KwikFastHurry.com
Effective Date: [INSERT DATE] Last Updated: [INSERT DATE]
DRAFT — REQUIRES ATTORNEY REVIEW BEFORE PUBLICATION. All bracketed items must be completed or removed. Sections marked ⚠️ carry elevated legal risk. Critically: this policy must describe what your systems actually do. A privacy policy that misdescribes your data practices is itself an enforcement risk under the FTC Act and the Texas DPSA — more so than having no policy at all.
[FULL LEGAL ENTITY NAME] ("KwikFastHurry," "we," "us," or "our") operates KwikFastHurry.com and related mobile applications (the "Platform"), an on-demand food delivery service serving Fort Worth and the Dallas–Fort Worth Metroplex.
This Privacy Policy explains what personal data we collect, why we collect it, who we share it with, and what choices you have. It applies to Customers, Restaurant Partners, Delivery Partners, and visitors to our website.
By using the Platform, you agree to the practices described here. If you do not agree, please do not use the Platform.
| Category | Examples |
|---|---|
| Account information | Name, email address, phone number, password |
| Delivery information | Delivery addresses, apartment/gate codes, delivery instructions |
| Order information | Items ordered, special requests, order history, tips |
| Payment information | Payment card details, billing address (processed by our payment processor — see §2.4) |
| Communications | Support tickets, chat messages, call recordings [if applicable], feedback |
| User content | Reviews, ratings, photographs |
| Partner information | For Restaurant and Delivery Partners: business name, tax identification number, banking details for payouts, driver's license, insurance documentation, background check results ⚠️ |
Location data is central to how the Platform works, and it is treated as sensitive data under Texas law.
Consent. We process precise geolocation only with your consent, obtained through your device's operating system permissions and [in-app consent flow]. You may withdraw consent at any time through your device settings, though doing so will limit or prevent use of the Platform.
Payment card details are collected and processed directly by our payment processor, [PROCESSOR NAME], under its own privacy policy. We do not store full payment card numbers. We retain limited information such as the card brand, last four digits, and transaction records.
We do not intentionally collect sensitive personal data other than precise geolocation as described above [and, for Delivery Partners, driver's license and background check information]. Please do not submit health information, including allergy details, through free-text order notes if you do not wish us to process it — though note that allergy information you provide is transmitted to the Restaurant Partner to fulfill your Order.
We use personal data to:
We do not sell your personal data for money. [If you use advertising or analytics cookies that share data with third parties for cross-context behavioral advertising, that may still qualify as a "sale" or "targeted advertising" under the Texas DPSA and similar laws, which triggers disclosure and opt-out obligations. Confirm with counsel what your ad stack actually does before publishing the sentence above. ⚠️]
When you place an Order, we share your first name, order details, special instructions, and — where required for pickup or direct contact — a masked or partial phone number. [State whether full address is shared; for delivery orders it typically is not.]
We share your first name, delivery address, delivery instructions, order contents, and a masked phone number for contact during delivery. Delivery Partners are contractually prohibited from using this information for any purpose other than completing your delivery, or retaining it afterward.
We share data with vendors who perform services on our behalf, including payment processing, cloud hosting, mapping and routing, SMS and push notification delivery, customer support tooling, fraud prevention, analytics, and marketing. These providers are bound by contract to use the data only as we direct.
We may disclose personal data when we believe in good faith it is necessary to comply with law, respond to lawful requests from public authorities, enforce our Terms, protect the rights, property, or safety of any person, or investigate suspected fraud or a safety incident.
If we are involved in a merger, acquisition, financing, or sale of assets, personal data may be transferred as part of that transaction. We will notify you of any change in ownership or use of your personal data.
We may create and share aggregated or de-identified data that cannot reasonably be used to identify you. We will not attempt to re-identify such data.
Under the Texas Data Privacy and Security Act, Texas residents have the right to:
How to exercise these rights. Submit a request at [REQUEST URL / EMAIL] or by mail at the address in §12. We will verify your identity before responding. We will respond within 45 days, and may extend once by an additional 45 days with notice.
Appeals. If we decline your request, you may appeal by [APPEAL METHOD] within [PERIOD]. We will respond to the appeal within 60 days. If the appeal is denied, you may contact the Texas Attorney General at [https://www.texasattorneygeneral.gov/consumer-protection/file-consumer-complaint].
Universal opt-out. [Texas requires recognition of universal opt-out mechanisms such as Global Privacy Control. Confirm that your site actually honors GPC signals before publishing a statement to that effect. ⚠️]
If you reside in California, Colorado, Virginia, or another state with a comprehensive privacy law, you may have similar or additional rights. [Determine whether you meet the applicability thresholds for each — most are tied to volume of residents' data processed, not just where you operate. Add state-specific sections as required. ⚠️]
Regardless of location, you may access and update most account information directly in the Platform under [Account Settings], and may opt out of marketing emails using the unsubscribe link in any such message.
Transactional messages. We send SMS, push, and email messages about your Orders — confirmations, status updates, and Delivery Partner communications. These are necessary to provide the service and cannot be disabled while you maintain an active account, though you may disable push notifications in your device settings.
Marketing messages. ⚠️ We send promotional messages only where you have given consent as required by law. [Marketing SMS requires separate express written consent under the TCPA, which must not be bundled with transactional consent or with acceptance of the Terms. Your signup flow needs a distinct, unchecked opt-in for this. Confirm your implementation before publishing.]
You may opt out of marketing SMS by replying STOP, and marketing email by using the unsubscribe link or contacting [SUPPORT EMAIL].
We use cookies and similar technologies to keep you signed in, remember preferences, measure performance, and [if applicable] deliver relevant advertising.
| Type | Purpose |
|---|---|
| Strictly necessary | Authentication, security, cart and checkout function |
| Functional | Saved addresses, language and display preferences |
| Analytics | Usage measurement and performance monitoring |
| Advertising ⚠️ | [Only include if you run ad pixels — e.g., Meta Pixel, Google Ads. These trigger opt-out obligations.] |
You can control cookies through your browser settings and through [our cookie preference center, if implemented]. Blocking strictly necessary cookies will prevent the Platform from functioning.
We retain personal data for as long as your account is active and as needed to provide the Platform. After account closure, we retain:
We delete or de-identify data once these periods lapse, unless a longer period is required by law or an ongoing legal matter.
We maintain administrative, technical, and physical safeguards designed to protect personal data, including encryption in transit, access controls, and regular security review. [Describe only measures you actually have in place.]
No system is completely secure. We cannot guarantee absolute security, and you are responsible for keeping your account credentials confidential.
Breach notification. If a breach of your personal data occurs, we will notify you and applicable regulators as required by Texas Business and Commerce Code §521.053 and other applicable law.
The Platform is not directed to children under 13, and we do not knowingly collect personal data from them. Account holders must be at least 18. If we learn we have collected data from a child under 13, we will delete it. Contact [SUPPORT EMAIL] if you believe a child has provided us personal data.
We may update this Privacy Policy from time to time. Material changes will be posted here with a revised "Last Updated" date, and where required by law, we will notify you by email or in-app notice before the change takes effect.
[FULL LEGAL ENTITY NAME] [STREET ADDRESS] [CITY], Texas [ZIP]
Privacy requests: [PRIVACY EMAIL / REQUEST URL] General support: [SUPPORT EMAIL] Phone: [PHONE NUMBER]
