Privacy Policy

Welcome to Chuys. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website newchuys.click or interact with our food services and related platforms. Please read this policy carefully. If you disagree with its terms, please discontinue use of our site.

This Privacy Policy applies to all information collected through our website, mobile applications, and any related services, sales, marketing, or events. By accessing or using our services, you acknowledge that you have read, understood, and agree to be bound by all the terms of this Privacy Policy.

1. About Us

Chuys is a food business operating in the United States, dedicated to providing exceptional dining and food-related experiences to our customers. For all privacy-related inquiries, you may contact us using the details provided below:

2. Information We Collect

We collect information that you provide directly to us, information we collect automatically when you use our services, and information we receive from third parties. This information allows us to provide, maintain, and improve our services, process transactions, communicate with you, and fulfill any other purposes described in this Privacy Policy.

2.1 Personal Information You Provide to Us

We collect personal information that you voluntarily provide to us when you:

• Register on our website or create an account
• Place an online food order or make a reservation
• Subscribe to our newsletter or marketing communications
• Participate in promotions, contests, or surveys
• Contact our customer support team
• Post reviews or comments on our platform
• Apply for employment through our website
• Sign up for our loyalty or rewards program

The personal information we may collect includes, but is not limited to:

• Identity Data: First name, last name, username, or similar identifier
• Contact Data: Email address, telephone number, billing address, and delivery address
• Financial Data: Payment card details, billing information (processed securely through third-party payment processors)
• Order Data: Food preferences, dietary restrictions, order history, and transaction records
• Profile Data: Your account credentials, preferences, feedback, and survey responses
• Communications Data: Any messages, emails, or other communications you send to us
• Marketing Preferences: Your preferences in receiving marketing from us and your communication preferences

2.2 Information Collected Automatically

When you visit our website or use our services, we automatically collect certain technical and usage information. This data helps us understand how our services are used and allows us to improve your experience. The information we collect automatically includes:

• Device Information: Device type, operating system, browser type and version, device identifiers, and mobile network information
• Log Data: IP address, browser type, pages visited, time and date of your visit, time spent on pages, referring website addresses, and other diagnostic data
• Usage Data: Information about how you interact with our website, including clicks, scrolling behavior, search queries, and navigation paths
• Location Data: General geographic location derived from your IP address or, with your permission, precise location data from your device
• Cookie and Tracking Data: Information collected through cookies, pixel tags, web beacons, and similar tracking technologies (see Section 7 for more details)

2.3 Information from Third Parties

We may receive information about you from third parties, including:

• Social media platforms when you connect or interact with us through those platforms
• Third-party food delivery partners or aggregators
• Payment processors and financial institutions
• Analytics providers who help us understand website traffic and user behavior
• Advertising partners who provide us with information to personalize your experience
• Review platforms and customer feedback services

3. How We Use Your Information

We use the information we collect for various purposes, all aimed at providing you with the best possible experience with Chuys and our food services. The legal bases upon which we rely to process your personal information include your consent, the performance of a contract, our legitimate business interests, and compliance with legal obligations.

3.1 Service Provision and Operations

• To process and fulfill your food orders, reservations, and other service requests
• To create and manage your account and maintain your profile
• To process payments and prevent fraudulent transactions
• To send you order confirmations, receipts, and service-related notifications
• To provide customer support and respond to your inquiries and complaints
• To personalize your experience based on your food preferences and order history
• To manage our loyalty and rewards programs
• To facilitate delivery of food orders to your specified location

3.2 Analytics and Service Improvement

• To analyze website traffic, usage patterns, and user behavior
• To understand which menu items, features, and services are most popular
• To identify technical issues, bugs, and areas for improvement on our platform
• To conduct internal research and development to enhance our food services
• To measure the effectiveness of our marketing campaigns and promotions
• To generate aggregated, anonymized statistical reports about our business

3.3 Marketing and Communications

• To send you promotional offers, special deals, and updates about our menu items and services, where you have opted in to receive such communications
• To display personalized advertisements on our website and third-party platforms
• To notify you about new menu additions, seasonal specials, and events
• To administer contests, promotions, sweepstakes, and surveys
• To send newsletters and curated food content you have subscribed to receive

You may opt out of receiving marketing communications from us at any time by clicking the "unsubscribe" link in any email we send, by updating your communication preferences in your account settings, or by contacting us directly at [email protected].

3.4 Legal and Compliance Purposes

• To comply with applicable federal and state laws and regulations
• To enforce our Terms of Service and other agreements
• To protect the rights, property, or safety of Chuys, our customers, or others
• To respond to lawful requests from government authorities, law enforcement agencies, or regulatory bodies
• To detect, investigate, and prevent fraudulent transactions and other illegal activities
• To exercise or defend legal claims

4. Sharing Your Information with Third Parties

We do not sell your personal information to third parties. However, we may share your information with certain trusted third parties as described in this section. We require all third parties to respect the security of your personal data and to treat it in accordance with applicable law.

4.1 Service Providers

We share your information with third-party vendors and service providers who perform services on our behalf, including:

• Payment Processors: To securely process your payments and prevent fraud
• Delivery Partners: To fulfill food delivery orders to your location
• Cloud Hosting Providers: To host and maintain our website and databases
• Email Service Providers: To send transactional and marketing emails on our behalf
• Analytics Providers: Such as Google Analytics, to help us understand how users interact with our website
• Customer Support Tools: To manage and respond to customer inquiries efficiently
• Marketing and Advertising Platforms: To deliver targeted advertisements and promotions

These service providers are only given access to the personal information necessary to perform their specific functions and are contractually prohibited from using your information for any other purpose.

4.2 Business Transfers

If Chuys undergoes a merger, acquisition, reorganization, sale of assets, bankruptcy, or insolvency proceeding, your personal information may be transferred as part of such a transaction. We will notify you via email and/or a prominent notice on our website of any change in ownership or uses of your personal information, as well as any choices you may have regarding your personal information.

4.3 Legal Requirements and Protection of Rights

We may disclose your personal information if we believe that disclosure is necessary or appropriate to:

• Comply with applicable law, regulation, or legal process (such as a court order or subpoena)
• Respond to requests from public and government authorities, including law enforcement agencies
• Protect the rights, property, or safety of Chuys, our users, or the public
• Enforce our Terms of Service and other policies
• Detect and prevent fraud, security incidents, or other potentially illegal or harmful activities

4.4 Aggregated and Anonymized Data

We may share aggregated or anonymized information that cannot reasonably be used to identify you with third parties for research, analytics, marketing, or other purposes. This type of data sharing does not constitute a disclosure of your personal information.

5. Data Security

We take the security of your personal information seriously and implement a variety of technical, administrative, and physical security measures designed to protect your data from unauthorized access, disclosure, alteration, and destruction.

Our security measures include, but are not limited to:

• Encryption: We use industry-standard SSL/TLS encryption to protect data transmitted between your browser and our servers
• Secure Payment Processing: Payment card information is processed through PCI-DSS compliant third-party payment processors; we do not store your full payment card details on our servers
• Access Controls: We restrict access to personal information to authorized employees, contractors, and service providers who need to know that information to perform their duties
• Regular Security Audits: We conduct periodic security assessments and vulnerability testing of our systems
• Data Minimization: We collect only the personal information that is necessary for the purposes outlined in this policy
• Employee Training: Our staff receive regular training on data protection best practices and privacy obligations
• Incident Response: We have a documented data breach response procedure to promptly address and notify affected individuals in the event of a security incident

Despite our efforts to protect your personal information, no method of transmission over the Internet or method of electronic storage is 100% secure. Therefore, while we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you as required by applicable law.

6. Your Privacy Rights

Depending on your location and applicable law, you may have certain rights regarding the personal information we hold about you. We are committed to honoring these rights and providing you with clear mechanisms to exercise them.

6.1 Rights Under U.S. Federal and State Law

As a business operating in the United States, we comply with applicable federal consumer protection laws enforced by the Federal Trade Commission (FTC), including the FTC Act, which prohibits unfair or deceptive practices in connection with data privacy. We also adhere to applicable state privacy laws, including:

• California: The California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) grants California residents specific rights regarding their personal information, including the right to know, delete, correct, and opt-out of the sale or sharing of personal information. California residents also have the right not to be discriminated against for exercising their privacy rights.
• Other States: We also comply with the privacy laws of other U.S. states where applicable, including but not limited to Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), and Utah (UCPA).

6.2 Specific Rights You May Have

6.3 How to Exercise Your Rights

To exercise any of the rights listed above, please contact us using one of the following methods:

• Email: [email protected]
• Website: newchuys.click

We will respond to your request within the timeframe required by applicable law (generally within 45 days, with an extension of an additional 45 days where reasonably necessary). We may need to verify your identity before processing your request. We will not charge a fee for processing your request unless it is excessive, repetitive, or manifestly unfounded. In such cases, we will inform you of the applicable fee before completing your request.

You may also designate an authorized agent to submit requests on your behalf. If you use an authorized agent, we may require proof of the agent's written authorization and, in some cases, your direct verification of the agent's authority.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and use personal information about you, including to serve interest-based advertising. Cookies are small data files that are placed on your device when you visit a website. They help us recognize you, remember your preferences, understand how you use our services, and improve your overall experience.

7.1 Types of Cookies We Use

• Essential Cookies: These are necessary for the website to function properly. They enable core functionality such as security, network management, and account access. You cannot opt out of these cookies without significantly impairing your experience.
• Performance and Analytics Cookies: These cookies collect information about how visitors use our website, such as which pages are visited most often and how users navigate between pages. This helps us improve our website's performance and user experience.
• Functionality Cookies: These cookies allow the website to remember choices you make, such as your food preferences, saved addresses, or login status, to provide a more personalized experience.
• Targeting and Advertising Cookies: These cookies are used to deliver advertisements relevant to your interests. They may also be used to limit the number of times you see an advertisement and help measure the effectiveness of advertising campaigns.

You can control and manage cookies through your browser settings. Please note that removing or blocking cookies may impact your user experience and some functionality may no longer be available. For more detailed information about the cookies we use and how to manage them, please refer to our Cookie Policy, available on our website.

We also honor browser-based "Do Not Track" (DNT) signals where technically feasible. Additionally, for California residents, we respect the Global Privacy Control (GPC) signal as a valid opt-out of the sale or sharing of personal information.

8. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The criteria used to determine our retention periods include:

• Account Information: Retained for the duration of your account and for a reasonable period thereafter in case you choose to reactivate your account, or as required by applicable law.
• Order and Transaction Records: Retained for a minimum of seven (7) years to comply with tax, accounting, and financial record-keeping requirements under U.S. federal and state law.
• Customer Support Communications: Retained for up to three (3) years after the resolution of your inquiry to assist with any follow-up issues or disputes.
• Marketing Preferences and Consent Records: Retained for as long as you are registered with us and for a period thereafter to demonstrate compliance with applicable law.
• Website Usage and Analytics Data: Typically retained for a period of up to twenty-six (26) months, after which it is aggregated or anonymized.
• Legal and Compliance Records: Retained for as long as required by applicable law or regulation, or as necessary to establish, exercise, or defend legal claims.

When personal information is no longer required for the purposes for which it was collected, and there is no legal obligation to retain it, we will securely delete, destroy, or anonymize it in accordance with our data destruction procedures.

9. Children's Privacy

Chuys takes the privacy of minors very seriously. Our website, online ordering platform, and related services are not directed to, nor intended for use by, individuals under the age of 18. We do not knowingly solicit data from or market to children under 18 years of age.

If you are under the age of 18, please do not submit any personal information through our website or services. We encourage parents and guardians to monitor their children's online activities and to help enforce this Policy by instructing their children never to provide personal information through our services without parental permission.

If we learn that we have inadvertently collected personal information from a child under the age of 18, we will take steps to delete such information from our records as quickly as possible. If you believe we might have any information from or about a child under 18, please contact us immediately at [email protected].

In compliance with the Children's Online Privacy Protection Act (COPPA), we do not knowingly collect, use, or disclose personal information from children under 13 years of age without verifiable parental consent.

10. International Data Transfers

Chuys is based in the United States. If you are accessing our services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States or in other countries where our service providers maintain facilities.

The United States and other countries may have data protection laws that differ from those of your country of residence. However, we take steps to ensure that any international transfer of your personal information is subject to appropriate safeguards to protect your data in a manner consistent with this Privacy Policy and applicable law.

By using our services and submitting your personal information to us, you consent to the transfer of your information to the United States and to other countries for the purposes described in this Privacy Policy. If you have concerns about international data transfers, please contact us at [email protected].

11. Third-Party Links and Services

Our website may contain links to third-party websites, online platforms, social media networks, and other services that are not operated by us. We also integrate with third-party food delivery platforms and payment gateways. This Privacy Policy does not apply to those third-party services, and we are not responsible for the privacy practices of those third parties.

We strongly encourage you to review the privacy policies of every website you visit and every service you use. The inclusion of a link on our website does not imply our endorsement of the linked website or its privacy practices. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party websites or services.

12. Your California Privacy Rights

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA). This section provides additional details specific to California residents.

12.1 Categories of Personal Information Collected

In the preceding twelve (12) months, we have collected the following categories of personal information:

• Identifiers (name, email address, IP address, phone number)
• Commercial information (products ordered, purchasing history)
• Internet or other electronic network activity information (browsing history, search history, interaction with our website)
• Geolocation data (general location for delivery purposes)
• Inferences drawn from other personal information to create a profile about preferences

12.2 California "Shine the Light" Law

California Civil Code Section 1798.83, also known as the "Shine The Light" law, permits our users who are California residents to request and obtain from us, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with which we shared personal information in the immediately preceding calendar year. If you are a California resident and would like to make such a request, please submit your request in writing to us using the contact information provided in this Privacy Policy.

12.3 How to Submit a California Privacy Request

California residents may submit privacy requests by contacting us at [email protected]. We will respond to verifiable consumer requests within 45 days of receipt, with a possible 90-day extension where reasonably necessary. We will not discriminate against you for exercising any of your CCPA/CPRA rights.

13. Do Not Sell or Share My Personal Information

Under the CCPA/CPRA and other applicable state privacy laws, you have the right to opt out of the "sale" or "sharing" of your personal information. Although we do not sell your personal information in the traditional sense, certain data sharing activities (such as providing your data to advertising partners for behavioral advertising) may be considered a "sale" or "share" under California law.

To exercise your right to opt-out of the sale or sharing of your personal information, you may contact us at [email protected]. We will process your opt-out request within 15 business days and will not discriminate against you for making this request.

14. Filing Complaints with Data Protection Authorities

If you have concerns about how we handle your personal information and are not satisfied with our response, you have the right to lodge a complaint with the appropriate regulatory authority.

14.1 Federal Level

At the federal level, you may file a complaint with the Federal Trade Commission (FTC), which enforces consumer protection and privacy laws in the United States:

• Website: www.ftc.gov
• Phone: 1-877-382-4357
• Address: Federal Trade Commission, 600 Pennsylvania Avenue, NW, Washington, D.C. 20580

14.2 California Residents

California residents may also file a complaint with the California Privacy Protection Agency (CPPA), which is responsible for enforcing the CCPA/CPRA:

• Website: cppa.ca.gov

California residents may also contact the California Attorney General's office regarding privacy-related complaints at oag.ca.gov.

14.3 Other States

Residents of other U.S. states may contact their respective state attorney general's office or consumer protection agency to inquire about available remedies for privacy-related complaints. We encourage you to contact us first so that we may have the opportunity to address your concerns directly.

15. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes to this Privacy Policy, we will notify you by:

• Posting the updated Privacy Policy on our website with a new "Last Updated" date
• Sending a notification email to the email address associated with your account (where applicable)
• Displaying a prominent notice on our website

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website and services after any changes to this Privacy Policy constitutes your acceptance of the updated policy. If you do not agree with the revised Privacy Policy, you must discontinue using our services.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please do not hesitate to contact us. We are committed to addressing your concerns in a timely and transparent manner.

We aim to respond to all privacy-related inquiries within 30 days of receipt. For requests submitted under applicable state privacy laws (such as the CCPA/CPRA), we will respond within the timeframes specified by those laws. If you are not satisfied with our response, you may have the right to escalate your complaint to the relevant regulatory authority as described in Section 14 of this policy.

We value your trust and are dedicated to maintaining the highest standards of privacy and data protection. Thank you for choosing Chuys.