Privacy Policy

Effective Date: May 9, 2026  |  Last Updated: May 9, 2026

1. Introduction and Who We Are

Welcome to 4 Rivers BBQ. We are a food service business operating in the United States, committed to protecting the privacy and personal information of our customers, website visitors, and anyone else who interacts with our brand online or in person.

At 4 Rivers BBQ, we understand that your personal information is important to you, and we take our responsibility to protect it seriously. This Privacy Policy is designed to help you understand what data we collect, why we collect it, how we use it, and the rights you have regarding your personal information.

This Privacy Policy applies to all information collected through our website located at 4rivers-bbq.rest, as well as any related services, sales, marketing, or events. By accessing or using our website and services, you acknowledge that you have read, understood, and agree to the data practices described in this Privacy Policy.

Our contact details for privacy-related matters are as follows:

2. Applicable Laws and Legal Framework

As a business operating in the United States, our data practices are governed by applicable federal and state privacy laws, including but not limited to:

• The California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), which provides California residents with specific rights regarding their personal information.
• The Federal Trade Commission (FTC) Act, which prohibits unfair or deceptive practices in commerce, including with respect to privacy and data security.
• The Children's Online Privacy Protection Act (COPPA), which governs the collection of personal information from children under 13 years of age.
• CAN-SPAM Act, which sets requirements for commercial email messages.
• Other applicable state and federal privacy, consumer protection, and data security laws.

We are committed to complying with all applicable privacy laws and regulations and will update this Privacy Policy as laws and our practices evolve.

3. Information We Collect

We collect various types of information in connection with the services we provide. Below is a detailed breakdown of the categories of personal information we collect:

3.1 Personal Information You Provide Directly

When you interact with us — whether by placing an order, creating an account, contacting customer support, signing up for our newsletter, or participating in promotions — you may provide us with personal information, including:

• Identity Information: Your full name, username, or similar identifiers.
• Contact Information: Email address, telephone number, mailing address, and delivery address.
• Account Credentials: Username and password if you create an account on our website.
• Order and Transaction Information: Details about the food items or services you have purchased or inquired about, order history, billing address, and payment information.
• Payment Information: Credit card details, debit card details, or other payment method information. Please note that full payment card details are processed by our secure third-party payment processors and are not stored on our servers.
• Dietary Preferences and Special Requests: Any dietary restrictions, allergies, or food preferences you share with us to fulfill your orders.
• Communications: Any messages, feedback, reviews, or other content you send to us through contact forms, email, or social media.
• Survey Responses: Information you provide when participating in surveys, contests, or promotions.

3.2 Information Collected Automatically

When you visit our website at 4rivers-bbq.rest, we automatically collect certain technical information about your device and how you interact with our site. This information is collected through cookies, web beacons, pixels, and similar tracking technologies and includes:

• Device Information: IP address, browser type and version, operating system, device type (desktop, mobile, tablet), screen resolution, and device identifiers.
• Usage Data: Pages visited, time spent on pages, links clicked, referring website or source, exit pages, and browsing patterns within our website.
• Log Data: Server logs that record your requests to our server, including date and time of access, pages viewed, and error messages.
• Location Data: General geographic location inferred from your IP address (e.g., city, state, country). We do not collect precise GPS location data without your express consent.
• Cookie and Tracking Data: Information collected through cookies and similar technologies as described in more detail in Section 9 of this policy.

3.3 Information from Third Parties

We may receive personal information about you from third parties in certain circumstances, including:

• Social Media Platforms: If you interact with our social media pages or use social login features to sign in to our website, we may receive certain profile information from the social media provider.
• Third-Party Delivery Platforms: If you place an order through a third-party food delivery platform that partners with us (such as DoorDash, Uber Eats, or Grubhub), we may receive order and contact information necessary to fulfill your order.
• Analytics Providers: We may receive aggregated or anonymized data from analytics providers that help us understand website traffic and user behavior.
• Advertising Partners: We may receive information from advertising partners to help us understand the effectiveness of our marketing campaigns.
• Review Platforms: If you post a review about us on a third-party review platform, we may collect and reference your publicly shared feedback.

4. How We Use Your Information

We use the personal information we collect for a variety of purposes related to our operations as a food service business. The specific purposes for which we process your data include:

4.1 Providing and Fulfilling Our Services

• Processing and fulfilling your food orders, including coordinating delivery or pick-up.
• Managing your account and providing customer support.
• Communicating with you about your orders, including order confirmations, status updates, and delivery notifications.
• Accommodating dietary preferences, allergies, and special food requests.
• Processing payments and managing billing.
• Handling returns, refunds, and complaints.

4.2 Improving Our Services and Website

• Analyzing website usage patterns and user behavior to improve our website's functionality, design, and user experience.
• Conducting research and analytics to better understand our customer base and improve our menu offerings.
• Testing new features and content on our website.
• Troubleshooting technical issues and monitoring website performance.

4.3 Marketing and Promotional Activities

• Sending you promotional emails, newsletters, and marketing communications about our menu items, special offers, seasonal promotions, and events — but only where you have consented to receive such communications or where permitted by applicable law.
• Personalizing your experience on our website and in our communications based on your preferences and order history.
• Running loyalty programs, contests, and special promotions.
• Displaying targeted advertising on our website or third-party platforms, where permitted.
• Measuring and analyzing the effectiveness of our marketing campaigns.

You may opt out of receiving marketing communications from us at any time by clicking the "unsubscribe" link in any promotional email, or by contacting us at [email protected].

4.4 Legal and Compliance Purposes

• Complying with applicable laws, regulations, and legal obligations.
• Responding to lawful requests from law enforcement and government authorities.
• Enforcing our Terms of Service and other agreements.
• Protecting the rights, property, and safety of 4 Rivers BBQ, our customers, and the public.
• Preventing fraud, unauthorized access, and other illegal activities.
• Maintaining records as required by applicable tax and business laws.

5. How We Share Your Information

We respect your privacy and do not sell your personal information to third parties for their own marketing purposes. However, we do share your personal information in the following limited circumstances:

5.1 Service Providers and Business Partners

We work with trusted third-party service providers who assist us in operating our business and delivering our services. These providers only access your personal information to the extent necessary to perform their specific functions and are contractually obligated to protect your information. Our service providers include:

• Payment Processors: Companies that process credit card and payment transactions on our behalf (e.g., Stripe, Square, PayPal).
• Delivery Services: Third-party food delivery platforms and logistics companies that help deliver your orders.
• Email and Communications Providers: Platforms that help us send transactional and marketing emails.
• Website Hosting and IT Services: Companies that host our website and provide technical infrastructure.
• Analytics Providers: Services such as Google Analytics that help us analyze website traffic and usage.
• Customer Support Tools: Platforms that help us manage customer inquiries and support tickets.
• Marketing and Advertising Partners: Companies that help us run and measure advertising campaigns.

5.2 Legal Requirements and Safety

We may disclose your personal information if we believe disclosure is necessary or required to:

• Comply with a subpoena, court order, legal process, or other legal obligation.
• Respond to a request by a government authority, law enforcement agency, or regulatory body.
• Protect the rights, property, or personal safety of 4 Rivers BBQ, our employees, customers, or the public.
• Detect, prevent, or address fraud, security breaches, or technical issues.

5.3 Business Transfers

In the event that 4 Rivers BBQ undergoes a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of its assets, your personal information may be transferred to the acquiring entity as part of the transaction. We will notify you of any such change in ownership or use of your personal information, as required by applicable law.

5.4 With Your Consent

We may share your information with other third parties when you have given us your explicit consent to do so, such as when participating in joint promotions or contests with partner businesses.

5.5 Aggregated and De-Identified Data

We may share aggregated, anonymized, or de-identified information — which cannot reasonably be used to identify you — with third parties for industry analysis, research, marketing, and other business purposes.

6. Data Security

The security of your personal information is very important to us. We implement a range of technical, administrative, and physical security measures designed to protect your personal information from unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• Encryption: We use Secure Socket Layer (SSL) / Transport Layer Security (TLS) encryption to protect data transmitted between your browser and our website.
• Access Controls: Access to personal information is restricted to authorized personnel who need the information to perform their job functions.
• Password Protection: User accounts are protected by passwords, and we encourage you to use strong, unique passwords.
• Secure Payment Processing: Payment card information is processed through PCI-DSS compliant third-party payment processors and is not stored on our servers.
• Regular Security Reviews: We regularly review and update our security practices to address emerging threats and vulnerabilities.
• Employee Training: Our staff who handle personal information receive training on privacy and data security best practices.

7. Your Privacy Rights

Depending on your location and applicable law, you may have certain rights regarding your personal information. We are committed to honoring these rights and facilitating their exercise.

7.1 Rights Under the California Consumer Privacy Act (CCPA/CPRA)

If you are a resident of California, you have the following rights under the CCPA as amended by the CPRA:

7.2 General Privacy Rights for All Users

Regardless of your location, we endeavor to provide the following rights to all our users:

• Right of Access: You may request access to the personal information we hold about you.
• Right to Correction: You may request that we correct any inaccurate or incomplete personal information about you.
• Right to Deletion: You may request that we delete your personal information, subject to our legitimate business needs and legal obligations.
• Right to Data Portability: Where technically feasible and applicable, you may request that we provide your personal information in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Where we process your personal information based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.
• Right to Opt-Out of Marketing: You may opt out of marketing communications at any time.

7.3 How to Exercise Your Rights

To exercise any of the rights described in this section, please contact us using one of the following methods:

• By Email: [email protected]
• By visiting our website: 4rivers-bbq.rest

We will acknowledge your request within 10 business days and respond to verifiable consumer requests within 45 calendar days. If we require more time, we will notify you of the reason for the extension. We may need to verify your identity before processing your request. We will not charge a fee for processing your request unless it is excessive, repetitive, or manifestly unfounded.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. The retention periods we apply depend on the type of information and the purpose for which it is used:

When personal information is no longer required, we will securely delete, destroy, or anonymize it in accordance with our data retention and disposal procedures.

9. Cookies and Tracking Technologies

Our website at 4rivers-bbq.rest uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and support our marketing activities. This section provides a brief overview of our cookie use.

9.1 What Are Cookies?

Cookies are small text files stored on your device (computer, smartphone, or tablet) when you visit a website. They allow the website to recognize your device on future visits and can store information about your preferences and actions.

9.2 Types of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for the operation of our website and cannot be disabled. They enable core functionality such as security, network management, and account authentication.
• Performance and Analytics Cookies: These cookies collect information about how visitors use our website, such as which pages are most frequently visited. We use this data to improve our website. These cookies do not collect personally identifiable information.
• Functional Cookies: These cookies allow our website to remember choices you make (such as your preferred language or location) and provide enhanced, personalized features.
• Marketing and Advertising Cookies: These cookies are used to deliver advertisements that are relevant to you and your interests. They may be set by us or by third-party advertising partners.

9.3 Managing Your Cookie Preferences

You can control and manage cookies in several ways. You can set your browser to refuse all or some browser cookies, or to alert you when cookies are being set or accessed. Please note that if you disable or delete certain cookies, some parts of our website may become inaccessible or not function properly.

For more detailed information about the cookies we use, their purposes, and how you can manage them, please refer to our Cookie Policy, which is available on our website at 4rivers-bbq.rest.

10. Children's Privacy

Our website and services are intended for use by individuals who are at least 18 years of age. We do not knowingly collect, use, or disclose personal information from children under the age of 13 without verifiable parental consent, as required by the Children's Online Privacy Protection Act (COPPA).

If you are between 13 and 17 years of age, please do not use our website or services without the supervision and consent of a parent or legal guardian.

If we become aware that we have inadvertently collected personal information from a child under 13 years of age without parental consent, we will take immediate steps to delete that information from our records. If you believe that we may have collected personal information from a child under 13, please contact us immediately at [email protected].

Parents and legal guardians who have questions or concerns about their child's privacy in relation to our services are encouraged to contact us directly.

11. International Data Transfers

4 Rivers BBQ is a United States-based business, and our primary data processing activities occur within the United States. If you are accessing our website from outside the United States, please be aware that your personal information will be transferred to and processed in the United States, where data protection laws may differ from those in your home country.

By using our website and services, you consent to the transfer of your personal information to the United States for the purposes described in this Privacy Policy. We take steps to ensure that any international transfer of data is subject to appropriate safeguards to protect your personal information.

If you are located in a jurisdiction with specific requirements for international data transfers (such as the European Economic Area), please contact us at [email protected] for more information about the safeguards we apply.

12. Third-Party Links and Integrations

Our website may contain links to third-party websites, applications, or services, including food delivery platforms, social media pages, and payment processors. When you click on a third-party link, you will be directed to that third party's website. We have no control over the privacy practices of these third-party sites and are not responsible for their privacy policies or content.

We strongly encourage you to review the privacy policy of every website you visit. Our Privacy Policy applies solely to information collected through our own website at 4rivers-bbq.rest and our direct service channels.

13. Do Not Track Signals

Some browsers include a "Do Not Track" (DNT) feature that signals to websites that you do not want to have your online activity tracked. At this time, our website does not respond to DNT browser signals because there is no consistent industry standard for how DNT signals should be interpreted. We will continue to monitor developments in this area and update our practices as appropriate.

California residents may also have rights regarding the use of their personal information for behavioral advertising under the California Online Privacy Protection Act (CalOPPA) and other applicable state laws.

14. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our business practices, legal requirements, or technological developments. When we make material changes to this policy, we will:

• Update the "Last Updated" date at the top of this page.
• Post a notice on our website at 4rivers-bbq.rest informing you of the changes.
• Where required by law, notify you by email or through a prominent notice on our website.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your personal information. Your continued use of our website and services after any changes to this Privacy Policy constitutes your acknowledgment and acceptance of the updated policy.

15. Filing a Complaint with a Data Protection Authority

If you have concerns about our data practices that you believe have not been adequately addressed through our internal processes, you have the right to file a complaint with the relevant regulatory authority.

15.1 California Residents

California residents who wish to exercise their rights under the CCPA/CPRA or who have complaints about our privacy practices may contact:

15.2 Federal Complaints

For complaints related to unfair or deceptive business practices under federal consumer protection law, you may contact the Federal Trade Commission (FTC):

We would, however, appreciate the opportunity to address your concerns before you contact a regulatory authority, and we encourage you to reach out to us first.

16. Contact Us for Privacy Inquiries

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact our privacy team. We are committed to responding to all privacy-related inquiries promptly and transparently.

We aim to acknowledge all privacy inquiries within 5 business days and to fully respond within 30 days, or within any shorter period required by applicable law. For requests under the CCPA/CPRA, we will respond within the timeframes specified by California law.