Privacy Policy

Effective Date: September 5, 2026

Last Updated: September 5, 2026

Version 4

1. Introduction

BigBabs LLC ("BigBabs," "Company," "we," "us," or "our") respects your privacy and is committed to protecting it through our compliance with this Privacy Policy. This policy describes the types of information we may collect from you or that you may provide when you visit our Platform and our practices for collecting, using, maintaining, protecting, and disclosing that information.

**This Privacy Policy applies to information we collect:**

On the BigBabs website and mobile applications;
In email, text, and other electronic messages between you and the Platform;
Through mobile and desktop applications you download from the Platform;
When you interact with our advertising and applications on third-party websites and services;
Through our delivery and logistics operations;
When you communicate with our customer service representatives;
Through our merchant and delivery partner portals;
Via location-based services when you enable such features.

**This Privacy Policy does NOT apply to information collected by:**

Us offline or through any other means, including on any other website operated by BigBabs or any third party;
Any third party, including through any application or content that may link to or be accessible from the Platform;
Restaurant partners or merchants regarding their own privacy practices.

Please read this Privacy Policy carefully to understand our policies and practices regarding your information and how we will treat it. If you do not agree with our policies and practices, your choice is not to use our Platform. By accessing or using this Platform, you agree to this Privacy Policy. This policy may change from time to time (see Section 16: Updates to This Policy). Your continued use of the Platform after we make changes is deemed to be acceptance of those changes, so please check the policy periodically for updates.

2. Information We Collect

We collect several types of information from and about users of our Platform, including information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or device ("personal information").

2.1 Personal Identifiers

Full legal name and any aliases or nicknames;
Email address (primary and secondary);
Telephone numbers (mobile and landline);
Postal address (billing, shipping, and delivery addresses);
Date of birth and age;
Government-issued identification numbers (for delivery partners and merchants);
Social Security Number (for tax purposes for delivery partners and merchants);
Driver's license number (for delivery partners);
Passport information (for identity verification);
Username, password, and account credentials;
Profile photographs and avatars.

2.2 Financial Information

Credit card numbers and expiration dates;
Debit card information;
Bank account numbers and routing numbers (for payouts);
Digital wallet information (Apple Pay, Google Pay, PayPal);
Billing address and billing history;
Tax identification information;
Payment transaction history and records;
Refund and credit history;
Subscription and membership payment details.

2.3 Commercial Information

Order history and details (items ordered, quantities, special instructions);
Delivery preferences and instructions;
Favorite restaurants and saved items;
Shopping cart contents and abandoned carts;
Purchase frequency and patterns;
Promotional code and discount usage;
Gift card purchases and balances;
Loyalty program participation and points;
Reviews, ratings, and feedback provided;
Complaints and support ticket history.

2.4 Location Data

Real-time GPS location (when app is in use);
Background location (with your permission);
Historical location data;
Delivery route information;
Frequently visited addresses;
Geofencing data for promotions and features;
IP address-based location;
Cell tower and Wi-Fi triangulation data.

2.5 Device and Technical Information

Device type, model, and manufacturer;
Operating system and version;
Unique device identifiers (UDID, IDFA, GAID);
IP address and network information;
Browser type, version, and settings;
Screen resolution and display settings;
App version and installation date;
Push notification token;
Crash reports and diagnostic data;
Cookies and similar tracking technologies.

2.6 Usage and Behavioral Data

Pages and screens viewed;
Features used and interaction patterns;
Search queries and search history;
Time spent on Platform and specific pages;
Click patterns and navigation paths;
Scroll depth and engagement metrics;
Referral source and exit pages;
A/B testing group assignments;
Feature adoption and usage frequency.

2.7 Communications Data

In-app messages with support, merchants, and delivery partners;
Email correspondence;
SMS and text messages;
Phone call recordings (with notice and consent);
Chat transcripts;
Survey responses;
Social media interactions;
Communication preferences and opt-out selections.

2.8 Sensitive Personal Information

In certain circumstances, we may collect sensitive personal information, including but not limited to:

Dietary restrictions and food allergies (to ensure safe food preparation);
Health-related information voluntarily provided (for accessibility accommodations);
Biometric information (for delivery partner identity verification);
Precise geolocation data;
Racial or ethnic origin (only if voluntarily provided for diversity programs);
Contents of communications (for support and safety purposes).

We only collect sensitive personal information when necessary for legitimate business purposes and with appropriate consent where required by law.

3. How We Collect Information

We use various methods to collect information from and about you, including:

3.1 Direct Collection

Information you provide directly to us when you:

Register for an account or create a user profile;
Place an order or make a purchase;
Subscribe to our newsletter or marketing communications;
Participate in surveys, contests, or promotions;
Contact customer support or submit inquiries;
Leave reviews, ratings, or feedback;
Apply to become a delivery partner or merchant;
Connect social media accounts;
Use interactive features of our Platform;
Request information or report problems.

3.2 Automatic Collection

Information collected automatically as you navigate through and use our Platform:

Usage details, IP addresses, and browsing patterns;
Device and browser information;
Location data (with permission);
Information collected through cookies, web beacons, and similar technologies;
Analytics and performance data;
Error logs and crash reports;
Session duration and interaction data.

3.3 Third-Party Sources

Information we receive from third parties:

Social media platforms (when you connect accounts);
Business partners and affiliates;
Payment processors and financial institutions;
Identity verification services;
Background check providers (for delivery partners);
Marketing and advertising partners;
Analytics providers;
Public databases and records;
Restaurant and merchant partners;
Data brokers and aggregators (for fraud prevention).

3.4 Inferred Information

Information we derive or infer from other data:

Preferences and interests based on order history;
Spending patterns and price sensitivity;
Dining preferences and dietary patterns;
Geographic preferences and delivery zones;
Engagement and loyalty metrics;
Risk scores for fraud prevention;
Customer segments and profiles.

4. How We Use Your Information

We use the information we collect about you or that you provide to us, including any personal information, for various purposes:

4.1 Providing and Improving Services

Process and fulfill your orders and deliveries;
Manage your account and provide customer support;
Send order confirmations, updates, and delivery notifications;
Process payments and refunds;
Enable communication between customers, merchants, and delivery partners;
Personalize your experience and provide relevant recommendations;
Improve and optimize our Platform and services;
Develop new features and functionality;
Conduct research and analytics;
Monitor and analyze usage patterns and trends.

4.2 Marketing and Communications

Send promotional emails, SMS, and push notifications;
Deliver targeted advertising and personalized offers;
Administer loyalty programs and rewards;
Conduct surveys and collect feedback;
Notify you about changes to our services;
Inform you of promotions, events, and special offers;
Facilitate referral programs;
Re-engage inactive users.

4.3 Safety and Security

Verify identity and prevent fraud;
Detect and prevent unauthorized access;
Monitor for suspicious activity;
Protect users, merchants, and delivery partners;
Enforce our Terms of Service;
Conduct background checks on delivery partners;
Investigate and resolve disputes;
Comply with legal obligations and law enforcement requests.

4.4 Legal and Compliance

Comply with applicable laws, regulations, and legal processes;
Respond to lawful requests from public authorities;
Protect our legal rights and interests;
Enforce our agreements and policies;
Maintain records for tax and accounting purposes;
Report to regulatory authorities as required;
Support audits and compliance reviews.

4.5 Business Operations

Manage relationships with merchants and delivery partners;
Process payments and financial transactions;
Conduct business analytics and reporting;
Evaluate and improve business performance;
Support mergers, acquisitions, or business transfers;
Train staff and improve customer service;
Maintain business records and documentation.

We may disclose aggregated information about our users, and information that does not identify any individual, without restriction. We may disclose personal information that we collect or you provide as described in this privacy policy:

5.1 Service Providers

We share information with third-party vendors, service providers, contractors, and agents who perform services on our behalf:

Payment processors (Stripe, PayPal, Square);
Cloud hosting and infrastructure providers (AWS, Google Cloud);
Customer support and communication platforms;
Email and SMS delivery services;
Analytics and monitoring services;
Marketing and advertising platforms;
Identity verification services;
Background check providers;
Fraud detection and prevention services;
Mapping and navigation services.

5.2 Restaurant and Merchant Partners

We share order-related information with restaurants and merchants to fulfill your orders, including:

Your name and contact information;
Order details and special instructions;
Delivery address and preferences;
Dietary restrictions and allergies;
Order history with that merchant;
Reviews and feedback you provide.

5.3 Delivery Partners

We share information necessary to complete deliveries:

Your name and contact number;
Delivery address and access instructions;
Order details (but not payment information);
Special delivery instructions;
Real-time location for delivery coordination.

5.4 Legal Requirements

We may disclose your information when required by law or to:

Comply with court orders, subpoenas, or legal process;
Respond to requests from law enforcement or government agencies;
Protect the rights, property, or safety of BigBabs, our users, or others;
Enforce our Terms of Service and other agreements;
Investigate fraud, security issues, or technical problems;
Protect against legal liability;
Comply with regulatory requirements.

5.5 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our Platform of any change in ownership or uses of your personal information, as well as any choices you may have regarding your personal information.

5.6 With Your Consent

We may share your personal information for any other purpose disclosed by us when you provide the information, or with your explicit consent.

Important: We Do NOT Sell Your Personal Information

BigBabs does not sell, rent, or trade your personal information to third parties for their direct marketing purposes. We do not participate in data broker networks or sell customer data for profit. Any sharing of personal information is solely for the purposes outlined in this Privacy Policy.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements.

Retention Periods

Active Account Data: Retained while your account is active and for 3 years after account closure;
Order History: Retained for 7 years for tax and legal compliance;
Payment Information: Retained for 7 years as required by financial regulations;
Customer Support Records: Retained for 3 years after resolution;
Marketing Preferences: Retained until you opt out or update preferences;
Location Data: Retained for 2 years for active users, deleted upon request;
Analytics Data: Aggregated and anonymized after 2 years;
Background Check Results: Retained for 7 years for delivery partners;
Legal Hold Data: Retained indefinitely when subject to legal proceedings.

When determining the appropriate retention period, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process the information, and applicable legal requirements.

After the retention period expires, we will securely delete or anonymize your personal information. Anonymized data may be retained indefinitely for research, analytics, and business intelligence purposes.

7. Data Security

We have implemented appropriate technical and organizational security measures designed to protect the security of any personal information we process. These measures include:

7.1 Technical Safeguards

256-bit SSL/TLS encryption for data in transit;
AES-256 encryption for data at rest;
Secure password hashing using bcrypt;
Multi-factor authentication for account access;
Regular security audits and penetration testing;
Web application firewalls (WAF);
Intrusion detection and prevention systems;
DDoS protection and mitigation;
Automated vulnerability scanning;
Secure API authentication using OAuth 2.0.

7.2 Organizational Measures

Role-based access control (RBAC);
Principle of least privilege for data access;
Background checks for employees with data access;
Regular security awareness training;
Incident response and breach notification procedures;
Data processing agreements with service providers;
Regular third-party security assessments;
SOC 2 Type II compliance;
PCI DSS compliance for payment processing.

Security Limitations

Despite our efforts, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. In the event of a data breach, we will notify affected users and relevant authorities as required by applicable law.

8. Your Privacy Rights

Depending on your location and applicable law, you may have certain rights regarding your personal information:

8.1 Right to Access

You have the right to request access to the personal information we hold about you. This includes the right to obtain confirmation of whether we process your personal information and to receive a copy of that information.

8.2 Right to Correction

You have the right to request correction of inaccurate personal information and to have incomplete information completed. You can update most account information directly through your account settings.

8.3 Right to Deletion

You have the right to request deletion of your personal information, subject to certain exceptions. We may retain information as necessary to comply with legal obligations, resolve disputes, and enforce our agreements.

8.4 Right to Data Portability

You have the right to receive your personal information in a structured, commonly used, and machine-readable format (such as JSON or CSV) and to transmit that data to another controller.

8.5 Right to Opt-Out

You have the right to opt out of:

Marketing communications (email, SMS, push notifications);
Targeted advertising and personalization;
Sale or sharing of personal information (where applicable);
Automated decision-making and profiling;
Location tracking and geolocation services.

8.6 Right to Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights. We will not deny you goods or services, charge you different prices, or provide you with a different level of quality for exercising your rights.

How to Exercise Your Rights

To exercise any of these rights, you may:

Email us at legal@bigbabs.com;
Call us at +1 815-687-0926;
Submit a request through your account settings;
Mail a written request to our Privacy Officer at 2300 N Harlem Ave, Elmwood Park, IL 60707.

We will respond to your request within 45 days. We may require verification of your identity before processing your request.

9. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

9.1 Right to Know

You have the right to request that we disclose:

The categories of personal information we collected;
The categories of sources from which we collected information;
Our business or commercial purpose for collecting or selling information;
The categories of third parties with whom we share information;
The specific pieces of personal information we collected about you.

9.2 Right to Delete

You have the right to request deletion of personal information we collected from you, subject to certain exceptions such as completing transactions, detecting security incidents, and complying with legal obligations.

9.3 Right to Correct

You have the right to request correction of inaccurate personal information, taking into account the nature of the information and the purposes of processing.

9.4 Right to Opt-Out of Sale/Sharing

You have the right to opt out of the sale or sharing of your personal information. BigBabs does not sell personal information in the traditional sense, but we may share information with advertising partners that could be considered "sharing" under the CCPA. You can opt out by clicking "Do Not Sell or Share My Personal Information" in our footer or by contacting us directly.

9.5 Right to Limit Use of Sensitive Information

You have the right to limit the use and disclosure of your sensitive personal information to only what is necessary to provide the services you request.

9.6 Authorized Agents

You may designate an authorized agent to make requests on your behalf. To do so, you must provide the agent with written permission, and we may require you to verify your identity directly with us.

California "Shine the Light" Law: California Civil Code Section 1798.83 permits California residents to request information regarding the disclosure of personal information to third parties for direct marketing purposes. BigBabs does not share personal information with third parties for their direct marketing purposes.

10. Illinois Privacy Rights

As an Illinois-based company, we comply with Illinois privacy laws, including the Illinois Personal Information Protection Act (PIPA) and the Biometric Information Privacy Act (BIPA):

10.1 Data Breach Notification

Under the Illinois Personal Information Protection Act, we will notify Illinois residents in the most expedient time possible and without unreasonable delay if we discover a breach of security of their personal information. Notification will include information about the breach and steps you can take to protect yourself.

10.2 Biometric Information (BIPA)

If we collect biometric information (such as fingerprints or facial recognition data for delivery partner verification), we will:

Inform you in writing of the specific purpose and length of term for which biometric information is being collected;
Obtain a written release from you authorizing collection and use;
Develop a written policy establishing a retention schedule and destruction guidelines;
Never sell, lease, trade, or otherwise profit from biometric information;
Protect biometric information using reasonable security measures;
Destroy biometric information when the initial purpose has been satisfied or within 3 years of your last interaction with us, whichever occurs first.

10.3 Social Security Number Protection

We protect Social Security Numbers collected from delivery partners and merchants in accordance with Illinois law. SSNs are only used for legitimate tax and legal purposes, are stored using strong encryption, and are never publicly posted or disclosed except as required by law.

Illinois Residents - Your Rights

Illinois residents may contact our Privacy Officer at legal@bigbabs.com or write to us at 2300 N Harlem Ave, Elmwood Park, IL 60707 to exercise their rights under Illinois privacy laws or to file a complaint about our privacy practices.

11. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and store information about your interactions with our Platform.

11.1 Types of Cookies We Use

Essential Cookies: Required for basic Platform functionality, such as authentication, security, and shopping cart functionality. These cannot be disabled.
Performance Cookies: Help us understand how visitors interact with our Platform by collecting anonymous analytics data.
Functional Cookies: Enable enhanced functionality and personalization, such as remembering your preferences and settings.
Targeting/Advertising Cookies: Used to deliver relevant advertisements and track ad campaign performance. These may be set by our advertising partners.

11.2 Other Tracking Technologies

Web Beacons: Small graphic images (also known as "pixel tags") that help us track user behavior and measure marketing campaign effectiveness;
Local Storage: Browser-based storage used to save user preferences and temporary data;
Session Storage: Temporary storage cleared when you close your browser;
Device Fingerprinting: Collecting device attributes to identify unique devices for security purposes;
SDKs: Software development kits in our mobile apps that may collect device and usage information.

11.3 Managing Cookies

You can control cookies through:

Our cookie preferences center (accessible via the cookie banner);
Your browser settings (most browsers allow you to refuse or delete cookies);
Mobile device settings for app-based tracking;
Industry opt-out tools like the Digital Advertising Alliance's opt-out page.

Note: Disabling certain cookies may affect Platform functionality and your user experience.

12. Third-Party Services

Our Platform may contain links to third-party websites, services, or applications. We are not responsible for the privacy practices of these third parties.

12.1 Third-Party Integrations

We integrate with various third-party services, including:

Payment Processors: Stripe, PayPal, Square, Apple Pay, Google Pay;
Mapping Services: Google Maps, Mapbox;
Analytics: Google Analytics, Mixpanel, Amplitude;
Customer Support: Zendesk, Intercom;
Marketing: Mailchimp, Twilio, Facebook Ads, Google Ads;
Social Media: Facebook, Instagram, Twitter;
Cloud Services: Amazon Web Services, Google Cloud Platform.

12.2 Social Media Features

Our Platform may include social media features, such as share buttons or embedded content. These features may collect your IP address, which page you are visiting, and may set a cookie to enable the feature to function properly. Social media features are either hosted by a third party or hosted directly on our Platform. Your interactions with these features are governed by the privacy policy of the company providing it.

We encourage you to read the privacy policies of any third-party websites or services that you visit or use. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party sites or services.

13. Children's Privacy

Age Restriction Notice

Our Platform is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are under 13, do not use or provide any information on this Platform.

In compliance with the Children's Online Privacy Protection Act (COPPA), if we learn that we have collected or received personal information from a child under 13 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 13, please contact us at legal@bigbabs.com.

Users Under 18: If you are between 13 and 18 years old, you may use our Platform only with the involvement of a parent or guardian. California residents under 18 may request removal of content they have publicly posted by contacting us at legal@bigbabs.com.

14. International Data Transfers

BigBabs is based in the United States, and your information may be processed and stored in the United States or other countries where our service providers maintain facilities.

14.1 Data Transfer Safeguards

When we transfer personal information internationally, we implement appropriate safeguards, including:

Standard Contractual Clauses approved by relevant authorities;
Data Processing Agreements with service providers;
Certification mechanisms where applicable;
Compliance with applicable data protection frameworks;
Encryption of data in transit and at rest.

By using our Platform, you consent to the transfer of your information to the United States and other jurisdictions where we or our service providers operate. These jurisdictions may not have data protection laws as comprehensive as those in your country of residence.

15. Do Not Track Signals

Some browsers include a "Do Not Track" (DNT) feature that signals to websites that you do not want to have your online activity tracked. Due to the lack of a common understanding of how to interpret DNT signals, our Platform does not currently respond to DNT browser signals.

However, you can opt out of certain tracking through:

Our cookie preferences center;
The Network Advertising Initiative opt-out page;
The Digital Advertising Alliance opt-out tool;
Your mobile device settings (Limit Ad Tracking on iOS, Opt Out of Ads Personalization on Android);
Browser privacy settings and extensions.

16. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, and other factors. When we make changes:

We will update the "Last Updated" date at the top of this policy;
For material changes, we will notify you via email, in-app notification, or a prominent notice on our Platform;
We may provide a summary of key changes;
We will give you the opportunity to review changes before they take effect;
Your continued use of the Platform after changes become effective constitutes acceptance of the updated policy.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Previous versions of this Privacy Policy are available upon request.

17. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or our privacy practices, please contact us:

Privacy and Data Protection Office

BigBabs LLC
2300 N Harlem Ave, Elmwood Park, IL 60707
Email: privacy@bigbabs.com
Phone: +1 815-687-0926

Response Time

We will acknowledge receipt of your inquiry within 3 business days and provide a substantive response within 30 days. For complex requests or rights requests under privacy laws, we may take up to 45 days to respond, with notification if an extension is needed.

Filing a Complaint

If you are not satisfied with our response, you have the right to lodge a complaint with:

The Illinois Attorney General's Office;
The Federal Trade Commission (FTC);
Your state's consumer protection agency;
Relevant data protection authorities in your jurisdiction.