Privacy Policy

1. Introduction

At Slim Chickens, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, share, and protect your information when you use our website, mobile applications, order food services, visit our restaurants, or interact with us in any way.

This policy applies to all our food services, including online ordering, in-restaurant dining, delivery services, catering, and loyalty programs. By using our services, you agree to the collection and use of information in accordance with this policy.

Important Note: We never sell your personal data to third parties. Your information is used solely to provide and improve our food services and enhance your dining experience.

2. Information We Collect

2.1 Information You Provide to Us

• Personal Identification Information: Name, email address, phone number, postal address, date of birth
• Account Information: Username, password, order history, favorite orders, dietary preferences
• Payment Information: Credit/debit card details, billing address (securely encrypted and stored)
• Food Service Specific Information:
  • Delivery addresses and location data for accurate delivery
  • Allergen information and dietary restrictions (vegan, vegetarian, gluten-free, halal, kosher)
  • Special dietary requirements and food preferences
  • Table reservation details and party size
  • Catering event information and requirements
  • Loyalty program participation and rewards data
• Communication Data: Contact form submissions, customer reviews, feedback, support inquiries
• Marketing Preferences: Email subscription preferences, promotional interests

2.2 Information We Collect Automatically

• Device Information: IP address, browser type and version, operating system, device identifiers
• Usage Data: Pages visited, time spent on site, clicks, search terms, referral sources
• Location Information: Approximate location based on IP address, precise location (with permission) for delivery services
• Cookie Data: Session IDs, user preferences, analytics data, advertising identifiers
• Order Data: Order frequency, average order value, preferred menu items, ordering patterns

2.3 Information from Third Parties

• Social Media Integration: Profile information when you connect social media accounts
• Payment Processors: Transaction verification and fraud prevention data
• Delivery Partners: Delivery status, driver location, delivery completion confirmation
• Marketing Partners: Demographic data and advertising effectiveness metrics
• Review Platforms: Public reviews and ratings about our services

3. How We Use Your Information

3.1 Service Provision

• Order Processing: Process and fulfill food orders, manage delivery logistics
• Account Management: Create and maintain user accounts, authenticate users
• Customer Support: Respond to inquiries, resolve issues, provide assistance
• Food Safety: Track allergen information, accommodate dietary restrictions
• Quality Improvement: Analyze feedback to improve menu offerings and service quality

3.2 Communication

• Order Updates: Confirmation emails, preparation status, delivery notifications
• Customer Support: Response to inquiries and support requests
• Service Notifications: Important updates about our services, menu changes
• Marketing Communications: Promotional emails, special offers (only with your consent)
• Loyalty Program: Rewards notifications, points balance updates

3.3 Marketing and Analytics

• Personalization: Recommend menu items based on your preferences and order history
• Targeted Advertising: Display relevant ads on our website and third-party platforms
• Website Analytics: Understand user behavior and improve website functionality
• Market Research: Develop new menu items and improve existing offerings
• Campaign Effectiveness: Measure success of marketing campaigns and promotions

3.4 Legal and Security

• Legal Compliance: Comply with applicable laws, regulations, and industry standards
• Fraud Prevention: Detect and prevent fraudulent transactions and activities
• Dispute Resolution: Resolve conflicts and legal disputes
• Safety Protection: Protect the rights, property, and safety of our customers and employees

4. Information Sharing and Disclosure

4.1 Service Providers

We share information with trusted third-party service providers who help us operate our business:

• Payment Processors: Secure handling of financial transactions (Stripe, PayPal, Square)
• Delivery Services: Order fulfillment and delivery logistics (DoorDash, Uber Eats, Grubhub)
• Cloud Storage: Secure data storage and backup services (AWS, Google Cloud)
• Email Services: Marketing and transactional email delivery (Mailchimp, SendGrid)
• Analytics Tools: Website and app performance analysis (Google Analytics, Mixpanel)
• Customer Support: Help desk and support ticket management systems

4.2 Legal Requirements

We may disclose your information when required by law:

• In response to court orders, subpoenas, or legal proceedings
• To comply with applicable laws and regulations
• To protect our rights, property, or safety, or that of our customers
• In emergency situations involving public safety
• To prevent or investigate fraud, security breaches, or illegal activities

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets:

• Customer data may be transferred to the new owner
• We will notify customers before any transfer occurs
• The new owner must comply with this privacy policy
• You will have the option to delete your account if you disagree

4.4 With Your Consent

We may share your information for other purposes with your explicit consent, such as:

• Sharing reviews or testimonials (with your permission)
• Participating in third-party loyalty programs
• Integration with social media platforms

5. Data Security

5.1 Technical Security Measures

• Encryption: All data transmission uses SSL/TLS encryption (minimum 256-bit)
• Firewall Protection: Advanced firewall systems protect our servers
• Access Controls: Multi-factor authentication and role-based access restrictions
• Monitoring: 24/7 security monitoring and intrusion detection systems
• Data Backup: Regular automated backups stored in secure, geographically distributed locations
• Vulnerability Testing: Regular security audits and penetration testing

5.2 Organizational Security Measures

• Employee Training: Regular security awareness training for all staff
• Data Handling Procedures: Strict protocols for accessing and processing personal data
• Confidentiality Agreements: All employees and contractors sign confidentiality agreements
• Incident Response: Comprehensive security incident response and recovery plan
• Compliance Audits: Regular internal and external security compliance audits

5.3 Your Security Responsibilities

• Use strong, unique passwords for your account
• Never share your login credentials with others
• Log out of your account when using public or shared computers
• Be cautious of phishing emails or suspicious links
• Report any unauthorized account access immediately
• Keep your contact information updated for security notifications

Security Breach Notification: In the unlikely event of a data breach that affects your personal information, we will notify you and relevant authorities within 72 hours of discovery, as required by applicable data protection laws.

6. Cookies and Tracking Technologies

We use various tracking technologies to enhance your experience and analyze website usage:

Cookie Type	Purpose	Duration
Essential Cookies	Basic site functionality, login state, shopping cart	Session/Until logout
Functional Cookies	User preferences, language settings, location preferences	Up to 1 year
Analytics Cookies	Website usage analysis, performance improvement	Up to 2 years
Marketing Cookies	Personalized advertising, campaign measurement	Up to 1 year
Social Media Cookies	Social sharing features, login integration	Up to 1 year

Additional Tracking Technologies:

• Google Analytics: Website traffic analysis and user behavior insights
• Facebook Pixel: Advertising campaign effectiveness and custom audience creation
• Web Beacons: Email open rates and click-through measurement
• Local Storage: Temporary data storage for improved site performance
• Session Storage: Temporary session data for seamless user experience

Cookie Management:

You can control cookies through your browser settings. You can choose to accept, reject, or delete cookies. However, disabling certain cookies may affect website functionality, including the ability to place orders or access your account.

7. Your Privacy Rights

Under various privacy laws including GDPR and CCPA, you have the following rights regarding your personal information:

7.1 Right of Access

You have the right to know what personal information we have about you and request a copy of your data.

7.2 Right to Rectification

You can request correction of inaccurate or incomplete personal information.

7.3 Right to Erasure (Right to be Forgotten)

You can request deletion of your personal information, subject to legal retention requirements.

7.4 Right to Restrict Processing

You can request that we limit how we use your personal information in certain circumstances.

7.5 Right to Data Portability

You can request your personal data in a structured, machine-readable format for transfer to another service.

7.6 Right to Object

You can object to processing of your personal information, particularly for marketing purposes.

7.7 Right Against Automated Decision-Making

You have the right not to be subject to automated decision-making, including profiling, that produces significant legal effects.

How to Exercise Your Rights:

8. Children's Privacy

Our services are not intended for children under the age of 16. We do not knowingly collect personal information from children under 16 without verifiable parental consent.

If you are a parent or guardian and believe your child has provided personal information to us, please contact us immediately. We will take steps to remove such information from our systems promptly.

If we become aware that we have collected personal information from children under 16 without parental consent, we will take immediate action to delete such information.

9. International Data Transfers

9.1 Data Protection Measures

We may transfer your personal information to countries outside your residence. We ensure appropriate safeguards are in place:

• Adequacy Decisions: EU-Japan adequacy decisions and other recognized frameworks
• Standard Contractual Clauses: EU-approved data transfer agreements
• Data Processing Agreements: Contractual protections with all service providers
• Security Measures: Technical and organizational measures to protect transferred data
• Regular Audits: Ongoing compliance monitoring and assessment

9.2 Transfer Destinations

Your information may be transferred to and processed in:

• United States: Cloud storage and analytics services
• European Union: Data analytics and customer support services
• Other Countries: As necessary for service provision, always with appropriate protections

10. Data Retention Periods

Information Type	Retention Period	Reason for Retention
Account Information	6 months after account deletion	Legal obligations, dispute resolution
Order History & Payment Records	7 years	Tax and accounting requirements, fraud prevention
Marketing Consent	3 months after withdrawal	Consent record keeping, compliance
Website Usage Logs	Up to 2 years	Security monitoring, analytics
Customer Support Records	3 years	Service quality improvement, legal protection
Loyalty Program Data	2 years after program exit	Program administration, rewards fulfillment
Dietary Restriction Info	Until account deletion	Food safety, service personalization

Safe Data Disposal

When data retention periods expire, we ensure secure deletion:

• Electronic Data: Complete overwriting making data unrecoverable
• Physical Records: Cross-cut shredding and secure disposal
• Backup Systems: Automated deletion from all backup locations
• Disposal Records: Maintaining logs of data destruction for compliance

11. Third-Party Links and Services

Our website and mobile applications may contain links to external websites, social media platforms, and third-party services. Please note:

• We are not responsible for the privacy practices of third-party websites
• These external sites have their own privacy policies and terms of service
• We recommend reviewing third-party privacy policies before providing personal information
• Your interactions with third-party sites are governed by their policies, not ours
• We do not control or monitor third-party data collection practices

Common third-party integrations include: Social media platforms (Facebook, Instagram, Twitter), payment processors, delivery service apps, review platforms (Yelp, Google Reviews), and mapping services.

12. Privacy Policy Changes

12.1 Change Notification Process

We may update this Privacy Policy periodically. When we make changes, we will:

• Website Notice: Display a prominent notice on our homepage
• Email Notification: Send notification emails to registered users
• App Notification: Push notifications through our mobile app
• Account Dashboard: Display notice in user account area
• Social Media: Announce major changes on our social media channels

12.2 Significant Changes

For material changes that affect how we use your information, we will:

• Provide at least 30 days advance notice
• Obtain explicit consent where required by law
• Allow you to opt-out or delete your account before changes take effect
• Clearly explain what has changed and why

12.2 Staying Informed

• The latest version is always available on our website
• Check the "Last Updated" date at the top of this policy
• Continued use of our services constitutes acceptance of changes
• You can stop using our services if you disagree with changes

13. Contact Information

13.1 Privacy Complaints

If you have concerns about our privacy practices:

1. Contact us first using the information above for resolution
2. If unsatisfied with our response, you may contact your local data protection authority
3. EU residents can contact their national supervisory authority
4. US residents can file complaints with the FTC or state attorney general

14. Withdrawal of Consent

14.1 Marketing Communications

You can withdraw consent for marketing communications at any time:

• Email Unsubscribe: Click the unsubscribe link in any marketing email
• Account Settings: Update preferences in your account dashboard
• Customer Support: Contact our support team for assistance
• Phone: Call us to opt-out of phone marketing

14.2 Account Deletion

To delete your account and associated data:

1. Log into your account and go to Account Settings
2. Select "Delete Account" option
3. Confirm deletion via email verification
4. Note: Some data may be retained for legal compliance (see Section 10)

15. Conclusion

At Slim Chickens, protecting your privacy is fundamental to our business values and customer relationships. We are committed to maintaining the highest standards of data protection while providing exceptional food services and customer experiences.

We believe that transparency builds trust, and we encourage you to reach out with any questions about our privacy practices. Your continued trust in our brand is essential to our success, and we work diligently to earn and maintain that trust every day.

Thank you for choosing Slim Chickens for your dining needs. We appreciate your business and your confidence in our commitment to protecting your privacy.

Please remember to check this Privacy Policy periodically for updates. The "Last Updated" date at the top of this page indicates when the most recent changes were made.