PRIVACY POLICY

Introduction

CiCi Enterprises, LP (“Cicis” or “we”) provides you with access to our “Website” (www.cicis.com), mobile application (the “App”), and in-restaurant technologies to facilitate access to services we may offer (together with the Website and App, the “Services”). We are committed to respecting the privacy of information and data of the users of our Services.

This Privacy Policy describes our policies and practices with respect to the collection and use of information about you. This Privacy Policy does not apply to data where your identity has been removed so that we can no longer identify you (de-identified data), which we may use for any purpose.

Depending on your activities when using or accessing our Services, you may be required to agree to additional terms and conditions. This Privacy Policy applies regardless of whether you use our Services via a computer, mobile device, or other platform (collectively, your “Equipment”).

Our Services are performed in the United States and directed at individuals in the United States. If you are located outside the United States, you should not access or use our Services and should not share information with us. If you are located outside of the United States and believe you have shared your personal information with us, please inform us as soon as possible so we may return and/or destroy any such information we may have in our possession.

If you do not agree to the terms set forth herein, please do not use our Services. We reserve the right to update this Privacy Policy at any time, and the revision date above provides you with notice that the Privacy Policy has been updated. If you continue to use our Services after this Privacy Policy has been revised, such use will constitute your acceptance of our Privacy Policy.

Information We May Collect and How We May Collect It

We may collect information from and about users of our Services, including:

Personal Identification Data includes your first name and last name, billing address, email address, phone number, or similar identifiers.

Profile Information includes your username and password, purchases or orders made by you, your interests, preferences, reviews, and survey responses.

Financial Information includes payment card details as collected by us or our third party payment processor when you make a purchase.

Transaction Information includes details about payments to and from you and other details of products and Services you have purchased from us.

Communication Data includes your discussions with our customer support, communications you send us, and feedback that you communicate to us via email, social media, or other communications.

Internet, other Electronic Network, or Technical Information includes information about your Equipment, including hardware information, operating system, platform information, browser type, language information, and browser plugin types.

Usage Data includes information about how you interact with and use our Services.

Geolocation Data includes imprecise information about your location while using our App, when you place an order online, or when you search for our restaurant locations.

Please note that we have collected the above categories of personal information in the twelve (12) months preceding the effective date of this Privacy Policy.

We may collect this information:

Directly from you when you provide it to us.

Automatically as you navigate through the Website or App or when you use our in-restaurant digital channels or technologies. Information collected automatically may include usage details, IP addresses, and information collected through cookies, web beacons, and other tracking technologies.

From third parties, for example, our business partners or information from social networking sites such as Facebook, YouTube, Twitter, Instagram and TikTok.

Via automatic data collection technologies to distinguish you from other users. Such technologies also allow us to improve our Services by enabling us to:

- Estimate our audience size and usage patterns.

- Store your preferences, so we may customize our Services according to your individual interests.

- Track items you put into your shopping cart including when you have abandoned your cart.

- Recognize you when you return to our Services.

We also may use these technologies to collect information about your online activities over time and across third-party websites or other online services. For more information, see Interest-Based Advertising.

The technologies we use for this automatic data collection may include:

Cookies (or browser cookies). A cookie is a small file placed on the hard drive of your computer. The www.cicis.com website uses cookies to help keep track of items you put into your shopping cart including when you have abandoned your cart and this information is used to determine when to send cart reminder messages via SMS. For information about managing browser settings to refuse cookies, see Your Rights and Choices.

Flash Cookies. Certain features of our Website may use Flash cookies (local stored objects) instead of browser cookies to collect and store information about your preferences and navigation to, from, and on the Website. For information about managing Flash cookies, see Your Rights and Choices.

Web Beacons, Pixel Tags, Clear Gifs. Our Website pages and emails may contain small transparent embedded images or objects known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit us, for example, to count website page visitors or email readers, or to compile other similar statistics such as recording Services content popularity or verifying system and server integrity. For information about managing web beacons, see Your Rights and Choices.

Some of the information we collect about you may be personal information that can be used to identify you including, for example, your name, email address, mailing address, or delivery address. In some jurisdictions, certain unique identifiers like IP addresses and other usage or technical information may be considered personal information. As noted, personal information does not include data where your identity has been removed so that we can no longer identify you (de-identified data), which we may use for any purpose.

We may also collect, use, and share aggregated data such as statistical or demographic data for any purpose (“Aggregated Data”). However, if we combine or connect Aggregated Data with your personal information so that it can directly or indirectly identify you, we treat the combined data as personal information which will be used in accordance with this Privacy Policy.

How We May Use Information

Information may be used by us for the purpose it was collected, such as responding to your inquiry or request for our Services. In some cases, information is required to perform certain functions and Services. We may use information for the following business purposes:

Provide you with our Services;

Send you newsletters or special offers you sign up for;

Inform you of new features, functionality, services, products, and other promotions, if you agree to such notifications;

Respond to questions or comments from you;

Provide customer support;

Plan and manage our contractual relationships with our vendors;

Detect, prevent, and address technical and security issues;

Complete internal analysis of information enabling us to monitor the usage of our Services;

Improve our Services;

Address legal issues, including (i) complying with our obligations to retain certain business records; (ii) establishing, exercising, or defending legal claims; (iii) complying with laws, regulations, court orders, or other legal processes; (iv) detecting and preventing fraud or intellectual property infringement claims, violations of our contracts or agreements, violations of law, or other misuses of our Services; and (v) protecting our rights or property, or yours or others’ health, safety, welfare, rights, or property; and

Allow you to exercise your data privacy rights.

In addition, we may use information for the following reasons:

To carry out our obligations and enforce our rights.

In any other way we may describe when you provide the information.

For any other purpose with your express consent.

Disclosure of Your Information

We may disclose information to the following third parties and for the following business purposes:

To our corporate affiliates.

To contractors, service providers, and other third parties we use to support our business.

To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Cicis’ assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by Cicis about the users of our Services is among the assets transferred.

To third parties to market their products or services to you if you have not opted out of these disclosures.

To fulfill the purpose for which you provide it.

To perform our purposes for processing it (see How We May Use Information).

To regulatory or law enforcement entities if we have a good faith belief that disclosure is necessary to comply with any applicable law or legal process, to comply with any court order, to prevent fraud or imminent harm, to ensure the security of the Services, and to protect our rights.

For any other purpose disclosed by us when you provide the information.

With your consent.

The above excludes text messaging originator opt-in data and consent; this information will not be shared with any third parties.

Please note that we have disclosed personal information to the above categories of third parties in the twelve (12) months preceding the effective date of this Privacy Policy.

Third Party Links

Our Services may include content, links, or applications served by third parties, content providers, and application providers we do not control and whose privacy policies may differ from this Privacy Policy. If you submit personal information to any of those sites, such information is subject to third party privacy statements. We strongly encourage you to carefully read the privacy statement of any website you visit.

Security

We use industry-standard encryption technologies when transferring and receiving consumer data exchanged with our Services. However, the Internet environment is not 100% secure, and we cannot guarantee that information we collect will never be accessed in an unauthorized way. It is your responsibility to protect your login information used in connection with the Services, and you should not share your password.

Retention

We will retain your personal information for as long as reasonably necessary for the purpose(s) for which it was collected and in accordance with applicable law. The retention periods for each category of personal information we collect, including any sensitive information, vary depending on applicable laws, your request for deletion, and our relationship with you. For example, we may need to retain your personal information to comply with our legal or reporting obligations in accordance with applicable laws, to defend against claims, or for internal auditing purposes. Our retention periods are determined by balancing the following criteria:

The volume, nature, and sensitivity of your information;

The potential risk of unauthorized access, use or disclosure, or misappropriation of your information;

The purposes for which we process your personal information; and

The retention obligations under applicable legal requirements.

Your Rights and Choices

Depending on in which state you reside, you may have the following rights related to your personal information:

the right to know what personal information we process about you;

the right to request certain personal information that we process about you be deleted;

the right to request we correct personal information we have about you which you believe is incorrect;

the right to have certain personal information we process about you returned to you in an accessible and useable format upon your request, if such request is technically feasible;

the right to opt-out of having your personal information processed in such a way that enables us to create a profile about you or use it for targeted advertising purposes;

the right to have your sensitive personal information processed only by us if you consent to such processing;

the right to not have your personal information processed by a technology that produces an automatic decision which results in a legal or similarly significant effect (in which we do not engage);

The right to opt-out of the sale of your personal information; and

The right to opt-out of any profiling in furtherance of decisions that produce legal or similarly significant effects (in which we do not engage).

Additionally, Nevada provides its residents with a limited right to opt-out of certain personal information sales. Nevada residents who wish to exercise this opt-out right may submit a request by email at [email protected] or by phone at 828-394-6336. However, we do not currently sell data governed by Nevada’s opt-out requirements.

How We Verify Your Identity

We may require that your identity be verified prior to processing a verifiable data rights request (a request to know what information we have about you, a request to correct incorrect information we have about you, a request to delete your information, or a request to receive the information we have about you). We may verify your identity by comparing the information we have about you against the information we receive when you submit your request. If we do not have enough information to verify your identity, we may request additional information from you, consistent with applicable law. We may deny a verifiable rights request if we are unable to verify your identity.

Authorized Agents

Some states permit you to designate an authorized agent to submit requests to exercise certain privacy rights on your behalf. Even if you use an authorized agent to submit a request on your behalf, pursuant to applicable law, we may still require that you verify your identity depending on the nature of the request and sensitivity of the information at issue.

If you are an authorized agent submitting a request on behalf of an individual, you must include a copy of the written, signed permission indicating that you are permitted to act on that person’s behalf.

HOW TO APPEAL A DENIED REQUEST TO EXERCISE STATE PRIVACY RIGHTS

In some circumstances, we may deny your request to exercise one or more of the rights described above. If you disagree with our decision to deny your request or any portion of our request, you have the right to appeal our decision within 60 days of receipt of notice that your request has been denied. If you submit an appeal to a denied request more than 60 days after you have been notified of our decision to deny the request, we may deny your appeal. If you submit an appeal, we will respond within forty-five (45) days of our receipt of your appeal.

If you wish to appeal a decision, please clearly and plainly describe your basis of disagreement with our decision by responding through the same means by which we communicated our decision or by submitting your appeal using the information provided under the Contact Information section below. We will review your appeal and either amend or uphold our decision. In either case, we will provide a written explanation of the reason for the decision. This decision will be final.

We also have mechanisms in place to provide you with the following control over your information:

Accessing, Updating, and Deleting Your Information. You may contact us as set forth in the Contact Information section below to request access to, correction of, or deletion of personal information that you have provided to us, consistent with your rights as described above. Depending on your request, we may not accommodate your request to change information if we believe the change would violate any law or legal requirement or negatively affect the information’s accuracy.

Cookies and Automatic Data Collection Technologies. You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. However, if you disable or refuse cookies, please note that some parts of these websites may become inaccessible or not function properly.

Opt-Out Preference Signals. Opt-out preference signals or Global Privacy Controls (GPCs) provide consumers with a simple and easy-to-use method by which consumers interacting with us online can automatically exercise their opt-out of sale/sharing rights. We will process any opt-out preference signals that meet the following requirements: (1) the signal is in a format commonly used and recognized by businesses, such as an HTTP header field or JavaScript object; and (2) the platform, technology, or mechanism that sends the signal indicates that the use of the signal is meant to have the effect of opting you out of the sale and sharing of your personal information.

Email and SMS Communications. You may opt-out of receiving our e-mails/newsletters by using the options included in the communication we send you (e.g., using the “Unsubscribe” feature provided in the footer of our emails) or by contacting us as set forth in the Contact Information section. You may also elect to receive text messages from us. By opting into any of our text message programs, you acknowledge and agree you are expressly consenting to receiving automated mobile text (e.g., SMS and/or MMS or successor protocols or technologies) messages/alerts (collectively, “Text Messages”) that may be sent using automated technology, including through an automatic telephone dialing system or auto dialer. You “opt in” whenever you voluntarily provide us your mobile number via our Services or properties or otherwise for either or both of the following purposes: (a) Transactional: to receive non-marketing communications, including information about an order you have placed or about your membership or account with us; and/or (b) Marketing: to receive marketing communications, including information regarding promotions, Services, offers, advertising, events, other marketing related activities related to or associated with our products or services (as well as our partners). You may opt out of receiving Text Messages at any time by texting “STOP” to our Text Messages.

Location Information. As noted, when you use our Services, we may automatically collect certain Equipment (mobile device) specific information. This includes the general location of your Equipment through GPS, Bluetooth, or WiFi signals. Before we collect or send location information, it is our practice to ask for your consent. In some instances, your operating system may not allow you to install an App without giving us consent. In all instances, you may withdraw your consent by disabling location features for your Equipment.

Interest-Based Adverting

We do not control third parties’ collection or use of your information to serve interest-based advertising. However, these third parties may provide you with ways to choose not to have your information collected or used in this way. You can block the collection and use of information related to you by advertising companies for the purpose of serving interest-based advertising by visiting the following platforms of self-regulatory programs of which those companies are members:

The NAI’s opt-out platform is available here.

The DAA’s opt-out platform is available here.

Children Under the Age of 18

Our Services are not intended for children under 18 years of age. We will not knowingly solicit or collect personal information from children under 18, or the relevant minimum age under applicable local legal requirements, except as permitted under applicable law. If we learn that we have received information directly from a child under 18 without his or her parent’s or legal guardian’s consent, we will make commercially reasonable efforts to delete such information.

Notice of Financial Incentives

In connection with the Program described in the Terms of Use, we may offer financial incentives and/or price or service differences (“Incentives”) to participants in exchange for our use of your personal information. To offer these Incentives, we must collect the personal information you provide when you sign up or engage in activities in connection with the Program, such as your email address, referral activity, purchase history, and engagement with Cicis (“Cicis Rewards Data”) so that we can follow your participation in and your engagement with the Program, as described in this Privacy Policy and the Terms of Use. The value of Cicis Rewards Data is calculated by determining the approximate additional spending per Participant, per year compared to individuals who have not participated in Program. The value of Cicis Rewards Data is reasonably related to the costs associated with offering the Incentives. You can withdraw from or cancel your enrollment in the Program at any time by contacting us at the Contact Information below or exercising any cancellation option we make available in your Rewards Account. We do not assign a monetary value to the other data that we collect and strive to only use that information to further our business in accordance with our Privacy Policy, and to the extent there is any value, it is reasonably related to the applicable Incentives.

Changes to Our Privacy Policy

Changes to this Privacy Policy will be posted on this site, including information on any material changes. Cicis reserves the right to update or modify this Privacy Policy at any time and without prior notice.

Contact Information

To ask questions or comment about this privacy policy and our privacy practices, contact us at:

By mail:
13355 Noel Road
Suite 1645
Dallas, TX 75240
By email: [email protected]
By phone: 828-394-6336