Privacy Policy

This Privacy Policy describes how East Coast Wings ("we," "us," "our," or "the Company") collects, uses, discloses, and safeguards your personal information when you visit our website at ec-wings.digital, place orders through our online platform, sign up for our loyalty programs, or interact with us in any other capacity. Please read this policy carefully. By using our services, you acknowledge that you have read, understood, and agree to be bound by the terms of this Privacy Policy.

We are committed to protecting your privacy and handling your personal data in an open and transparent manner. This policy is drafted in compliance with applicable United States federal and state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), and other applicable consumer protection regulations.

1. Who We Are

East Coast Wings is a food service business operating in the United States. We operate an online presence through our website ec-wings.digital, through which customers can browse our menu, place orders, create accounts, and engage with our brand.

2. Information We Collect

We collect various types of information in connection with the services we provide. The categories of personal information we may collect are outlined below.

2.1 Personal Identification Information

When you create an account, place an order, subscribe to our newsletter, participate in promotions, or contact us, we may collect:

• Full name
• Email address
• Phone number
• Billing and shipping address (including street, city, state, and ZIP code)
• Date of birth (for age verification purposes)
• Username and password (stored in encrypted form)
• Profile photo (if provided voluntarily)

2.2 Payment and Transaction Information

When you make a purchase through our platform, we collect the information necessary to process your payment, including:

• Credit or debit card details (processed by our third-party payment processor; we do not store full card numbers)
• Billing address associated with your payment method
• Order history and transaction records
• Purchase preferences and dietary notes

2.3 Usage Data and Online Activity

When you browse our website, we automatically collect certain technical and usage information, including:

• Internet Protocol (IP) address
• Browser type and version
• Operating system and device type
• Pages visited, time spent on each page, and navigation paths
• Referring URLs and exit pages
• Date and time stamps of visits
• Search queries made on our website
• Clickstream data

2.4 Device Information

We may collect identifiers related to the devices you use to access our website, including:

• Device ID and hardware model
• Mobile advertising identifiers (where applicable)
• Screen resolution and display settings
• Network information and connection type

2.5 Location Data

With your permission, we may collect approximate or precise geographic location data to provide delivery services, show you nearby locations or promotions relevant to your area, and improve our service offerings. You may disable location tracking through your device settings at any time.

2.6 Communications and Feedback

When you contact us via email, phone, or contact forms, or when you post reviews or feedback about our food and service, we collect:

• The content of your messages and correspondence
• Customer service interaction records
• Feedback, ratings, and reviews submitted
• Survey responses

2.7 Cookies and Tracking Technologies

We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about your interactions with our website. For detailed information about our use of cookies, please refer to the Cookie Usage section (Section 8) of this policy.

2.8 Sensitive Personal Information

In limited circumstances, we may collect information that qualifies as "sensitive personal information" under applicable law, such as precise geolocation or dietary restrictions you voluntarily provide. We only collect such data when necessary for the provision of our services and with your explicit consent where required by law.

3. How We Use Your Information

We use the personal information we collect for a variety of legitimate business purposes. These include:

3.1 Service Provision and Order Fulfillment

• Processing and fulfilling your food orders, whether for delivery, pickup, or catering
• Creating and managing your customer account
• Sending order confirmations, receipts, and updates
• Facilitating payment transactions and preventing fraud
• Coordinating delivery logistics and communicating estimated delivery times
• Responding to your inquiries, complaints, and customer service requests

3.2 Analytics and Service Improvement

• Analyzing how users interact with our website to improve functionality and user experience
• Monitoring and diagnosing technical issues and errors
• Conducting internal research and data analysis to understand customer preferences
• Evaluating the performance of our menu offerings and promotions
• Developing new features, products, and services

3.3 Marketing and Communications

• Sending promotional emails, newsletters, and special offers about East Coast Wings products and services (with your consent where required)
• Personalizing the content and advertisements you see based on your preferences and behavior
• Sending push notifications about deals, new menu items, and events (if you opt in)
• Running loyalty and rewards programs
• Conducting customer satisfaction surveys and feedback campaigns

You have the right to opt out of marketing communications at any time by clicking the "unsubscribe" link in our emails or by contacting us directly at [email protected].

3.4 Legal and Compliance Purposes

• Complying with applicable laws, regulations, and legal processes
• Enforcing our Terms of Service and other legal agreements
• Protecting our legal rights and interests
• Investigating and preventing fraudulent, harmful, or illegal activity
• Complying with food safety, labeling, and consumer protection obligations

3.5 Operational and Administrative Purposes

• Verifying your identity and preventing unauthorized access to accounts
• Maintaining business records and accounting documentation
• Training staff and improving customer service quality
• Facilitating business transactions such as mergers, acquisitions, or asset sales

4. Legal Basis for Processing (Where Applicable)

While the United States does not currently have a single comprehensive federal privacy law analogous to the European GDPR, we recognize the growing importance of transparency regarding our legal basis for processing. We process your personal data on the following grounds:

• Contract Performance: Processing is necessary to fulfill the contract between you and East Coast Wings (e.g., processing your food order).
• Consent: Where you have provided explicit consent, such as for marketing communications or the use of non-essential cookies.
• Legitimate Business Interests: For purposes such as fraud prevention, website security, analytics, and improving our services, provided your rights and interests do not override those interests.
• Legal Obligation: Where we are required by law to process your data, such as for tax compliance or responding to legal requests.

5. Sharing Your Information with Third Parties

We do not sell your personal information for monetary compensation. However, we may share your data with certain third parties under the following circumstances:

5.1 Service Providers and Business Partners

We engage trusted third-party vendors and service providers who assist us in operating our business and delivering our services. These may include:

• Payment processors (e.g., Stripe, Square, or similar providers) to handle transactions securely
• Delivery and logistics partners who fulfill orders on our behalf
• Email and SMS marketing platforms to send you communications
• Cloud hosting and data storage providers to maintain our infrastructure
• Analytics providers (e.g., Google Analytics) to help us understand website usage
• Customer support tools to manage inquiries and complaints

All service providers are contractually obligated to use your information only for the purposes we specify and to maintain appropriate security standards.

5.2 Business Transfers

In the event that East Coast Wings is involved in a merger, acquisition, sale of assets, financing, or other business transaction, your personal information may be transferred as part of that transaction. We will notify you of any such change in ownership or use of your personal information and of any choices you may have regarding your data.

5.3 Legal Requirements and Law Enforcement

We may disclose your personal information if required to do so by law or in good faith belief that such action is necessary to:

• Comply with a legal obligation, subpoena, court order, or government request
• Protect and defend the rights or property of East Coast Wings
• Prevent or investigate possible wrongdoing in connection with our services
• Protect the personal safety of users of our services or the general public
• Comply with the requirements of the FTC Act or other applicable consumer protection statutes

5.4 Advertising and Analytics Partners

We may share non-personally identifiable information, aggregated data, or certain identifiers with advertising networks and analytics partners for the purpose of delivering targeted advertisements and measuring campaign performance. Where required by law or where you have opted out, we will not share your personal information with these parties in ways that constitute a "sale" under the CCPA/CPRA.

5.5 With Your Consent

We may share your personal information with other third parties when you have explicitly consented to such sharing.

6. Data Security

We take the security of your personal information seriously and implement a range of technical, administrative, and physical safeguards designed to protect your data from unauthorized access, loss, misuse, alteration, or destruction. Our security measures include:

• Encryption: All data transmitted between your browser and our servers is protected using Secure Sockets Layer (SSL)/Transport Layer Security (TLS) encryption.
• Password Hashing: User passwords are stored using industry-standard cryptographic hashing algorithms and are never stored in plain text.
• Access Controls: Access to personal information is restricted to authorized personnel who require it to perform their job functions, and all staff members with data access undergo privacy and security training.
• Secure Payment Processing: We utilize PCI-DSS compliant payment processors and do not store full credit card numbers on our servers.
• Regular Security Audits: We conduct periodic security assessments and vulnerability scans to identify and address potential risks.
• Data Minimization: We only collect and retain the minimum personal information necessary for our stated purposes.
• Incident Response: We maintain a data breach response plan and will notify affected individuals and relevant authorities in the event of a breach, as required by applicable law.

7. Your Privacy Rights

Depending on your state of residence, you may have specific rights regarding your personal information. We are committed to honoring these rights in compliance with applicable law.

7.1 Rights Under the California Consumer Privacy Act (CCPA/CPRA)

If you are a California resident, you have the following rights:

• Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the sources of that information, the purposes for which we use it, and the categories of third parties with whom we share it.
• Right to Delete: You have the right to request that we delete personal information we have collected from you, subject to certain exceptions (e.g., where the information is needed to complete a transaction or comply with legal obligations).
• Right to Correct: You have the right to request that we correct inaccurate personal information we maintain about you.
• Right to Opt-Out of Sale or Sharing: You have the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising. To exercise this right, contact us at [email protected].
• Right to Limit Use of Sensitive Personal Information: You have the right to request that we limit our use of sensitive personal information to purposes permitted by law.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you goods or services, charge different prices, or provide a different level of quality based on your exercise of these rights.

7.2 Rights Available to All Users

Regardless of your state of residence, we offer the following rights to all users:

• Right of Access: You may request a copy of the personal information we hold about you.
• Right of Correction: You may request that we update or correct inaccurate information in your profile.
• Right of Deletion: You may request that we delete your personal data, subject to legal and contractual limitations.
• Right to Withdraw Consent: Where our processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.
• Right to Opt Out of Marketing: You can unsubscribe from our marketing communications at any time.

7.3 How to Exercise Your Rights

To exercise any of the rights described above, please submit a verifiable request to us by:

• Email: [email protected]
• Website: ec-wings.digital (via our contact form)

We will acknowledge your request within 10 business days and respond substantively within 45 calendar days. If we need additional time, we will notify you of the extension and the reason. We may need to verify your identity before processing your request. We will not charge a fee for processing your request unless it is excessive, repetitive, or manifestly unfounded.

8. Cookie Usage

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze traffic, and personalize content and advertisements.

8.1 What Are Cookies?

Cookies are small text files placed on your device by websites you visit. They are widely used to make websites function efficiently and to provide information to the site owners.

8.2 Types of Cookies We Use

8.3 Managing Your Cookie Preferences

You can control and manage cookies through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling certain cookies may affect the functionality of our website. You may also opt out of interest-based advertising by visiting the Network Advertising Initiative (www.networkadvertising.org) or the Digital Advertising Alliance (www.aboutads.info).

For more detailed information about our cookie practices, please refer to our full Cookie Policy available on our website at ec-wings.digital.

9. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Our general data retention practices are as follows:

When your personal information is no longer required, we will securely delete or anonymize it in accordance with our data disposal procedures. Anonymized data that can no longer be used to identify you may be retained indefinitely for statistical and research purposes.

10. Children's Privacy

East Coast Wings does not knowingly collect, solicit, or process personal information from minors under the age of 18. Our services, including online ordering and account creation, are designed for adults only.

In compliance with the Children's Online Privacy Protection Act (COPPA), if we become aware that we have inadvertently collected personal information from a child under the age of 13, we will take immediate steps to delete that information from our records. If you believe we may have collected information from a child, please contact us immediately at [email protected].

Parents and legal guardians who have concerns about their child's use of our website are encouraged to contact us so we can take appropriate action. We encourage parents to actively supervise their children's online activity and to use available parental control tools.

11. International Data Transfers

East Coast Wings is a United States-based business, and your personal information is primarily collected and processed within the United States. However, certain third-party service providers that we use may operate in other countries, which means your personal information may be transferred to, stored, and processed in countries outside the United States.

When your data is transferred internationally, we take appropriate steps to ensure that it receives an adequate level of protection consistent with this Privacy Policy and applicable law. These measures may include:

• Entering into data processing agreements with service providers that include appropriate data protection clauses
• Using service providers that participate in recognized privacy frameworks or comply with equivalent data protection standards
• Ensuring that any transfers to countries with different privacy laws are conducted with appropriate contractual or other safeguards in place

By using our services and providing us with your personal information, you acknowledge that your data may be transferred to and processed in countries outside your country of residence, including the United States, where data protection laws may differ from those in your home country.

12. Third-Party Links and Services

Our website may contain links to third-party websites, social media platforms, and services that are not operated by East Coast Wings. These include links to food delivery partners, social media profiles, and review platforms. This Privacy Policy does not apply to those third-party sites, and we are not responsible for their privacy practices.

We encourage you to review the privacy policies of any third-party websites you visit. The inclusion of a link on our website does not imply our endorsement of that third party's privacy practices or policies.

13. Do Not Track Signals

Some browsers include a "Do Not Track" (DNT) feature that signals to websites that you do not wish to have your online activities tracked. Currently, our website does not respond to DNT signals from browsers, as there is no universal standard for interpreting such signals. We continue to monitor developments in this area and will update our practices if a recognized standard emerges.

California residents may also utilize the Global Privacy Control (GPC) signal as a means of opting out of the sale or sharing of personal information. Where technically feasible, we will honor GPC signals in compliance with the CCPA/CPRA.

14. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or operational needs. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy
• Post a prominent notice on our website
• Where appropriate, notify you by email at the address associated with your account

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our website and services following the posting of changes constitutes your acceptance of those changes.

15. How to File a Complaint

If you have concerns about how we handle your personal information and feel that we have not adequately addressed your inquiry, you have the right to file a complaint with the appropriate regulatory authority.

15.1 California Residents

California residents who believe their CCPA/CPRA rights have been violated may file a complaint with the California Privacy Protection Agency (CPPA):

• Website: https://cppa.ca.gov
• Address: California Privacy Protection Agency, 2101 Arena Blvd, Sacramento, CA 95834

15.2 All United States Residents

If you believe your consumer privacy rights have been violated, you may also file a complaint with the Federal Trade Commission (FTC):

• Website: https://www.ftc.gov/complaint
• Phone: 1-877-FTC-HELP (1-877-382-4357)

15.3 State-Specific Attorneys General

Many states have enacted their own consumer privacy laws and allow residents to file complaints with their state Attorney General's office. We encourage you to consult the consumer protection resources available in your state.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please do not hesitate to reach out to us. We are committed to resolving any concerns promptly and transparently.