Privacy Policy

Welcome to Chuys ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website chuys-meal.digital, place orders through our digital platforms, or otherwise interact with our food services. We are committed to protecting your privacy and ensuring that your personal data is handled in a responsible, transparent, and legally compliant manner.

By accessing or using our website and services, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy. If you do not agree with the terms described herein, please discontinue your use of our website and services immediately.

This Privacy Policy is governed by and complies with applicable United States federal and state privacy laws, including but not limited to the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), and the Federal Trade Commission Act (FTC Act) regarding unfair or deceptive practices. Additional state-specific privacy rights may apply depending on your location.

1. Who We Are

Chuys is a food service business operating through our digital platform located at chuys-meal.digital. We provide online food ordering, delivery coordination, menu browsing, and related food service features to our customers across the United States.

2. Information We Collect

We collect various categories of personal information depending on how you interact with our website and services. The categories below describe what we collect, why we collect it, and the sources from which it is obtained.

2.1 Personal Identification Information

When you create an account, place an order, or contact us, we may collect the following personally identifiable information (PII):

• Full name
• Email address
• Phone number
• Billing and delivery address
• Date of birth (for age verification purposes)
• Username and password (stored in encrypted form)
• Profile picture (if voluntarily uploaded)

2.2 Payment and Financial Information

When you make a purchase through our platform, we collect payment-related information necessary to process your transaction. This may include:

• Credit or debit card numbers (processed securely through third-party payment processors)
• Billing name and address
• Transaction history and order details
• Digital wallet identifiers (e.g., Apple Pay, Google Pay)

2.3 Order and Food Preference Data

As part of providing our food ordering services, we collect:

• Your order history and meal preferences
• Dietary restrictions or allergies you voluntarily provide
• Saved favorite items or restaurants
• Delivery instructions and special requests
• Customer reviews and ratings you submit

2.4 Usage Data and Analytics

When you browse or interact with our website, we automatically collect certain technical and behavioral data, including:

• IP address and approximate geographic location
• Browser type, version, and settings
• Pages viewed, time spent on pages, and clickstream data
• Referring URLs and exit pages
• Search queries made on our website
• Time and date of your visits
• Features and functions accessed during your session

2.5 Device Information

We may collect information about the device you use to access our services, including:

• Device type (desktop, mobile, tablet)
• Operating system and version
• Unique device identifiers
• Mobile network information
• Screen resolution and display settings

2.6 Communications Data

If you contact us via email, contact forms, live chat, or other communication channels, we collect and retain records of those communications, including:

• The content of messages sent to us
• Your contact details as provided in the message
• Our responses and any follow-up correspondence
• Support ticket records and resolution notes

2.7 Cookies and Tracking Technologies

We use cookies, web beacons, pixel tags, local storage, and similar tracking technologies to enhance your experience on our website. Please refer to Section 9 of this Privacy Policy for detailed information about our cookie practices, or consult our dedicated Cookie Policy if available on our website.

2.8 Information from Third Parties

We may receive personal information about you from third-party sources, such as:

• Social media platforms (if you connect your account or log in via social sign-on)
• Marketing partners and data brokers
• Delivery partners and logistics providers
• Payment processors confirming successful transactions
• Analytics providers aggregating behavioral data

3. How We Use Your Information

We use the personal information we collect for specific, legitimate purposes related to the operation of our food service business. We do not use your information for any purpose that is incompatible with those originally disclosed at the time of collection.

3.1 Service Provision and Order Fulfillment

• To process and fulfill your food orders
• To coordinate delivery to your specified address
• To communicate order confirmations, updates, and notifications
• To provide customer support and resolve disputes
• To manage your account and maintain your order history

3.2 Payment Processing

• To authenticate and authorize payment transactions
• To prevent fraudulent transactions and chargebacks
• To maintain accurate billing records
• To issue refunds where applicable

3.3 Website Improvement and Analytics

• To understand how users interact with our website and identify areas for improvement
• To analyze traffic patterns, popular menu items, and user preferences
• To test new features, layouts, or functionality before full deployment
• To monitor website performance, uptime, and technical errors

3.4 Marketing and Promotional Communications

• To send you promotional emails, special offers, and news about Chuys (with your consent where required)
• To deliver personalized advertisements based on your browsing and order history
• To run loyalty programs and reward campaigns
• To retarget you with relevant ads on third-party platforms

You may opt out of marketing communications at any time by clicking the "Unsubscribe" link in any email we send, or by contacting us at [email protected]. Please note that even if you opt out of marketing emails, we will still send you transactional communications related to your orders.

3.5 Legal Compliance and Safety

• To comply with applicable federal, state, and local laws and regulations
• To respond to lawful requests from law enforcement or regulatory authorities
• To enforce our Terms of Service and other legal agreements
• To protect the rights, safety, and property of Chuys, our employees, customers, and the public
• To detect, investigate, and prevent fraud, abuse, and security incidents

4. Sharing Your Information with Third Parties

Chuys does not sell your personal information to third parties for monetary compensation. However, we do share certain personal information with trusted third-party service providers and partners in the course of operating our business, as described below.

4.1 Service Providers

We engage third-party companies and individuals to perform functions on our behalf. These service providers have access to personal information only as necessary to perform their specific services and are contractually prohibited from using it for any other purpose. Service providers include:

• Payment Processors: Companies that process credit/debit card transactions securely on our behalf
• Delivery Partners: Third-party logistics and delivery companies that fulfill your food orders
• Cloud Hosting Providers: Companies that host and maintain our website and databases
• Analytics Providers: Services such as Google Analytics that help us understand website usage
• Email Service Providers: Platforms used to send transactional and marketing emails
• Customer Support Tools: Helpdesk and live chat software providers
• Fraud Prevention Services: Companies that help identify and prevent fraudulent activity

4.2 Business Transfers

In the event that Chuys undergoes a merger, acquisition, sale of assets, reorganization, or bankruptcy proceeding, your personal information may be transferred to the successor entity as part of that transaction. We will provide notice of any such change and the applicable privacy choices available to you.

4.3 Legal Requirements

We may disclose your personal information when we believe in good faith that disclosure is required to:

• Comply with a valid legal obligation, court order, subpoena, or government request
• Enforce our legal rights or defend against legal claims
• Protect against imminent harm to the safety of any person
• Detect or prevent fraud, security threats, or illegal activity

4.4 With Your Consent

We may share your information with additional third parties when you have provided explicit consent for us to do so, such as when you participate in a co-branded promotion or integrate a third-party application with your account.

4.5 Aggregated and De-Identified Data

We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you with third parties for research, analytics, marketing, or other business purposes.

5. Data Security

We take the security of your personal information seriously and implement a variety of technical, administrative, and physical safeguards designed to protect your data from unauthorized access, disclosure, alteration, or destruction.

5.1 Technical Safeguards

• SSL/TLS encryption for all data transmitted between your browser and our servers
• AES-256 encryption for sensitive data stored in our databases
• Firewalls and intrusion detection systems
• Regular vulnerability scanning and penetration testing
• Multi-factor authentication for administrative access to our systems
• Automatic session timeouts to protect your account

5.2 Administrative Safeguards

• Strict access controls limiting employee access to personal data on a need-to-know basis
• Regular employee training on data privacy and security best practices
• Written data protection policies and procedures
• Background checks for employees handling sensitive customer data
• Vendor due diligence and contractual data processing agreements

5.3 Incident Response

In the event of a data breach that affects your personal information, we will notify affected individuals in accordance with applicable federal and state breach notification laws, including state-specific notification statutes that require timely notification to affected residents and relevant regulatory authorities.

6. Your Privacy Rights

Depending on your state of residence within the United States, you may have specific privacy rights regarding your personal information. We are committed to honoring these rights in a timely and transparent manner.

6.1 California Residents — CCPA/CPRA Rights

If you are a resident of California, you have the following rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA):

• Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the sources of collection, the purposes for collection, and the categories of third parties with whom we share your information.
• Right to Delete: You have the right to request that we delete personal information we have collected about you, subject to certain exceptions permitted by law.
• Right to Correct: You have the right to request that we correct inaccurate personal information we maintain about you.
• Right to Opt-Out of Sale/Sharing: You have the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising.
• Right to Limit Use of Sensitive Personal Information: You have the right to limit our use of sensitive personal information to purposes specifically authorized by the CPRA.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA privacy rights.
• Right to Data Portability: You have the right to receive a copy of your personal information in a portable, readily usable format.

To exercise any of these rights, please submit a verifiable consumer request to us by emailing [email protected]. We will respond to verified requests within 45 days, with an option to extend by an additional 45 days when necessary.

6.2 Other State Residents

Residents of other states, including but not limited to Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Texas, Montana, and others, may have additional privacy rights under their respective state laws. These rights may include the right to access, delete, correct, and port personal data, as well as the right to opt out of targeted advertising and profiling. We honor these rights and encourage residents of those states to contact us to exercise applicable rights.

6.3 How to Submit a Privacy Rights Request

To submit a request to exercise any of your privacy rights, please:

• Email us at [email protected] with the subject line "Privacy Rights Request"
• Include your full name, email address associated with your account, and the specific right you wish to exercise
• Provide sufficient information for us to verify your identity before processing the request

We may need to verify your identity to protect against fraudulent requests. We will not fulfill a request if we cannot verify the requester's identity with a reasonable degree of certainty.

6.4 Authorized Agents

California residents may designate an authorized agent to submit privacy requests on their behalf. To use an authorized agent, you must provide the agent with written, signed permission, and we may require you to verify your identity directly with us before processing the request.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with our legal obligations, resolve disputes, and enforce our agreements. The specific retention periods we apply are outlined below.

When personal information is no longer needed, we securely delete or anonymize it in accordance with our data destruction protocols and applicable legal requirements.

8. Children's Privacy

Chuys does not direct its services to children, and our website is not designed to attract minors. We do not knowingly collect personal information from individuals under the age of 18. If you are under 18, please do not use our website or provide any personal information to us.

If we become aware that we have inadvertently collected personal information from a person under the age of 18, we will take immediate steps to delete such information from our records. If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

We comply with the Children's Online Privacy Protection Act (COPPA) and will not knowingly collect personal information from children under 13 years of age under any circumstances.

9. Cookie Policy

Cookies are small text files placed on your device by websites you visit. They are widely used to make websites work efficiently, to enhance user experience, and to provide information to website operators. Chuys uses cookies and similar tracking technologies on our website for the following purposes:

9.1 Types of Cookies We Use

9.2 Managing Cookie Preferences

You can control and manage cookies through your browser settings. Most browsers allow you to block or delete cookies. However, please note that disabling certain cookies may affect the functionality of our website and your ability to use some features. You may also opt out of interest-based advertising by visiting:

• Network Advertising Initiative Opt-Out
• Digital Advertising Alliance Opt-Out

For California residents, you may also exercise your right to opt out of the sale or sharing of personal information through cookies by contacting us at [email protected].

10. International Data Transfers

Chuys is based in the United States, and your personal information is primarily processed and stored on servers located within the United States. However, some of our third-party service providers, including cloud hosting, analytics, and marketing partners, may process or store data in other countries.

When we transfer personal information outside of the United States, we take steps to ensure that appropriate safeguards are in place to protect your information in accordance with applicable privacy laws. These safeguards may include:

• Standard contractual clauses approved by relevant data protection authorities
• Data processing agreements with service providers that require them to maintain appropriate security standards
• Transfers to countries that have been determined to provide an adequate level of data protection

By using our services, you acknowledge and consent to the potential transfer of your personal information to countries outside of your country of residence, which may have different data protection laws than those in your jurisdiction.

11. Third-Party Links and Services

Our website may contain links to third-party websites, applications, or services that are not owned or controlled by Chuys. This Privacy Policy applies only to information collected through our website and services. We have no control over and assume no responsibility for the privacy practices of third-party websites or services.

We encourage you to review the privacy policies of any third-party services you access through our website, including our payment processors and delivery partners. The presence of a link on our website does not constitute an endorsement of that third party's privacy practices.

12. Do Not Track Signals

Some web browsers may transmit "Do Not Track" (DNT) signals to websites. Currently, there is no universally accepted standard for how websites should respond to DNT signals. Chuys does not currently modify its data collection and use practices in response to DNT signals. We will continue to monitor the development of DNT standards and update our practices accordingly.

13. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our business practices, legal obligations, or applicable laws. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Notify registered users via email where required by law or where the changes materially affect your rights
• Post a prominent notice on our website alerting visitors to the update

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information. Your continued use of our website and services following the posting of any revised Privacy Policy constitutes your acceptance of the updated terms.

14. How to File a Complaint

If you have concerns about how we handle your personal information, we encourage you to contact us directly first so that we can work to resolve the issue. You may contact our privacy team at [email protected].

If you are not satisfied with our response, you may have the right to lodge a complaint with a relevant supervisory authority, depending on your state of residence:

14.1 California Residents

California residents may submit complaints to the California Privacy Protection Agency (CPPA), which is responsible for enforcing the CCPA/CPRA:

• Website: cppa.ca.gov
• Complaint Portal: Available through the CPPA official website

14.2 Federal Consumer Protection

You may also file a complaint with the Federal Trade Commission (FTC) regarding unfair or deceptive trade practices:

• Website: ftc.gov/complaint
• Phone: 1-877-FTC-HELP (1-877-382-4357)

14.3 State Attorneys General

Residents of other states may contact their state Attorney General's office to report privacy-related concerns or violations. Your state Attorney General may have jurisdiction over privacy complaints under applicable state consumer protection and privacy laws.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact us. We are committed to addressing your inquiries promptly and transparently.

This Privacy Policy was last reviewed and updated on June 4, 2026. It supersedes all previous versions of the Chuys Privacy Policy. If you have questions about a previous version of this policy or changes made since the last revision, please contact us at [email protected].