Privacy Policy

1. Who We Are

Uncle J's Dirty Apron BBQ ("we", "us", or "our") operates the website unclebbq.com and provides online ordering, rewards, and catering inquiry services. Our restaurant is located at 3202 Theodore Street, Joliet, IL 60431.

2. Information We Collect

We collect information you provide directly to us, including:

• Name, email address, and password when you create an account
• Billing and delivery address when you place an order
• Payment card details (processed securely by Stripe — we never store raw card numbers)
• Order history and preferences
• Messages you send through our contact form or support portal

We also automatically collect certain technical information when you visit our site, including your IP address, browser type, device identifiers, and pages visited. This information is used to provide the service, detect and prevent fraud, and improve our platform.

3. How We Use Your Information

• Process and fulfill your orders
• Send order confirmation and status emails
• Manage your rewards account and points balance
• Respond to your questions and contact form submissions
• Detect, prevent, and investigate fraud and unauthorized access
• Improve our menu, website, and services
• Send you marketing text messages if you have opted in to SMS updates (you may opt out at any time by replying STOP or clicking the unsubscribe link in any message)
• Notify you of material updates to our policies (via email, where you have provided one)
• Comply with legal obligations and prevent fraud

We do not sell your personal information to third parties.

4. Fraud Detection & Security

We use automated systems to detect and prevent fraudulent orders and account activity. This includes:

• Logging IP addresses associated with checkout and account activity
• Rate limiting repeated checkout attempts from the same IP address
• Automatically blocking IP addresses that trigger our fraud thresholds via Cloudflare
• Alerting our operations team to suspicious activity in real time

IP address data collected for fraud prevention purposes is retained for up to 90 days and is used solely for security purposes.

5. Third-Party Services

We use trusted third-party services to operate the site. Each has its own privacy practices:

• Stripe — payment processing
• DoorDash — third-party delivery fulfillment
• Clerk — secure account authentication
• Resend — transactional email delivery
• Vonage — SMS text message delivery (used for account verification codes and opt-in marketing messages)
• Cloudflare — DDoS protection, WAF, and IP fraud blocking
• Google Maps — location and directions

When you choose delivery through DoorDash, your name, address, and order details are shared with DoorDash to complete delivery. Please review their privacy policy at doordash.com.

6. Cookies

We use cookies and similar technologies to keep you signed in, remember your cart, and analyze site traffic. You can manage your cookie preferences at any time using the cookie settings panel on our site. Essential cookies (required for the site to function) cannot be disabled. Analytics and marketing cookies are optional and require your consent.

7. Data Retention

We retain your account information and order history for as long as your account is active or as needed to provide services. You may request deletion of your account at any time by contacting us. Fraud detection logs are retained for up to 90 days.

8. Children's Privacy

Our website is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with their information, please contact us and we will delete it promptly.

9. Your Rights

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account and associated data
• Opt out of marketing email communications at any time using the unsubscribe link in any message
• Opt out of SMS marketing at any time by replying STOP to any text we send, or clicking the opt-out link included in every marketing message

To exercise any of these rights, contact us at legal@unclebbq.com.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Where you have provided an email address and the change is material, we will send you a notification. Continued use of the site after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy, please reach out: