Privacy Policy

This Privacy Policy describes how 4 Rivers ("we," "us," "our," or "the Company") collects, uses, discloses, retains, and protects your personal information when you visit our website at bbq-4rivers.click, place orders, interact with our services, or otherwise engage with us. We are committed to protecting your privacy and handling your personal data in a transparent, lawful, and responsible manner in accordance with applicable United States federal and state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), and other relevant regulations.

Please read this Privacy Policy carefully. By accessing or using our website and services, you acknowledge that you have read, understood, and agree to the terms described in this document. If you do not agree with any part of this Privacy Policy, please discontinue your use of our website and services immediately.

For any questions, concerns, or requests related to this Privacy Policy, please contact us at:

1. About Us

4 Rivers is a food business operating in the United States, dedicated to providing high-quality barbecue cuisine and dining experiences to our valued customers. We operate through our website located at bbq-4rivers.click, through which customers may browse our menu, place orders, make reservations, and interact with our services. As a food service business, we collect certain personal information necessary to fulfill orders, process payments, improve our services, and communicate with our customers.

We take the privacy of our customers, website visitors, and business partners seriously. This Privacy Policy governs all personal data we collect and process in connection with our business operations, both online and offline.

2. Information We Collect

We collect various categories of personal information depending on how you interact with us. Below is a comprehensive overview of the types of data we may collect:

2.1 Personal Identification Information

When you create an account, place an order, make a reservation, subscribe to our newsletter, or contact us directly, we may collect:

• Full name
• Email address
• Phone number
• Mailing or delivery address
• Date of birth (where applicable, for age verification purposes)
• Username and password (for account holders)
• Profile picture or avatar (if you choose to upload one)

2.2 Financial and Payment Information

When you make a purchase or payment through our website, we collect:

• Credit or debit card details (processed securely through third-party payment processors)
• Billing address
• Transaction history and order details
• Gift card or promotional code information

Please note that we do not store complete credit card numbers on our servers. All payment card data is handled by PCI-DSS compliant third-party payment processors.

2.3 Order and Transaction Information

In the course of providing our food services, we collect:

• Order history and details
• Food preferences and dietary restrictions you share with us
• Delivery instructions and preferences
• Feedback, ratings, and reviews you submit
• Catering inquiry and event details

2.4 Usage Data and Website Activity

When you browse our website, we automatically collect certain technical and behavioral information, including:

• IP address
• Browser type and version
• Operating system
• Pages visited and time spent on each page
• Referring URLs (the website that directed you to ours)
• Search queries entered on our website
• Clicks, scrolls, and other interaction data
• Date and time of your visit
• Geographic location data (at the city or region level, derived from your IP address)

2.5 Device Information

We may collect information about the device you use to access our website, including:

• Device type (desktop, mobile, tablet)
• Device identifiers
• Mobile network information
• Screen resolution and display settings
• Hardware model information

2.6 Communications Data

When you contact us for customer support, send us an email, complete a contact form, or interact with us on social media, we collect:

• The content of your messages and correspondence
• Attachments you provide (such as photos of your order)
• Records of communications and support interactions
• Social media handles and public profile information

2.7 Cookie and Tracking Data

We use cookies, web beacons, pixels, and similar tracking technologies to collect information about your browsing behavior and preferences. For more detailed information, please refer to Section 8: Cookie Usage of this policy.

2.8 Information You Voluntarily Provide

You may choose to provide additional information voluntarily, such as:

• Participation in surveys or contests
• Loyalty or rewards program details
• Referral information when you refer friends or family
• Testimonials and public reviews

3. How We Use Your Information

We use the personal information we collect for various legitimate business purposes. Specifically, we use your data to:

3.1 Service Provision and Order Fulfillment

• Process and fulfill your food orders and deliveries
• Manage reservations and catering bookings
• Process payments and issue receipts or invoices
• Create and manage your customer account
• Respond to your inquiries, requests, and customer support needs
• Send order confirmations, delivery updates, and status notifications

3.2 Business Operations and Improvement

• Analyze usage patterns to improve our website functionality and user experience
• Conduct internal research and development to improve our menu and services
• Perform quality assurance and ensure the accuracy of our operations
• Train our staff and maintain service quality standards
• Monitor and prevent fraudulent transactions and unauthorized access
• Maintain the security and integrity of our systems

3.3 Marketing and Communications

• Send you promotional emails, newsletters, and special offers (where you have opted in or where permitted by law)
• Notify you about new menu items, seasonal offerings, and events
• Display targeted advertisements on our website and third-party platforms
• Administer loyalty programs, contests, and promotional campaigns
• Conduct customer satisfaction surveys

You have the right to opt out of marketing communications at any time by clicking the "unsubscribe" link in our emails or by contacting us at [email protected]. Please note that even if you opt out of marketing communications, we may still send you transactional or service-related messages.

3.4 Legal and Compliance Purposes

• Comply with applicable federal, state, and local laws and regulations
• Respond to lawful requests from government authorities or law enforcement
• Enforce our Terms of Service and other agreements
• Protect the rights, property, and safety of our company, customers, and others
• Resolve disputes and handle claims

3.5 Analytics

• Analyze aggregate and anonymized data to understand trends in customer behavior
• Measure the effectiveness of our marketing campaigns
• Generate internal reports on business performance
• Use third-party analytics tools such as Google Analytics to gain insights into website traffic and user engagement

4. Legal Basis for Processing

We process your personal information based on the following legal grounds, in accordance with applicable U.S. law:

• Contractual Necessity: Processing is necessary to fulfill the contract we have with you (e.g., to process and deliver your order).
• Legitimate Interests: We process data where it is necessary for our legitimate business interests, such as improving our services, preventing fraud, and conducting marketing activities, provided these interests are not overridden by your privacy rights.
• Consent: Where required by law, we will obtain your explicit consent before processing your data (e.g., for certain marketing activities or non-essential cookies).
• Legal Obligation: We may process your data where it is necessary to comply with a legal obligation, such as tax reporting or responding to a court order.

5. Sharing Your Information with Third Parties

We do not sell your personal information to third parties for monetary consideration. However, we may share your data with trusted third parties in the following circumstances:

5.1 Service Providers and Vendors

We work with carefully selected third-party companies and individuals who perform services on our behalf, including:

• Payment Processors: To securely process credit card and online payments
• Delivery Partners: To fulfill food delivery orders on our behalf
• Email Marketing Platforms: To send newsletters and promotional communications
• Analytics Providers: Such as Google Analytics, to help us analyze website traffic and user behavior
• Customer Support Tools: To help us manage and respond to customer inquiries
• Cloud Hosting and IT Services: To host our website and store data securely
• Advertising Networks: To display targeted advertisements to users on our website and other platforms

These service providers are authorized to use your personal information only as necessary to provide services to us and are bound by contractual obligations to keep your information confidential and secure.

5.2 Business Transfers

In the event of a merger, acquisition, sale of assets, reorganization, or similar corporate transaction, your personal information may be transferred to the successor entity as part of the business assets. We will notify you via email or a prominent notice on our website before your data is transferred and becomes subject to a different privacy policy.

5.3 Legal Requirements and Law Enforcement

We may disclose your personal information if we believe in good faith that disclosure is necessary to:

• Comply with a legal obligation, court order, subpoena, or government request
• Enforce our Terms of Service or other agreements
• Protect and defend our rights or property
• Prevent or investigate possible wrongdoing in connection with our services
• Protect the personal safety of our users or the public
• Protect against legal liability

5.4 With Your Consent

We may share your personal information with third parties when you have given us explicit consent to do so.

5.5 Aggregated and Anonymized Data

We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you with third parties for research, marketing, analytics, and other purposes.

6. Data Security

We take the security of your personal information seriously and implement a variety of technical, administrative, and physical safeguards designed to protect your data from unauthorized access, disclosure, alteration, or destruction. Our security measures include:

6.1 Technical Measures

• SSL/TLS Encryption: Our website uses Secure Socket Layer (SSL) / Transport Layer Security (TLS) encryption to protect data transmitted between your browser and our servers.
• Data Encryption at Rest: Sensitive data stored in our systems is encrypted using industry-standard encryption protocols.
• Firewalls and Intrusion Detection: We employ firewalls, intrusion detection systems, and monitoring tools to protect our network infrastructure.
• Access Controls: Access to personal data is restricted to authorized personnel only, based on the principle of least privilege.
• Secure Payment Processing: All payment card data is handled through PCI-DSS compliant payment processors.

6.2 Administrative Measures

• Regular employee training on data privacy and security best practices
• Internal data protection policies and procedures
• Data access logging and auditing
• Vendor security assessments and contractual data protection obligations

6.3 Physical Measures

• Secure physical access controls to facilities where data is stored
• Secure disposal of physical documents containing personal information

Despite our best efforts, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. In the event of a data breach that affects your rights or freedoms, we will notify you and the appropriate authorities as required by applicable law.

7. Cookie Usage

We use cookies, web beacons, pixels, and similar tracking technologies on our website to enhance your browsing experience, analyze site traffic, and support our marketing efforts. Cookies are small text files stored on your device when you visit a website.

7.1 Types of Cookies We Use

7.2 Managing Cookie Preferences

You have the right to accept or reject non-essential cookies. You may control cookie settings through:

• Our cookie consent banner displayed when you first visit our website
• Your browser settings (most browsers allow you to block or delete cookies)
• Third-party opt-out tools (e.g., Google Analytics Opt-out Browser Add-on)

Please note that disabling certain cookies may affect the functionality of our website and your overall experience. For a more detailed explanation of our cookie practices, please refer to our Cookie Policy.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

8.1 Retention Periods

When personal data is no longer needed, we will securely delete or anonymize it in accordance with our data retention and destruction procedures. In some cases, we may retain anonymized or aggregated data for longer periods for research and statistical purposes.

9. Your Privacy Rights

Depending on your location and applicable law, you may have various rights regarding your personal information. We are committed to honoring these rights and providing you with meaningful control over your data.

9.1 Rights Under the California Consumer Privacy Act (CCPA/CPRA)

If you are a California resident, you have the following rights under the CCPA as amended by the CPRA:

• Right to Know: You have the right to request that we disclose what personal information we collect, use, disclose, and sell about you.
• Right to Delete: You have the right to request that we delete your personal information, subject to certain exceptions.
• Right to Correct: You have the right to request correction of inaccurate personal information we hold about you.
• Right to Opt-Out of Sale or Sharing: You have the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising purposes.
• Right to Limit Use of Sensitive Personal Information: You have the right to limit our use and disclosure of your sensitive personal information to what is necessary for providing our services.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights. This means we will not deny you goods or services, charge different prices, or provide a different level of quality based on your exercise of privacy rights.
• Right to Data Portability: You have the right to receive a copy of your personal information in a portable and usable format.

9.2 General Privacy Rights for All Users

Regardless of your location, we offer the following rights to all users of our website:

• Right to Access: You may request access to the personal information we hold about you.
• Right to Correction: You may request that we correct any inaccurate or incomplete personal information.
• Right to Deletion: You may request that we delete your personal information, subject to our legal obligations.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing prior to withdrawal.
• Right to Object to Marketing: You may opt out of receiving marketing communications at any time.

9.3 How to Exercise Your Rights

To exercise any of the rights described in this section, please submit a verifiable consumer request to us by:

• Emailing us at: [email protected]

When submitting a request, please include sufficient information to allow us to verify your identity and understand the nature of your request. We may ask you to provide additional verification details to confirm your identity before processing your request.

We will respond to your verifiable consumer request within 45 days of receiving it. If we require more time, we will inform you of the reason and the extension period (which may be up to an additional 45 days). We do not charge a fee to process or respond to a verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded.

9.4 Authorized Agents

You may designate an authorized agent to submit a privacy rights request on your behalf. The authorized agent must provide written permission signed by you, and we may require additional verification of your identity directly before processing the request.

10. Children's Privacy

Our website and services are intended for use by individuals who are 18 years of age or older. We do not knowingly collect, solicit, or process personal information from children under the age of 13, and we do not direct our services to children under 13.

If we become aware that we have inadvertently collected personal information from a child under the age of 13 without verifiable parental consent, we will take prompt steps to delete that information from our records. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately at [email protected].

In accordance with the Children's Online Privacy Protection Act (COPPA), we do not knowingly collect data from children under 13. Users between 13 and 17 years of age should only use our website with the involvement and consent of a parent or legal guardian.

11. International Data Transfers

4 Rivers is based in the United States and our services are primarily intended for users located within the United States. However, as we use certain third-party service providers who may operate globally, your personal information may be transferred to and processed in countries other than your own.

When we transfer personal data internationally, we take steps to ensure that your information receives adequate protection in accordance with this Privacy Policy and applicable data protection laws. These safeguards may include:

• Entering into data processing agreements with third-party service providers that include appropriate data protection clauses
• Ensuring that our international service providers maintain compliance with applicable data protection standards
• Applying appropriate technical and organizational security measures to protect your data during transfer and storage

By using our website and services, you acknowledge and consent to the potential transfer of your personal information to countries outside your country of residence, including to the United States, where data protection laws may differ from those in your home country.

12. Third-Party Links and Services

Our website may contain links to third-party websites, social media platforms, food delivery applications, or other external services that are not operated by us. This Privacy Policy applies only to our website and services. When you click on a link to a third-party website, we strongly recommend that you review the privacy policy of that website before providing any personal information.

We are not responsible for the privacy practices, content, or security of any third-party websites or services. Our inclusion of a link to a third-party website does not imply endorsement of that website or its privacy practices.

13. Do Not Track Signals

Some browsers include a "Do Not Track" (DNT) feature that signals to websites that you do not want to have your online activities tracked. At this time, our website does not respond to DNT signals because there is no uniform standard for how companies should honor these requests. However, you can control data collection through our cookie consent settings and by adjusting your browser's privacy settings.

We will continue to monitor developments regarding Do Not Track technology and update our practices as necessary.

14. FTC Act Compliance and Consumer Protection

We operate in full compliance with the Federal Trade Commission Act (FTC Act), which prohibits unfair or deceptive acts or practices in commerce. We are committed to:

• Being transparent and honest about how we collect and use your personal information
• Implementing reasonable security measures to protect consumer data
• Honoring our promises and representations regarding privacy practices
• Not engaging in deceptive data collection or unfair data practices
• Providing clear and conspicuous notice of our data practices

Our privacy practices are designed to align with FTC guidelines and best practices for data privacy and consumer protection in the food and hospitality industry.

15. California-Specific Privacy Disclosures

In addition to the rights described in Section 9, California residents have additional rights under the CCPA/CPRA:

15.1 Categories of Personal Information Collected

Over the preceding 12 months, we have collected the following categories of personal information as defined under the CCPA:

• Identifiers (name, email, IP address, account name)
• Commercial information (purchase history, order details)
• Internet or electronic network activity information (browsing history, search history)
• Geolocation data (derived from IP address)
• Inferences drawn from personal information to create customer profiles
• Financial information (payment details processed through third parties)

15.2 "Shine the Light" Law

California Civil Code Section 1798.83 permits California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please contact us at [email protected].

16. How to File a Complaint

If you believe that we have not adequately addressed your privacy concerns, or if you believe that your privacy rights have been violated, you have the right to file a complaint with the appropriate data protection authority or consumer protection agency.

16.1 California Residents

California residents may file a complaint with the California Privacy Protection Agency (CPPA) or the California Attorney General's Office:

• California Privacy Protection Agency: cppa.ca.gov
• California Attorney General: oag.ca.gov

16.2 All U.S. Consumers

All U.S. consumers may file a complaint with the Federal Trade Commission (FTC):

• FTC Consumer Complaints: reportfraud.ftc.gov
• FTC Website: www.ftc.gov

Before filing a complaint with a regulatory authority, we encourage you to contact us directly first so that we may have the opportunity to address your concerns. You can reach us at:

17. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our business practices, legal requirements, or technology. When we make significant changes to this Privacy Policy, we will notify you by:

• Posting the updated Privacy Policy on our website with a revised "Last Updated" date
• Sending you an email notification (if you have provided us with your email address and the changes materially affect your rights)
• Displaying a prominent notice on our website

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website and services after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

18. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact us. Our privacy team is available to assist you with any privacy-related matters.

We are committed to working with you to resolve any privacy concerns fairly and promptly. When contacting us, please include your name, contact information, and a clear description of your concern or request so that we can assist you as efficiently as possible.