Privacy Policy

Welcome to Chuys. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website chuys-food.click or interact with our food services. Please read this policy carefully. If you disagree with its terms, please discontinue use of our site.

This Privacy Policy applies to all information collected through our website, as well as any related services, sales, marketing, or events (collectively referred to as the "Services"). By accessing or using our Services, you acknowledge that you have read, understood, and agree to the collection and use of information in accordance with this policy.

1. Who We Are

Chuys is a food service business operating in the United States. We provide food-related products and services to customers across the country. Our website serves as a platform for customers to browse our offerings, place orders, and interact with our brand.

For any questions or concerns regarding this Privacy Policy, you may contact us at any time using the information provided above.

2. Applicable Laws and Legal Framework

As a business operating in the United States, we comply with all applicable federal and state privacy laws, including but not limited to:

• The Federal Trade Commission Act (FTC Act), which prohibits unfair or deceptive practices related to consumer privacy.
• The California Consumer Privacy Act (CCPA) and its amendment, the California Privacy Rights Act (CPRA), which provide specific privacy rights to California residents.
• The Children's Online Privacy Protection Act (COPPA), which restricts the collection of personal information from children under the age of 13.
• The CAN-SPAM Act, governing commercial email communications.
• The Electronic Communications Privacy Act (ECPA).
• Other applicable state privacy laws, including those enacted in Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), and other states with comprehensive privacy legislation.

We are committed to upholding the privacy rights granted to consumers under these regulations and maintaining transparency about how we handle your data.

3. Information We Collect

We collect several types of information from and about users of our Services. This information falls into three primary categories: information you provide to us directly, information we collect automatically, and information we receive from third parties.

3.1 Personal Information You Provide Directly

When you interact with our Services, you may voluntarily provide us with personal information, including but not limited to:

• Identity Information: Your full name, username or similar identifier, and title.
• Contact Information: Your email address, mailing address, billing address, delivery address, and telephone number.
• Account Credentials: Passwords and other security information used for authentication and account access.
• Payment Information: Credit card numbers, debit card numbers, bank account information, and other financial data necessary to process your orders. Note that we do not store full payment card details on our servers; this information is handled by our secure payment processors.
• Order and Transaction Data: Details about purchases you have made, including food items ordered, order history, preferences, and special dietary requests.
• Profile Information: Your preferences, feedback, survey responses, and any other information you choose to add to your user profile.
• Communications: Records and copies of your correspondence with us, including emails, chat messages, and customer support interactions.
• Marketing Preferences: Your preferences in receiving marketing communications from us and your communication preferences.

3.2 Information Collected Automatically

When you visit our website or use our Services, we automatically collect certain technical and usage information:

• Device Information: IP address, browser type and version, operating system and platform, device type (desktop, mobile, tablet), device identifiers, and hardware configurations.
• Usage Data: Pages visited, links clicked, time and date of your visit, time spent on pages, referring URLs, search terms used, and other browsing behavior on our site.
• Location Data: General geographic location based on IP address, and precise geolocation data if you grant permission on your mobile device.
• Log Data: Server logs that record requests made to our servers, error reports, and diagnostic data.
• Cookie and Tracking Data: Information collected through cookies, web beacons, pixel tags, and similar tracking technologies. Please see Section 9 for more information about our cookie practices.
• Interaction Data: How you interact with our emails (open rates, click-through rates), advertisements, and other digital content.

3.3 Information From Third Parties

We may receive information about you from third-party sources, including:

• Social media platforms when you connect your account or interact with our social media content.
• Third-party delivery platforms and food ordering services that may refer users to our site.
• Marketing and analytics partners who provide us with aggregated or enriched data.
• Identity verification services and fraud prevention providers.
• Publicly available sources such as business directories and social media profiles.

4. How We Use Your Information

We use the information we collect for a variety of legitimate business purposes. Specifically, we use your information to:

4.1 Provide and Manage Our Services

• Process and fulfill your food orders, including managing payments, deliveries, and returns.
• Create and manage your customer account.
• Communicate with you about your orders, account status, and service updates.
• Provide customer support and respond to your inquiries and complaints.
• Send you administrative messages, such as order confirmations, receipts, and service announcements.

4.2 Analytics and Service Improvement

• Analyze usage patterns to understand how customers interact with our website and services.
• Monitor and improve the performance and functionality of our website.
• Conduct research and analysis to improve our food offerings, menu items, and overall customer experience.
• Develop new products, services, and features.
• Perform A/B testing and other experiments to optimize our platform.
• Generate aggregate, anonymized statistical reports about our users and business performance.

4.3 Marketing and Promotional Activities

• Send you promotional offers, newsletters, and marketing communications about our food specials, new menu items, discounts, and events — where you have given us consent or where we have a legitimate interest to do so.
• Personalize your experience by recommending food items and services based on your preferences and order history.
• Display targeted advertisements on our website and on third-party platforms.
• Conduct surveys and gather feedback about your satisfaction with our services.

You may opt out of receiving marketing communications at any time by following the unsubscribe instructions in our emails or by contacting us directly at [email protected]. Opting out of marketing communications will not affect transactional communications related to your orders or account.

4.4 Legal and Compliance Purposes

• Comply with applicable laws, regulations, and legal processes.
• Enforce our Terms of Service and other agreements.
• Detect, prevent, and investigate fraud, abuse, security incidents, and other harmful or illegal activities.
• Protect the rights, property, and safety of Chuys, our customers, and the public.
• Respond to lawful requests from government authorities and law enforcement agencies.

5. Sharing Your Information With Third Parties

We do not sell, rent, or trade your personal information to third parties for their independent marketing purposes. However, we do share your information in the following circumstances:

5.1 Service Providers and Business Partners

We engage trusted third-party companies and individuals to perform services on our behalf, such as:

• Payment Processors: Companies that securely handle credit card and payment transactions (e.g., Stripe, PayPal, Square).
• Delivery and Logistics Partners: Third-party delivery services that fulfill food orders on our behalf.
• Cloud Hosting and IT Services: Providers that host our website and store our data securely.
• Email Service Providers: Platforms that help us send transactional and marketing emails.
• Analytics Providers: Services such as Google Analytics that help us understand website usage and performance.
• Marketing and Advertising Platforms: Providers that help us deliver targeted advertising campaigns.
• Customer Support Tools: Software that enables us to manage customer inquiries and support tickets.
• Fraud Prevention Services: Tools that help us detect and prevent fraudulent transactions.

All third-party service providers are contractually obligated to use your information only as necessary to perform services on our behalf and in accordance with this Privacy Policy. They are prohibited from using your information for their own independent purposes.

5.2 Legal Requirements and Law Enforcement

We may disclose your information if required to do so by law or in response to valid legal processes, including:

• Subpoenas, court orders, or other judicial or administrative processes.
• Requests from law enforcement agencies or government authorities.
• Compliance with applicable laws and regulations.
• Situations where disclosure is necessary to protect the safety of any person or to address fraud, security, or technical issues.

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal information may be transferred to the acquiring entity. We will notify you via email and/or a prominent notice on our website of any such change in ownership and the choices you may have regarding your personal information.

5.4 With Your Consent

We may share your information with other third parties when you have given us your explicit consent to do so, such as when you choose to participate in a co-branded promotion or refer a friend program.

6. Data Security

The security of your personal information is extremely important to us. We implement a variety of technical, administrative, and physical security measures designed to protect your information from unauthorized access, disclosure, alteration, or destruction.

Our security measures include:

• Encryption: We use industry-standard SSL/TLS encryption to protect data transmitted between your browser and our servers.
• Secure Storage: Personal data is stored on secure servers with access controls and firewalls.
• Access Controls: We limit access to your personal information to authorized employees, contractors, and service providers who need to know that information in order to operate, develop, or improve our services.
• Payment Security: We comply with Payment Card Industry Data Security Standards (PCI-DSS) for handling payment information.
• Regular Security Assessments: We conduct regular security audits and vulnerability assessments.
• Incident Response: We maintain an incident response plan to promptly address any potential data breaches.
• Employee Training: Our staff receive training on data protection and security practices.

However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. In the event of a data breach that is likely to affect your rights and freedoms, we will notify you and the appropriate authorities in accordance with applicable law.

7. Your Privacy Rights

Depending on your location and applicable law, you may have certain rights regarding your personal information. We are committed to honoring these rights and making it easy for you to exercise them.

7.1 Rights for All Users

• Right to Access: You have the right to request a copy of the personal information we hold about you.
• Right to Correction: You have the right to request that we correct any inaccurate or incomplete personal information we hold about you.
• Right to Deletion: You have the right to request that we delete your personal information, subject to certain exceptions (such as where we are required to retain it for legal or contractual reasons).
• Right to Opt Out of Marketing: You have the right to opt out of receiving marketing communications from us at any time.
• Right to Data Portability: You have the right to request that we provide your personal information in a structured, commonly used, machine-readable format, allowing you to transfer it to another service provider.

7.2 Additional Rights for California Residents (CCPA/CPRA)

If you are a resident of California, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Know: The right to know what personal information we collect, use, disclose, and sell about you.
• Right to Delete: The right to request deletion of personal information we have collected about you.
• Right to Correct: The right to request correction of inaccurate personal information.
• Right to Opt Out of Sale/Sharing: The right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising.
• Right to Limit Use of Sensitive Personal Information: The right to limit the use and disclosure of your sensitive personal information.
• Right to Non-Discrimination: The right not to be discriminated against for exercising your privacy rights. We will not deny you services, charge you a different price, or provide a lower quality of service because you exercised your rights under the CCPA/CPRA.

To exercise any of these rights, California residents may submit a verifiable consumer request by contacting us at [email protected]. We will respond to your request within 45 days, as required by law.

7.3 How to Exercise Your Rights

To exercise any of your privacy rights, please contact us through one of the following methods:

• Email: [email protected]
• Website: chuys-food.click

We may need to verify your identity before processing your request to ensure that we are not disclosing or deleting the personal information of another person. We will respond to all verified requests within the timeframes required by applicable law. Please note that certain exceptions may apply, and we will clearly communicate if we are unable to fulfill your request in whole or in part.

8. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The specific retention periods we apply include:

When personal information is no longer needed for the purposes for which it was collected, we will securely delete, anonymize, or aggregate it in accordance with our data retention procedures and applicable legal obligations.

9. Cookie Policy Summary

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and deliver personalized content and advertising. Cookies are small text files that are stored on your device when you visit our website.

We use the following types of cookies:

• Strictly Necessary Cookies: Essential for the website to function properly. These cannot be disabled.
• Performance and Analytics Cookies: Help us understand how visitors interact with our website by collecting and reporting information anonymously.
• Functional Cookies: Enable enhanced functionality and personalization, such as remembering your preferences and login status.
• Targeting and Advertising Cookies: Used to deliver advertisements relevant to your interests and to track the effectiveness of our marketing campaigns.

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies or to alert you when cookies are being sent. Please note that disabling certain cookies may affect the functionality of our website and your ability to use certain features.

For more detailed information about the cookies we use, their purposes, and how to manage them, please refer to our full Cookie Policy available on our website at chuys-food.click.

10. Children's Privacy

Our Services are intended for adults aged 18 years and older. We do not knowingly collect, solicit, or use personal information from children under the age of 18. Our website is not directed at minors, and we do not knowingly market our food products or services to individuals under 18 years of age.

In compliance with the Children's Online Privacy Protection Act (COPPA), we do not knowingly collect personal information from children under the age of 13. If we discover that we have inadvertently collected personal information from a child under 13, we will promptly delete such information from our records.

If you are a parent or guardian and you believe that your child under the age of 18 has provided us with personal information without your consent, please contact us immediately at [email protected]. We will take prompt steps to investigate and remove such information from our systems.

By using our Services, you represent and warrant that you are at least 18 years of age. If you are between the ages of 13 and 17, you may only use our Services with the verifiable consent and supervision of a parent or legal guardian.

11. International Data Transfers

Chuys is based in the United States, and your personal information will primarily be collected, processed, and stored in the United States. If you are accessing our Services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country of residence.

In the event that we transfer personal information from the European Economic Area (EEA), the United Kingdom, or other jurisdictions with specific data transfer requirements, we will ensure that appropriate safeguards are in place to protect your personal information in accordance with applicable law. Such safeguards may include:

• Standard Contractual Clauses approved by the relevant data protection authorities.
• Adequacy decisions by the relevant regulatory body recognizing the destination country's data protection standards.
• Binding Corporate Rules or other legally approved transfer mechanisms.

By providing your personal information and using our Services, you consent to the transfer of your information to the United States and other countries where we or our service providers operate, in accordance with this Privacy Policy.

12. Third-Party Websites and Links

Our website may contain links to third-party websites, applications, and services that are not owned or controlled by Chuys. This Privacy Policy applies only to our website and Services. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party websites or services.

We strongly encourage you to review the privacy policy of every third-party website you visit. The inclusion of a link to a third-party website does not imply our endorsement of that website or its privacy practices.

Common third-party services that may be accessible through our website include social media platforms (e.g., Facebook, Instagram, Twitter/X), payment processors, and delivery platform integrations. Each of these services has its own privacy policy governing the collection and use of your information.

13. Do Not Track Signals

Some browsers include a "Do Not Track" (DNT) feature that signals to websites that you do not want to be tracked. Currently, there is no universally accepted standard for how websites should respond to DNT signals. At this time, our website does not respond to DNT browser signals or other similar mechanisms.

However, you can manage your tracking preferences through our cookie consent tool, browser settings, and by opting out of interest-based advertising through the Digital Advertising Alliance (DAA) at www.aboutads.info or the Network Advertising Initiative (NAI) at www.networkadvertising.org.

14. Marketing Communications and Opt-Out

We may send you promotional emails, newsletters, special offers, and other marketing communications related to our food products and services. We do this with your consent or where we have a legitimate business interest to do so.

In accordance with the CAN-SPAM Act, all marketing emails we send will:

• Clearly identify us as the sender.
• Include our physical mailing address.
• Include a clear and conspicuous unsubscribe mechanism.
• Be processed promptly — we will honor opt-out requests within 10 business days.

You can opt out of receiving marketing communications from us at any time by:

• Clicking the "Unsubscribe" link at the bottom of any marketing email we send.
• Contacting us directly at [email protected] and requesting removal from our marketing list.
• Updating your communication preferences in your account settings (if applicable).

Please note that even if you opt out of marketing communications, we may still send you important transactional and service-related messages related to your orders, account, or changes to our policies.

15. How to File a Complaint

If you have concerns about how we handle your personal information and you are not satisfied with our response, you have the right to file a complaint with the relevant regulatory authority.

15.1 Federal Trade Commission (FTC)

The Federal Trade Commission (FTC) enforces consumer privacy rights in the United States. If you believe that we have engaged in unfair or deceptive practices related to your personal information, you may file a complaint with the FTC:

• Online: www.ftc.gov/complaint
• Phone: 1-877-382-4357
• Mail: Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, DC 20580

15.2 California Attorney General (For California Residents)

California residents who believe their CCPA/CPRA rights have been violated may file a complaint with the California Privacy Protection Agency (CPPA) or the California Attorney General's Office:

• California Privacy Protection Agency: cppa.ca.gov
• California Attorney General: oag.ca.gov/privacy/ccpa

15.3 State Attorneys General

Residents of other states may also contact their state Attorney General's office regarding privacy concerns. Most states have consumer protection divisions that handle data privacy complaints.

15.4 Contact Us First

We encourage you to contact us first before filing a formal complaint with a regulatory authority. We are committed to resolving privacy concerns promptly and fairly. Please reach out to us at:

16. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our business practices, legal requirements, or the Services we provide. When we make changes, we will:

• Update the "Last Updated" date at the top of this Privacy Policy.
• Post the revised Privacy Policy on our website at chuys-food.click.
• For material changes, notify you via email or through a prominent notice on our website prior to the changes taking effect.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our Services after the effective date of any updated Privacy Policy constitutes your acceptance of the revised policy.

17. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact us. We are committed to addressing your privacy concerns in a timely and transparent manner.

We will endeavor to respond to all privacy-related inquiries and requests within a reasonable timeframe, and no later than within the period required by applicable law. If you submit a request to exercise your privacy rights, we may need to verify your identity before processing your request to protect your personal information and prevent unauthorized access.