Privacy Policy

This Privacy Policy describes how Hangry Joe's ("we," "us," "our," or "the Company") collects, uses, discloses, retains, and protects information about you when you visit our website at fresh-hangryjoes.digital, place orders, use our digital services, or otherwise interact with us. We are committed to protecting your personal information and your right to privacy. Please read this policy carefully. If you have questions or concerns, contact us using the details provided at the end of this document.

By accessing or using our website and services, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy. If you do not agree with the practices described here, please discontinue use of our services immediately.

1. About Us

Hangry Joe's is a food service business operating in the United States. We provide online ordering, delivery coordination, and related food services through our digital platform.

2. Scope of This Privacy Policy

This Privacy Policy applies to all personal information we collect through:

• Our website at fresh-hangryjoes.digital
• Online food ordering and payment processes
• Email communications and customer support interactions
• Marketing and promotional campaigns
• Loyalty programs or reward schemes (if applicable)
• Social media pages and associated interactions
• Any third-party platforms through which we conduct business

This policy does not apply to the practices of companies we do not own or control, or to individuals we do not employ or manage.

3. Information We Collect

We collect various categories of information depending on how you interact with our website and services. This information is collected directly from you, automatically through technology, and from third-party sources.

3.1 Personal Information You Provide Directly

When you create an account, place an order, contact our support team, or sign up for marketing communications, you may provide us with:

• Identity Information: Your full name, username, or similar identifier
• Contact Information: Email address, telephone number, billing address, and delivery address
• Account Credentials: Username and password (passwords are encrypted and never stored in plain text)
• Order Information: Items ordered, special dietary requirements, order history, and delivery instructions
• Payment Information: Credit or debit card numbers, billing details, and transaction records (payment card details are processed by our secure payment processors and are not stored on our servers)
• Communications Data: Messages, feedback, reviews, and correspondence you send us via email, live chat, or contact forms
• Preferences and Dietary Information: Food preferences, allergies, and dietary restrictions you voluntarily provide
• Marketing Preferences: Your choices regarding receipt of promotional materials

3.2 Information Collected Automatically

When you visit our website or use our digital services, we automatically collect certain technical and usage data, including:

• Device Information: Device type, operating system version, browser type and version, screen resolution, and unique device identifiers
• Log Data: IP address, access times, pages viewed, referring URLs, and time spent on pages
• Usage Data: Clickstream data, search queries on our site, features used, and interaction patterns
• Location Data: General geographic location inferred from your IP address; precise GPS location only if you expressly grant permission through your device
• Cookie and Tracking Data: Information collected through cookies, web beacons, pixels, and similar technologies (see Section 8 for full details)
• Performance Data: Site errors, crash reports, and loading times to help us improve our services

3.3 Information From Third-Party Sources

We may receive information about you from third parties in limited circumstances, including:

• Payment Processors: Transaction confirmation and fraud-detection signals from providers such as Stripe or Square
• Delivery Partners: Fulfillment status updates and delivery confirmation data
• Social Media Platforms: If you connect your social media account or log in using a social media single sign-on feature, we may receive your name, email address, and profile picture as permitted by that platform's settings
• Analytics Providers: Aggregated behavioral and demographic insights from third-party analytics services
• Marketing Partners: Contact details you have consented to share with our advertising partners

4. How We Use Your Information

We use the personal information we collect for the following purposes, each grounded in a legitimate legal basis under applicable law:

4.1 Service Provision and Order Fulfillment

• Processing and confirming your food orders and payments
• Coordinating delivery or pick-up logistics
• Managing your account and providing account-related functionality
• Communicating order updates, delivery confirmations, and receipts
• Accommodating special dietary requests or allergy information you provide
• Resolving disputes, processing refunds, and handling complaints

4.2 Customer Support

• Responding to your inquiries, comments, and support requests
• Diagnosing and resolving technical problems you report
• Maintaining records of communications for quality-assurance and training purposes

4.3 Analytics and Service Improvement

• Analyzing usage patterns to understand how customers interact with our platform
• Identifying popular menu items, peak ordering times, and service bottlenecks
• Conducting A/B testing and user research to improve website design and functionality
• Generating aggregated, anonymized statistical reports

4.4 Marketing and Promotional Communications

• Sending you newsletters, special offers, promotions, and updates about our menu — only where you have given consent or where we have a legitimate interest and you have not opted out
• Personalizing promotional content based on your order history and browsing behavior
• Serving targeted advertisements on third-party platforms (subject to your cookie preferences)
• Administering loyalty programs, contests, or sweepstakes

You may opt out of marketing communications at any time by clicking the "Unsubscribe" link in any email we send, or by contacting us at [email protected]. Opting out of marketing does not affect transactional communications related to your orders.

4.5 Legal Compliance and Safety

• Complying with applicable federal and state laws and regulations
• Responding to lawful requests from governmental authorities, courts, or law enforcement agencies
• Enforcing our Terms of Service and other legal agreements
• Detecting and preventing fraud, unauthorized access, and other illegal activities
• Protecting the rights, property, and safety of Hangry Joe's, our customers, and the public

5. Legal Bases for Processing

As a business operating in the United States, our data practices are governed primarily by federal law — including the Federal Trade Commission Act (FTC Act) — as well as applicable state privacy statutes. Where we serve California residents, we comply fully with the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). We process your personal information based on:

• Contractual Necessity: Processing required to fulfill your order or deliver services you request
• Legal Obligation: Processing required to comply with federal or state law
• Legitimate Interests: Processing for fraud prevention, service improvement, and business operations, where your interests do not override ours
• Consent: Processing for marketing or non-essential cookies, where you have given explicit opt-in consent

6. Sharing Your Information With Third Parties

We do not sell, rent, or trade your personal information. We share your data only in the circumstances described below.

6.1 Service Providers and Vendors

We engage trusted third-party companies to perform functions on our behalf. These service providers have access to personal information only as necessary to perform their specific services and are contractually obligated to protect your data. Our service providers include:

• Payment Processors: To securely handle credit and debit card transactions
• Delivery and Logistics Partners: To fulfill and track your food orders
• Cloud Hosting Providers: To store website data, databases, and application infrastructure
• Email Service Providers: To send transactional and marketing emails
• Analytics Providers: Such as Google Analytics, to help us understand website usage
• Customer Support Platforms: To manage support tickets and live chat interactions
• Marketing and Advertising Platforms: To deliver targeted advertisements based on your preferences and consent

6.2 Business Transfers

If Hangry Joe's undergoes a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of its assets, your personal information may be transferred as part of that transaction. We will notify you via email or a prominent notice on our website before your information is transferred and becomes subject to a different privacy policy.

6.3 Legal Requirements and Protection of Rights

We may disclose your information if we believe in good faith that such disclosure is necessary to:

• Comply with a subpoena, court order, legal process, or other governmental request
• Cooperate with law enforcement agencies in the investigation of fraud or other crimes
• Enforce our Terms of Service or other contractual agreements
• Protect the rights, property, or safety of Hangry Joe's, our users, or the public

6.4 Aggregated and Anonymized Data

We may share aggregated or de-identified information — which cannot reasonably be used to identify you — with third parties for research, analytics, industry reporting, or marketing purposes without restriction.

7. Data Security

We take the security of your personal information seriously and implement a range of technical, administrative, and physical safeguards designed to protect your data from unauthorized access, disclosure, alteration, and destruction.

7.1 Technical Measures

• Encryption: All data transmitted between your browser and our servers is protected using Transport Layer Security (TLS/SSL) encryption
• Password Hashing: Account passwords are stored using industry-standard one-way hashing algorithms (e.g., bcrypt)
• Secure Payment Processing: Payment card data is handled exclusively by PCI-DSS compliant payment processors; we do not store raw card numbers
• Access Controls: Access to personal data is restricted to authorized personnel who need it to perform their job functions
• Firewalls and Intrusion Detection: Our hosting infrastructure is protected by firewalls and continuous monitoring systems

7.2 Administrative Measures

• Regular staff training on data protection best practices
• Data minimization policies to ensure we collect only what is necessary
• Vendor due diligence and contractual data protection obligations
• Incident response procedures to address potential data breaches promptly

7.3 Breach Notification

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected users and relevant authorities as required by applicable law — including state breach notification laws where applicable — within the timeframes prescribed by law.

8. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and support our marketing efforts.

8.1 Types of Cookies We Use

8.2 Managing Your Cookie Preferences

You can manage or withdraw your consent to non-essential cookies at any time through our Cookie Preference Center accessible via the cookie banner on our website. You may also control cookies through your browser settings; however, disabling certain cookies may affect the functionality of our website. For more detailed information, please refer to our Cookie Policy.

9. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, to comply with our legal obligations, resolve disputes, and enforce our agreements.

When personal information is no longer required, we securely delete or anonymize it in accordance with our data retention schedule.

10. Your Privacy Rights

Depending on your state of residence, you may have certain rights with respect to your personal information. We honor these rights and provide accessible means for you to exercise them.

10.1 Rights Under the California Consumer Privacy Act (CCPA/CPRA)

If you are a California resident, you have the following rights:

• Right to Know: You may request that we disclose what personal information we have collected about you, the categories of sources, the purposes for which it is used, and the categories of third parties with whom it is shared — for the preceding 12 months
• Right to Delete: You may request that we delete the personal information we hold about you, subject to certain legal exceptions
• Right to Correct: You may request that we correct inaccurate personal information we hold about you
• Right to Opt Out of Sale or Sharing: You have the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising. We do not sell personal information in the traditional sense; however, certain targeted advertising activities may constitute "sharing" under the CPRA. You may opt out via our Cookie Preference Center or by emailing us
• Right to Limit Use of Sensitive Personal Information: You may request that we limit the use and disclosure of sensitive personal information to purposes necessary for providing services
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights. We will not deny you goods or services, charge different prices, or provide a different level of service based on your exercise of these rights

10.2 General Privacy Rights (All U.S. Residents)

Regardless of your state of residence, we provide the following rights to all users:

• Access: You may request a copy of the personal information we hold about you
• Correction: You may request correction of inaccurate or incomplete personal information
• Deletion: You may request deletion of your personal information, subject to our legal obligations to retain certain data
• Data Portability: You may request your personal information in a structured, commonly used, machine-readable format where technically feasible
• Opt Out of Marketing: You may opt out of receiving marketing communications at any time
• Withdraw Consent: Where we rely on your consent to process data, you may withdraw that consent at any time without affecting the lawfulness of processing before withdrawal

10.3 How to Exercise Your Rights

To exercise any of your privacy rights, please submit a verifiable request to us using the following methods:

• Email: [email protected] with the subject line "Privacy Rights Request"

We will acknowledge receipt of your request within 10 business days and respond substantively within 45 calendar days. If we require additional time (up to 90 days in total), we will notify you of the extension and the reason. We may need to verify your identity before processing your request to protect against unauthorized disclosure.

Authorized agents: California residents may designate an authorized agent to make a request on their behalf. We will require written proof of authorization and may request identity verification directly from you.

11. Children's Privacy

Hangry Joe's does not knowingly collect, solicit, or process personal information from children under the age of 13 in violation of the Children's Online Privacy Protection Act (COPPA), nor do we knowingly collect data from individuals under 18 years of age for marketing purposes.

Our website and ordering platform are not directed to children under 13. If you are under 13 years of age, please do not use our services or provide any personal information to us. If we become aware that we have inadvertently collected personal information from a child under 13, we will take immediate steps to delete such information from our records.

If you are a parent or legal guardian and believe your child has provided us with personal information without your consent, please contact us immediately at [email protected]. We will investigate and, where appropriate, delete the information within a reasonable timeframe.

12. International Data Transfers

Hangry Joe's is based in the United States, and your personal information is collected and primarily processed within the United States. However, some of our third-party service providers — including cloud hosting, analytics, and payment processing vendors — may process your data in countries outside the United States.

If your data is transferred outside the United States to countries that may not have equivalent data protection standards, we take steps to ensure that appropriate safeguards are in place, including:

• Ensuring our service providers adhere to data protection standards consistent with applicable U.S. law
• Executing data processing agreements that require service providers to protect your data to at least the same standard we apply
• Where applicable, relying on recognized transfer mechanisms such as Standard Contractual Clauses

If you are located outside the United States and use our services, please note that your information will be transferred to and processed in the United States, where privacy laws may differ from those in your country. By using our services, you consent to this transfer.

13. Third-Party Websites and Links

Our website may contain links to third-party websites, social media platforms, or partner sites. This Privacy Policy applies only to Hangry Joe's and our domain fresh-hangryjoes.digital. We have no control over and assume no responsibility for the privacy practices or content of any third-party websites. We encourage you to read the privacy policies of every website you visit.

14. Do Not Track Signals

Some web browsers include a "Do Not Track" (DNT) feature that signals to websites that you do not want your online activity tracked. Currently, there is no universally accepted standard for how companies should respond to DNT signals. Our website does not currently alter its data collection practices in response to DNT signals. However, you can manage cookie-based tracking through our Cookie Preference Center.

Where required by applicable state law — such as the Global Privacy Control (GPC) signal recognized under California law — we will honor opt-out preference signals to the extent technically feasible.

15. Sensitive Personal Information

We may collect certain categories of sensitive personal information in limited circumstances, such as dietary restrictions or food allergies you choose to provide when placing an order. This information is collected solely to accommodate your requests and improve your dining experience. We do not use sensitive personal information for any purpose beyond providing the services you request, except as required by law or to protect health and safety.

We do not knowingly collect sensitive categories such as government identification numbers, financial account credentials, precise geolocation without consent, racial or ethnic origin, biometric data, or health information beyond what you voluntarily provide for food allergy or dietary purposes.

16. California "Shine the Light" Law

California Civil Code Section 1798.83 (the "Shine the Light" law) permits California residents to request information about whether we disclose personal information to third parties for their direct marketing purposes. We do not disclose personal information to third parties for their own direct marketing purposes without your consent. California residents may request further information about our compliance with this law by contacting us at [email protected].

17. How to File a Complaint

If you have concerns about how we handle your personal information and are not satisfied with our response, you have the right to file a complaint with an appropriate regulatory authority.

17.1 Federal Trade Commission (FTC)

For complaints relating to unfair or deceptive data practices under the FTC Act, you may contact the Federal Trade Commission:

• Website: www.ftc.gov/complaint
• Phone: 1-877-382-4357
• Address: Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, D.C. 20580

17.2 California Privacy Protection Agency (CPPA)

California residents may file complaints regarding CCPA/CPRA violations with the California Privacy Protection Agency:

• Website: cppa.ca.gov
• Email: [email protected]

17.3 State Attorney General Offices

Residents of states with enacted consumer data protection laws (including Virginia, Colorado, Connecticut, Texas, and others) may contact their respective state Attorney General's offices to file privacy-related complaints.

18. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our business practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Post a notice on our website homepage or in a prominent location
• Send an email notification to registered users where required by law or where we deem it appropriate

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website or services after the effective date of any changes constitutes your acceptance of the revised policy.

19. Contact Us for Privacy Inquiries

If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please do not hesitate to reach out to us. We are committed to addressing your privacy concerns in a timely and transparent manner.

We strive to respond to all privacy-related inquiries within 10 business days. For formal rights requests (access, deletion, correction, portability), please allow up to 45 calendar days for a substantive response as provided under applicable law.

This Privacy Policy was last reviewed and updated on June 14, 2026. © 2026 Hangry Joe's. All rights reserved.