Privacy Policy

Effective Date: May 2, 2026  |  Last Updated: May 2, 2026

1. Introduction and Who We Are

Welcome to Hangry Joe's. We are a food-related business operating in the United States, committed to protecting your privacy and handling your personal information with transparency, care, and respect. This Privacy Policy applies to all information collected through our website located at hangry-joes.digital, as well as any related services, promotions, online ordering systems, loyalty programs, newsletters, or other interactions you may have with us, both online and offline.

We take your privacy seriously. Our goal is to clearly explain what data we collect, why we collect it, how we use it, who we share it with, and what rights you have regarding your personal information. If you reside in California, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), which are addressed in detail in Section 12 of this policy.

This Privacy Policy is governed by applicable United States federal and state privacy laws, including but not limited to the Federal Trade Commission Act (FTC Act), the CAN-SPAM Act, the Children's Online Privacy Protection Act (COPPA), and relevant state-level privacy regulations.

Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, you may contact us through the following channels:

2. Information We Collect

We collect various types of information in connection with your use of our website and services. This includes information you provide directly to us, information collected automatically, and information we may receive from third parties.

2.1 Personal Information You Provide Directly

When you interact with our website or services, you may voluntarily provide us with personal information, including but not limited to:

• Identity Information: Your full name, username, or similar identifiers.
• Contact Information: Email address, telephone number, billing address, delivery address, and postal code.
• Account Information: Login credentials such as username and password if you create an account with us.
• Order Information: Details of food orders placed through our website, including items selected, customizations, special instructions, and order history.
• Payment Information: Credit card numbers, debit card details, billing addresses, and other financial information necessary to process transactions. Note that payment data is processed through secure, PCI-DSS compliant third-party payment processors and is not stored directly on our servers.
• Communication Data: Messages, feedback, reviews, inquiries, or complaints you submit to us through contact forms, email, or other communication channels.
• Loyalty and Promotional Data: Information provided when signing up for loyalty programs, newsletters, promotions, sweepstakes, or contests.
• Dietary Preferences and Allergies: Any dietary information, food allergies, or preferences you choose to share with us to customize your food orders or experience.

2.2 Information Collected Automatically

When you visit our website, we and our third-party service providers automatically collect certain technical and usage information, including:

• Device Information: IP address, browser type and version, operating system, device type (desktop, mobile, tablet), device identifiers, screen resolution, and language settings.
• Usage Data: Pages visited, time and date of visits, time spent on pages, links clicked, referring URLs, search queries entered on our website, and navigation patterns.
• Log Data: Server logs that record details of requests made to our servers, error reports, and diagnostic data.
• Location Data: Approximate geographic location derived from your IP address. If you grant permission, we may also collect more precise location data through your device's GPS to facilitate delivery services or find nearby locations.
• Cookie and Tracking Data: Information collected through cookies, web beacons, pixel tags, and similar tracking technologies, as described in Section 7 of this policy.

2.3 Information from Third Parties

We may also receive personal information about you from third-party sources, such as:

• Social media platforms, if you choose to connect your social media account or interact with our social media pages.
• Third-party food delivery platforms or ordering aggregators through which you place orders for our food.
• Analytics providers, advertising partners, and data brokers who help us understand our audience.
• Payment processors who confirm the status of transactions.
• Customer review platforms that share your publicly posted reviews with us.

3. How We Use Your Information

We use the information we collect for a variety of business and operational purposes. We will only use your personal information when we have a valid legal basis to do so, which may include fulfilling a contract with you, complying with a legal obligation, pursuing our legitimate business interests, or relying on your consent.

3.1 Service Provision and Order Fulfillment

• Processing and fulfilling food orders placed through our website.
• Managing your online account, including authentication and security.
• Arranging delivery or facilitating in-store pickup.
• Processing payments and issuing refunds or credits when applicable.
• Communicating order confirmations, updates, and delivery notifications.
• Accommodating dietary preferences, allergies, or special requests submitted with your orders.

3.2 Customer Support and Communications

• Responding to your questions, complaints, or feedback.
• Notifying you of changes to our menu, services, policies, or terms.
• Sending transactional emails such as order confirmations, receipts, and account-related notifications.

3.3 Marketing and Promotional Activities

• Sending promotional emails, newsletters, special offers, and loyalty rewards to users who have opted in to receive such communications.
• Personalizing your experience on our website by showing you relevant content, menus, promotions, and offers based on your preferences and order history.
• Conducting contests, promotions, surveys, and market research.
• Delivering targeted advertising through third-party advertising platforms, subject to your privacy preferences and applicable law.

You may opt out of marketing communications at any time by clicking the "Unsubscribe" link in any promotional email or by contacting us at [email protected]. Please note that even if you opt out of marketing communications, you may still receive transactional or service-related messages.

3.4 Analytics and Service Improvement

• Analyzing website traffic, user behavior, and usage patterns to improve our website's functionality and user experience.
• Conducting internal research and development to improve our food offerings, services, and digital platforms.
• Monitoring and diagnosing technical problems, bugs, or security vulnerabilities.
• Measuring the effectiveness of marketing campaigns and promotions.

3.5 Legal Compliance and Safety

• Complying with applicable federal and state laws, regulations, and legal processes.
• Protecting the rights, property, and safety of Hangry Joe's, our customers, and the public.
• Detecting, preventing, and responding to fraud, unauthorized access, or other illegal activities.
• Enforcing our Terms of Service and other applicable agreements.

4. How We Share Your Information

We respect your privacy and do not sell your personal information to third parties for monetary compensation. However, we may share your information in the following circumstances:

4.1 Service Providers and Business Partners

We engage trusted third-party service providers who assist us in operating our business. These providers are contractually obligated to use your information only as directed by us and in accordance with this Privacy Policy. Categories of service providers include:

• Payment Processors: To securely process payment transactions on our behalf.
• Delivery and Logistics Partners: To fulfill food delivery orders placed through our platform.
• Cloud Hosting and IT Service Providers: To store and manage our data and infrastructure.
• Email and Communication Platforms: To send transactional and marketing communications.
• Analytics Providers: Such as Google Analytics, to help us understand how our website is used.
• Advertising Networks: To serve targeted advertisements on our behalf across the internet.
• Customer Support Tools: Platforms that help us manage and respond to customer inquiries.

4.2 Legal Requirements and Law Enforcement

We may disclose your personal information when required to do so by law or in response to valid legal process, including subpoenas, court orders, or government investigations. We may also disclose information when we believe in good faith that disclosure is necessary to protect our rights, prevent fraud, or respond to an emergency involving a threat to public safety.

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal information may be transferred to the acquiring or successor entity. We will notify you of any such transfer and any resulting changes to this Privacy Policy, as required by applicable law.

4.4 With Your Consent

We may share your personal information with other third parties in circumstances not described above if we have obtained your express consent to do so.

4.5 Aggregated or De-Identified Data

We may share aggregated or anonymized data that does not identify you personally with partners, advertisers, researchers, or other third parties for business analytics, research, or marketing purposes.

5. Data Security

We take the security of your personal information seriously and implement a variety of technical, administrative, and physical safeguards to protect your data against unauthorized access, disclosure, alteration, or destruction.

Our security measures include, but are not limited to:

• Encryption: We use Secure Socket Layer (SSL) / Transport Layer Security (TLS) encryption to protect data transmitted between your browser and our servers.
• Access Controls: We restrict access to personal information to authorized employees, contractors, and service providers who need it to perform their job functions.
• Secure Payment Processing: All payment transactions are processed through PCI-DSS compliant payment processors. We do not store full credit card numbers on our systems.
• Regular Security Assessments: We conduct periodic reviews of our security practices, vulnerability assessments, and system audits.
• Data Minimization: We collect only the personal information necessary for the purposes outlined in this policy.
• Employee Training: Our staff are trained on privacy and data security best practices.

6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. The specific retention periods depend on the type of data and the purpose for which it is held:

When personal information is no longer required, we will securely delete, destroy, or anonymize it in accordance with our data retention schedule and applicable law.

7. Cookies and Tracking Technologies

Our website uses cookies, web beacons, pixel tags, and similar tracking technologies to enhance your browsing experience, analyze website traffic, and deliver relevant content and advertising.

7.1 What Are Cookies?

Cookies are small text files placed on your device by a website you visit. They are widely used to make websites work more efficiently, remember your preferences, and provide information to the website owner.

7.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the website to function properly. These include session cookies that maintain your login status and shopping cart contents.
• Performance and Analytics Cookies: Help us understand how visitors use our website by collecting anonymous data on page visits, traffic sources, and user interactions (e.g., Google Analytics).
• Functionality Cookies: Remember your preferences such as language settings, location, and past orders to personalize your experience.
• Marketing and Advertising Cookies: Used to deliver relevant advertisements and track the effectiveness of ad campaigns. These may be set by our advertising partners.

7.3 Managing Your Cookie Preferences

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies or to be alerted when a cookie is being placed. Please note that disabling certain cookies may affect the functionality of our website. For more detailed information about the specific cookies we use and how to manage them, please refer to our Cookie Policy.

7.4 Do Not Track Signals

Some browsers transmit "Do Not Track" (DNT) signals to websites. Currently, there is no universally accepted standard for how websites should respond to these signals. Our website does not currently alter its data collection practices in response to DNT signals, but we continue to monitor developments in this area.

8. Your Privacy Rights

Depending on your location and applicable law, you may have certain rights regarding your personal information. We are committed to honoring these rights and providing you with the means to exercise them.

8.1 General Rights Available to All Users

• Right to Access: You have the right to request a copy of the personal information we hold about you.
• Right to Correction: You may request that we correct inaccurate or incomplete personal information.
• Right to Deletion: You may request that we delete your personal information, subject to certain exceptions (e.g., where retention is required by law).
• Right to Opt-Out of Marketing: You may opt out of receiving marketing communications from us at any time.
• Right to Data Portability: Where technically feasible, you may request that we provide your personal data in a structured, machine-readable format.
• Right to Withdraw Consent: Where we process your data based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

8.2 How to Exercise Your Rights

To exercise any of your privacy rights, please submit a request to us by:

• Email: [email protected]

We will respond to your request within a reasonable timeframe, generally within 30 to 45 days of receipt. We may require you to verify your identity before processing certain requests to protect the security of your information. If we are unable to fulfill your request, we will explain the reasons and provide any available alternatives.

9. Children's Privacy

If you are under 18 years of age, you may not use our website or submit any personal information to us without the supervision and consent of a parent or legal guardian. If you are a parent or guardian and believe that your child under 13 has provided us with personal information without your consent, please contact us immediately at [email protected], and we will take prompt steps to delete such information from our records.

We do not knowingly market to children or create user profiles for individuals under 13 years of age. If we discover that we have inadvertently collected personal information from a child under 13, we will delete it as quickly as reasonably possible.

10. International Data Transfers

Hangry Joe's is based in the United States, and your personal information is primarily collected, stored, and processed in the United States. If you are accessing our website from outside the United States, please be aware that your information may be transferred to and processed in the United States, where data protection laws may differ from those in your home country.

By using our website and services from outside the United States, you acknowledge and consent to the transfer of your personal information to the United States. We take appropriate steps to ensure that international data transfers comply with applicable law and that adequate protections are in place to safeguard your personal information.

If you are located in a jurisdiction with specific data transfer requirements (such as the European Economic Area), please contact us at [email protected] for more information about the safeguards we have put in place.

11. Third-Party Websites and Links

Our website may contain links to third-party websites, applications, or services that are not operated or controlled by Hangry Joe's. These may include food delivery platforms, social media channels, payment gateways, and review websites. This Privacy Policy does not apply to such third-party services, and we are not responsible for their privacy practices.

We encourage you to review the privacy policies of any third-party websites you visit before providing any personal information. The inclusion of a link to a third-party website does not constitute an endorsement of that website or its privacy practices.

12. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) of 2018, as amended by the California Privacy Rights Act (CPRA) of 2020, which became fully effective January 1, 2023. This section describes those rights and how to exercise them.

12.1 Categories of Personal Information Collected

In the past 12 months, we have collected the following categories of personal information from California consumers, as defined by the CCPA/CPRA:

12.2 Your CCPA/CPRA Rights

As a California resident, you have the following rights:

• Right to Know: You may request information about the categories and specific pieces of personal information we have collected about you, the sources of collection, the purposes for which it is used, and the categories of third parties with whom it has been shared.
• Right to Delete: You may request the deletion of personal information we have collected from you, subject to certain exceptions.
• Right to Correct: You may request correction of inaccurate personal information we maintain about you.
• Right to Opt-Out of Sale or Sharing: You have the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising. To the extent we engage in such activities, you may submit an opt-out request.
• Right to Limit Use of Sensitive Personal Information: You may request that we limit our use and disclosure of sensitive personal information to what is necessary to perform the services.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you goods or services, charge different prices, or provide a different quality of service because you exercised your privacy rights.

12.3 How to Submit a California Privacy Request

To exercise your California privacy rights, please contact us at:

• Email: [email protected] with the subject line "California Privacy Request"

We will acknowledge receipt of your request within 10 business days and respond fully within 45 calendar days. If we require an extension, we will notify you of the reason and the expected response date. You may submit a request on your own behalf or authorize an agent to act on your behalf by providing written authorization.

13. Federal Consumer Protection and Anti-Spam Compliance

We comply with the Federal Trade Commission Act (FTC Act), which prohibits unfair or deceptive acts or practices in commerce. We will never use deceptive tactics to collect your personal information, and we are committed to transparent and fair data practices at all times.

All marketing emails sent by Hangry Joe's comply with the CAN-SPAM Act of 2003. Specifically, we will:

• Clearly identify all commercial email messages as advertisements or promotions where required.
• Include our valid physical postal address in all commercial email messages.
• Provide a clear and conspicuous mechanism for you to opt out of marketing emails.
• Honor opt-out requests within 10 business days.
• Not use deceptive subject lines or misleading sender information in our communications.

14. Filing a Complaint

If you have concerns about how we handle your personal information and you believe we have not adequately addressed your complaint, you have the right to lodge a complaint with the relevant regulatory authorities.

14.1 Federal Trade Commission (FTC)

The Federal Trade Commission (FTC) is the primary federal agency responsible for enforcing consumer privacy protections in the United States. You may file a complaint with the FTC at:

• Website: www.ftc.gov/complaint
• Phone: 1-877-FTC-HELP (1-877-382-4357)
• Address: Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, DC 20580

14.2 California Residents — California Privacy Protection Agency (CPPA)

California residents may also file complaints with the California Privacy Protection Agency (CPPA), the state agency responsible for enforcing the CCPA/CPRA:

• Website: cppa.ca.gov
• Email: [email protected]

14.3 State Attorneys General

Depending on your state of residence, you may also have the right to file a complaint with your state's Attorney General office, many of which have consumer protection or privacy divisions that handle data-related complaints.

15. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our business practices, legal requirements, or data processing activities. When we make material changes to this policy, we will notify you by:

• Posting a prominent notice on our website at hangry-joes.digital;
• Updating the "Last Updated" date at the top of this policy; and/or
• Sending you an email notification if you have provided us with your email address and the changes are significant.

Your continued use of our website after any changes to this Privacy Policy constitutes your acceptance of the revised policy. We encourage you to review this page periodically to stay informed about how we protect your information.

16. Contact Us

If you have any questions, comments, or concerns about this Privacy Policy, or if you wish to exercise any of your privacy rights, please do not hesitate to contact us. We are committed to working with you to resolve any privacy-related concerns promptly and effectively.