Privacy Policy

Welcome to East Coast Wings. We are deeply committed to protecting your personal information and your right to privacy. This Privacy Policy explains how East Coast Wings ("we," "us," or "our") collects, uses, discloses, and safeguards your information when you visit our website eastcoast-wings.digital, place food orders, use our digital services, or otherwise interact with us. Please read this policy carefully. If you disagree with any terms of this Privacy Policy, please discontinue use of our website and services immediately.

This Privacy Policy is governed by applicable United States federal and state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), and other applicable consumer protection regulations. We are committed to full compliance with all applicable privacy and data protection obligations.

1. About Us

East Coast Wings is a food service business operating through its digital platform at eastcoast-wings.digital. We provide online food ordering, delivery coordination, loyalty programs, and related digital services to our customers across the United States. For all privacy-related inquiries, please contact us using the details below:

2. Information We Collect

We collect various types of information in connection with your use of our website and services. The categories of information we collect include the following:

2.1 Personal Identification Information

When you create an account, place an order, sign up for our newsletter, participate in promotions, or contact us, we may collect personally identifiable information such as:

• Full name
• Email address
• Phone number
• Billing and delivery address (street address, city, state, ZIP code)
• Date of birth (where required for age verification)
• Profile username and password (stored in encrypted form)
• Payment information (processed securely through third-party payment processors; we do not store full card numbers)

2.2 Order and Transaction Information

When you place food orders through our platform, we collect information related to your transactions, including:

• Order history, items ordered, customizations, and special instructions
• Order frequency, timestamps, and delivery preferences
• Redemption of loyalty points, discount codes, or promotional offers
• Communications related to your orders, complaints, or feedback

2.3 Usage and Behavioral Data

We automatically collect certain information when you visit, use, or navigate our website. This information does not directly identify you but may include:

• Pages viewed, links clicked, and time spent on each page
• Search queries entered within our website
• Referral URLs (the website you came from before visiting ours)
• User interaction patterns such as scrolling behavior and feature usage
• Session duration, bounce rates, and navigation paths

2.4 Device and Technical Information

We collect technical information about the device and software you use to access our website, including:

• IP address and approximate geographic location derived from it
• Browser type and version
• Operating system and device type (desktop, tablet, mobile)
• Screen resolution and language settings
• Unique device identifiers and mobile advertising IDs (where applicable)
• Internet service provider (ISP) information

2.5 Cookie and Tracking Data

We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about your online activity on our website and across other websites. This may include session identifiers, preference settings, and advertising engagement data. For more information, please see Section 9 (Cookies and Tracking Technologies) of this policy.

2.6 Communications Data

If you contact us via email, phone, or our website contact forms, we collect the content of those communications, including your name, contact details, and any information you voluntarily provide in your message. We may also retain records of your consent to receive marketing communications.

2.7 User-Generated Content

If you submit reviews, ratings, photos, feedback, or other content through our website or social media pages, we collect and store that content. Please note that information you share in public areas of our platform may be visible to other users.

2.8 Information from Third Parties

We may receive information about you from third-party sources, including:

• Social media platforms (if you connect your social account or log in via social sign-on)
• Third-party delivery partners or food aggregator platforms
• Analytics providers and advertising networks
• Payment processors confirming transaction status

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 Service Provision and Order Fulfillment

• To process, fulfill, and deliver your food orders
• To create and manage your account
• To send order confirmations, updates, receipts, and delivery notifications
• To respond to your questions, complaints, or customer support requests
• To process payments and manage billing
• To administer loyalty programs and apply eligible discounts or promotions

3.2 Website Improvement and Analytics

• To understand how our website and services are used and to improve functionality
• To analyze traffic patterns, user behavior, and performance metrics
• To develop new features, menu items, or service offerings based on customer preferences
• To conduct internal research, testing, and quality assurance

3.3 Marketing and Promotional Communications

• To send you promotional emails, special offers, new menu announcements, and newsletters, where you have opted in or where permitted by law
• To display targeted advertisements on our website and on third-party platforms based on your interests and browsing behavior
• To administer contests, sweepstakes, or other promotional activities
• To measure the effectiveness of our marketing campaigns

3.4 Legal Compliance and Safety

• To comply with applicable federal and state laws, regulations, and legal processes
• To detect, prevent, and investigate fraudulent transactions, unauthorized access, and security incidents
• To enforce our Terms of Service and other agreements
• To protect the rights, safety, and property of East Coast Wings, our customers, and the public

3.5 Personalization

• To remember your preferences, saved addresses, and past orders for a more convenient experience
• To provide personalized menu recommendations based on your order history
• To customize the content and layout of our website to better suit your preferences

4. Legal Basis for Processing

Under applicable U.S. law, including the FTC Act and state-specific regulations, we process your personal information on the following legal grounds:

• Contract Performance: Processing necessary to fulfill your food orders and manage your account.
• Legitimate Business Interests: Improving our services, preventing fraud, ensuring security, and conducting analytics, provided such interests are not overridden by your rights.
• Consent: Where you have given us explicit consent, such as for marketing communications or non-essential cookies.
• Legal Obligation: Where processing is required for compliance with applicable laws or legal proceedings.

5. Sharing Your Information with Third Parties

We do not sell your personal information to third parties for monetary compensation. However, we may share your information in the following circumstances:

5.1 Service Providers and Business Partners

We engage trusted third-party vendors and service providers who assist us in operating our business. These parties access your information only as needed to perform their services and are contractually obligated to maintain its confidentiality and security. Categories of service providers include:

• Payment processors (e.g., credit card and digital payment platforms)
• Delivery and logistics partners
• Email marketing and communications platforms
• Website hosting and cloud infrastructure providers
• Customer support software providers
• Analytics and data intelligence services (e.g., Google Analytics)
• Advertising networks and retargeting platforms
• Loyalty and rewards program administrators

5.2 Legal Requirements and Law Enforcement

We may disclose your personal information when required to do so by law or in response to valid legal processes, including:

• Compliance with a subpoena, court order, or government investigation
• Responding to requests from law enforcement agencies
• Protecting national security or preventing illegal activity
• Exercising or defending our legal rights

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or substantially all of our assets, your personal information may be transferred as part of the transaction. We will notify you via email or a prominent notice on our website if such a change occurs and inform you of any choices you may have regarding your information.

5.4 Aggregated and De-Identified Data

We may share aggregated or de-identified information (data that cannot reasonably be used to identify you) with third parties for industry research, analytics, marketing, or other business purposes.

5.5 With Your Consent

We may share your information with other third parties with your explicit consent or at your direction, such as when you connect your account to a third-party service or participate in a co-branded promotion.

6. Data Security

We take the security of your personal information seriously and implement a variety of technical, administrative, and physical safeguards to protect it from unauthorized access, loss, misuse, alteration, or destruction.

6.1 Technical Measures

• Secure Socket Layer (SSL) / Transport Layer Security (TLS) encryption for all data transmitted between your browser and our website
• Encryption of sensitive stored data, including passwords (using bcrypt or equivalent hashing algorithms)
• Firewalls and intrusion detection systems to monitor and protect our network
• Regular vulnerability scanning and penetration testing
• Secure, access-controlled cloud infrastructure

6.2 Administrative Measures

• Strict access controls ensuring that only authorized personnel can access personal data, on a need-to-know basis
• Employee training on data privacy and security best practices
• Vendor due diligence and data processing agreements with all third-party service providers
• Incident response procedures to promptly address potential data breaches

6.3 Physical Measures

• Secure physical access controls to our office facilities and data storage locations
• Secure disposal of paper records and electronic media containing personal information

7. Your Privacy Rights

Depending on your state of residence and applicable law, you may have certain rights with respect to your personal information. We honor these rights for all customers where legally required and, where feasible, for all customers as a matter of good practice.

7.1 Rights Under the CCPA/CPRA (California Residents)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA):

7.2 Rights Available to All U.S. Customers

Regardless of your state of residence, we offer the following rights to all customers:

• Access: You may request a copy of the personal information we hold about you.
• Correction: You may request that we update or correct inaccurate or incomplete personal information.
• Deletion: You may request that we delete your personal information, subject to legal retention obligations.
• Withdrawal of Consent: Where processing is based on your consent, you may withdraw that consent at any time, without affecting the lawfulness of processing prior to withdrawal.
• Opt-Out of Marketing: You may opt out of receiving promotional communications from us at any time.

7.3 How to Exercise Your Rights

To exercise any of the rights described above, please submit a verifiable request to us using the following contact methods:

• Email: [email protected]
• Website: eastcoast-wings.digital (Contact Us form)

We will acknowledge receipt of your request within 10 business days and respond to your request within 45 days. If we require additional time, we will notify you and may extend our response time by an additional 45 days. We may need to verify your identity before processing your request to protect your privacy and security.

You may designate an authorized agent to submit requests on your behalf. We will require written proof of the agent's authority and may still require you to verify your identity directly with us.

8. Data Retention

We retain personal information for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, enforce our agreements, and operate our business. Our general retention periods are as follows:

When your personal information is no longer needed, we will securely delete or anonymize it. If deletion is not immediately possible (e.g., because data is stored in backup archives), we will isolate your information from further processing until deletion is feasible.

9. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and support our marketing efforts. The types of cookies we use include:

• Strictly Necessary Cookies: Essential for the website to function properly, enabling core features such as shopping cart functionality, user authentication, and security. These cannot be disabled.
• Performance and Analytics Cookies: Help us understand how visitors interact with our website by collecting anonymized usage data (e.g., Google Analytics).
• Functional Cookies: Remember your preferences (such as saved delivery addresses, language settings) to provide a more personalized experience.
• Advertising and Targeting Cookies: Used to deliver relevant advertisements on our website and third-party platforms, and to measure the effectiveness of our campaigns.

You can control and manage your cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. However, please note that disabling certain cookies may affect the functionality of our website.

10. Children's Privacy

Our website and services are intended for use by individuals who are 18 years of age or older. We do not knowingly collect, solicit, or use personal information from children under the age of 13, and we do not knowingly market to children under the age of 16.

We comply with the Children's Online Privacy Protection Act (COPPA), which restricts the collection of personal information from children under 13 without verifiable parental consent. If we become aware that we have inadvertently collected personal information from a child under 13, we will take immediate steps to delete that information from our records.

If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at [email protected] and we will take prompt action to investigate and address the situation.

11. International Data Transfers

East Coast Wings is based in the United States, and our primary data processing activities occur within the United States. However, some of our third-party service providers (such as cloud hosting providers, analytics platforms, and email marketing services) may process your data in other countries, which may have different data protection laws than those of your state or country of residence.

When we transfer personal information internationally, we take appropriate steps to ensure that your data receives an adequate level of protection. These safeguards may include:

• Entering into data processing agreements with our service providers that incorporate standard contractual protections
• Ensuring that our service providers maintain appropriate security certifications and compliance programs
• Selecting service providers that operate in jurisdictions with robust data protection frameworks

By using our website and services, you acknowledge that your personal information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. We are committed to handling your personal information in compliance with applicable U.S. law regardless of where processing occurs.

12. Third-Party Links and Services

Our website may contain links to third-party websites, social media pages, or embedded content (such as maps, payment portals, or review platforms). These third-party services are governed by their own privacy policies, and we have no control over their data collection or processing practices. We are not responsible for the privacy practices or content of any third-party websites.

We encourage you to review the privacy policies of any third-party websites you visit through links on our platform. The inclusion of a link on our website does not imply our endorsement of the linked site or its privacy practices.

13. Do Not Track Signals

Some browsers offer a "Do Not Track" (DNT) feature that sends a signal to websites indicating that you do not wish to be tracked. Currently, there is no universally accepted standard for how websites should respond to DNT signals. As a result, our website does not currently respond to DNT browser signals. However, you can manage your tracking preferences through our cookie consent tools and your browser settings as described in Section 9.

We will monitor developments in DNT standards and update our practices accordingly as industry-wide standards emerge.

14. California Shine the Light Law

California Civil Code Section 1798.83, also known as the "Shine the Light" law, permits California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. If you are a California resident and wish to make such a request, please contact us using the information provided in Section 15.

15. How to File a Privacy Complaint

If you have concerns about how we handle your personal information and are not satisfied with our response, you have the right to file a complaint with the appropriate regulatory authority.

15.1 Complaints to East Coast Wings

We encourage you to contact us first so we have the opportunity to address your concern directly:

• Email: [email protected]
• Subject Line: "Privacy Complaint"

We will acknowledge your complaint within 5 business days and endeavor to resolve the matter within 30 days.

15.2 Complaints to Regulatory Authorities

If you are not satisfied with our response, you may contact the following regulatory bodies depending on your state of residence:

• California Residents: The California Privacy Protection Agency (CPPA) — the agency responsible for enforcing the CCPA/CPRA.
  Website: cppa.ca.gov
• All U.S. Consumers: The Federal Trade Commission (FTC) — which enforces consumer protection and data privacy standards at the federal level under the FTC Act.
  Website: ftc.gov | Phone: 1-877-382-4357
• Additional State Attorneys General: Residents of states with specific data protection laws (such as Virginia, Colorado, Connecticut, Texas, and others) may also contact their respective State Attorney General's office for consumer protection inquiries.

16. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or business operations. When we make material changes to this policy, we will:

• Update the "Last Updated" date at the top of this page
• Post a prominent notice on our website or send you an email notification (where required by law or where we have your email address)
• Where required, seek your renewed consent for new processing activities

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our website and services after the effective date of any changes constitutes your acknowledgment of the updated policy.

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to reach out to us. We are here to help.

This Privacy Policy was last reviewed and updated on May 20, 2026. This document supersedes all previous versions of the East Coast Wings Privacy Policy. If you have received a copy of a prior version of this policy, please refer to this current version available at eastcoast-wings.digital.