Privacy Policy
Your privacy and data protection are our top priorities
1. Introduction
Welcome to Church's Chicken. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, share, and protect your personal data when you use our services, visit our website, place orders, or interact with us in any way.
This policy applies to all services provided by Church's Chicken, including our website, mobile applications, in-store services, delivery services, loyalty programs, and catering services. By using any of our services, you agree to the collection and use of information in accordance with this policy.
Important Note: We never sell your personal data to third parties. Your trust is paramount to us, and we are committed to maintaining the confidentiality and security of your information.
2. Information We Collect
2.1 Information You Provide to Us
- Personal Identification Information: Name, email address, phone number, mailing address, date of birth
- Account Information: Username, password, order history, payment preferences, dietary restrictions
- Payment Information: Credit card details, billing address (securely encrypted and stored by certified payment processors)
- Order Information: Food preferences, special dietary requirements (vegan, halal, kosher, gluten-free, allergen information), delivery instructions
- Loyalty Program Data: Reward points, favorite orders, purchase frequency, special offers preferences
- Reservation Information: Table booking details, party size, special occasion notes
- Catering Details: Event information, guest count, menu preferences, delivery locations
- Communication Data: Contact form submissions, customer service inquiries, reviews and feedback
- Marketing Preferences: Newsletter subscriptions, promotional email preferences, communication channels
2.2 Information Automatically Collected
- Device Information: IP address, browser type and version, operating system, device identifiers
- Usage Data: Pages visited, time spent on site, click patterns, search queries, referral sources
- Location Data: Approximate location based on IP address, precise location for delivery services (with your consent)
- Cookie Data: Session identifiers, user preferences, shopping cart contents, analytics data
- Performance Data: Website loading times, error reports, feature usage statistics
2.3 Information from Third Parties
- Social Media Platforms: Profile information when you connect your social media accounts
- Payment Processors: Transaction verification and fraud prevention data
- Delivery Partners: Delivery status updates and location tracking for order fulfillment
- Marketing Partners: Aggregated demographic and interest data for advertising optimization
- Review Platforms: Public reviews and ratings about our services
3. How We Use Your Information
3.1 Service Provision
- Order Processing: Fulfilling food orders, managing delivery and pickup services
- Account Management: Creating and maintaining user accounts, authentication, security
- Customer Support: Responding to inquiries, resolving issues, providing assistance
- Personalization: Customizing menu recommendations based on dietary preferences and order history
- Quality Improvement: Analyzing service performance and customer satisfaction to enhance our offerings
3.2 Communication
- Order Updates: Confirmation emails, preparation status, delivery notifications
- Customer Service: Responding to inquiries, feedback, and support requests
- Important Notices: Policy changes, service updates, security alerts
- Marketing Communications: Promotional emails, special offers, new menu items (only with your explicit consent)
3.3 Marketing and Analytics
- Personalized Advertising: Showing relevant ads based on your preferences and order history
- Website Analytics: Understanding user behavior to improve website functionality
- Campaign Measurement: Evaluating the effectiveness of marketing campaigns
- Market Research: Developing new products and services based on customer preferences
3.4 Legal Compliance and Security
- Legal Obligations: Complying with applicable laws, regulations, and legal processes
- Fraud Prevention: Detecting and preventing fraudulent activities and security threats
- Rights Protection: Protecting our rights, property, and the safety of our customers and employees
- Dispute Resolution: Resolving conflicts and legal disputes
4. Information Sharing and Disclosure
4.1 Service Providers
We may share your information with trusted third-party service providers who assist us in delivering our services:
- Payment Processors: Secure handling of credit card transactions and payment verification
- Delivery Companies: Fulfillment of food delivery orders and tracking services
- Cloud Storage Providers: Secure storage and backup of customer data
- Email Service Providers: Sending order confirmations, newsletters, and promotional emails
- Analytics Tools: Website performance analysis and user behavior insights
- Customer Support Services: Providing customer service and technical support
4.2 Legal Requirements
We may disclose your personal information when required by law or in response to:
- Court orders, subpoenas, or other legal processes
- Government requests or regulatory investigations
- Law enforcement inquiries related to criminal activities
- Protection of our legal rights and property
- Public safety emergencies or threats
4.3 Business Transfers
In the event of a merger, acquisition, sale of assets, or other business transfer, your personal information may be transferred to the new entity. We will:
- Notify you before your information is transferred
- Ensure the new owner complies with this privacy policy
- Provide you with options regarding your data
4.4 With Your Consent
We may share your information for other purposes with your explicit consent, such as participating in partner promotions or sharing testimonials.
5. Data Security
5.1 Technical Security Measures
- Encryption: SSL/TLS encryption for all data transmission between your device and our servers
- Firewall Protection: Advanced firewall systems to prevent unauthorized access
- Access Controls: Role-based access controls ensuring only authorized personnel can access personal data
- Monitoring: 24/7 security monitoring and intrusion detection systems
- Data Backups: Regular encrypted backups stored in secure, geographically distributed locations
- Vulnerability Management: Regular security assessments and prompt patching of vulnerabilities
5.2 Organizational Security Measures
- Employee Training: Regular privacy and security training for all staff members
- Data Handling Procedures: Strict protocols for accessing, processing, and storing personal data
- Confidentiality Agreements: All employees and contractors sign confidentiality agreements
- Incident Response Plan: Comprehensive procedures for handling security breaches
- Regular Audits: Periodic security audits and compliance assessments
5.3 Your Security Responsibilities
- Strong Passwords: Use unique, complex passwords for your account
- Account Protection: Never share your login credentials with others
- Public Computer Safety: Always log out when using public computers
- Phishing Awareness: Be cautious of suspicious emails or links requesting personal information
- Report Issues: Immediately report any suspected unauthorized access to your account
Security Breach Notification: In the unlikely event of a data breach that affects your personal information, we will promptly notify you and relevant authorities within 72 hours of becoming aware of the incident, in accordance with applicable laws.
6. Cookies and Tracking Technologies
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential Cookies | Basic website functionality, login state, shopping cart, security | Session-based (deleted when browser closes) |
| Functional Cookies | User preferences, language settings, personalized content | Up to 1 year |
| Analytics Cookies | Website usage analysis, performance monitoring, user behavior insights | Up to 2 years |
| Marketing Cookies | Personalized advertising, campaign tracking, remarketing | Up to 1 year |
Other Tracking Technologies
- Google Analytics: Website traffic analysis and user behavior tracking
- Facebook Pixel: Advertising campaign measurement and audience building
- Web Beacons: Email open rates and interaction tracking
- Local Storage: Storing user preferences and application data in your browser
Cookie Management: You can control cookie settings through your browser preferences. However, please note that disabling certain cookies may affect website functionality and your user experience.
7. Your Privacy Rights
7.1 Right of Access
You have the right to request access to your personal data that we hold. We will provide you with a copy of your personal information and details about how it is being processed.
7.2 Right to Rectification
You can request correction of inaccurate or incomplete personal data. We will promptly update your information upon verification.
7.3 Right to Erasure (Right to be Forgotten)
You may request deletion of your personal data under certain circumstances, such as when the data is no longer necessary for the purposes it was collected.
7.4 Right to Restrict Processing
You can request to limit how we use your personal data while we address any concerns or disputes about the accuracy or processing of your information.
7.5 Right to Data Portability
You have the right to receive your personal data in a structured, machine-readable format and to transmit that data to another service provider.
7.6 Right to Object
You may object to certain types of processing, particularly for direct marketing purposes or when processing is based on legitimate interests.
7.7 Right Against Automated Decision-Making
You have the right not to be subject to decisions based solely on automated processing that significantly affects you.
How to Exercise Your Rights: To exercise any of these rights, please contact us using the information provided in the Contact section below. We will respond to your request within 30 days and may require verification of your identity to protect your privacy.
8. Children's Privacy
Our services are not intended for children under the age of 16. We do not knowingly collect personal information from children under 16 years of age. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us immediately.
If we discover that we have collected personal information from children under 16 without verification of parental consent, we will take steps to remove that information from our servers promptly.
9. International Data Transfers
9.1 Data Protection Measures
When transferring your personal data internationally, we ensure appropriate protection through:
- Adequacy Decisions: Transfers to countries recognized by regulatory authorities as providing adequate protection
- Standard Contractual Clauses: EU-approved contractual terms ensuring data protection standards
- Data Processing Agreements: Binding agreements with international partners requiring equivalent protection
- Security Safeguards: Additional technical and organizational measures for data protection
- Regular Compliance Reviews: Ongoing monitoring of international data handling practices
9.2 Transfer Destinations
Your data may be transferred to and processed in the following locations:
- United States: Cloud storage and analytics services
- European Union: Data processing and customer support services
- Other Countries: As necessary for service delivery, always with appropriate safeguards
10. Data Retention Periods
| Information Type | Retention Period | Reason for Retention |
|---|---|---|
| Account Information | 6 months after account deletion | Legal obligations, dispute resolution |
| Order History | 7 years | Tax and accounting requirements, warranty claims |
| Payment Information | As required by payment processors (typically 3-7 years) | Fraud prevention, chargeback processing |
| Marketing Consent Records | 3 months after consent withdrawal | Proof of consent, compliance documentation |
| Website Usage Logs | Up to 2 years | Security monitoring, analytics, performance optimization |
| Customer Support Records | 3 years | Service quality improvement, training purposes |
| Loyalty Program Data | 5 years after account closure | Reward redemption, program analysis |
Safe Data Disposal
When data retention periods expire, we ensure safe disposal through:
- Complete Electronic Deletion: Secure erasure making data unrecoverable
- Physical Record Destruction: Professional shredding of paper documents
- Backup Data Removal: Deletion from all backup systems and archives
- Disposal Documentation: Maintaining records of data destruction for compliance
11. Third-Party Links and Services
Our website and services may contain links to third-party websites, applications, or services that are not operated by us. We are not responsible for the privacy practices or content of these third-party sites.
We strongly encourage you to review the privacy policies of any third-party services you visit or use. Your interactions with third-party sites are governed by their respective privacy policies, not this one.
When you leave our website or use third-party services integrated with our platform, your activities are subject to the terms and privacy policies of those third parties.
12. Policy Changes and Updates
12.1 Change Notification Methods
When we make changes to this privacy policy, we will notify you through:
- Website Notice: Prominent notice on our homepage for at least 30 days
- Email Notification: Direct email to all registered users about significant changes
- In-App Notification: Pop-up notifications when you next log into your account
- Explicit Consent: Required consent for material changes that affect your rights
12.2 Staying Informed
- The most current version of this policy is always available on our website
- Check the "Last Updated" date at the top of this policy
- Continued use of our services after changes constitutes acceptance
- You may discontinue using our services if you disagree with changes
13. Contact Information
Church's Chicken
300 Goose Cove Rd, Deer Isle, ME 04627, USA
Phone: +1 207-348-6900
Email: [email protected]
Business Hours: Monday - Friday, 9:00 AM - 6:00 PM
Response Commitment: We will respond to your privacy inquiries within 3 business days.
Privacy Complaints
If you have concerns about our privacy practices, please contact us first. If you remain unsatisfied, you may file a complaint with your local data protection authority.
Contact Our Privacy Team14. Withdrawal of Consent
14.1 Marketing Consent Withdrawal
You can withdraw your consent for marketing communications at any time through:
- Unsubscribe Links: Click the unsubscribe link in any promotional email
- Account Settings: Manage your communication preferences in your online account
- Customer Support: Contact our customer service team for assistance
- Direct Contact: Email or call us using the contact information provided
14.2 Account Deletion Process
To delete your account and personal data:
- Log into your account and access account settings
- Select "Delete Account" and follow the confirmation process
- Contact customer support for assistance if needed
- Note: Some information may be retained for legal compliance as outlined in our retention schedule
15. Conclusion
At Church's Chicken, protecting your privacy is not just a legal obligation—it's a fundamental part of our commitment to you as our valued customer. We believe that trust is earned through transparency, security, and respect for your personal information.
We are dedicated to maintaining the highest standards of data protection and will continue to evolve our practices to meet emerging privacy challenges and regulatory requirements. Your relationship with us is built on trust, and we take that responsibility seriously.
If you have any questions about this Privacy Policy or our privacy practices, we encourage you to reach out to us. We're here to help and ensure that you feel confident about how your personal information is handled.
Thank you for choosing Church's Chicken and for trusting us with your personal information. We appreciate your business and your confidence in our commitment to protecting your privacy.
Last Updated: January 15, 2025