Privacy Policy

This Privacy Policy describes how 4 Rivers Smokehouse BBQ ("we," "us," "our," or "the Company") collects, uses, discloses, and protects your personal information when you visit our website at 4rsmokehouse-bbq.click, place orders, subscribe to our communications, or otherwise interact with our services. Please read this policy carefully before using our website or sharing any personal information with us.

By accessing or using our website and services, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue your use of our website immediately.

We are committed to protecting your privacy in accordance with applicable United States federal and state privacy laws, including but not limited to the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), the CAN-SPAM Act, and other applicable federal and state regulations governing consumer data protection and privacy.

1. Company Information and Contact Details

The data controller responsible for your personal information is:

For any privacy-related inquiries, concerns, or requests, please contact us directly using the email address listed above. We will respond to all legitimate privacy requests within the timeframes required by applicable law.

2. Information We Collect

We collect various types of information in connection with your use of our website, your food orders, your participation in promotions, and your communications with us. The categories of personal information we collect include the following:

2.1 Personal Identification Information

When you place an order, create an account, sign up for our newsletter, participate in a promotion, or contact us directly, we may collect the following personally identifiable information:

• Full name (first name and last name)
• Email address
• Phone number or mobile number
• Mailing address, delivery address, and billing address
• Date of birth (when required for age verification purposes)
• Username and password (if you create an account on our website)
• Profile information and preferences you choose to share with us

2.2 Payment and Financial Information

When you complete a purchase through our website, we collect payment-related information necessary to process your transaction. This may include:

• Credit card or debit card details (collected and processed securely by our payment processors)
• Billing name and address
• Transaction history and purchase records
• Gift card numbers or promotional codes used

Please note that full payment card numbers are not stored on our servers. All payment processing is handled by PCI-DSS compliant third-party payment processors.

2.3 Order and Service Information

When you place a food order or use our services, we collect:

• Order details including items ordered, quantities, special instructions, and order date and time
• Delivery instructions and special accommodations
• Dietary preferences or restrictions you choose to share
• Feedback, ratings, and reviews you submit about our food or services
• Customer service communications and support tickets

2.4 Usage Data and Technical Information

When you visit our website, our servers automatically collect certain technical information about your visit, including:

• IP address and approximate geographic location derived from your IP address
• Browser type, version, and language settings
• Operating system and device type (desktop, mobile, tablet)
• Referring website URL and exit pages
• Pages viewed, links clicked, and time spent on each page
• Date and time of your visit
• Search terms entered on our website
• Internet service provider (ISP)
• Screen resolution and display settings

2.5 Cookie and Tracking Data

We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about how you interact with our website. This includes:

• Session identifiers and persistent cookie identifiers
• Shopping cart contents and browsing behavior on our site
• Login status and authentication tokens
• Advertising identifiers and analytics identifiers
• Preferences and settings stored between sessions

For more detailed information about our use of cookies and how to manage your cookie preferences, please refer to Section 9 of this Privacy Policy below.

2.6 Communications and Correspondence

If you contact us by email, phone, or through any contact form on our website, we may retain:

• The content of your message or inquiry
• Your contact details as provided in the communication
• Records of our responses and follow-up communications
• Survey responses and feedback submissions

2.7 Information from Third Parties

We may also receive information about you from third-party sources, including:

• Social media platforms if you interact with our social media pages or use social login features
• Third-party food delivery platforms and online ordering services
• Marketing and analytics partners
• Publicly available sources

3. How We Use Your Information

We use the personal information we collect for the following purposes:

3.1 Service Provision and Order Fulfillment

• Processing and fulfilling your food orders, including delivery or pickup arrangements
• Managing your customer account and preferences
• Processing payments and issuing receipts and invoices
• Communicating with you about your orders, including confirmation emails, shipping updates, and delivery notifications
• Providing customer support and resolving complaints or disputes
• Accommodating special dietary requests or preferences you have shared with us

3.2 Marketing and Promotional Communications

• Sending you newsletters, promotional offers, and updates about new menu items, specials, and events (with your consent or as permitted by applicable law)
• Administering loyalty programs, sweepstakes, contests, and promotional campaigns
• Personalizing our marketing communications based on your order history and stated preferences
• Displaying targeted advertisements on third-party platforms based on your interactions with our website
• Conducting email marketing campaigns in compliance with the CAN-SPAM Act

You may opt out of receiving marketing communications at any time by clicking the "unsubscribe" link in any marketing email we send you, or by contacting us directly at [email protected]. Please note that even if you opt out of marketing communications, you will still receive transactional and service-related communications.

3.3 Analytics and Website Improvement

• Analyzing website traffic, user behavior, and usage patterns to improve our website and services
• Identifying and fixing technical issues and bugs on our website
• Conducting internal research and development to enhance our menu offerings and customer experience
• Measuring the effectiveness of our marketing campaigns and promotions
• Generating aggregated and anonymized statistical reports about our customer base

3.4 Legal Compliance and Security

• Complying with applicable federal and state laws, regulations, and legal obligations
• Detecting, preventing, and investigating fraud, unauthorized access, and other illegal activities
• Enforcing our Terms of Service and other applicable policies
• Responding to lawful requests from law enforcement agencies and regulatory authorities
• Protecting the rights, property, and safety of our company, our customers, and the public

3.5 Business Operations

• Managing our business relationships and vendor partnerships
• Conducting internal audits and quality assurance processes
• Planning and managing our operational capacity and resources
• Facilitating business transactions, such as mergers, acquisitions, or asset sales

4. Legal Basis for Processing Your Information

Under applicable United States federal and state law, we process your personal information on the following legal bases:

• Contractual Necessity: Processing is necessary to fulfill a contract with you, such as processing your food order or managing your account.
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as improving our services, preventing fraud, and conducting marketing activities, provided such interests are not overridden by your fundamental rights and freedoms.
• Legal Obligation: Processing is required to comply with applicable laws and regulations.
• Consent: Where required by law, we will obtain your explicit consent before processing your personal information, such as for certain marketing communications or the use of non-essential cookies.

5. Sharing Your Information with Third Parties

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes. However, we may share your information with the following categories of third parties in the circumstances described below:

5.1 Service Providers and Vendors

We engage trusted third-party service providers who perform services on our behalf and who are contractually obligated to protect your information. These service providers include:

• Payment Processors: Companies that securely process your credit card and payment transactions
• Delivery Partners: Third-party delivery services used to fulfill your food orders
• Email Service Providers: Platforms used to send transactional and marketing emails
• Analytics Providers: Companies such as Google Analytics that help us understand website usage patterns
• Cloud Hosting and IT Services: Providers of the infrastructure and technology platforms that power our website
• Customer Support Tools: Software platforms used to manage customer service interactions
• Marketing and Advertising Platforms: Services used to manage and display targeted advertisements

5.2 Legal Requirements and Law Enforcement

We may disclose your personal information to government authorities, law enforcement agencies, or other third parties when we believe disclosure is necessary or required by law, including:

• In response to a valid subpoena, court order, search warrant, or other legal process
• To comply with applicable federal or state laws and regulations
• To protect the rights, property, or safety of our company, our customers, or the public
• To investigate, prevent, or take action against suspected illegal activity, fraud, or violations of our policies
• In connection with national security or public safety requirements

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal information may be transferred to the acquiring entity as part of the transaction. We will notify you via email and/or a prominent notice on our website before your personal information is transferred and becomes subject to a different privacy policy.

5.4 Aggregated and Anonymized Information

We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you with third parties for research, marketing, analytics, and other purposes. This type of data is not subject to the restrictions outlined in this Privacy Policy.

6. Data Security Measures

We take the security of your personal information very seriously and implement a range of technical, administrative, and physical security measures designed to protect your information from unauthorized access, disclosure, alteration, or destruction.

6.1 Technical Safeguards

• Secure Socket Layer (SSL) and Transport Layer Security (TLS) encryption for all data transmitted between your browser and our website
• Encrypted storage of sensitive personal and financial information
• Firewalls, intrusion detection systems, and network security monitoring
• Regular vulnerability assessments and penetration testing
• Secure, access-controlled server environments hosted by reputable cloud service providers
• Multi-factor authentication for internal system access

6.2 Administrative Safeguards

• Access to personal information is restricted to employees and contractors who need it to perform their job functions
• All personnel with access to personal information are subject to confidentiality obligations
• Regular privacy and security training for all staff members
• Internal data protection policies and procedures
• Vendor due diligence and data processing agreements with all third-party service providers

6.3 Incident Response

In the event of a data security breach that affects your personal information, we will notify you and the relevant authorities as required by applicable federal and state law, including applicable state data breach notification statutes. We will take prompt action to investigate and remediate any security incidents.

Please note that no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially reasonable means to protect your personal information, we cannot guarantee absolute security. You share your personal information with us at your own risk.

7. Your Privacy Rights

Depending on your state of residence, you may have certain rights regarding your personal information. We are committed to honoring these rights in accordance with applicable law.

7.1 Rights for California Residents (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA):

• Right to Know: You have the right to request that we disclose what personal information we collect, use, disclose, and sell about you.
• Right to Delete: You have the right to request that we delete the personal information we have collected from you, subject to certain exceptions.
• Right to Correct: You have the right to request that we correct inaccurate personal information we hold about you.
• Right to Opt-Out of Sale or Sharing: You have the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising.
• Right to Limit Use of Sensitive Personal Information: You have the right to limit our use and disclosure of sensitive personal information.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.
• Right to Data Portability: You have the right to receive a copy of your personal information in a portable, readily usable format.

To exercise your California privacy rights, please submit a verifiable consumer request to us at [email protected]. We will respond to verifiable requests within 45 days as required by California law.

7.2 General Privacy Rights (All Users)

Regardless of your state of residence, we honor the following general privacy rights for all users of our website:

• Right to Access: You may request access to the personal information we hold about you.
• Right to Correction: You may request that we correct any inaccurate or incomplete personal information we hold about you.
• Right to Deletion: You may request that we delete your personal information, subject to certain legal and operational limitations.
• Right to Opt-Out of Marketing: You may opt out of receiving marketing communications from us at any time.
• Right to Data Portability: Where technically feasible, you may request a copy of your personal information in a structured, commonly used format.

7.3 How to Exercise Your Rights

To exercise any of your privacy rights, please contact us using one of the following methods:

• Email: [email protected]
• Website: 4rsmokehouse-bbq.click

We may need to verify your identity before processing your request to ensure that we are disclosing or modifying information about the correct person. You may be asked to provide certain identifying information to complete the verification process. We will not charge you a fee for making a verifiable request unless it is excessive, repetitive, or manifestly unfounded.

8. Data Retention

We retain your personal information only for as long as is necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. When determining the appropriate retention period, we consider the nature and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process the data, and applicable legal requirements.

When your personal information is no longer needed, we will securely delete or anonymize it in accordance with our data retention policies and applicable legal requirements.

9. Cookie Usage

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and deliver personalized content and advertisements. Cookies are small text files that are placed on your device when you visit a website.

9.1 Types of Cookies We Use

• Essential Cookies: These cookies are strictly necessary for the website to function properly. They enable core features such as the shopping cart, user authentication, and security features. These cookies cannot be disabled without affecting website functionality.
• Performance and Analytics Cookies: These cookies collect information about how visitors use our website, such as which pages are visited most frequently. We use this data to improve our website and user experience. (Examples: Google Analytics)
• Functionality Cookies: These cookies allow our website to remember your preferences and settings, such as your preferred language or location, to provide a more personalized experience.
• Marketing and Advertising Cookies: These cookies are used to deliver advertisements that are relevant to you and your interests. They may also be used to limit the number of times you see an advertisement and to measure the effectiveness of advertising campaigns.

9.2 Managing Your Cookie Preferences

You can manage your cookie preferences through your browser settings. Most web browsers allow you to refuse cookies, accept only certain types of cookies, or delete cookies that have already been set. Please note that disabling certain cookies may affect the functionality of our website.

You may also opt out of interest-based advertising by visiting the Digital Advertising Alliance's opt-out page at optout.aboutads.info or the Network Advertising Initiative's opt-out page at optout.networkadvertising.org.

For more comprehensive information about our use of cookies and your options for managing them, please refer to our separate Cookie Policy available on our website at 4rsmokehouse-bbq.click.

10. Children's Privacy

Our website and services are intended for use by individuals who are 18 years of age or older. We do not knowingly collect, solicit, or process personal information from children under the age of 13. Our practices are designed to comply with the Children's Online Privacy Protection Act (COPPA).

If you are a parent or guardian and believe that your child under the age of 13 has provided us with personal information without your consent, please contact us immediately at [email protected]. Upon receiving such notification, we will take prompt steps to verify the information and, if confirmed, delete the child's personal information from our systems.

We reserve the right to restrict access to our website and services to individuals who are 18 years of age or older. If we discover that we have inadvertently collected personal information from a minor under the age of 18 without appropriate parental consent, we will delete that information as soon as reasonably practicable.

11. International Data Transfers

4 Rivers Smokehouse BBQ is based in the United States, and our website is operated from the United States. If you are accessing our website from outside the United States, please be aware that your personal information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your home country.

By using our website and providing us with your personal information, you consent to the transfer of your information to the United States and its processing in the United States in accordance with this Privacy Policy. We take appropriate steps to ensure that any international transfers of personal information are conducted in accordance with applicable legal requirements and that your information receives an adequate level of protection.

If you are located in a jurisdiction with specific data transfer requirements, please contact us at [email protected] to discuss the specific safeguards applicable to any transfer of your personal information.

12. Third-Party Websites and Links

Our website may contain links to third-party websites, social media platforms, and online services that are not operated or controlled by us. This Privacy Policy applies only to our website and our services. We are not responsible for the privacy practices of third-party websites, and we encourage you to review the privacy policies of any third-party websites you visit.

The inclusion of a link to a third-party website on our platform does not imply our endorsement of that website, its content, or its privacy practices.

13. Do Not Track Signals

Some web browsers allow users to enable a "Do Not Track" (DNT) signal that instructs websites not to track the user's online activities. Currently, there is no universally accepted standard for responding to DNT signals, and our website does not currently respond to browser DNT signals. We will continue to monitor developments in this area and update our practices as appropriate if a recognized standard is established.

California residents may also have rights under the California "Shine the Light" law (California Civil Code Section 1798.83), which allows California residents to request information about the disclosure of their personal information to third parties for direct marketing purposes. If you are a California resident and wish to make such a request, please contact us at [email protected].

14. How to File a Complaint

If you have concerns about how we handle your personal information, we encourage you to contact us first so that we can attempt to resolve the issue directly. You can reach our privacy team at:

If you are not satisfied with our response or believe that we are processing your personal information in a manner that violates applicable law, you have the right to file a complaint with the relevant data protection or consumer protection authority.

14.1 Federal Agencies

• Federal Trade Commission (FTC): The FTC enforces consumer protection laws in the United States. You may file a complaint with the FTC at ftc.gov/complaint or by calling 1-877-FTC-HELP (1-877-382-4357).
• Consumer Financial Protection Bureau (CFPB): For financial data-related concerns, complaints may be submitted at consumerfinance.gov/complaint.

14.2 State-Level Authorities

• California Residents: The California Privacy Protection Agency (CPPA) enforces the CCPA/CPRA. You may file a complaint with the CPPA at cppa.ca.gov.
• All States: Your state Attorney General's office may also handle consumer privacy complaints. We encourage you to visit your state's official government website to locate the appropriate consumer protection office.

15. Changes to This Privacy Policy

We reserve the right to update, modify, or replace this Privacy Policy at any time to reflect changes in our practices, applicable laws, or business operations. When we make material changes to this Privacy Policy, we will:

• Update the "Last Updated" date at the top of this page
• Post a prominent notice on our website homepage notifying you of the changes
• Send an email notification to registered users where required by law or where changes are significant

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website after the effective date of any changes constitutes your acceptance of the revised Privacy Policy.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact our privacy team. We are committed to addressing your inquiries promptly and transparently.

We will make every effort to respond to your privacy inquiries within 30 days of receipt. For verifiable consumer requests under the CCPA/CPRA, we will respond within 45 days as required by California law, with the possibility of a 45-day extension when reasonably necessary.