PRIVACY POLICY

1. Applicability and Scope

This Privacy Policy (“Policy”) describes how HQ. UGLY FOODS AND SERVICE CORP (“Company,” “we,” “us,” or “our”) collects, uses, discloses, and otherwise processes personal information in connection with your use of the Ugly Donuts & Corn Dogs mobile application, website (www.uglydonutsncorndogs.com), and related services (collectively, the “Services”).

This Policy applies solely to information collected through the Services. The Services may contain links to third-party websites, applications, or services that are not operated or controlled by us. We are not responsible for the privacy practices of those third parties, and we encourage you to review their policies before providing any information.

2. Updates to This Policy

We may update this Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other operational needs. When we make material changes, we will update the “Last Revised” date and, where appropriate, provide additional notice through the Services.

Your continued use of the Services after such updates constitutes your acceptance of the revised Policy.

3. Information We Collect

We collect personal information directly from you, automatically through your use of the Services, and from third-party sources.

Information You Provide

When you create an account, place an order, or interact with the Services, we may collect information such as your name, email address, phone number, login credentials, and any other information you choose to provide. If you use social login features (such as logging in through a third-party provider), we may receive certain profile information from that provider, consistent with your privacy settings on that platform.

Transaction and Commercial Information

We collect information related to your transactions, including orders placed, items purchased, payment method type, wallet usage, loyalty activity, and associated rewards or promotions.

Payment Information

Payments are processed through third-party payment processors such as Square. While we do not store full payment card details, we may receive limited transaction-related information necessary to complete purchases and maintain records.

Device and Usage Information

We automatically collect certain information about your device and how you interact with the Services. This may include device type, operating system, application usage data, session activity, and general diagnostic information used to improve functionality and performance.

Location Information

With your permission, we may collect location information from your device in order to provide features such as identifying nearby store locations or enabling location-based functionality

within the Services. Location data may be derived from GPS signals, IP address, or other device-based settings.

Communications and Support Information

If you contact us for support or otherwise communicate with us, we may collect the content of your communications and any additional information you provide.

Audio, Visual, and In-Store Information

Certain retail locations may utilize video surveillance systems for safety, security, and operational purposes. These systems may capture audio and visual information in accordance with applicable laws.

Inferences

We may derive insights or inferences from the information collected to better understand user behavior and improve our Services.

4. Sources of Information

In addition to the information we collect directly from you, we may obtain information from other sources, including:

● Third-party login providers (e.g., social login platforms)

● Payment processors

● Service providers supporting our operations

● Other users (for example, if a purchase is made on your behalf)

● Publicly available sources

5. How We Use Your Information

We use the information we collect for a variety of business and operational purposes.

We process personal information to provide and maintain the Services, including processing transactions, fulfilling orders, managing accounts, maintaining wallet balances, and administering the loyalty program.

We use your information to communicate with you regarding your account, transactions, and service-related updates, including sending SMS messages from Ugly Donuts & Corn Dogs (operated by HQ. Ugly Foods and Service Corp) for verification, order confirmations, and pickup-ready notifications, as well as push notifications within the application.

Message frequency varies based on your activity (typically 1–5 messages per order).

Message and data rates may apply.

You may reply STOP to unsubscribe from SMS messages at any time or HELP for assistance.

We also use information to improve and optimize the performance of the Services, including analyzing usage patterns, diagnosing technical issues, and enhancing user experience.

In addition, we may use personal information to detect, prevent, and investigate fraud, security incidents, or other potentially prohibited or illegal activities.

Where permitted by law and subject to your preferences, we may use your information to provide promotional communications or offers in the future.

6. How We Disclose Your Information

We may disclose your information to third parties as necessary to operate our business and provide the Services.

We share information with service providers that perform functions on our behalf, including payment processing, messaging services (such as SMS providers), hosting, and customer support. These service providers are contractually obligated to use your information only for the purposes of providing services to us.

We may also share information among our affiliated entities and independently operated locations for purposes such as order fulfillment, customer support, and operational consistency.

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

We may disclose information where required by law, regulation, or legal process, or where we believe disclosure is necessary to protect the rights, safety, or property of the Company, our users, or others.

7. Cookies and Similar Technologies

We and our service providers may use cookies and similar technologies to collect information about your interactions with the Services. These technologies help us maintain functionality, improve performance, and understand how users engage with our platform.

You may be able to control or disable certain tracking technologies through your device or browser settings; however, doing so may affect the functionality of the Services.

8. Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, disclosure, alteration, or destruction. However, no system is completely secure, and we cannot guarantee absolute security.

You are responsible for maintaining the confidentiality of your account credentials and for safeguarding your devices.

9. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Policy, including providing Services, complying with legal obligations, resolving disputes, and enforcing agreements.

If you delete your account, your personal information will be deleted or anonymized, except where retention is required by law or necessary for legitimate business purposes.

10. Children’s Privacy

The Services are not intended for use by individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that such information has been collected, we will take steps to delete it.

11. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information, including the right to access, correct, or delete your data.

You may also have the right to manage your communication preferences, including opting out of certain communications such as SMS messages or push notifications.

Requests may be submitted by contacting us using the information provided below. We may take reasonable steps to verify your identity before processing your request.

12. Loyalty Program Disclosure

Participation in the Ugly Donuts & Corn Dogs loyalty program involves the collection and use of personal information as described in this Policy. Participation is voluntary, and users may withdraw at any time by deleting their account.

If you choose to withdraw or delete your account, any accumulated rewards, points, or benefits will be permanently lost.

13. International Data Transfers

Your information may be processed and stored in the United States or other jurisdictions where our service providers operate. By using the Services, you consent to such transfers.

14. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, you may contact us at:

HQ. UGLY FOODS AND SERVICE CORP

109 Roosevelt Ave., Belleville, NJ, 07109

Email: hq@uglydonutsncorndogs.com