Privacy Policy

Welcome to Chuys. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website chuys-food.rest, place orders, interact with our services, or otherwise engage with us. Please read this policy carefully. If you do not agree with the terms of this Privacy Policy, please discontinue use of our site and services.

This Privacy Policy applies to all users located in the United States and is designed to comply with applicable federal and state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), and other applicable state and federal regulations governing the collection, use, and protection of personal data.

1. About Us

Chuys is a food service business operating in the United States. We provide food-related products and services through our website and other channels. For the purposes of this Privacy Policy, Chuys acts as the data controller with respect to personal information collected from our customers, website visitors, and other individuals who interact with us.

2. Information We Collect

We collect information about you in a variety of ways depending on how you interact with our business and website. The categories of personal information we may collect include, but are not limited to, the following:

2.1 Personal Identification Information

When you create an account, place a food order, subscribe to our newsletter, make a reservation, participate in a promotion, or contact us directly, we may collect:

• Full name
• Email address
• Phone number
• Billing and delivery address
• Date of birth (where required for age verification or promotional purposes)
• Username and password (for account holders)
• Profile preferences and dietary restrictions you voluntarily provide

2.2 Payment and Transaction Information

When you place an order or make a purchase through our website or affiliated platforms, we collect payment-related information. Please note that full payment card details are processed by our third-party payment processors and are not stored directly on our servers. However, we may retain:

• Last four digits of your credit or debit card
• Billing name and address
• Transaction history and order details
• Purchase amounts and timestamps

2.3 Usage and Behavioral Data

As you navigate and use our website, we automatically collect certain information about your interactions, including:

• Pages viewed and time spent on each page
• Links clicked and features accessed
• Search queries entered on our website
• Items added to cart or wishlist
• Referring and exit URLs
• Frequency and duration of visits

2.4 Device and Technical Information

We collect technical data about the device and network you use to access our website, including:

• IP address
• Browser type and version
• Operating system and platform
• Device identifiers and hardware model
• Screen resolution and language settings
• Time zone settings
• Mobile carrier information (for mobile users)

2.5 Location Data

To provide location-based services such as delivery, we may collect:

• Precise geolocation (with your explicit consent, particularly on mobile devices)
• General location data derived from your IP address
• Delivery address you provide at checkout

2.6 Communications and Correspondence

When you contact us via email, contact forms, phone, or social media, we may collect and retain:

• The content of your messages and inquiries
• Contact details you provide in correspondence
• Records of any complaints or feedback
• Customer service interaction history

2.7 Cookies and Tracking Technologies

We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about your browsing behavior on our website. For more detailed information, please refer to Section 7 of this policy (Cookie Usage).

2.8 Information from Third Parties

We may receive information about you from third-party sources, including:

• Social media platforms (if you log in via social accounts or interact with our social pages)
• Third-party delivery and ordering platforms
• Analytics and advertising partners
• Publicly available databases
• Fraud detection and verification services

3. How We Use Your Information

We use the personal information we collect for a range of legitimate business purposes. Specifically, we use your information to:

3.1 Service Provision and Order Fulfillment

• Process and fulfill your food orders, including delivery and pickup coordination
• Manage your account and maintain your profile preferences
• Send order confirmations, receipts, and updates
• Process payments and prevent fraudulent transactions
• Handle returns, refunds, and complaints
• Provide customer support and respond to your inquiries

3.2 Marketing and Promotional Communications

• Send you promotional emails, newsletters, and special offers (with your consent or as otherwise permitted by law)
• Provide personalized menu recommendations based on your order history and preferences
• Notify you about new menu items, seasonal specials, and events
• Run loyalty programs, contests, and surveys
• Display targeted advertising through our website and third-party platforms

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any email we send or by contacting us at [email protected].

3.3 Analytics and Service Improvement

• Analyze website traffic patterns and user behavior to improve our website and user experience
• Monitor the performance of our online ordering system
• Conduct internal research and data analysis
• Develop new products, menu items, and features
• Perform A/B testing and website optimization

3.4 Legal and Security Purposes

• Comply with applicable laws, regulations, and legal processes
• Enforce our Terms of Service and other policies
• Detect, investigate, and prevent fraudulent or unauthorized activity
• Protect the rights, property, and safety of Chuys, our customers, and the public
• Respond to legal requests, subpoenas, or governmental inquiries

3.5 Business Operations

• Manage our day-to-day business operations and administrative functions
• Facilitate business transactions such as mergers, acquisitions, or asset sales
• Maintain business records in accordance with legal retention requirements

4. Sharing Your Information with Third Parties

We do not sell your personal information to third parties for their own independent marketing purposes. However, we may share your information in the following limited circumstances:

4.1 Service Providers and Business Partners

We engage trusted third-party service providers who assist us in operating our business and delivering our services. These may include:

• Payment processors — to handle secure payment transactions
• Delivery partners — to fulfill food delivery orders
• Email and communication platforms — to send transactional and marketing emails
• Cloud hosting and IT services — to store and manage data securely
• Analytics providers — to help us understand website usage (e.g., Google Analytics)
• Customer support software — to manage support tickets and inquiries
• Fraud detection services — to verify transactions and protect against abuse

All service providers are required to handle your personal information in accordance with our instructions and applicable privacy laws, and are prohibited from using your data for their own purposes.

4.2 Legal Requirements and Law Enforcement

We may disclose your personal information if we are required to do so by law, or if we believe in good faith that such disclosure is necessary to:

• Comply with a legal obligation, court order, subpoena, or government request
• Cooperate with law enforcement agencies or regulatory authorities
• Enforce our legal rights or defend against legal claims
• Protect the vital interests of any individual

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or part of our assets, your personal information may be transferred to the acquiring entity. We will notify you via email or prominent notice on our website before your information is transferred and becomes subject to a different privacy policy.

4.4 With Your Consent

We may share your information with other third parties when we have obtained your explicit consent to do so, such as when you participate in a co-branded promotion or third-party loyalty program.

4.5 Aggregate and De-Identified Data

We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you, for industry research, analytics, marketing, or other business purposes.

5. Data Security

We take the security of your personal information seriously and implement a range of technical, administrative, and physical safeguards designed to protect your data from unauthorized access, disclosure, alteration, or destruction.

5.1 Security Measures We Employ

• SSL/TLS Encryption: All data transmitted between your browser and our website is encrypted using industry-standard Secure Sockets Layer (SSL) or Transport Layer Security (TLS) protocols.
• Access Controls: Access to personal information is restricted to authorized personnel on a need-to-know basis, with role-based access controls and strong authentication requirements.
• Secure Payment Processing: We use PCI-DSS compliant payment processors to handle all payment card transactions. We do not store full card numbers on our systems.
• Regular Security Assessments: We conduct periodic security reviews and vulnerability assessments of our systems and infrastructure.
• Data Minimization: We limit the collection and retention of personal data to what is strictly necessary for the purposes described in this policy.
• Employee Training: Our staff receive regular training on data protection, privacy best practices, and security protocols.
• Incident Response: We maintain an incident response plan to promptly address any data breaches or security events, including notifying affected individuals as required by law.

6. Your Privacy Rights

Depending on your state of residence, you may have specific rights regarding your personal information. We are committed to honoring these rights in accordance with applicable law.

6.1 Rights Under the California Consumer Privacy Act (CCPA/CPRA)

If you are a California resident, you have the following rights under the CCPA as amended by the CPRA:

6.2 General Privacy Rights (All US Residents)

Regardless of your state of residence, we extend the following rights to all users of our website and services:

• Right to Access: You may request a copy of the personal information we hold about you.
• Right to Correction: You may request that we update or correct inaccurate information in your account or our records.
• Right to Deletion: You may request that we delete your personal information, subject to applicable legal requirements.
• Right to Withdraw Consent: Where we rely on your consent to process your information, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to Opt Out of Marketing: You can opt out of receiving marketing communications from us at any time by following the unsubscribe instructions in our emails or contacting us directly.

6.3 How to Exercise Your Rights

To exercise any of the rights described above, please submit a verifiable request by:

• Emailing us at [email protected] with the subject line "Privacy Rights Request"
• Visiting our website at chuys-food.rest and using our contact form

We will respond to verified requests within 45 days of receipt. If we require more time (up to 90 days total), we will notify you of the extension in writing. We may need to verify your identity before processing your request. We will not charge a fee for processing your request unless it is excessive, repetitive, or manifestly unfounded.

7. Cookie Usage

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and deliver personalized content and advertising.

7.1 What Are Cookies?

Cookies are small text files placed on your device by websites you visit. They are widely used to make websites work more efficiently, to remember your preferences, and to provide information to website owners.

7.2 Types of Cookies We Use

• Essential Cookies: These cookies are strictly necessary for the website to function properly. They enable core features such as security, account login, and online ordering. You cannot opt out of these cookies.
• Performance and Analytics Cookies: These cookies collect information about how visitors use our website, such as which pages are visited most often and whether users receive error messages. We use this data to improve website performance.
• Functionality Cookies: These cookies allow our website to remember your choices (such as your language preference or location) and provide enhanced, more personalized features.
• Marketing and Targeting Cookies: These cookies are used to deliver advertisements more relevant to you and your interests. They also limit how many times you see an advertisement and help measure the effectiveness of advertising campaigns.

7.3 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling certain cookies may affect the functionality of our website and your ability to place orders or access certain features. For more detailed information about the cookies we use and how to manage them, please refer to our full Cookie Policy available on our website at chuys-food.rest.

8. Data Retention

We retain your personal information only for as long as is necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

8.1 Retention Guidelines

After the applicable retention period expires, we will securely delete or anonymize your personal information in accordance with our data disposal procedures. In some cases, we may retain information in anonymized form for statistical or research purposes.

9. Children's Privacy

Our food services are designed for adult consumers. By using our website and placing orders, you confirm that you are at least 18 years of age. We do not knowingly solicit or collect personal information from minors. If we learn that we have inadvertently collected personal information from a person under 18 years of age, we will take prompt steps to delete that information from our systems.

This policy is consistent with the requirements of the Children's Online Privacy Protection Act (COPPA), which prohibits the collection of personal information from children under 13 without verifiable parental consent. We do not direct our website or services to children, and our website does not contain content specifically designed to attract children.

If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at [email protected]. We will investigate and take appropriate action, including deletion of the relevant information.

10. International Data Transfers

Chuys is based in the United States and our primary data processing activities occur within the United States. However, some of our third-party service providers may be located in, or process data from, other countries.

10.1 Cross-Border Data Transfers

If your personal information is transferred to, stored in, or processed in a country other than the United States, we will take appropriate measures to ensure that such transfers comply with applicable law and that your information receives an adequate level of protection. These measures may include:

• Entering into data processing agreements with our service providers that include appropriate data transfer clauses
• Using service providers that have adopted recognized privacy frameworks or certifications
• Implementing contractual safeguards that require service providers to protect your data

10.2 US-Based Users

For users located in the United States, all personal information is primarily stored and processed on servers located within the United States. We comply with applicable US federal and state privacy laws, including the CCPA/CPRA for California residents and applicable FTC regulations.

By using our website and services, you acknowledge and consent to the transfer of your personal information to locations outside your country of residence, if applicable, in accordance with this Privacy Policy.

11. Third-Party Websites and Links

Our website may contain links to third-party websites, social media platforms, third-party ordering apps, and other online services that are not operated or controlled by Chuys. This Privacy Policy does not apply to those third-party websites or their data practices.

We are not responsible for the privacy practices or content of any third-party websites. We encourage you to review the privacy policies of any third-party services you access through links on our website before providing any personal information. The inclusion of a link on our website does not imply our endorsement of the third party's privacy practices.

12. California Privacy Rights — Additional Disclosures

If you are a California resident, the following additional disclosures apply to you under the CCPA/CPRA:

12.1 Categories of Personal Information Collected in the Past 12 Months

• Identifiers (name, email address, IP address, account name)
• Personal information categories listed in California Customer Records statute (name, telephone number, billing address, payment card information)
• Commercial information (order history, purchasing preferences)
• Internet or other electronic network activity information (browsing history, search history, interactions with our website)
• Geolocation data (general location derived from IP; precise location with consent)
• Inferences drawn from other personal information (e.g., food preferences, spending patterns)

12.2 Business or Commercial Purposes for Collection

We collect personal information for the business and commercial purposes described in Section 3 of this policy, including service provision, analytics, marketing, legal compliance, and security.

12.3 Do Not Sell or Share My Personal Information

California residents have the right to opt out of the sale or sharing of their personal information for cross-context behavioral advertising. If you wish to exercise this right, please contact us at [email protected] with the subject line "Do Not Sell or Share My Personal Information." We will process your request in accordance with the CCPA/CPRA requirements.

12.4 Shine the Light Law

Under California Civil Code Section 1798.83 ("Shine the Light" law), California residents who provide personal information may request information about our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please contact us at [email protected].

13. Changes to This Privacy Policy

We reserve the right to update, modify, or revise this Privacy Policy at any time to reflect changes in our business practices, legal requirements, or data processing activities. When we make material changes to this policy, we will:

• Update the "Last Updated" date at the top of this policy
• Post a prominent notice on our website
• Send an email notification to registered users where required by law

We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use, and protect your personal information. Your continued use of our website or services after any changes become effective constitutes your acceptance of the revised Privacy Policy.

14. Filing a Complaint

If you believe that we have not handled your personal information in accordance with applicable law, you have the right to file a complaint with the relevant data protection authority or consumer protection agency.

14.1 California Residents

California residents may file a complaint with the California Privacy Protection Agency (CPPA), the state agency responsible for enforcing the CCPA/CPRA:

14.2 All US Residents — Federal Consumer Protection

If you believe our data practices violate federal consumer protection laws, you may file a complaint with the Federal Trade Commission (FTC):

Before filing a complaint with a regulatory authority, we encourage you to contact us directly so that we can attempt to resolve your concerns. We are committed to addressing privacy-related complaints in a timely and fair manner.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact our Privacy team. We are committed to addressing your inquiries promptly and transparently.

When contacting us regarding a privacy rights request, please include your full name, email address, the nature of your request, and sufficient detail to allow us to verify your identity and process your inquiry efficiently. We will acknowledge receipt of your request and respond within the timeframes required by applicable law.