Privacy Policy

Welcome to Hangry Joe's. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website meal-hangryjoes.click, place food orders, or otherwise interact with us. Please read this policy carefully. If you disagree with its terms, please discontinue use of our website immediately.

This Privacy Policy applies to all users of our website and digital services located in the United States. We are committed to complying with all applicable federal and state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), and other applicable U.S. privacy regulations.

1. About Us

Hangry Joe's is a food service business operating through our online platform. Our contact information is as follows:

For all privacy-related inquiries, requests, or concerns, you may contact us directly at the email address listed above. We will make every reasonable effort to respond to your inquiry in a timely and thorough manner.

2. Information We Collect

We collect various categories of information depending on how you interact with our platform. This includes information you provide directly, information collected automatically, and information obtained from third-party sources.

2.1 Personal Information You Provide to Us

When you create an account, place an order, subscribe to our newsletter, contact our support team, or otherwise engage with our services, you may provide us with the following types of personal information:

• Identification Information: Full name, username, and profile photo (if applicable).
• Contact Information: Email address, mailing address, phone number, and delivery address.
• Payment Information: Credit or debit card numbers, billing address, and transaction details. Note: We do not store full payment card numbers. Payment data is processed through PCI-DSS compliant third-party processors.
• Order Details: Food preferences, dietary restrictions or allergies, order history, and special instructions.
• Account Credentials: Username and encrypted passwords used to access your account.
• Communications: Messages, feedback, reviews, or complaints you send to us directly via email, web form, or any other communication channel.
• Promotional Information: Information submitted when you participate in sweepstakes, promotions, surveys, or loyalty programs.

2.2 Information Collected Automatically

When you visit our website, certain information is collected automatically through the use of cookies, web beacons, pixels, and similar tracking technologies. This information includes:

• Device Information: IP address, device type, operating system, browser type and version, device identifiers, and screen resolution.
• Usage Data: Pages visited, links clicked, time spent on each page, referring URLs, search queries entered on our platform, and navigation patterns.
• Location Data: General geographic location inferred from your IP address. If you grant permission, we may collect more precise GPS-based location data to facilitate delivery services.
• Log Data: Server logs recording access times, errors encountered, and other diagnostic information.
• Cookie Data: Information stored in cookies and similar tracking technologies. Please see Section 8 of this policy for more details.

2.3 Information from Third Parties

We may receive information about you from the following third-party sources:

• Social Media Platforms: If you log in to our platform using a social media account (such as Facebook, Google, or Apple), we receive certain profile information permitted by your privacy settings on that platform.
• Analytics Partners: Aggregated and de-identified data from analytics service providers to help us understand traffic and usage patterns.
• Delivery and Payment Partners: Confirmation of delivery status and payment processing outcomes from our third-party logistics and payment providers.
• Advertising Networks: Data used to measure the effectiveness of our marketing campaigns on external platforms.

3. How We Use Your Information

We use the information we collect for legitimate business purposes, including but not limited to the following:

3.1 Providing and Managing Our Services

• Processing and fulfilling your food orders and managing your account.
• Communicating order confirmations, delivery updates, receipts, and customer service responses.
• Facilitating payment processing and preventing fraudulent transactions.
• Personalizing your experience on our platform, including recommending menu items based on your preferences and order history.
• Managing loyalty and rewards programs.

3.2 Analytics and Platform Improvement

• Analyzing user behavior to understand how our platform is used and identify areas for improvement.
• Conducting internal research and development to enhance our menu, delivery services, and user interface.
• Monitoring and analyzing trends, usage, and activity in connection with our services.
• Diagnosing technical issues and ensuring the stability and security of our platform.

3.3 Marketing and Communications

• Sending you promotional emails, special offers, new menu announcements, and news about Hangry Joe's — only where you have given us consent or where we have a legitimate interest to do so.
• Displaying targeted advertisements on our platform or third-party websites based on your browsing and order history.
• Sending push notifications (where you have enabled them) related to orders or promotions.
• You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any email or by contacting us at [email protected].

3.4 Legal Compliance and Safety

• Complying with applicable laws, regulations, and legal processes.
• Enforcing our Terms of Service and other applicable agreements.
• Detecting, investigating, and preventing fraudulent activity, security breaches, or other prohibited conduct.
• Protecting the rights, safety, and property of Hangry Joe's, our customers, and the public.

4. Legal Basis for Processing

As a business operating in the United States, we rely on various legal grounds to process your personal information. These include:

• Contractual Necessity: Processing required to fulfill your orders and manage your account.
• Legitimate Interests: Processing necessary for our legitimate business interests, such as improving our services and preventing fraud, where those interests are not overridden by your privacy rights.
• Consent: Where you have provided explicit consent, such as for marketing communications or certain cookie placements. You may withdraw consent at any time.
• Legal Obligation: Processing required to comply with applicable laws and regulations.

5. Sharing Your Information with Third Parties

We do not sell your personal information to third parties. However, we may share your information in the following circumstances:

5.1 Service Providers and Business Partners

We share information with trusted third-party vendors and service providers who perform services on our behalf. These include:

• Payment Processors: To securely process your payment transactions.
• Delivery Partners: To coordinate the delivery of your food orders to your specified address.
• Cloud and IT Services: Hosting, database management, data storage, and cybersecurity services.
• Analytics Providers: Such as Google Analytics, to understand how users interact with our platform.
• Email and Communication Providers: To send transactional and marketing emails on our behalf.
• Customer Support Tools: Platforms that help us manage customer inquiries and complaints.

All third-party service providers are contractually obligated to use your data only for the purposes of providing services to us and to maintain appropriate data protection standards consistent with applicable law.

5.2 Legal Requirements

We may disclose your personal information if required to do so by law or in good-faith belief that such disclosure is necessary to:

• Comply with a legal obligation, court order, subpoena, or governmental request.
• Enforce our Terms of Service or defend against legal claims.
• Protect against fraud, security incidents, or technical issues.
• Protect the rights, property, or personal safety of Hangry Joe's, our users, or the public.

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal information may be transferred to the acquiring entity. We will notify you via email or a prominent notice on our website before your information is transferred and becomes subject to a different privacy policy.

5.4 With Your Consent

We may share your information with other third parties for purposes not described above when we have your express consent to do so.

6. Data Security

We take the security of your personal information seriously and implement a range of technical, administrative, and physical safeguards designed to protect your data from unauthorized access, use, disclosure, alteration, or destruction. These measures include:

• Encryption: We use industry-standard SSL/TLS encryption for data transmitted between your browser and our servers. Stored sensitive data is also encrypted at rest where appropriate.
• Access Controls: Access to personal information is restricted to authorized personnel who have a business need to access that data. All staff with access to personal data are trained on data protection obligations.
• Secure Payment Processing: Payment information is handled by PCI-DSS compliant payment processors and is never stored on our servers in unencrypted form.
• Regular Security Audits: We conduct periodic reviews of our security practices and systems to identify and address potential vulnerabilities.
• Incident Response: We maintain an incident response plan to promptly address any data security breaches, including notifying affected individuals and relevant authorities as required by law.

Despite our best efforts, no security measure is completely impenetrable. We cannot guarantee the absolute security of your information, and we encourage you to take steps to protect your own data, such as using a strong, unique password for your account and never sharing your login credentials.

7. Your Privacy Rights

Depending on your state of residence, you may have certain rights regarding your personal information. We are committed to honoring these rights and will respond to verifiable requests within the timeframes required by applicable law.

7.1 Rights Available to All U.S. Users

• Right to Know: You have the right to request information about the categories and specific pieces of personal information we have collected about you.
• Right to Correct: You have the right to request that we correct inaccurate personal information we hold about you.
• Right to Delete: You have the right to request that we delete your personal information, subject to certain legal exceptions.
• Right to Opt Out of Marketing: You have the right to opt out of receiving marketing communications from us at any time.

7.2 Additional Rights for California Residents (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) grants you the following additional rights:

• Right to Know (Detailed): The right to know the categories of personal information collected, the sources of collection, the business or commercial purpose for collection, and the categories of third parties with whom we share your data.
• Right to Data Portability: The right to receive a copy of your personal information in a structured, commonly used, and machine-readable format.
• Right to Opt Out of Sale or Sharing: We do not sell your personal information. However, if this practice changes, California residents will have the right to opt out.
• Right to Limit Use of Sensitive Personal Information: You have the right to limit our use and disclosure of sensitive personal information to what is necessary to provide our services.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. This means we will not deny you services, charge you different prices, or provide a different level of service because you exercised your rights.

7.3 How to Exercise Your Rights

To exercise any of the rights described above, please submit a verifiable request to us using one of the following methods:

• Email: [email protected]

To process your request, we may need to verify your identity to confirm that you are the person about whom we have collected information. This may involve asking you to provide certain account information. We will not use information collected during the verification process for any purpose other than verification.

We will respond to all verifiable requests within 45 days of receipt. If we require additional time, we will notify you of the extension and the reason for it. In certain circumstances, we may deny your request if permitted or required by applicable law, and we will provide you with a written explanation of our decision.

8. Cookies and Tracking Technologies

We use cookies, web beacons, pixels, and similar tracking technologies to enhance your experience on our website, analyze usage, and deliver personalized content and advertising. The types of cookies we use include:

• Strictly Necessary Cookies: Essential for the operation of our website, such as enabling you to log in and place orders.
• Performance and Analytics Cookies: Help us understand how visitors use our website by collecting aggregated and anonymized usage statistics.
• Functionality Cookies: Allow our website to remember your preferences (such as language settings and saved addresses) to enhance your experience.
• Targeting and Advertising Cookies: Used to deliver relevant advertisements on our website and on third-party platforms and to measure the effectiveness of our advertising campaigns.

You can control your cookie preferences through your browser settings or our cookie consent tool. Note that disabling certain cookies may affect the functionality of our website. For detailed information about the cookies we use and how to manage them, please refer to our Cookie Policy, which is available on our website.

9. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including to comply with legal, accounting, and reporting obligations. Our standard retention periods are as follows:

When your personal information is no longer required, we will securely delete or anonymize it in accordance with our data disposal procedures.

10. Children's Privacy

Our platform, menu offerings, and services are directed toward adults. We do not knowingly collect, use, or disclose personal information from individuals under the age of 18 years. If you are under 18, you are not permitted to use our platform or provide any personal information to us.

In compliance with the Children's Online Privacy Protection Act (COPPA) and other applicable laws, if we discover or are notified that we have inadvertently collected personal information from a child under the age of 13, we will promptly delete such information from our records.

If you are a parent or legal guardian and believe that your child has provided personal information to us without your consent, please contact us immediately at [email protected] so that we can take appropriate action.

11. International Data Transfers

Hangry Joe's is based in the United States, and the personal information we collect is primarily stored and processed in the United States. However, some of our third-party service providers may be located in or operate servers in other countries, which means your personal information may be transferred to, stored in, and processed in countries outside of the United States.

When we transfer personal information internationally, we take steps to ensure that your data receives an adequate level of protection, regardless of the jurisdiction in which it is processed. These steps may include:

• Entering into data processing agreements with third-party providers that include appropriate data protection clauses.
• Requiring that third-party providers maintain security standards equivalent to or greater than those we apply ourselves.
• Verifying that recipient countries or organizations provide adequate data protection under applicable law.

By using our platform, you acknowledge and consent to the transfer of your personal information to the United States and to other countries as described in this section.

12. Third-Party Links and Services

Our website may contain links to third-party websites, applications, or services that are not operated by us. If you click on a third-party link, you will be directed to that third party's website. We strongly advise you to review the privacy policy of every website you visit.

We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party websites or services. This Privacy Policy does not apply to any third-party websites, and we disclaim all liability arising from your use of such third-party platforms.

13. Do Not Track Signals

Some web browsers include a "Do Not Track" (DNT) feature that signals to websites that you do not wish to have your online activity tracked. Currently, there is no universally accepted standard for how companies should respond to DNT signals. As such, we do not currently alter our data collection and usage practices in response to DNT signals from your browser.

If a universally accepted DNT standard is established in the future, we will review and update our practices accordingly.

14. FTC Act Compliance

In accordance with the Federal Trade Commission Act (FTC Act), 15 U.S.C. § 45, Hangry Joe's is committed to maintaining fair and transparent data practices. We do not engage in unfair or deceptive acts or practices in connection with the collection, use, or disclosure of consumer personal information. All material disclosures about our data practices are clearly stated in this Privacy Policy.

We adhere to the FTC's guidance on data security, consumer privacy, and online behavioral advertising. If you have concerns about our compliance with the FTC Act, you may contact the FTC directly at ftc.gov or call 1-877-382-4357.

15. How to File a Complaint

If you believe that we have violated your privacy rights or failed to comply with applicable privacy law, we encourage you to first contact us directly so that we can address your concerns:

• Email: [email protected]

We take all privacy complaints seriously and will investigate and respond to your concern as promptly as possible.

If you are not satisfied with our response, or if you believe we have not adequately addressed your complaint, you may have the right to lodge a complaint with the relevant data protection or consumer protection authority:

16. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time, at our discretion. When we make material changes, we will notify you by one or more of the following methods:

• Posting the updated policy on our website with a new "Last Updated" date.
• Sending an email notification to the email address associated with your account.
• Displaying a prominent notice on our website at your next login.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our platform after the effective date of any changes constitutes your acceptance of the revised Privacy Policy.

If you do not agree with any changes to this Privacy Policy, you should discontinue use of our platform and may request deletion of your account and personal data by contacting us at [email protected].

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our privacy team using the information below:

We are committed to resolving any privacy concerns you may have and will do our best to respond to your inquiry within 10 business days of receipt. For requests related to your personal data rights under CCPA/CPRA, we will respond within the legally mandated timeframe of 45 calendar days, with the possibility of a single 45-day extension where necessary.