Privacy Policy

1. Introduction

At Wing Snob, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, and protect your data when you use our website, mobile applications, and food delivery services.

This policy applies to all users of our services, including customers who place orders, visitors to our website, and participants in our loyalty programs. By using our services, you agree to the collection and use of information in accordance with this policy.

Important Note: We never sell your personal data to third parties. Your trust is fundamental to our business, and we are committed to maintaining the highest standards of data protection.

2. Information We Collect

2.1 Information You Provide Directly

We collect information that you voluntarily provide to us when using our services:

• Personal Identification Information: Name, email address, phone number, billing and delivery addresses
• Account Information: Username, password, profile picture, account preferences
• Order Information: Food preferences, order history, special instructions, dietary restrictions
• Allergen Information: Food allergies and intolerances you disclose for safety purposes
• Special Dietary Requirements: Vegan, vegetarian, halal, kosher, gluten-free preferences
• Payment Information: Credit card details (encrypted and securely stored), billing information
• Loyalty Program Data: Rewards points, membership level, earned benefits
• Table Reservation Information: Party size, preferred seating, special occasions
• Catering Event Details: Event type, guest count, menu selections, delivery requirements
• Communication Records: Contact form submissions, customer service interactions, reviews and feedback
• Marketing Preferences: Communication preferences, subscription choices

2.2 Automatically Collected Information

We automatically collect certain information when you use our services:

• Device Information: IP address, browser type and version, operating system, device identifiers
• Usage Data: Pages visited, time spent on pages, click patterns, search queries
• Location Data: Approximate location derived from IP address, GPS coordinates (with permission) for delivery optimization
• Cookie Data: Session identifiers, user preferences, authentication tokens, analytics data
• App Usage: Feature usage, app crashes, performance metrics

2.3 Information from Third Parties

We may receive information about you from third-party sources:

• Social Media Platforms: If you connect your social media accounts, we may receive profile information
• Payment Processors: Transaction verification and fraud prevention data
• Delivery Partners: Delivery status updates and location tracking
• Marketing Partners: Aggregated demographic and interest data for advertising purposes
• Public Databases: Address verification and demographic information

3. How We Use Your Information

3.1 Service Provision

• Order Processing: Fulfilling your food orders, processing payments, coordinating delivery
• Account Management: Creating and maintaining your account, authentication, password resets
• Customer Support: Responding to inquiries, resolving issues, providing assistance
• Quality Improvement: Analyzing usage patterns to enhance our services and user experience
• Safety and Allergen Management: Ensuring proper handling of dietary restrictions and allergies

3.2 Communication

• Order Communications: Confirmations, preparation updates, delivery notifications
• Customer Support: Responding to your questions and concerns
• Service Notices: Important updates about our services, policy changes, security alerts
• Marketing Communications: Promotional offers, new menu items, special events (only with your consent)

3.3 Marketing and Analytics

• Personalization: Customizing your experience based on preferences and order history
• Targeted Advertising: Showing relevant ads on our platform and partner sites
• Analytics: Understanding user behavior, measuring campaign effectiveness
• Market Research: Developing new products and services based on customer insights

3.4 Legal Compliance and Protection

• Legal Obligations: Complying with applicable laws and regulations
• Fraud Prevention: Detecting and preventing fraudulent activities
• Safety and Security: Protecting our users, employees, and business operations
• Dispute Resolution: Resolving conflicts and enforcing our terms of service

4. Information Sharing and Disclosure

4.1 Service Providers

We share information with trusted third-party service providers who help us operate our business:

• Payment Processors: Secure handling of payment transactions (Stripe, PayPal)
• Delivery Services: Third-party delivery companies for order fulfillment
• Cloud Storage Providers: Secure data storage and backup services (AWS, Google Cloud)
• Email and SMS Services: Communication platforms for order updates and marketing
• Analytics Providers: Services that help us understand user behavior (Google Analytics)
• Customer Support Tools: Platforms that help us provide better customer service

4.2 Legal Requirements

We may disclose your information when required by law or to protect our rights:

• Legal Processes: Court orders, subpoenas, search warrants
• Regulatory Compliance: Health department requirements, food safety regulations
• Law Enforcement: Cooperation with investigations when legally required
• Emergency Situations: Protecting public safety or preventing harm

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets:

• Your information may be transferred to the new entity
• We will notify you before your information is transferred
• The new entity must comply with this Privacy Policy
• You will have the option to delete your account before the transfer

4.4 With Your Consent

We may share your information for other purposes with your explicit consent, such as:

• Participating in joint marketing campaigns
• Sharing reviews and testimonials (with your permission)
• Research studies or surveys you opt into

5. Data Security

5.1 Technical Security Measures

We implement robust technical safeguards to protect your information:

• Encryption: SSL/TLS encryption for all data transmission, AES-256 encryption for data storage
• Firewall Protection: Advanced firewall systems to prevent unauthorized access
• Access Controls: Multi-factor authentication and role-based access for employees
• Security Monitoring: 24/7 monitoring for suspicious activities and potential threats
• Regular Backups: Automated, encrypted backups to prevent data loss
• Vulnerability Testing: Regular security assessments and penetration testing

5.2 Organizational Security Measures

• Employee Training: Regular security awareness training for all staff
• Data Handling Procedures: Strict protocols for accessing and processing personal data
• Confidentiality Agreements: All employees and contractors sign confidentiality agreements
• Incident Response Plan: Procedures for quickly responding to security breaches
• Third-Party Audits: Regular security audits by independent firms

5.3 Your Security Responsibilities

You can help protect your information by:

• Strong Passwords: Using unique, complex passwords for your account
• Account Security: Not sharing your login credentials with others
• Public Devices: Always logging out when using public or shared computers
• Phishing Awareness: Being cautious of suspicious emails or messages
• Prompt Reporting: Immediately notifying us of any unauthorized account access

Security Breach Notification: In the unlikely event of a data breach that affects your personal information, we will notify you and relevant authorities within 72 hours of discovery, as required by law.

6. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience on our website and mobile app:

Cookie Type	Purpose	Duration
Essential Cookies	Basic site functionality, login state, shopping cart contents	Session (deleted when browser closes)
Functional Cookies	User preferences, language settings, location data	Up to 1 year
Analytics Cookies	Website usage analysis, performance improvement	Up to 2 years
Marketing Cookies	Personalized advertising, campaign measurement	Up to 1 year

Additional Tracking Technologies:

• Google Analytics: Website traffic analysis and user behavior insights
• Facebook Pixel: Advertising effectiveness measurement and retargeting
• Web Beacons: Email open rates and engagement tracking
• Local Storage: Browser-based data storage for improved performance

Cookie Management: You can control cookies through your browser settings. However, disabling certain cookies may limit website functionality and prevent you from accessing some features.

7. Your Privacy Rights

Under applicable privacy laws (GDPR, CCPA, and others), you have the following rights:

7.1 Right of Access

You have the right to know what personal data we hold about you and request a copy of your information.

7.2 Right to Rectification

You can request correction of inaccurate or incomplete personal information.

7.3 Right to Erasure (Right to be Forgotten)

You can request deletion of your personal data, subject to legal obligations and legitimate business needs.

7.4 Right to Restrict Processing

You can request that we limit how we use your personal information in certain circumstances.

7.5 Right to Data Portability

You can request to receive your personal data in a machine-readable format or have it transferred to another service provider.

7.6 Right to Object

You can object to processing of your personal data, particularly for marketing purposes.

7.7 Right Against Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing that significantly affects you.

How to Exercise Your Rights: Contact us using the information in Section 13. We will respond to your request within 30 days and may require identity verification for security purposes.

8. Children's Privacy

Our services are not intended for children under the age of 16. We do not knowingly collect personal information from children under 16 without parental consent.

If we become aware that we have collected personal information from a child under 16 without parental consent, we will take immediate steps to delete that information from our systems.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately so we can delete the information.

9. International Data Transfers

9.1 Protection Measures

When transferring personal data internationally, we implement appropriate safeguards:

• Adequacy Decisions: Transfers to countries with adequate data protection laws
• Standard Contractual Clauses: EU-approved contractual terms for data transfers
• Data Processing Agreements: Contracts ensuring proper data handling by recipients
• Security Measures: Technical and organizational safeguards during transfers
• Regular Audits: Ongoing compliance monitoring and assessment

9.2 Transfer Destinations

We may transfer your data to the following locations with appropriate protections:

• United States: Cloud storage and data processing services
• European Union: Analytics and marketing services
• Other Countries: As needed for service provision, always with appropriate safeguards

10. Data Retention Periods

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy:

Information Type	Retention Period	Reason for Retention
Account Information	6 months after account deletion	Legal obligations, dispute resolution
Order History	7 years	Tax and accounting requirements, food safety tracking
Payment Information	As required by payment processor	Fraud prevention, chargeback resolution
Marketing Consent	3 months after withdrawal	Consent record keeping, compliance documentation
Website Usage Logs	Up to 2 years	Security monitoring, analytics, troubleshooting
Customer Support Records	3 years	Service quality improvement, training purposes
Allergen Information	7 years	Food safety compliance, liability protection

Safe Data Disposal

When personal information reaches the end of its retention period, we ensure secure disposal:

• Electronic Data: Complete deletion using industry-standard methods that make recovery impossible
• Physical Records: Secure shredding and destruction
• Backup Systems: Systematic removal from all backup systems
• Documentation: Maintaining records of disposal activities for audit purposes

11. Third-Party Links

Our website and mobile app may contain links to third-party websites, social media platforms, and services. Please be aware that:

• We are not responsible for the privacy practices of third-party sites
• Third-party sites have their own privacy policies and terms of service
• You should review third-party privacy policies before providing personal information
• We encourage you to be cautious when sharing personal information on external platforms

12. Policy Changes

12.1 Change Notification

We may update this Privacy Policy from time to time. When we make changes, we will notify you through:

• Website Notice: Prominent banner notification on our website
• Email Notification: Direct email to registered users
• App Notification: Push notification or in-app alert
• Account Dashboard: Notice in your account settings

12.2 Staying Informed

To stay informed about policy changes:

• Check the "Last Updated" date at the top of this policy
• Review your notification preferences in your account settings
• Continued use of our services after changes indicates acceptance
• If you disagree with changes, you may stop using our services and delete your account

13. Contact Information

Response Commitment: We will respond to all privacy-related inquiries within 3 business days. For urgent matters, please call our customer service line.

13.1 Filing Complaints

If you have concerns about our privacy practices:

• Contact Us First: We encourage you to contact us directly so we can address your concerns
• Supervisory Authority: If you're not satisfied with our response, you may contact your local privacy regulator
• For EU Residents: You may lodge a complaint with your national data protection authority
• For California Residents: You may contact the California Attorney General's Office

14. Withdrawal of Consent

14.1 Marketing Communications

You can withdraw consent for marketing communications at any time:

• Email Unsubscribe: Click the unsubscribe link in any marketing email
• Account Settings: Update your communication preferences in your account dashboard
• Customer Support: Contact our support team to update your preferences
• SMS Stop: Reply "STOP" to any promotional text message

14.2 Account Deletion

To delete your account completely:

1. Log into your account and go to Settings
2. Select "Delete Account" option
3. Confirm your identity and deletion request
4. Note: Some information may be retained for legal compliance
5. You will receive confirmation of account deletion

15. Conclusion

At Wing Snob, protecting your privacy is not just a legal obligation – it's fundamental to our values and the trust you place in us. We are committed to maintaining the highest standards of data protection and continuously improving our privacy practices.

Your trust enables us to provide exceptional food and service while respecting your privacy rights. We believe that transparency, security, and respect for your personal information are essential to building lasting relationships with our customers.

If you have any questions about this Privacy Policy or how we handle your personal information, please don't hesitate to contact us. We value your feedback and are always here to help.

Thank you for choosing Wing Snob and for taking the time to understand how we protect your privacy.