Privacy Policy

1. Introduction

Welcome to WingSnob ("we," "our," or "us"). We are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website wings-snobs.rest, use our mobile application, or interact with our food delivery services.

This policy applies to all information collected through our digital platforms, including when you place orders, create accounts, subscribe to newsletters, or engage with our customer service team. By accessing or using our services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

If you do not agree with the terms of this Privacy Policy, please do not access or use our services. We reserve the right to make changes to this policy at any time and will notify you of any significant updates.

2. Information We Collect

2.1 Information You Provide Directly

• Personal Identification Information: Name, email address, phone number, delivery address, billing address
• Account Information: Username, password, profile picture, account preferences
• Order History: Food items ordered, quantities, special instructions, delivery preferences
• Dietary Information: Food allergies, dietary restrictions (vegan, vegetarian, gluten-free, halal, kosher), nutritional preferences
• Payment Information: Credit card details, billing address, payment method preferences (stored securely through encrypted payment processors)
• Communication Records: Customer service interactions, reviews, feedback, survey responses
• Loyalty Program Data: Rewards points, membership tier, favorite orders, special offers
• Catering Information: Event details, guest count, special requirements, corporate account information
• Table Reservations: Party size, preferred seating, special occasions, accessibility needs
• Marketing Preferences: Newsletter subscriptions, promotional email preferences, communication frequency settings

2.2 Information Collected Automatically

• Device Information: IP address, browser type and version, operating system, device identifiers
• Usage Data: Pages visited, time spent on pages, click patterns, search queries, order completion rates
• Location Data: Approximate location based on IP address, precise location (with permission) for delivery purposes
• Cookie Data: Session identifiers, user preferences, shopping cart contents, login status
• Performance Data: Page load times, error reports, application crashes, feature usage statistics

2.3 Information from Third Parties

• Social Media Integration: Profile information when you connect social media accounts (Facebook, Google, Apple)
• Payment Processors: Transaction verification, fraud prevention data, payment success/failure notifications
• Delivery Partners: Delivery status updates, driver location, delivery confirmation
• Marketing Partners: Campaign performance data, advertising effectiveness metrics
• Review Platforms: Public reviews and ratings you post about our services

3. How We Use Your Information

3.1 Service Provision

• Order Processing: Fulfilling your food orders, coordinating with kitchen staff, managing inventory
• Delivery Services: Coordinating delivery routes, tracking orders, communicating with delivery personnel
• Account Management: Creating and maintaining user accounts, authentication, password resets
• Customer Support: Responding to inquiries, resolving issues, processing refunds and exchanges
• Quality Improvement: Analyzing service performance, identifying areas for enhancement, menu optimization
• Dietary Accommodation: Ensuring food safety for customers with allergies, preparing meals according to dietary preferences

3.2 Communication

• Order Updates: Confirmation emails, preparation status, delivery tracking, completion notifications
• Customer Service: Responding to support requests, follow-up communications, satisfaction surveys
• Important Notices: Service changes, policy updates, security alerts, system maintenance notifications
• Marketing Communications: Promotional offers, new menu items, seasonal specials (only with your consent)
• Loyalty Programs: Points balance updates, tier status changes, exclusive member offers

3.3 Marketing and Analytics

• Personalization: Customized menu recommendations, targeted promotions, personalized user experience
• Traffic Analysis: Website performance monitoring, user behavior analysis, conversion rate optimization
• Campaign Measurement: Advertising effectiveness, email open rates, promotional campaign success
• Market Research: Customer preference analysis, demand forecasting, new product development insights

3.4 Legal Compliance and Security

• Legal Obligations: Complying with food safety regulations, tax requirements, health department mandates
• Fraud Prevention: Detecting and preventing fraudulent transactions, protecting against identity theft
• Safety Protection: Ensuring customer and employee safety, emergency response procedures
• Dispute Resolution: Handling complaints, legal proceedings, insurance claims

4. Information Sharing and Disclosure

4.1 Service Providers

We share information with trusted third-party service providers who assist in our operations:

• Payment Processors: Stripe, PayPal, and other payment gateways for secure transaction processing
• Delivery Partners: Third-party delivery services, independent contractors for food delivery coordination
• Cloud Services: AWS, Google Cloud for secure data storage and backup systems
• Email Services: Mailchimp, SendGrid for newsletter and transactional email delivery
• Analytics Tools: Google Analytics, Facebook Analytics for website performance and user behavior analysis
• Customer Support: Help desk software providers, live chat services, ticketing systems

4.2 Legal Requirements

We may disclose your information when required by law or to protect our rights:

• Court Orders: Compliance with subpoenas, court orders, legal process requirements
• Government Requests: Cooperation with law enforcement, regulatory agencies, tax authorities
• Rights Protection: Defending our intellectual property, enforcing terms of service, protecting against fraud
• Emergency Situations: Protecting health and safety of customers, employees, or the public

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets:

• Customer information may be transferred as part of business assets
• We will notify you before your information is transferred
• The new owner must comply with this privacy policy
• You will have the option to delete your account before transfer

4.4 With Your Consent

We may share information for other purposes with your explicit consent, such as:

• Participating in partner promotions or loyalty programs
• Sharing testimonials or reviews (with your permission)
• Integrating with third-party applications you choose to connect

5. Data Security

5.1 Technical Security Measures

• Encryption: All data transmission uses SSL/TLS 256-bit encryption protocols
• Secure Storage: Personal data stored in encrypted databases with restricted access
• Firewall Protection: Advanced firewall systems and intrusion detection monitoring
• Access Controls: Multi-factor authentication, role-based access, principle of least privilege
• Regular Monitoring: 24/7 security monitoring, automated threat detection, incident response protocols
• Data Backups: Regular encrypted backups stored in geographically separate locations
• Payment Security: PCI DSS compliant payment processing, tokenization of card data

5.2 Organizational Security Measures

• Employee Training: Regular security awareness training for all staff members
• Access Procedures: Documented procedures for data access, handling, and disposal
• Confidentiality Agreements: All employees and contractors sign comprehensive NDAs
• Incident Response: Established protocols for security breach response and notification
• Security Audits: Regular third-party security assessments and vulnerability testing
• Vendor Management: Security requirements for all third-party service providers

5.3 Your Security Responsibilities

Help us protect your account by following these security best practices:

• Strong Passwords: Use unique, complex passwords with a mix of characters
• Password Protection: Never share your login credentials with others
• Secure Logout: Always log out when using public or shared computers
• Phishing Awareness: Be cautious of suspicious emails requesting personal information
• Report Issues: Immediately report any unauthorized account access or suspicious activity
• Software Updates: Keep your devices and browsers updated with the latest security patches

6. Cookies and Tracking Technologies

We use various tracking technologies to enhance your experience and analyze website performance:

Cookie Type	Purpose	Duration
Essential Cookies	Basic site functionality, login state, shopping cart contents	Session only
Functional Cookies	User preferences, language settings, location preferences	Up to 1 year
Analytics Cookies	Usage analysis, performance monitoring, user behavior insights	Up to 2 years
Marketing Cookies	Personalized advertising, campaign tracking, remarketing	Up to 1 year

Tracking Technologies Used:

• Google Analytics: Website traffic analysis, user behavior tracking, conversion measurement
• Facebook Pixel: Social media advertising effectiveness, custom audience creation
• Web Beacons: Email open rate tracking, newsletter engagement metrics
• Local Storage: Browser-based data storage for improved performance and user experience
• Session Storage: Temporary data storage during your browsing session

Cookie Management:

You can control cookie settings through your browser preferences:

• Accept or reject cookies when prompted
• Delete existing cookies from your browser
• Set browser to block all cookies (may affect site functionality)
• Manage cookie preferences through our consent banner

Note: Disabling certain cookies may impact website functionality, including the ability to place orders, maintain login status, or receive personalized recommendations.

7. Your Privacy Rights (GDPR/CCPA Compliance)

Depending on your location, you may have the following rights regarding your personal information:

7.1 Right of Access

Request a copy of all personal data we hold about you, including:

• Account information and order history
• Communication records and preferences
• Location and usage data
• Data processing purposes and legal basis

7.2 Right to Rectification

Request correction of inaccurate or incomplete personal information:

• Update contact information and delivery addresses
• Correct dietary preferences and allergen information
• Modify account settings and preferences

7.3 Right to Erasure (Right to be Forgotten)

Request deletion of your personal data when:

• Data is no longer necessary for original purposes
• You withdraw consent for processing
• Data has been unlawfully processed
• Legal obligations require deletion

7.4 Right to Restrict Processing

Limit how we use your data in certain circumstances:

• While we verify accuracy of contested data
• When processing is unlawful but you prefer restriction over deletion
• For legal claims requiring data preservation

7.5 Right to Data Portability

Receive your personal data in a machine-readable format:

• Order history and account information
• Preferences and settings data
• Communication records and reviews

7.6 Right to Object

Object to processing of your personal data for:

• Direct marketing purposes (including email campaigns)
• Profiling and automated decision-making
• Legitimate interest processing (with valid grounds)

7.7 Right Against Automated Decision-Making

Opt-out of automated processing that significantly affects you, including:

• Algorithm-based menu recommendations
• Automated fraud detection systems
• Pricing optimization algorithms

8. Children's Privacy

WingSnob is committed to protecting the privacy of children online. Our services are not intended for individuals under the age of 16, and we do not knowingly collect personal information from children.

Our Policy Regarding Children:

• Age Restriction: Users must be at least 16 years old to create accounts or place orders
• No Intentional Collection: We do not actively seek or collect information from individuals under 16
• Parental Awareness: Parents should monitor their children's internet activity and prevent unauthorized account creation
• Account Verification: We may request age verification during account registration

If We Discover Child Information:

• Immediately delete all collected information
• Terminate any associated accounts
• Cancel any pending orders or transactions
• Notify parents or guardians of the discovery

9. International Data Transfers

As a food delivery service, we may transfer your personal data to countries outside your residence for processing and storage. We ensure appropriate protection measures are in place.

9.1 Protection Measures

• Adequacy Decisions: Transfers to countries with European Commission adequacy decisions (Japan, Canada)
• Standard Contractual Clauses: EU-approved SCCs for transfers to countries without adequacy decisions
• Data Processing Agreements: Comprehensive contracts with all international service providers
• Security Safeguards: Encryption and security measures maintained across all jurisdictions
• Compliance Monitoring: Regular audits to ensure continued protection standards

9.2 Transfer Destinations

Country/Region	Purpose	Protection Measure
United States	Cloud storage, payment processing	Standard Contractual Clauses
European Union	Analytics, marketing services	Adequacy Decision
Canada	Customer support operations	Adequacy Decision

10. Data Retention Periods

We retain personal information only as long as necessary for the purposes outlined in this policy or as required by law.

Information Type	Retention Period	Reason for Retention
Account Information	6 months after account deletion	Legal obligations, dispute resolution
Order History	7 years from purchase date	Tax compliance, warranty claims
Payment Records	7 years from transaction	Financial regulations, fraud prevention
Marketing Consent	3 months after withdrawal	Consent record keeping, compliance
Website Usage Logs	Up to 2 years	Security monitoring, analytics
Customer Support Records	3 years from last contact	Service quality, training purposes
Delivery Information	1 year from delivery	Customer service, route optimization
Allergen Information	Until account deletion + 1 year	Food safety, liability protection

Safe Data Disposal Procedures:

• Electronic Deletion: Secure, multi-pass deletion making data unrecoverable
• Physical Records: Professional shredding and destruction services
• Backup Systems: Coordinated deletion from all backup locations
• Third-Party Data: Ensuring service providers also delete retained information
• Disposal Records: Maintaining certificates of destruction for audit purposes

11. Third-Party Links and Services

Our website and mobile application may contain links to third-party websites, social media platforms, and external services. This privacy policy does not apply to these external sites.

Third-Party Integrations:

• Social Media: Facebook, Instagram, Twitter for social sharing and account login
• Review Platforms: Google Reviews, Yelp, TripAdvisor for customer feedback
• Maps Services: Google Maps for location services and delivery tracking
• Payment Gateways: PayPal, Apple Pay, Google Pay for secure transactions
• Partner Restaurants: Affiliated dining establishments and franchise locations

Your Responsibilities:

• Review privacy policies of third-party sites before providing personal information
• Understand that we cannot control third-party data practices
• Make informed decisions about sharing information on external platforms
• Configure privacy settings on social media accounts according to your preferences

12. Privacy Policy Changes

We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or business operations.

12.1 Change Notification Methods

• Website Notice: Prominent announcement on our homepage and account dashboard
• Email Notification: Direct communication to all registered users with active accounts
• Mobile Push Notifications: App alerts for mobile application users
• Login Prompts: Required acknowledgment upon next sign-in for significant changes
• Social Media: Announcements on our official social media channels

12.2 Types of Changes

• Minor Updates: Clarifications, formatting improvements, contact information updates
• Significant Changes: New data collection practices, expanded sharing arrangements, policy scope modifications
• Legal Updates: Changes required by new regulations or court decisions

12.3 Your Options

• Continued Use: Using our services after notification constitutes acceptance
• Account Deletion: Option to delete account if you disagree with changes
• Data Download: Ability to export your data before policy changes take effect
• Contact Us: Opportunity to discuss concerns about policy modifications

Checking for Updates: The most current version of this policy is always available on our website. Check the "Last Updated" date at the top to identify recent changes.

13. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us:

13.1 Filing Complaints

If you are not satisfied with our response to your privacy concerns, you may also contact:

• Federal Trade Commission: For US residents regarding privacy violations
• State Attorney General: Washington State consumer protection office
• Data Protection Authority: Relevant supervisory authority for EU residents

14. Withdrawal of Consent

You have the right to withdraw your consent for data processing at any time. However, withdrawal may affect your ability to use certain services.

14.1 Marketing Consent Withdrawal

To stop receiving marketing communications:

• Email Unsubscribe: Click the unsubscribe link in any promotional email
• Account Settings: Modify communication preferences in your account dashboard
• Customer Support: Call or email our support team to opt-out
• Written Request: Send opt-out request to our mailing address

14.2 Complete Account Deletion

To permanently delete your account and associated data:

• Log into your account and navigate to account settings
• Select "Delete Account" and confirm your choice
• Complete identity verification for security purposes
• Allow up to 30 days for complete data removal
• Note: Some information may be retained for legal compliance

14.3 Partial Data Processing Withdrawal

• Location Services: Disable GPS tracking in app settings
• Analytics Cookies: Opt-out through cookie preferences
• Personalization: Request generic, non-personalized service
• Third-Party Sharing: Opt-out of specific data sharing arrangements

Impact of Withdrawal: Withdrawing consent may result in limited functionality, including inability to receive order updates, personalized recommendations, or loyalty program benefits.

15. Conclusion

At WingSnob, we are committed to maintaining the highest standards of privacy protection and data security. We understand that trust is earned through consistent, transparent practices and responsible handling of your personal information.

Our Privacy Commitment:

• Transparency: Clear communication about data collection and usage
• Security: Industry-leading protection measures for your information
• Control: Meaningful choices about how your data is used
• Compliance: Adherence to all applicable privacy laws and regulations
• Continuous Improvement: Regular updates to enhance privacy protection

Your privacy is not just a legal obligation for us—it's fundamental to building lasting relationships with our customers. We believe that by protecting your information, we protect the trust you place in us every time you order from WingSnob.

Thank you for choosing WingSnob as your trusted food delivery partner. We look forward to serving you while keeping your personal information secure and private.

Last Updated: January 15, 2025