Privacy Policy

Welcome to East Coast Wings. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website ecwingsnow.rest, place orders, interact with our services, or otherwise engage with us. Please read this policy carefully. If you disagree with its terms, please discontinue use of our website and services.

This Privacy Policy applies to all personal information collected through our website, mobile applications, in-store interactions, loyalty programs, online ordering platforms, email communications, and any other services we offer (collectively referred to as the "Services"). By using our Services, you acknowledge that you have read, understood, and agree to the terms outlined in this Privacy Policy.

1. Who We Are

East Coast Wings is a food service business operating in the United States. We specialize in delivering exceptional wing experiences and related food offerings to our valued customers. For all privacy-related matters, you may contact us using the information below:

2. Information We Collect

We collect various types of information in connection with your use of our Services. The information we collect falls into several categories:

2.1 Personal Information You Provide to Us

When you interact with us directly — whether by creating an account, placing an order, signing up for our loyalty program, subscribing to our newsletter, contacting customer service, or participating in promotions — you may voluntarily provide us with the following personal information:

• Identity Information: First name, last name, username or similar identifier, date of birth (for age verification purposes).
• Contact Information: Email address, telephone number, billing address, delivery address, and other similar contact details.
• Account Credentials: Password and other security information used for authentication and account access.
• Payment Information: Credit card numbers, debit card numbers, bank account details, and other payment-related data. Note that payment information is processed by PCI-DSS compliant third-party payment processors and is not stored on our servers in full.
• Order Information: Details about the food items you order, dietary preferences, special instructions, and your order history.
• Loyalty Program Data: Points balances, reward redemptions, program participation history, and related preferences.
• Communications: Messages, feedback, survey responses, and any other content you send us directly.
• Marketing Preferences: Your preferences regarding receiving marketing and promotional communications from us.

2.2 Information Collected Automatically

When you visit our website or use our digital Services, we automatically collect certain technical and usage information, including:

• Device Information: IP address, browser type and version, operating system and platform, device identifiers, hardware model, and mobile network information.
• Usage Data: Pages visited on our website, time spent on each page, links clicked, referring URLs, search queries entered, error logs, and clickstream data.
• Location Data: General geographic location based on IP address, and, with your explicit consent, precise GPS location data to facilitate delivery services or find nearby locations.
• Cookie and Tracking Data: Information collected through cookies, web beacons, pixel tags, local storage, and similar tracking technologies. Please see Section 7 of this Privacy Policy for more details.
• Transaction Data: Details of purchases and transactions made through our website, including timestamps, transaction amounts, and order references.

2.3 Information We Receive From Third Parties

We may receive information about you from third-party sources, which we may combine with information we already hold about you. These sources may include:

• Third-Party Delivery Platforms: If you place an order through a third-party food delivery app or platform, we may receive limited information related to your order to fulfill it.
• Social Media Platforms: If you connect your social media account to our Services or interact with our social media pages, we may receive certain profile information as permitted by that platform's privacy settings.
• Analytics Providers: We receive aggregated and non-aggregated analytics data from tools such as Google Analytics and similar services.
• Advertising Partners: We may receive information about your interactions with our advertisements on third-party websites and platforms.
• Payment Processors: We receive confirmation of payment authorization and fraud screening results from our payment processing partners.

3. How We Use Your Information

We use the information we collect for a variety of purposes related to operating our business, providing our Services, and improving your experience. Specifically, we use your information for the following purposes:

3.1 Service Provision and Order Fulfillment

• To process and fulfill your food orders, including preparation, packaging, delivery, and pickup arrangements.
• To create and manage your account on our website and loyalty program.
• To process payments and prevent fraudulent transactions.
• To send you order confirmations, receipts, delivery updates, and other transactional communications.
• To provide customer support and respond to your inquiries, complaints, and feedback.
• To manage your loyalty program participation, including tracking and redeeming rewards points.

3.2 Marketing and Promotional Communications

• To send you newsletters, promotional offers, special deals, coupons, and other marketing communications, where you have given us your consent or where we have a legitimate interest to do so.
• To personalize your experience by tailoring content, offers, and recommendations based on your order history and preferences.
• To conduct contests, sweepstakes, and other promotional activities.
• To retarget you with relevant advertisements on third-party websites and social media platforms.
• You may opt out of marketing communications at any time by using the unsubscribe link in our emails or by contacting us directly at [email protected].

3.3 Analytics and Service Improvement

• To analyze how users interact with our website and Services, identify trends, and understand customer behavior to improve our offerings.
• To monitor the performance and security of our website and digital infrastructure.
• To conduct internal research and development to improve our menu, services, and overall customer experience.
• To generate aggregated, anonymized data reports for business analytics purposes.

3.4 Legal and Compliance Purposes

• To comply with applicable federal and state laws and regulations.
• To respond to lawful requests from government authorities, law enforcement agencies, or courts.
• To enforce our Terms of Service and other agreements.
• To protect the rights, property, and safety of East Coast Wings, our customers, and others.
• To detect, investigate, and prevent fraudulent activities, security breaches, and other illegal activities.

4. Legal Bases for Processing Your Information

Depending on how you interact with our Services and your location within the United States, we process your personal information under the following legal bases:

• Performance of a Contract: Processing your orders, managing your account, and fulfilling our obligations to you as a customer.
• Legitimate Interests: Operating and improving our business, conducting analytics, fraud prevention, and direct marketing (where permitted), provided these interests are not overridden by your rights and interests.
• Consent: Sending marketing communications, using non-essential cookies, and processing precise location data, where you have given us your explicit consent.
• Legal Obligation: Complying with applicable laws, regulations, court orders, and government requests.

For residents of California, we process your information in accordance with the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). Please see Section 10 for specific information about your California privacy rights.

5. Sharing Your Information With Third Parties

We respect your privacy and do not sell, rent, or trade your personal information to third parties for their own marketing purposes. However, we may share your information in the following circumstances:

5.1 Service Providers and Business Partners

We share your information with trusted third-party service providers who assist us in operating our business and providing Services to you. These service providers are contractually obligated to protect your information and are restricted from using it for any purpose other than performing services on our behalf. These include:

• Payment Processors: Companies that securely process your payment transactions (e.g., Stripe, Square, or similar processors).
• Delivery Partners: Third-party delivery services that help us fulfill your food orders.
• Technology Providers: Website hosting, cloud storage, database management, email delivery, and customer relationship management (CRM) platform providers.
• Analytics Providers: Companies such as Google Analytics that help us understand website traffic and user behavior.
• Marketing Platforms: Email marketing services, advertising networks, and social media platforms used to deliver promotional communications.
• Customer Support Tools: Platforms that help us manage customer inquiries and support tickets.

5.2 Legal Requirements and Law Enforcement

We may disclose your personal information if required to do so by law or in response to valid legal processes, including:

• Complying with a court order, subpoena, or other legal process.
• Responding to lawful requests from federal or state government authorities, including law enforcement agencies.
• Protecting and defending our legal rights or those of our customers and employees.
• Preventing or investigating suspected wrongdoing in connection with our Services.
• Protecting the personal safety of users of our Services or the general public.

In all cases, we comply with applicable requirements under the Federal Trade Commission Act (FTC Act) and other relevant federal and state privacy laws.

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal information may be transferred to the acquiring entity as part of the transaction. We will notify you via email or a prominent notice on our website before your personal information becomes subject to a different privacy policy.

5.4 Aggregated and Anonymized Data

We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you with third parties for research, marketing, analytics, or other business purposes.

6. Data Security

We take the security of your personal information seriously and implement a range of technical, administrative, and physical safeguards designed to protect your information from unauthorized access, use, alteration, disclosure, or destruction.

6.1 Security Measures We Employ

• Encryption: We use Secure Socket Layer (SSL) / Transport Layer Security (TLS) encryption to protect data transmitted between your browser and our website. Sensitive data, such as payment information, is encrypted both in transit and at rest.
• Access Controls: We restrict access to your personal information to only those employees, contractors, and service providers who have a legitimate business need to access it. All personnel with access are subject to confidentiality obligations.
• PCI-DSS Compliance: Our payment processing systems are designed to comply with Payment Card Industry Data Security Standards (PCI-DSS) to protect your financial information.
• Regular Security Assessments: We conduct periodic vulnerability assessments, penetration testing, and security audits to identify and address potential weaknesses in our systems.
• Incident Response: We maintain an incident response plan to address potential data breaches promptly. In the event of a data breach that affects your personal information, we will notify you as required by applicable law.
• Secure Data Storage: Personal information is stored on secure servers with restricted physical access and robust cybersecurity protections.

7. Cookies and Tracking Technologies

Our website uses cookies, web beacons, pixel tags, and similar tracking technologies to enhance your experience, analyze website performance, and deliver relevant advertising. Below is a brief overview of our cookie practices:

7.1 Types of Cookies We Use

You can control cookie settings through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of our website. For more detailed information about the specific cookies we use and your choices, please refer to our full Cookie Policy, available on our website at ecwingsnow.rest.

8. Data Retention

We retain your personal information only for as long as is necessary to fulfill the purposes for which it was collected, including satisfying any legal, regulatory, accounting, or reporting requirements. Our general data retention practices are as follows:

When your personal information is no longer needed, we will securely delete, destroy, or anonymize it in accordance with our data retention and disposal procedures. In some circumstances, we may anonymize your personal information so that it can no longer be associated with you, in which case we may use such information indefinitely without further notice.

9. Your Privacy Rights

Depending on your location and applicable law, you may have the following rights regarding your personal information. We are committed to honoring these rights in accordance with applicable United States federal and state laws.

9.1 Right to Access

You have the right to request confirmation of whether we process your personal information and, if so, to request access to that information, including a copy of the personal data we hold about you.

9.2 Right to Correction

You have the right to request that we correct any inaccurate or incomplete personal information we hold about you. You may also update certain information directly through your account settings on our website.

9.3 Right to Deletion

You have the right to request that we delete your personal information. Please note that we may be unable to fulfill deletion requests in certain circumstances, such as when retention is required for legal compliance, to complete a transaction, or to detect and prevent security incidents.

9.4 Right to Data Portability

Where technically feasible, you have the right to receive a copy of your personal information in a structured, commonly used, and machine-readable format so that you can transfer it to another service provider.

9.5 Right to Opt Out of Marketing

You have the right to opt out of receiving marketing communications from us at any time. You can exercise this right by clicking the "unsubscribe" link in any marketing email we send you, updating your communication preferences in your account settings, or contacting us at [email protected].

9.6 Right to Withdraw Consent

Where we process your personal information based on your consent (such as for non-essential cookies or certain marketing activities), you have the right to withdraw your consent at any time. Withdrawal of consent will not affect the lawfulness of processing conducted prior to the withdrawal.

9.7 How to Exercise Your Rights

To exercise any of the rights described above, please submit a written request to us using the following contact details:

We will respond to your request within 45 days of receipt. In some circumstances, we may require you to verify your identity before processing your request. We reserve the right to extend the response period by an additional 45 days where necessary, provided we inform you of the extension and the reason for the delay within the initial 45-day period.

10. California Privacy Rights (CCPA / CPRA)

If you are a resident of California, you have additional rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA) (collectively referred to as "California Privacy Law"). This section supplements the rest of our Privacy Policy and applies solely to California residents.

10.1 Categories of Personal Information Collected

In the past 12 months, we have collected the following categories of personal information from California consumers:

• Identifiers (name, email address, phone number, IP address)
• Commercial information (order history, purchasing records)
• Internet or other electronic network activity information (browsing history, interactions with our website)
• Geolocation data (general and, with consent, precise location)
• Inferences drawn from the above to create a profile about your preferences

10.2 Your California Privacy Rights

• Right to Know: You may request information about the categories and specific pieces of personal information we have collected about you, the categories of sources, business purposes, and categories of third parties with whom we shared your information.
• Right to Delete: You may request deletion of personal information we have collected from you, subject to certain exceptions.
• Right to Correct: You may request correction of inaccurate personal information.
• Right to Opt Out of Sale or Sharing: East Coast Wings does not sell your personal information for monetary consideration. However, certain sharing of data with advertising partners may constitute "sharing" under the CPRA. You have the right to opt out of such sharing.
• Right to Limit Use of Sensitive Personal Information: You have the right to limit our use and disclosure of sensitive personal information to only that which is necessary to perform services or provide goods reasonably expected.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your California privacy rights. We will not deny you services, charge you different prices, or provide a different quality of service because you exercised your rights.

To submit a California privacy rights request, please contact us at [email protected]. You may also designate an authorized agent to make a request on your behalf, provided we can verify the agent's identity and authorization.

11. Children's Privacy

If you are under 18 years of age, you are not permitted to use our Services, create an account, or submit any personal information to us. If we become aware that we have inadvertently collected personal information from a child under the age of 13 without verifiable parental consent, we will take immediate steps to delete such information from our records.

Our data collection and processing practices comply with the Children's Online Privacy Protection Act (COPPA). If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us immediately at [email protected], and we will promptly address the matter.

12. International Data Transfers

East Coast Wings is based in the United States, and our Services are primarily intended for users located within the United States. If you access our Services from outside the United States, please be aware that your personal information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your home country.

By using our Services from outside the United States, you consent to the transfer, storage, and processing of your information in the United States. We take reasonable steps to ensure that any such transfers are conducted in accordance with applicable law and that your information remains protected to a standard that is consistent with this Privacy Policy.

If we transfer personal information internationally, we will implement appropriate safeguards, such as contractual clauses, to ensure that your information is adequately protected. For more information about international data transfers, please contact us at [email protected].

13. Third-Party Links and Services

Our website may contain links to third-party websites, applications, and services that are not operated by East Coast Wings. These may include third-party delivery platforms, social media platforms, and payment gateways. This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you visit or use. We are not responsible for the privacy practices or content of third-party websites.

14. Do Not Track Signals

Some web browsers include a "Do Not Track" (DNT) feature that sends a signal to websites you visit indicating that you do not want to be tracked. There is currently no universally accepted standard for how websites should respond to DNT signals. At this time, our website does not respond to DNT browser signals. However, you may manage your tracking preferences through your cookie settings and the opt-out mechanisms described in this Privacy Policy.

15. FTC Compliance and Consumer Protection

East Coast Wings is committed to fair information practices in accordance with the Federal Trade Commission Act (FTC Act), which prohibits unfair or deceptive acts or practices in commerce. We adhere to FTC guidelines for online privacy, including commitments to:

• Providing clear notice of our data collection and use practices through this Privacy Policy.
• Offering you meaningful choices about how your information is used, including opt-out options for marketing communications.
• Maintaining reasonable security measures to protect your personal information.
• Ensuring access to and accuracy of information we hold about you.
• Enforcing our privacy commitments through employee training, internal audits, and accountability measures.

16. How to File a Complaint

If you believe that we have violated your privacy rights or have concerns about how we handle your personal information, we encourage you to contact us first so that we can attempt to resolve the matter directly:

If you are not satisfied with our response or believe we are processing your personal information in violation of applicable law, you may file a complaint with the relevant data protection or consumer protection authority:

16.1 Federal Trade Commission (FTC)

The Federal Trade Commission is the primary U.S. federal agency responsible for consumer protection, including data privacy. You may file a complaint with the FTC at:

• Website: www.ftc.gov/complaint
• Phone: 1-877-FTC-HELP (1-877-382-4357)
• Address: Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, DC 20580

16.2 California Residents — California Privacy Protection Agency (CPPA)

If you are a California resident, you may also file a complaint with the California Privacy Protection Agency regarding violations of the CCPA/CPRA:

• Website: cppa.ca.gov
• Address: California Privacy Protection Agency, 2101 Arena Boulevard, Sacramento, CA 95834

16.3 State Attorney General Offices

Depending on your state of residence, you may have the right to file a privacy complaint with your state Attorney General's office. Many states have consumer protection divisions that handle data privacy complaints. Please visit your state government's official website for the appropriate contact information.

17. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our business practices, legal requirements, or technology. When we make material changes to this policy, we will:

• Update the "Last Updated" date at the top of this Privacy Policy.
• Post the revised Privacy Policy on our website at ecwingsnow.rest.
• Where required by law or where the changes are significant, provide more prominent notice, such as an email notification to registered users.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our Services after any changes to this Privacy Policy constitutes your acceptance of the revised terms.

18. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact our Privacy Team. We are committed to addressing your inquiries promptly and thoroughly.