Privacy Policy

1. Introduction

Welcome to WingSnob ("we," "our," or "us"). We are committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, share, and protect your information when you use our website, mobile app, and food ordering services.

This policy covers all interactions with our services, including:

• Online food ordering and delivery
• Dine-in table reservations
• Loyalty program participation
• Catering services
• Customer support communications
• Marketing and promotional activities

By using our services, you agree to the terms outlined in this Privacy Policy. We never sell your personal data to third parties. We only share information as described in this policy to provide you with excellent food service and enhance your dining experience.

If you have any questions about this policy or our privacy practices, please contact us using the information provided at the end of this document.

2. Information We Collect

2.1 Information You Provide to Us

When you interact with our services, you may provide us with the following information:

Personal Identification Information:

• Name, email address, phone number
• Delivery and billing addresses
• Date of birth (for age verification and birthday promotions)
• Profile photo (optional)

Account Information:

• Username and password
• Order history and purchase preferences
• Favorite menu items and saved orders
• Loyalty program membership and points balance
• Payment method preferences

Food Service-Specific Information:

• Dietary restrictions and allergen information
• Special dietary requirements (vegan, halal, kosher, gluten-free)
• Food preferences and taste profiles
• Spice level preferences
• Table reservation details and party size
• Catering event information and guest count
• Special instructions for food preparation

Payment Information:

• Credit/debit card information (securely encrypted)
• Digital wallet information (Apple Pay, Google Pay)
• Billing address and transaction history

Communication Data:

• Contact form submissions and inquiries
• Customer service chat logs and call recordings
• Reviews and feedback about our food and service
• Survey responses and testimonials
• Marketing communication preferences

2.2 Information We Collect Automatically

When you use our digital services, we automatically collect certain information:

Device and Technical Information:

• IP address and approximate geographic location
• Device type, operating system, and browser information
• Screen resolution and device identifiers
• Network connection type and speed

Usage Data:

• Pages visited and time spent on our website
• Menu items viewed and search queries
• Click patterns and navigation paths
• Order abandonment and completion rates
• App usage patterns and feature interactions

Location Information:

• GPS location (with your permission) for delivery accuracy
• IP-based approximate location
• Delivery route and timing information

2.3 Information from Third Parties

We may receive information about you from various third-party sources:

Social Media Platforms:

• Profile information if you connect social media accounts
• Friend lists and social connections (with permission)
• Public posts and interactions related to our brand

Service Partners:

• Payment processors (transaction verification)
• Delivery partners (delivery status and feedback)
• Review platforms (customer feedback and ratings)
• Marketing partners (campaign performance data)

3. How We Use Your Information

3.1 Service Provision

We use your information to deliver exceptional food service:

• Processing and fulfilling your food orders
• Coordinating delivery and pickup services
• Managing table reservations and waitlists
• Preparing food according to your dietary requirements
• Processing payments and managing loyalty rewards
• Providing customer support and resolving issues
• Maintaining and improving our food quality

3.2 Communication

We communicate with you to enhance your dining experience:

• Order confirmations and preparation status updates
• Delivery tracking and arrival notifications
• Reservation confirmations and reminders
• Customer support responses and follow-ups
• Important service announcements and policy changes
• Promotional offers and new menu item alerts (with consent)
• Birthday and special occasion promotions

3.3 Marketing and Analytics

With your consent, we use information for marketing purposes:

• Personalizing menu recommendations and offers
• Analyzing food preferences and ordering patterns
• Measuring marketing campaign effectiveness
• Conducting market research for new menu items
• Improving website and app user experience
• Optimizing delivery routes and timing
• Creating targeted advertising campaigns

3.4 Legal Compliance and Safety

We use information to ensure safety and comply with laws:

• Responding to legal requests and court orders
• Preventing fraud and protecting against security threats
• Enforcing our terms of service and policies
• Protecting the rights and safety of customers and staff
• Resolving disputes and handling complaints
• Maintaining food safety and health compliance records

4. Information Sharing and Disclosure

4.1 Service Providers

We share information with trusted partners who help us provide our services:

Payment Processors:

• Credit card companies and payment gateways
• Digital wallet providers (Apple Pay, Google Pay)
• Transaction fraud detection services

Delivery Partners:

• Third-party delivery services and drivers
• Route optimization and tracking providers
• Food delivery platforms and aggregators

Technology Providers:

• Cloud storage and hosting services
• Customer relationship management (CRM) platforms
• Email marketing and communication tools
• Analytics and reporting services

Food Service Partners:

• Ingredient suppliers for allergen information
• Kitchen equipment and POS system providers
• Food safety and quality assurance services

4.2 Legal Requirements

We may disclose information when required by law or to protect rights:

• Court orders, subpoenas, and legal proceedings
• Government investigations and regulatory compliance
• Food safety inspections and health department requests
• Law enforcement requests for criminal investigations
• Protection of our rights, property, and legal interests
• Emergency situations involving public safety

4.3 Business Transfers

In the event of business changes, your information may be transferred:

• Mergers, acquisitions, or sale of company assets
• Bankruptcy or business restructuring proceedings
• Partnership agreements or joint venture formations

We will notify you before your information becomes subject to a different privacy policy and provide you with choices regarding the transfer.

4.4 With Your Consent

We may share information for other purposes with your explicit consent, such as:

• Participation in marketing campaigns or contests
• Sharing testimonials or reviews publicly
• Integration with third-party loyalty programs
• Social media sharing of order experiences

5. Data Security

5.1 Technical Security Measures

We implement comprehensive technical safeguards to protect your information:

Encryption and Data Protection:

• SSL/TLS encryption for all data transmission
• AES-256 encryption for sensitive data storage
• End-to-end encryption for payment processing
• Secure APIs with authentication and authorization

Network Security:

• Advanced firewall systems and intrusion detection
• Network segmentation and access controls
• DDoS protection and traffic monitoring
• Regular security vulnerability assessments

Access Controls:

• Multi-factor authentication for all system access
• Role-based permissions and minimum necessary access
• Regular access reviews and deprovisioning
• Secure password policies and rotation requirements

Monitoring and Backup:

• 24/7 security monitoring and incident response
• Automated threat detection and response systems
• Regular encrypted data backups and disaster recovery testing
• Security logs and audit trails

5.2 Organizational Security Measures

Our team follows strict security protocols:

• Comprehensive security training for all employees
• Background checks for personnel with data access
• Confidentiality agreements and non-disclosure policies
• Regular security awareness training and phishing simulations
• Incident response procedures and escalation protocols
• Third-party security assessments and certifications

5.3 Your Security Responsibilities

You can help protect your information by:

• Using strong, unique passwords for your account
• Never sharing your login credentials with others
• Logging out of your account on shared or public computers
• Being cautious of suspicious emails or phishing attempts
• Keeping your contact information updated
• Reporting any unauthorized account activity immediately
• Using secure networks when accessing your account

Security Breach Notification: In the unlikely event of a data breach that affects your personal information, we will promptly notify you and relevant authorities as required by law. We will provide clear information about what happened, what information was involved, and what steps we are taking to address the situation.

6. Cookies and Tracking Technologies

We use various tracking technologies to enhance your experience and analyze service usage:

Cookie Type	Purpose	Duration
Essential Cookies	Basic site functions, login state, shopping cart, security	Session (deleted when browser closes)
Functional Cookies	User preferences, language settings, location, saved addresses	Up to 1 year
Analytics Cookies	Usage analysis, performance monitoring, service improvement	Up to 2 years
Marketing Cookies	Personalized advertising, campaign measurement, retargeting	Up to 1 year

Specific Tracking Technologies We Use:

• Google Analytics: Website traffic analysis and user behavior insights
• Facebook Pixel: Social media advertising effectiveness measurement
• Email Beacons: Email open rates and engagement tracking
• Local Storage: Browser-based data storage for enhanced functionality
• Session Replay Tools: User experience analysis and troubleshooting

Cookie Management

You have control over cookie usage:

• Use our cookie preference center to customize settings
• Modify browser settings to accept, reject, or delete cookies
• Use browser private/incognito mode to prevent tracking
• Install browser extensions for additional privacy control

Important Note: Disabling certain cookies may affect website functionality, including the ability to place orders, save preferences, and access your account features.

7. Your Privacy Rights (GDPR/CCPA Compliance)

Depending on your location, you may have the following rights regarding your personal information:

7.1 Right of Access

You can request to view all personal data we have about you, including:

• Account information and order history
• Stored payment methods and addresses
• Communication preferences and marketing consent
• Usage data and analytics information

7.2 Right to Rectification

You can request correction of inaccurate or incomplete information:

• Update personal details and contact information
• Correct dietary restrictions and allergen data
• Modify delivery addresses and preferences
• Fix errors in order history or account details

7.3 Right to Erasure (Right to be Forgotten)

You can request deletion of your personal data when:

• The information is no longer necessary for our services
• You withdraw consent and no other legal basis exists
• Your data has been unlawfully processed
• Deletion is required for legal compliance

7.4 Right to Restrict Processing

You can limit how we use your information when:

• You contest the accuracy of the data
• Processing is unlawful but you prefer restriction over deletion
• We no longer need the data but you need it for legal claims
• You object to processing pending verification of legitimate interests

7.5 Right to Data Portability

You can receive your data in a machine-readable format, including:

• Account and profile information
• Order history and preferences
• Loyalty program data
• Communication history

7.6 Right to Object

You can object to processing for:

• Direct marketing communications
• Automated decision-making and profiling
• Processing based on legitimate interests
• Research and analytics purposes

7.7 Right Against Automated Decision-Making

You have the right not to be subject to automated decisions that significantly affect you, including algorithmic pricing or service denial.

How to Exercise Your Rights

To exercise any of these rights:

• Email us at: [email protected]
• Call us at: +1 212-219-0764
• Use the contact form on our website
• Mail us at: 265 Elizabeth St, New York, NY 10012, USA

We will respond to your request within 30 days and may require identity verification to protect your privacy.

8. Children's Privacy

We are committed to protecting children's privacy and complying with applicable laws:

Age Restrictions

• Our services are not intended for children under 16 years of age
• We do not knowingly collect personal information from children under 16
• Account creation requires age verification
• Parental consent is required for users under 18 in some jurisdictions

If We Discover Children's Information

If we become aware that we have collected information from a child under 16:

• We will promptly delete the information from our systems
• We will terminate any associated account
• We will not use the information for any purpose
• We will not share the information with third parties

Parental Rights

Parents and guardians can:

• Request information about data we may have collected
• Request deletion of their child's information
• Refuse to permit further collection or use
• Contact us with any concerns about their child's privacy

Parent Notice: If you believe your child under 16 has provided us with personal information, please contact us immediately at [email protected] so we can promptly remove the information.

9. International Data Transfers

As we operate internationally, your information may be transferred to and processed in countries other than your own.

9.1 Protection Measures

When transferring data internationally, we ensure adequate protection through:

Legal Frameworks:

• European Commission adequacy decisions
• Standard Contractual Clauses (SCCs) approved by the EU
• Binding Corporate Rules for intra-group transfers
• Privacy Shield certification where applicable

Technical and Organizational Measures:

• Data processing agreements with all international partners
• Encryption during transmission and storage
• Access controls and monitoring systems
• Regular compliance audits and assessments
• Data minimization and purpose limitation

9.2 Transfer Destinations

Your data may be transferred to:

• United States: Cloud storage, payment processing, customer support
• European Union: Data analytics, marketing services
• Canada: Technical support and development services
• Other countries: As needed for service provision with appropriate safeguards

We continuously monitor the legal and security landscape in destination countries to ensure your data remains protected.

10. Data Retention Periods

We retain your information only as long as necessary for the purposes described in this policy:

Information Type	Retention Period	Reason for Retention
Account Information	6 months after account deletion	Legal obligations, dispute resolution, fraud prevention
Order History	7 years from last transaction	Tax and accounting requirements, warranty claims
Payment Data	As required by payment processors	Fraud prevention, chargeback protection, refunds
Marketing Consent	3 months after withdrawal	Consent record keeping, compliance documentation
Website Usage Logs	Up to 2 years	Security monitoring, analytics, service improvement
Customer Support Records	3 years from last interaction	Service quality improvement, training purposes
Dietary Preferences	Until account deletion or update	Food safety, allergen management, personalization
Loyalty Program Data	5 years from last activity	Program administration, tax reporting, rewards fulfillment

Safe Data Disposal

When information is no longer needed, we ensure secure disposal:

• Complete electronic deletion using DoD-standard wiping procedures
• Physical destruction of paper records through certified shredding
• Secure deletion from all backup systems and archives
• Disposal certificates and records maintenance
• Third-party destruction services for sensitive materials

Some information may be retained longer if required by law, pending legal proceedings, or to protect our legitimate interests.

11. Third-Party Links

Our website and services may contain links to third-party websites, social media platforms, and external services that are not operated by us.

External Links

These may include:

• Social media platforms (Facebook, Instagram, Twitter)
• Review websites (Yelp, Google Reviews)
• Payment processors and financial services
• Delivery tracking systems
• Food safety and nutritional information sites
• Partner restaurant and supplier websites

Our Responsibility

Please be aware that:

• We are not responsible for third-party privacy practices
• This privacy policy does not apply to external websites
• Third parties have their own privacy policies and terms
• We do not control third-party data collection or use

Your Responsibility

When visiting third-party sites, we encourage you to:

• Review their privacy policies before providing information
• Understand their data collection and usage practices
• Check their security measures and reputation
• Be cautious about sharing personal information
• Use privacy settings and controls available on those platforms

We select our third-party partners carefully but cannot guarantee their privacy practices. Your interactions with these third parties are at your own discretion and risk.

12. Policy Changes

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations.

12.1 How We Notify You of Changes

When we update this policy, we will:

For Minor Changes:

• Post the updated policy on our website with a new "Last Updated" date
• Display a notification banner about the changes
• Continue service provision under the new terms

For Significant Changes:

• Send email notifications to all registered users
• Display prominent notices on our website and app
• Require explicit consent for new uses of personal information
• Provide a summary of key changes
• Allow reasonable time for review before implementation

12.2 Your Options

When we make changes, you can:

• Review the updated policy and continue using our services
• Contact us with questions or concerns about changes
• Modify your privacy settings and preferences
• Exercise your rights to object or withdraw consent
• Close your account if you disagree with the changes

12.3 Staying Informed

To stay updated about policy changes:

• Check this page regularly for updates
• Note the "Last Updated" date at the top of this policy
• Subscribe to our privacy notices and updates
• Follow our official social media accounts for announcements

Continued Use: Your continued use of our services after changes become effective means you accept the updated policy. If you don't agree with changes, please stop using our services and contact us about account closure.

13. Contact Information

We are committed to addressing your privacy concerns promptly and thoroughly. Our privacy team will respond to your inquiry within 3 business days.

Types of Inquiries We Handle

• Questions about this privacy policy
• Requests to exercise your privacy rights
• Data access, correction, or deletion requests
• Concerns about data collection or usage
• Reports of privacy policy violations
• Complaints about our privacy practices

13.1 Filing Complaints

If you're not satisfied with our response to your privacy concerns, you have the right to file a complaint with:

United States:

• Federal Trade Commission (FTC)
• Website: www.ftc.gov/complaint
• Phone: 1-877-FTC-HELP (1-877-382-4357)

European Union (GDPR):

• Your local data protection authority
• European Data Protection Board: edpb.europa.eu

California (CCPA):

• California Attorney General's Office
• Website: oag.ca.gov/privacy/ccpa

14. Withdrawal of Consent

You have the right to withdraw your consent at any time for activities that require your consent.

14.1 Marketing Consent Withdrawal

To stop receiving marketing communications:

Email Marketing:

• Click the "unsubscribe" link in any marketing email
• Log into your account and update email preferences
• Email us at [email protected] with "UNSUBSCRIBE" in the subject line
• Call us at +1 212-219-0764

SMS/Text Marketing:

• Reply "STOP" to any marketing text message
• Update preferences in your account settings
• Contact customer support for assistance

Phone Marketing:

• Ask to be removed from our calling list during any call
• Register with the National Do Not Call Registry
• Contact us to opt out of promotional calls

14.2 Account Deletion Process

To completely delete your account and personal information:

Step 1: Submit a deletion request via:

• Account settings in our website or app
• Email to [email protected]
• Phone call to +1 212-219-0764
• Written request to our mailing address

Step 2: Identity verification (for security)

• Confirm your account email address
• Provide last order information or account details
• Complete any additional verification as needed

Step 3: Processing and confirmation

• We will process your request within 30 days
• You'll receive confirmation when deletion is complete
• Some data may be retained for legal compliance

Important Notes About Consent Withdrawal

• Withdrawal does not affect processing based on consent before withdrawal
• Some services may no longer be available after consent withdrawal
• Transactional communications (order updates) will continue as needed
• Legal obligations may require retaining certain information

15. Conclusion

At WingSnob, protecting your privacy is fundamental to our business values and customer relationships. We are committed to maintaining the highest standards of data protection and privacy practices in the food service industry.

Our Privacy Commitment

We pledge to:

• Be transparent about our data collection and usage practices
• Use your information only for the purposes you expect and consent to
• Implement strong security measures to protect your data
• Respect your privacy rights and provide easy ways to exercise them
• Never sell your personal information to third parties
• Continuously improve our privacy practices and policies
• Comply with all applicable privacy laws and regulations

Building Trust

Your trust is essential to our success. We understand that trust is earned through:

• Consistent protection of your personal information
• Clear communication about our privacy practices
• Responsive handling of your privacy concerns
• Ongoing investment in privacy and security technologies
• Regular training of our staff on privacy best practices

Staying Connected

We welcome your feedback and questions about our privacy practices. Your input helps us improve our policies and better serve your needs while protecting your privacy.

If you have any questions, concerns, or suggestions about this Privacy Policy or our privacy practices, please don't hesitate to contact us at [email protected] or +1 212-219-0764.

Thank you for choosing WingSnob and trusting us with your personal information. We look forward to continuing to serve you while maintaining the highest standards of privacy protection.

Remember to check this page regularly for updates. The "Last Updated" date at the top of this policy will always reflect the most recent changes.