Privacy Policy

At Chuys, accessible via chuys-meal.click, we are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, place food orders, or otherwise interact with our services. Please read this policy carefully. If you disagree with its terms, please discontinue use of our site.

This Privacy Policy applies to all information collected through our website (https://chuys-meal.click), as well as any related services, sales, marketing, or events. By accessing or using our website, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

1. Who We Are

Chuys is a food service business operating in the United States. Our contact details are as follows:

For any questions, concerns, or requests related to this Privacy Policy or your personal data, please contact us directly at [email protected].

2. Information We Collect

We collect information about you in a variety of ways when you interact with our website and services. The categories of information we collect include:

2.1 Personal Identification Information

When you create an account, place a food order, sign up for our newsletter, or contact us, we may collect the following types of personally identifiable information:

• Full Name: First and last name for order processing and account management.
• Email Address: For order confirmations, receipts, promotional communications, and customer support.
• Phone Number: For delivery coordination, order updates, and customer service.
• Billing and Delivery Address: Physical address information required to fulfill food delivery or pickup orders.
• Payment Information: Credit card numbers, debit card numbers, or other payment details processed through secure, third-party payment gateways. We do not store full payment card data on our servers.
• Account Credentials: Username and password (encrypted) if you create an account on our platform.
• Profile Preferences: Dietary preferences, favorite menu items, and order history to personalize your experience.

2.2 Usage and Behavioral Data

When you browse or use our website, we automatically collect certain technical and behavioral information, including:

• Pages visited, links clicked, and time spent on each page.
• Search queries entered on our website.
• Menu items viewed, added to cart, or purchased.
• Frequency of visits and session duration.
• Referring URLs (the website that directed you to ours).
• Exit pages and navigation patterns.

2.3 Device and Technical Information

We collect technical information about the device and connection you use to access our website, including:

• IP address and approximate geolocation (city/state level).
• Browser type and version (e.g., Chrome, Safari, Firefox).
• Operating system and version (e.g., Windows, macOS, iOS, Android).
• Device type (desktop, mobile, tablet).
• Screen resolution and language settings.
• Time zone settings.
• Unique device identifiers and mobile advertising identifiers.

2.4 Cookie and Tracking Data

We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about your browsing activity on our website. This data helps us understand how users interact with our platform and improve our services. For detailed information about our use of cookies, please refer to Section 9 of this Privacy Policy.

2.5 Communications Data

If you contact us via email, phone, or a contact form, we collect the content of your messages, your contact details, and any other information you choose to provide. This includes customer support tickets, feedback submissions, and survey responses.

2.6 Information from Third Parties

We may receive information about you from third-party sources, including:

• Social media platforms if you connect your account or share our content.
• Analytics providers that supply aggregated demographic or behavioral data.
• Food delivery partners or third-party ordering platforms integrated with our service.
• Advertising networks that help us serve relevant ads.

3. How We Use Your Information

We use the personal information we collect for the following legitimate purposes:

3.1 Service Provision and Order Fulfillment

• Processing and fulfilling your food orders, including delivery and pickup arrangements.
• Sending order confirmations, receipts, and status updates via email or SMS.
• Managing your account, including login authentication and profile settings.
• Coordinating with delivery partners and third-party logistics providers.
• Responding to customer service inquiries and resolving complaints.

3.2 Analytics and Service Improvement

• Analyzing website traffic and user behavior to improve functionality and user experience.
• Conducting internal research and development to enhance our menu offerings and services.
• Monitoring website performance and identifying technical issues.
• Generating aggregated, anonymized reports about how users interact with our platform.

3.3 Marketing and Promotional Communications

• Sending you promotional emails, newsletters, and special offers about Chuys menu items and deals — only with your prior consent or where permitted by law.
• Personalizing the content and advertisements you see based on your order history and browsing preferences.
• Running targeted advertising campaigns on third-party platforms such as Google and Meta (Facebook/Instagram).
• Notifying you of loyalty program updates, seasonal promotions, or new menu launches.

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any email we send or by contacting us at [email protected].

3.4 Legal and Compliance Purposes

• Complying with applicable federal and state laws, regulations, and legal obligations.
• Responding to lawful requests from law enforcement or government authorities.
• Enforcing our Terms of Service and other applicable agreements.
• Preventing, detecting, and investigating fraud, security breaches, or illegal activity.
• Protecting the rights, property, and safety of Chuys, our users, and the public.

3.5 Transactional and Business Operations

• Processing payments securely and preventing fraudulent transactions.
• Managing refunds, chargebacks, and disputes.
• Maintaining accurate business and financial records.

4. Legal Basis for Processing

As a business operating in the United States, our data processing practices are governed primarily by the Federal Trade Commission Act (FTC Act), which requires that our data practices be fair, transparent, and not deceptive. For users located in the State of California, our practices are additionally governed by the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA).

We process your personal information based on the following grounds:

• Contractual Necessity: Processing required to fulfill your food orders and provide our services.
• Legitimate Interests: Analytics, fraud prevention, security, and service improvement.
• Consent: Marketing communications and non-essential cookies (where required).
• Legal Obligation: Compliance with applicable laws and responding to legal requests.

5. Sharing Your Information with Third Parties

We do not sell, rent, or trade your personal information to unaffiliated third parties for their own marketing purposes. However, we may share your information in the following circumstances:

5.1 Service Providers and Business Partners

We engage trusted third-party companies and individuals to assist us in operating our website and delivering our services. These service providers have access to your personal information only to perform specific tasks on our behalf and are contractually obligated not to disclose or use it for any other purpose. Categories of service providers include:

• Payment Processors: Secure third-party payment gateways (e.g., Stripe, PayPal) that process your payment card transactions.
• Delivery Partners: Third-party logistics and delivery companies that fulfill your food orders.
• Cloud Hosting Providers: Data storage and computing infrastructure services (e.g., AWS, Google Cloud).
• Email Service Providers: Platforms used to send transactional and marketing emails.
• Analytics Providers: Tools such as Google Analytics used to analyze website traffic and user behavior.
• Customer Support Tools: CRM and helpdesk platforms used to manage customer inquiries.
• Advertising Networks: Platforms such as Google Ads and Meta Ads for targeted advertising campaigns.

5.2 Legal Requirements and Law Enforcement

We may disclose your personal information if required to do so by law or in response to valid legal requests from public authorities, including:

• Compliance with a subpoena, court order, or other legal process.
• Requests from federal, state, or local law enforcement agencies.
• Protecting the rights, property, or personal safety of Chuys, our users, or others.
• Investigating potential violations of our Terms of Service.

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal information may be transferred to the successor entity as part of the business transaction. We will notify you via email or a prominent notice on our website if your data becomes subject to a different privacy policy as a result of such a transaction.

5.4 With Your Consent

We may share your information with third parties in other cases where we have obtained your explicit consent to do so.

6. Data Security

We take the security of your personal information seriously and implement a range of technical, administrative, and physical security measures designed to protect your data from unauthorized access, disclosure, alteration, or destruction.

6.1 Security Measures We Employ

• SSL/TLS Encryption: All data transmitted between your browser and our website is encrypted using industry-standard Secure Socket Layer (SSL) and Transport Layer Security (TLS) protocols.
• Password Hashing: User account passwords are stored in hashed and salted format using industry-standard cryptographic algorithms.
• Access Controls: Access to personal data within our organization is restricted to authorized personnel on a need-to-know basis.
• Secure Payment Processing: Payment card information is processed by PCI-DSS compliant third-party payment processors. We do not store full card numbers on our servers.
• Regular Security Audits: We conduct periodic reviews of our data collection, storage, and processing practices.
• Firewall and Intrusion Detection: Our servers are protected by firewalls and monitoring systems designed to detect and prevent unauthorized access.
• Data Minimization: We collect only the minimum amount of personal data necessary to fulfill the stated purposes.

6.2 Limitations

While we strive to protect your personal information, no method of transmission over the internet or method of electronic storage is 100% secure. We cannot guarantee absolute security. In the event of a data breach that affects your rights and freedoms, we will notify affected users in accordance with applicable law, including the requirements under state data breach notification laws.

7. Your Privacy Rights

Depending on your location, you may have specific rights regarding your personal information under applicable law. We honor these rights and provide mechanisms for you to exercise them.

7.1 Rights Available to All Users

• Right to Access: You may request a copy of the personal information we hold about you.
• Right to Correction: You may request that we correct inaccurate or incomplete personal data.
• Right to Deletion: You may request that we delete your personal information, subject to certain exceptions required by law or legitimate business purposes.
• Right to Opt-Out of Marketing: You may opt out of receiving marketing communications at any time.
• Right to Data Portability: You may request that we provide your personal data in a structured, commonly used, and machine-readable format.

7.2 Additional Rights for California Residents (CCPA/CPRA)

If you are a resident of the State of California, you have the following additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Know: The right to know what categories of personal information we collect, the purposes for which it is used, and the categories of third parties with whom it is shared.
• Right to Delete: The right to request deletion of personal information we have collected, subject to certain exceptions.
• Right to Correct: The right to correct inaccurate personal information we maintain about you.
• Right to Opt-Out of Sale or Sharing: The right to opt out of the "sale" or "sharing" of your personal information for cross-context behavioral advertising purposes. We do not sell your personal data for monetary consideration.
• Right to Limit Use of Sensitive Personal Information: The right to limit our use of sensitive personal information to specific, permitted purposes.
• Right to Non-Discrimination: You have the right not to receive discriminatory treatment for exercising any of your CCPA/CPRA rights. We will not deny you services, charge different prices, or provide a different quality of service because you exercised a privacy right.

To submit a California privacy rights request, please contact us at [email protected] with the subject line "California Privacy Rights Request." We will respond to verifiable consumer requests within 45 days, with the possibility of a 45-day extension where necessary.

7.3 How to Exercise Your Rights

To exercise any of your privacy rights, please submit a request to us using the following contact information:

• Email: [email protected]
• Website: chuys-meal.click

We may need to verify your identity before processing your request. We will respond to all legitimate requests within a reasonable timeframe in accordance with applicable law. In some cases, we may not be able to fulfill a deletion request if we are legally required to retain certain data.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

When your personal data is no longer required, we will securely delete, anonymize, or destroy it in accordance with our data retention and disposal procedures.

9. Cookie Policy

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, personalize content, and serve relevant advertisements.

9.1 What Are Cookies?

Cookies are small text files stored on your device (computer, phone, or tablet) when you visit a website. They help us recognize your device on subsequent visits and remember your preferences.

9.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the website to function properly (e.g., shopping cart functionality, login sessions). These cannot be disabled.
• Performance and Analytics Cookies: Help us understand how visitors interact with our website by collecting anonymous usage data (e.g., Google Analytics).
• Functionality Cookies: Remember your preferences and settings (e.g., language, saved addresses, dietary preferences).
• Marketing and Advertising Cookies: Track your activity across websites to deliver targeted advertisements relevant to your interests (e.g., Meta Pixel, Google Ads tags).

9.3 Managing Your Cookie Preferences

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or receive notifications when a cookie is set. Please note that disabling certain cookies may affect the functionality of our website and your ability to place orders.

You may also opt out of interest-based advertising by visiting:

• Digital Advertising Alliance (DAA) Opt-Out
• Network Advertising Initiative (NAI) Opt-Out
• aboutads.info

10. Children's Privacy

Chuys does not knowingly solicit or collect personal information from individuals under the age of 18. Our services are not directed toward children, and we do not market food products or services to minors through our online platform.

If you are a parent or guardian and believe that your child under the age of 18 has provided personal information to us without your consent, please contact us immediately at [email protected]. Upon verification, we will take prompt steps to delete such information from our records.

We comply with the Children's Online Privacy Protection Act (COPPA), which prohibits the online collection of personal information from children under 13 without verifiable parental consent. However, given the nature of our services, we maintain a general minimum age requirement of 18 for all users.

11. International Data Transfers

Chuys is based in the United States, and our primary data storage and processing infrastructure is located within the United States. However, some of our third-party service providers may operate in, or transfer data to, other countries, including countries outside of the United States.

When your information is transferred internationally, we take steps to ensure that your data continues to receive an adequate level of protection in accordance with applicable privacy laws. These safeguards may include:

• Entering into data processing agreements with third-party service providers that include appropriate data protection clauses.
• Using service providers that are certified under recognized privacy frameworks.
• Implementing contractual protections to govern international data transfers.

By using our website and providing your personal information, you acknowledge and consent to the potential transfer and processing of your data in the United States and other countries where our service providers operate. We will always handle your data in accordance with this Privacy Policy, regardless of where it is processed.

12. Third-Party Links and Websites

Our website may contain links to third-party websites, services, or platforms, including food delivery partners, payment processors, and social media platforms. These third-party sites operate independently and have their own privacy policies, which we encourage you to review. We are not responsible for the content, privacy practices, or data handling of any third-party websites.

The inclusion of a link to a third-party website does not imply our endorsement of that site or its privacy practices. If you click on a third-party link, you will be directed away from our site and subject to that third party's terms and policies.

13. Do Not Track Signals

Some browsers include a "Do Not Track" (DNT) feature that signals to websites that you do not want your online activity tracked. Currently, there is no universally accepted standard for how websites should respond to DNT signals. As a result, our website does not currently respond to DNT browser signals in a uniform manner.

California residents may have additional rights under California's "Shine the Light" law (California Civil Code Section 1798.83) regarding the sharing of personal information with third parties for their direct marketing purposes. If you are a California resident and wish to exercise your rights under this law, please contact us at [email protected].

14. How to File a Complaint

If you have concerns about how we handle your personal information, we encourage you to contact us first so that we can attempt to resolve the matter directly.

14.1 Contact Us

Submit your privacy complaint or inquiry to:

• Email: [email protected]
• Website: chuys-meal.click

We will acknowledge your complaint within 5 business days and aim to provide a full response within 30 days.

14.2 Filing a Complaint with Regulatory Authorities

If you are not satisfied with our response, or if you believe we are processing your personal data in a manner inconsistent with applicable law, you have the right to file a complaint with the relevant data protection authority:

15. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our business practices, legal requirements, or technological developments. When we make material changes to this policy, we will:

• Update the "Last Updated" date at the top of this page.
• Post a prominent notice on our website homepage or send you an email notification (where required by law).
• For significant changes, seek your renewed consent where legally required.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website after the effective date of any changes constitutes your acceptance of the revised Privacy Policy.

16. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact us using the details below:

We are committed to working with you to resolve any privacy concerns in a fair, transparent, and timely manner. Thank you for trusting Chuys with your personal information. We take that trust seriously and are dedicated to handling your data with care, integrity, and respect.