Privacy Policy

This Privacy Policy describes how Chuy's ("we," "us," or "our") collects, uses, discloses, and protects your personal information when you visit our website at meal-chuys.digital, use our online ordering services, subscribe to our communications, or otherwise interact with us. We are committed to safeguarding your privacy and handling your personal data with transparency, care, and respect for applicable law.

Please read this Privacy Policy carefully. By accessing or using our website and services, you acknowledge that you have read, understood, and agree to be bound by the terms of this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our website and services immediately.

1. About Us

Chuy's operates as a food service business in the United States. We are dedicated to providing our customers with an exceptional dining and online ordering experience. For all privacy-related inquiries, you may contact us using the information provided below:

2. Scope of This Privacy Policy

This Privacy Policy applies to all personal information collected through:

• Our website located at meal-chuys.digital
• Online food ordering and reservation systems
• Email newsletters and promotional communications
• Customer loyalty or rewards programs
• Customer support interactions (phone, email, or chat)
• Social media pages and third-party platforms where we are present
• Any other digital interaction between you and Chuy's

This policy does not apply to the practices of third-party companies or individuals that we do not own or control, or to individuals that we do not employ or manage, including third-party service providers whose own privacy policies govern their handling of your data.

3. Information We Collect

We collect several types of information from and about users of our website and services. The categories of personal information we collect are described in detail below.

3.1 Personal Identification Information

When you create an account, place an order, make a reservation, sign up for our mailing list, or otherwise provide information to us directly, we may collect:

• Full name
• Email address
• Phone number
• Mailing or delivery address
• Date of birth (for age verification and promotional purposes)
• Username and password for account management
• Payment information (credit card number, billing address — processed securely through third-party payment processors)
• Order history and food preferences
• Dietary restrictions or allergy information that you voluntarily provide

3.2 Usage and Behavioral Data

As you navigate and interact with our website, we automatically collect certain information about your browsing behavior, including:

• Pages visited and time spent on each page
• Links clicked and features accessed
• Search queries entered on our website
• Items viewed, added to cart, or purchased
• Referral URLs (the page you visited before arriving at our site)
• Frequency and duration of visits

3.3 Device and Technical Information

We automatically collect technical information about the devices you use to access our website, including:

• IP address
• Browser type and version
• Operating system and platform
• Device type (desktop, mobile, tablet)
• Screen resolution
• Time zone setting and geographic location (at city or regional level)
• Cookie identifiers and session tokens
• Mobile device identifiers (if applicable)

3.4 Cookie and Tracking Data

We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about your interactions with our website. Please refer to Section 9 of this Privacy Policy for detailed information about our use of cookies and your choices regarding them.

3.5 Communications Data

When you contact us for customer support, submit feedback, or communicate with us through any channel, we may collect and retain:

• The content of your messages or inquiries
• Your contact information provided in the communication
• Records of correspondence for quality assurance and legal purposes

3.6 Information from Third Parties

We may also receive information about you from third parties, including:

• Social media platforms if you choose to log in or interact with us through them
• Third-party food delivery platforms or partners
• Analytics providers and advertising networks
• Publicly available databases

4. How We Use Your Information

We use the personal information we collect for a variety of legitimate business purposes, as described below. Our use of your data is guided by principles of necessity, proportionality, and transparency.

4.1 Service Provision and Order Fulfillment

• To process and fulfill your food orders, reservations, and related transactions
• To create and manage your customer account
• To communicate order status updates, confirmations, and delivery notifications
• To handle returns, refunds, or complaints related to your orders
• To manage loyalty or rewards programs you have enrolled in

4.2 Customer Support and Communications

• To respond to your inquiries, questions, and support requests
• To send you administrative communications about your account or our services
• To notify you of changes to our menu, policies, or terms

4.3 Analytics and Service Improvement

• To analyze website traffic patterns and user behavior
• To improve the functionality, design, and content of our website
• To develop new menu items, features, and services
• To conduct internal research and data analysis
• To monitor and prevent fraudulent or unauthorized activity

4.4 Marketing and Promotional Communications

With your consent or where permitted by applicable law, we may use your information to:

• Send you promotional emails, newsletters, and special offers
• Personalize marketing messages based on your preferences and order history
• Display targeted advertisements on our website and on third-party platforms
• Invite you to participate in surveys, contests, or promotional events

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any of our emails or by contacting us at [email protected].

4.5 Legal and Compliance Purposes

• To comply with applicable federal, state, and local laws and regulations
• To enforce our Terms of Service and other policies
• To protect the rights, property, and safety of Chuy's, our customers, and the public
• To respond to legal process, court orders, or regulatory inquiries

5. Sharing Your Information with Third Parties

We do not sell, rent, or trade your personal information to unaffiliated third parties for their own marketing purposes without your explicit consent. However, we do share your information in specific circumstances as described below.

5.1 Service Providers and Vendors

We may share your personal information with trusted third-party service providers who assist us in operating our business and providing services to you. These providers are contractually obligated to keep your information confidential and use it only for the purposes for which it was disclosed. Such service providers may include:

• Payment processors and financial institutions (e.g., for processing credit card transactions)
• Cloud hosting and data storage providers
• Email marketing and communication platforms
• Analytics providers (e.g., Google Analytics)
• Customer relationship management (CRM) software providers
• Food delivery and logistics partners
• Website performance and security services
• Fraud detection and prevention services

5.2 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal information may be transferred to the acquiring or successor entity. We will provide notice before your personal information is transferred and becomes subject to a different privacy policy.

5.3 Legal Requirements and Safety

We may disclose your personal information if we believe in good faith that such disclosure is necessary to:

• Comply with a legal obligation, subpoena, court order, or government request
• Enforce our Terms of Service or other agreements
• Protect the rights, property, or safety of Chuy's, our employees, customers, or the public
• Investigate and prevent fraud, security breaches, or illegal activity

5.4 With Your Consent

We may share your information with third parties when you have explicitly provided your consent to do so, such as when you participate in joint promotions or co-branded services with our partners.

5.5 Aggregated and Anonymized Data

We may share aggregated or de-identified information that cannot reasonably be used to identify you with third parties for research, marketing, analytics, or other business purposes without restriction.

6. Data Security

We take the security of your personal information seriously and implement a range of technical, administrative, and physical safeguards designed to protect your data against unauthorized access, loss, misuse, alteration, or disclosure. Our security measures include:

• Encryption: We use Secure Socket Layer (SSL) / Transport Layer Security (TLS) encryption to protect data transmitted between your browser and our servers.
• Access Controls: We restrict access to personal information to authorized employees and contractors who need it to perform their job functions, and require them to maintain strict confidentiality.
• Secure Payment Processing: We do not store full credit card numbers. All payment transactions are processed through PCI-DSS compliant third-party payment processors.
• Regular Security Assessments: We conduct periodic reviews of our data collection, storage, and processing practices to assess and improve security.
• Data Minimization: We collect only the personal information that is necessary for the purposes described in this policy.
• Incident Response: We maintain a data breach response plan and will notify affected users and relevant authorities in accordance with applicable law in the event of a qualifying data breach.

7. Your Rights and Choices

Depending on your location and the applicable law, you may have certain rights with respect to your personal information. We are committed to honoring these rights and providing you with meaningful control over your data.

7.1 Rights Under the California Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA)

If you are a California resident, you have the following rights under the CCPA/CPRA:

To submit a verifiable consumer request under the CCPA/CPRA, please contact us at [email protected]. We will respond to your request within 45 days. We may need to verify your identity before processing your request. You may also authorize an agent to submit requests on your behalf.

7.2 General Rights Available to All Users

Regardless of your location, you may exercise the following choices:

• Access and Update: You may access and update your account information by logging into your account on our website or by contacting us directly.
• Marketing Opt-Out: You may unsubscribe from our promotional emails at any time by clicking "unsubscribe" in any email or by emailing us at [email protected].
• Cookie Preferences: You can control cookie settings through your browser settings or our cookie consent tool. See Section 9 for more details.
• Account Deletion: You may request deletion of your account and associated personal data by contacting us at [email protected].

8. Data Retention

We retain your personal information only for as long as is necessary to fulfill the purposes for which it was collected, as described in this Privacy Policy, or as required by applicable law. Our general data retention practices are as follows:

When personal information is no longer required, we securely delete or anonymize it in accordance with our data destruction procedures.

9. Cookie Policy

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and support our marketing activities. This section provides a summary of our cookie practices.

9.1 What Are Cookies?

Cookies are small text files that are placed on your device by websites you visit. They are widely used to make websites work more efficiently, provide a personalized user experience, and supply information to website operators.

9.2 Types of Cookies We Use

• Essential Cookies: These cookies are strictly necessary for our website to function and cannot be disabled. They are used for things like maintaining your login session and processing orders.
• Analytics Cookies: These cookies help us understand how visitors interact with our website by collecting and reporting information anonymously. We use tools such as Google Analytics for this purpose.
• Functional Cookies: These cookies allow us to remember your preferences (such as your location or language settings) to provide a more personalized experience.
• Marketing and Advertising Cookies: These cookies are used to deliver advertisements relevant to your interests and to track the effectiveness of our advertising campaigns.

9.3 Managing Your Cookie Preferences

You can control and manage cookies in several ways:

• Browser Settings: Most browsers allow you to refuse or delete cookies. Please refer to your browser's help documentation for instructions.
• Opt-Out Tools: You can opt out of Google Analytics tracking by visiting Google's Opt-out Browser Add-on.
• Do Not Track: Our website respects browser "Do Not Track" signals where technically feasible.

Please note that disabling certain cookies may affect the functionality of our website and your ability to use some of our services.

10. Children's Privacy

In compliance with the Children's Online Privacy Protection Act (COPPA) and other applicable laws, Chuy's does not knowingly solicit, collect, use, or disclose personal information from children under the age of 13. We also do not direct our marketing or services toward minors.

If you are a parent or legal guardian and you believe that your child under the age of 18 has provided us with personal information without your consent, please contact us immediately at [email protected]. Upon verification, we will take prompt steps to delete such information from our records.

If we discover that we have inadvertently collected personal information from a child under 13, we will delete that information as quickly as possible.

11. International Data Transfers

Chuy's is based in the United States, and our services are primarily directed at users within the United States. However, some of our third-party service providers and partners may be located in other countries and may process your personal information outside of the United States.

If you are accessing our website from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country of residence.

We take appropriate steps to ensure that any international transfers of personal data are conducted in compliance with applicable law and with appropriate safeguards in place to protect your personal information. These safeguards may include:

• Standard contractual clauses approved by relevant data protection authorities
• Data processing agreements with third-party service providers that require them to comply with applicable privacy laws
• Ensuring that recipients of data maintain appropriate technical and organizational security measures

By using our website or services, you consent to the transfer of your personal information to the United States and other countries as described in this Privacy Policy.

12. Third-Party Links and Services

Our website may contain links to third-party websites, applications, or services that are not owned or controlled by Chuy's. This Privacy Policy applies solely to information collected by our website and services. We are not responsible for the privacy practices of third-party websites or services.

We encourage you to review the privacy policies of any third-party websites or services you visit or use. This includes, but is not limited to:

• Social media platforms (e.g., Facebook, Instagram, Twitter/X)
• Third-party food delivery apps and platforms
• Payment processors
• Review and rating websites

13. Applicable Law and Regulatory Framework

As a food service business operating in the United States, our privacy practices are governed by the following applicable laws and regulations:

13.1 Federal Laws

• Federal Trade Commission Act (FTC Act): We comply with the FTC Act's prohibition against unfair or deceptive acts or practices in commerce. Our privacy representations are accurate and we follow through on our stated privacy commitments.
• CAN-SPAM Act: Our commercial email communications comply with the requirements of the CAN-SPAM Act, including clear identification of the sender, honest subject lines, and an accessible opt-out mechanism.
• Children's Online Privacy Protection Act (COPPA): We do not knowingly collect personal information from children under 13, as described in Section 10.

13.2 State Laws

• California Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA): California residents have specific rights regarding their personal information, as described in Section 7.1 of this Privacy Policy.
• Other State Privacy Laws: We monitor and comply with applicable state privacy laws across the United States, including those enacted in Virginia, Colorado, Connecticut, Texas, and other states with comprehensive consumer data privacy statutes.

14. How to File a Complaint

If you have concerns about our privacy practices or believe that we have not adequately addressed your privacy rights, we encourage you to contact us first so that we can work to resolve the matter directly.

14.1 Contact Us Directly

Please send your privacy complaint or inquiry to:

Email: [email protected]
Subject Line: Privacy Complaint / Privacy Inquiry
Website: meal-chuys.digital

We will acknowledge receipt of your complaint within 5 business days and will endeavor to provide a full response within 30 days.

14.2 Regulatory Complaints

If you are a California resident and we have been unable to resolve your complaint to your satisfaction, you may file a complaint with:

• California Privacy Protection Agency (CPPA)
  Website: https://cppa.ca.gov
• California Attorney General
  Website: https://oag.ca.gov/privacy

Residents of other states may also have the right to file complaints with their respective state attorney general's office or other applicable state regulatory authority.

At the federal level, you may report concerns regarding unfair or deceptive business practices to the:

• Federal Trade Commission (FTC)
  Website: https://reportfraud.ftc.gov

15. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. When we make material changes, we will:

• Post the updated Privacy Policy on this page with a new "Last Updated" date
• Send an email notification to registered users where practicable
• Display a prominent notice on our website for a period of time following the update

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your personal information. Your continued use of our website and services after the posting of any changes constitutes your acceptance of the revised Privacy Policy.

If we make changes that significantly affect how we handle personal information that we have already collected from you, we will seek your consent to the extent required by applicable law.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please do not hesitate to contact us using the information below. We are committed to addressing your inquiries promptly and thoroughly.

When contacting us regarding a privacy request, please provide your full name, email address associated with your account (if applicable), and a clear description of your request so that we may efficiently process and respond to your inquiry.