PRIVACY POLICY
Last Updated: 3 September 2026
Chicago Chicken City Sdn. Bhd. (Company Registration No. 202101016220 (1416520-W)) ("Chicago Chicken City", "we", "us", or "our") respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how we collect, use, disclose, store, protect and otherwise process personal data when you visit or use www.chicagochickencity.com (the "Website"), contact us, interact with our online services, participate in our promotions, apply for employment, visit our outlets, or otherwise communicate with us.
Chicago Chicken City operates food and beverage outlets in Malaysia and provides information about our food, menus, promotions, outlets, delivery services, career opportunities and other related services through the Website.
By accessing or using the Website, submitting your personal data to us, or otherwise interacting with us, you acknowledge that you have read and understood this Privacy Policy.
If you do not agree with this Privacy Policy, please do not provide personal data to us or use any part of the Website that requires the submission of personal data.
1. WHO WE ARE
The Website is operated by:
Chicago Chicken City Sdn. Bhd.
Company Registration No.: 202101016220 (1416520-W)
Registered/business address:
No. 6, Jalan PU 13/2,
Taman Puchong Utama,
47100 Puchong, Selangor, Malaysia
Website: www.chicagochickencity.com
For privacy-related enquiries, please contact us using the contact information made available on our Website.
2. WHAT IS PERSONAL DATA?
For the purposes of this Privacy Policy, "personal data" generally means information relating directly or indirectly to an identifiable individual.
Depending on how you interact with us, this may include:
Full name;
Email address;
Telephone or mobile number;
Delivery or correspondence address;
Date of birth or age, where relevant;
Gender, where voluntarily provided and relevant;
Account or login information, where applicable;
Order, transaction or purchase information;
Information relating to your enquiries, feedback, complaints or requests;
Employment or recruitment information if you apply for a position with us;
Information contained in communications with us;
Photographs, videos or other information that you voluntarily submit;
Marketing preferences;
Information collected through cookies and similar technologies;
IP address;
Browser type and version;
Device information;
Operating system;
Approximate location information derived from your device or IP address;
Website usage and browsing information; and
Other information that you voluntarily provide to us.
We will only request or collect personal data that is reasonably necessary for the relevant purpose.
3. HOW WE COLLECT YOUR PERSONAL DATA
We may collect personal data from you through various means, including:
3.1 When you use our Website
We may collect information when you:
Browse our Website;
View our menus;
Search for our outlets;
View promotions;
Submit an enquiry;
Contact us;
Submit feedback;
Subscribe to communications or marketing, where available;
Participate in promotions, contests or campaigns;
Submit information through forms;
Apply for employment;
Interact with our Website features; or
Otherwise communicate with us online.
3.2 When you contact us
We may collect information when you contact us by email, telephone, social media, online forms or other communication channels.
3.3 When you visit our outlets
Depending on the circumstances, information may be collected when you visit one of our outlets, including information associated with purchases, customer enquiries, feedback, promotions or security systems.
Certain outlets or premises may use CCTV or other security systems for safety, security, loss prevention and operational purposes.
3.4 From third parties
Where permitted by applicable law, we may receive personal data from third parties, including:
Delivery and ordering platforms;
Payment service providers;
Marketing and advertising partners;
Technology and website service providers;
Recruitment platforms;
Business partners;
Social media platforms;
Analytics providers; and
Other service providers acting on our behalf.
Where we receive personal data from third parties, we will handle such information in accordance with applicable laws and this Privacy Policy.
4. INFORMATION COLLECTED AUTOMATICALLY
When you visit our Website, certain information may be collected automatically.
This may include:
IP address;
Browser information;
Device type;
Operating system;
Website pages visited;
Date and time of access;
Referring website;
General geographic information;
Website interactions;
Technical information about your connection; and
Other information generated through your use of the Website.
This information may be used for website operation, security, analytics, troubleshooting, performance monitoring and improving our services.
Where appropriate, this information may be combined with other information we hold about you.
5. COOKIES AND SIMILAR TECHNOLOGIES
Our Website may use cookies, pixels, tags, web beacons, local storage and similar technologies.
Cookies are small files that may be stored on your device when you visit a website.
We may use cookies for purposes including:
Operating the Website;
Remembering preferences;
Improving website functionality;
Understanding how visitors use our Website;
Measuring website performance;
Improving user experience;
Security and fraud prevention;
Marketing and advertising, where applicable; and
Providing relevant content.
Some cookies may be necessary for the Website to function properly, while others may be used for analytics or other purposes.
You may be able to control or disable cookies through your browser settings. However, disabling certain cookies may affect the functionality or availability of some Website features.
Where required by applicable law, we will provide appropriate choices or notices regarding non-essential cookies.
6. WHY WE COLLECT AND USE YOUR PERSONAL DATA
We may collect, use and process your personal data for the following purposes:
6.1 Providing our services
To:
Respond to enquiries;
Process requests;
Provide information about our products and services;
Facilitate orders or deliveries where applicable;
Provide customer support;
Handle complaints and feedback;
Process transactions; and
Provide other services requested by you.
6.2 Website operation
To:
Operate and maintain our Website;
Improve Website functionality;
Diagnose technical problems;
Monitor Website performance;
Prevent fraudulent or unauthorised activities; and
Protect the security of our Website.
6.3 Promotions and marketing
Where permitted by applicable law and, where required, with your consent, we may use your personal data to:
Send promotional information;
Inform you about new products;
Inform you about promotions;
Send campaign information;
Invite you to participate in contests or events;
Provide personalised marketing; and
Conduct customer engagement activities.
You may opt out of marketing communications at any time by following the unsubscribe instructions provided in the communication or by contacting us.
6.4 Customer relationship management
We may use personal data to:
Maintain customer records;
Understand customer preferences;
Analyse customer feedback;
Improve our products and services;
Conduct customer satisfaction activities; and
Manage customer relationships.
6.5 Recruitment
If you apply for a job or submit recruitment information to us, we may process your personal data to:
Assess your application;
Contact you regarding your application;
Conduct interviews;
Verify information provided;
Assess your suitability for employment;
Manage recruitment activities; and
Maintain recruitment records.
6.6 Security and fraud prevention
We may process information to:
Protect our customers, employees and premises;
Detect and prevent fraud;
Investigate suspicious activities;
Protect our systems;
Prevent misuse of our Website; and
Enforce our security procedures.
6.7 Legal and regulatory purposes
We may use personal data where necessary to:
Comply with applicable laws and regulations;
Respond to lawful requests;
Cooperate with government authorities;
Establish, exercise or defend legal claims;
Investigate suspected unlawful activities; and
Protect our legal rights and interests.
7. LEGAL BASIS FOR PROCESSING
Where applicable, we process personal data in accordance with the requirements and principles of Malaysia's Personal Data Protection Act 2010 (Act 709), as amended from time to time, and other applicable laws.
Depending on the circumstances, processing may be carried out because:
You have provided consent;
Processing is necessary to provide a service or fulfil a request;
Processing is necessary for our legitimate business purposes;
Processing is necessary to comply with a legal or regulatory obligation;
Processing is necessary to protect rights, safety or property; or
Processing is otherwise permitted by applicable law.
Where consent is required, you may withdraw your consent subject to applicable legal or contractual restrictions.
8. DISCLOSURE OF PERSONAL DATA
We do not sell your personal data as a standalone commercial product.
However, we may disclose or provide access to personal data to selected third parties where reasonably necessary for the purposes described in this Privacy Policy.
These parties may include:
Our employees and authorised personnel;
Companies within our corporate group;
Professional advisers;
IT and technology service providers;
Website hosting providers;
Cloud service providers;
Payment processors;
Delivery and logistics providers;
Ordering platforms;
Marketing and advertising service providers;
Analytics providers;
Recruitment service providers;
Customer service providers;
Security service providers;
Auditors;
Legal advisers;
Insurance providers;
Government authorities and regulators; and
Other service providers engaged to support our business operations.
Third parties that process personal data on our behalf may be required to maintain appropriate confidentiality and security safeguards.
We may also disclose personal data where required or permitted by law.
9. THIRD-PARTY WEBSITES AND SERVICES
Our Website may contain links to websites, applications, social media pages, delivery platforms, ordering platforms or other services operated by third parties.
These third parties operate independently from Chicago Chicken City and may have their own privacy policies and terms.
We are not responsible for the privacy practices, content, security or policies of third-party websites or services.
We encourage you to review the applicable privacy policy of any third-party service before submitting personal data.
This includes third-party services that may be accessed through:
Delivery links;
Social media links;
Maps or location services;
Recruitment platforms;
Online ordering services;
Payment services; and
Other external links.
10. SOCIAL MEDIA
We may maintain or operate social media accounts and may provide links to social media platforms through our Website.
If you interact with us through a social media platform, the platform may collect information about you according to its own privacy policy and terms.
Information that you choose to make publicly available through social media may be visible to other users.
We encourage you to review the privacy settings and policies of the relevant social media platform.
11. PAYMENT INFORMATION
Where online payment services are provided through third-party payment providers, your payment information may be processed directly by the relevant payment provider.
Unless otherwise stated at the point of collection, Chicago Chicken City does not intend to retain complete payment card information such as full card numbers or security codes on its own systems.
Payment providers may collect and process payment information in accordance with their own terms and privacy policies.
You should review the privacy policy of the applicable payment provider before completing a transaction.
12. DELIVERY AND ORDER INFORMATION
Where ordering or delivery services are available through the Website or third-party platforms, we may process information necessary to fulfil your order.
This may include:
Name;
Telephone number;
Delivery address;
Order information;
Payment status;
Order history; and
Information required to communicate with you about your order.
Where a third-party ordering or delivery platform is used, your information may also be subject to that platform's privacy policy.
13. EMPLOYMENT AND RECRUITMENT DATA
If you apply for employment with Chicago Chicken City, we may collect information such as:
Name;
Contact information;
Employment history;
Education and qualifications;
Skills and experience;
Resume/CV information;
References;
Interview information;
Work eligibility information;
Information necessary for employment administration; and
Other information that you voluntarily provide during recruitment.
We use recruitment information for evaluating applications, conducting recruitment and managing potential or actual employment relationships.
Where permitted by law, we may retain unsuccessful applications for a reasonable period for future recruitment opportunities, unless you request otherwise or applicable law requires a different retention period.
14. CHILDREN'S PRIVACY
Our Website is intended for a general audience and is not specifically directed at children.
We do not knowingly seek to collect unnecessary personal data from children.
If you are a parent or legal guardian and believe that a child has provided personal data to us without appropriate permission, please contact us.
If we become aware that we have collected personal data from a child in circumstances where collection was not appropriate or lawful, we will take reasonable steps to address the situation in accordance with applicable law.
15. DATA RETENTION
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including:
Providing our services;
Maintaining business and transaction records;
Managing customer relationships;
Handling complaints;
Meeting legal and regulatory obligations;
Resolving disputes;
Preventing fraud; and
Protecting our legitimate business interests.
The appropriate retention period may vary depending on the nature of the information and the purpose for which it was collected.
When personal data is no longer required, we may securely delete, destroy or anonymise it in accordance with our internal procedures and applicable legal requirements.
16. DATA SECURITY
We take reasonable and appropriate measures to protect personal data against:
Loss;
Misuse;
Unauthorised access;
Unauthorised disclosure;
Unauthorised alteration;
Destruction; and
Other forms of unlawful or unauthorised processing.
Security measures may include appropriate technical, administrative and organisational safeguards.
However, no method of transmission over the Internet or electronic storage system can be guaranteed to be completely secure.
Accordingly, while we take reasonable steps to protect your personal data, we cannot guarantee absolute security.
If you suspect that your personal data or interaction with our Website has been compromised, please contact us promptly.
17. DATA BREACHES
If we become aware of a personal data breach affecting personal data under our control, we will assess and respond to the incident in accordance with applicable laws, regulatory requirements and our internal incident-response procedures.
Where required by law, we will notify the relevant authorities and/or affected individuals within the applicable timeframes.
18. CROSS-BORDER TRANSFER OF PERSONAL DATA
Some of our service providers, technology providers, cloud providers or business partners may operate outside Malaysia.
As a result, your personal data may be transferred to, stored in, or processed in countries outside Malaysia.
Where personal data is transferred outside Malaysia, we will take reasonable steps to ensure that the transfer and subsequent processing are carried out in accordance with applicable data protection laws and appropriate safeguards.
By providing personal data to us, you acknowledge that such transfers may occur where necessary for the purposes described in this Privacy Policy.
19. YOUR RIGHTS
Subject to applicable law and any relevant exemptions, you may have rights relating to your personal data, including the right to:
19.1 Request access
You may request access to personal data that we hold about you.
19.2 Request correction
You may request that inaccurate, incomplete or outdated personal data be corrected or updated.
19.3 Withdraw consent
Where processing is based on consent, you may withdraw your consent, subject to applicable legal or contractual restrictions.
19.4 Object to or limit certain processing
Where applicable, you may request that we stop or limit certain processing of your personal data.
19.5 Opt out of direct marketing
You may request that we stop sending direct marketing communications to you.
You can usually unsubscribe using the instructions included in the relevant communication.
19.6 Data portability
Where a right to data portability applies under applicable law, you may have the right to request your personal data in a prescribed or commonly used format and/or request its transmission to another data controller, subject to applicable requirements and limitations.
19.7 Other rights
You may have additional rights under applicable data protection legislation.
To exercise a right, please contact us using the contact details provided in this Privacy Policy.
We may need to verify your identity before processing certain requests.
20. WITHDRAWING CONSENT
If we process your personal data based on your consent, you may withdraw that consent by contacting us.
Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
Please note that withdrawing consent may affect our ability to provide certain services or respond to certain requests where the information is necessary for those purposes.
We will explain any material consequences where reasonably necessary.
21. MARKETING COMMUNICATIONS
Where permitted by law, we may send you marketing communications relating to Chicago Chicken City.
These communications may include:
Promotions;
New products;
Special offers;
Events;
Campaigns;
Competitions;
Outlet information; and
Other Chicago Chicken City updates.
You may opt out of marketing communications at any time.
If you unsubscribe from marketing communications, we may still send you non-marketing communications where necessary, such as service messages, transaction-related information, security notifications or responses to enquiries.
22. ACCURACY OF PERSONAL DATA
We rely on the personal data provided to us being accurate, complete and current.
You should notify us if your personal data changes or if you discover that information we hold about you is inaccurate.
We may take reasonable steps to verify or update information where appropriate.
23. DATA MINIMISATION
We aim to collect only personal data that is reasonably necessary for the purposes described in this Privacy Policy.
You are generally not required to provide personal data when simply browsing publicly available areas of our Website.
However, certain services, requests, applications or transactions may require specific information.
If you choose not to provide information that is necessary for a particular service, we may be unable to provide that service or process your request.
24. ANALYTICS AND WEBSITE IMPROVEMENT
We may use analytics technologies to understand:
How visitors use our Website;
Which pages are viewed;
Website traffic;
Website performance;
Technical problems;
General visitor behaviour; and
How we can improve the Website.
Analytics information may be collected through cookies or similar technologies and may be provided by third-party analytics providers.
Where third-party analytics services are used, the relevant provider's privacy policy may also apply.
25. ADVERTISING AND REMARKETING
Where applicable, we may use advertising technologies to:
Promote our products and services;
Measure advertising performance;
Understand advertising effectiveness;
Display relevant advertisements;
Create audience segments; and
Improve marketing campaigns.
These technologies may involve cookies, pixels or similar identifiers.
Where applicable, third-party advertising providers may process information according to their own privacy policies.
You may be able to control certain advertising preferences through your browser, device or relevant advertising platform.
26. CCTV AND SECURITY RECORDINGS
Certain Chicago Chicken City outlets or premises may use CCTV or other security monitoring systems.
Where used, such systems may collect images or recordings of individuals entering or moving within monitored areas.
CCTV may be used for purposes including:
Safety;
Security;
Theft prevention;
Fraud prevention;
Incident investigation;
Protection of customers and employees;
Protection of property; and
Compliance with legal requirements.
CCTV recordings will generally be retained only for as long as reasonably necessary, subject to applicable laws and operational requirements.
27. CONFIDENTIALITY
We will take reasonable steps to maintain the confidentiality of personal data and limit access to authorised personnel and service providers who reasonably require access for legitimate business purposes.
Our employees, contractors and service providers may be subject to confidentiality obligations where appropriate.
28. CORPORATE TRANSACTIONS
If Chicago Chicken City undergoes or considers a corporate transaction, such as:
Merger;
Acquisition;
Restructuring;
Sale of assets;
Investment;
Reorganisation; or
Transfer of part of our business,
personal data may be transferred as part of the relevant transaction where permitted by applicable law.
Any such transfer will be handled in accordance with applicable legal requirements.
29. LEGAL DISCLOSURES
We may disclose personal data where we reasonably believe that disclosure is:
Required by law;
Required by a court or legal process;
Requested by a government authority or regulator;
Necessary to protect our rights;
Necessary to investigate suspected fraud or unlawful activity;
Necessary to protect the safety of individuals; or
Otherwise permitted by applicable law.
30. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time.
Changes may be made to reflect:
Changes in our business;
Changes to our Website;
New services or technologies;
Changes in data processing activities;
Changes in legal or regulatory requirements; or
Improvements to our privacy practices.
When we update this Privacy Policy, we will change the "Last Updated" date at the beginning of the policy.
Where required by law, we will provide additional notice or obtain consent for material changes.
We encourage you to review this Privacy Policy periodically.
31. GOVERNING LAW
This Privacy Policy shall be governed by and interpreted in accordance with the laws of Malaysia.
Any dispute relating to this Privacy Policy shall be subject to the applicable jurisdiction of the courts of Malaysia, unless otherwise required by applicable law.
32. CONTACT US
If you have any questions, requests, complaints or concerns regarding this Privacy Policy or the way we process your personal data, please contact us.
Chicago Chicken City Sdn. Bhd.
Company Registration No.: 202101016220 (1416520-W)
Address:
No. 6, Jalan PU 13/2,
Taman Puchong Utama,
47100 Puchong, Selangor, Malaysia.
Website:
www.chicagochickencity.com
For privacy-related requests, please include sufficient information for us to understand your request and, where necessary, verify your identity.
We will endeavour to respond to legitimate privacy requests within the timeframe required by applicable law.
33. IMPORTANT NOTICE
This Privacy Policy describes Chicago Chicken City's general privacy practices.
The exact personal data collected and the purposes for which it is processed may depend on how you interact with us and which services you use.
For example, additional privacy terms may apply when you:
Place an order through a third-party delivery platform;
Make a payment through a third-party payment provider;
Apply for a position through a recruitment platform;
Interact with our social media accounts;
Use third-party mapping or location services; or
Access other third-party services linked from our Website.
Where a third party independently processes your personal data, that third party's privacy policy may also apply.
If there is any inconsistency between this Privacy Policy and a specific notice provided to you at the point of collection, the specific notice will apply to the extent permitted by applicable law.