Privacy Policy

Welcome to 4 Rivers ("we," "us," "our," or "the Company"), a food business operating through our website 4-rivers.click (the "Website" or "Service"). We are deeply committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, place orders, interact with our digital platforms, or otherwise engage with our services.

Please read this Privacy Policy carefully. If you disagree with its terms, please discontinue use of our Website and Services immediately. This policy applies to all information collected through our Website and any related services, sales, marketing, or events.

By accessing or using our Website, you acknowledge that you have read, understood, and agree to be bound by all the terms outlined in this Privacy Policy.

1. Who We Are

4 Rivers is a food business based in the United States. We provide food-related products and services to our customers through our online platform. Our contact details are as follows:

For all privacy-related inquiries, questions, or concerns, you may reach us at [email protected].

2. Applicable Laws and Legal Framework

As a business operating in the United States, our data privacy practices are governed by applicable federal and state laws, including but not limited to:

• The Federal Trade Commission Act (FTC Act) – governing unfair or deceptive practices, including those related to consumer privacy.
• The California Consumer Privacy Act (CCPA) and its amendment, the California Privacy Rights Act (CPRA) – providing California residents with specific rights regarding their personal information.
• The CAN-SPAM Act – governing commercial electronic communications.
• The Children's Online Privacy Protection Act (COPPA) – protecting the privacy of children under 13 years of age.
• The Electronic Communications Privacy Act (ECPA) – governing the interception of electronic communications.
• Any other applicable federal and state privacy laws in the United States.

Where California law applies, California residents have additional rights described in detail in Section 12 of this Privacy Policy.

3. Information We Collect

We collect various types of information in connection with your use of our Website and Services. The categories of personal information we may collect include:

3.1 Personal Information You Provide Directly

When you register an account, place an order, subscribe to our newsletter, contact us, or otherwise interact with our Website, you may provide us with:

• Identification Information: Full name, username, and similar identifiers.
• Contact Information: Email address, mailing address, billing address, telephone number.
• Account Credentials: Username and password (stored in encrypted form).
• Payment Information: Credit/debit card details, billing address, and other financial information required to process transactions. Note: We do not store full payment card details on our servers. Payments are processed securely by third-party payment processors.
• Order Information: Details of food products ordered, delivery preferences, special instructions, and order history.
• Dietary Preferences and Allergen Information: If voluntarily provided, information about dietary restrictions, food allergies, or preferences.
• Communications: Records of correspondence, customer service inquiries, feedback, and reviews you submit.
• Promotional Information: Preferences for receiving marketing communications from us.

3.2 Information Collected Automatically

When you access and use our Website, certain information may be collected automatically through cookies, web beacons, log files, and similar technologies, including:

• Device Information: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage Data: Pages visited, time and date of visits, time spent on pages, links clicked, referring and exit pages, and other clickstream data.
• Location Data: Approximate geographic location based on IP address, and if you grant permission, more precise location data for delivery purposes.
• Cookie Data: Information collected through cookies and similar tracking technologies as described in Section 9 of this Policy.
• Log Files: Server logs including access times, error logs, and related diagnostic information.

3.3 Information from Third Parties

We may receive information about you from third-party sources, such as:

• Social Media Platforms: If you connect your social media account to our Website or use social login features.
• Analytics Providers: Aggregated or de-identified information from analytics services about how users interact with our Website.
• Payment Processors: Transaction confirmation and fraud prevention information.
• Delivery Partners: Delivery status updates and logistics information.
• Marketing Partners: Lead generation data and information about your interests where you have consented to such sharing.

4. How We Use Your Information

We use the information we collect for various business and operational purposes. Specifically, we may use your personal information to:

4.1 Service Provision and Order Fulfillment

• Process and fulfill your food orders and transactions.
• Manage your account and provide access to account features.
• Arrange delivery or pickup of food products.
• Communicate order confirmations, updates, and receipts.
• Provide customer support and respond to your inquiries and complaints.
• Address food safety concerns, including notifying you of product recalls or allergen alerts.

4.2 Analytics and Website Improvement

• Analyze usage patterns and trends to improve the functionality and user experience of our Website.
• Conduct internal research and development to enhance our food products and services.
• Monitor and analyze the effectiveness of our content, promotions, and campaigns.
• Diagnose and fix technical problems with our Website.
• Compile aggregate, de-identified statistics about Website usage.

4.3 Marketing and Communications

• Send you promotional emails, newsletters, and marketing communications about our food products, special offers, and events — only where you have opted in or we have a legitimate interest in doing so.
• Personalize your experience on our Website based on your browsing and purchase history.
• Display targeted advertising on third-party platforms where permitted.
• Conduct surveys, contests, and sweepstakes with your participation.

4.4 Legal Compliance and Security

• Comply with applicable laws, regulations, legal processes, and governmental requests.
• Enforce our Terms of Service and other agreements.
• Protect the rights, property, and safety of 4 Rivers, our customers, and the public.
• Detect, prevent, and address fraud, abuse, security incidents, and technical issues.
• Maintain appropriate business records for tax, accounting, and regulatory purposes.

5. Legal Bases for Processing

We process your personal information based on the following legal grounds:

• Performance of a Contract: Processing necessary to fulfill your food orders and deliver our services.
• Legitimate Interests: Processing for our legitimate business interests, including improving our services, fraud prevention, and direct marketing to existing customers, provided these interests are not overridden by your rights.
• Consent: Where you have provided clear consent for specific processing activities, such as receiving marketing emails or the use of non-essential cookies.
• Legal Obligation: Processing required for compliance with applicable laws and regulations.

6. Sharing Your Information with Third Parties

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes. However, we may share your information in the following circumstances:

6.1 Service Providers and Business Partners

We engage trusted third-party service providers who assist us in operating our Website and delivering our services. These include:

• Payment Processors: To securely handle credit card and payment transactions.
• Delivery and Logistics Partners: To fulfill food delivery orders to your location.
• Cloud Hosting and Technology Providers: To host our Website and store data securely.
• Email Marketing Platforms: To manage and send marketing communications.
• Analytics Providers: Such as Google Analytics, to help us understand website traffic and user behavior.
• Customer Support Tools: Platforms used to manage and respond to customer inquiries.
• Security and Fraud Prevention Services: To monitor and protect against unauthorized activity.

All service providers are contractually required to handle your personal information securely, use it only for the purposes for which it was disclosed, and comply with applicable privacy laws.

6.2 Legal Requirements

We may disclose your personal information if required to do so by law or in response to valid legal processes, including:

• Court orders, subpoenas, or other legal processes.
• Requests from law enforcement or government authorities.
• Compliance with applicable laws and regulations.
• Protection of the rights and safety of 4 Rivers, its employees, customers, or the public.

6.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal information may be transferred to a successor or affiliated entity. We will notify you of any such transfer and any choices you may have regarding your information.

6.4 With Your Consent

We may share your information with third parties for any other purpose with your explicit prior consent.

7. Data Security Measures

The security of your personal information is a top priority for us. We implement a variety of technical, administrative, and physical security measures designed to protect your information from unauthorized access, use, alteration, disclosure, or destruction. These measures include:

• Encryption: Sensitive data, including payment information and passwords, is transmitted using Secure Socket Layer (SSL) technology and stored using industry-standard encryption.
• Access Controls: We restrict access to personal information to authorized employees, contractors, and service providers who need the information to perform their job functions.
• Secure Servers: Our Website and databases are hosted on secure servers with appropriate firewalls and intrusion detection systems.
• Regular Security Audits: We conduct periodic reviews of our security practices and infrastructure to identify and address potential vulnerabilities.
• Employee Training: Our staff are trained on data privacy and security best practices.
• Incident Response: We maintain a data breach response plan to address any security incidents promptly and in accordance with applicable notification requirements.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Our general retention guidelines are as follows:

When your personal information is no longer needed, we will securely delete or anonymize it. If deletion is not immediately possible (for example, because data is stored in backup archives), we will isolate the data from further processing until deletion is feasible.

9. Cookies and Tracking Technologies

Our Website uses cookies and similar tracking technologies to enhance your browsing experience, analyze Website traffic, and support our marketing efforts. Cookies are small text files placed on your device when you visit a website.

9.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the operation of our Website, including shopping cart functionality and secure login.
• Performance and Analytics Cookies: Help us understand how visitors interact with our Website by collecting anonymized information.
• Functionality Cookies: Allow the Website to remember your preferences, such as language settings and saved delivery addresses.
• Marketing and Targeting Cookies: Used to deliver relevant advertisements and track the effectiveness of marketing campaigns.

9.2 Managing Your Cookie Preferences

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies or alert you when cookies are being sent. Please note that disabling certain cookies may affect the functionality of our Website.

For detailed information about the specific cookies we use, their purposes, and how to opt out, please refer to our Cookie Policy.

10. Children's Privacy

In accordance with the Children's Online Privacy Protection Act (COPPA), we do not knowingly collect, use, or disclose personal information from children under the age of 13 without verifiable parental consent.

If you are a parent or guardian and you believe that your child under the age of 18 has provided us with personal information without your consent, please contact us immediately at [email protected]. Upon receiving such notification, we will take immediate steps to verify the information and, if confirmed, to delete the child's personal information from our records.

We encourage parents and guardians to monitor and supervise their children's online activities and to help enforce this Privacy Policy by instructing their children never to provide personal information on our Website without parental permission.

11. International Data Transfers

4 Rivers is based in the United States, and your personal information is primarily processed and stored within the United States. However, due to the global nature of internet services and our use of third-party service providers, your information may be transferred to, stored in, or processed in countries other than your country of residence.

When we transfer personal information internationally, we take appropriate steps to ensure that such transfers are carried out in compliance with applicable law and that your information remains protected to the same standards described in this Privacy Policy. These steps may include:

• Entering into data transfer agreements with service providers that incorporate standard contractual clauses or equivalent safeguards.
• Ensuring that recipients of your data are located in jurisdictions that provide an adequate level of data protection.
• Implementing additional technical and organizational measures to secure cross-border data transfers.

By using our Website and providing us with your personal information, you acknowledge and consent to the transfer of your information to the United States and potentially other countries where data protection laws may differ from those in your jurisdiction.

12. Your Privacy Rights

Depending on your location, you may have specific rights regarding your personal information. We respect and honor these rights as described below.

12.1 General Rights for All Users

All users of our Website have the following rights:

• Right to Access: You have the right to request a copy of the personal information we hold about you.
• Right to Correction: You have the right to request that we correct inaccurate or incomplete personal information.
• Right to Deletion: You have the right to request that we delete your personal information, subject to certain legal obligations and legitimate business needs.
• Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to Opt-Out of Marketing: You can opt out of receiving marketing communications from us at any time by clicking the "unsubscribe" link in any marketing email or by contacting us directly.

12.2 Additional Rights for California Residents (CCPA/CPRA)

If you are a resident of California, you have the following additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to Know: You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you, as well as the purposes for collection and the categories of third parties with whom we share it.
• Right to Delete: You have the right to request the deletion of your personal information collected or maintained by us, subject to certain exceptions.
• Right to Correct: You have the right to request correction of inaccurate personal information we maintain about you.
• Right to Opt-Out of Sale or Sharing: You have the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising. We do not sell personal information in the traditional sense; however, if our advertising activities constitute "sharing" under CPRA, you may opt out.
• Right to Limit Use of Sensitive Personal Information: You have the right to limit the use and disclosure of sensitive personal information to necessary purposes.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you goods or services, charge you different prices, or provide you with a different level or quality of goods or services for exercising your rights.
• Right to Data Portability: You have the right to receive your personal information in a portable and, where technically feasible, readily usable format.

How to Submit a Privacy Rights Request: To exercise any of the rights described above, please submit a verifiable consumer request to us by:

• Emailing us at: [email protected]
• Including in your request your full name, email address associated with your account, and the specific right you wish to exercise.

We will respond to verifiable consumer requests within 45 days of receipt. If we require more time (up to an additional 45 days), we will inform you of the reason and the extension period in writing. We will not charge a fee for processing verifiable consumer requests unless the request is excessive, repetitive, or manifestly unfounded.

12.3 Authorized Agents

California residents may designate an authorized agent to submit privacy rights requests on their behalf. To do so, the authorized agent must provide written proof of authorization, and we may require you to verify your identity directly with us.

13. Do Not Track Signals

Some browsers transmit "Do Not Track" (DNT) signals to websites indicating that users do not wish to be tracked. Currently, our Website does not respond to DNT signals as there is no universally accepted standard for how companies should respond to these signals. We will continue to monitor developments in DNT standards and may update our practices accordingly.

For California residents, please note that our disclosure regarding the use of cookies and tracking technologies in Section 9 above is intended to fulfill the requirements of the California Online Privacy Protection Act (CalOPPA).

14. Third-Party Websites and Links

Our Website may contain links to third-party websites, applications, or services that are not owned or controlled by 4 Rivers. This Privacy Policy applies solely to information collected by our Website and Services.

We are not responsible for the privacy practices of third-party websites and encourage you to review the privacy policies of any third-party sites you visit. Clicking on third-party links is done at your own risk.

15. Marketing Communications and Opt-Out

With your consent, or where we have a legitimate interest to do so, we may send you promotional communications about our food products, special offers, seasonal menus, loyalty programs, and other news about 4 Rivers.

You can opt out of receiving marketing communications at any time by:

• Clicking the "Unsubscribe" or "Opt-Out" link included in any marketing email.
• Contacting us directly at [email protected] with the subject line "Marketing Opt-Out."
• Updating your communication preferences in your account settings, if applicable.

Please note that even after opting out of marketing communications, you will still receive transactional and service-related messages, such as order confirmations, delivery notifications, and account-related communications, as these are necessary to provide our Services.

16. How to File a Complaint with a Data Protection Authority

If you believe that we have not handled your personal information in accordance with applicable law, you have the right to file a complaint with the relevant regulatory authority.

16.1 For United States Residents

If you are located in the United States and have concerns about our data practices, you may file a complaint with:

• Federal Trade Commission (FTC):
  Website: www.ftc.gov/complaint
  Phone: 1-877-382-4357
• California Attorney General (for California Residents):
  Website: oag.ca.gov/privacy/ccpa
  This office handles complaints related to CCPA/CPRA violations.
• California Privacy Protection Agency (CPPA):
  Website: cppa.ca.gov

We ask that before filing a complaint with a regulatory authority, you first contact us directly at [email protected] so that we have an opportunity to address your concerns.

17. Updates and Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business practices, legal obligations, or industry standards. When we make material changes to this Policy, we will:

• Post the updated Privacy Policy on our Website with a revised "Last Updated" date.
• Send an email notification to registered users where required or appropriate.
• Display a prominent notice on our Website homepage for a reasonable period.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our Website and Services after any changes to this Policy constitutes your acceptance of the updated terms.

18. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please do not hesitate to contact our privacy team:

We are committed to resolving any privacy-related complaints and inquiries promptly and professionally. We will endeavor to respond to all legitimate requests within 30 days of receipt. Occasionally, it may take us longer if your request is complex or if you have made multiple requests; in this case, we will notify you and provide an estimated response timeline.