Privacy Policy

This Privacy Policy describes how 4 Rivers ("we," "us," or "our") collects, uses, discloses, and protects your personal information when you visit our website at 4rivers-food.rest, place orders, use our services, or otherwise interact with us. We are committed to protecting your privacy and handling your personal data with transparency, integrity, and care.

By accessing or using our website and services, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with this policy, please discontinue your use of our website and services immediately.

This Privacy Policy is governed by applicable United States federal and state privacy laws, including but not limited to the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), and other applicable federal and state regulations.

1. About Us

4 Rivers is a food business operating in the United States. We are dedicated to delivering high-quality food products and an exceptional dining experience to our customers. Our primary point of contact for privacy-related matters is:

For all privacy-related inquiries, requests, or complaints, please contact us using the email address provided above. We will respond to all legitimate requests within a reasonable timeframe as required by applicable law.

2. Scope of This Privacy Policy

This Privacy Policy applies to:

• All visitors to our website at 4rivers-food.rest
• Customers who place orders online or through any integrated ordering platform
• Users who register for an account on our website
• Individuals who subscribe to our newsletter or marketing communications
• Individuals who contact us for customer support, feedback, or general inquiries
• Any individual whose personal data we collect through our online and offline operations

This policy does not apply to third-party websites, applications, or services that may be linked to or from our website. We encourage you to review the privacy policies of any third-party platforms you visit.

3. Information We Collect

We collect several types of information in connection with our operations. The categories of personal information we may collect are described below.

3.1 Personal Identification Information

When you use our website, create an account, or place an order, we may collect personally identifiable information, including but not limited to:

• Full name
• Email address
• Phone number
• Billing and delivery address (street address, city, state, ZIP code)
• Date of birth (where required for age verification)
• Username and password (for registered account holders)
• Payment information, including credit or debit card details (processed through secure third-party payment processors)

3.2 Order and Transaction Information

When you place an order with us, we collect information related to that transaction, including:

• Items ordered and order history
• Special dietary requirements or preferences you disclose to us
• Delivery instructions or notes
• Transaction amounts, dates, and times
• Loyalty program participation and reward redemption data

3.3 Usage Data and Website Activity

When you visit our website, we automatically collect certain information about your interaction with our digital properties, including:

• IP address and approximate geographic location
• Browser type and version
• Operating system and device type
• Pages visited and time spent on each page
• Links clicked and features used
• Referring URL (the website that directed you to ours)
• Search queries made on our website
• Date and time of your visit
• Session duration

3.4 Device Information

We may collect information about the device you use to access our website or services, including:

• Device type (desktop, mobile, tablet)
• Device identifiers (such as mobile advertising IDs)
• Screen resolution
• Hardware model
• Network information

3.5 Cookies and Tracking Technologies

We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about your browsing behavior and preferences. For more details on how we use cookies and how you can manage your preferences, please refer to Section 9 of this Privacy Policy.

3.6 Communications Data

If you contact us via email, phone, or through contact forms on our website, we may collect and retain the content of your communications, including your name, contact details, and the substance of your inquiry.

3.7 Marketing and Preference Data

If you subscribe to our newsletter or marketing communications, we collect information about your marketing preferences and how you interact with our emails (such as open rates and click-through rates).

3.8 Information from Third Parties

We may receive information about you from third-party sources, such as:

• Third-party food delivery platforms (if you place orders through a partner delivery app)
• Social media platforms (if you interact with our social media profiles or use social login features)
• Analytics and advertising partners
• Payment processors
• Fraud detection services

4. How We Use Your Information

We use the personal information we collect for the following purposes:

4.1 Service Provision and Order Fulfillment

• To process and fulfill your food orders
• To manage your account and provide access to account features
• To arrange delivery or notify you of order status updates
• To process payments and send transaction confirmations
• To handle returns, refunds, or complaints

4.2 Customer Support and Communications

• To respond to your inquiries, questions, and requests
• To notify you of changes to our menu, services, or policies
• To send you important service-related notices
• To follow up on customer satisfaction or feedback

4.3 Analytics and Website Improvement

• To analyze how users interact with our website and services
• To understand usage trends and optimize the user experience
• To identify and fix technical issues or bugs
• To develop new features, products, and services
• To conduct internal research and business analysis

4.4 Marketing and Promotional Communications

• To send you promotional offers, discounts, and newsletters (where you have opted in or where permitted by law)
• To personalize your experience and display relevant content
• To conduct targeted advertising on third-party platforms
• To invite you to participate in surveys, contests, or loyalty programs

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any email we send or by contacting us at [email protected].

4.5 Legal Compliance and Safety

• To comply with applicable laws, regulations, and legal obligations
• To detect, prevent, and investigate fraud, unauthorized access, or other illegal activities
• To enforce our Terms of Service and other agreements
• To protect the rights, safety, and property of 4 Rivers, our customers, and the public
• To respond to lawful requests from government authorities or law enforcement

5. Legal Basis for Processing

As a business operating in the United States, we process your personal information based on the following legal grounds, consistent with applicable U.S. federal and state privacy laws:

6. Sharing Your Information with Third Parties

We do not sell your personal information to third parties. However, we may share your information with trusted third parties in the following circumstances:

6.1 Service Providers and Vendors

We work with third-party companies and individuals to help us deliver our services. These service providers may access your personal information only as necessary to perform their functions on our behalf and are contractually obligated to maintain the confidentiality and security of your data. Examples include:

• Payment processing companies
• Delivery and logistics providers
• Cloud hosting and infrastructure providers
• Email marketing platforms
• Analytics and reporting services (such as Google Analytics)
• Customer support software providers
• Fraud detection and cybersecurity firms

6.2 Business Partners and Third-Party Ordering Platforms

If you place an order through a third-party delivery platform or food ordering app that partners with us, that platform may share certain order-related data with us. We are not responsible for the privacy practices of such third-party platforms and encourage you to review their privacy policies.

6.3 Legal Requirements and Law Enforcement

We may disclose your personal information if required to do so by law or in good faith belief that such disclosure is necessary to:

• Comply with a legal obligation, court order, or government request
• Protect and defend the rights or property of 4 Rivers
• Prevent or investigate possible wrongdoing in connection with our services
• Protect the personal safety of users or the public
• Protect against legal liability

6.4 Business Transfers

In the event that 4 Rivers undergoes a merger, acquisition, reorganization, sale of assets, or bankruptcy proceeding, your personal information may be transferred as part of that transaction. We will notify you via email or a prominent notice on our website if such a transfer occurs and your information becomes subject to a different privacy policy.

6.5 With Your Consent

We may share your information with other third parties where we have obtained your explicit consent to do so.

7. Data Security

We take the security of your personal information seriously and implement a range of technical, administrative, and physical safeguards designed to protect your data from unauthorized access, disclosure, alteration, or destruction. Our security measures include:

• Encryption: We use Secure Socket Layer (SSL) / Transport Layer Security (TLS) encryption to protect data transmitted between your browser and our servers.
• Access Controls: We restrict access to personal information to authorized personnel who require it to perform their job functions.
• Secure Payment Processing: Payment card information is processed through PCI-DSS compliant third-party payment processors. We do not store full credit or debit card numbers on our servers.
• Firewalls and Intrusion Detection: We deploy firewalls, intrusion detection systems, and other security technologies to monitor and protect our systems.
• Regular Security Assessments: We conduct regular reviews and assessments of our security practices and systems.
• Employee Training: Our staff receive training on data privacy and security best practices.

While we strive to protect your personal information using commercially reasonable measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security and encourage you to take precautions such as using strong passwords and keeping your account credentials confidential.

In the event of a data breach that affects your personal information, we will notify you in accordance with applicable U.S. state data breach notification laws.

8. Your Privacy Rights

Depending on your state of residence, you may have specific rights regarding your personal information. We honor the privacy rights afforded to consumers under applicable U.S. law, including rights provided under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and other applicable state privacy laws.

8.1 Right to Know and Access

You have the right to request that we disclose what personal information we have collected about you, including the categories of information, the sources from which it was collected, the business purposes for collecting it, and the categories of third parties with whom it is shared.

8.2 Right to Correction

You have the right to request that we correct inaccurate personal information we hold about you, subject to certain exceptions.

8.3 Right to Deletion

You have the right to request that we delete personal information we have collected about you. We will honor such requests to the extent required by law, subject to certain exceptions (for example, where we are required to retain information to fulfill a legal obligation or complete a transaction you requested).

8.4 Right to Data Portability

Where technically feasible and required by applicable law, you have the right to receive a copy of the personal information you have provided to us in a structured, commonly used, and machine-readable format.

8.5 Right to Opt Out of Sale or Sharing

Under the CCPA/CPRA, California residents have the right to opt out of the sale or sharing of their personal information for cross-context behavioral advertising. We do not sell your personal information. However, if our use of advertising cookies or tracking technologies constitutes "sharing" under California law, you may exercise your opt-out rights by contacting us or using our cookie management tool.

8.6 Right to Limit Use of Sensitive Personal Information

California residents have the right to limit the use and disclosure of sensitive personal information to what is necessary to provide the requested services.

8.7 Right to Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights. We will not deny you goods or services, charge you different prices, or provide a different level of quality of services because you exercised your rights under applicable privacy law.

8.8 How to Exercise Your Rights

To exercise any of the rights described above, please submit a request to us by:

• Email: [email protected]

We will verify your identity before processing your request to protect your information from unauthorized access. We will respond to your request within 45 days of receipt. If we require additional time, we will notify you of the extension and the reason within the initial 45-day period. You may designate an authorized agent to make a request on your behalf by providing written authorization.

9. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze site usage, and deliver relevant advertising. Here is a brief overview of how we use these technologies:

9.1 Types of Cookies We Use

9.2 Managing Your Cookie Preferences

You can manage or disable cookies through your browser settings. Most web browsers allow you to control cookies through their settings preferences. However, disabling certain cookies may affect the functionality of our website. You may also use opt-out tools provided by advertising networks such as the Digital Advertising Alliance (DAA) at www.aboutads.info/choices.

For more detailed information about the specific cookies we use and how to manage your preferences, please refer to our full Cookie Policy, available on our website at 4rivers-food.rest.

10. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The following table provides a general overview of our data retention practices:

After the applicable retention period, your personal information will be securely deleted, anonymized, or de-identified so that it can no longer be associated with you. We may retain anonymized or aggregated data for analytical purposes indefinitely, as such data does not constitute personal information.

11. Children's Privacy

4 Rivers does not knowingly collect, solicit, or process personal information from children under 18 years of age. Our website and services are not directed at minors, and we do not intentionally market to children. If you are under 18, please do not provide any personal information to us or use our services without the involvement of a parent or legal guardian.

If we become aware that we have inadvertently collected personal information from a child under 18 without verifiable parental consent, we will take prompt steps to delete such information from our records. If you believe that a child under 18 has provided us with personal information, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

Additionally, in compliance with the Children's Online Privacy Protection Act (COPPA), we do not knowingly collect personal information from children under 13 years of age.

12. International Data Transfers

4 Rivers is based in the United States and primarily operates within the U.S. market. Your personal information is collected, stored, and processed in the United States. However, certain service providers we use may operate in other countries, which means your personal information could be transferred to, stored in, or processed in countries outside of the United States.

When we transfer personal information internationally, we take appropriate steps to ensure that your data remains protected in accordance with applicable privacy laws. These steps may include:

• Entering into data processing agreements with our service providers that include appropriate data protection clauses
• Ensuring that our service providers maintain adequate security measures
• Transferring data only to countries or organizations that provide an adequate level of protection

By using our website and services, you acknowledge and consent to the transfer, storage, and processing of your personal information in the United States and, where applicable, in other countries.

13. Third-Party Links and Services

Our website may contain links to third-party websites, social media platforms, or services that are not owned or controlled by 4 Rivers. This Privacy Policy applies only to our own website and services. We are not responsible for the privacy practices of any third-party websites or services, and we encourage you to review the privacy policies of any external sites you visit.

Our website may integrate with third-party services such as:

• Social media platforms (Facebook, Instagram, Twitter/X)
• Third-party food delivery and ordering platforms
• Google Maps for location services
• Payment gateways

When you interact with these third-party services, their own privacy policies govern the collection and use of your data.

14. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you are entitled to additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). This section provides supplemental disclosures for California residents.

14.1 Categories of Personal Information Collected

In the preceding 12 months, we may have collected the following categories of personal information from California residents:

• Identifiers (name, email address, IP address, account username)
• Commercial information (order history, transaction records)
• Internet or other electronic network activity (browsing behavior, cookie data)
• Geolocation data (approximate location based on IP address or delivery address)
• Inferences drawn from personal information to create a profile about you
• Sensitive personal information (financial account details, processed through third-party payment processors)

14.2 Categories of Sources

We collect personal information directly from you, automatically from your device and browser, and from third parties such as delivery platforms and analytics providers.

14.3 Business or Commercial Purpose for Collecting

We collect personal information for the business and commercial purposes described in Section 4 of this Privacy Policy.

14.4 Categories of Third Parties with Whom We Share

As described in Section 6, we share personal information with service providers, business partners, and as required by law.

14.5 Shine the Light

California Civil Code Section 1798.83 (the "Shine the Light" law) allows California residents to request information about our disclosure of personal information to third parties for direct marketing purposes during the preceding calendar year. If you are a California resident and wish to make such a request, please contact us at [email protected].

15. Do Not Track Signals

Some web browsers may transmit "Do Not Track" (DNT) signals to websites that a user visits. Currently, there is no universally accepted standard for how websites should respond to DNT signals. As a result, our website does not currently respond to DNT browser signals. However, you can manage your privacy preferences through our cookie settings and by using the opt-out options described in Section 9.

16. Filing Complaints with Data Protection Authorities

While 4 Rivers is a U.S.-based business, we are committed to resolving any privacy concerns you may have. If you are not satisfied with our response to a privacy inquiry or complaint, you have the right to file a complaint with an appropriate regulatory authority.

16.1 Federal Trade Commission (FTC)

The Federal Trade Commission (FTC) enforces consumer protection and privacy laws in the United States. If you believe your privacy rights have been violated, you may file a complaint with the FTC:

• Website: www.ftc.gov
• Phone: 1-877-382-4357

16.2 California Attorney General (for California Residents)

California residents may also file complaints regarding CCPA/CPRA violations with the California Privacy Protection Agency (CPPA) or the California Attorney General:

• California Attorney General: oag.ca.gov/privacy
• California Privacy Protection Agency (CPPA): cppa.ca.gov

16.3 State Attorneys General

Residents of other U.S. states may file privacy-related complaints with their respective State Attorney General's office. Contact information for each state's Attorney General is typically available on the official state government website.

We encourage you to contact us first at [email protected] so that we have the opportunity to resolve your concern directly before you escalate to a regulatory authority.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. When we make material changes, we will:

• Update the "Last Updated" date at the top of this Privacy Policy
• Post the revised policy on our website at 4rivers-food.rest
• Where required by law or where the change is significant, notify you by email or through a prominent notice on our website

We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use, and protect your personal information. Your continued use of our website and services after any changes to this policy constitutes your acceptance of the updated terms.

18. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, your personal information, or your privacy rights, please do not hesitate to contact us. We are committed to addressing your inquiries promptly and thoroughly.

When submitting a privacy request, please include your full name, email address, and a clear description of your request or concern so that we can assist you efficiently. We will acknowledge receipt of your request and respond within the timeframe required by applicable law.