Privacy Policy

This Privacy Policy describes how Chuys ("we," "us," or "our") collects, uses, discloses, and protects your personal information when you visit our website at chuys-new.rest, use our online ordering services, sign up for our loyalty programs, or otherwise interact with us. Please read this policy carefully to understand our practices regarding your personal information and how we will treat it.

By accessing or using our website, placing an order, or otherwise engaging with our services, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy. If you do not agree with this policy, please discontinue use of our website and services immediately.

We are committed to protecting your privacy and handling your personal data in an open and transparent manner. This Privacy Policy has been prepared in accordance with applicable United States federal and state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and the Federal Trade Commission (FTC) Act, which governs unfair or deceptive acts and practices related to consumer privacy.

1. About Us

Chuys is a food service business operating in the United States. We are dedicated to providing exceptional dining experiences and food services to our customers. Our contact details are as follows:

For any questions, concerns, or requests related to this Privacy Policy or the handling of your personal information, please contact us using the details provided above or through the dedicated contact section at the end of this document.

2. Information We Collect

We collect various types of information in connection with your use of our services. The categories of personal information we may collect include the following:

2.1 Personal Identification Information

When you register an account, place an order, make a reservation, join our loyalty program, or contact us, we may collect:

• Full name
• Email address
• Phone number
• Mailing address and delivery address
• Date of birth (for age verification and birthday offers)
• Username and password for your account
• Profile preferences and dietary restrictions or preferences

2.2 Payment and Financial Information

When you make a purchase or process a payment through our platform, we or our trusted payment processors may collect:

• Credit card or debit card information (card number, expiration date, CVV)
• Billing address
• Transaction history and purchase records
• Gift card numbers or promotional codes

Please note that we do not store full payment card details on our servers. Payment processing is handled by PCI-DSS-compliant third-party payment processors.

2.3 Usage Data and Technical Information

When you visit our website or use our digital services, we automatically collect certain technical and usage data, including:

• IP address and approximate geographic location
• Browser type and version
• Operating system and device type
• Pages visited and time spent on each page
• Links clicked and features used
• Referring URLs (the site that directed you to ours)
• Date and time of your visit
• Search queries made on our website
• Error logs and crash reports

2.4 Location Information

With your consent, we may collect precise or approximate geolocation data to help you find nearby Chuys locations, provide delivery services, or personalize your experience. You can disable location services through your device settings at any time.

2.5 Communications and Customer Service Data

When you contact us via email, phone, live chat, social media, or other channels, we may collect:

• The content of your messages and inquiries
• Records of our correspondence with you
• Feedback, complaints, or reviews you submit
• Survey responses

2.6 Cookies and Tracking Technologies

We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about your browsing behavior and preferences. Please refer to Section 8 of this Privacy Policy for detailed information about our use of cookies and your choices regarding them.

2.7 Social Media Information

If you connect your account with a social media platform, log in using social media credentials, or interact with us on social media, we may receive certain information from those platforms in accordance with their privacy policies and your privacy settings, such as your name, profile photo, and email address.

2.8 Information from Third Parties

We may also receive information about you from third parties, such as:

• Delivery partner platforms
• Marketing and analytics partners
• Loyalty program partners
• Publicly available sources

3. How We Use Your Information

We use the personal information we collect for a variety of legitimate business purposes, including but not limited to the following:

3.1 Providing and Managing Our Services

• Processing your food orders, payments, and deliveries
• Managing your account and loyalty program membership
• Facilitating table reservations and special requests
• Responding to your inquiries and providing customer support
• Sending order confirmations, receipts, and service-related communications

3.2 Personalization and User Experience

• Personalizing your experience on our website based on your preferences and order history
• Remembering your saved addresses, payment methods, and preferences
• Recommending menu items based on your past orders and preferences
• Customizing content, promotions, and offers relevant to your location and interests

3.3 Marketing and Promotional Communications

• Sending you promotional emails, newsletters, and special offers (with your consent where required)
• Notifying you about new menu items, seasonal promotions, and events
• Administering loyalty rewards programs, contests, and sweepstakes
• Conducting targeted advertising on third-party platforms based on your interests

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any marketing email or by contacting us at [email protected].

3.4 Analytics and Business Improvement

• Analyzing usage trends and patterns to improve our website, app, and services
• Conducting research and analysis to better understand customer preferences
• Monitoring and evaluating the effectiveness of our marketing campaigns
• Generating statistical and aggregated reports for business planning purposes

3.5 Legal Compliance and Safety

• Complying with applicable federal and state laws and regulations
• Responding to lawful requests from government authorities or law enforcement agencies
• Preventing fraud, unauthorized access, and other illegal activities
• Protecting the rights, safety, and property of Chuys, our customers, and the public
• Enforcing our Terms of Service and other legal agreements

3.6 Business Transactions

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal information may be transferred to the acquiring or successor entity. We will notify you by email or prominent notice on our website if such a change occurs and your information becomes subject to a different privacy policy.

4. Sharing Your Information with Third Parties

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes without your explicit consent. However, we may share your personal information in the following circumstances:

4.1 Service Providers and Business Partners

We engage trusted third-party vendors and service providers who perform functions on our behalf, including:

• Payment processors: To securely process your transactions
• Delivery partners: To fulfill your food delivery orders
• Email and SMS marketing platforms: To send promotional communications
• Web analytics providers: To analyze website traffic and user behavior
• Cloud hosting providers: To store and manage our data infrastructure
• Customer support platforms: To manage customer inquiries and support tickets
• Loyalty and rewards program administrators

All service providers are contractually obligated to handle your personal information confidentially and securely, and are prohibited from using it for any purpose other than providing services to us.

4.2 Legal Requirements and Law Enforcement

We may disclose your personal information when required to do so by law or in good faith belief that such disclosure is necessary to:

• Comply with a legal obligation, court order, subpoena, or government request
• Cooperate with law enforcement investigations
• Protect and defend the legal rights of Chuys
• Prevent or investigate possible fraud or illegal activity
• Protect the personal safety of users or the public

4.3 Business Transfers

In connection with any merger, acquisition, financing, reorganization, bankruptcy, or sale of company assets, your personal information may be disclosed to prospective or actual buyers, acquirers, or investors, subject to appropriate confidentiality agreements.

4.4 Advertising Partners

We may share certain information with advertising platforms and social media networks to serve you relevant advertisements. This may include hashed email addresses or mobile identifiers. You may opt out of targeted advertising by adjusting your privacy settings on these platforms or through applicable opt-out tools.

4.5 Aggregated and De-Identified Data

We may share aggregated or de-identified information that cannot reasonably be used to identify you with third parties for research, analytics, marketing, or other purposes.

5. Data Security

We take the security of your personal information seriously and implement a range of technical, administrative, and physical safeguards designed to protect your data from unauthorized access, use, disclosure, alteration, or destruction.

5.1 Security Measures We Implement

• Encryption: We use industry-standard SSL/TLS encryption to protect data transmitted between your browser and our servers.
• Secure Payment Processing: All payment transactions are processed through PCI-DSS-compliant payment processors. We do not store full credit card numbers on our systems.
• Access Controls: Access to personal information is restricted to authorized personnel on a need-to-know basis. Employees with access are trained in data privacy and security practices.
• Firewalls and Intrusion Detection: We employ firewalls, intrusion detection systems, and other network security tools to monitor and protect our infrastructure.
• Regular Security Assessments: We conduct periodic security audits and vulnerability assessments to identify and address potential security risks.
• Data Minimization: We collect only the personal information necessary for the purposes described in this policy.

5.2 Data Breach Response

In the event of a data security breach that affects your personal information, we will notify you and relevant regulatory authorities in accordance with applicable federal and state breach notification laws, including as required under state breach notification statutes and FTC guidelines. Notification will be provided without undue delay and within the timeframes required by law.

6. Your Privacy Rights

Depending on your state of residence, you may have certain rights regarding your personal information. We are committed to honoring these rights in accordance with applicable law.

6.1 Rights Under the California Consumer Privacy Act (CCPA/CPRA)

If you are a resident of California, you have the following rights under the CCPA as amended by the CPRA:

6.2 Rights Available to All U.S. Consumers

Regardless of your state of residence, we provide all our customers with the following rights where feasible:

• Access: Request access to the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information, subject to legal obligations
• Opt-Out of Marketing: Opt out of receiving marketing communications at any time
• Withdraw Consent: Where we process data based on your consent, you may withdraw that consent at any time

6.3 How to Exercise Your Rights

To exercise any of your privacy rights, please submit a verifiable consumer request by:

• Sending an email to: [email protected]
• Visiting our website: chuys-new.rest

We will acknowledge your request within 10 business days and provide a substantive response within 45 days of receipt. If we require additional time (up to 90 days total), we will notify you of the extension and the reasons for it. We may need to verify your identity before processing your request to protect your privacy and the security of your data.

Authorized agents may submit requests on your behalf, provided they can demonstrate authorization and you confirm the request directly with us.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, comply with our legal obligations, resolve disputes, and enforce our agreements. The specific retention periods we apply are as follows:

When personal information is no longer needed for the purposes for which it was collected and no legal obligation requires its retention, we will securely delete, destroy, or anonymize the data.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website, analyze site traffic, and deliver relevant advertising. This section provides a summary of our cookie practices.

8.1 What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They allow us to recognize your browser and remember certain information about your preferences and activities. We also use web beacons, pixel tags, and local storage technologies for similar purposes.

8.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the website to function properly, including enabling you to log in, place orders, and navigate securely. These cannot be disabled.
• Performance and Analytics Cookies: Used to collect information about how visitors use our website, including which pages are visited most often. This helps us improve our website's performance and user experience.
• Functionality Cookies: Allow our website to remember choices you make (such as your username, language, or region) to provide enhanced, personalized features.
• Targeting and Advertising Cookies: Used to deliver advertisements relevant to your interests, limit the number of times you see an ad, and measure the effectiveness of advertising campaigns.

8.3 Your Cookie Choices

You can manage your cookie preferences through:

• Our cookie consent tool available on our website
• Your browser settings (note that disabling certain cookies may affect website functionality)
• Opt-out tools provided by advertising networks, such as the Digital Advertising Alliance (DAA) opt-out page
• The Network Advertising Initiative's opt-out tool at optout.networkadvertising.org

For detailed information about the cookies we use, their specific purposes, and how to manage them, please refer to our full Cookie Policy available on our website.

9. Children's Privacy

Our website, online ordering platform, and related services are not directed at, designed for, or intended to attract children under the age of 18. We do not knowingly collect, solicit, or retain personal information from minors under 18 years of age without verifiable parental consent.

In compliance with the Children's Online Privacy Protection Act (COPPA), if we discover that we have inadvertently collected personal information from a child under the age of 13 without appropriate parental consent, we will take immediate steps to delete such information from our systems.

If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at [email protected]. We will investigate the matter and take appropriate action, including deletion of the child's personal information.

10. International Data Transfers

Chuys is based in the United States and primarily processes personal information within the United States. However, some of our service providers and technology partners may process or store data in other countries.

If your personal information is transferred outside the United States, we take appropriate measures to ensure that such transfers comply with applicable privacy laws and that your information receives an adequate level of protection. These measures may include:

• Entering into data processing agreements with service providers that include appropriate data protection clauses
• Implementing contractual safeguards that require recipients to protect your personal information in accordance with applicable U.S. privacy standards
• Ensuring that third parties adhere to data security standards consistent with those described in this Privacy Policy

By using our services, you acknowledge that your personal information may be transferred to and processed in countries other than your country of residence, which may have different data protection laws than those in your jurisdiction.

11. Third-Party Websites and Links

Our website may contain links to third-party websites, social media platforms, delivery partner sites, and other external services. This Privacy Policy applies solely to our website and services and does not cover the privacy practices of third-party websites or services.

We encourage you to review the privacy policies of any third-party sites you visit before providing them with your personal information. We are not responsible for the content, privacy practices, or data security measures of third-party websites or services.

12. Your California Privacy Rights — Additional Disclosures

If you are a California resident, the following additional disclosures apply to you under the CCPA/CPRA:

12.1 Categories of Personal Information Collected in the Past 12 Months

We have collected the following categories of personal information as defined under the CCPA:

• Identifiers: Name, email address, phone number, IP address, account usernames
• Commercial Information: Order history, purchasing records, loyalty program activity
• Internet or Other Electronic Network Activity: Browsing history on our site, search queries, interaction with our website
• Geolocation Data: Approximate location based on IP address; precise location with consent
• Inferences: Inferences drawn from the above categories to create a profile about preferences and interests
• Sensitive Personal Information: Financial payment information processed securely through our payment processors

12.2 Do Not Sell or Share My Personal Information

Under the CCPA/CPRA, California residents have the right to opt out of the "sale" or "sharing" of their personal information. If we engage in activities that constitute a sale or sharing of personal information as defined under the CCPA/CPRA, you may exercise your opt-out right by contacting us at [email protected] or by using the "Do Not Sell or Share My Personal Information" link, where available on our website.

12.3 Shine the Light Law

California Civil Code Section 1798.83 (the "Shine the Light" law) allows California residents to request information about personal information disclosed to third parties for their direct marketing purposes during the previous calendar year. To submit such a request, please contact us at [email protected].

13. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or for other operational, legal, or regulatory reasons. When we make material changes to this policy, we will:

• Post the updated Privacy Policy on our website with a new "Last Updated" date
• Notify registered users via email or through a prominent notice on our website
• Where required by law, obtain your consent before implementing material changes

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our services after the effective date of any changes constitutes your acceptance of the revised Privacy Policy.

14. How to File a Privacy Complaint

If you believe that we have not complied with this Privacy Policy or applicable privacy laws, we encourage you to first contact us directly so that we may address your concerns:

• Email: [email protected]
• Website: chuys-new.rest

We will acknowledge your complaint within 10 business days and work to resolve the matter promptly and fairly.

14.1 Filing a Complaint with Regulatory Authorities

If you are not satisfied with our response or believe we are processing your personal data unlawfully, you may file a complaint with the appropriate regulatory authority:

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please do not hesitate to contact our Privacy Team:

We are committed to working with you to resolve any privacy concerns you may have in a timely and respectful manner. We strive to respond to all privacy inquiries within 10 business days.