Privacy Policy

This Privacy Policy describes how Wings Over ("we," "us," "our," or "the Company") collects, uses, discloses, and protects your personal information when you visit our website at wingsovereat.rest, place orders, use our services, or otherwise interact with us. Please read this policy carefully to understand our practices regarding your personal data and how we treat it.

By accessing or using our website and services, you acknowledge that you have read, understood, and agree to the collection and use of your information in accordance with this Privacy Policy. If you do not agree with the terms outlined here, please discontinue use of our website and services immediately.

We are committed to protecting your privacy in accordance with applicable United States federal and state privacy laws, including but not limited to the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), and other applicable consumer protection regulations.

1. About Us

Wings Over is a food service business operating in the United States. We operate our online presence through the website wingsovereat.rest, where customers can browse our menu, place orders, and access information about our offerings.

For all privacy-related inquiries, requests, or concerns, please contact us using the information provided in the Contact Us section at the end of this policy.

2. Information We Collect

We collect various types of information in connection with your interactions with our website and services. The categories of personal information we collect are described below.

2.1 Personal Information You Provide Directly

When you interact with our website or services, you may voluntarily provide us with personal information, including:

• Identification Information: Your full name, username, and similar identifiers.
• Contact Information: Email address, phone number, and physical delivery or billing address.
• Account Information: Username, password, and account preferences when you create an account on our platform.
• Order Information: Details about the food items you order, special dietary preferences or instructions, order history, and delivery preferences.
• Payment Information: Credit card numbers, debit card details, billing address, and other payment-related information. Please note that payment card data is processed through secure third-party payment processors and we do not store full payment card numbers on our servers.
• Communications: Messages, feedback, reviews, complaints, or other content you submit to us via contact forms, email, or other communication channels.
• Marketing Preferences: Your preferences regarding receiving promotional communications from us.

2.2 Information Collected Automatically

When you visit our website, we automatically collect certain technical and usage information, including:

• Device Information: Device type, operating system, browser type and version, screen resolution, and unique device identifiers.
• Log Data: IP address, browser type, pages visited, time and date of your visit, time spent on pages, referring URLs, and other browsing activity.
• Usage Data: Information about how you navigate and interact with our website, including the links you click, the products you view, and actions you take on our platform.
• Location Data: General geographic location derived from your IP address. We may also request more precise location data with your explicit consent to assist with delivery services.
• Cookie and Tracking Data: Information collected through cookies, pixel tags, web beacons, and similar tracking technologies. For more detailed information, please refer to our Cookie section below.

2.3 Information From Third Parties

We may also receive information about you from third-party sources, including:

• Social Media Platforms: If you connect your social media account or log in using a social media service, we may receive information from that platform in accordance with your privacy settings on that service.
• Delivery Partners: Third-party delivery services we partner with may share information about your orders and delivery preferences.
• Analytics Providers: Third-party analytics services may provide us with aggregated or de-identified insights about website usage.
• Marketing Partners: We may receive information about you from our advertising and marketing partners to help us reach you with relevant promotions.
• Payment Processors: Our payment processing partners may share transaction confirmation and fraud prevention information with us.

3. How We Use Your Information

We use the personal information we collect for various legitimate purposes related to operating our food service business and improving your experience. The specific purposes include:

3.1 Service Provision and Order Fulfillment

• Processing and fulfilling your food orders, including coordinating delivery or pickup arrangements.
• Managing your account and providing access to your order history and preferences.
• Processing payments and preventing fraudulent transactions.
• Communicating with you about your orders, including order confirmations, status updates, and delivery notifications.
• Providing customer support and responding to your inquiries and complaints.

3.2 Business Operations and Improvement

• Improving and optimizing our website, menu offerings, and overall service quality.
• Conducting internal research and analytics to understand customer preferences and behavior.
• Monitoring and ensuring the security and integrity of our platform.
• Preventing fraud, unauthorized access, and other illegal activities.
• Complying with legal obligations and enforcing our terms of service.

3.3 Analytics and Performance Measurement

• Analyzing website traffic patterns, user engagement, and performance metrics.
• Measuring the effectiveness of our marketing campaigns and promotions.
• Understanding demographic trends to better serve our customers.
• Developing new features, products, and services based on customer behavior data.

3.4 Marketing and Communications

• Sending you promotional offers, discounts, and special deals relevant to our food services, where you have consented or where we have a legitimate interest to do so.
• Personalizing your experience on our website, including displaying targeted content and offers.
• Sending newsletters, updates about new menu items, and other marketing communications.
• Retargeting you with relevant advertisements on third-party platforms.

3.5 Legal and Compliance Purposes

• Complying with applicable laws, regulations, and legal processes.
• Responding to requests from law enforcement and government authorities.
• Protecting and defending our legal rights and interests.
• Enforcing our Terms of Service and other agreements.

4. Sharing Your Information With Third Parties

We do not sell, rent, or trade your personal information to unaffiliated third parties for their own independent marketing purposes. However, we may share your information with certain categories of third parties in the following circumstances:

4.1 Service Providers and Business Partners

We work with trusted third-party service providers who assist us in operating our business. These may include:

• Payment Processors: To securely process credit card and other payment transactions.
• Delivery Partners: Third-party delivery companies or drivers who fulfill your orders.
• Cloud Hosting Providers: Companies that host our website and store our data securely.
• Analytics Providers: Services such as Google Analytics that help us understand website usage.
• Email and Communication Platforms: Tools we use to send order confirmations, promotional emails, and customer service communications.
• Customer Support Tools: Platforms we use to manage customer inquiries and support tickets.
• Marketing and Advertising Platforms: Third parties that assist with digital advertising and remarketing.

All third-party service providers are required to handle your information in compliance with applicable privacy laws and are only permitted to use your data for the specific purposes for which it was shared.

4.2 Legal Requirements and Law Enforcement

We may disclose your personal information when we believe in good faith that such disclosure is necessary to:

• Comply with a legal obligation, court order, subpoena, or government request.
• Protect and defend our rights, property, or safety, or that of our customers or the public.
• Prevent or investigate possible fraud, illegal activities, or violations of our Terms of Service.
• Respond to an emergency that threatens the safety of any person.

4.3 Business Transfers

In the event of a merger, acquisition, sale of all or part of our assets, reorganization, or bankruptcy, your personal information may be transferred as part of that transaction. We will notify you via email or a prominent notice on our website before your personal information is transferred and becomes subject to a different privacy policy.

4.4 With Your Consent

We may share your personal information with other third parties when we have obtained your explicit consent to do so.

5. Cookies and Tracking Technologies

Our website uses cookies, web beacons, pixel tags, and similar tracking technologies to enhance your browsing experience, analyze website traffic, and support our marketing activities.

5.1 Types of Cookies We Use

• Essential Cookies: Necessary for the website to function properly. These cannot be disabled.
• Performance and Analytics Cookies: Help us understand how visitors interact with our website by collecting anonymous usage statistics.
• Functional Cookies: Allow our website to remember your preferences and settings, such as your location for delivery purposes.
• Marketing and Targeting Cookies: Used to deliver relevant advertisements and measure the effectiveness of marketing campaigns.

5.2 Managing Your Cookie Preferences

You can manage your cookie preferences through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or be notified when a new cookie is set. Please note that disabling certain cookies may affect the functionality of our website. For full details on our cookie practices, please refer to our dedicated Cookie Policy, which can be found on our website at wingsovereat.rest.

6. Data Security

We take the security of your personal information seriously and implement appropriate technical, administrative, and physical safeguards to protect your data from unauthorized access, loss, misuse, alteration, or destruction.

6.1 Security Measures We Employ

• Encryption: We use industry-standard SSL/TLS encryption to protect data transmitted between your browser and our servers.
• Secure Payment Processing: All payment transactions are processed through PCI-DSS compliant payment processors. We do not store sensitive payment card information on our servers.
• Access Controls: Access to your personal information is restricted to authorized employees and contractors who need it to perform their job functions. These individuals are bound by confidentiality obligations.
• Regular Security Assessments: We conduct periodic security reviews and vulnerability assessments to identify and address potential security risks.
• Data Minimization: We collect only the information necessary for the purposes described in this policy.
• Incident Response: We have procedures in place to detect, report, and investigate data breaches and security incidents.

6.2 Data Breach Notification

In the event of a data breach that affects your personal information, we will notify you and the appropriate regulatory authorities as required by applicable law, including the notification requirements established under the FTC Act and any applicable state breach notification laws. Notifications will be made in a timely manner and will include information about the nature of the breach and steps you can take to protect yourself.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

7.1 Retention Guidelines

When personal information is no longer required for the purposes for which it was collected, we securely delete or anonymize it in accordance with our data retention procedures.

8. Your Privacy Rights

Depending on your state of residence within the United States, you may have certain rights regarding your personal information. We are committed to honoring these rights as required by applicable law.

8.1 Rights Under California Law (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the purposes for collecting it, and the categories of third parties with whom we share it.
• Right to Delete: You have the right to request that we delete personal information we have collected from you, subject to certain exceptions.
• Right to Correct: You have the right to request that we correct inaccurate personal information that we maintain about you.
• Right to Opt-Out of Sale or Sharing: You have the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising purposes.
• Right to Limit Use of Sensitive Personal Information: You have the right to limit the use and disclosure of sensitive personal information to only what is necessary to provide the requested services.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. This means we will not deny you services, charge different prices, or provide a different level of service because you exercised your privacy rights.

8.2 General Privacy Rights for All Users

Regardless of your state of residence, we offer the following privacy rights to all our users where technically and legally feasible:

• Right of Access: You may request a copy of the personal information we hold about you.
• Right to Correction: You may request that we update or correct inaccurate or incomplete personal information.
• Right to Deletion: You may request that we delete your personal information, subject to certain legal exceptions.
• Right to Data Portability: Where technically feasible, you may request that we provide your personal information in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Where we rely on your consent to process personal information, you may withdraw that consent at any time.
• Right to Opt-Out of Marketing: You may opt out of receiving marketing communications from us at any time.

8.3 How to Exercise Your Rights

To exercise any of the rights described above, please submit a verifiable request to us by:

• Email: [email protected]
• Website: wingsovereat.rest (via our contact form)

When submitting your request, please provide sufficient information to allow us to verify your identity and locate your records. We will respond to verifiable consumer requests within 45 days of receipt, as required by applicable law. In complex cases, we may extend this period by an additional 45 days, in which case we will notify you of the extension.

You may designate an authorized agent to make a request on your behalf. We may require verification of both the agent's authorization and your identity before processing such requests.

9. Children's Privacy

We do not knowingly collect personal information from children under the age of 18. Our food ordering services, including the creation of accounts and online transactions, are restricted to adults who are at least 18 years old. We do not direct our marketing activities toward minors.

If we become aware that we have inadvertently collected personal information from a child under 18 years of age, we will take immediate steps to delete such information from our records. If you believe that we may have collected information from a minor, please contact us immediately at [email protected].

We comply with the Children's Online Privacy Protection Act (COPPA), which prohibits the collection of personal information from children under the age of 13 without verifiable parental consent. Our services are not directed to children under 13, and we do not knowingly collect any information from this age group.

10. International Data Transfers

Wings Over is based in the United States and primarily operates within the United States. Your personal information is collected and processed in the United States, where data protection laws may differ from those in other countries.

If you are accessing our website from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States. By using our website and services, you consent to the transfer of your information to the United States and acknowledge that such transfers are governed by this Privacy Policy and applicable U.S. law.

If we engage service providers located outside the United States, we take appropriate contractual and technical safeguards to ensure that your personal information is adequately protected in accordance with applicable U.S. privacy laws and any other applicable international regulations.

11. Third-Party Websites and Links

Our website may contain links to third-party websites, applications, or services that are not owned or operated by Wings Over. This Privacy Policy does not apply to those third-party sites or services. We are not responsible for the privacy practices or content of any third-party websites.

We encourage you to review the privacy policies of any third-party websites you visit before providing any personal information. The inclusion of a link on our website does not constitute an endorsement of that third party's privacy practices.

12. Social Media and Online Reviews

If you interact with us through social media platforms (such as Facebook, Instagram, Twitter/X, or others), please be aware that those platforms have their own privacy policies that govern how they collect and use your information. Any information you share publicly on social media or review platforms may be visible to other users and is not protected by this Privacy Policy.

When you leave reviews or comments about our food and services on third-party platforms, that information is subject to those platforms' terms and privacy policies. We may reference or respond to public reviews and comments about our business in accordance with our legitimate business interests.

13. Do Not Track Signals

Some browsers have a "Do Not Track" (DNT) feature that signals to websites that you do not want your online activity tracked. Our website does not currently respond to DNT signals in a standardized manner because there is no agreed-upon standard for how websites should respond to such signals. However, you can manage your tracking preferences through your browser settings and our cookie management tools as described in the Cookies section of this policy.

14. California Shine the Light Law

California Civil Code Section 1798.83, also known as the "Shine the Light" law, permits California residents to request and obtain from businesses that disclose personal information to third parties for direct marketing purposes, a list of the categories of personal information disclosed and the identities of those third parties during the preceding calendar year.

If you are a California resident and wish to make such a request, please contact us at [email protected] with "California Shine the Light Request" in the subject line.

15. How to File a Complaint

If you believe that we have not handled your personal information in accordance with this Privacy Policy or applicable privacy laws, we encourage you to first contact us directly so that we can attempt to resolve your concern.

15.1 Contact Us First

Please reach out to us at [email protected] with the subject line "Privacy Complaint" and provide a detailed description of your concern. We will investigate your complaint and respond within a reasonable timeframe.

15.2 Filing a Complaint With Regulatory Authorities

If you are not satisfied with our response, or if you believe we are processing your personal information in violation of applicable law, you have the right to file a complaint with the relevant regulatory authority:

• Federal Trade Commission (FTC): The FTC is the primary federal consumer protection agency in the United States. You may file a complaint at:
  Website: www.ftc.gov/complaint
  Phone: 1-877-FTC-HELP (1-877-382-4357)
• California Privacy Protection Agency (CPPA): If you are a California resident with concerns related to CCPA/CPRA compliance:
  Website: cppa.ca.gov
• State Attorney General: You may also file a complaint with the Attorney General of your state, many of whom have consumer protection and privacy enforcement divisions.
• Better Business Bureau (BBB): You may submit a complaint through the Better Business Bureau at:
  Website: www.bbb.org

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business practices, legal requirements, or technological developments. When we make material changes to this policy, we will notify you by:

• Posting the updated Privacy Policy on our website at wingsovereat.rest with a revised "Last Updated" date.
• Sending a notification to the email address associated with your account, if applicable.
• Displaying a prominent notice on our website for a reasonable period following the update.

We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use, and protect your personal information. Your continued use of our website and services after any changes to this policy constitutes your acceptance of the updated terms.

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please do not hesitate to contact us using the details below:

When contacting us about a privacy matter, please include "Privacy Request" or "Privacy Inquiry" in the subject line of your email to ensure that your message is directed to our privacy team promptly. We will respond to your inquiry as quickly as possible and within the timeframes required by applicable law.