Privacy Policy

Effective Date: May 24, 2026  |  Last Updated: May 24, 2026

1. Introduction and Who We Are

Welcome to Chuys. We are a food business operating in the United States, committed to providing our customers with exceptional food experiences while respecting and protecting your privacy. We understand that your personal information is important to you, and we take our responsibility to handle it with care very seriously.

This Privacy Policy applies to all information collected through our website located at chuys-food.digital, our online ordering systems, mobile-optimized pages, email communications, and any other digital or physical touchpoints where we interact with you. This policy is designed to comply with applicable United States privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission (FTC) Act, and other applicable federal and state privacy regulations.

Throughout this document, "personal information" refers to any information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, to you or your household.

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us using the information provided in the Contact Us section at the bottom of this document.

2. Contact Information

For all privacy-related inquiries, requests, or complaints, you may reach us through the following channels:

We are committed to responding to all privacy-related inquiries within 30 days of receipt, in accordance with applicable legal requirements.

3. Information We Collect

We collect various types of information in connection with providing our food services and operating our website. The categories of personal information we may collect include:

3.1 Personal Identification Information

When you register an account, place an order, or contact us, we may collect:

• Full name
• Email address
• Phone number
• Billing and delivery address
• Username and password (stored in encrypted form)
• Date of birth (for age verification purposes)
• Profile picture (if provided voluntarily)

3.2 Order and Transaction Information

When you place orders or make purchases through our platform, we collect:

• Order history and details
• Food preferences and dietary restrictions (if provided)
• Payment information (processed securely through third-party payment processors; we do not store full credit card numbers)
• Transaction IDs and timestamps
• Delivery instructions and preferences
• Special requests or notes associated with orders

3.3 Usage Data and Online Activity

When you visit our website or use our digital services, we automatically collect:

• IP address
• Browser type and version
• Operating system
• Pages viewed and navigation paths on our website
• Time and date of your visits
• Time spent on individual pages
• Referring URLs (the page you visited before coming to our site)
• Search queries entered on our website
• Links clicked
• Conversion events (such as completing a purchase)

3.4 Device Information

We may collect information about the device you use to access our services, including:

• Device type (desktop, tablet, smartphone)
• Device identifiers
• Mobile network information
• Screen resolution and display settings
• Hardware configuration details

3.5 Location Data

With your permission or as necessary to fulfill your delivery orders, we may collect:

• Approximate geographic location derived from your IP address
• Precise GPS location (only if you grant permission through your device settings)
• Delivery address information you provide

3.6 Communications and Feedback

When you contact us or interact with our customer service, we collect:

• Email correspondence
• Customer service chat logs
• Feedback, reviews, and ratings you submit
• Survey responses
• Social media interactions with our official accounts

3.7 Cookies and Tracking Technologies

We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about your interactions with our website. For detailed information about our use of cookies, please refer to Section 9 of this policy.

3.8 Information from Third Parties

We may also receive information about you from third-party sources, including:

• Social media platforms (if you connect your account or log in through social media)
• Marketing partners and data brokers
• Delivery service partners
• Payment processors
• Analytics providers

4. How We Use Your Information

We use the personal information we collect for the following purposes:

4.1 Service Provision and Order Fulfillment

• Processing and fulfilling your food orders
• Managing your account and profile
• Processing payments and preventing fraud
• Coordinating delivery services
• Providing customer support and responding to inquiries
• Sending order confirmations, receipts, and status updates
• Personalizing your experience based on your preferences and history

4.2 Analytics and Service Improvement

• Analyzing website traffic and user behavior to improve our platform
• Understanding customer preferences and trends
• Testing new features and functionality
• Measuring the effectiveness of our menu offerings
• Conducting internal research and business intelligence
• Monitoring system performance and identifying technical issues

4.3 Marketing and Communications

• Sending promotional emails, newsletters, and special offers (with your consent where required)
• Displaying targeted advertisements on our platform and third-party websites
• Running loyalty programs and reward campaigns
• Conducting surveys and collecting customer feedback
• Notifying you about new menu items, seasonal specials, and events

4.4 Legal Compliance and Safety

• Complying with applicable laws, regulations, and legal processes
• Enforcing our Terms of Service and other policies
• Detecting, preventing, and investigating fraudulent or illegal activity
• Protecting the rights, property, and safety of our customers, employees, and business
• Responding to lawful requests from law enforcement or government authorities

4.5 Legal Basis for Processing

We process your personal information on the following legal bases:

• Contract Performance: Processing necessary to fulfill your orders and provide requested services
• Legitimate Interests: Processing necessary for our legitimate business interests, such as improving our services and preventing fraud
• Consent: Processing based on your explicit consent, such as for marketing communications
• Legal Obligation: Processing necessary to comply with applicable laws and regulations

5. Sharing Your Information with Third Parties

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes. However, we may share your information in the following circumstances:

5.1 Service Providers and Business Partners

We may share your information with trusted third-party service providers who assist us in operating our business, including:

• Payment Processors: To securely process your transactions
• Delivery Partners: To coordinate and fulfill food deliveries
• Cloud Service Providers: To host and store our data securely
• Analytics Providers: To help us understand how our website is used (e.g., Google Analytics)
• Email Service Providers: To send transactional and marketing emails
• Customer Support Platforms: To manage customer service interactions
• Marketing Platforms: To run advertising campaigns

All third-party service providers are contractually obligated to use your information only for the purposes of providing services to us and to maintain appropriate security measures.

5.2 Legal Requirements and Law Enforcement

We may disclose your personal information if we believe in good faith that such disclosure is necessary to:

• Comply with a legal obligation, court order, subpoena, or governmental request
• Enforce our Terms of Service or other agreements
• Protect and defend the rights or property of Chuys
• Prevent or investigate possible wrongdoing in connection with our services
• Protect the personal safety of users of our services or the public

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal information may be transferred to the acquiring entity. We will notify you via email and/or a prominent notice on our website of any such change in ownership or control of your personal information, and you will have the opportunity to request deletion of your data prior to the transfer.

5.4 Aggregated and De-Identified Data

We may share aggregated or de-identified information that cannot reasonably be used to identify you with third parties for research, marketing, analytics, and other business purposes.

5.5 With Your Consent

We may share your personal information with other third parties when you have explicitly provided your consent to do so.

6. Data Security

We take the security of your personal information seriously and implement a comprehensive set of technical, administrative, and physical security measures designed to protect your data from unauthorized access, disclosure, alteration, or destruction.

6.1 Technical Safeguards

• Encryption: All data transmitted between your browser and our servers is protected using industry-standard SSL/TLS encryption (HTTPS)
• Secure Storage: Personal data is stored on secure servers with restricted access controls
• Password Protection: User passwords are stored using strong cryptographic hashing algorithms
• Firewalls and Intrusion Detection: We use network security tools to monitor and protect against unauthorized access
• Regular Security Audits: We conduct periodic security assessments to identify and address vulnerabilities

6.2 Administrative Safeguards

• Access to personal information is limited to employees and contractors who need it to perform their job functions
• All staff with access to personal data receive privacy and security training
• We maintain data processing agreements with all third-party service providers
• We have incident response procedures in place to address potential data breaches

6.3 Data Breach Notification

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected individuals and relevant authorities in accordance with applicable law. Notification will be provided as promptly as practicable and without unreasonable delay.

7. Your Rights and Choices

Depending on your location and applicable law, you may have the following rights regarding your personal information:

7.1 Right to Know and Access

You have the right to request information about the personal data we hold about you, including:

• The categories of personal information collected
• The sources from which the information was collected
• The purposes for which the information is used
• The categories of third parties with whom we share information
• A copy of the specific personal information we hold about you

7.2 Right to Correction

You have the right to request that we correct any inaccurate or incomplete personal information we hold about you. You may also update your information directly through your account settings on our website.

7.3 Right to Deletion

You have the right to request that we delete your personal information. We will honor such requests unless we are required to retain the information for legal purposes, to complete transactions, to detect and prevent fraud, or to exercise our legal rights.

7.4 Right to Data Portability

You have the right to receive your personal information in a structured, commonly used, and machine-readable format, and to transmit that data to another service provider where technically feasible.

7.5 Right to Opt-Out of Marketing

You may opt out of receiving promotional communications from us at any time by:

• Clicking the "unsubscribe" link at the bottom of any marketing email
• Updating your communication preferences in your account settings
• Contacting us at [email protected]

Please note that even if you opt out of marketing communications, we will continue to send you transactional communications related to your orders and account.

7.6 California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), including:

• Right to Know: The right to know what personal information is collected, used, shared, or sold
• Right to Delete: The right to request deletion of your personal information
• Right to Correct: The right to correct inaccurate personal information
• Right to Opt-Out of Sale/Sharing: The right to opt out of the sale or sharing of your personal information
• Right to Limit Use of Sensitive Personal Information: The right to limit how we use and disclose sensitive personal information
• Right to Non-Discrimination: The right not to receive discriminatory treatment for exercising your CCPA rights

To exercise your California privacy rights, please contact us at [email protected] or submit a request through our website. We will verify your identity before processing your request and will respond within 45 days, with an extension of up to 90 days when reasonably necessary.

7.7 How to Exercise Your Rights

To submit a privacy rights request, please contact us using one of the following methods:

• Email: [email protected]
• Website: chuys-food.digital

We may need to verify your identity before processing your request. This may involve asking you to confirm information we already have on file about you. We will not discriminate against you for exercising your privacy rights.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and deliver personalized content and advertisements.

8.1 Types of Cookies We Use

8.2 Managing Cookies

You can control and manage cookies in the following ways:

• Browser Settings: Most browsers allow you to refuse or delete cookies through their settings. Please note that disabling cookies may affect the functionality of our website.
• Cookie Consent Banner: When you first visit our website, you will be presented with a cookie consent banner that allows you to accept or decline non-essential cookies.
• Opt-Out Tools: You can opt out of interest-based advertising through the Digital Advertising Alliance (DAA) or the Network Advertising Initiative (NAI).

For more detailed information about our use of cookies, please refer to our separate Cookie Policy available on our website.

9. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

When your personal information is no longer needed, we will securely delete or anonymize it. In some cases, we may retain anonymized data that cannot be linked back to you for research and analytics purposes.

10. Children's Privacy

We are committed to protecting the privacy of children. Our website and services are not directed toward individuals under the age of 18, and we do not knowingly solicit or collect personal information from minors.

If you are a parent or legal guardian and believe that your child under the age of 18 has provided us with personal information without your consent, please contact us immediately at [email protected]. Upon verification, we will take prompt steps to remove such information from our records and terminate any associated account.

We comply with the Children's Online Privacy Protection Act (COPPA) and do not knowingly collect personal information from children under the age of 13. If we become aware that we have inadvertently collected personal information from a child under 13, we will delete that information as quickly as possible.

11. International Data Transfers

Chuys is based in the United States, and your personal information is primarily processed and stored within the United States. However, some of our third-party service providers may be located in other countries, which means your personal information may be transferred to and processed in countries outside of the United States.

When we transfer personal information internationally, we take steps to ensure that appropriate safeguards are in place to protect your information, including:

• Ensuring that the receiving country provides an adequate level of data protection
• Using standard contractual clauses or other legally approved transfer mechanisms
• Requiring third-party recipients to maintain appropriate security standards
• Conducting due diligence on international service providers

By using our services, you acknowledge and consent to the transfer of your personal information to the United States and other countries where our service providers operate. We will always handle your information in accordance with this Privacy Policy regardless of where it is processed.

12. Third-Party Links and Services

Our website may contain links to third-party websites, applications, or services that are not operated by us. This Privacy Policy does not apply to those third-party platforms, and we are not responsible for their privacy practices.

We encourage you to review the privacy policies of any third-party websites you visit through links on our platform. Common third-party services we may link to include:

• Social media platforms (Facebook, Instagram, Twitter/X)
• Payment processing services
• Food delivery partner platforms
• Review and rating platforms

The inclusion of a link to a third-party website does not constitute our endorsement of that site or its privacy practices.

13. Do Not Track Signals

Some web browsers include a "Do Not Track" (DNT) feature that signals to websites that you do not want your online activity tracked. Currently, there is no universally accepted standard for how to respond to DNT signals, and our website does not currently respond to DNT browser signals in a specific way.

However, you may control tracking through our cookie consent management tools and the opt-out mechanisms described in the Cookies section of this policy.

14. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes to this policy, we will:

• Post the updated policy on our website with a new "Last Updated" date
• Send an email notification to registered users (where applicable)
• Display a prominent notice on our website for a reasonable period

Your continued use of our website and services after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this policy periodically to stay informed about how we protect your information.

15. How to File a Complaint

If you have concerns about how we handle your personal information and are not satisfied with our response, you have the right to file a complaint with the appropriate regulatory authority.

15.1 Filing a Complaint with the FTC

In the United States, the Federal Trade Commission (FTC) oversees consumer protection and privacy matters. You may file a complaint with the FTC at:

• Website: reportfraud.ftc.gov
• Phone: 1-877-FTC-HELP (1-877-382-4357)
• Address: Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, DC 20580

15.2 Filing a Complaint with California Authorities (CPPA)

California residents may also submit privacy-related complaints to the California Privacy Protection Agency (CPPA):

• Website: cppa.ca.gov
• Address: California Privacy Protection Agency, 2101 Arena Boulevard, Sacramento, CA 95834

15.3 State Attorney General Offices

Depending on your state of residence, you may also have the right to file a complaint with your state's Attorney General office. Many state Attorney General offices handle consumer privacy complaints. Please visit your state government's official website for contact information specific to your location.

15.4 Contact Us First

Before filing a complaint with a regulatory authority, we encourage you to contact us directly so that we have the opportunity to resolve your concern:

• Email: [email protected]
• Website: chuys-food.digital

16. Contact Us for Privacy Inquiries

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact our privacy team. We are committed to addressing your concerns promptly and transparently.

When contacting us regarding a privacy matter, please provide your full name, email address, and a detailed description of your inquiry or request so that we can assist you as efficiently as possible.

Effective Date: May 24, 2026  |  Last Updated: May 24, 2026
This Privacy Policy was prepared for Chuys and applies to the website chuys-food.digital. This policy is intended to comply with applicable United States privacy laws, including the California Consumer Privacy Act (CCPA/CPRA), the Children's Online Privacy Protection Act (COPPA), and the Federal Trade Commission Act. This document constitutes our complete privacy disclosure and supersedes any prior privacy notices or statements.