Privacy Policy

This Privacy Policy describes how Chuys ("we," "us," or "our") collects, uses, discloses, and safeguards your personal information when you visit our website cafechuys.click, place orders, interact with our services, or otherwise engage with our brand. Please read this policy carefully. By using our website or services, you acknowledge that you have read and understood this Privacy Policy.

We are committed to protecting your privacy and handling your personal data in a transparent, lawful, and responsible manner. This policy complies with applicable United States federal and state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), and other applicable data protection regulations.

1. About Us

Chuys is a food service business operating in the United States. We operate the website cafechuys.click and provide food-related services including online ordering, reservations, loyalty programs, and related customer support services.

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at [email protected] before taking any formal action.

2. Scope of This Policy

This Privacy Policy applies to:

• All visitors to our website cafechuys.click
• Customers who place online orders, reservations, or make purchases through our platform
• Individuals who subscribe to our newsletter, promotional emails, or loyalty programs
• Anyone who contacts us for customer support or communicates with us via email, phone, or online forms
• Users who interact with our social media pages or third-party platforms linked to our services

This policy does not apply to third-party websites, applications, or services that may be linked from our website. We encourage you to review the privacy policies of any third-party platforms you visit.

3. Information We Collect

We collect various categories of personal information depending on how you interact with us. Below is a detailed breakdown of the types of data we gather.

3.1 Personal Identification Information

When you create an account, place an order, make a reservation, or contact us, we may collect:

• Full name — to identify and address you personally
• Email address — for order confirmations, account management, and communications
• Phone number — for order updates, delivery coordination, or reservation reminders
• Postal address and delivery address — for order fulfillment and delivery services
• Date of birth — where required for age verification or promotional purposes
• Username and password — for account security and access management

3.2 Payment and Financial Information

When you make a purchase through our platform, we may collect:

• Credit or debit card numbers (processed securely through third-party payment processors)
• Billing address associated with your payment method
• Transaction amounts, order history, and purchase records

3.3 Usage and Behavioral Data

When you browse or interact with our website, we automatically collect certain usage data, including:

• Pages visited, links clicked, and content viewed
• Time and duration of visits
• Search queries entered on our website
• Items added to your cart, wish list, or order history
• Referral source (how you arrived at our website)
• Clickstream data and navigation patterns

3.4 Device and Technical Information

We may collect technical information about the device and software you use to access our website:

• IP address and approximate geographic location derived from your IP address
• Browser type and version
• Operating system and platform
• Device identifiers (device ID, advertising ID)
• Screen resolution and display settings
• Time zone and language preferences

3.5 Communications Data

If you contact us directly, we may retain records of:

• Email correspondence and messages sent to us
• Customer support tickets and chat transcripts
• Feedback, reviews, and survey responses you submit
• Comments or posts on our social media pages

3.6 Cookie and Tracking Data

We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about your browsing behavior. Please see Section 9 of this policy for more detailed information about our cookie practices.

3.7 Information from Third Parties

We may receive information about you from third-party sources, including:

• Social media platforms (if you connect your account or log in via social media)
• Marketing and advertising partners
• Analytics providers
• Delivery and logistics partners
• Payment processors and fraud prevention services

4. How We Use Your Information

We use the personal information we collect for specific, legitimate purposes related to our food service business. We will only process your data where we have a valid legal basis to do so.

4.1 Service Provision and Order Fulfillment

• Processing and fulfilling your food orders or reservations
• Managing your customer account and profile
• Sending order confirmations, receipts, and status updates
• Coordinating delivery or pickup services
• Processing payments and managing billing
• Providing customer support and resolving disputes

4.2 Marketing and Promotional Communications

• Sending newsletters, promotional offers, and special deals (with your consent where required)
• Informing you about new menu items, seasonal promotions, or loyalty program rewards
• Personalizing marketing content based on your preferences and order history
• Running targeted advertising campaigns on third-party platforms

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any marketing email, or by contacting us at [email protected].

4.3 Analytics and Business Improvement

• Analyzing usage patterns to improve our website, menu, and services
• Conducting market research and customer satisfaction surveys
• Monitoring website performance, security, and stability
• Identifying and fixing technical errors or bugs
• Understanding customer preferences to refine our food offerings

4.4 Legal and Compliance Purposes

• Complying with applicable laws, regulations, and legal obligations
• Responding to lawful requests from government authorities or law enforcement
• Enforcing our Terms of Service and other legal agreements
• Detecting, preventing, and investigating fraud, security breaches, or illegal activities
• Protecting the rights, property, and safety of Chuys, our customers, and the public

4.5 Loyalty Program and Personalization

• Managing your loyalty rewards points and account benefits
• Personalizing your experience on our website based on your history and preferences
• Recommending menu items tailored to your past orders or dietary preferences

5. Legal Basis for Processing

Under applicable United States privacy laws and general data protection principles, we rely on the following legal bases for processing your personal information:

6. Sharing Your Information with Third Parties

We do not sell your personal information to third parties for monetary compensation. However, we may share your data with trusted partners and service providers for legitimate business purposes as described below.

6.1 Service Providers and Business Partners

We engage third-party companies and individuals to assist us in operating our business. These service providers are authorized to use your personal information only as necessary to provide services to us. They include:

• Payment processors — to handle secure payment transactions
• Delivery and logistics companies — to fulfill food delivery orders
• Email marketing platforms — to send promotional and transactional emails
• Analytics providers (e.g., Google Analytics) — to analyze website traffic and usage
• Customer support tools — to manage and track support requests
• Cloud storage and hosting providers — to store and manage our data securely
• Fraud prevention and security services — to detect and prevent fraudulent activity

6.2 Legal Requirements and Law Enforcement

We may disclose your personal information if required to do so by law or in response to valid legal processes, including:

• Compliance with a subpoena, court order, or government request
• Investigation of potential violations of our Terms of Service
• Protection against legal liability or to defend our legal rights
• Cooperation with law enforcement agencies in criminal investigations

6.3 Business Transfers

If Chuys undergoes a merger, acquisition, asset sale, or any other business reorganization, your personal information may be transferred as part of that transaction. We will notify you via email or a prominent notice on our website if such a transfer occurs, and we will describe your choices at that time.

6.4 Aggregated and De-Identified Data

We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you with third parties for research, marketing, analytics, or other business purposes.

6.5 California Residents — "Do Not Sell or Share My Personal Information"

Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), California residents have the right to opt out of the "sale" or "sharing" of their personal information. While we do not sell personal information in the traditional sense, we may share certain data with advertising partners in ways that qualify as "sharing" under California law. California residents may exercise their opt-out right by contacting us at [email protected] with the subject line "Do Not Sell or Share My Personal Information."

7. Data Security

We take the security of your personal information seriously and implement a variety of industry-standard technical, administrative, and physical measures to protect your data from unauthorized access, disclosure, alteration, or destruction.

7.1 Security Measures We Use

• SSL/TLS Encryption: All data transmitted between your browser and our website is encrypted using Secure Socket Layer (SSL) or Transport Layer Security (TLS) technology.
• Secure Payment Processing: Payment card data is processed through PCI-DSS compliant payment gateways. We do not store card numbers on our servers.
• Access Controls: Access to personal data is restricted to authorized employees and contractors who need it to perform their job functions.
• Password Hashing: User passwords are stored in encrypted, hashed format — never in plain text.
• Regular Security Audits: We conduct periodic reviews of our security practices and systems.
• Firewalls and Intrusion Detection: We use technical safeguards to detect and prevent unauthorized access attempts.

7.2 Data Breach Response

In the event of a data breach that affects your personal information, we will notify affected users and relevant authorities as required by applicable law, including state breach notification laws. We will take immediate steps to investigate, contain, and mitigate any breach.

8. Your Privacy Rights

Depending on your location and applicable law, you may have certain rights regarding your personal information. We are committed to honoring these rights.

8.1 Rights Available to All Users

• Right to Access: You may request a copy of the personal information we hold about you.
• Right to Correction: You may request that we correct inaccurate or incomplete personal information.
• Right to Deletion: You may request that we delete your personal information, subject to certain legal exceptions.
• Right to Opt Out of Marketing: You may unsubscribe from marketing communications at any time.
• Right to Data Portability: Where technically feasible, you may request your personal data in a structured, machine-readable format.

8.2 Additional Rights for California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the CCPA and CPRA:

• Right to Know: The right to know what personal information we collect, use, disclose, or sell, including the categories and specific pieces of information.
• Right to Delete: The right to request deletion of personal information we have collected from you, with certain exceptions.
• Right to Correct: The right to request correction of inaccurate personal information.
• Right to Opt Out of Sale/Sharing: The right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising.
• Right to Limit Use of Sensitive Personal Information: The right to limit the use and disclosure of your sensitive personal information to certain purposes.
• Right to Non-Discrimination: You have the right not to receive discriminatory treatment for exercising your CCPA/CPRA rights. We will not deny you services, charge you different prices, or provide a lower quality of service because you exercised your privacy rights.

8.3 How to Exercise Your Rights

To exercise any of your privacy rights, please submit a request to us using the following contact information:

• Email: [email protected]
• Website: cafechuys.click

Please include the following in your request:

• Your full name and contact information
• The specific right you wish to exercise
• Sufficient information to allow us to verify your identity

We will respond to your request within 45 days of receipt. If we require additional time, we will notify you and provide an explanation. We may need to verify your identity before processing your request to protect your security and privacy.

You may also designate an authorized agent to submit requests on your behalf. The agent must provide written authorization signed by you, and we may still require you to verify your identity directly.

9. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your experience, analyze usage, and deliver relevant advertising. Cookies are small text files stored on your device when you visit our website.

9.1 Types of Cookies We Use

9.2 Managing Your Cookie Preferences

You can manage your cookie preferences through:

• Browser settings: Most browsers allow you to control cookies through their settings. Consult your browser's help documentation for instructions.
• Our cookie consent tool: When you first visit our website, you may be presented with a cookie consent banner where you can accept or decline non-essential cookies.
• Opt-out tools: For analytics cookies (e.g., Google Analytics), you may use the Google Analytics Opt-Out Browser Add-on.

Please note that disabling certain cookies may affect the functionality and performance of our website.

10. Data Retention

We retain your personal information only for as long as is necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by applicable law.

After the applicable retention period, we will securely delete or anonymize your personal information. If deletion is not immediately possible (for example, due to backup storage), we will isolate the data from further processing until deletion is feasible.

11. Children's Privacy

Our website and services are not directed to individuals under the age of 18. We do not knowingly solicit, collect, or use personal information from children under 18. If you are under 18 years of age, please do not submit any personal information through our website or services.

If we become aware that we have inadvertently collected personal information from a child under 18 without parental consent, we will take immediate steps to delete such information from our records. If you believe we may have collected information from a minor, please contact us immediately at [email protected].

Parents or guardians who discover that their child has submitted personal information to us without their consent may contact us to request the deletion of such information. We will process such requests promptly and in accordance with applicable law, including the Children's Online Privacy Protection Act (COPPA) where applicable.

12. International Data Transfers

Chuys is based in the United States and primarily serves customers within the United States. Your personal information is stored and processed on servers located in the United States. If you are accessing our website from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your home country.

By using our website and services, you consent to the transfer of your personal information to the United States and to our processing of your data in accordance with this Privacy Policy. We take appropriate measures to ensure that such transfers comply with applicable data protection requirements and that your personal information remains protected to the standards described in this policy.

Where we transfer personal data across borders, we implement appropriate safeguards such as:

• Standard contractual clauses or data processing agreements with our service providers
• Ensuring recipients maintain adequate security standards
• Compliance with applicable data transfer regulations

13. Third-Party Links and Services

Our website may contain links to third-party websites, social media platforms, and external services. This Privacy Policy does not apply to those third-party sites. We are not responsible for the privacy practices or content of any websites or services not operated by Chuys.

We encourage you to review the privacy policies of any third-party websites you visit through links on our website. Common third-party services we may link to include:

• Social media platforms (Facebook, Instagram, Twitter/X)
• Food delivery aggregator platforms
• Review and rating platforms (Yelp, Google Reviews)
• Payment gateway providers

14. California-Specific Disclosures

In addition to the rights described in Section 8.2, California residents are entitled to the following disclosures under the CCPA/CPRA:

14.1 Categories of Personal Information Collected

In the preceding 12 months, we have collected the following categories of personal information (as defined under CCPA):

• Identifiers (name, email, IP address, phone number)
• Commercial information (purchase history, transaction records)
• Internet or other electronic network activity information (browsing history, cookie data)
• Geolocation data (general location derived from IP address)
• Inferences drawn from personal information to create a profile (preferences, interests)

14.2 Categories of Third Parties with Whom We Share Data

• Service providers (payment processors, delivery companies, analytics providers)
• Advertising and marketing partners
• Legal and regulatory authorities (when required by law)

14.3 Shine the Light Law

California Civil Code Section 1798.83 (the "Shine the Light" law) permits California residents to request information about disclosures of their personal information to third parties for direct marketing purposes. To make such a request, please contact us at [email protected].

15. How to File a Complaint

If you believe that we have violated your privacy rights or mishandled your personal information, we encourage you to contact us first so that we can try to resolve the issue directly.

15.1 Contact Us First

Please reach out to our privacy team at:

• Email: [email protected]
• Website: cafechuys.click

We will investigate your complaint and respond within 30 days. If we are unable to resolve the complaint to your satisfaction, you have the right to escalate to the relevant authorities.

15.2 Filing a Complaint with Regulatory Authorities

Depending on your location, you may have the right to file a complaint with relevant regulatory bodies:

• California residents: You may file a complaint with the California Privacy Protection Agency (CPPA) at cppa.ca.gov or the California Attorney General's Office.
• All U.S. consumers: You may file a complaint with the Federal Trade Commission (FTC) at reportfraud.ftc.gov if you believe our data practices violate the FTC Act or other consumer protection laws.
• Residents of other states: You may contact your state's Attorney General office or applicable consumer protection authority.

16. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our business practices, legal requirements, or technological developments. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy
• Post a prominent notice on our website
• Send an email notification to registered users (where required by law)

Your continued use of our website and services after any changes to this Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this policy periodically to stay informed about how we protect your information.

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please do not hesitate to contact us. We are committed to addressing your inquiries promptly and transparently.

When contacting us regarding a privacy matter, please include your name, contact information, a description of your request or concern, and any relevant details to help us assist you efficiently. We aim to respond to all privacy-related inquiries within 30 business days.

Thank you for trusting Chuys with your personal information. We are dedicated to maintaining your privacy and providing you with a safe, enjoyable food service experience.