storage for preferences

Cookie Management: You can control cookies through your browser settings to accept, reject, or delete cookies. Please note that disabling certain cookies may affect website functionality and your user experience.

7. Your Rights (GDPR/CCPA Compliance)

Under applicable privacy laws, you have the following rights regarding your personal information:

7.1 Right of Access

You have the right to request and receive a copy of the personal data we hold about you.

7.2 Right to Rectification

You can request correction of any inaccurate or incomplete personal information.

7.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal data, subject to certain legal obligations.

7.4 Right to Restrict Processing

You can request that we limit how we process your personal information.

7.5 Right to Data Portability

You have the right to receive your personal data in a structured, machine-readable format.

7.6 Right to Object

You can object to processing of your personal data, especially for marketing purposes.

7.7 Right Against Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing.

How to Exercise Your Rights: Contact us using the information provided in Section 13. We will respond to your request within 30 days and may require verification of your identity.

8. Children's Privacy

Our services are not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

If we discover that a child under 16 has provided us with personal information, we will promptly delete such information from our records and systems.

9. International Data Transfers

9.1 Protection Measures

Your personal information may be transferred to and processed in countries outside your residence. We ensure adequate protection through:

• European Union adequacy decisions
• Standard Contractual Clauses (SCCs) approved by the European Commission
• Comprehensive data processing agreements with all partners
• Regular compliance audits and assessments
• Appropriate technical and organizational security measures

9.2 Transfer Destinations

• United States: Cloud storage and data processing services
• European Union: Analytics and customer support services
• Other Countries: As necessary for service provision, always with appropriate safeguards

10. Data Retention Periods

We retain your personal information only as long as necessary for the purposes outlined in this policy:

Information Type	Retention Period	Reason for Retention
Account Information	6 months after account deletion	Legal obligations, dispute resolution
Order History	7 years	Tax and accounting requirements
Payment Records	7 years	Financial record keeping, fraud prevention
Marketing Consent	3 months after withdrawal	Consent record keeping, compliance
Website Usage Logs	Up to 2 years	Security monitoring, analytics
Customer Support Records	3 years	Service quality improvement
Loyalty Program Data	2 years after program inactivity	Reward management, customer service

Safe Data Disposal

When data retention periods expire, we ensure secure disposal through:

• Complete electronic deletion rendering data unrecoverable
• Physical destruction of paper records through secure shredding
• Deletion of all backup copies and archived data
• Maintenance of disposal records for compliance verification

11. Third-Party Links

Our website may contain links to external websites operated by third parties. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party websites you visit.

When you click on third-party links or use third-party services, you are subject to their terms and privacy policies. Your interactions with third-party sites are at your own risk.

12. Policy Changes

12.1 Change Notification

We may update this Privacy Policy periodically. When we make changes, we will notify you through:

• Prominent notice on our website homepage
• Email notification to registered users
• Pop-up notification when you log into your account
• For significant changes, we will seek your explicit consent

12.2 Staying Informed

• The latest version of this policy is always available on our website
• Check the "Last Updated" date at the top of this policy
• Continued use of our services after changes indicates acceptance
• If you disagree with changes, you may discontinue using our services

13. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Response Commitment: We strive to respond to all privacy-related inquiries within 3 business days.

13.1 Privacy Complaints

If you have a privacy complaint, please contact us first so we can work to resolve your concerns. If you are not satisfied with our response, you may contact your local data protection authority:

• US Residents: Federal Trade Commission (FTC) - consumer.ftc.gov
• EU Residents: Your national data protection authority
• UK Residents: Information Commissioner's Office (ICO) - ico.org.uk

14. Withdrawal of Consent

14.1 Marketing Consent Withdrawal

You can withdraw your consent for marketing communications at any time through:

• Clicking the unsubscribe link in any marketing email
• Updating your preferences in your account settings
• Contacting our customer support team
• Replying "STOP" to SMS marketing messages

14.2 Account Deletion

To delete your account and associated data:

1. Log into your account and go to Settings
2. Select "Delete Account" option
3. Confirm deletion via email verification
4. Note: Some data may be retained for legal compliance

15. Conclusion

At Church's Chicken, protecting your privacy is not just a legal requirement—it's fundamental to our values and the trust you place in us. We are committed to transparency in our data practices and continuous improvement in how we protect your information.

Your trust enables us to serve you better, and we take this responsibility seriously. We encourage you to review this policy regularly and contact us with any questions or concerns about how we handle your personal information.

Thank you for choosing Church's Chicken. We appreciate your business and your trust in our commitment to privacy protection.

Please remember to check this page periodically for updates. The "Last Updated" date at the top indicates when this policy was last revised.