Privacy Policy

Effective Date: June 26, 2026  |  Last Updated: June 26, 2026

1. Introduction and Who We Are

Welcome to Chuys, a food service business proudly serving our customers across the United States. We are committed to protecting your privacy and handling your personal information with transparency, integrity, and respect. This Privacy Policy has been prepared in accordance with applicable United States federal and state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), and other relevant consumer protection regulations.

Our contact details for all privacy-related inquiries are as follows:

By accessing or using our website, placing an order, signing up for our newsletter, or otherwise engaging with our services, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy. If you do not agree with the terms described herein, please discontinue your use of our services immediately.

2. Scope of This Privacy Policy

This Privacy Policy applies to:

• All visitors to our website at chuysgrill.rest
• Customers who place online food orders through our platform
• Individuals who subscribe to our email newsletters or promotional communications
• Users who interact with us through social media platforms
• Individuals who contact our customer service team
• Participants in our loyalty programs, promotions, contests, or surveys

This policy does not apply to third-party websites, services, or applications that may be linked from our website. We encourage you to review the privacy policies of any third-party platforms you access.

3. Information We Collect

We collect various types of personal and non-personal information to provide you with the best possible dining and online ordering experience. Below is a detailed breakdown of the categories of information we collect.

3.1 Personal Identification Information

When you interact with our services, we may collect the following personal identification information:

• Full name — provided when you create an account or place an order
• Email address — used for order confirmations, account management, and marketing communications
• Phone number — used for delivery coordination and customer service follow-up
• Mailing and delivery address — required for food delivery services
• Date of birth — collected for age verification purposes and birthday promotions
• Username and password — for account creation and security

3.2 Financial and Payment Information

When you make a purchase through our platform, we may collect payment-related information. Please note that we do not store full credit card numbers or sensitive payment details directly on our servers. Payment processing is handled by PCI-DSS-compliant third-party payment processors. We may retain:

• Last four digits of credit or debit card numbers
• Billing address associated with the payment method
• Transaction IDs and order confirmation numbers
• Payment method type (e.g., Visa, Mastercard, PayPal)

3.3 Order and Transaction Data

We collect information related to your food orders and transactions, including:

• Items ordered, quantities, and special instructions
• Order history and frequency
• Delivery preferences and past delivery addresses
• Discount codes, promotions, or loyalty points applied
• Customer feedback and ratings submitted after orders

3.4 Usage Data and Technical Information

When you visit our website, we automatically collect certain technical and behavioral data, including:

• IP address — used for security, fraud prevention, and general geographic analytics
• Browser type and version
• Operating system
• Device type (desktop, mobile, tablet)
• Pages visited and time spent on each page
• Referring URLs — the website from which you arrived at our site
• Clickstream data — the sequence of pages you visit on our website
• Search queries entered on our website
• Time and date of your visit

3.5 Cookie and Tracking Technology Data

We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about your interactions with our website. This includes session cookies, persistent cookies, and third-party analytics cookies. For more detailed information, please refer to Section 8 – Cookie Usage of this policy.

3.6 Communications Data

If you contact us via email, phone, or our online contact form, we may retain records of those communications, including:

• The content of your message or inquiry
• Your contact details provided during the interaction
• Records of our responses and resolution of your inquiry

3.7 Marketing and Preference Data

We collect information about your marketing preferences, including:

• Whether you have opted in or out of marketing emails
• Your food preferences and dietary restrictions (if voluntarily provided)
• Participation in surveys, contests, or loyalty programs
• Social media interactions with our brand profiles

4. How We Use Your Information

We use the personal information we collect for a variety of lawful purposes, all of which are necessary for operating our food service business and improving your experience with us.

4.1 Service Provision and Order Fulfillment

• To process and fulfill your food orders
• To coordinate delivery services to your specified address
• To send order confirmations, receipts, and delivery notifications
• To manage your account and maintain your order history
• To handle returns, refunds, or complaints related to your orders

4.2 Customer Service and Communications

• To respond to your inquiries, questions, and support requests
• To notify you of important updates to our menu, services, or policies
• To send transactional communications required to complete your service interactions

4.3 Marketing and Promotional Activities

• To send you promotional emails, newsletters, and special offers (with your consent where required)
• To personalize content, recommendations, and advertisements based on your preferences and order history
• To conduct targeted advertising campaigns through third-party platforms
• To administer contests, giveaways, or loyalty reward programs

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in our emails or by contacting us at [email protected].

4.4 Analytics and Business Improvement

• To analyze website traffic, user behavior, and ordering patterns
• To improve our website functionality, menu offerings, and user experience
• To conduct market research and develop new products or services
• To generate aggregated, anonymized statistical reports for internal business purposes

4.5 Legal Compliance and Security

• To comply with applicable federal and state laws and regulations
• To prevent fraudulent transactions, unauthorized access, and other illegal activities
• To enforce our Terms of Service and other contractual agreements
• To respond to lawful requests from law enforcement or regulatory authorities
• To protect the rights, property, and safety of Chuys, our customers, and the public

5. Legal Basis for Processing

We process your personal information on the following legal bases:

• Contract Performance: Processing is necessary to fulfill your orders and provide the services you have requested.
• Legitimate Interests: We process certain data to operate and improve our business, prevent fraud, and maintain security, provided these interests do not override your privacy rights.
• Consent: For marketing communications and non-essential cookies, we rely on your express consent, which you may withdraw at any time.
• Legal Obligation: We may process your data to comply with applicable laws, regulations, or court orders.

6. Sharing Your Information with Third Parties

We do not sell your personal information to third parties for monetary compensation. However, we may share your information in the following circumstances:

6.1 Service Providers and Business Partners

We work with trusted third-party service providers who assist us in operating our business. These parties are contractually obligated to protect your information and may only use it for the specific purposes for which it was shared. Our service providers include:

• Payment processors — for secure handling of financial transactions
• Delivery and logistics partners — to fulfill food delivery orders
• Email marketing platforms — for sending newsletters and promotional content
• Website analytics providers — such as Google Analytics, for tracking website performance
• Cloud hosting and IT infrastructure providers — for storing and processing data securely
• Customer service software providers — for managing support tickets and inquiries

6.2 Legal Requirements and Law Enforcement

We may disclose your personal information when we believe in good faith that disclosure is necessary to:

• Comply with a legal obligation, court order, subpoena, or government request
• Enforce our Terms of Service or other applicable agreements
• Protect the rights, property, or safety of Chuys, our users, or the general public
• Investigate suspected fraud, security breaches, or other illegal activities

6.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy involving Chuys, your personal information may be transferred to the relevant successor entity as part of the business transaction. We will notify you via email or a prominent notice on our website before your information is transferred and becomes subject to a different privacy policy.

6.4 Aggregated and Anonymized Data

We may share aggregated, anonymized, or de-identified data that does not identify you personally with third parties for marketing, research, analytics, or other business purposes.

7. Data Security Measures

We take the security of your personal information seriously and have implemented a comprehensive set of technical, organizational, and procedural safeguards to protect your data from unauthorized access, disclosure, alteration, or destruction.

7.1 Technical Safeguards

• SSL/TLS Encryption: All data transmitted between your browser and our website is encrypted using industry-standard Secure Socket Layer (SSL) and Transport Layer Security (TLS) protocols.
• Data Encryption at Rest: Sensitive personal data stored in our databases is encrypted using advanced encryption standards (AES-256).
• Firewalls and Intrusion Detection: Our servers are protected by firewalls and monitored for unauthorized access attempts.
• Secure Payment Processing: We use PCI-DSS compliant payment gateways and do not store raw payment card data on our own servers.
• Regular Security Audits: We conduct periodic vulnerability assessments and penetration testing to identify and address potential security weaknesses.

7.2 Organizational Safeguards

• Access to personal data is restricted to authorized personnel who require it to perform their job functions.
• All employees who handle personal data are trained on data protection best practices and our internal privacy policies.
• We maintain data processing agreements with all third-party service providers who handle personal information on our behalf.

7.3 Incident Response

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected individuals and relevant regulatory authorities in accordance with applicable law. We maintain a documented incident response plan to manage and mitigate the effects of any security incidents promptly.

8. Cookie Usage

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and deliver personalized content and advertisements.

8.1 What Are Cookies?

Cookies are small text files that are placed on your device when you visit a website. They allow the website to recognize your device and remember certain information about your visit, such as your preferences and settings.

8.2 Types of Cookies We Use

• Essential Cookies: These are strictly necessary for the website to function properly (e.g., maintaining your shopping cart, processing orders).
• Analytics Cookies: These help us understand how visitors interact with our website by collecting usage statistics and behavioral data.
• Marketing Cookies: These are used to deliver relevant advertisements and track the effectiveness of our marketing campaigns.
• Preference Cookies: These remember your settings and preferences to personalize your experience (e.g., language settings, saved delivery addresses).

8.3 Managing Your Cookie Preferences

You can manage your cookie preferences through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of our website. For more detailed information about the specific cookies we use and how to opt out, please refer to our full Cookie Policy, which is available on our website at chuysgrill.rest.

9. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following general retention guidelines apply:

When personal information is no longer needed, we will securely delete or anonymize it in accordance with our data destruction procedures.

10. Your Privacy Rights

Depending on your state of residence, you may have specific rights under applicable privacy laws. We are committed to honoring these rights and providing you with the tools to exercise them.

10.1 Rights for All U.S. Residents

Under the Federal Trade Commission Act and general consumer protection principles, all users have the following rights:

• Right to Transparency: To be informed about what data we collect and how we use it (fulfilled by this Privacy Policy).
• Right to Opt-Out of Marketing: To opt out of receiving promotional communications from us at any time.
• Right to Security: To have your personal data protected by reasonable security measures.

10.2 California Residents — CCPA/CPRA Rights

If you are a resident of California, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), effective January 1, 2023:

• Right to Know: You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you, as well as information about how it is used and shared.
• Right to Delete: You have the right to request that we delete your personal information, subject to certain legal exceptions.
• Right to Correct: You have the right to request that we correct inaccurate personal information we hold about you.
• Right to Opt-Out of Sale or Sharing: You have the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising.
• Right to Limit Use of Sensitive Personal Information: You have the right to limit our use and disclosure of sensitive personal information.
• Right to Data Portability: You have the right to receive a copy of your personal information in a portable, machine-readable format.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA/CPRA rights. We will not deny goods or services, charge different prices, or provide a different level of service based on your exercise of privacy rights.

To submit a California privacy rights request, please contact us at:

• Email: [email protected]

We will respond to verified requests within 45 days, with a possible extension of an additional 45 days when reasonably necessary, as permitted by applicable law.

10.3 Other State Privacy Rights

Residents of other states including Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Texas (TDPSA), and other states with enacted privacy legislation may also have rights similar to those described above. We are committed to honoring applicable state privacy rights regardless of your location within the United States. Please contact us using the information provided in this policy to submit any privacy rights request.

10.4 How to Exercise Your Rights

To exercise any of your privacy rights, please submit a request by:

• Sending an email to [email protected] with the subject line "Privacy Rights Request"
• Visiting our website at chuysgrill.rest and using our online contact form

For security purposes, we may need to verify your identity before processing your request. We will ask you to provide sufficient information to allow us to reasonably verify that you are the person about whom we have collected personal information.

11. Children's Privacy

Our website and services are intended for use by individuals who are 18 years of age or older. We do not knowingly collect, use, or disclose personal information from children under the age of 18. Our food ordering platform, marketing activities, and loyalty programs are directed exclusively at adults.

If you are a parent or guardian and believe that your child under the age of 18 has provided personal information to us without your consent, please contact us immediately at [email protected]. Upon verification, we will take prompt steps to delete such information from our records.

We comply with the Children's Online Privacy Protection Act (COPPA) and do not direct any part of our online services to children under 13. If we become aware that we have inadvertently collected personal information from a child under 13, we will delete it as quickly as possible.

12. International Data Transfers

Chuys is a United States-based business, and all data we collect is primarily stored and processed within the United States. If you are accessing our website from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your home country.

We take appropriate steps to ensure that any international transfers of personal data are handled in accordance with applicable laws and that adequate protections are in place to safeguard your information. By using our services from outside the United States, you acknowledge and consent to the transfer and processing of your data in the United States.

13. Third-Party Links and Services

Our website may contain links to third-party websites, social media platforms, payment gateways, or delivery partner portals. We are not responsible for the privacy practices or content of these third-party services. We strongly encourage you to review the privacy policies of any external websites or services you visit through links on our platform. This Privacy Policy applies solely to information collected by Chuys through our own website and services.

14. Social Media and Third-Party Integrations

If you interact with us through social media platforms such as Facebook, Instagram, Twitter/X, or TikTok, those platforms may independently collect personal information about you. Similarly, if you use a "Sign in with Google" or similar social login feature on our website, we may receive limited profile information from those platforms in accordance with their privacy policies and your account settings. We encourage you to review the privacy settings and policies of any social media platforms you use.

15. Do Not Track Signals

Some browsers have a "Do Not Track" (DNT) feature that allows users to signal their preference not to be tracked across websites. Currently, there is no universally accepted standard for responding to DNT signals, and our website does not alter its data collection practices in response to DNT signals. However, you can manage your cookie preferences through our cookie management tools and your browser settings as described in Section 8.

16. How to File a Complaint

If you believe that we have not adequately addressed your privacy concerns, you have the right to file a complaint with the relevant authorities.

16.1 Contact Us First

We encourage you to contact us directly in the first instance so that we can work to resolve your concern promptly:

• Email: [email protected]
• Website: chuysgrill.rest

We are committed to addressing any privacy complaints within 30 days of receipt.

16.2 Federal Trade Commission (FTC)

If you believe your privacy rights under federal law have been violated, you may file a complaint with the Federal Trade Commission (FTC), which is the primary federal consumer protection agency in the United States:

• Website: ftc.gov/complaint
• Phone: 1-877-382-4357
• Address: Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, D.C. 20580

16.3 California Residents — California Privacy Protection Agency (CPPA)

California residents who believe their CCPA/CPRA rights have been violated may file a complaint with the California Privacy Protection Agency (CPPA):

• Website: cppa.ca.gov
• Address: California Privacy Protection Agency, 2101 Arena Blvd, Sacramento, CA 95834

16.4 State Attorneys General

Residents of any U.S. state may also file privacy-related complaints with their state's Attorney General office. Most state attorney general offices have consumer protection divisions that handle privacy and data security complaints.

17. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our business practices, applicable laws, or technological developments. When we make material changes to this policy, we will:

• Update the "Last Updated" date at the top of this page
• Post a prominent notice on our website notifying you of the changes
• Send an email notification to registered users (where material changes affect your rights or our data practices)

Your continued use of our website and services after any changes to this Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

18. Contact Us

If you have any questions, concerns, or requests related to this Privacy Policy or our data handling practices, please do not hesitate to contact us using the details below. We are committed to addressing your inquiries promptly and transparently.