Privacy Policy

1. Introduction

Brazilian Picanha Grill ("we," "us," or "our") operates the website braziliangrillpicanha.com and related online ordering services (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Service.

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

2. Information We Collect

2.1 Information You Provide

• Account information: name, email address, phone number, and password when you create an account.
• Order information: items ordered, special instructions, order type (dine-in, takeout, or delivery), and delivery address if applicable.
• Payment information: payment details are processed by our third-party payment processor and are not stored on our servers.
• Communications: information you provide when you contact us for support or feedback.

2.2 Information Collected Automatically

• Usage data: pages visited, features used, order history, and rewards activity.
• Device data: browser type, operating system, IP address, and general location derived from IP address.
• Cookies and similar technologies: we use essential cookies for authentication and session management. See Section 7 for details.

3. How We Use Your Information

We use the information we collect to:

• Process and fulfill your orders.
• Create and manage your account, including our loyalty rewards program.
• Communicate with you about orders, promotions, and service updates (you may opt out of promotional communications at any time).
• Improve and personalize the Service.
• Detect, prevent, and address fraud, abuse, or technical issues.
• Comply with legal obligations, including North Carolina and federal law.

4. How We Share Your Information

We do not sell your personal information. We may share your information only in the following circumstances:

• Service providers: with trusted third-party vendors who assist us in operating the Service (e.g., cloud hosting via Amazon Web Services, payment processing, authentication via AWS Cognito). These providers are contractually obligated to protect your data.
• Legal requirements: when required by law, subpoena, court order, or government request, including under North Carolina General Statutes.
• Business transfers: in connection with a merger, acquisition, or sale of assets, in which case your information may be transferred to the successor entity.
• With your consent: in any other circumstances where you have given explicit consent.

5. Data Security

We implement commercially reasonable administrative, technical, and physical safeguards to protect your personal information, including:

• Encryption of data in transit (TLS/HTTPS).
• Encryption of data at rest in our databases.
• Secure authentication through AWS Cognito with support for multi-factor authentication.
• Access controls limiting employee access to personal data.

No method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. We may retain certain information as required by law or for legitimate business purposes (e.g., tax records, dispute resolution). You may request deletion of your account by contacting us at the information below.

7. Cookies and Tracking Technologies

We use essential cookies for authentication, session management, and cart functionality. We do not use third-party advertising or tracking cookies. You may disable cookies through your browser settings, but some features of the Service may not function properly without them.

8. Your Rights

Under North Carolina law and applicable federal regulations, you have the right to:

• Access the personal information we hold about you.
• Correct inaccurate information in your account settings.
• Delete your account and associated personal data, subject to legal retention requirements.
• Opt out of promotional emails by using the unsubscribe link in any marketing communication.

To exercise these rights, contact us using the information in Section 11. We will respond within a reasonable timeframe.

9. Children's Privacy

The Service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected such information, we will take steps to delete it promptly. If you believe a child under 13 has provided us with personal information, please contact us.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last Updated" date. Your continued use of the Service after changes constitutes acceptance of the revised policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

12. North Carolina–Specific Disclosures

In accordance with the North Carolina Identity Theft Protection Act (N.C. Gen. Stat. § 75-60 et seq.), we implement reasonable security procedures to protect personal information that could be used for identity theft. In the event of a data breach involving your personal information, we will notify you and the North Carolina Attorney General's office as required by N.C. Gen. Stat. § 75-65.