Privacy Policy

1. Introduction

Welcome to Slim Chickens ("we," "our," or "us"). At Slim Chickens, we are deeply committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, process, and protect your personal information when you use our services, visit our website at slim-chickens.digital, place orders, visit our restaurants, or interact with us in any way.

This policy applies to all aspects of our food service business, including online ordering, delivery services, in-store dining, catering services, loyalty programs, and customer support. By using our services, creating an account, placing orders, or providing us with your personal information, you agree to the collection and use of information in accordance with this policy.

We understand that when you share your personal information with us, especially details about your food preferences, dietary requirements, and delivery addresses, you are placing your trust in us. We take this responsibility seriously and are committed to transparency about how we handle your data.

2. Information We Collect

2.1 Information You Provide Directly

We collect information that you voluntarily provide to us when you:

• Create an Account: Name, email address, phone number, date of birth, and password
• Place Orders: Delivery/billing addresses, payment information (securely encrypted), special instructions, and order history
• Dietary Information: Food allergies, dietary restrictions (vegan, vegetarian, halal, kosher, gluten-free), spice preferences, and special dietary requirements
• Loyalty Program: Participation in rewards programs, favorite orders, dining preferences, and redemption history
• Table Reservations: Preferred seating, party size, special occasion details, and timing preferences
• Catering Services: Event details, guest count, menu preferences, delivery/pickup information, and special requirements
• Customer Support: Communications with our support team, feedback, complaints, and service requests
• Reviews and Feedback: Restaurant reviews, food ratings, service feedback, and suggestions
• Marketing Preferences: Communication preferences, newsletter subscriptions, and promotional offer interests

2.2 Information Collected Automatically

When you visit our website, use our mobile app, or interact with our digital services, we automatically collect:

• Device Information: IP address, browser type and version, operating system, device model, and unique device identifiers
• Usage Data: Pages visited, time spent on site, click patterns, search queries, order browsing history, and menu interactions
• Location Data: Approximate location based on IP address, and precise location (with your consent) for delivery services
• Cookie Data: Session identifiers, user preferences, shopping cart contents, and analytics data
• Performance Data: Website loading times, error reports, and system diagnostics

2.3 Information from Third Parties

We may receive information about you from:

• Social Media Platforms: If you connect your social media accounts, we may receive basic profile information
• Payment Processors: Transaction confirmations, payment status, and fraud prevention data
• Delivery Partners: Delivery confirmations, driver locations, and delivery completion status
• Marketing Partners: Advertising effectiveness data and campaign performance metrics
• Data Analytics Providers: Aggregated usage statistics and market research data

3. How We Use Your Information

3.1 Service Provision

• Order Processing: Fulfilling your food orders, processing payments, coordinating delivery or pickup
• Account Management: Creating and maintaining your account, authenticating your identity, managing preferences
• Personalization: Customizing menu recommendations based on your order history and dietary preferences
• Quality Assurance: Monitoring food quality, delivery times, and overall service performance
• Customer Support: Responding to inquiries, resolving issues, processing refunds and complaints

3.2 Communication

• Order Updates: Confirmation emails, preparation status, delivery tracking, and completion notifications
• Customer Support: Responses to your questions, follow-up on service issues, and satisfaction surveys
• Important Notices: Policy changes, service updates, food safety alerts, and account security notifications
• Marketing Communications: Promotional offers, new menu items, special events (only with your explicit consent)

3.3 Marketing and Analytics

• Personalized Advertising: Showing relevant promotions based on your dining preferences and order history
• Usage Analysis: Understanding how customers interact with our website and services
• Campaign Effectiveness: Measuring the success of marketing campaigns and promotional offers
• Market Research: Developing new menu items and improving existing offerings

3.4 Legal Compliance and Security

• Legal Obligations: Complying with food safety regulations, tax requirements, and health department mandates
• Fraud Prevention: Detecting and preventing fraudulent orders, payment fraud, and account abuse
• Safety and Security: Protecting our customers, employees, and business operations
• Dispute Resolution: Resolving conflicts, handling complaints, and managing legal claims

4. Information Sharing and Disclosure

4.1 Service Providers

We share information with trusted third-party service providers who help us operate our business:

• Payment Processors: Stripe, PayPal, and other payment providers for secure transaction processing
• Delivery Services: Third-party delivery companies for order fulfillment and tracking
• Cloud Storage Providers: Amazon Web Services, Google Cloud for secure data storage and backup
• Email Service Providers: For sending order confirmations, newsletters, and customer communications
• Analytics Services: Google Analytics, Mixpanel for understanding user behavior and improving our services
• Customer Support Tools: Help desk software for managing customer inquiries and support tickets

4.2 Legal Requirements

We may disclose your information when required by law or to protect our rights:

• Legal Process: Responding to court orders, subpoenas, search warrants, and government requests
• Regulatory Compliance: Meeting food safety regulations, health department requirements, and tax obligations
• Rights Protection: Defending against legal claims, protecting intellectual property, and enforcing our terms of service
• Public Safety: Preventing harm to individuals or the public, addressing emergencies

4.3 Business Transfers

In the event of a merger, acquisition, or sale of business assets:

• Customer information may be transferred as part of the business assets
• We will provide advance notice to affected customers
• The new owner will be required to honor this privacy policy
• Customers will be notified of any material changes to data handling practices

4.4 With Your Consent

We may share your information for other purposes with your explicit consent, such as:

• Participating in marketing partnerships or co-branded promotions
• Sharing testimonials or reviews (with your permission)
• Joining loyalty program partnerships with other businesses

5. Data Security

5.1 Technical Security Measures

• Encryption: All data transmission uses SSL/TLS encryption to protect information in transit
• Data Storage: Personal information is stored on secure servers with advanced encryption at rest
• Access Controls: Strict access controls ensure only authorized personnel can access customer data
• Network Security: Advanced firewall systems and intrusion detection to prevent unauthorized access
• Monitoring: 24/7 security monitoring to detect and respond to potential threats
• Backup Systems: Regular, secure data backups to prevent data loss
• Security Audits: Regular penetration testing and security assessments by third-party experts

5.2 Organizational Security Measures

• Employee Training: Regular security awareness training for all staff members
• Data Handling Procedures: Strict protocols for accessing, processing, and storing personal information
• Confidentiality Agreements: All employees and contractors sign confidentiality agreements
• Incident Response Plan: Comprehensive procedures for responding to security breaches
• Regular Audits: Internal and external security audits to maintain compliance

5.3 Your Security Responsibilities

• Strong Passwords: Use unique, complex passwords for your account
• Account Security: Never share your login credentials with others
• Public Computers: Always log out when using shared or public computers
• Suspicious Activity: Report any unauthorized account access immediately
• Email Security: Be cautious of phishing emails claiming to be from us

Security Breach Notification: In the unlikely event of a data breach that affects your personal information, we will promptly notify you via email and provide details about the incident, steps we're taking to address it, and actions you can take to protect yourself. We will also notify relevant authorities as required by law.

6. Cookies and Tracking Technologies

Cookie Type	Purpose	Duration
Essential Cookies	Basic site functionality, login state, shopping cart	Session only
Functional Cookies	User preferences, language settings, location memory	Up to 1 year
Analytics Cookies	Usage analysis, performance monitoring, improvement insights	Up to 2 years
Marketing Cookies	Personalized advertising, campaign tracking, remarketing	Up to 1 year

Tracking Technologies Used:

• Google Analytics: Website traffic analysis and user behavior insights
• Facebook Pixel: Advertising effectiveness measurement and custom audience creation
• Web Beacons: Email open rate tracking and engagement measurement
• Local Storage: Browser-based data storage for improved user experience
• Session Storage: Temporary data storage during your browsing session

Cookie Management: You can control cookies through your browser settings to accept, reject, or delete cookies. Please note that disabling certain cookies may affect the functionality of our website and your ability to access certain features or services.

7. Your Rights and Choices

7.1 Right of Access

You have the right to know what personal information we have about you. You can request a copy of your data, which will include:

• Personal identification information
• Order history and preferences
• Account settings and communications
• Marketing preferences and consent records

7.2 Right to Rectification

You can request correction of any inaccurate or incomplete personal information. This includes updating:

• Contact information and addresses
• Dietary restrictions and allergies
• Account preferences and settings
• Payment information

7.3 Right to Erasure (Right to be Forgotten)

You can request deletion of your personal data, subject to certain legal and operational requirements. We may retain some information for:

• Legal compliance and record-keeping
• Fraud prevention and security
• Completing pending orders or transactions
• Resolving disputes or claims

7.4 Right to Restrict Processing

You can request that we limit how we use your personal information in certain circumstances, such as:

• While disputing the accuracy of your data
• When processing is unlawful but you don't want deletion
• When we no longer need the data but you need it for legal claims

7.5 Right to Data Portability

You can request to receive your personal data in a structured, machine-readable format, or have it transmitted directly to another service provider.

7.6 Right to Object

You can object to processing of your personal information for:

• Direct marketing purposes
• Automated decision-making
• Processing based on legitimate interests

7.7 Right Against Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing, including profiling, that significantly affects you.

Exercising Your Rights: To exercise any of these rights, please contact us using the information provided in Section 13. We will respond to your request within 30 days and may require verification of your identity to protect your privacy.

8. Children's Privacy

Our services are not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately.

If we become aware that we have collected personal information from a child under 16 without verification of parental consent, we will take immediate steps to remove that information from our servers and terminate the account.

Parents and guardians should monitor their children's online activities and educate them about not providing personal information to websites or services without permission.

9. International Data Transfers

9.1 Protection Measures

When we transfer personal information internationally, we implement appropriate safeguards including:

• Adequacy Decisions: Transfers to countries recognized by privacy authorities as providing adequate protection
• Standard Contractual Clauses: EU-approved contract terms that provide privacy protection
• Data Processing Agreements: Binding contracts with international partners requiring data protection
• Security Measures: Technical and organizational measures to protect data during transfer
• Compliance Audits: Regular assessments to ensure ongoing protection

9.2 Transfer Destinations

Your personal information may be transferred to and processed in:

• United States: Cloud storage and data processing services
• European Union: Data analytics and marketing services
• Other Countries: As necessary for service provision, always with appropriate protections

10. Data Retention Periods

Information Type	Retention Period	Reason for Retention
Account Information	6 months after account deletion	Legal obligations, dispute resolution
Purchase History	7 years	Tax and accounting requirements
Marketing Consent	3 months after withdrawal	Consent record keeping
Website Usage Logs	Up to 2 years	Security monitoring, analytics
Customer Support Records	3 years	Service quality improvement
Dietary Information	Until account deletion	Service personalization, safety

Safe Data Disposal

When retention periods expire, we ensure secure deletion of your data:

• Electronic Data: Complete deletion using secure wiping methods that make data unrecoverable
• Physical Records: Secure shredding and destruction of paper documents
• Backup Systems: Removal of data from all backup and archive systems
• Third Parties: Ensuring service providers also delete data according to our agreements
• Documentation: Maintaining records of data disposal for compliance purposes

11. Third-Party Links and Services

Our website and services may contain links to third-party websites, social media platforms, or other services that are not operated by us. This includes:

• Social media integration and sharing buttons
• Payment processor websites
• Partner restaurant or delivery service sites
• Review platforms and food delivery apps
• Advertising and marketing partner sites

Important: We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. We strongly advise you to review the privacy policies of any third-party sites you visit before providing any personal information.

When you click on external links or use third-party services integrated into our platform, your interactions are governed by their respective privacy policies, not ours.

12. Policy Changes and Updates

12.1 Change Notification Process

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. When we make changes, we will notify you through:

• Website Notice: Prominent banner notification on our homepage
• Email Notification: Direct email to registered users explaining the changes
• Account Notifications: In-app or account dashboard alerts
• Social Media: Posts on our official social media channels

12.2 Significant Changes

For material changes that significantly affect how we use your personal information, we will:

• Provide at least 30 days' advance notice
• Request explicit consent where required by law
• Offer options to opt-out of new practices
• Provide clear explanations of the changes and their impact

12.3 Staying Informed

To stay informed about privacy policy changes:

• Check the "Last Updated" date at the top of this policy
• Review your email for policy update notifications
• Visit our website regularly for the most current version
• Contact us if you have questions about any changes

Continued Use: Your continued use of our services after policy changes constitutes acceptance of the updated terms, unless you indicate otherwise by contacting us or discontinuing use of our services.

13. Contact Information and Support

13.1 Data Protection Complaints

If you have concerns about how we handle your personal information, please contact us first so we can work to resolve the issue. If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority:

• Canada: Office of the Privacy Commissioner of Canada - [email protected]
• European Union: Your local Data Protection Authority
• United States: Federal Trade Commission - www.ftc.gov

14. Withdrawal of Consent

14.1 Marketing Consent Withdrawal

You can withdraw consent for marketing communications at any time through:

• Email Unsubscribe: Click the unsubscribe link in any marketing email
• Account Settings: Update your communication preferences in your account dashboard
• Customer Support: Contact our support team to opt-out of all marketing
• Phone: Call us during business hours to update your preferences

14.2 Account Deletion Process

To delete your account and associated data:

1. Log into your account and visit the account settings page
2. Select "Delete Account" and follow the confirmation prompts
3. Alternatively, contact customer support for assistance
4. We will process your request within 30 days
5. You will receive confirmation once deletion is complete

Important Note: Some information may be retained for legal compliance, fraud prevention, or legitimate business purposes as outlined in our retention policy.

15. Conclusion

At Slim Chickens, protecting your privacy is not just a legal obligation—it's fundamental to the trust relationship we build with every customer. We understand that when you share your personal information with us, from your favorite orders to your dietary restrictions, you're trusting us to handle that information responsibly.

We are committed to:

• Maintaining the highest standards of data protection and security
• Being transparent about our data practices and policies
• Giving you control over your personal information
• Continuously improving our privacy practices
• Respecting your rights and choices regarding your data

This trust relationship is essential to our business, and we work every day to earn and maintain it. If you have any questions, concerns, or suggestions about this Privacy Policy or our privacy practices, please don't hesitate to contact us. We value your feedback and are always looking for ways to better protect your privacy while providing you with exceptional food and service.

Thank you for choosing Slim Chickens and for trusting us with your personal information. We look forward to continuing to serve you while keeping your privacy and data security as our top priorities.