Privacy Policy

Our Privacy Statement and Accessibility Policy

Table of Contents
1. Introduction
2. Information We Collect
3. Sources of Data Collection
4. How We Use Your Information
5. Cookies and Tracking Technologies
6. Third-Party Data Sharing and Trackers
7. Mobile App Permissions and Device Access
8. Kiosks, POS, and In-Store Technologies
9. Third-Party Fulfillment and Platform Partners
10. Consent and User Controls
11. California Invasion of Privacy Act (CIPA) Disclosures
12. Accessibility Statement (Unruh Civil Rights Act)
13. Your California Privacy Rights (CPRA)
14. Data Security and Retention
15. Contact Information

1. Introduction
This Privacy Policy explains how we collect, use, and share your personal information through our websites, mobile applications, in-store kiosks, and other digital services. We are committed to protecting your privacy and complying with all applicable data privacy laws, including the California Invasion of Privacy Act (CIPA), the California Consumer Privacy Act (CCPA/CPRA), and the Unruh Civil Rights Act.

2. Information We Collect
We may collect the following types of information:
- Personal identifiers (e.g., name, email address, phone number)
- Device identifiers (e.g., IP address, browser type, operating system)
- Order and transaction data
- Geolocation data (if permitted)
- Behavior and interaction data (e.g., clicks, navigation paths, form inputs)
- Payment details (via third-party processors only)
- Loyalty and marketing preferences

3. Sources of Data Collection
We collect data from:
- Direct interactions with our website, mobile app, or kiosks
- Third-party service providers (e.g., OLO, Aloha, DoorDash)
- Automated tracking technologies (e.g., cookies, beacons, pixels)
- Your device and browser
- Customer service interactions

4. How We Use Your Information
We use your information to:
- Provide our services and fulfill orders
- Operate mobile apps and kiosks
- Personalize your experience
- Improve performance, analytics, and functionality
- Communicate promotions or loyalty offers (if opted-in)
- Comply with legal obligations

5. Cookies and Tracking Technologies
We and our partners use cookies, pixel trackers, web beacons, session recording tools, and analytics software. These technologies only activate after you provide affirmative consent via our cookie banner. You can manage your preferences or opt-out at any time. See our Cookie Policy for more details.

6. Third-Party Data Sharing and Trackers
We share data with third-party advertising, analytics, and service partners only after you consent. These include:
- Google Analytics (analytics.google.com)
- Meta Pixel (connect.facebook.net)
- AppNexus (ib.adnxs.com)
- PubMatic (image2.pubmatic.com)
- Magnite (pixel.rubiconproject.com)

7. Mobile App Permissions and Device Access
Our mobile apps may request access to:
- Device location (for order pickup or delivery)
- Camera (e.g., for QR scanning or receipts)
- Push notifications (with your opt-in)
You can manage these permissions in your device settings.

8. Kiosks, POS, and In-Store Technologies
Our in-store technologies, including ordering kiosks and POS systems, collect information such as device interaction logs, order history, and location-based service usage. This data helps us process your transaction and improve service efficiency.

9. Third-Party Fulfillment and Platform Partners
We work with partners like Aloha, OLO, and DoorDash to fulfill online and mobile orders. These partners may receive information necessary to complete your transaction, such as your name, order details, delivery address, and contact info. They process this data according to their own privacy policies.

10. Consent and User Controls
We use a consent management platform to control your preferences. Upon first visit, you will be presented with the option to:
- Allow all cookies and trackers
- Manage settings
- Decline all non-essential tracking
We respect your settings and do not initiate tracking without opt-in consent.

11. California Invasion of Privacy Act (CIPA) Disclosures
California law prohibits certain forms of electronic communications interception. Technologies such as session replay, pixel tracking, and web beacons may be interpreted as “pen registers” or “trap and trace devices” under CIPA §§631, 638.5. To comply:
- We do not activate these technologies until consent is received
- We clearly disclose their use in this policy
- You may manage your settings at any time

12. Accessibility Statement (Unruh Civil Rights Act)
We are actively working toward WCAG 2.1 AA compliance across our website, mobile app, and digital ordering kiosks. We support screen reader technology and encourage users with accessibility needs to contact us at marketing@burgerlounge.com for assistance or feedback. We do not discriminate based on disability under the California Unruh Civil Rights Act.

13. Your California Privacy Rights (CPRA)
As a California resident, you have the right to:
- Know what data we collect and share
- Access, delete, or correct your personal data
- Opt-out of the sale or sharing of personal data
- Limit the use of sensitive personal data
To exercise your rights, contact us at marketing@burgerlounge.com

14. Data Security and Retention
We use commercially reasonable measures to protect your information. Data is retained only as long as needed to fulfill services, comply with legal obligations, or resolve disputes.

15. Contact Information
If you have questions or wish to exercise your privacy rights, contact us at:
Burger Lounge of America, LLC.
Contact us by using the contact form below, or visit our Contact Page.