Privacy Policy

This Privacy Policy describes how Church's Chicken ("we," "us," "our," or the "Company") collects, uses, discloses, retains, and protects personal information obtained from visitors and users ("you" or "your") who access or interact with our website located at chickschurchs.digital (the "Website"), our mobile applications, our online ordering platforms, our loyalty programs, and any other digital or physical services we provide (collectively, the "Services"). Please read this Privacy Policy carefully before using our Services.

By accessing or using our Website and Services, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with this Privacy Policy, please discontinue use of our Services immediately. We reserve the right to update this Privacy Policy at any time, and we will notify you of material changes as described in the section titled "Changes to This Privacy Policy" below.

This Privacy Policy applies to all residents of the United States and is designed to comply with applicable federal and state privacy laws, including but not limited to the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), the Children's Online Privacy Protection Act (COPPA), and other applicable state and federal regulations.

1. About Us and How to Contact Us

Church's Chicken operates the website chickschurchs.digital and provides food and restaurant-related services across the United States. We are committed to protecting your privacy and handling your personal information responsibly, transparently, and in accordance with all applicable laws.

Contact Information for Privacy Inquiries

For all privacy-related questions, concerns, requests, or complaints, you may contact us by email at [email protected]. We will make every reasonable effort to respond to your inquiry within the timeframes required by applicable law.

2. Information We Collect

We collect several categories of personal information depending on how you interact with our Website and Services. The categories below describe the types of data we may collect directly from you, automatically through your use of our Services, or from third-party sources.

2.1 Personal Identification Information

When you create an account, place an order, sign up for our loyalty or rewards program, participate in a promotion, contest, or survey, or contact us for customer support, we may collect:

• Full name (first and last name)
• Email address
• Phone number (mobile or home)
• Postal or billing address
• Date of birth (to verify age eligibility for certain promotions)
• Username and password for your account
• Profile photo or avatar (if you choose to upload one)
• Payment card information (processed securely through our PCI-DSS compliant payment processors)

2.2 Order and Transaction Information

When you place an order through our Website, mobile app, or in-store systems, we collect:

• Food and beverage items ordered
• Order history and frequency
• Delivery address and pickup location details
• Special instructions or dietary preferences you voluntarily provide
• Transaction amounts and payment methods used
• Loyalty points earned and redeemed
• Promotional codes or discount vouchers applied

2.3 Usage Data and Technical Information

When you visit our Website or use our mobile applications, we automatically collect certain technical information, including:

• IP address
• Browser type and version
• Operating system and device type
• Internet Service Provider (ISP)
• Pages viewed and content accessed
• Time and date of your visit
• Time spent on each page
• Referring and exit URLs
• Search queries entered on our Website
• Clickstream data and navigation paths
• Error logs and crash reports

2.4 Device Information

If you use our mobile application or access our Website from a mobile device, we may collect:

• Device identifiers (such as IDFA or Android Advertising ID)
• Device model and hardware specifications
• Mobile network information
• Installed applications (only where necessary for app functionality)
• Push notification tokens
• Location data (precise GPS location, only with your explicit consent)

2.5 Cookies and Tracking Technologies

We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about your browsing behavior on our Website. Please refer to Section 8 of this Privacy Policy and our separate Cookie Policy for more detailed information about the types of cookies we use and how you can manage your cookie preferences.

2.6 Communications Data

If you contact us by email, phone, or through online chat or feedback forms, we may collect:

• The content of your messages and communications
• Your contact information used to send the communication
• Records of correspondence for quality assurance and legal purposes
• Call recordings (where permitted by law and with appropriate notice)

2.7 Information from Third-Party Sources

We may receive information about you from third-party sources, such as:

• Social media platforms (if you log in using Facebook, Google, or Apple sign-in)
• Third-party food delivery partners (e.g., DoorDash, Uber Eats, Grubhub)
• Marketing data providers and analytics vendors
• Publicly available sources
• Fraud prevention and identity verification services

3. How We Use Your Information

We use the personal information we collect for a variety of legitimate business purposes. These purposes include, but are not limited to:

3.1 Providing and Managing Our Services

• Processing and fulfilling your food orders, including delivery and pickup
• Creating and managing your customer account
• Processing payments and preventing fraudulent transactions
• Managing our loyalty and rewards program
• Sending order confirmations, receipts, and delivery updates
• Responding to customer service inquiries and complaints
• Facilitating returns, refunds, and dispute resolution

3.2 Analytics and Service Improvement

• Analyzing how customers use our Website and mobile applications
• Conducting market research and customer satisfaction surveys
• Monitoring and improving the performance, functionality, and user experience of our digital platforms
• Developing new products, menu items, promotions, and features
• Tracking sales trends, popular menu items, and peak ordering periods
• Identifying and fixing bugs, technical errors, and security vulnerabilities

3.3 Marketing and Advertising

• Sending you promotional emails, newsletters, and special offers (where you have provided consent or where permitted by law)
• Displaying targeted advertisements on our Website and on third-party platforms
• Personalizing marketing content based on your order history, location, and preferences
• Running contests, sweepstakes, and promotional campaigns
• Retargeting visitors who have previously browsed our Website or abandoned shopping carts
• Measuring the effectiveness of our marketing campaigns and advertisements

You may opt out of receiving marketing communications at any time by clicking the "unsubscribe" link in any marketing email, by updating your account preferences, or by contacting us at [email protected]. Please note that even if you opt out of marketing communications, we may still send you transactional or service-related messages.

3.4 Legal Compliance and Safety

• Complying with applicable laws, regulations, and legal obligations
• Responding to lawful requests from government authorities, law enforcement, or regulatory bodies
• Enforcing our Terms of Service and other agreements
• Protecting the rights, property, or safety of Church's Chicken, our customers, and the public
• Detecting, investigating, and preventing fraud, abuse, and other unlawful activities

4. Sharing Your Information with Third Parties

We do not sell, rent, or lease your personal information to unaffiliated third parties for their own independent marketing purposes without your explicit consent. However, we do share your information in the following limited circumstances:

4.1 Service Providers and Vendors

We engage trusted third-party service providers who perform functions on our behalf and who are contractually obligated to protect your information. These service providers may include:

• Payment processors and financial institutions
• Cloud hosting and data storage providers
• Email and SMS marketing platforms
• Customer relationship management (CRM) software providers
• Analytics and performance monitoring services
• Fraud detection and identity verification services
• Food delivery and logistics partners
• Customer support software platforms
• Advertising technology and programmatic advertising networks

4.2 Delivery Partners

When you place a delivery order through our Website or app, we may share your name, delivery address, phone number, and order details with our authorized third-party delivery partners to facilitate the delivery of your food order. These partners are required to use your information solely for the purpose of completing the delivery.

4.3 Business Transfers

In the event that Church's Chicken undergoes a merger, acquisition, reorganization, sale of assets, or bankruptcy proceeding, your personal information may be transferred to the acquiring or successor entity as part of the transaction. We will provide notice before your personal information is transferred and becomes subject to a different privacy policy.

4.4 Legal Requirements and Law Enforcement

We may disclose your personal information if required to do so by law or in response to valid legal processes, including subpoenas, court orders, government investigations, or regulatory inquiries. We may also disclose your information where we believe disclosure is necessary to protect the rights, property, or safety of Church's Chicken, our users, or the general public, or to prevent or investigate possible fraud or other illegal activity.

4.5 With Your Consent

We may share your personal information with other third parties when we have obtained your express consent to do so, including for co-branded promotions, partner loyalty programs, or joint marketing initiatives.

5. Data Security

We take the security of your personal information seriously and implement a range of technical, administrative, and physical safeguards designed to protect your data against unauthorized access, disclosure, alteration, or destruction. Our security measures include:

• Encryption: We use Secure Socket Layer (SSL) and Transport Layer Security (TLS) encryption to protect data transmitted between your browser and our servers.
• Payment Security: All payment card transactions are processed through PCI-DSS compliant payment processors. We do not store full credit card numbers on our servers.
• Access Controls: We restrict access to personal information to authorized employees, contractors, and service providers who need access to perform their job functions.
• Multi-Factor Authentication: Where applicable, we implement multi-factor authentication for administrative access to our systems.
• Regular Security Assessments: We conduct regular vulnerability assessments, penetration testing, and security audits of our digital infrastructure.
• Data Minimization: We only collect and retain personal information that is necessary for the purposes described in this Privacy Policy.
• Employee Training: Our staff receives regular training on data protection, cybersecurity best practices, and privacy compliance.
• Incident Response: We maintain a data breach response plan and will notify affected individuals and relevant authorities in accordance with applicable law in the event of a qualifying security incident.

Despite our best efforts, no method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee the absolute security of your information, and you provide your personal information at your own risk. If you believe your account or personal information has been compromised, please contact us immediately at [email protected].

6. Your Privacy Rights

Depending on your state of residence, you may have certain rights with respect to the personal information we hold about you. We are committed to honoring these rights in accordance with applicable law.

6.1 Rights for California Residents (CCPA/CPRA)

If you are a resident of California, you have the following rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which we collected it, the business or commercial purpose for collecting it, and the categories of third parties with whom we share it.
• Right to Delete: You have the right to request that we delete personal information we have collected from you, subject to certain exceptions provided by law.
• Right to Correct: You have the right to request that we correct inaccurate personal information that we maintain about you.
• Right to Opt-Out of Sale or Sharing: You have the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising. To exercise this right, click Do Not Sell or Share My Personal Information.
• Right to Limit Use of Sensitive Personal Information: You have the right to limit our use and disclosure of sensitive personal information to what is necessary to perform the Services.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights. We will not deny you goods or services, charge you different prices, or provide a different level of service solely because you exercised your rights under the CCPA/CPRA.

6.2 Rights for All U.S. Residents

Regardless of your state of residence, you may have the following general rights:

• Right to Access: You may request a copy of the personal information we hold about you.
• Right to Correction: You may request that we correct or update inaccurate or incomplete personal information.
• Right to Deletion: You may request that we delete your personal information, subject to legal retention obligations.
• Right to Opt-Out of Marketing: You may opt out of receiving promotional and marketing communications at any time.
• Right to Data Portability: Where applicable, you may request a copy of your personal information in a portable, commonly used, and machine-readable format.
• Right to Withdraw Consent: Where we rely on your consent to process personal information, you have the right to withdraw your consent at any time.

6.3 How to Exercise Your Rights

To exercise any of the rights described above, please submit a verifiable request to us using one of the following methods:

• Email: [email protected]
• Online Form: Submit a request through the privacy request form on our Website

We will respond to your request within 45 days of receipt, or within any extended timeframe permitted by applicable law. We may need to verify your identity before processing your request to protect the security of your personal information. For requests made through an authorized agent on your behalf, we may require written authorization or a valid power of attorney.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by applicable law. The specific retention periods we apply vary depending on the type of data and the purpose for which it was collected:

After the applicable retention period expires, we will securely delete, destroy, or anonymize your personal information in accordance with our data retention and disposal policies. In some cases, we may retain anonymized or aggregated data that cannot be used to identify you for statistical and research purposes indefinitely.

8. Cookies and Tracking Technologies

Our Website uses cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic and usage patterns, deliver personalized content and advertisements, and support certain functional features of our Website.

8.1 Types of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for the operation of our Website and cannot be disabled. They include cookies that enable you to log in, place orders, and use our shopping cart.
• Performance and Analytics Cookies: These cookies collect information about how visitors use our Website, including which pages are most visited and whether users encounter error messages. We use this data to improve our Website's performance.
• Functional Cookies: These cookies allow our Website to remember your preferences, such as your language settings, location, and saved order preferences, to provide a more personalized experience.
• Targeting and Advertising Cookies: These cookies are used to deliver advertisements that are more relevant to your interests and to measure the effectiveness of our advertising campaigns. They may be placed by our advertising partners.

8.2 Managing Your Cookie Preferences

You may control and manage cookies through your browser settings or through our cookie consent banner. Most web browsers allow you to refuse cookies, delete existing cookies, or receive a warning before a cookie is placed. Please note that disabling certain cookies may affect the functionality and performance of our Website.

For more detailed information about the cookies we use, the purposes for which we use them, and how to manage your preferences, please visit our full Cookie Policy.

9. Children's Privacy

Our Website and Services are intended for use by individuals who are 18 years of age or older. We do not knowingly collect, use, or disclose personal information from children under the age of 13 without verifiable parental consent, in compliance with the Children's Online Privacy Protection Act (COPPA).

If you are under 13 years of age, you are not permitted to use our Website, create an account, or submit any personal information through our Services. If you are between 13 and 17 years of age, you may only use our Services with the involvement and consent of a parent or legal guardian.

If we become aware that we have inadvertently collected personal information from a child under the age of 13 without parental consent, we will take immediate steps to delete that information from our records. If you believe that your child has provided personal information to us without your consent, please contact us promptly at [email protected] so that we can take appropriate action.

10. International Data Transfers

Church's Chicken is based in the United States, and all data processing activities are primarily conducted within the United States. If you are accessing our Services from outside the United States, please be aware that your personal information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country of residence.

We take steps to ensure that any international transfers of personal information are carried out in compliance with applicable law and that appropriate safeguards are in place to protect your information. This may include executing standard contractual clauses approved by relevant data protection authorities or relying on other legally recognized transfer mechanisms.

By using our Services from outside the United States, you consent to the transfer, processing, and storage of your personal information in the United States as described in this Privacy Policy.

11. Third-Party Links and Services

Our Website may contain links to third-party websites, social media platforms, or services that are not operated or controlled by Church's Chicken. This Privacy Policy does not apply to those third-party websites or services. We encourage you to review the privacy policies of any third-party websites you visit. We have no responsibility for the privacy practices of third parties and are not liable for any harm caused by your interactions with those third-party sites.

Our Website may also integrate with third-party social media platforms, such as Facebook, Instagram, Twitter/X, and YouTube. If you interact with social media features on our Website (such as "Like" or "Share" buttons), those platforms may collect your IP address and other information. Your interactions with these features are governed by the privacy policies of the respective social media companies.

12. Do Not Track Signals

Some web browsers include a "Do Not Track" (DNT) feature that signals to websites that you do not want to be tracked across different websites. At this time, there is no universally accepted standard for responding to DNT signals, and our Website does not currently alter its data collection and tracking practices in response to DNT signals. However, you may use our cookie consent tools and browser settings to manage your tracking preferences.

California residents may also exercise their rights under the CCPA/CPRA to opt out of the sale or sharing of personal information by clicking the Do Not Sell or Share My Personal Information link on our Website.

13. Your Choices and Opt-Out Options

We respect your right to control how your personal information is used. In addition to the privacy rights described in Section 6, you have the following choices:

• Email Marketing: You may opt out of receiving promotional emails by clicking the "unsubscribe" link in any marketing email. Please allow up to 10 business days for your opt-out request to take effect.
• SMS/Text Messages: If you have opted in to receive text message promotions, you may opt out by replying "STOP" to any promotional text message we send you.
• Push Notifications: You may disable push notifications from our mobile app through your device settings at any time.
• Location Data: You may disable location tracking on our mobile app through your device's permission settings.
• Personalized Advertising: You may opt out of interest-based advertising by visiting the Network Advertising Initiative (NAI) opt-out page at optout.networkadvertising.org or the Digital Advertising Alliance (DAA) opt-out page at optout.aboutads.info.
• Account Deletion: You may request deletion of your account and associated personal information by contacting us at [email protected].

14. How to File a Complaint with a Data Protection Authority

If you believe that we have violated your privacy rights or failed to comply with applicable data protection laws, we encourage you to contact us first so that we can attempt to resolve your concern directly. Please reach out to our privacy team at [email protected].

If you are a California resident and you are not satisfied with our response, you may file a complaint with the California Privacy Protection Agency (CPPA):

Additionally, if you believe we have engaged in unfair or deceptive trade practices in violation of the FTC Act, you may file a complaint with the Federal Trade Commission (FTC):

Residents of other states may have the right to file complaints with their respective state attorney general's office or other applicable state data protection authorities.

15. Changes to This Privacy Policy

We reserve the right to update, modify, or revise this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes to this Privacy Policy, we will:

• Update the "Last Updated" date at the top of this Privacy Policy
• Post a prominent notice on our Website or mobile application
• Send an email notification to registered account holders where required by law

We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use, and protect your personal information. Your continued use of our Website and Services after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms.

16. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of the United States and applicable state laws. Any disputes arising out of or relating to this Privacy Policy shall be resolved in accordance with applicable federal and state law, including but not limited to the California Consumer Privacy Act (CCPA/CPRA), the Federal Trade Commission Act (FTC Act), the Children's Online Privacy Protection Act (COPPA), and other applicable privacy and consumer protection statutes.

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact our privacy team using the contact details below. We are committed to addressing your inquiries promptly and transparently.

We strive to respond to all privacy-related inquiries within 45 days. For requests under the CCPA/CPRA or other applicable state laws, we will meet the deadlines required by law. Thank you for trusting Church's Chicken with your personal information. We are dedicated to maintaining your privacy and the security of your data.

This Privacy Policy was last updated on March 26, 2026.