Privacy Policy

Welcome to Chuys ("we," "us," "our," or the "Company"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website chuys-fresh.click, place food orders, interact with our services, or otherwise communicate with us. Please read this policy carefully. If you disagree with its terms, please discontinue use of our site and services.

This Privacy Policy applies to all personal information we collect through our website, mobile-optimized pages, online ordering platform, email communications, and any other digital or physical touchpoints associated with Chuys. We operate in the United States and comply with applicable federal and state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission (FTC) Act, and other relevant federal and state regulations.

1. Who We Are

Chuys is a food service business dedicated to delivering fresh, quality meals to our valued customers. Our contact information is as follows:

For all privacy-related inquiries, requests, or complaints, you may contact us directly at the email address listed above. We will respond to all legitimate requests within thirty (30) days in accordance with applicable law.

2. Information We Collect

We collect several types of information from and about users of our website and services. The categories of personal information we may collect include, but are not limited to, the following:

2.1 Personal Identification Information

When you create an account, place an order, sign up for our newsletter, make a reservation, or contact us through our website, we may collect personal identification information such as:

• Full name
• Email address
• Phone number
• Billing and delivery address (including street address, city, state, ZIP code)
• Username and password (stored in encrypted form)
• Profile photo (if voluntarily uploaded)
• Date of birth (where applicable, to verify age eligibility)

2.2 Payment and Transaction Information

When you place an order or make a payment through our platform, we collect transaction-related information, including:

• Payment card type (e.g., Visa, Mastercard)
• Last four digits of your payment card
• Billing address associated with your payment method
• Order history, items purchased, and total amounts
• Refund and dispute history

Please note that full payment card numbers are processed exclusively by our PCI-DSS compliant third-party payment processors and are never stored on our own servers.

2.3 Usage and Interaction Data

When you visit and interact with our website, we automatically collect certain usage and behavioral data, including:

• Pages you view and the order in which you view them
• Links and buttons you click
• Time spent on each page
• Search queries entered on our site
• Items added to or removed from your shopping cart
• Order completion and abandonment patterns
• Referral source (how you arrived at our website)

2.4 Device and Technical Information

Our systems automatically collect device and technical information when you access our website, including:

• IP address
• Browser type and version
• Operating system and device type (desktop, mobile, tablet)
• Screen resolution
• Time zone and regional settings
• Unique device identifiers
• Cookie identifiers and session tokens

2.5 Location Information

With your permission, we may collect general or precise geographic location information to facilitate delivery services, suggest nearby locations, calculate delivery fees, and ensure we serve areas where our food services are available. You may disable location sharing through your browser or device settings at any time.

2.6 Communications and Feedback

If you contact us by email, submit a contact form, leave a review, or participate in surveys or promotions, we collect the content of those communications, including any personal information you choose to include. This may include your name, email address, and any feedback, comments, or complaints you share with us.

2.7 Information from Third Parties

We may receive information about you from third-party sources, such as:

• Social media platforms (if you connect your social media account to our services or interact with our social media pages)
• Third-party delivery and logistics partners
• Marketing and analytics partners
• Public databases and fraud prevention services

3. How We Use Your Information

We use the information we collect for a variety of legitimate business purposes, including but not limited to the following:

3.1 Providing and Managing Our Services

• Processing your food orders and coordinating delivery or pickup
• Creating and maintaining your account
• Processing payments and issuing receipts
• Communicating order status updates, confirmations, and notifications
• Handling returns, refunds, and customer support requests
• Ensuring our website operates correctly and efficiently

3.2 Analytics and Service Improvement

• Analyzing usage trends and patterns to improve our website and menu offerings
• Conducting internal research and data analysis
• Monitoring website performance and identifying technical issues
• Testing new features and optimizing the user experience
• Understanding which products and promotions are most popular among our customers

3.3 Marketing and Promotional Communications

• Sending promotional emails, newsletters, and special offers (with your consent or where permitted by law)
• Personalizing your experience and displaying relevant menu recommendations
• Running loyalty programs, referral campaigns, and seasonal promotions
• Retargeting advertising on third-party platforms based on your interactions with our website

You may opt out of receiving marketing communications at any time by clicking the "unsubscribe" link in any marketing email or by contacting us at [email protected]. Please note that even if you opt out of marketing communications, we may still send you transactional communications related to your orders and account.

3.4 Legal Compliance and Safety

• Complying with applicable laws, regulations, and legal obligations
• Responding to lawful requests from government authorities or law enforcement
• Detecting, investigating, and preventing fraudulent transactions and other illegal activities
• Enforcing our Terms of Service and other agreements
• Protecting the rights, property, and safety of Chuys, our customers, and the public

3.5 Business Operations

• Managing and improving our internal business processes
• Evaluating or completing potential mergers, acquisitions, or asset sales
• Training our staff and improving customer service

4. Cookies and Tracking Technologies

We use cookies, web beacons, pixel tags, local storage, and other tracking technologies on our website to enhance your browsing experience and gather analytical data. Cookies are small text files stored on your device that help us recognize you on future visits, remember your preferences, and provide personalized content.

4.1 Types of Cookies We Use

You can control and manage cookies through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, or be notified when new cookies are set. Please note that disabling certain cookies may affect the functionality of our website. For more detailed information about the specific cookies we use and how to manage them, please refer to our full Cookie Policy, which is available on our website.

5. Sharing Your Information with Third Parties

We do not sell your personal information to third parties for their own independent marketing purposes. However, we may share your information with certain trusted third parties under the following circumstances:

5.1 Service Providers and Business Partners

We engage third-party service providers to assist us in operating our website and delivering our services. These providers are contractually obligated to protect your information and may only use it for the specific purposes for which we engage them. Such providers may include:

• Payment processors: To securely handle payment card transactions and prevent fraud
• Delivery and logistics partners: To fulfill your food orders and coordinate deliveries
• Cloud hosting providers: To store our website data and databases securely
• Email marketing platforms: To send newsletters, order confirmations, and promotional communications
• Analytics providers: Such as Google Analytics, to analyze website traffic and user behavior
• Customer support tools: To manage and respond to customer inquiries efficiently
• Advertising networks: To display targeted advertisements on third-party platforms

5.2 Legal Requirements and Law Enforcement

We may disclose your personal information if required to do so by law or in response to valid legal processes, including subpoenas, court orders, or government requests. We may also disclose information when we believe disclosure is necessary or appropriate to:

• Comply with applicable laws and regulations
• Protect the legal rights of Chuys, its employees, or its customers
• Investigate and prevent fraud, security breaches, or other illegal activities
• Respond to emergencies that threaten the physical safety of any person

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal information may be transferred to the acquiring entity as part of that transaction. We will notify you of any such change in ownership or control of your personal information by posting a notice on our website or sending you an email notification.

5.4 With Your Consent

We may share your information with additional third parties when we have obtained your explicit consent to do so, such as when you participate in co-branded promotions or opt into partner programs.

6. Data Security

The security of your personal information is a top priority for Chuys. We implement a variety of industry-standard technical, administrative, and physical security measures designed to protect your personal information from unauthorized access, disclosure, alteration, or destruction.

6.1 Security Measures We Employ

• Encryption: All data transmitted between your browser and our website is encrypted using Secure Socket Layer (SSL) / Transport Layer Security (TLS) technology. Our website uses HTTPS to ensure secure connections at all times.
• Password protection: User account passwords are stored in hashed and salted form using industry-standard cryptographic algorithms. We never store passwords in plain text.
• Payment security: We comply with the Payment Card Industry Data Security Standard (PCI-DSS) and use certified third-party payment processors to handle all payment card data.
• Access controls: Access to personal information is restricted to authorized employees and contractors who need it to perform their job functions. All staff with access to personal data are bound by confidentiality obligations.
• Regular security assessments: We conduct periodic security reviews and vulnerability assessments of our systems to identify and address potential security risks.
• Data minimization: We collect and retain only the personal information that is necessary for the purposes outlined in this Privacy Policy.

If you suspect that your account has been compromised or that your personal information has been improperly accessed, please contact us immediately at [email protected].

7. Your Privacy Rights

Depending on where you reside, you may have certain rights regarding your personal information. We are committed to honoring these rights in accordance with applicable law.

7.1 Rights Available to All Users

• Right to Access: You have the right to request a copy of the personal information we hold about you, including the categories of data collected, the purposes for which it is used, and any third parties with whom it has been shared.
• Right to Correction: You have the right to request that we correct any inaccurate or incomplete personal information we hold about you.
• Right to Deletion: You have the right to request that we delete your personal information, subject to certain legal exceptions (e.g., where we are required to retain data to comply with a legal obligation or complete a transaction).
• Right to Opt Out of Marketing: You may opt out of receiving marketing communications from us at any time without affecting the legal basis for processing your data for other purposes.

7.2 Additional Rights for California Residents (CCPA / CPRA)

If you are a resident of California, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), including:

• Right to Know: The right to know what personal information is collected, used, shared, or sold, and for what purposes.
• Right to Delete: The right to request deletion of personal information we have collected about you, subject to certain exceptions.
• Right to Correct: The right to request correction of inaccurate personal information we maintain about you.
• Right to Opt Out of Sale or Sharing: The right to opt out of the sale or sharing of your personal information. We do not sell personal information as defined under CCPA/CPRA. However, if this practice changes, we will update this Privacy Policy and provide you with an opportunity to opt out.
• Right to Limit Use of Sensitive Personal Information: The right to limit how we use and disclose sensitive personal information, such as precise geolocation data, financial information, and health-related data.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. This means we will not deny you goods or services, charge you different prices, or provide a different level of service because you exercised your privacy rights.
• Right to Data Portability: The right to receive your personal information in a structured, commonly used, and machine-readable format.

7.3 How to Exercise Your Rights

To exercise any of the rights described above, please submit your request by contacting us at:

• Email: [email protected]

Please include your full name, the email address associated with your account, and a description of the specific right you wish to exercise. We may need to verify your identity before processing your request. We will respond to all verifiable requests within forty-five (45) days, as required by California law, or within thirty (30) days for users in other states, with the option to extend the response period by an additional forty-five (45) days where reasonably necessary.

You may also authorize an agent to submit a request on your behalf. Authorized agents must provide written proof of authorization and may be required to verify their identity separately.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, to comply with our legal obligations, resolve disputes, and enforce our agreements. The specific retention periods we apply depend on the type of data and the purpose for which it is held:

When personal information is no longer needed, we securely delete, destroy, or anonymize it in accordance with our data disposal procedures.

9. Children's Privacy

We are committed to complying with the Children's Online Privacy Protection Act (COPPA) and all applicable laws protecting the privacy of minors. If we learn that we have inadvertently collected personal information from a child under the age of 18 without verifiable parental consent, we will take prompt steps to delete that information from our records.

If you are a parent or guardian and you believe that your child has provided personal information to us without your consent, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

By using our website, you represent and warrant that you are at least 18 years of age. If you do not meet this age requirement, you must discontinue using our website and services immediately.

10. International Data Transfers

Chuys is based in the United States, and our services are primarily directed to users located in the United States. If you access our website or services from outside the United States, please be aware that your personal information may be transferred to, stored on, and processed on servers located in the United States, where privacy laws may differ from those in your country of residence.

By using our website and services, you acknowledge and consent to the transfer of your personal information to the United States. We take appropriate steps to ensure that such transfers are conducted in a secure manner and in compliance with applicable data protection laws. If you are located in a jurisdiction with data transfer restrictions, please contact us to discuss the specific safeguards we have in place.

We may also use third-party service providers that process data in countries other than the United States. In such cases, we require our service providers to implement appropriate safeguards to protect your personal information.

11. Third-Party Websites and Links

Our website may contain links to third-party websites, applications, or services that are not owned or controlled by Chuys. This Privacy Policy applies only to our own website and services. We are not responsible for the privacy practices, content, or security of any third-party websites you visit through links on our site.

We encourage you to review the privacy policies of any third-party websites or services before providing them with your personal information. Common third-party integrations on our site may include social media sharing buttons, payment gateways, and delivery tracking systems, each of which has its own privacy policy governing the collection and use of your data.

12. FTC Compliance and Consumer Protection

Chuys is committed to complying with the Federal Trade Commission Act (FTC Act), which prohibits unfair or deceptive acts or practices in commerce. Our privacy practices are designed to be transparent, honest, and consistent with the representations we make in this Privacy Policy. We do not engage in deceptive data collection, misleading marketing practices, or unauthorized data sharing.

We follow the FTC's guidelines on:

• Providing clear and conspicuous notice of our data collection practices
• Obtaining appropriate consent before collecting and using sensitive personal information
• Offering meaningful choices to consumers about how their data is used
• Implementing reasonable security measures to protect consumer data
• Maintaining the accuracy of consumer data and providing access and correction mechanisms

If you believe that we have engaged in any unfair or deceptive practice, you have the right to file a complaint with the Federal Trade Commission at ftc.gov/complaint.

13. How to File a Complaint

If you have concerns about how Chuys handles your personal information and are not satisfied with our response to your inquiry, you have the right to file a complaint with the relevant data protection or consumer protection authority. Depending on your location, you may contact:

13.1 Federal and State Regulatory Authorities in the United States

• Federal Trade Commission (FTC): The FTC is the primary federal agency responsible for consumer protection and privacy enforcement in the United States.
  Website: ftc.gov/complaint
  Phone: 1-877-FTC-HELP (1-877-382-4357)
• California Privacy Protection Agency (CPPA) – for California residents: The CPPA is responsible for enforcing the CCPA/CPRA.
  Website: cppa.ca.gov
• State Attorney General: Your state's Attorney General office may also handle consumer privacy complaints. You can find contact information for your state's Attorney General at naag.org.

13.2 Steps to File a Complaint with Us First

Before escalating to a regulatory authority, we encourage you to contact us directly so we can attempt to resolve your concern:

1. Send a detailed description of your concern to [email protected]
2. Include your name, contact information, and the specific privacy issue you are raising
3. We will acknowledge your complaint within five (5) business days and aim to provide a full response within thirty (30) days

14. Changes to This Privacy Policy

We reserve the right to update, modify, or revise this Privacy Policy at any time to reflect changes in our business practices, applicable laws, or technological developments. When we make material changes to this policy, we will:

• Update the "Last Updated" date at the top of this page
• Post a prominent notice on our website homepage informing users of the change
• Send an email notification to registered users where required by law or where the change materially affects your rights

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website and services after the effective date of any updated Privacy Policy constitutes your acknowledgment of the changes. If you do not agree with the updated policy, you should discontinue using our services and request deletion of your account.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please do not hesitate to contact our privacy team using the information below:

We take all privacy inquiries seriously and will make every effort to address your concerns in a prompt, respectful, and transparent manner. Your trust is important to us, and we are committed to handling your personal information responsibly and in accordance with all applicable laws and best practices.