Privacy Policy

1. Introduction

Welcome to Church's Chicken! We are committed to protecting your privacy and ensuring the security of your personal information. This comprehensive Privacy Policy explains how we collect, use, share, and protect information about you when you visit our website at churchschicks.top, use our mobile application, visit our restaurants, place orders, or interact with our services in any way.

This policy applies to all aspects of our business operations, including our restaurant locations, online ordering system, delivery services, catering operations, loyalty programs, and customer support services. By using our services, visiting our website, or providing us with your information, you agree to the collection and use of information in accordance with this policy.

Important Note: We never sell your personal data to third parties. Your information is used solely to provide and improve our services, communicate with you about your orders and our offerings, and ensure you have the best possible Church's Chicken experience.

2. Information We Collect

2.1 Information You Provide to Us

We collect information you voluntarily provide when you interact with our services:

• Personal Identification Information: Name, email address, phone number, mailing address, and date of birth
• Account Information: Username, password, order history, payment preferences, and account settings
• Order Information: Food preferences, dietary requirements, allergen information, special instructions, and favorite menu items
• Payment Information: Credit card details, billing address, and payment history (stored securely and encrypted)
• Delivery Information: Delivery addresses, special delivery instructions, and location preferences
• Communication Data: Contact form submissions, customer reviews, feedback, survey responses, and customer support interactions
• Marketing Preferences: Communication preferences, subscription choices, and promotional interests
• Catering Details: Event information, guest counts, special dietary requirements, and catering preferences
• Reservation Data: Table booking details, party size, special occasions, and dining preferences
• Loyalty Program Data: Rewards account information, points balance, redemption history, and program preferences

2.2 Information Automatically Collected

When you use our digital services, we automatically collect certain information:

• Device Information: IP address, browser type and version, operating system, device type, and mobile device identifiers
• Usage Data: Pages visited, time spent on pages, click patterns, scroll behavior, and navigation paths
• Location Information: Approximate location based on IP address, and precise location if you grant permission
• Cookie Data: Session identifiers, user preferences, analytics data, and marketing tags
• Technical Data: Log files, error reports, performance metrics, and security incident data

2.3 Information from Third Parties

We may receive information about you from various third-party sources:

• Social Media Platforms: Profile information when you connect your social media accounts
• Payment Processors: Transaction verification and fraud prevention data
• Delivery Partners: Delivery confirmation, location updates, and service quality feedback
• Marketing Partners: Demographic information and marketing effectiveness data
• Data Aggregators: Publicly available information and consumer insights (with appropriate consent)

3. How We Use Your Information

3.1 Service Provision and Enhancement

• Order Processing: Taking, preparing, and fulfilling your food orders accurately and efficiently
• Delivery Services: Coordinating delivery to your specified location and providing real-time updates
• Account Management: Creating and maintaining your user account, authentication, and security
• Customer Support: Responding to inquiries, resolving issues, and providing assistance
• Quality Improvement: Analyzing service usage to enhance our offerings and customer experience
• Personalization: Customizing your experience based on preferences and order history
• Dietary Accommodations: Ensuring we meet your specific dietary needs and allergen requirements

3.2 Communication

• Order Communications: Confirmations, preparation updates, delivery notifications, and receipt information
• Customer Support: Responding to questions, feedback, and service requests
• Important Notices: Service updates, policy changes, and security notifications
• Marketing Communications: Promotional offers, new menu items, and special events (only with your consent)
• Loyalty Program Updates: Points balance, rewards availability, and program benefits

3.3 Marketing and Analytics

• Personalized Advertising: Showing relevant promotions based on your preferences and order history
• Website Analytics: Understanding traffic patterns, popular content, and user behavior
• Campaign Effectiveness: Measuring the success of marketing initiatives and promotions
• Market Research: Developing new products and services based on customer insights
• Customer Segmentation: Creating targeted marketing campaigns for different customer groups

3.4 Legal Compliance and Security

• Legal Obligations: Complying with applicable laws, regulations, and legal processes
• Fraud Prevention: Detecting and preventing fraudulent transactions and activities
• Security Protection: Protecting our systems, customers, and business from security threats
• Dispute Resolution: Resolving conflicts and addressing legal claims
• Record Keeping: Maintaining records as required by law and business needs

4. Information Sharing and Disclosure

4.1 Service Providers

We share information with trusted third-party service providers who help us operate our business:

• Payment Processors: Secure handling of credit card transactions and payment verification
• Delivery Services: Coordinating food delivery and providing location updates
• Cloud Storage Providers: Secure data storage and backup services with industry-standard encryption
• Email Service Providers: Managing marketing campaigns and transactional communications
• Analytics Services: Website usage analysis and customer behavior insights
• Customer Support Tools: Managing customer inquiries and support ticket systems
• Security Services: Fraud detection, prevention systems, and security monitoring

4.2 Legal Requirements

We may disclose your information when legally required or necessary:

• Court Orders: Compliance with subpoenas, court orders, and legal proceedings
• Law Enforcement: Cooperating with police investigations and regulatory inquiries
• Legal Compliance: Meeting requirements under applicable laws and regulations
• Public Safety: Protecting against threats to public safety and security
• Rights Protection: Defending our rights, property, and the safety of our customers and employees

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets:

• Customer information may be transferred as part of the business transaction
• We will notify customers before personal information is transferred
• The new owner will be required to comply with this privacy policy
• Customers will have the option to delete their accounts before any transfer

4.4 With Your Consent

We may share information for other purposes with your explicit consent, such as:

• Sharing reviews and feedback publicly (with your permission)
• Participating in marketing collaborations and partnerships
• Contributing to industry research and development initiatives

5. Data Security

5.1 Technical Security Measures

We implement comprehensive technical safeguards to protect your information:

• Encryption: All data transmission uses SSL/TLS encryption protocols, and sensitive data is encrypted at rest
• Firewall Protection: Advanced firewall systems protect against unauthorized access and cyber attacks
• Access Controls: Multi-factor authentication and role-based access ensure only authorized personnel can access data
• Security Monitoring: 24/7 monitoring systems detect and respond to security threats in real-time
• Regular Backups: Automated, encrypted backups ensure data recovery in case of system failures
• Vulnerability Testing: Regular security assessments and penetration testing identify potential weaknesses
• Secure Infrastructure: Data centers with physical security, redundant systems, and disaster recovery capabilities

5.2 Organizational Security Measures

Our organizational practices ensure data protection at all levels:

• Employee Training: Regular security awareness training for all staff members
• Data Handling Procedures: Clear policies for collecting, processing, and storing personal information
• Confidentiality Agreements: All employees and contractors sign confidentiality agreements
• Incident Response Plan: Comprehensive procedures for responding to security breaches
• Third-Party Agreements: Contractual requirements for service providers to maintain data security
• Regular Audits: Periodic security audits and compliance assessments

5.3 Your Security Responsibilities

You play an important role in keeping your information secure:

• Strong Passwords: Use unique, complex passwords for your account
• Account Security: Never share your login credentials with others
• Secure Browsing: Always log out when using public or shared computers
• Suspicious Activity: Report any suspicious account activity immediately
• Software Updates: Keep your devices and browsers updated with security patches
• Phishing Awareness: Be cautious of suspicious emails or links claiming to be from us

Security Breach Notification: In the unlikely event of a data breach that affects your personal information, we will promptly notify you and relevant authorities as required by law, typically within 72 hours of discovering the breach.

6. Cookies and Tracking Technologies

We use various cookies and tracking technologies to enhance your experience on our website and mobile applications. Below is a detailed breakdown of the types of cookies we use:

Tracking Technologies We Use

• Google Analytics: Website traffic analysis, user behavior tracking, and conversion measurement
• Facebook Pixel: Social media advertising effectiveness and custom audience creation
• Web Beacons: Email open rate tracking and engagement measurement
• Local Storage: Browser-based data storage for enhanced functionality and performance
• Session Replay Tools: Understanding user experience and identifying technical issues

Cookie Management

You have control over cookies and can manage them through your browser settings:

• Most browsers allow you to accept, reject, or delete cookies
• You can set your browser to notify you when cookies are being used
• Disabling cookies may affect website functionality and user experience
• You can opt out of interest-based advertising through industry opt-out tools
• Our cookie consent banner allows you to customize your preferences

7. Your Rights and Choices

We respect your privacy rights and provide you with various options to control your personal information. Depending on your location, you may have the following rights under applicable privacy laws (including GDPR, CCPA, and similar regulations):

7.1 Right of Access

You have the right to know what personal information we have about you, including:

• Categories of personal information we collect
• Specific pieces of personal information we hold about you
• Sources from which we collected your information
• Purposes for collecting and using your information
• Categories of third parties with whom we share your information

7.2 Right to Rectification

You can request correction of inaccurate or incomplete personal information, including:

• Updating contact information and preferences
• Correcting order history and account details
• Modifying dietary restrictions and allergen information
• Fixing delivery addresses and payment information

7.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal information when:

• The information is no longer necessary for the original purpose
• You withdraw consent and there's no other legal basis for processing
• Your information has been unlawfully processed
• Deletion is required for compliance with legal obligations

7.4 Right to Restrict Processing

You can request limitation of how we use your data when:

• You contest the accuracy of your personal information
• Processing is unlawful but you prefer restriction over deletion
• We no longer need the data but you need it for legal claims
• You object to processing while we verify legitimate grounds

7.5 Right to Data Portability

You can request to receive your personal information in a machine-readable format and have it transmitted to another service provider, including:

• Account information and preferences
• Order history and favorite items
• Loyalty program data and rewards information
• Communication preferences and settings

7.6 Right to Object

You can object to processing of your personal information for:

• Direct marketing purposes (including profiling for marketing)
• Processing based on legitimate interests
• Scientific, historical, or statistical research purposes

7.7 Right Against Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing, including profiling, that produces legal effects or significantly affects you.

How to Exercise Your Rights

To exercise any of these rights, please contact us using the information provided in Section 13. We will respond to your request within 30 days and may require verification of your identity to protect your information.

8. Children's Privacy

Protecting children's privacy is extremely important to us. Our services are not intended for children under the age of 16, and we do not knowingly collect personal information from children under 16 years of age.

Our Commitment to Children's Privacy

• No Intentional Collection: We do not intentionally collect, use, or share personal information from children under 16
• Age Verification: We implement age verification measures during account creation
• Parental Consent: If we learn we have collected information from a child under 16, we will delete it promptly
• Educational Content: Any content directed at families is designed to be appropriate for all ages

If You Are a Parent or Guardian

If you believe your child under 16 has provided us with personal information, please contact us immediately at [email protected]. We will:

• Promptly investigate the matter
• Delete any personal information collected from the child
• Take steps to prevent future collection
• Provide confirmation of deletion upon request

Parents and guardians have the right to review, delete, or refuse further collection of their child's personal information by contacting our customer support team.

9. International Data Transfers

As a global business, we may transfer your personal information to countries other than where you reside. We ensure appropriate safeguards are in place to protect your information during these transfers.

9.1 Protection Measures

• Adequacy Decisions: We rely on European Commission adequacy decisions for transfers to countries with equivalent protection levels
• Standard Contractual Clauses (SCCs): We use EU-approved contractual clauses for transfers to countries without adequacy decisions
• Data Processing Agreements: All international partners sign comprehensive data protection agreements
• Security Measures: Enhanced security protocols for international data transfers
• Regular Audits: Ongoing compliance monitoring and assessment of transfer mechanisms

9.2 Transfer Destinations

We may transfer data to the following regions with appropriate safeguards:

• United States: Cloud storage services and data analytics (with appropriate safeguards)
• European Union: Data processing and customer support services
• Canada: Customer support and technical services
• Other Countries: As necessary for service provision, always with appropriate protection measures

For transfers outside of countries with adequacy decisions, we ensure that recipients provide appropriate safeguards and enforceable data subject rights.

10. Data Retention Periods

We retain personal information only as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, and resolve disputes. Here are our specific retention periods:

Safe Data Disposal

When we no longer need to retain your information, we ensure secure disposal:

• Electronic Data: Complete deletion using industry-standard methods that make recovery impossible
• Physical Records: Secure shredding and destruction of paper documents
• Backup Systems: Deletion from all backup and archive systems
• Third-Party Services: Ensuring our service providers also securely delete your information
• Documentation: Maintaining records of disposal for compliance purposes

11. Third-Party Links and Services

Our website and mobile applications may contain links to external websites, social media platforms, and third-party services that are not operated by Church's Chicken. This section explains how these external links work and your responsibilities when using them.

External Links

• Third-Party Websites: Our site may link to external websites for your convenience and information
• Social Media Integration: Links to our social media profiles on platforms like Facebook, Instagram, and Twitter
• Partner Services: Links to delivery partners, payment processors, and other business partners
• Promotional Content: Links to special offers, contests, or events hosted by third parties

Our Responsibilities and Limitations

• We are not responsible for the privacy practices of third-party websites
• We do not control the content or policies of external sites
• Third-party sites may have different privacy policies and terms of use
• We encourage you to read the privacy policies of any third-party sites you visit

Your Responsibilities

• Review privacy policies of third-party sites before providing personal information
• Understand that different privacy protections may apply on external sites
• Make informed decisions about sharing your information with third parties
• Contact third parties directly for questions about their privacy practices

12. Policy Changes and Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We are committed to keeping you informed about any changes that may affect your privacy rights.

12.1 How We Notify You of Changes

• Website Notice: Prominent notification on our homepage and privacy policy page
• Email Notification: Direct email to registered users for significant changes
• Account Dashboard: Notification in your account when you log in
• Mobile App: Push notification for app users about important policy updates
• Social Media: Announcements on our social media channels for major changes

12.2 Types of Changes

• Minor Updates: Clarifications, contact information updates, or grammatical corrections
• Significant Changes: New data collection practices, changes in data sharing, or expanded uses of information
• Legal Updates: Changes required by new laws or regulations
• Service Changes: Updates related to new features or services we offer

12.3 Your Options

• Review Changes: The latest version is always available on our website
• Ask Questions: Contact us if you have questions about any changes
• Opt Out: For significant changes requiring new consent, you can choose not to accept
• Continue Using: Continued use of our services after changes indicates acceptance
• Delete Account: You can delete your account if you disagree with changes

Effective Date: Changes become effective 30 days after notification, unless a shorter period is required by law or for security reasons.

13. Contact Information

We value your privacy concerns and questions. If you have any questions about this Privacy Policy, our data practices, or would like to exercise your privacy rights, please don't hesitate to contact us:

13.1 Filing Complaints

If you believe we have not adequately addressed your privacy concerns, you may file a complaint with the appropriate supervisory authority:

• United States: Federal Trade Commission (FTC) - consumer.ftc.gov
• European Union: Your local Data Protection Authority
• Canada: Office of the Privacy Commissioner of Canada - priv.gc.ca
• Other Jurisdictions: Contact your local privacy regulator

We encourage you to contact us first so we can address your concerns directly and work toward a satisfactory resolution.

14. Withdrawal of Consent

You have the right to withdraw your consent for certain data processing activities at any time. Withdrawing consent will not affect the lawfulness of processing based on consent before its withdrawal.

14.1 Marketing Consent Withdrawal

You can stop receiving marketing communications from us through several methods:

• Unsubscribe Links: Click the unsubscribe link in any marketing email
• Account Settings: Update your communication preferences in your account dashboard
• Customer Support: Call or email our customer support team
• Opt-out Page: Visit our website's opt-out page for immediate removal
• Text Messages: Reply "STOP" to any promotional text messages

14.2 Cookie Consent Withdrawal

• Use your browser settings to block or delete cookies
• Visit our cookie preference center to update your choices
• Note that essential cookies cannot be disabled as they are necessary for site functionality

14.3 Account Deletion Process

To completely delete your account and associated data:

• Self-Service: Use the account deletion option in your account settings
• Customer Support: Contact our support team for assistance
• Email Request: Send a deletion request to [email protected]
• Verification: We may require identity verification for security
• Confirmation: You'll receive confirmation once deletion is complete

Important Note: Some information may be retained as required by law or for legitimate business purposes such as fraud prevention and dispute resolution.

15. Conclusion

At Church's Chicken, protecting your privacy is not just a legal obligation—it's fundamental to building and maintaining the trust you place in us when you choose our delicious food and services. We are committed to being transparent about our data practices and providing you with meaningful control over your personal information.

This Privacy Policy reflects our ongoing commitment to:

• Transparency: Clearly explaining what information we collect and how we use it
• Control: Giving you choices about your personal information and privacy settings
• Security: Implementing robust measures to protect your data from unauthorized access
• Respect: Honoring your privacy rights and preferences at all times
• Compliance: Meeting or exceeding legal requirements and industry standards

We understand that privacy is personal, and we respect your individual preferences and concerns. Whether you're ordering your favorite chicken meal, participating in our loyalty program, or simply browsing our website, you can trust that we handle your information with care and respect.

The relationship between Church's Chicken and our valued customers is built on trust, quality food, and exceptional service. Your privacy is an essential part of that relationship, and we are committed to earning and maintaining your trust every day.

If you have any questions, concerns, or feedback about this Privacy Policy or our privacy practices, please don't hesitate to reach out to us. We value your input and are always looking for ways to improve our services and your experience.

Thank you for choosing Church's Chicken and for taking the time to understand how we protect your privacy.

Remember: This Privacy Policy was last updated on March 1, 2026. Please check back periodically for any updates or changes.