Privacy Policy

Welcome to Chuy's ("we," "us," "our," or the "Company"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website chuysrestaurant.rest, place orders, make reservations, or otherwise interact with us. Please read this policy carefully. If you do not agree with the terms of this Privacy Policy, please discontinue use of our website and services immediately.

This Privacy Policy applies to all users of our website and services located in the United States and is designed to comply with applicable federal and state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), and other applicable consumer protection regulations.

1. Who We Are

Chuy's is a food service business operating within the United States. We operate the website located at chuysrestaurant.rest and provide restaurant services, online ordering, reservations, and related food and beverage experiences to our customers.

If you have any questions or concerns regarding this Privacy Policy or our data practices, please contact us at [email protected].

2. Information We Collect

We collect several types of information in connection with the operation of our website and services. The categories of personal information we collect include:

2.1 Personal Identification Information

When you interact with our website or services, we may collect personally identifiable information that you voluntarily provide to us, including but not limited to:

• Full name
• Email address
• Phone number
• Mailing address or delivery address
• Date of birth (when required for age verification or loyalty program enrollment)
• Username and password (for registered accounts)
• Payment information (credit card number, billing address — processed securely through third-party payment processors)
• Dietary preferences, allergies, or food restrictions you choose to share with us
• Reservation details including party size, date, and time preferences

2.2 Usage Data and Behavioral Information

When you visit our website, we automatically collect certain information about your interaction with our digital platforms, including:

• Pages viewed and content accessed on our website
• Time and date of your visit
• Time spent on individual pages
• Links clicked and navigation paths through our website
• Search queries entered on our website
• Items added to or removed from your cart
• Order history and purchase patterns
• Referral source (how you arrived at our website)
• Error logs and performance data

2.3 Device and Technical Information

We collect technical data about the device and software you use to access our website, including:

• IP address
• Browser type and version
• Operating system and platform
• Device type (desktop, tablet, mobile)
• Device identifiers
• Screen resolution
• Language settings
• Geographic location data derived from your IP address (approximate location)
• Mobile device identifiers, if applicable

2.4 Cookie and Tracking Technology Data

We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about your browsing behavior on our website. This data may include session identifiers, cookie preferences, and analytics data. For more detailed information, please refer to Section 8 of this policy (Cookie Usage).

2.5 Communications and Feedback

When you contact us via email, contact forms, social media, or telephone, we collect:

• The content of your messages and inquiries
• Customer service records and correspondence
• Survey responses and feedback you voluntarily provide
• Reviews and ratings you submit about our food or services

2.6 Information from Third Parties

We may also receive personal information about you from third-party sources, including:

• Social media platforms (if you choose to connect your social media account or log in via social media)
• Online ordering and delivery partners
• Marketing and advertising partners
• Analytics providers
• Loyalty program partners

3. How We Use Your Information

We use the personal information we collect for the following purposes:

3.1 Service Provision and Order Fulfillment

• To process and fulfill your food orders, whether placed online or in person
• To manage table reservations and waitlist requests
• To process payments and issue receipts
• To communicate with you about your orders, including confirmation, preparation, and delivery updates
• To manage your customer account, if you have registered one with us
• To accommodate dietary requirements or food allergy requests you have shared with us

3.2 Customer Support and Communication

• To respond to your questions, inquiries, and customer service requests
• To send you important service-related notices, such as changes to our menu, hours, or policies
• To resolve disputes and troubleshoot problems
• To follow up on feedback or complaints you have submitted

3.3 Analytics and Website Improvement

• To monitor and analyze trends, usage patterns, and activities on our website
• To understand how customers interact with our website and identify areas for improvement
• To test new features, layouts, or menu presentations
• To conduct internal research and development
• To generate aggregate, anonymized statistical reports about our user base

3.4 Marketing and Promotional Communications

• To send you promotional emails, newsletters, and special offers about our food, events, and services (with your consent where required by law)
• To notify you about our loyalty program benefits, rewards, and exclusive deals
• To deliver personalized content and recommendations based on your order history and preferences
• To conduct surveys and collect feedback for marketing purposes
• To display targeted advertisements on third-party platforms and websites

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in our emails or by contacting us directly at [email protected].

3.5 Legal and Compliance Purposes

• To comply with applicable federal, state, and local laws and regulations
• To enforce our Terms of Service and other agreements
• To protect the rights, property, and safety of Chuy's, our customers, and the public
• To detect, prevent, and investigate fraud, security breaches, and other potentially illegal activities
• To respond to lawful requests from courts, law enforcement agencies, and regulatory authorities

4. How We Share Your Information

We respect your privacy and do not sell your personal information to third parties for their own independent marketing purposes. However, we may share your personal data in the following circumstances:

4.1 Service Providers and Business Partners

We engage trusted third-party companies and individuals to assist us in operating our website and delivering our services. These service providers are contractually obligated to protect your data and may only use it for the specific purposes we authorize. Categories of service providers include:

• Payment processors: To securely process credit card and other payment transactions
• Online ordering platforms: To facilitate digital food orders and delivery logistics
• Cloud hosting and IT providers: To host and maintain our website and data systems
• Email and marketing service providers: To send promotional communications and manage subscriber lists
• Analytics providers: To analyze website traffic and user behavior (e.g., Google Analytics)
• Customer support platforms: To manage customer inquiries and support tickets
• Reservation management systems: To manage table bookings and guest experiences
• Loyalty program administrators: To manage rewards and member benefits

4.2 Legal Requirements and Law Enforcement

We may disclose your personal information if we believe in good faith that such disclosure is necessary to:

• Comply with a legal obligation, subpoena, court order, or government request
• Enforce our Terms of Service or other applicable agreements
• Protect the rights, property, or safety of Chuy's, our employees, customers, or the public
• Detect, prevent, or address fraud, security issues, or technical problems

4.3 Business Transfers

In the event that Chuy's undergoes a merger, acquisition, sale of assets, reorganization, bankruptcy, or other business transition, your personal information may be transferred to the acquiring entity as part of that transaction. We will notify you of any such change via email or prominent notice on our website and inform you of your choices regarding your data in such circumstances.

4.4 With Your Consent

We may share your personal information with additional third parties when we have obtained your explicit consent to do so, such as when you participate in co-branded promotions or opt into sharing programs.

4.5 Aggregate and De-Identified Data

We may share aggregate, anonymized, or de-identified information that cannot reasonably be used to identify you with partners, advertisers, or the public for research, analytics, or marketing purposes.

5. Data Security

We take the security of your personal information seriously and implement a variety of technical, administrative, and physical security measures to protect your data from unauthorized access, disclosure, alteration, and destruction.

5.1 Security Measures We Employ

• Encryption: Our website uses Secure Socket Layer (SSL) / Transport Layer Security (TLS) encryption to protect data transmitted between your browser and our servers.
• Secure Payment Processing: We do not store complete credit card numbers on our servers. Payment data is processed through PCI-DSS compliant payment processors.
• Access Controls: Access to personal information is restricted to authorized employees and contractors who need it to perform their job functions. All personnel with access to personal data are required to maintain its confidentiality.
• Regular Security Assessments: We conduct regular reviews and assessments of our data security practices and systems to identify and address potential vulnerabilities.
• Data Minimization: We only collect personal information that is necessary for the purposes described in this Privacy Policy.
• Incident Response: We maintain procedures for responding to data security incidents and will notify affected individuals and relevant authorities as required by applicable law.

6. Your Privacy Rights

Depending on your state of residence within the United States, you may have certain rights with respect to your personal information. We honor these rights as described below.

6.1 Rights Under the California Consumer Privacy Act (CCPA/CPRA)

If you are a California resident, you have the following rights under the CCPA as amended by the CPRA:

6.2 General Privacy Rights for All U.S. Residents

Regardless of your state of residence, we extend the following privacy rights to all of our customers:

• Right to Access: You may request access to the personal information we hold about you.
• Right to Correction: You may request that we update or correct inaccurate information in your account or records.
• Right to Deletion: You may request that we delete your personal information, subject to applicable legal requirements and our legitimate business needs.
• Right to Portability: Where technically feasible, you may request that we provide your personal information in a structured, commonly used, and machine-readable format.
• Right to Withdraw Consent: Where we process your personal information based on consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to Opt-Out of Marketing: You may opt out of receiving promotional communications from us at any time.

6.3 How to Exercise Your Rights

To exercise any of your privacy rights, please contact us using one of the following methods:

• Email: [email protected]
• Website: chuysrestaurant.rest

We will respond to verified requests within 45 days of receipt, as required by the CCPA/CPRA. We may extend this response period by an additional 45 days if necessary, in which case we will notify you of the extension and the reason for it. We may need to verify your identity before processing your request to protect your privacy and security. Verification may require you to provide information that matches information we already have on file about you.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The following general retention guidelines apply:

When personal information is no longer needed, we will delete or anonymize it in a secure manner. Where deletion is not immediately possible (for example, because data is stored in backup archives), we will securely store your personal information and isolate it from any further processing until deletion is possible.

8. Cookie Usage

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and deliver relevant content and advertising. A cookie is a small text file that is placed on your device when you visit a website.

8.1 Types of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for the basic functioning of our website. They enable features such as page navigation, access to secure areas, and shopping cart functionality. Without these cookies, some services cannot be provided.
• Performance and Analytics Cookies: These cookies collect information about how visitors use our website, such as which pages are visited most frequently. This data helps us improve the performance and usability of our website. Information collected is aggregated and anonymous.
• Functionality Cookies: These cookies allow our website to remember choices you make (such as your language preference or saved order preferences) and provide enhanced, personalized features.
• Marketing and Advertising Cookies: These cookies are used to deliver advertisements that are relevant to you and your interests. They may also be used to limit the number of times you see an advertisement and to measure the effectiveness of advertising campaigns.

8.2 Managing Your Cookie Preferences

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or set preferences for specific websites. Please be aware that disabling certain cookies may affect the functionality of our website and your ability to use certain services.

You may also opt out of interest-based advertising by visiting the Digital Advertising Alliance's opt-out page at optout.aboutads.info or the Network Advertising Initiative's opt-out page at optout.networkadvertising.org.

For more detailed information about the specific cookies we use and how to manage them, please refer to our full Cookie Policy, which is available on our website at chuysrestaurant.rest.

9. Children's Privacy

We do not knowingly solicit data from or market to children under the age of 18. If you are under 18, please do not use our website or submit any personal information to us. If you are a parent or legal guardian and you believe that your child under the age of 13 has provided us with personal information without your consent, please contact us immediately at [email protected].

Upon receiving notice that a child under the age of 13 has provided personal information to us, we will take immediate steps to delete that information from our systems. If we discover that we have inadvertently collected personal information from a child under 13, we will promptly delete it in accordance with COPPA requirements.

10. International Data Transfers

Chuy's is headquartered in the United States, and our primary data processing activities occur within the United States. If you are accessing our website or services from outside the United States, please be aware that your personal information may be transferred to, stored, and processed in the United States or other countries where our service providers operate.

The data protection laws in the United States and other countries where we or our service providers operate may differ from the privacy laws in your country of residence. By using our website and providing us with your personal information, you acknowledge and consent to the transfer of your information to the United States and other applicable jurisdictions.

When we transfer personal data internationally, we take appropriate steps to ensure that such transfers comply with applicable data protection requirements and that your personal information remains protected according to the standards described in this Privacy Policy. These steps may include:

• Entering into data processing agreements with service providers that include standard contractual clauses or other legally recognized transfer mechanisms
• Ensuring that service providers located outside the United States maintain data protection standards that are at least equivalent to those required under U.S. law
• Conducting due diligence on international service providers to confirm their compliance with applicable privacy laws

11. Third-Party Links and Services

Our website may contain links to third-party websites, applications, and services, including social media platforms, online ordering platforms, and delivery partner websites. Please be aware that we do not control these third-party platforms, and this Privacy Policy does not apply to them.

When you click on a link to a third-party website, you are leaving our website and entering a site that is subject to that third party's own privacy policy and terms of service. We encourage you to review the privacy policies of any third-party platforms you visit. We are not responsible for the privacy practices, content, or data handling of third-party websites, even if you accessed them through a link on our website.

Third-party services we may integrate with include, but are not limited to:

• Google Analytics (web analytics)
• Meta Pixel / Facebook Ads (advertising)
• Social media platforms (Facebook, Instagram, Twitter/X, TikTok)
• Online ordering and delivery platforms
• Payment gateway providers
• Reservation management platforms

12. Do Not Track Signals

Some web browsers include a "Do Not Track" (DNT) feature or setting that signals your preference that websites not collect and use data about your online browsing activities. At this time, our website does not currently respond to DNT browser signals or mechanisms because a uniform technical standard for recognizing and implementing DNT signals has not yet been finalized by the relevant regulatory or standards bodies.

However, we do offer you choices regarding marketing communications and certain uses of your personal information, as described in this Privacy Policy and through our cookie management tools. California residents also have the right to opt out of the sale or sharing of personal information, as described in Section 6.1.

13. Marketing Communications

With your consent (where required by law), we may send you promotional communications via email, SMS/text message, or other digital channels about our menu, special offers, new locations, events, and loyalty program benefits.

13.1 Email Marketing

If you have subscribed to our email newsletter or promotional emails, you can unsubscribe at any time by clicking the "unsubscribe" link included at the bottom of every marketing email we send. You may also opt out by contacting us directly at [email protected]. Please note that even after you opt out of marketing emails, we may continue to send you transactional or administrative communications related to your orders, account, or our legal obligations.

13.2 SMS/Text Message Marketing

If you have opted in to receive marketing communications via SMS/text message, you can opt out at any time by replying "STOP" to any message we send you or by contacting us at [email protected]. Message and data rates may apply depending on your mobile carrier plan.

14. How to File a Privacy Complaint

If you have concerns about how we handle your personal information, we encourage you to first contact us directly so that we can attempt to resolve your concerns:

• Email: [email protected]
• Website: chuysrestaurant.rest

We will acknowledge your complaint within 5 business days and provide a substantive response within 30 days. If you are not satisfied with our response, you may have the right to file a complaint with a relevant government authority.

14.1 Filing a Complaint with the FTC

The Federal Trade Commission (FTC) is the primary federal agency responsible for consumer protection and privacy enforcement in the United States. If you believe we have violated your privacy rights under the FTC Act or any applicable federal privacy law, you may file a complaint with the FTC at:

• Website: reportfraud.ftc.gov
• Phone: 1-877-FTC-HELP (1-877-382-4357)

14.2 California Residents — California Privacy Protection Agency (CPPA)

If you are a California resident and believe that your rights under the CCPA/CPRA have been violated, you may file a complaint with the California Privacy Protection Agency (CPPA):

• Website: cppa.ca.gov
• Address: California Privacy Protection Agency, 2101 Arena Boulevard, Sacramento, CA 95834

14.3 State Attorney General Offices

Depending on your state of residence, you may also have the right to file a privacy complaint with your state's Attorney General office. Many state attorneys general have consumer protection divisions that handle privacy-related complaints. We encourage you to visit your state government's website for contact information for your state's Attorney General.

15. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable law, or business operations. When we make material changes to this policy, we will:

• Update the "Last Updated" date at the top of this page
• Post the revised Privacy Policy on our website at chuysrestaurant.rest
• Notify you via email if the changes are material and you have provided us with your email address
• In some cases, request your renewed consent to the updated policy

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your personal information. Your continued use of our website or services after any changes to this Privacy Policy constitutes your acceptance of the updated policy.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to reach out to us. We are committed to addressing your privacy concerns promptly and transparently.

We aim to respond to all privacy-related inquiries within 5 business days. For requests related to your personal data rights (access, deletion, correction, portability), we will respond within the timeframes required by applicable law — generally within 45 days for CCPA/CPRA requests.