STALLO FRIED CHICKEN PRIVACY POLICY

Effective Date: February 19, 2026
Last Updated: February 19, 2026


1. INTRODUCTION

Welcome to Stallo Fried Chicken (“Company,” “we,” “us,” “our,” or “App”). We are committed to protecting your privacy and ensuring you have a positive experience on our App. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application (the “App”).

Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our App. By accessing or using Stallo Fried Chicken, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.


2. INFORMATION WE COLLECT

2.1 Information You Provide Directly

Account Registration Information

  • Full name

  • Phone number (primary identifier for login)

  • Email address

  • Password (encrypted and securely stored)

  • Profile picture (optional)

Profile & Personal Details

  • Date of birth (optional)

  • Gender (optional)

  • Contact information and alternate phone numbers

  • Emergency contact details

Address Information

  • Home delivery addresses

  • Billing addresses

  • Saved location preferences

  • Coverage area verification information

Payment Information

  • Payment method details (credit/debit card, mobile wallet, bank transfer)

  • Billing address

  • Payment transaction history

  • Refund and chargeback data

Order Information

  • Product selections and menu items

  • Customization choices and addons

  • Special dietary requirements or allergies

  • Special notes and instructions

  • Order date, time, and type (delivery/pickup)

  • Delivery preferences and scheduling

Communication Data

  • Messages sent through the contact form

  • Feedback and complaints

  • Customer service inquiries

  • Chat histories with support team

  • Survey responses

Loyalty Program Information

  • Loyalty card enrollment details

  • Loyalty points balance and history

  • Discount codes used

  • Redemption history

  • Promotional preferences

2.2 Information We Collect Automatically

Device Information

  • Device type and model

  • Operating system and version

  • Unique device identifier (Device ID)

  • Mobile network information

  • Device settings and preferences

Location Information

  • GPS coordinates when you enable location services

  • Coverage area data for delivery verification

  • Branch location information relative to your position

  • Approximate location based on IP address

App Usage Information

  • Features you access and interact with

  • Products viewed and time spent on pages

  • Search queries and filters used

  • Click patterns and navigation behavior

  • App crashes and technical errors

  • App version and build information

Push Notification Data

  • Firebase Cloud Messaging (FCM) tokens

  • Device platform (iOS/Android)

  • App version

  • Last activity timestamps

  • Notification preferences and interaction

Authentication Data

  • Login timestamps and session information

  • API access tokens

  • Authentication device fingerprints

Analytics Data

  • Page views and visit duration

  • User engagement metrics

  • Performance data

  • Error logs and technical diagnostics

2.3 Information from Third Parties

  • Payment Processors: Payment confirmation data and transaction status

  • Delivery Partners: Delivery status updates and location tracking

  • Third-Party Services: Data from integrated services used for app functionality


3. HOW WE USE YOUR INFORMATION

We use the collected information for the following purposes:

3.1 Service Delivery

  • Processing and fulfilling your orders

  • Calculating order totals, taxes, and delivery charges

  • Coordinating delivery or pickup arrangements

  • Sending order confirmations and delivery updates

  • Providing customer support and resolving issues

3.2 Account Management

  • Creating and maintaining your account

  • Verifying your identity and authentication

  • Managing your profile and preferences

  • Processing password resets and security inquiries

  • Compliance with anti-fraud and security protocols

3.3 Payment Processing

  • Processing payments through secure payment gateways

  • Preventing fraudulent transactions

  • Issuing refunds and handling disputes

  • Maintaining financial records

  • Tax and regulatory compliance

3.4 Communication

  • Sending order status updates and notifications

  • Notifying you about delivery arrivals

  • Sending promotional offers and special deals (with your consent)

  • Responding to customer inquiries

  • Sending important updates about our App and services

  • Loyalty program notifications and rewards

3.5 Personalization & Marketing

  • Customizing your user experience

  • Recommending products based on your order history

  • Tailoring promotional content to your interests

  • Conducting targeted marketing campaigns

  • A/B testing and improving App features

3.6 Loyalty Program

  • Tracking and managing loyalty points

  • Processing discount code redemptions

  • Calculating loyalty rewards and benefits

  • Providing exclusive member offers

3.7 Analytics & Improvements

  • Analyzing user behavior and app usage patterns

  • Identifying technical issues and improving performance

  • Conducting market research

  • Optimizing App features and user interface

  • Generating anonymized statistical reports

3.8 Legal & Regulatory Compliance

  • Complying with applicable laws and regulations

  • Enforcing terms of service and other agreements

  • Protecting against fraud, security threats, and illegal activities

  • Responding to legal processes and government requests

  • Maintaining audit trails for regulatory purposes

3.9 Location Services

  • Mapping your position relative to our branches

  • Determining delivery eligibility and coverage areas

  • Optimizing delivery routing and coordination

  • Providing location-based offers and recommendations


4. LEGAL BASIS FOR PROCESSING

We process your personal data based on the following legal grounds:

  • Performance of Contract: Processing necessary to fulfill your orders and provide services

  • Consent: For marketing communications and promotional content

  • Legal Obligation: To comply with laws, regulations, and legal requests

  • Legitimate Interests: For fraud prevention, security, app improvements, and business operations

  • Vital Interests: To protect health and safety in emergency situations


5. DATA SHARING & DISCLOSURE

5.1 Service Providers
We share information with trusted third-party service providers who assist us:

  • Payment Processors: To process payments securely

  • Delivery Partners: To coordinate order delivery and logistics

  • Cloud Hosting Providers: To store and manage our servers

  • Email & SMS Services: To send notifications and communications

  • Analytics Providers: To understand app usage and improve services

  • Mapping Services: For location and delivery coordination

5.2 No Sale of Personal Data
We do not sell, trade, or rent your personal information to third parties for marketing purposes.

5.3 Legal Requirements
We may disclose your information when legally required:

  • To comply with court orders, subpoenas, or legal processes

  • To respond to government or law enforcement requests

  • To enforce our terms of service and other agreements

  • To protect our rights, privacy, safety, and property

  • To prevent fraud or address security threats

5.4 Business Transfers
In the event of merger, acquisition, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will provide notice of any such change.

5.5 Aggregated & Anonymized Data
We may share anonymized and aggregated data that cannot identify you personally with business partners, advertisers, and public organizations for research and marketing purposes.


6. DATA RETENTION

We retain your personal data for as long as necessary to provide our services and fulfill the purposes outlined in this policy:

  • Account Information: Retained while your account is active and for a reasonable period afterward

  • Order History: Retained for at least 5 years for financial, tax, and regulatory compliance

  • Payment Information: Retained according to payment processor requirements and financial regulations

  • Communications: Retained as long as necessary to resolve disputes or respond to inquiries

  • Marketing Data: Retained until you opt out or for a maximum period as per your country’s regulations

  • Location Data: Retained only during active delivery or as necessary for service optimization

  • FCM Tokens: Retained for the duration of app usage; deleted when you uninstall the app

  • Analytics Data: Aggregated and anonymized data may be retained indefinitely

You can request deletion of your account and associated data at any time (subject to legal retention requirements).


7. SECURITY MEASURES

We implement comprehensive security measures to protect your personal information:

7.1 Technical Security

  • Encryption: SSL/TLS encryption for data in transit

  • Password Security: Hashed and salted password storage

  • Secure APIs: Protected API endpoints with authentication tokens

  • Secure Payment Gateway: PCI-DSS compliant payment processing

  • Data Encryption: Encryption of sensitive data at rest

7.2 Operational Security

  • Access Controls: Role-based access restrictions for employees

  • Security Training: Regular security awareness training for staff

  • Audit Logs: Monitoring and logging of data access

  • Vulnerability Testing: Regular security assessments and penetration testing

  • Incident Response: Procedures for addressing security breaches

7.3 Physical Security

  • Secure Facilities: Protection of company servers and data centers

  • Device Security: Protection of devices used to access sensitive data

Note: While we implement strong security measures, no system is completely risk-free. Please protect your login credentials and notify us immediately of any unauthorized access.


8. YOUR PRIVACY RIGHTS & CHOICES

8.1 Access & Portability
You have the right to:

  • Access your personal data

  • Receive a copy of your data in a structured format

  • Understand how your data is being used

  • Request this information by contacting us

8.2 Correction & Deletion
You have the right to:

  • Correct inaccurate or incomplete information

  • Request deletion of your personal data (subject to legal retention requirements)

  • Have outdated information updated

  • Submit deletion requests through your account settings

8.3 Opt-Out & Preferences
You have the right to:

  • Opt out of promotional emails and SMS messages

  • Manage notification preferences within the app

  • Disable location services through device settings

  • Restrict data usage and personalization

8.4 Withdraw Consent
For data processing based on consent, you may:

  • Withdraw consent at any time

  • Manage consent preferences in account settings

  • Request processing limitations

8.5 Do Not Track
Some browsers include a “Do Not Track” feature. Currently, our App does not respond to Do Not Track signals, but you can manage tracking preferences through your device settings.

8.6 Your Rights by Jurisdiction

For Users in the European Union (GDPR)

  • Right of access to your personal data

  • Right to rectification of inaccurate data

  • Right to erasure (“right to be forgotten”)

  • Right to restrict or object to processing

  • Right to data portability

  • Right to lodge complaints with supervisory authorities

  • Right to human review of automated decisions

For Users in California (CCPA)

  • Right to know what data is collected

  • Right to know whether data is sold or disclosed

  • Right to delete personal data (with exceptions)

  • Right to opt-out of the sale of personal data

  • Right to non-discrimination for exercising privacy rights

For Users in Bangladesh

  • Right to access your personal data

  • Right to correct and update information

  • Right to request deletion

  • Right to be informed about data collection and usage

  • Right to lodge complaints with data protection authorities


9. CHILDREN’S PRIVACY

The Stallo Fried Chicken App is not intended for individuals under 18 years of age. We do not knowingly collect personal information from minors. If we become aware that we have collected information from a minor, we will take steps to delete such information and terminate the minor’s account.

Parents or guardians who believe their child has provided information to us should contact us immediately at the address provided in Section 14.


10. THIRD-PARTY LINKS & SERVICES

Our App may contain links to third-party websites, apps, and services that are not operated by us. This Privacy Policy does not apply to third-party services, and we are not responsible for their privacy practices.

Before using third-party services, please review their privacy policies. We encourage you to read the privacy statements of any external sites and services before providing your information.


11. INTERNATIONAL DATA TRANSFERS

The Stallo Fried Chicken App is based in Bangladesh. If you access our App from outside Bangladesh, your information will be transferred to, stored in, and processed in Bangladesh and other countries where we or our service providers operate.

These countries may have different data protection laws than your country of residence. By using our App, you consent to the transfer of your information to countries outside your country of residence, which may provide different levels of data protection.

We implement appropriate safeguards such as Standard Contractual Clauses for international data transfers.


12. COOKIES & TRACKING TECHNOLOGIES

12.1 Types of Tracking Technologies

Session Cookies

  • Used to maintain your session during app usage

  • Deleted when you close the app

  • Essential for app functionality

Persistent Cookies

  • Store preferences and login information

  • Remain until expiration or manual deletion

  • Improve user experience

Analytics Trackers

  • Monitor app usage and user behavior

  • Measure feature effectiveness

  • Help identify technical issues

Advertising Trackers

  • Used for targeted promotional content

  • Help us understand effectiveness of marketing

12.2 Managing Cookies & Tracking
You can manage tracking preferences through:

  • App settings and privacy controls

  • Device-level cookie and tracking restrictions

  • Disabling analytics collection

  • Opting out of promotional communications


13. POLICY UPDATES & CHANGES

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

What We’ll Do Upon Changes:

  • Update the “Last Updated” date at the top of this policy

  • Notify you of material changes via in-app notification or email

  • Request your consent for significant privacy practice changes

  • Maintain the most current version on our website

Your continued use of the App after changes constitute your acceptance of the updated Privacy Policy. We encourage you to review this policy regularly to stay informed about how we protect your information.


14. CONTACT US & DATA SUBJECT REQUESTS

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

Stallo Fried Chicken
Email: privacy@stallofriedchicken.com
Phone: [Your Support Phone Number]
Mailing Address: [Your Business Address], Bangladesh

14.1 Data Subject Access Requests

To exercise your privacy rights (access, correction, deletion, portability), please send a request to our email address above with:

  • Your name and account information

  • Specific right you wish to exercise

  • Detailed description of your request

  • Proof of identity for verification

We will respond to all requests within 30 days. Please note that some requests may require additional information for verification purposes.

14.2 Grievance Redressal

If you are unsatisfied with our response to your privacy concern, you may:

  • Request escalation to our Data Protection Officer

  • File a complaint with your country’s data protection authority

  • Pursue legal remedies as available in your jurisdiction


15. REGULATORY COMPLIANCE

15.1 Bangladesh Context

As a Bangladesh-based service, we comply with:

  • Bangladesh Data Protection Act, 2018 (proposed)

  • Bangladesh Telecommunications Regulations

  • Bangladesh Consumer Protection Laws

  • Bangladesh Payment Systems Act

  • Relevant Bangladesh Bank directives on digital payment security

15.2 International Compliance

We also comply with:

  • GDPR (EU General Data Protection Regulation) for EU users

  • CCPA (California Consumer Privacy Act) for California residents

  • Other applicable international privacy laws

15.3 Payment Security

Our payment processing complies with:

  • PCI-DSS (Payment Card Industry Data Security Standard)

  • Bangladesh Bank’s Digital Payment Security Guidelines

  • NIST Cybersecurity Framework

  • Industry best practices for secure transactions


16. SPECIAL PROVISIONS

16.1 Marketing & Promotional Communications

We may send promotional emails, SMS, and push notifications about:

  • New menu items and offers

  • Loyalty program rewards

  • Seasonal promotions and discounts

  • Special event announcements

Your Choices:

  • Opt out through app settings

  • Unsubscribe links in every promotional message

  • Contact us to manage preferences

  • We honor opt-out requests within 24 hours

16.2 Location-Based Services

Our App may request access to your device’s location to:

  • Map your position relative to Stallo branches

  • Check delivery coverage area eligibility

  • Provide location-based offers

  • Optimize delivery routing

Your Choices:

  • Grant or deny location permissions in device settings

  • Disable location sharing at any time

  • Manually enter your address instead of using GPS

  • Clear location history in app settings

16.3 Push Notifications

We use Firebase Cloud Messaging to send:

  • Order status updates

  • Delivery notifications

  • Promotional offers

  • Account alerts

Your Choices:

  • Disable notifications in device settings

  • Manage notification preferences in the app

  • Opt out of specific notification types

  • Our tokens are automatically deleted when you uninstall the app

16.4 Loyalty Program

Participation in our Loyalty Program is optional. Data collected includes:

  • Loyalty points earned and redeemed

  • Discount codes used

  • Purchase history through the program

  • Promotional preferences

You may withdraw from the Loyalty Program at any time without affecting your account access.


17. DISPUTE RESOLUTION

In case of disputes regarding privacy practices:

  1. Informal Resolution – Contact our privacy team first

  2. Escalation – Request review by Data Protection Officer

  3. Arbitration – Disputes may be resolved through arbitration

  4. Legal Action – Right to pursue legal remedies as per your jurisdiction


18. GLOSSARY OF TERMS

  • Personal Data: Any information relating to an identified or identifiable individual

  • Processing: Any operation performed on personal data (collection, storage, use, etc.)

  • Data Controller: The entity determining purposes and means of processing

  • Data Processor: The entity processing data on behalf of the controller

  • Data Subject: The individual to whom personal data relates

  • Legitimate Interests: Lawful purposes pursued by the controller or third parties

  • Consent: Clear affirmative action or agreement to processing


19. ACKNOWLEDGMENT

By using the Stallo Fried Chicken App, you acknowledge that:

  • You have read and understood this Privacy Policy

  • You consent to our collection and use of your information as described

  • You understand the risks and benefits of providing personal data

  • You are responsible for maintaining the confidentiality of your login credentials

  • You will notify us of any unauthorized access to your account


Thank you for being part of the Stallo Fried Chicken family!

For the most current version of this Privacy Policy, visit our app or contact us at info@stallofriedchicken.com