Privacy Policy

This Privacy Policy describes how Chuys ("we," "us," or "our") collects, uses, discloses, and protects your personal information when you visit our website at chuys-new.click, place orders, use our services, or otherwise interact with us. Please read this policy carefully to understand our practices regarding your personal data and how we will treat it.

By accessing or using our website and services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with the terms of this policy, please do not use our website or services.

This Privacy Policy is governed by the laws of the United States, including applicable federal and state privacy laws. If you are a California resident, additional rights and disclosures apply to you under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), which are described in detail in the relevant sections below.

1. About Us

Chuys is a food business operating in the United States. We are committed to protecting the privacy and security of your personal information. Our contact details are as follows:

For any questions, concerns, or requests related to this Privacy Policy or the handling of your personal information, you may contact us at the email address provided above.

2. Information We Collect

We collect various types of information in connection with your use of our website and services. The categories of personal information we collect include, but are not limited to, the following:

2.1 Personal Identification Information

When you create an account, place an order, sign up for our newsletter, or contact us, we may collect personally identifiable information such as:

• Full name
• Email address
• Phone number
• Mailing or delivery address
• Billing address
• Date of birth (where applicable for age verification purposes)
• Username and password for account access
• Payment information (credit or debit card details, processed through secure third-party payment processors)
• Dietary preferences and food allergen information you voluntarily provide

2.2 Order and Transaction Information

When you place an order through our website, we collect information related to that transaction, including:

• Order history and details (items purchased, quantities, prices)
• Special instructions or customizations
• Delivery preferences and notes
• Loyalty program participation and reward points
• Feedback, reviews, and ratings you submit regarding our food and service

2.3 Usage and Technical Data

When you visit our website, we automatically collect certain technical information about your device and browsing behavior through cookies, web beacons, log files, and similar technologies. This may include:

• IP address and approximate geolocation derived from it
• Browser type and version
• Operating system and device type (desktop, mobile, tablet)
• Referring URLs and exit pages
• Pages viewed and time spent on each page
• Links clicked and features used
• Date and time of each visit
• Search queries entered on our website
• Session identifiers and interaction data

2.4 Cookie and Tracking Data

We use cookies and similar tracking technologies to enhance your experience on our website. Cookies are small text files stored on your device that help us recognize you and remember your preferences. The types of cookies we use include:

• Strictly Necessary Cookies: Essential for the website to function properly, such as maintaining your shopping cart and login session.
• Performance and Analytics Cookies: Help us understand how visitors use our website by collecting and reporting information anonymously.
• Functionality Cookies: Allow us to remember choices you make (such as your preferred location or language) and provide enhanced features.
• Marketing and Advertising Cookies: Used to deliver relevant advertisements and track the effectiveness of our marketing campaigns.

For more detailed information about our cookie practices, including how to manage or disable cookies, please refer to our Cookie Policy.

2.5 Communications Data

If you contact us via email, phone, or any other communication channel, we may retain records of that correspondence, including:

• Content of your messages or inquiries
• Contact information you provide
• Records of any complaints or feedback submitted
• Records of customer service interactions

2.6 Information from Third Parties

We may receive information about you from third-party sources, including:

• Social media platforms when you connect your account or interact with our social media pages
• Third-party food delivery platforms or partner services
• Marketing partners and data analytics providers
• Publicly available sources

2.7 Information You Voluntarily Provide

In addition to the above, you may choose to provide us with other information, such as when you participate in surveys, contests, or promotional activities, or when you submit content through our website.

3. How We Use Your Information

We use the personal information we collect for a variety of legitimate business purposes, including:

3.1 Providing and Managing Our Services

• Processing and fulfilling your food orders
• Managing your account and preferences
• Facilitating delivery or pickup of your orders
• Processing payments and preventing fraudulent transactions
• Sending order confirmations, updates, and receipts
• Providing customer support and responding to your inquiries
• Administering loyalty programs and rewards

3.2 Improving Our Products and Services

• Analyzing usage patterns to understand how customers interact with our website
• Conducting research and development to improve our menu and service offerings
• Testing new features and functionality
• Gathering feedback and reviews to enhance the quality of our food and service
• Troubleshooting technical issues and optimizing website performance

3.3 Marketing and Promotions

• Sending you promotional emails, newsletters, and special offers (where you have consented or where permitted by applicable law)
• Personalizing your experience on our website by displaying relevant content and recommendations
• Conducting marketing campaigns and promotions
• Serving targeted advertisements on our website and third-party platforms
• Measuring the effectiveness of our marketing efforts

You may opt out of receiving marketing communications from us at any time by clicking the "unsubscribe" link in any promotional email or by contacting us at [email protected].

3.4 Legal Compliance and Safety

• Complying with applicable laws, regulations, and legal processes
• Enforcing our Terms of Service and other applicable agreements
• Detecting, preventing, and investigating fraud, security breaches, and other harmful activities
• Protecting the rights, property, and safety of Chuys, our customers, and the public
• Responding to legal requests from law enforcement and government authorities

3.5 Business Operations

• Maintaining internal records and business accounting
• Evaluating and improving our operational efficiency
• Conducting business analysis and strategic planning
• Facilitating corporate transactions such as mergers, acquisitions, or asset sales

4. Legal Basis for Processing Personal Information

Depending on the nature of the personal information and the specific context in which it is collected, we rely on the following legal bases for processing your personal data under applicable United States law:

• Contractual Necessity: Processing is necessary to fulfill a contract with you, such as processing your food order or managing your account.
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as improving our services, preventing fraud, and conducting marketing, provided these interests are not overridden by your rights and interests.
• Consent: Where required by law, we will obtain your explicit consent before processing your personal information for specific purposes, such as sending marketing communications.
• Legal Obligation: Processing is necessary to comply with a legal obligation applicable to Chuys under federal or state law.

5. Sharing Your Information with Third Parties

We do not sell your personal information to third parties. However, we may share your information with trusted third parties in the following circumstances:

5.1 Service Providers and Business Partners

We work with carefully selected third-party service providers who assist us in operating our business and delivering services to you. These providers are authorized to use your personal information only as necessary to perform services on our behalf. Categories of service providers include:

• Payment processors (for secure handling of credit/debit card transactions)
• Delivery and logistics partners
• Cloud hosting and data storage providers
• Email and communication service providers
• Analytics and marketing service providers (such as Google Analytics)
• Customer relationship management (CRM) software providers
• IT support and cybersecurity service providers

5.2 Legal Requirements and Law Enforcement

We may disclose your personal information to government authorities, law enforcement agencies, courts, or other third parties when we believe disclosure is necessary or appropriate to:

• Comply with applicable laws, regulations, or legal processes
• Respond to lawful requests from government authorities, including national security and law enforcement requirements
• Enforce our Terms of Service and other agreements
• Protect the rights, property, or safety of Chuys, our employees, customers, or others
• Investigate and prevent fraud, security incidents, or other harmful activities

5.3 Business Transfers

If Chuys is involved in a merger, acquisition, sale of assets, reorganization, or other business transition, your personal information may be transferred as part of that transaction. We will provide notice before your personal information is transferred and becomes subject to a different privacy policy.

5.4 Aggregated and Anonymized Data

We may share aggregated, anonymized, or de-identified information with third parties for research, marketing, analytics, and other purposes. This information cannot reasonably be used to identify you as an individual.

5.5 With Your Consent

We may share your personal information with other third parties when we have obtained your explicit consent to do so.

6. Data Security

We take the security of your personal information seriously and implement a variety of technical, administrative, and physical security measures designed to protect your data from unauthorized access, disclosure, alteration, or destruction. Our security measures include:

• Encryption: We use industry-standard SSL/TLS encryption to protect data transmitted between your browser and our website.
• Access Controls: Access to personal information is restricted to authorized employees and contractors who need it to perform their job functions.
• Secure Payment Processing: Payment card information is processed through PCI DSS-compliant third-party payment processors. We do not store complete credit card numbers on our servers.
• Regular Security Assessments: We conduct regular security audits and vulnerability assessments to identify and address potential security risks.
• Employee Training: Our employees receive training on data privacy and security practices and are bound by confidentiality obligations.
• Incident Response: We have procedures in place to detect, respond to, and notify affected individuals and authorities in the event of a data breach, as required by applicable law.

While we take all reasonable precautions to protect your personal information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee the absolute security of your data. In the event of a security breach that affects your personal information, we will notify you as required by applicable United States federal and state breach notification laws.

7. Your Privacy Rights

Depending on your state of residence, you may have certain rights regarding your personal information. We respect and honor these rights and provide mechanisms for you to exercise them.

7.1 General Rights Available to All Users

• Right to Access: You have the right to request a copy of the personal information we hold about you.
• Right to Correction: You have the right to request that we correct inaccurate or incomplete personal information about you.
• Right to Deletion: You have the right to request that we delete your personal information, subject to certain exceptions (such as where we are required to retain it by law).
• Right to Opt Out of Marketing: You may opt out of receiving marketing communications at any time.
• Right to Data Portability: You may request that we provide your personal information in a portable, machine-readable format.

7.2 California Residents — CCPA/CPRA Rights

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), provides you with additional rights regarding your personal information:

• Right to Know: You have the right to know what categories and specific pieces of personal information we have collected about you, the purposes for which it was collected, and whether it has been disclosed to third parties.
• Right to Delete: You have the right to request deletion of personal information we have collected from you, subject to certain exceptions.
• Right to Correct: You have the right to request correction of inaccurate personal information.
• Right to Opt Out of Sale or Sharing: You have the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising purposes. To exercise this right, please contact us at [email protected].
• Right to Limit Use of Sensitive Personal Information: You have the right to limit the use and disclosure of sensitive personal information to certain permitted purposes.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA/CPRA rights. We will not deny you goods or services, charge you different prices, or provide you with a different level of quality of service because you exercised your rights.

To submit a CCPA/CPRA request, please contact us at [email protected]. We will verify your identity before processing your request. You may also authorize an agent to submit a request on your behalf, provided you submit written authorization and the agent verifies their identity.

7.3 How to Exercise Your Rights

To exercise any of the rights described in this section, please contact us by:

• Email: [email protected]

We will respond to your request within 45 days of receipt. In certain circumstances, we may need up to 90 days to respond, in which case we will notify you of the extension and the reason for it. We may require you to verify your identity before processing your request to protect your personal information.

8. Cookie Policy Summary

Our website uses cookies and similar tracking technologies to provide and improve our services, analyze website traffic, and personalize your experience. When you first visit our website, you will be presented with a cookie consent banner that allows you to manage your cookie preferences.

You can also control cookies through your browser settings. Most browsers allow you to refuse cookies or delete existing cookies. Please note that disabling certain cookies may affect the functionality of our website. For detailed information about the specific cookies we use, their purposes, and how to manage them, please review our full Cookie Policy.

9. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The specific retention periods we apply depend on the type of data and the purpose for which it was collected:

When personal information is no longer needed for any of the purposes described above, or when you request deletion and we are not legally required to retain the data, we will securely delete or anonymize your personal information in accordance with our data retention procedures.

10. Children's Privacy

In compliance with the Children's Online Privacy Protection Act (COPPA) and other applicable laws, we do not knowingly collect, use, or disclose personal information from individuals under the age of 18 without verifiable parental consent. Our website, mobile application, and services are directed to adults only.

If you are under 18 years of age, you are not permitted to use our website or services, create an account, or provide any personal information to us. If you believe we have inadvertently collected personal information from a child under 18 without parental consent, please contact us immediately at [email protected] so that we can take appropriate steps to delete such information promptly.

Parents and guardians who have concerns about their child's interaction with our website are encouraged to contact us directly. We take the protection of children's privacy very seriously and will cooperate fully with any parental requests to remove a child's personal information from our records.

11. International Data Transfers

Chuys is based in the United States, and your personal information is primarily processed and stored in the United States. However, some of our third-party service providers may be located in other countries, and your personal information may be transferred to, stored in, or processed in those countries.

When we transfer personal information outside the United States, we take appropriate measures to ensure that your data receives an adequate level of protection, including:

• Working only with service providers that maintain appropriate data protection standards
• Implementing contractual safeguards with international service providers
• Ensuring that any international data transfers comply with applicable US law and any applicable international frameworks

By using our website and services, you acknowledge and consent to the transfer of your personal information to countries outside your country of residence, where data protection laws may differ from those in your jurisdiction. We will take all steps reasonably necessary to ensure your data is treated securely and in accordance with this Privacy Policy.

12. Third-Party Websites and Links

Our website may contain links to third-party websites, social media platforms, and other online services that are not operated by Chuys. These links are provided for your convenience and informational purposes only. We have no control over the content, privacy practices, or terms and conditions of third-party websites and are not responsible for their privacy policies or data handling practices.

When you click on a link to a third-party website, you are leaving our website and your interaction with that website is governed by its own privacy policy. We strongly encourage you to review the privacy policy of every website you visit. The inclusion of a link to a third-party website does not imply our endorsement of that website or its practices.

13. Federal Consumer Protection Standards

Our privacy practices are designed to comply with the Federal Trade Commission Act (FTC Act) and related regulations governing unfair or deceptive acts and practices. We are committed to maintaining transparency in our data collection and use practices and to honoring the privacy preferences of our customers. We do not engage in deceptive collection of personal information, and we honor all representations made in this Privacy Policy.

In addition, we comply with applicable federal laws governing the security of financial and payment information, including implementing appropriate safeguards as required by the FTC's Safeguards Rule for businesses that handle consumer financial information.

14. Do Not Track Signals

Some web browsers include a "Do Not Track" (DNT) feature that signals to websites that you do not wish to have your online activity tracked. Currently, there is no universally accepted standard for how websites should respond to DNT signals. Our website does not currently alter its data collection and use practices in response to DNT signals. However, you can control tracking technologies through our cookie consent management tool or your browser settings, as described in our Cookie Policy.

15. How to File a Complaint

If you believe that your privacy rights have been violated or that we have not handled your personal information in accordance with this Privacy Policy or applicable law, we encourage you to contact us first so that we may address your concerns.

15.1 Contact Us

To file a privacy-related complaint, please send a detailed description of your concern to:

• Email: [email protected]

We will acknowledge receipt of your complaint and investigate the matter. We aim to respond to all privacy complaints within 30 days of receipt and will work diligently to resolve any issues raised.

15.2 Filing a Complaint with a Regulatory Authority

If you are not satisfied with our response, or if you believe we are processing your personal information in violation of applicable law, you may file a complaint with the relevant data protection authority:

• Federal Trade Commission (FTC): The FTC handles complaints about unfair or deceptive business practices, including privacy violations. You can file a complaint at reportfraud.ftc.gov or by calling 1-877-FTC-HELP (1-877-382-4357).
• California Residents: If you are a California resident, you may also contact the California Privacy Protection Agency (CPPA) at cppa.ca.gov or the California Attorney General's Office at oag.ca.gov/privacy to file a complaint regarding our privacy practices under the CCPA/CPRA.
• Other State Residents: Residents of other states may have the right to file complaints with their respective state attorneys general or consumer protection agencies. We encourage you to check the applicable laws and regulatory bodies in your state.

16. Changes to This Privacy Policy

We reserve the right to update, modify, or revise this Privacy Policy at any time to reflect changes in our business practices, applicable laws, or regulatory requirements. When we make material changes to this policy, we will:

• Post the updated Privacy Policy on our website at chuys-new.click with a revised "Last Updated" date
• Notify you by email (where we hold your email address) for significant changes that materially affect your rights
• Display a prominent notice on our website homepage or other appropriate location

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your personal information. Your continued use of our website and services following the posting of any changes constitutes your acceptance of those changes. If you do not agree with any changes to this Privacy Policy, you should discontinue your use of our website and services.

17. Contact Information for Privacy Inquiries

If you have any questions, comments, or concerns about this Privacy Policy, the data we hold about you, or your privacy rights, please do not hesitate to contact our privacy team:

We are committed to working with you to obtain a fair resolution to any privacy concern or inquiry. When contacting us, please provide sufficient information to allow us to identify you and understand your request so that we can process it efficiently and securely.