Privacy Policy

1. Introduction

Welcome to Church's Chicken. We are committed to protecting your privacy and maintaining the security of your personal information. This Privacy Policy describes how we collect, use, share, and protect your information when you visit our restaurants, use our website at churchs-chicken.rest, mobile applications, or interact with our services.

This policy applies to all information collected through our digital platforms, in-store experiences, delivery services, and customer communications. By using our services, ordering food, or providing us with your personal information, you agree to the terms outlined in this Privacy Policy.

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us using the information provided in Section 13.

2. Information We Collect

2.1 Information You Provide Directly

We collect information that you voluntarily provide to us when you:

• Create an account: Name, email address, phone number, date of birth, and password
• Place orders: Delivery address, payment information, food preferences, and special dietary requirements
• Join our loyalty program: Personal preferences, favorite menu items, and reward program participation
• Make reservations: Party size, special occasions, table preferences, and contact information
• Contact customer service: Support inquiries, feedback, complaints, and communication preferences
• Provide allergen information: Food allergies, dietary restrictions, and special preparation requests
• Schedule catering: Event details, guest count, dietary preferences, and delivery information
• Submit reviews: Comments, ratings, photos, and feedback about our food and services
• Subscribe to marketing: Email preferences, promotional interests, and communication settings

2.2 Automatically Collected Information

When you visit our website or use our mobile application, we automatically collect certain information:

• Device Information: IP address, browser type, operating system, device identifiers, and screen resolution
• Usage Data: Pages visited, time spent on our site, click patterns, and search queries
• Location Data: Approximate location based on IP address for delivery services and restaurant locator
• Order History: Previous purchases, frequency of orders, and spending patterns
• Cookie Data: Session identifiers, user preferences, shopping cart contents, and analytics data
• Technical Data: Log files, error reports, and performance metrics

2.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Social Media Platforms: When you connect your social media accounts or use social login features
• Payment Processors: Transaction confirmations and fraud prevention information
• Delivery Partners: Delivery status updates and customer service interactions
• Marketing Partners: Advertising campaign performance and customer insights
• Data Analytics Providers: Demographics and market research information

3. How We Use Your Information

3.1 Service Provision

• Order Processing: Fulfilling food orders, coordinating delivery, and managing payment processing
• Account Management: Creating and maintaining user accounts, authentication, and profile management
• Customer Support: Responding to inquiries, resolving issues, and providing assistance
• Quality Improvement: Analyzing service performance, food quality feedback, and operational optimization
• Loyalty Programs: Managing rewards points, special offers, and personalized benefits
• Reservation Management: Handling table bookings, special requests, and event coordination

3.2 Communication

• Order Updates: Confirmation emails, preparation status, and delivery notifications
• Customer Service: Support responses, follow-up communications, and issue resolution
• Important Notices: Policy changes, security alerts, and service announcements
• Marketing Communications: Promotional emails, special offers, and new product announcements (with consent)
• Surveys and Feedback: Satisfaction surveys, product feedback requests, and market research

3.3 Marketing and Analytics

• Personalized Advertising: Customized promotions based on order history and preferences
• Website Analytics: Understanding user behavior, popular menu items, and site performance
• Campaign Effectiveness: Measuring marketing performance and return on investment
• Market Research: Developing new products, improving existing offerings, and understanding customer needs
• Competitive Analysis: Benchmarking our services and identifying improvement opportunities

3.4 Legal Compliance and Security

• Legal Requirements: Responding to court orders, subpoenas, and regulatory requests
• Fraud Prevention: Detecting and preventing fraudulent activities and unauthorized access
• Safety Protection: Protecting the rights, property, and safety of our customers and employees
• Dispute Resolution: Handling legal claims, arbitration proceedings, and customer disputes

4. Information Sharing and Disclosure

4.1 Service Providers

We share information with trusted third-party service providers who assist us in operating our business:

• Payment Processors: Secure transaction processing, fraud detection, and payment verification
• Delivery Companies: Order fulfillment, GPS tracking, and delivery coordination
• Cloud Storage Providers: Secure data storage, backup services, and system maintenance
• Email Marketing Services: Newsletter distribution, promotional campaigns, and communication management
• Analytics Providers: Website performance analysis, user behavior insights, and reporting
• Customer Support Tools: Help desk services, chat support, and ticket management

4.2 Legal Requirements

We may disclose your information when required by law or to protect our rights:

• Court Orders: Compliance with judicial orders, subpoenas, and legal proceedings
• Government Requests: Responding to lawful requests from regulatory authorities
• Law Enforcement: Cooperation with criminal investigations and public safety matters
• Legal Claims: Defense against lawsuits, claims, and legal disputes

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, customer information may be transferred to the new entity. We will:

• Notify customers in advance of any ownership change
• Ensure the new owner follows similar privacy practices
• Provide options for customers who prefer not to have their data transferred

4.4 With Your Consent

We may share your information for other purposes with your explicit consent, such as:

• Participation in partner promotions or contests
• Integration with third-party applications
• Sharing testimonials or reviews (with permission)

5. Data Security

5.1 Technical Measures

We implement industry-standard security measures to protect your personal information:

• Encryption: All data transmissions are protected using SSL/TLS encryption protocols
• Firewall Protection: Advanced firewall systems to prevent unauthorized network access
• Access Controls: Strict access limitations ensuring only authorized personnel can view personal data
• 24/7 Monitoring: Continuous security monitoring and intrusion detection systems
• Regular Backups: Automated data backups to prevent information loss
• Secure Servers: Data stored on secure, professionally managed servers

5.2 Organizational Measures

• Employee Training: Regular security awareness training for all staff members
• Data Handling Procedures: Established protocols for collecting, processing, and storing personal information
• Confidentiality Agreements: All employees and contractors sign confidentiality agreements
• Incident Response Plan: Comprehensive procedures for handling security breaches
• Regular Audits: Periodic security assessments and vulnerability testing

5.3 Your Security Responsibilities

Help us protect your account by following these security best practices:

• Use strong, unique passwords for your account
• Never share your login credentials with others
• Log out of your account when using public computers
• Be cautious of phishing emails and suspicious links
• Report any suspicious account activity immediately
• Keep your contact information updated

6. Cookies and Tracking Technologies

We use various tracking technologies to enhance your experience on our website and mobile applications. Below is a detailed breakdown of the types of cookies and their purposes:

Tracking Technologies Used

• Google Analytics: Website traffic analysis, user journey mapping, and conversion tracking
• Facebook Pixel: Social media advertising effectiveness and retargeting campaigns
• Web Beacons: Email open rates, link clicks, and engagement measurement
• Local Storage: Storing user preferences and application data in your browser
• Session Storage: Temporary data storage for single browsing sessions

Cookie Management

You can control cookie settings through your browser preferences. Most browsers allow you to:

• View and delete existing cookies
• Block cookies from specific websites
• Block all cookies (may affect website functionality)
• Receive notifications when cookies are being set

Note: Disabling certain cookies may impact website functionality, including the ability to place orders, save preferences, and access account features.

7. Your Rights (GDPR/CCPA Compliance)

Under applicable data protection laws, including GDPR and CCPA, you have the following rights regarding your personal information:

7.1 Right of Access

You have the right to request information about the personal data we hold about you, including:

• What personal data we collect
• How we use your personal data
• Who we share your data with
• How long we retain your data

7.2 Right to Rectification

You can request that we correct any inaccurate or incomplete personal data. This includes updating your contact information, delivery addresses, and account preferences.

7.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal data under certain circumstances, such as:

• The data is no longer necessary for the original purpose
• You withdraw consent for data processing
• Your data has been unlawfully processed

7.4 Right to Restrict Processing

You can request that we limit how we use your personal data while we address your concerns about accuracy or lawfulness of processing.

7.5 Right to Data Portability

You have the right to receive your personal data in a machine-readable format and transfer it to another service provider.

7.6 Right to Object

You can object to the processing of your personal data, particularly for direct marketing purposes or legitimate business interests.

7.7 Right Against Automated Decision-Making

You have the right not to be subject to automated decision-making, including profiling, that produces legal effects or significantly affects you.

8. Children's Privacy

Church's Chicken is committed to protecting the privacy of children. Our services are not intended for individuals under the age of 16, and we do not knowingly collect personal information from children under 16 years of age.

If we become aware that we have collected personal information from a child under 16 without parental consent, we will take steps to remove that information from our systems as quickly as possible.

Parents and Guardians: If you believe that your child has provided personal information to us, please contact us immediately using the contact information provided in Section 13. We will investigate the matter and take appropriate action to protect your child's privacy.

For children between 13-16 years of age, we recommend parental supervision when using our online services and encourage parents to discuss online safety with their children.

9. International Data Transfers

9.1 Protection Measures

When we transfer personal data internationally, we implement appropriate safeguards to protect your information:

• Adequacy Decisions: Transfers to countries with adequate data protection levels as recognized by relevant authorities
• Standard Contractual Clauses: EU-approved contract terms for international data transfers
• Data Processing Agreements: Comprehensive agreements with international partners
• Security Measures: Enhanced protection during transit and storage
• Regular Audits: Ongoing compliance monitoring and verification

9.2 Transfer Destinations

Your personal data may be transferred to and processed in:

• United States: Cloud storage services and data analytics providers
• European Union: Customer support services and marketing platforms
• Other Countries: As needed for business operations with appropriate safeguards

All international transfers comply with applicable data protection laws and include contractual protections for your personal information.

10. Data Retention Periods

We retain your personal information only as long as necessary to fulfill the purposes for which it was collected or as required by law. Below are our standard retention periods:

Safe Data Disposal

When data reaches the end of its retention period, we ensure secure disposal through:

• Complete Electronic Deletion: Permanent removal of digital files using secure deletion methods
• Physical Record Destruction: Secure shredding of paper documents
• Backup System Purging: Removal from all backup systems and archives
• Third-Party Certification: Verified destruction by certified disposal services
• Disposal Records: Maintaining records of data destruction for compliance purposes

11. Third-Party Links

Our website and mobile applications may contain links to external websites, social media platforms, and third-party services that are not operated by Church's Chicken. This Privacy Policy does not apply to these external sites.

Important Considerations:

• We are not responsible for the privacy practices of third-party websites
• External sites may have different data collection and privacy policies
• We encourage you to review the privacy policies of any websites you visit
• Links to third-party sites do not constitute an endorsement of their privacy practices

Your Responsibility: When you click on links to external websites or interact with third-party services, you do so at your own discretion. Please review their terms of service and privacy policies before providing any personal information.

Social Media Integration: Our social media integration features may allow these platforms to collect information about your visit to our website. Please review the privacy policies of Facebook, Instagram, Twitter, and other social media platforms for more information about their data practices.

12. Policy Changes

12.1 Change Notification

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. When we make changes, we will notify you through:

• Website Notice: Prominent banner notification on our homepage
• Email Notification: Direct email to registered users for significant changes
• Account Notification: Pop-up notification when you log into your account
• Mobile App Alert: Push notification for app users

12.2 Significant Changes

For material changes to this policy, we will:

• Provide at least 30 days' advance notice
• Obtain your explicit consent where required by law
• Allow you to review the changes before they take effect
• Provide options to opt-out if you disagree with the changes

12.3 Checking for Updates

We recommend that you periodically review this Privacy Policy to stay informed about how we protect your information. You can:

• Check the "Last Updated" date at the top of this policy
• Subscribe to our privacy policy updates
• Contact us if you have questions about recent changes

Continued Use: Your continued use of our services after changes to this policy constitutes acceptance of the updated terms. If you disagree with any changes, please discontinue using our services and contact us to discuss your options.

13. Contact Information

Response Commitment: We are committed to responding to all privacy-related inquiries within 3 business days. For complex requests, we may require up to 30 days to provide a complete response.

13.1 Types of Inquiries We Handle

• Questions about this Privacy Policy
• Requests to access, modify, or delete personal data
• Complaints about data handling practices
• Reports of suspected data breaches
• Requests to opt-out of marketing communications
• General privacy concerns and questions

13.2 Filing Complaints

We encourage you to contact us first with any privacy concerns. However, if you are unsatisfied with our response, you have the right to file a complaint with your local data protection authority.

For EU Residents: You can contact your national data protection authority or file a complaint with the authority where you believe a violation occurred.

For US Residents: You can contact your state's attorney general office or relevant consumer protection agency.

14. Withdrawal of Consent

14.1 Marketing Consent Withdrawal

You can withdraw your consent for marketing communications at any time through:

• Unsubscribe Links: Click the unsubscribe link in any marketing email
• Account Settings: Update your communication preferences in your online account
• Customer Support: Contact our customer service team to opt-out
• Written Request: Send a written request to our mailing address
• Phone Request: Call our customer service line during business hours

14.2 Account Deletion Process

To permanently delete your account and associated data:

1. Log into your account on our website or mobile app
2. Navigate to Account Settings > Privacy Settings
3. Select "Delete Account" and follow the confirmation steps
4. You will receive an email confirmation of your deletion request
5. Account deletion will be completed within 30 days

Important Note: Some data may be retained for legal compliance purposes as outlined in Section 10, even after account deletion. We will inform you of any such retained data during the deletion process.

14.3 Partial Data Processing Withdrawal

You can also withdraw consent for specific types of data processing while maintaining your account:

• Marketing analytics and profiling
• Personalized advertising
• Third-party data sharing (where not essential for service)
• Location-based services
• Social media integration

15. Conclusion

At Church's Chicken, we are deeply committed to protecting your privacy and maintaining your trust. This comprehensive Privacy Policy reflects our dedication to transparency and responsible data handling practices.

Our Promise to You:

• We will never sell your personal data to third parties
• We will always be transparent about how we collect and use your information
• We will implement strong security measures to protect your data
• We will respect your rights and respond promptly to your requests
• We will continuously improve our privacy practices

Your trust is the foundation of our relationship, and we understand that protecting your personal information is essential to maintaining that trust. We are committed to staying current with privacy best practices and applicable laws to ensure your information is always protected.

We appreciate your business and the opportunity to serve you. If you have any questions, concerns, or feedback about our privacy practices, please don't hesitate to reach out to us using the contact information provided in this policy.

Last Updated: January 15, 2026

This Privacy Policy is effective as of the date listed above and supersedes all previous versions. Please check back periodically for updates.