Privacy Policy

This Privacy Policy describes how 4 Rivers ("we," "us," or "our") collects, uses, discloses, and protects your personal information when you visit our website at 4-rivers.rest, use our online ordering or reservation services, or otherwise interact with us in connection with our food and restaurant services. Please read this policy carefully. By using our website or services, you agree to the practices described in this Privacy Policy.

We are committed to protecting your privacy and handling your personal data in a transparent, fair, and lawful manner consistent with applicable United States federal and state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), and other applicable consumer protection regulations.

1. Who We Are

4 Rivers is a food and restaurant business operating in the United States. We operate the website located at 4-rivers.rest and provide food-related products and services to our customers. Your privacy is a top priority for us, and we have implemented this policy to ensure your personal information is handled responsibly.

1.1 Contact Information

2. Information We Collect

We collect various types of information in connection with your use of our website and services. This information falls into several categories:

2.1 Personal Information You Provide to Us

When you interact with 4 Rivers — whether by placing an order, making a reservation, subscribing to our newsletter, contacting us, or creating an account — you may provide us with the following personal information:

• Identity Information: Your full name, username, or similar identifier.
• Contact Information: Your email address, telephone number, and billing or delivery address.
• Financial Information: Payment card details, billing information, and transaction history. Note: We do not store full payment card numbers; payment processing is handled by secure third-party processors.
• Order and Transaction Information: Details of food orders you place, including items selected, special dietary requests, order history, and purchase amounts.
• Reservation Details: Date, time, party size, special occasion notes, and seating preferences when you book a table.
• Account Credentials: Username and password if you create an account on our website.
• Communications: Records of your correspondence with us, including emails, chat messages, and feedback forms.
• Marketing Preferences: Your opt-in or opt-out choices for promotional communications and marketing campaigns.
• Dietary and Allergen Information: Any dietary restrictions, allergies, or food preferences you choose to share with us to improve your dining experience.

2.2 Information Collected Automatically

When you visit our website at 4-rivers.rest, we automatically collect certain technical and usage data through cookies, web beacons, pixel tags, and similar tracking technologies:

• Device Information: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage Data: Pages visited, links clicked, time spent on each page, referring URLs, search queries entered on our site, and clickstream data.
• Location Data: General geographic location inferred from your IP address (city/region level). We do not collect precise GPS location without your explicit consent.
• Session Data: Login timestamps, session duration, and activity logs.
• Cookie Data: Information stored in cookies and similar technologies as described in Section 8 of this policy.

2.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Social Media Platforms: If you connect your social media account to our services or log in through a social media provider (e.g., Facebook, Google), we may receive basic profile information such as your name and email address as permitted by your social media privacy settings.
• Online Review Platforms: Publicly available reviews and feedback you post about 4 Rivers on platforms such as Yelp, Google, or TripAdvisor.
• Analytics Providers: Aggregated and anonymized data from analytics partners to help us understand how our website is used.
• Advertising Partners: Information from advertising networks to help us serve relevant promotions and measure campaign effectiveness.
• Delivery Service Partners: If you order through a third-party food delivery platform, we may receive information necessary to fulfill your order.

2.4 Sensitive Personal Information

In limited circumstances, we may collect sensitive personal information such as dietary restrictions related to religious practices or health conditions, or allergen information. We collect such information only when you voluntarily provide it for the purpose of delivering a safe and personalized dining experience. We do not use sensitive personal information for purposes beyond what is necessary to fulfill your service request.

3. How We Use Your Information

We use the personal information we collect for the following purposes:

3.1 Providing and Managing Our Services

• Processing your food orders, including preparation, packaging, and delivery or pickup arrangements.
• Managing table reservations, waitlists, and special event bookings.
• Creating and maintaining your account on our website.
• Processing payments and issuing receipts and invoices.
• Accommodating special dietary needs, allergen requests, and personalized preferences.
• Providing customer support and responding to your inquiries, complaints, or feedback.

3.2 Business Operations and Improvement

• Analyzing usage patterns to improve our website, menu offerings, and overall service quality.
• Conducting internal research and analytics to understand customer preferences and trends.
• Testing new website features, menu items, and promotional strategies.
• Monitoring and maintaining the security, integrity, and performance of our systems.
• Training our staff to deliver better customer experiences.

3.3 Marketing and Communications

• Sending you promotional emails, newsletters, and special offers about 4 Rivers if you have opted in to receive such communications.
• Informing you about seasonal menus, new dishes, upcoming events, and loyalty program updates.
• Displaying targeted advertisements through third-party advertising networks based on your interests and browsing activity.
• Conducting surveys and soliciting your feedback to improve our products and services.

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any marketing email we send or by contacting us directly at [email protected].

3.4 Legal Compliance and Protection

• Complying with applicable federal and state laws, regulations, and legal processes.
• Responding to lawful requests from government authorities, courts, or law enforcement agencies.
• Enforcing our Terms of Service and other agreements.
• Protecting the rights, property, and safety of 4 Rivers, our customers, and the public.
• Detecting, investigating, and preventing fraudulent transactions and other illegal or unauthorized activities.

3.5 Legal Basis for Processing

Under applicable United States law, including the FTC Act and CCPA/CPRA where applicable, we process your personal information based on the following grounds:

• Contractual Necessity: Processing required to fulfill your order, reservation, or service request.
• Legitimate Business Interests: Processing for analytics, fraud prevention, and website improvement that does not override your privacy rights.
• Legal Obligation: Processing required to comply with applicable law.
• Consent: Processing for marketing communications and non-essential cookies, where you have given your explicit consent. You may withdraw your consent at any time.

4. Sharing Your Information with Third Parties

We do not sell your personal information. However, we may share your information with trusted third parties in the following circumstances:

4.1 Service Providers

We engage third-party vendors and service providers who perform services on our behalf. These providers are contractually obligated to protect your information and may only use it for the specific purpose for which it was shared. Our service providers include:

• Payment Processors: Companies such as Stripe, Square, or PayPal that securely process your payment card transactions.
• Delivery Partners: Third-party food delivery services that help us fulfill delivery orders.
• Website Hosting and Technology Providers: Cloud hosting, content delivery networks, and IT service providers that support our website infrastructure.
• Email and Marketing Platforms: Email service providers such as Mailchimp or similar platforms used to send newsletters and promotional communications.
• Analytics Providers: Companies such as Google Analytics that help us understand website traffic and user behavior.
• Customer Support Tools: Platforms used to manage customer inquiries and support tickets.
• Online Reservation Systems: Third-party reservation management platforms used to handle table bookings.

4.2 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal information may be transferred to the acquiring or successor entity as part of the business transaction. We will notify you via email or a prominent notice on our website if such a transfer occurs and if your information will be subject to a materially different privacy policy.

4.3 Legal Requirements and Law Enforcement

We may disclose your information when required to do so by law, court order, or governmental authority, or when we believe in good faith that such disclosure is necessary to:

• Comply with a legal obligation or judicial process.
• Protect and defend the rights or property of 4 Rivers.
• Prevent or investigate possible wrongdoing in connection with our services.
• Protect the personal safety of users of our services or the public.

4.4 Advertising and Analytics Partners

We may share aggregated, anonymized, or pseudonymized data with advertising and analytics partners for the purpose of improving our marketing efforts and understanding our audience. This data does not identify you individually.

4.5 Social Media Platforms

If you engage with our content on social media or use social login features on our website, certain information may be shared with those social media platforms as governed by their own privacy policies. We encourage you to review the privacy policies of any social media platforms you use.

5. Data Security

We take the security of your personal information seriously and implement a range of technical, administrative, and physical safeguards to protect it from unauthorized access, disclosure, alteration, or destruction. Our security measures include:

5.1 Technical Safeguards

• Encryption: All data transmitted between your browser and our website is encrypted using industry-standard Transport Layer Security (TLS) technology. Sensitive data stored in our systems is encrypted at rest.
• Secure Payment Processing: We use PCI DSS-compliant payment processors. We do not store full credit card numbers on our servers.
• Access Controls: Access to your personal information is restricted to authorized personnel who need it to perform their job functions.
• Firewalls and Intrusion Detection: We use firewalls, intrusion detection systems, and other network security tools to protect our infrastructure.
• Regular Security Audits: We conduct periodic security assessments and vulnerability scans to identify and address potential risks.

5.2 Administrative and Physical Safeguards

• Employee privacy and security training programs.
• Confidentiality agreements for employees and contractors who handle personal data.
• Physical access controls at our business facilities.
• Data breach response procedures, including timely notification to affected individuals as required by applicable law.

6. Your Privacy Rights

Depending on your state of residence, you may have certain rights regarding your personal information under applicable United States privacy laws, including the CCPA/CPRA for California residents. We honor these rights for all our customers to the extent practicable.

6.1 Right to Know and Access

You have the right to request that we disclose to you the categories and specific pieces of personal information we have collected about you, the categories of sources from which we collected your information, the business or commercial purpose for collecting your information, and the categories of third parties with whom we share your information.

6.2 Right to Correction

You have the right to request that we correct inaccurate personal information we maintain about you, taking into account the nature of the information and the purposes for which it is processed.

6.3 Right to Deletion

You have the right to request that we delete your personal information, subject to certain exceptions, including when the information is necessary to complete a transaction, detect security incidents, comply with a legal obligation, or exercise free speech rights.

6.4 Right to Opt Out of Sale or Sharing

Under the CCPA/CPRA, California residents have the right to opt out of the sale or sharing of their personal information. We do not sell your personal information. However, if you believe your information is being shared in a way that constitutes a "sale" under California law, you may submit a request to opt out by contacting us at [email protected].

6.5 Right to Limit Use of Sensitive Personal Information

California residents have the right to limit our use of sensitive personal information (such as dietary or allergen data) to that which is necessary to perform the services you requested. To exercise this right, please contact us at [email protected].

6.6 Right to Data Portability

Where technically feasible, you have the right to receive a copy of your personal information in a structured, commonly used, and machine-readable format so that it can be transferred to another service provider.

6.7 Right to Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights. We will not deny you goods or services, charge you different prices, or provide you with a lower quality of service because you exercised your rights under applicable privacy law.

6.8 How to Submit a Privacy Request

To exercise any of the rights described above, please contact us using one of the following methods:

• Email: [email protected]
• Website: 4-rivers.rest

We will verify your identity before processing your request. You may be asked to provide certain information to confirm your identity. We will respond to verified requests within 45 days as required under the CCPA/CPRA, with the possibility of a 45-day extension where reasonably necessary. We will process your request free of charge unless it is manifestly unfounded, excessive, or repetitive.

6.9 Authorized Agents

California residents may designate an authorized agent to submit a privacy request on their behalf. The authorized agent must provide written authorization signed by you, and we may require you to verify your identity directly with us before honoring the request.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, or reporting obligations. The criteria we use to determine retention periods include:

When personal information is no longer needed, we securely delete or anonymize it so it can no longer be associated with you. In certain cases, we may retain anonymized or aggregated data indefinitely for statistical and research purposes.

8. Cookies and Tracking Technologies

Our website at 4-rivers.rest uses cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and deliver personalized content and advertising.

8.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the website to function properly, including session management, shopping cart functionality, and security features. These cannot be disabled.
• Performance and Analytics Cookies: Help us understand how visitors interact with our website by collecting anonymous usage data.
• Functional Cookies: Remember your preferences such as language settings, saved menu items, and login status.
• Marketing and Advertising Cookies: Track your browsing habits to deliver targeted advertisements relevant to your interests.

8.2 Managing Your Cookie Preferences

You can manage your cookie preferences through your browser settings or our cookie consent tool available on our website. Please note that disabling certain cookies may affect the functionality of our website. For detailed information about the cookies we use and how to manage them, please refer to our Cookie Policy available on our website.

You may also opt out of interest-based advertising by visiting the Network Advertising Initiative opt-out page or the Digital Advertising Alliance opt-out page.

9. Children's Privacy

If you are under 18 years of age, you should not use our website or provide any personal information to us without the supervision and consent of a parent or legal guardian. If you are a parent or guardian and believe that your child under the age of 13 has provided us with personal information without your consent, please contact us immediately at [email protected], and we will take steps to delete such information from our systems as promptly as possible.

We do not knowingly direct marketing communications or personalized content at individuals under 18 years of age. If we become aware that we have inadvertently collected personal information from a minor, we will take immediate steps to delete that information and terminate any associated account.

10. International Data Transfers

4 Rivers is based in the United States, and your personal information is primarily processed and stored within the United States. However, some of our third-party service providers may be located in other countries, which means your personal information may be transferred to, stored in, or processed in countries outside of the United States.

When such transfers occur, we take steps to ensure that your personal information receives an adequate level of protection, including:

• Entering into data processing agreements with our service providers that include appropriate data protection safeguards.
• Selecting service providers located in countries that provide comparable data protection standards.
• Implementing contractual clauses that require our service providers to protect your information in accordance with applicable law.

By using our website and services, you acknowledge and consent to the transfer of your personal information to the United States and other countries as described in this Privacy Policy. If you have questions about international data transfers, please contact us at [email protected].

11. Third-Party Websites and Links

Our website may contain links to third-party websites, applications, or services, including social media platforms, food delivery apps, review platforms, and payment gateways. This Privacy Policy applies only to 4 Rivers and the website at 4-rivers.rest. We are not responsible for the privacy practices of third-party websites, and we encourage you to review their privacy policies before providing any personal information. The inclusion of a link to a third-party website does not constitute an endorsement of that website or its privacy practices.

12. Do Not Track Signals

Some web browsers transmit "Do Not Track" (DNT) signals to websites. Currently, there is no universally accepted standard for how websites should respond to DNT signals. As such, our website does not currently respond to DNT signals from browsers. We will update this policy if an industry standard for DNT responses is established. You may manage your privacy preferences through our cookie consent tool or browser settings as described in Section 8.

13. California Residents — Additional Rights Under CCPA/CPRA

If you are a resident of California, you have specific rights under the California Consumer Privacy Act of 2018 (CCPA) as amended by the California Privacy Rights Act of 2020 (CPRA), which became fully enforceable in 2023. In addition to the rights described in Section 6, California residents are entitled to the following disclosures:

13.1 Categories of Personal Information Collected

In the past 12 months, we have collected the following categories of personal information as defined by the CCPA:

• Identifiers (name, email address, IP address, phone number)
• Commercial information (purchase history, order details)
• Internet or other electronic network activity information (browsing history, cookies)
• Geolocation data (approximate location based on IP address)
• Inferences drawn from personal information to create a profile about consumer preferences
• Sensitive personal information (dietary restrictions and allergen data, only as voluntarily provided)

13.2 Business Purposes for Collection

We collect personal information for the business purposes described in Section 3 of this Privacy Policy, including providing food and restaurant services, processing payments, communicating with customers, and improving our services.

13.3 Shine the Light Law

California residents may also request information about our disclosures of personal information to third parties for their direct marketing purposes under California's "Shine the Light" law (California Civil Code Section 1798.83). To make such a request, please contact us at [email protected].

14. How to File a Complaint with a Data Protection Authority

If you believe we have not handled your personal information in accordance with applicable privacy law and your concerns have not been satisfactorily addressed by contacting us directly, you have the right to file a complaint with the relevant data protection or consumer protection authority.

14.1 For California Residents

California residents may file a complaint with the California Privacy Protection Agency (CPPA), which is responsible for enforcing the CCPA/CPRA:

• California Privacy Protection Agency
• Website: cppa.ca.gov
• Email: [email protected]

14.2 For All United States Residents

You may also file a complaint with the Federal Trade Commission (FTC), which enforces federal consumer protection and privacy laws under the FTC Act:

• Federal Trade Commission
• Website: reportfraud.ftc.gov
• Phone: 1-877-FTC-HELP (1-877-382-4357)

We encourage you to contact us first at [email protected] so we have the opportunity to address your concerns directly before you file a formal complaint.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, business operations, or applicable legal requirements. When we make material changes to this policy, we will:

• Post the updated Privacy Policy on our website at 4-rivers.rest with a revised "Last Updated" date.
• Send a notification email to registered users where required by law or where we deem it appropriate.
• Display a prominent notice on our website homepage for a period following the update.

Your continued use of our website and services after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this policy periodically to stay informed about how we protect your information.

16. Contact Us for Privacy Inquiries

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact our privacy team:

We are committed to resolving privacy inquiries promptly. You can expect an initial response within 5 business days and a full resolution within 45 days of receiving your request, consistent with applicable legal requirements.