Privacy Policy

Welcome to East Coast Wings. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website eastcoastwings.rest, place food orders, use our digital services, or otherwise interact with us. Please read this policy carefully. If you disagree with its terms, please discontinue use of our services immediately.

This Privacy Policy is governed by applicable United States federal and state privacy laws, including but not limited to the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), and other applicable state and federal regulations. If you are a California resident, additional rights and disclosures apply to you, as detailed in the relevant sections below.

1. Who We Are

East Coast Wings is a food service business operating in the United States. We operate the website eastcoastwings.rest and provide food ordering, delivery coordination, and related digital services to our customers.

For any questions, concerns, or requests related to this Privacy Policy or your personal data, please contact us using the information provided above or in the Contact Us section at the end of this document.

2. Information We Collect

We collect several types of information in connection with the operation of our website and food services. The categories of information we collect are described below.

2.1 Personal Information You Provide to Us

When you use our website, create an account, place a food order, subscribe to our newsletter, or contact us directly, you may voluntarily provide us with the following personal information:

• Identity Information: Full name, username, or similar identifiers.
• Contact Information: Email address, telephone number, mailing or delivery address.
• Account Credentials: Username and password (stored in encrypted form).
• Order Information: Food items ordered, order history, special dietary requests, delivery instructions, and preferences.
• Payment Information: Credit or debit card details, billing address, and payment transaction records. Note that full payment card numbers are processed by our third-party payment processors and are not stored directly on our servers.
• Communication Records: Any messages, feedback, reviews, complaints, or inquiries you send to us via email, contact forms, or other channels.
• Promotional Preferences: Your marketing opt-in or opt-out choices, loyalty program participation, and promotional code usage.

2.2 Information Collected Automatically

When you access and navigate our website, certain information is collected automatically through cookies, web beacons, pixel tags, and similar tracking technologies:

• Device Information: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage Data: Pages visited, time and date of your visit, time spent on pages, links clicked, referring URLs, and navigation patterns.
• Location Data: General geographic location inferred from your IP address (city or region level). If you permit it, we may also collect precise geolocation data to assist with delivery services.
• Cookie Data: Information stored in cookies, session data, and local storage on your device. Please see Section 8 – Cookies for more information.
• Transaction Logs: Records of your interactions with our online ordering system, including cart additions, abandoned carts, and completed purchases.

2.3 Information from Third Parties

We may also receive information about you from third-party sources, such as:

• Social Media Platforms: If you choose to log in or connect your account through a social media platform (e.g., Facebook, Google), we may receive certain profile information as permitted by your social media privacy settings.
• Delivery Partners: Information shared by third-party delivery platforms or services we partner with to fulfill your food orders.
• Analytics Providers: Aggregated or anonymized data from analytics services that help us understand how users interact with our website.
• Payment Processors: Transaction confirmation and fraud prevention data from our authorized payment processing partners.
• Review Platforms: Publicly available reviews or feedback you may have submitted on third-party platforms referencing our business.

3. How We Use Your Information

We use the information we collect for a variety of business and operational purposes. We will only process your personal information when we have a lawful basis for doing so.

3.1 Service Provision and Order Fulfillment

• Processing and fulfilling your food orders, including coordinating delivery or pickup.
• Creating and managing your customer account.
• Processing payments and refunds.
• Sending you order confirmations, receipts, and updates about your order status.
• Communicating with you regarding changes to your orders or our menu.
• Providing customer support and resolving disputes or complaints.

3.2 Business Operations and Improvement

• Analyzing usage data to understand how customers use our website and services.
• Improving our website functionality, menu offerings, and overall customer experience.
• Conducting internal research, quality assurance, and testing.
• Monitoring for technical issues and maintaining the security and integrity of our systems.
• Maintaining accurate business records and complying with accounting and reporting obligations.

3.3 Marketing and Promotional Communications

• Sending you promotional emails, newsletters, and special offers about our food, deals, and events, where you have opted in or where permitted by law.
• Personalizing your experience on our website based on your past orders and preferences.
• Administering loyalty programs, contests, sweepstakes, or referral programs.
• Serving interest-based advertising on our website and on third-party platforms, based on your browsing and purchase history.

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any marketing email we send you, or by contacting us at [email protected]. Opting out of marketing communications will not affect transactional communications related to your orders or account.

3.4 Legal and Compliance Purposes

• Complying with applicable laws, regulations, and legal processes.
• Responding to lawful requests from government authorities, courts, or law enforcement.
• Enforcing our Terms of Service and other policies.
• Protecting the rights, property, or safety of East Coast Wings, our customers, or others.
• Detecting, preventing, and investigating fraud, security incidents, and other harmful activities.

4. Sharing Your Information with Third Parties

We do not sell your personal information to third parties for monetary compensation. However, we may share your information in the following circumstances:

4.1 Service Providers

We engage trusted third-party companies and individuals to assist us in operating our business and providing services to you. These service providers have access to your personal information only as necessary to perform their functions and are contractually prohibited from using it for other purposes. Our service providers include:

• Payment Processors: To securely handle payment transactions (e.g., Stripe, Square, or similar processors).
• Delivery and Logistics Partners: To fulfill and coordinate the delivery of your orders.
• Cloud Hosting and IT Providers: To host our website and store data securely.
• Email Marketing Platforms: To send transactional and promotional emails on our behalf.
• Analytics Providers: Such as Google Analytics, to help us understand website usage patterns.
• Customer Support Tools: To manage and respond to customer inquiries efficiently.
• Fraud Prevention Services: To detect and prevent fraudulent transactions and account activity.

4.2 Business Transfers

In the event that East Coast Wings undergoes a merger, acquisition, reorganization, asset sale, or similar corporate transaction, your personal information may be transferred as part of that transaction. We will notify you via email or a prominent notice on our website if such a transfer occurs and if your data will become subject to a different privacy policy.

4.3 Legal Requirements and Law Enforcement

We may disclose your personal information if required to do so by law or in response to valid legal requests, including:

• Subpoenas, court orders, or other judicial process.
• Requests from federal, state, or local government authorities.
• Situations where we believe disclosure is necessary to prevent imminent harm, protect public safety, or protect the rights and property of East Coast Wings or others.

4.4 With Your Consent

We may share your information with additional third parties when you have given us your explicit consent to do so, such as when you participate in a co-branded promotion or partner program.

4.5 Aggregated or De-identified Data

We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you with third parties for research, marketing, analytics, or other purposes.

5. Data Security

We take the security of your personal information seriously and have implemented a range of technical, administrative, and physical safeguards designed to protect it against unauthorized access, disclosure, alteration, and destruction.

5.1 Security Measures

• Encryption: We use Secure Sockets Layer (SSL) / Transport Layer Security (TLS) encryption to protect data transmitted between your browser and our servers.
• Access Controls: Access to personal data is restricted to authorized personnel who need it to perform their job duties. All staff with access to personal data are subject to confidentiality obligations.
• Password Security: Account passwords are stored using industry-standard hashing algorithms and are never stored in plain text.
• Payment Security: We comply with Payment Card Industry Data Security Standards (PCI-DSS) requirements by using certified payment processors. We do not store complete credit card numbers on our servers.
• Regular Security Assessments: We periodically review and update our security practices to address emerging threats.
• Incident Response: We maintain a data breach response plan to promptly investigate and respond to any security incidents.

5.2 Limitations

While we strive to protect your personal information, no method of transmission over the internet or method of electronic storage is 100% secure. We cannot guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and relevant authorities as required by applicable law.

6. Your Privacy Rights

Depending on your state of residence, you may have various rights regarding your personal information. We are committed to honoring these rights and providing transparent access to your data.

6.1 Rights Available to All Users

• Right to Know / Access: You have the right to request information about the categories and specific pieces of personal data we have collected about you, the purposes for which it is used, and the third parties with whom it is shared.
• Right to Correction: You have the right to request that we correct inaccurate or incomplete personal information we hold about you.
• Right to Deletion: You have the right to request that we delete your personal information, subject to certain exceptions (e.g., data needed to complete a transaction, comply with legal obligations, or detect fraud).
• Right to Data Portability: You have the right to receive a copy of certain personal data we hold about you in a structured, commonly used, and machine-readable format.
• Right to Opt Out of Marketing: You have the right to opt out of receiving marketing communications from us at any time.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights. This means we will not deny you services, charge you different prices, or provide you with a different level of service quality for exercising your rights.

6.2 Additional Rights for California Residents (CCPA/CPRA)

If you are a California resident, you have the following additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Know the Categories of Personal Information Sold or Shared: You have the right to know whether we sell or share your personal information and to which categories of third parties.
• Right to Opt Out of Sale or Sharing: You have the right to opt out of the sale or sharing of your personal information. We do not sell your personal information for monetary consideration. If we share personal data for cross-context behavioral advertising, you have the right to opt out.
• Right to Limit Use of Sensitive Personal Information: You have the right to limit the use and disclosure of your sensitive personal information (as defined by CPRA) to uses necessary to perform the services you request.
• Right to Correct Inaccurate Information: You have the right to request that we correct inaccurate personal information we maintain about you.
• Shine the Light Law: California Civil Code Section 1798.83 allows California residents to request information about personal information disclosed to third parties for their direct marketing purposes in the preceding calendar year.

6.3 How to Submit a Privacy Request

To exercise any of your privacy rights, please contact us using one of the following methods:

• Email: [email protected] with the subject line "Privacy Rights Request"
• Website: eastcoastwings.rest

We will verify your identity before processing your request to protect your information from unauthorized access. We will respond to verified requests within 45 days, with the possibility of a one-time extension of an additional 45 days when reasonably necessary, as permitted under applicable law. We will notify you of such an extension within the initial 45-day response period.

You may designate an authorized agent to make a request on your behalf. We may require written proof of the agent's authority and your own verification of the request.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, or as required by applicable law. Our general data retention guidelines are as follows:

When your personal data is no longer needed, we will securely delete, anonymize, or de-identify it in accordance with our internal data retention and destruction procedures.

8. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies (such as web beacons, pixel tags, and local storage) to enhance your experience, analyze website performance, and deliver relevant advertising.

8.1 Types of Cookies We Use

• Strictly Necessary Cookies: These are essential for the operation of our website and enable core functions such as page navigation, account access, and the online ordering system. Without these cookies, our website cannot function properly.
• Performance and Analytics Cookies: These cookies collect information about how visitors use our website, such as which pages are visited most frequently and whether users receive error messages. This data is used to improve our website.
• Functionality Cookies: These cookies allow our website to remember choices you make (such as your preferred delivery address or saved menu items) and provide enhanced, personalized features.
• Targeting and Advertising Cookies: These cookies are used to deliver advertisements that are relevant to you and your interests. They are also used to limit the number of times you see an advertisement and to help measure the effectiveness of advertising campaigns.

8.2 Managing Your Cookie Preferences

You have the right to accept or decline non-essential cookies. You can manage your cookie preferences through:

• Our cookie consent banner displayed when you first visit our website.
• Your browser settings, which allow you to block or delete cookies. Please note that disabling certain cookies may affect the functionality of our website.
• Third-party opt-out tools, such as the Digital Advertising Alliance Opt-Out Tool or the Network Advertising Initiative Opt-Out Tool.

For more detailed information about the specific cookies we use, their purposes, and how to manage them, please review our full Cookie Policy available on our website at eastcoastwings.rest.

9. Children's Privacy

Our website and services are intended for use by individuals who are 18 years of age or older. We do not knowingly collect, solicit, or use personal information from children under the age of 13 without verifiable parental consent, as required by the Children's Online Privacy Protection Act (COPPA).

We do not knowingly market our services directly to minors. If we become aware that we have inadvertently collected personal information from a child under the age of 13 without appropriate parental consent, we will take immediate steps to delete that information from our records.

If you believe that a child under 13 years of age has provided us with personal information without appropriate parental consent, please contact us immediately at [email protected] so that we can take appropriate action.

Parents or legal guardians who believe their child has submitted personal information to us without consent should contact us using the contact details provided at the end of this Privacy Policy.

10. International Data Transfers

East Coast Wings is a United States-based business, and your personal information is primarily collected, stored, and processed within the United States. However, some of our third-party service providers may be located in other countries and may process your personal information outside of the United States.

If your personal information is transferred to another country, we take appropriate steps to ensure that such transfers comply with applicable data protection laws and that your information remains protected to a standard equivalent to the protections offered in the United States. Such steps may include:

• Entering into data processing agreements with service providers that include appropriate data protection provisions.
• Using service providers that participate in internationally recognized data transfer frameworks.
• Ensuring that any country to which data is transferred maintains an adequate level of data protection, as determined by relevant standards.

By using our website and services, you acknowledge and consent to the transfer of your personal information to the United States and potentially to other countries, in accordance with the terms of this Privacy Policy.

11. Third-Party Websites and Links

Our website may contain links to third-party websites, social media platforms, delivery platforms, or other external services. These third-party sites operate under their own privacy policies and practices, which may differ significantly from ours. We are not responsible for the privacy practices or content of any third-party websites.

We encourage you to review the privacy policies of any third-party websites you visit. The inclusion of a link to a third-party site on our website does not constitute our endorsement of that site or its privacy practices.

12. Do Not Track Signals

Some web browsers may transmit "Do Not Track" (DNT) signals to websites. At this time, there is no industry-wide standard for how websites should respond to DNT signals, and we do not currently respond to DNT signals in our website operations. However, you can manage your tracking preferences through cookie settings, as described in Section 8 – Cookies and Tracking Technologies.

We will continue to monitor developments regarding DNT standards and update our practices accordingly if a uniform standard is established.

13. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or for any other reason. When we make material changes to this policy, we will:

• Update the "Last Updated" date at the top of this page.
• Post a notice on our website informing users of the update.
• Send an email notification to registered users when changes are significant, where we have your email address on file.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website or services after the posting of any changes constitutes your acceptance of the updated Privacy Policy.

14. How to File a Complaint

If you believe that your privacy rights have been violated or that we have not complied with applicable data protection laws, we encourage you to contact us first so that we can attempt to resolve the issue directly.

14.1 Contact Us Directly

Please send your complaint or concern to:

• Email: [email protected]
• Website: eastcoastwings.rest

We will acknowledge receipt of your complaint within 10 business days and aim to provide a substantive response within 30 days of receipt.

14.2 Filing a Complaint with Regulatory Authorities

If you are not satisfied with our response, or if you believe we are not handling your personal information in compliance with applicable law, you have the right to file a complaint with the appropriate regulatory authority:

If you reside in another state that has enacted specific data privacy legislation (such as Virginia, Colorado, Connecticut, Utah, or Texas), you may also have the right to appeal our decisions regarding your privacy rights request or file a complaint with your state's Attorney General's office.

15. Contact Information for Privacy Inquiries

If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal information, please do not hesitate to contact us. We are committed to addressing your privacy concerns promptly and transparently.

When contacting us about a privacy matter, please include the following information to help us process your request efficiently:

• Your full name and contact information.
• A description of your privacy concern or the specific right you wish to exercise.
• Any relevant account information (e.g., the email address associated with your account).
• Your state of residence, if relevant to your inquiry.