Privacy Policy

This Privacy Policy describes how Dewey's BBQ ("we," "us," "our," or "the Company") collects, uses, discloses, retains, and protects your personal information when you visit our website at deweys-bbq.rest, place an order, subscribe to our communications, or otherwise interact with our services (collectively, the "Services"). We are committed to handling your personal information responsibly, transparently, and in accordance with applicable United States federal and state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and the Federal Trade Commission Act (FTC Act).

Please read this Privacy Policy carefully before using our website or submitting any personal information to us. By accessing or using our Services, you acknowledge that you have read, understood, and agree to the practices described in this policy. If you do not agree with the terms of this Privacy Policy, please discontinue use of our website and Services immediately.

For questions, concerns, or requests related to your privacy, please contact us at the information provided in the Contact Information section at the bottom of this policy.

1. Who We Are

Dewey's BBQ is a food service business operating in the United States. We provide barbecue food products, online ordering capabilities, promotional communications, and related customer services through our website and other channels.

• Business Name: Dewey's BBQ
• Website: deweys-bbq.rest
• Email: [email protected]

We operate as a data controller with respect to the personal information collected through our website and Services, meaning we determine the purposes and means of processing your personal data.

2. Information We Collect

We collect various categories of personal information from you depending on how you interact with our Services. The types of information we may collect include the following:

2.1 Personal Information You Provide Directly

When you use our Services, create an account, place an order, contact us, or sign up for promotions, you may voluntarily provide us with:

• Identity Information: First name, last name, username or similar identifier.
• Contact Information: Email address, telephone number, billing address, delivery address, and postal code.
• Payment Information: Credit card numbers, debit card numbers, and other payment details. Please note that payment card data is processed by our third-party payment processors and is not stored directly on our servers.
• Order Information: Details about the food products you have ordered, special instructions, dietary preferences or restrictions, and order history.
• Account Credentials: Username, password, and security questions if you create an account with us.
• Communications: Any messages, feedback, reviews, complaints, or correspondence you send us via email, contact forms, or other channels.
• Marketing Preferences: Your preferences regarding receiving marketing communications from us.

2.2 Information We Collect Automatically

When you visit our website or use our digital Services, we automatically collect certain technical and usage data, including:

• Device Information: IP address, browser type and version, operating system, device type (mobile, tablet, desktop), device identifiers, screen resolution, and language settings.
• Usage Data: Pages visited, links clicked, time spent on pages, referring URLs, search terms used on our website, and navigation patterns throughout the site.
• Log Data: Server log files that record your activity on our website, including access times, error logs, and HTTP request data.
• Location Data: Approximate geolocation data derived from your IP address. If you enable precise location services on your mobile device, we may collect more specific location information to assist with delivery services.
• Cookie and Tracking Data: Information collected via cookies, pixel tags, web beacons, and similar tracking technologies. Please see our Cookie Usage section for more details.

2.3 Information Collected from Third Parties

We may receive personal information about you from third-party sources, including:

• Analytics Providers: Aggregated and pseudonymized data from providers such as Google Analytics to help us understand website traffic and user behavior.
• Social Media Platforms: If you interact with us on social media platforms (such as Facebook, Instagram, or Twitter/X), we may receive publicly available information or information you authorize those platforms to share with us.
• Third-Party Delivery Partners: If you place an order through a third-party food delivery platform that partners with us, we may receive your order details and contact information necessary to fulfill your order.
• Payment Processors: Confirmation and transaction reference data from payment processing providers after a transaction is completed.

3. How We Use Your Information

We use the personal information we collect for the following purposes, all of which are grounded in legitimate business needs, compliance with applicable law, fulfillment of contracts, or your consent where required:

3.1 Service Provision and Order Fulfillment

• Processing and fulfilling your food orders, including coordinating delivery or pickup.
• Managing your customer account and providing access to order history.
• Processing payments and preventing fraudulent transactions.
• Communicating with you about the status of your orders, including confirmations, updates, and changes.
• Providing customer service and responding to your inquiries, complaints, and feedback.

3.2 Analytics and Website Improvement

• Analyzing usage trends and patterns to understand how customers interact with our website.
• Improving the functionality, layout, performance, and overall user experience of our website.
• Conducting internal research and development to enhance our menu offerings and services.
• Monitoring the technical performance and security of our website and systems.
• Generating aggregated, anonymized statistical reports for business intelligence purposes.

3.3 Marketing and Promotional Communications

• Sending you promotional emails, newsletters, special offers, discount codes, and information about new menu items — but only where you have opted in or where we are otherwise permitted to do so under applicable law.
• Personalizing marketing communications based on your order history, preferences, and interactions with our website.
• Delivering targeted advertising through third-party platforms, including social media advertising, where applicable.
• Conducting customer surveys, contests, and promotional programs.

You have the right to opt out of receiving marketing communications from us at any time. Please see the Your Privacy Rights section for details on how to exercise this right.

3.4 Legal Compliance and Safety

• Complying with applicable federal, state, and local laws and regulations.
• Responding to lawful requests from government authorities, law enforcement agencies, or courts.
• Enforcing our Terms of Service and other legal agreements.
• Protecting the rights, property, and safety of our business, our customers, and the public.
• Detecting, preventing, and investigating fraud, security breaches, and other prohibited activities.

4. Sharing Your Information with Third Parties

We do not sell your personal information to third parties for monetary compensation. We may, however, share your information with trusted third parties in the following circumstances:

4.1 Service Providers and Business Partners

We engage third-party vendors and service providers who assist us in operating our business and delivering our Services. These parties are contractually obligated to use your personal information only as directed by us and in accordance with this Privacy Policy. Categories of service providers include:

• Payment Processors: To securely process credit, debit, and other payment transactions.
• Delivery Partners: To coordinate and fulfill food delivery orders.
• Email and Marketing Platforms: To send transactional and promotional communications on our behalf.
• Analytics Providers: To collect and analyze website usage data (e.g., Google Analytics).
• Cloud Hosting and IT Services: To host our website, maintain our databases, and provide cybersecurity services.
• Customer Support Tools: To manage customer inquiries and support tickets.

4.2 Legal Requirements

We may disclose your personal information to government authorities, law enforcement agencies, courts, regulators, or other third parties when we believe in good faith that such disclosure is required or permitted by law, including but not limited to:

• Complying with a subpoena, court order, or other legal process.
• Responding to a lawful request from a government or regulatory authority.
• Protecting the rights, property, or safety of our Company, employees, customers, or the public.
• Investigating or preventing fraud, security incidents, or other illegal activities.

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy proceeding involving Dewey's BBQ, your personal information may be transferred to the acquiring or surviving entity as part of that transaction. We will notify you via email or a prominent notice on our website if such a transfer occurs and your personal information becomes subject to a different privacy policy.

4.4 With Your Consent

We may share your personal information with other third parties where you have provided your explicit consent for us to do so. You may withdraw such consent at any time by contacting us at [email protected].

5. Data Security

We take the security of your personal information seriously and have implemented a range of technical, administrative, and physical safeguards designed to protect your data from unauthorized access, use, alteration, disclosure, or destruction. Our security measures include:

5.1 Technical Safeguards

• Encryption: Our website uses Transport Layer Security (TLS/SSL) encryption to protect data transmitted between your browser and our servers.
• Secure Payment Processing: Payment card data is processed through PCI DSS-compliant payment processors. We do not store raw payment card information on our own servers.
• Access Controls: Access to personal data within our systems is restricted to authorized employees and contractors who need the information to perform their job functions.
• Firewalls and Intrusion Detection: We use firewalls, network monitoring tools, and intrusion detection systems to protect our infrastructure.

5.2 Administrative Safeguards

• Employee training on data privacy and security best practices.
• Internal data governance policies and procedures.
• Confidentiality agreements with employees and contractors who handle personal data.
• Regular reviews and audits of our data security practices.

5.3 Limitations

While we strive to protect your personal information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your data. In the event of a data breach that affects your personal information, we will notify you as required by applicable law, including state breach notification laws. If you believe your account has been compromised or you suspect unauthorized access to your personal information, please contact us immediately at [email protected].

6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with our legal obligations, resolve disputes, and enforce our agreements. The following general retention periods apply:

After the applicable retention period expires, we will securely delete or anonymize your personal information. Where deletion is not immediately possible (for example, because data is stored in backup archives), we will isolate your data from further processing until deletion is feasible.

7. Cookie Usage

Our website uses cookies and similar tracking technologies (including pixel tags, web beacons, and local storage) to enhance your browsing experience, analyze site traffic, and support our marketing activities.

7.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the website to function correctly, including maintaining your session, remembering items in your cart, and enabling secure login.
• Performance and Analytics Cookies: Used to collect information about how visitors use our website, including which pages are most visited and any error messages encountered. This helps us improve how our website works.
• Functionality Cookies: Allow our website to remember choices you make (such as your preferred language or region) and provide enhanced, personalized features.
• Targeting and Advertising Cookies: Used to deliver advertisements relevant to you and your interests. They also limit the number of times you see an ad and help measure the effectiveness of advertising campaigns.

7.2 Managing Your Cookie Preferences

You can control and manage cookies in several ways. Most web browsers allow you to refuse or delete cookies through the browser settings. Please note that disabling certain cookies may affect the functionality of our website. You may also opt out of interest-based advertising through the Digital Advertising Alliance's opt-out tool at optout.aboutads.info or the Network Advertising Initiative at optout.networkadvertising.org.

For a detailed explanation of the specific cookies we use, their purposes, and how long they remain active, please refer to our Cookie Policy, available on our website.

8. Your Privacy Rights

Depending on your state of residence, you may have certain rights regarding your personal information under applicable U.S. privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the CPRA, and other state privacy statutes. We honor these rights for all U.S. residents to the extent required by law.

8.1 Right to Know and Access

You have the right to request that we disclose what personal information we have collected about you, the categories and specific pieces of personal information, the sources from which we collected it, the purposes for which we use it, and the categories of third parties with whom we share it.

8.2 Right to Correction

You have the right to request that we correct inaccurate personal information we hold about you, taking into account the nature of the information and the purposes for which it is processed.

8.3 Right to Deletion

You have the right to request that we delete personal information we have collected from you, subject to certain exceptions required by law (such as retaining data necessary to complete a transaction, comply with legal obligations, or detect security incidents).

8.4 Right to Opt Out of Sale or Sharing

Under the CCPA/CPRA, California residents have the right to opt out of the "sale" or "sharing" of their personal information for cross-context behavioral advertising. We do not sell personal information for monetary compensation. However, our use of certain third-party advertising and analytics tools may constitute "sharing" under California law. To opt out, you may contact us at [email protected] or use the "Do Not Sell or Share My Personal Information" option if displayed on our website.

8.5 Right to Limit Use of Sensitive Personal Information

California residents have the right to direct us to limit the use and disclosure of sensitive personal information (such as precise geolocation, health data, or financial account information) to only those uses necessary to perform the Services or as otherwise permitted by law.

8.6 Right to Data Portability

You may request a copy of the personal information you provided to us in a structured, commonly used, and machine-readable format, to the extent technically feasible.

8.7 Right to Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights. We will not deny you services, charge you different prices, or provide you with a different level of quality of service solely because you exercised a right under this Privacy Policy or applicable law.

8.8 Right to Opt Out of Marketing Communications

You may opt out of receiving marketing emails from us at any time by clicking the "unsubscribe" link at the bottom of any marketing email, or by contacting us directly at [email protected]. Please note that even after opting out of marketing communications, you will continue to receive transactional and operational emails related to your orders and account.

8.9 How to Submit a Privacy Request

To exercise any of the rights listed above, please contact us using one of the following methods:

• Email: [email protected]
• Website: deweys-bbq.rest

We will verify your identity before processing your request to ensure we are not disclosing or deleting information belonging to another person. We will respond to your request within 45 days of receipt. If we need more time, we will inform you of the extension and the reason for it. We may extend the response period by an additional 45 days where reasonably necessary.

You may designate an authorized agent to submit requests on your behalf. Authorized agents must provide proof of their authorization and you may be required to verify your identity directly with us.

9. Children's Privacy

Our Services are intended for use by individuals who are 18 years of age or older. We do not knowingly collect, solicit, or process personal information from children under the age of 13, and we do not direct our Services to children under 13. Our practices comply with the Children's Online Privacy Protection Act (COPPA).

If you are a parent or legal guardian and believe that your child under the age of 13 has provided us with personal information without your consent, please contact us immediately at [email protected]. Upon verification, we will promptly delete the child's personal information from our systems.

We strongly encourage parents and guardians to monitor their children's online activities and to ensure that children do not submit personal information to websites without parental supervision and consent. By using our Services, you represent and warrant that you are at least 18 years of age.

10. International Data Transfers

Dewey's BBQ is based in the United States, and our primary data processing activities take place within the United States. By accessing our Services from outside the United States, you understand and acknowledge that your personal information will be transferred to and processed in the United States, where data protection laws may differ from those in your country of residence.

If we transfer personal information internationally (for example, if we use a service provider located outside the United States), we will take appropriate measures to ensure that such transfers comply with applicable law and that your personal information remains protected to a standard consistent with this Privacy Policy. These measures may include entering into data transfer agreements or relying on other lawful transfer mechanisms.

If you have questions about international data transfers and the specific safeguards in place, please contact us at [email protected].

11. Third-Party Links and Services

Our website may contain links to third-party websites, social media platforms, delivery apps, or other services that are not operated by us. This Privacy Policy does not apply to those third-party sites or services. We have no control over, and accept no responsibility for, the content or privacy practices of any third-party website or service. We strongly encourage you to review the privacy policies of any third-party sites you visit before providing them with your personal information.

The inclusion of a link to a third-party website does not constitute our endorsement of that website or its privacy practices.

12. Do Not Track Signals

Some web browsers transmit "Do Not Track" (DNT) signals to websites. There is currently no universally accepted standard for how websites should respond to DNT signals. As a result, our website does not currently respond to DNT browser signals. However, you can manage your cookie preferences and opt out of certain tracking activities as described in our Cookie Usage section above.

13. Automated Decision-Making and Profiling

We may use automated tools and algorithms to analyze your interactions with our website and Services, such as recommending menu items based on your order history or personalizing promotional offers. These automated processes are used to enhance your experience and provide more relevant content and offers.

We do not currently make decisions about you that have significant legal or similarly significant effects based solely on automated processing, without human review. If this practice changes, we will update this Privacy Policy and provide you with additional information and the ability to opt out where required by applicable law.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business practices, applicable laws, or technological developments. When we make material changes, we will:

• Update the "Last Updated" date at the top of this Privacy Policy.
• Post a prominent notice on our website homepage informing users of the change.
• Send an email notification to registered account holders where required by law or where we deem it appropriate.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information. Your continued use of our Services after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you do not agree with any material changes, you should discontinue use of our Services and may request deletion of your account and personal data.

15. How to File a Complaint

If you believe your privacy rights have been violated or that we have not handled your personal information in compliance with applicable law, we encourage you to contact us directly first so that we can attempt to resolve the matter. Please reach out to us at:

• Email: [email protected]

We will investigate your complaint and respond within a reasonable timeframe. If you are not satisfied with our response or believe we are not processing your data in accordance with the law, you have the right to file a complaint with the appropriate authority:

15.1 Federal Trade Commission (FTC)

The Federal Trade Commission enforces federal consumer protection laws, including rules related to unfair or deceptive trade practices in the collection and use of personal information. You may file a complaint with the FTC at:

• Website: www.ftc.gov/complaint
• Phone: 1-877-382-4357

15.2 California Residents — California Privacy Protection Agency (CPPA)

California residents who believe their rights under the CCPA/CPRA have been violated may file a complaint with the California Privacy Protection Agency (CPPA):

• Website: cppa.ca.gov
• Email: [email protected]

15.3 State Attorneys General

Residents of other U.S. states may have the right to file privacy-related complaints with their state Attorney General's office. Please visit your state's official government website for information on how to file a complaint.

16. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please do not hesitate to contact us. We are committed to addressing your privacy inquiries promptly and professionally.

When contacting us with a privacy request or inquiry, please provide sufficient information to identify yourself and describe your request clearly so that we can respond effectively. We will endeavor to respond to all legitimate privacy inquiries within 45 days of receipt.