Privacy Policy
Your privacy is our priority. Learn how we protect and handle your personal information.
1. Introduction
Wing Snob ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, share, and protect your information when you use our website, mobile applications, and services.
This policy applies to all our food services including online ordering, delivery, catering, table reservations, loyalty programs, and any other services we provide. By using our services, you agree to the collection and use of information as described in this policy.
We never sell your personal data to third parties. Your trust is essential to our business, and we are committed to maintaining the highest standards of privacy protection.
2. Information We Collect
2.1 Information You Provide
We collect information you voluntarily provide when using our services:
- Personal Identification: Name, email address, phone number, delivery address, billing address
- Account Information: Username, password, purchase history, order preferences, favorite menu items
- Payment Information: Credit card details, billing information (securely encrypted and stored)
- Contact Communications: Messages through contact forms, reviews, feedback, customer service interactions
- Marketing Preferences: Email subscription preferences, promotional communications consent
- Dietary Information: Food allergies, dietary restrictions, special requirements (vegan, halal, kosher, gluten-free)
- Loyalty Program Data: Points earned, rewards redeemed, membership status, special offers
- Reservation Details: Table booking information, party size, special occasions, seating preferences
- Catering Information: Event details, guest count, menu selections, delivery instructions
2.2 Automatically Collected Information
We automatically collect certain information when you use our services:
- Device Information: IP address, browser type, operating system, device model, mobile carrier
- Usage Data: Pages visited, time spent on site, click patterns, search queries, menu items viewed
- Cookie Data: Session identifiers, user preferences, authentication tokens, analytics data
- Location Information: Approximate location based on IP address, delivery zone determination
- Order History: Previous orders, frequency of visits, spending patterns, delivery preferences
2.3 Information from Third Parties
We may receive information from external sources:
- Social Media Platforms: Profile information if you connect your social accounts
- Payment Processors: Transaction verification, fraud prevention data
- Delivery Partners: Delivery status updates, driver location, delivery confirmations
- Marketing Partners: Campaign performance data, audience insights (anonymized)
3. How We Use Your Information
3.1 Service Provision
- Order Processing: Preparing your food orders, coordinating delivery, processing payments
- Account Management: Creating and maintaining your account, authentication, security
- Customer Support: Responding to inquiries, resolving issues, providing assistance
- Quality Improvement: Analyzing usage patterns, optimizing menu offerings, improving user experience
- Dietary Requirements: Ensuring allergen information is properly communicated to kitchen staff
- Loyalty Programs: Managing points, rewards, special offers, member benefits
3.2 Communication
- Order Updates: Confirmation emails, preparation status, delivery notifications
- Customer Service: Responding to support requests, feedback acknowledgment
- Important Notices: Policy changes, service updates, security alerts
- Marketing Communications: Promotional emails, special offers, new menu items (with your consent)
- Reservation Reminders: Table booking confirmations, arrival reminders
3.3 Marketing and Analytics
- Personalized Advertising: Showing relevant ads based on your preferences and order history
- Traffic Analysis: Understanding website usage, popular menu items, peak ordering times
- Campaign Effectiveness: Measuring marketing campaign performance and ROI
- Market Research: Developing new products, improving existing offerings
3.4 Legal Compliance
- Legal Requests: Responding to court orders, subpoenas, government requests
- Fraud Prevention: Detecting and preventing fraudulent activities, protecting customers
- Rights Protection: Protecting our rights, property, and safety, as well as our customers
- Dispute Resolution: Resolving conflicts, addressing complaints, legal proceedings
4. Information Sharing and Disclosure
4.1 Service Providers
We share information with trusted third-party service providers who assist us in operating our business:
- Payment Processors: Secure payment processing, fraud detection (e.g., Stripe, PayPal)
- Delivery Companies: Order fulfillment, delivery tracking, driver coordination
- Cloud Storage Providers: Secure data storage, backup services, hosting infrastructure
- Email Services: Marketing campaigns, transactional emails, customer communications
- Analytics Tools: Website usage analysis, performance monitoring, user behavior insights
- Customer Support Platforms: Help desk services, chat support, ticket management
4.2 Legal Requirements
We may disclose your information when required by law:
- Court Orders and Subpoenas: Compliance with legal proceedings
- Regulatory Compliance: Food safety regulations, health department requirements
- Law Enforcement: Cooperating with police investigations, criminal proceedings
- Public Safety: Emergency situations, health and safety threats
4.3 Business Transfers
In the event of a merger, acquisition, or sale of assets:
- Customer information may be transferred to the new owner
- We will notify customers before any transfer occurs
- New owner must comply with this privacy policy or obtain new consent
4.4 With Your Consent
We may share information for purposes not covered above with your explicit consent.
5. Data Security
5.1 Technical Measures
- Encryption: SSL/TLS encryption for all data transmission, encrypted storage for sensitive data
- Firewall Protection: Advanced firewall systems to prevent unauthorized access
- Access Controls: Role-based access, minimum necessary principle, multi-factor authentication
- Monitoring: 24/7 security monitoring, intrusion detection systems, automated threat response
- Data Backups: Regular secure backups, disaster recovery procedures, business continuity planning
5.2 Organizational Measures
- Employee Training: Regular security awareness training, privacy protection protocols
- Data Handling Procedures: Documented processes for data collection, processing, and disposal
- Third-Party Agreements: Confidentiality agreements with all service providers and partners
- Incident Response: Comprehensive security incident response plan and procedures
- Regular Audits: Internal and external security audits, vulnerability assessments
5.3 Your Responsibilities
- Password Security: Use strong, unique passwords, change them regularly
- Account Protection: Never share your login credentials with others
- Public Computers: Always log out when using shared or public computers
- Suspicious Activity: Be cautious of phishing emails and suspicious links
- Report Issues: Immediately report any unauthorized access or suspicious activity
Security Breach Notification: In the unlikely event of a data breach that affects your personal information, we will promptly notify you and relevant authorities within 72 hours as required by law.
6. Cookies and Tracking Technologies
We use cookies and similar technologies to enhance your browsing experience and provide personalized services.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential Cookies | Basic site functions, shopping cart, login state, security features | Session only |
| Functional Cookies | User preferences, language settings, delivery location, dietary preferences | Up to 1 year |
| Analytics Cookies | Website usage analysis, popular menu items, performance optimization | Up to 2 years |
| Marketing Cookies | Personalized advertising, campaign tracking, retargeting | Up to 1 year |
Tracking Technologies Used:
- Google Analytics: Website traffic analysis and user behavior insights
- Facebook Pixel: Social media advertising measurement and optimization
- Web Beacons: Email open rates, newsletter engagement tracking
- Local Storage: Browser-based data storage for improved performance
Cookie Management: You can control cookies through your browser settings to accept, reject, or delete cookies. Note that disabling cookies may affect website functionality and user experience.
7. Your Rights (GDPR/CCPA Compliance)
You have the following rights regarding your personal data:
7.1 Right of Access
You can request to view all personal data we hold about you, including order history and account information.
7.2 Right to Rectification
You can request correction of inaccurate or incomplete personal data in your account.
7.3 Right to Erasure (Right to be Forgotten)
You can request deletion of your personal data, subject to legal retention requirements.
7.4 Right to Restrict Processing
You can request limitation on how we use your data while disputes are resolved.
7.5 Right to Data Portability
You can request your data in a machine-readable format for transfer to another service.
7.6 Right to Object
You can object to processing of your data, especially for direct marketing purposes.
7.7 Right Against Automated Decision-Making
You can request human review of automated decisions that significantly affect you.
How to Exercise Your Rights: Contact us using the information in Section 13. We will respond to your request within 30 days.
8. Children's Privacy
Our services are not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. We will take steps to remove such information and terminate the child's account.
If we discover we have collected personal information from a child under 16 without parental consent, we will delete that information promptly.
9. International Data Transfers
9.1 Protection Measures
When transferring data internationally, we implement appropriate safeguards:
- Adequacy Decisions: Transfers to countries with adequate data protection laws
- Standard Contractual Clauses: Legal agreements ensuring data protection
- Data Processing Agreements: Contracts with all international partners
- Security Measures: Additional technical and organizational protections
- Regular Audits: Ongoing compliance monitoring and assessment
9.2 Transfer Destinations
Your data may be transferred to and processed in:
- United States: Cloud storage and hosting services
- European Union: Analytics and marketing services
- Other Countries: As needed for service provision, always with appropriate protections
10. Data Retention Periods
We retain your information only as long as necessary for the purposes outlined in this policy:
| Information Type | Retention Period | Reason |
|---|---|---|
| Account Information | 6 months after account deletion | Legal obligations, dispute resolution, fraud prevention |
| Purchase History | 7 years | Tax and accounting requirements, warranty claims |
| Marketing Consent | 3 months after withdrawal | Consent record keeping, compliance documentation |
| Website Usage Logs | Up to 2 years | Security monitoring, analytics, performance optimization |
| Customer Support Records | 3 years | Service quality improvement, training purposes |
| Dietary Preferences | Until account deletion | Food safety, allergen management, personalization |
| Loyalty Program Data | 5 years after program exit | Points redemption, fraud prevention, tax reporting |
Safe Data Disposal
When data reaches its retention limit, we ensure secure disposal:
- Electronic Data: Complete deletion using industry-standard methods ensuring data is unrecoverable
- Physical Records: Secure shredding of any paper documents
- Backup Systems: Removal from all backup and archive systems
- Disposal Records: Maintenance of disposal logs for compliance auditing
11. Third-Party Links
Our website and mobile applications may contain links to external websites, social media platforms, or other third-party services. We are not responsible for the privacy practices or content of these third-party sites.
We encourage you to review the privacy policies of any third-party sites you visit before providing them with personal information. Your interactions with third-party sites are governed by their privacy policies, not ours.
When you click on third-party links, you are leaving our service and our privacy policy no longer applies. Your use of third-party services is at your own risk and discretion.
12. Policy Changes
12.1 Change Notification
We may update this privacy policy periodically to reflect changes in our practices or legal requirements. When we make changes, we will:
- Website Notice: Post a prominent notice on our website homepage
- Email Notification: Send email alerts to registered users about significant changes
- App Notifications: Push notifications through our mobile application
- Explicit Consent: Request new consent for material changes that affect data processing
12.2 Checking for Changes
- The most current version is always available on our website
- Check the "Last Updated" date at the top of this policy
- Continued use of our services after changes indicates acceptance
- You may discontinue using our services if you disagree with changes
13. Contact Information
Wing Snob Privacy Team
Address: 2436 14th St NW, Washington, DC 20009, USA
Phone: +1 202-915-9004
Email: [email protected]
Business Hours: Monday - Friday: 9:00 AM - 6:00 PM EST
Response Time: We commit to responding to all privacy inquiries within 3 business days.
13.1 Filing Complaints
If you have concerns about our privacy practices:
- Contact us first using the information above for direct resolution
- If unsatisfied with our response, you may contact your local data protection authority
- EU residents can contact their national supervisory authority
- US residents can file complaints with the Federal Trade Commission (FTC)
14. Withdrawal of Consent
14.1 Marketing Consent Withdrawal
You can withdraw consent for marketing communications at any time:
- Email Unsubscribe: Click the unsubscribe link in any promotional email
- Account Settings: Update your communication preferences in your account dashboard
- Customer Support: Contact our support team to opt out of all marketing
- Phone: Call us during business hours to withdraw consent
14.2 Account Deletion
To completely delete your account and data:
- Log into your account and go to account settings
- Select "Delete Account" option
- Confirm deletion by entering your password
- We will send a confirmation email within 24 hours
- Complete deletion occurs within 30 days
Note: Some data may be retained for legal compliance, fraud prevention, or legitimate business interests as described in our retention policy.
15. Conclusion
At Wing Snob, we are committed to maintaining the highest standards of privacy protection and data security. Your trust is the foundation of our business, and we take our responsibility to protect your personal information seriously.
We believe that transparency about our data practices helps build the trust relationship that is essential to providing you with exceptional dining experiences. Whether you're ordering your favorite wings, booking a table, or participating in our loyalty program, you can be confident that your information is handled with care and respect.
If you have any questions about this privacy policy or our data practices, please don't hesitate to contact us. We welcome your feedback and are always working to improve our privacy protections.
Thank you for choosing Wing Snob and for trusting us with your personal information. We look forward to continuing to serve you with premium quality food and exceptional service.
Remember to check this page periodically for updates. The "Last Updated" date at the top of this policy will help you identify when changes have been made.