Privacy Policy

1. Introduction

At Slim Chickens ("we," "our," or "us"), we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website slimchickens.digital, use our mobile application, order food, or interact with our services.

This policy applies to all information collected by Slim Chickens through our website, mobile applications, in-store visits, phone orders, delivery services, catering services, and any other means of interaction with our brand. By using our services, creating an account, placing an order, or providing us with your information, you agree to the collection and use of information in accordance with this policy.

Important Note: We never sell your personal data to third parties. Your trust is paramount to us, and we are committed to maintaining the highest standards of data protection and privacy.

2. Information We Collect

2.1 Information You Provide to Us

We collect information that you voluntarily provide to us when you:

• Create an Account: Name, email address, phone number, date of birth, username, and password
• Place Orders: Delivery address, billing information, payment details (stored securely), order history, and delivery preferences
• Food Preferences: Dietary restrictions, allergen information, favorite menu items, special dietary requirements (vegan, vegetarian, halal, kosher, gluten-free), spice preferences, and customization requests
• Loyalty Program: Participation in rewards programs, points earned, redemption history, and promotional preferences
• Reservations & Catering: Table reservation details, party size, special occasions, catering event information, guest count, venue details, and event requirements
• Communications: Contact form submissions, customer service inquiries, feedback, reviews, survey responses, and marketing communication preferences
• Payment Information: Credit card details, billing address, and payment preferences (processed securely through encrypted payment processors)

2.2 Information We Collect Automatically

When you access our services, we may automatically collect certain information:

• Device Information: IP address, browser type and version, operating system, device type, mobile device identifiers, and hardware information
• Usage Data: Pages visited, time spent on pages, click patterns, navigation paths, search queries, features used, and interaction with our content
• Location Information: Approximate location derived from IP address, GPS location (with permission) for delivery services, and store location preferences
• Cookie Data: Session IDs, user preferences, login status, shopping cart contents, and website analytics data
• Performance Data: Page load times, error messages, and technical performance metrics

2.3 Information from Third Parties

We may receive information about you from third-party sources:

• Social Media: Profile information when you connect social media accounts to our services
• Payment Processors: Transaction confirmations and payment verification data
• Delivery Partners: Delivery status updates and location tracking for order fulfillment
• Marketing Partners: Demographic information and marketing effectiveness data (anonymized)
• Public Sources: Information from publicly available sources to verify identity and prevent fraud

3. How We Use Your Information

3.1 Service Provision

We use your information to provide and improve our food services:

• Order Processing: Managing orders from placement to delivery, coordinating with kitchen staff, tracking preparation status, and ensuring accurate delivery
• Payment Processing: Securing transactions, processing payments, issuing receipts, and managing refunds
• Account Management: Creating and maintaining user accounts, authentication, password resets, and profile management
• Personalization: Customizing menu recommendations based on dietary preferences, suggesting reorder options, and remembering favorite items
• Quality Assurance: Monitoring service quality, food preparation standards, and delivery performance

3.2 Communication

We communicate with you to enhance your experience:

• Order Updates: Confirmation messages, preparation status, delivery tracking, and completion notifications
• Customer Support: Responding to inquiries, resolving issues, processing complaints, and providing assistance
• Account Notifications: Security alerts, password changes, account updates, and important policy changes
• Marketing Communications: Promotional offers, new menu items, special events, loyalty program updates (only with your consent)
• Feedback Requests: Service satisfaction surveys and review invitations

3.3 Marketing and Analytics

We analyze data to improve our services and marketing:

• Personalized Advertising: Targeted promotions based on order history and preferences
• Usage Analytics: Understanding customer behavior, popular menu items, peak ordering times, and service optimization
• Campaign Measurement: Evaluating marketing effectiveness and return on investment
• Market Research: Developing new menu items, improving existing offerings, and expanding services
• Trend Analysis: Identifying food trends, seasonal preferences, and customer needs

3.4 Legal Compliance and Security

We process information to meet legal obligations and maintain security:

• Legal Compliance: Responding to legal requests, court orders, and regulatory requirements
• Fraud Prevention: Detecting suspicious activity, preventing unauthorized access, and protecting against fraudulent orders
• Safety Protection: Ensuring customer and employee safety, investigating incidents, and maintaining secure operations
• Dispute Resolution: Resolving conflicts, processing complaints, and handling legal matters

4. Information Sharing and Disclosure

4.1 Service Providers

We share information with trusted third-party service providers who assist in our operations:

• Payment Processors: Stripe, PayPal, and other payment gateways for secure transaction processing
• Delivery Services: Third-party delivery partners for order fulfillment and tracking
• Cloud Storage: Secure data hosting and backup services with industry-standard encryption
• Marketing Services: Email marketing platforms, SMS services, and advertising networks (with anonymized data)
• Analytics Tools: Google Analytics, Facebook Pixel, and other platforms for usage analysis and performance measurement
• Customer Support: Help desk software and communication platforms for customer service

4.2 Legal Requirements

We may disclose information when required by law or to protect our rights:

• Legal Process: Court orders, subpoenas, search warrants, and government requests
• Regulatory Compliance: Food safety regulations, health department requirements, and tax obligations
• Rights Protection: Defending our legal rights, protecting intellectual property, and enforcing terms of service
• Public Safety: Responding to emergencies, preventing harm, and cooperating with law enforcement

4.3 Business Transfers

In the event of a business transaction:

• Mergers and Acquisitions: Information may be transferred to new owners
• Asset Sales: Data may be included in business asset transfers
• Customer Notification: We will notify you before your information is transferred
• Policy Compliance: New owners must comply with this privacy policy or provide notice of changes

4.4 With Your Consent

We may share information for other purposes with your explicit consent, such as:

• Sharing reviews or testimonials publicly
• Participating in marketing campaigns or contests
• Connecting with social media platforms
• Third-party integrations you specifically request

5. Data Security

5.1 Technical Security Measures

We implement comprehensive technical safeguards to protect your information:

• Encryption: SSL/TLS encryption for all data transmission, AES-256 encryption for stored data, and encrypted database connections
• Firewall Protection: Advanced firewall systems to block unauthorized access and prevent cyber attacks
• Access Controls: Multi-factor authentication, role-based access permissions, and regular access reviews
• Monitoring: 24/7 security monitoring, intrusion detection systems, and automated threat response
• Data Backup: Regular encrypted backups stored in secure, geographically distributed locations
• Secure Infrastructure: ISO 27001 certified data centers with physical security controls

5.2 Organizational Security Measures

Our organizational practices ensure data protection:

• Employee Training: Regular security awareness training and data protection education
• Data Handling Procedures: Documented processes for collecting, storing, processing, and deleting personal data
• Confidentiality Agreements: All employees and contractors sign strict confidentiality agreements
• Incident Response: Comprehensive plan for responding to security incidents and data breaches
• Regular Audits: Internal and external security assessments, vulnerability testing, and compliance reviews
• Privacy by Design: Incorporating privacy protections into all new systems and processes

5.3 Your Security Responsibilities

You can help protect your information by:

• Strong Passwords: Use complex passwords with a mix of letters, numbers, and symbols
• Password Protection: Never share your login credentials with others
• Secure Logout: Always log out when using public or shared computers
• Phishing Awareness: Be cautious of suspicious emails or links claiming to be from us
• Account Monitoring: Regularly review your account activity and report suspicious behavior
• Software Updates: Keep your devices and browsers updated with the latest security patches

Security Breach Notification: In the unlikely event of a security breach that affects your personal information, we will promptly notify you via email and provide details about the incident, potential risks, and steps we're taking to address the issue. We will also notify relevant authorities as required by law.

6. Cookies and Tracking Technologies

We use various tracking technologies to enhance your experience and analyze usage patterns:

Cookie Type	Purpose	Duration
Essential Cookies	Basic site functions, login state, shopping cart	Session
Functional Cookies	User preferences, language settings, location	Up to 1 year
Analytics Cookies	Usage analysis, performance monitoring	Up to 2 years
Marketing Cookies	Personalized advertising, campaign tracking	Up to 1 year

Tracking Technologies We Use:

• Google Analytics: Website traffic analysis and user behavior tracking
• Facebook Pixel: Advertising effectiveness measurement and retargeting
• Web Beacons: Email open rates and engagement tracking
• Local Storage: Browser-based data storage for improved performance
• Session Storage: Temporary data storage during your visit

Cookie Management: You can control cookies through your browser settings. Most browsers allow you to accept, reject, or delete cookies. However, disabling certain cookies may affect website functionality, such as keeping you logged in or remembering your preferences.

7. Your Rights and Choices

We respect your privacy rights and provide you with control over your personal information. Depending on your location, you may have the following rights under applicable laws including GDPR and CCPA:

7.1 Right of Access

You have the right to request access to the personal information we hold about you, including:

• Categories of personal information collected
• Sources of information collection
• Purposes for processing your information
• Third parties with whom we share your information
• Specific pieces of personal information collected

7.2 Right to Rectification

You can request correction of inaccurate or incomplete personal information, including:

• Updating contact information
• Correcting order history details
• Modifying dietary preferences
• Fixing account information errors

7.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal information when:

• Information is no longer necessary for original purposes
• You withdraw consent and no other legal basis exists
• Information has been unlawfully processed
• Deletion is required for legal compliance

7.4 Right to Restrict Processing

You can request to limit how we use your personal information when:

• Accuracy of information is contested
• Processing is unlawful but you prefer restriction over deletion
• We no longer need the information but you need it for legal claims
• You object to processing pending verification of legitimate grounds

7.5 Right to Data Portability

You can receive your personal information in a machine-readable format and transmit it to another service provider, including:

• Account information export
• Order history download
• Preference settings backup
• Contact information transfer

7.6 Right to Object

You can object to processing of your personal information for:

• Direct marketing purposes (including profiling)
• Processing based on legitimate interests
• Scientific or historical research
• Statistical purposes

7.7 Right Against Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing that significantly affects you, including:

• Automated credit scoring
• Algorithmic pricing decisions
• Automated customer service responses
• Profiling for marketing purposes

How to Exercise Your Rights: To exercise any of these rights, contact us using the information provided in Section 13. We will respond to your request within 30 days and may ask for verification of your identity to protect your privacy. There is no charge for most requests, but we may charge a reasonable fee for excessive or repetitive requests.

8. Children's Privacy

Protecting children's privacy is extremely important to us. Our services are not intended for children under the age of 16, and we do not knowingly collect personal information from children under 16 years of age.

If you are a parent or guardian and believe that your child under 16 has provided us with personal information, please contact us immediately using the contact information provided below. We will promptly investigate and delete such information from our systems.

If we learn that we have collected personal information from a child under 16 without proper parental consent, we will delete that information as quickly as possible. We may also take additional steps to verify parental identity before discussing any information about a child.

Parents and guardians have the right to review, delete, or refuse further collection of their child's personal information. We encourage parents to educate their children about online privacy and to monitor their children's online activities.

9. International Data Transfers

As a business operating in the United States with international partners and service providers, we may transfer your personal information to countries outside your jurisdiction. We implement appropriate safeguards to ensure your information receives adequate protection.

9.1 Protection Measures

• Adequacy Decisions: Transfers to countries recognized by the EU Commission as providing adequate protection
• Standard Contractual Clauses (SCCs): EU-approved contractual terms ensuring GDPR-level protection
• Data Processing Agreements: Binding contracts with third parties requiring privacy protection
• Certification Programs: Transfers under recognized certification schemes like Privacy Shield successors
• Regular Compliance Audits: Ongoing verification of protection measures and compliance

9.2 Transfer Destinations

Your information may be transferred to and processed in:

• United States: Primary data processing and cloud storage
• European Union: Analytics and marketing services
• Canada: Customer support services
• Other Countries: As needed for business operations, always with appropriate safeguards

Before transferring your information internationally, we assess the privacy laws and practices of the destination country and implement additional protections where necessary.

10. Data Retention

We retain your personal information only as long as necessary for the purposes outlined in this policy or as required by law. Our retention periods are based on business needs, legal requirements, and your preferences.

Information Type	Retention Period	Reason
Account Information	6 months after account deletion	Legal obligations, dispute resolution
Order History	7 years	Tax and accounting requirements
Payment Information	As long as legally required	Financial regulations, fraud prevention
Marketing Consent	3 months after withdrawal	Consent record keeping
Website Usage Logs	Up to 2 years	Security monitoring, analytics
Customer Support Records	3 years	Service quality improvement
Security Incident Logs	7 years	Legal requirements, security analysis

Safe Data Disposal

When retention periods expire, we securely dispose of your information:

• Electronic Data: Complete deletion using industry-standard methods that make recovery impossible
• Physical Records: Secure shredding and incineration
• Backup Systems: Systematic deletion from all backup locations
• Third-Party Services: Ensuring service providers also delete data
• Documentation: Maintaining records of disposal for compliance purposes

11. Third-Party Links and Services

Our website and services may contain links to third-party websites, applications, or services that are not owned or controlled by Slim Chickens. This privacy policy does not apply to these external sites or services.

We are not responsible for the privacy practices or content of third-party websites. These sites may have their own privacy policies and terms of service, which we encourage you to review before providing any personal information.

Examples of third-party services you may encounter:

• Social media platforms (Facebook, Instagram, Twitter)
• Payment processors (PayPal, Stripe)
• Delivery tracking services
• Review and rating platforms
• Partner restaurant websites
• Advertising networks

When you click on third-party links or use integrated services, you leave our website and are subject to the privacy practices of those third parties. We recommend reading their privacy policies to understand how they collect, use, and protect your information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, legal requirements, or for other operational, legal, or regulatory reasons.

12.1 How We Notify You of Changes

We will inform you of any changes through:

• Website Notice: Prominent notification on our homepage and privacy policy page
• Email Notification: Direct email to registered users explaining key changes
• App Notifications: In-app messages for mobile application users
• Account Dashboard: Notifications in your account settings
• Pop-up Notices: One-time notifications when you log in

12.2 Significant Changes

For material changes that significantly affect your rights or how we use your information, we will:

• Provide at least 30 days advance notice
• Clearly explain what has changed and why
• Request your explicit consent where required by law
• Offer options to opt-out or delete your account if you disagree

12.3 Staying Informed

To stay informed about policy changes:

• Check the "Last Updated" date at the top of this policy
• Review our website regularly for notices
• Ensure your contact information is up to date
• Subscribe to our privacy policy updates (if available)

Your continued use of our services after we publish changes constitutes your acceptance of the updated Privacy Policy. If you do not agree with any changes, please stop using our services and contact us to delete your account.

13. Contact Information

14. Withdrawal of Consent

Where we process your personal information based on your consent, you have the right to withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of processing based on consent before withdrawal.

14.1 Marketing Consent Withdrawal

You can stop receiving marketing communications by:

• Unsubscribe Links: Click the unsubscribe link in any marketing email
• Account Settings: Update your communication preferences in your account dashboard
• Customer Support: Contact our support team to opt out of marketing communications
• SMS Opt-out: Reply "STOP" to any marketing text message
• Phone Preferences: Request to be added to our do-not-call list

14.2 Cookie Consent Withdrawal

You can manage cookie preferences through:

• Our cookie banner settings
• Browser cookie management tools
• Third-party opt-out tools for advertising cookies
• Privacy settings in your account

14.3 Account Deletion Process

To delete your account and personal information:

1. Account Settings: Log into your account and navigate to "Delete Account"
2. Confirmation: Confirm your identity and deletion request
3. Grace Period: We provide a 30-day grace period during which you can recover your account
4. Final Deletion: After the grace period, we permanently delete your account and associated data
5. Retained Data: Some information may be retained for legal compliance, such as transaction records for tax purposes

Note: Deleting your account will result in the loss of order history, loyalty points, saved preferences, and other account benefits. This action cannot be undone after the grace period expires.

15. Conclusion

At Slim Chickens, we are committed to protecting your privacy and maintaining your trust. This Privacy Policy reflects our dedication to transparency, data protection, and respecting your rights as our valued customer.

We understand that privacy is not just about compliance with laws and regulations—it's about building lasting relationships based on trust and respect. Every day, we work to ensure that your personal information is handled with the utmost care and security.

Our privacy practices are continuously evolving to meet new challenges and incorporate the latest privacy technologies and best practices. We regularly review and update our processes to ensure we're providing you with the highest level of protection.

We believe that you should have control over your personal information, and we're committed to providing you with the tools and transparency you need to make informed decisions about your privacy. Whether you're ordering your favorite meal, joining our loyalty program, or simply browsing our menu, you can trust that we're protecting your information every step of the way.

If you have any questions, concerns, or suggestions about this Privacy Policy or our privacy practices, please don't hesitate to contact us. We value your feedback and are always looking for ways to improve our privacy protections.

Thank you for choosing Slim Chickens and for trusting us with your personal information. We look forward to continuing to serve you delicious food while protecting your privacy.

Remember to check this page periodically for updates. The "Last Updated" date at the top of this policy indicates when it was most recently revised.