Privacy Policy

This Privacy Policy describes how Chuy's ("we," "us," "our," or "the Company") collects, uses, shares, and protects your personal information when you visit our website at chuysrestaurant.click, place orders online, sign up for our loyalty programs, or otherwise interact with our services. We are committed to protecting your privacy and handling your personal data with transparency, integrity, and respect.

Please read this Privacy Policy carefully before using our website or submitting any personal information. By accessing or using chuysrestaurant.click, you acknowledge that you have read, understood, and agree to the practices described in this policy. If you do not agree with the terms of this Privacy Policy, please discontinue use of our website and services immediately.

This policy applies to all users located in the United States. We comply with applicable federal and state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and the Federal Trade Commission (FTC) Act governing unfair or deceptive trade practices.

1. About Us

Chuy's is a food service business operating through the website chuysrestaurant.click. We provide restaurant services, online ordering, and related food and beverage offerings to customers across the United States.

For all privacy-related inquiries, requests, or complaints, please contact us using the information provided in Section 15 of this policy.

2. Information We Collect

We collect various types of information in connection with your use of our website, services, and interactions with us. The categories of personal information we collect include, but are not limited to, the following:

2.1 Personal Identification Information

When you register an account, place an order, sign up for our newsletter, join our loyalty program, or contact us directly, we may collect:

• Full name
• Email address
• Phone number
• Mailing address and delivery address
• Date of birth (for age verification and promotional purposes)
• Username and password (for account access)
• Profile picture or avatar (if uploaded voluntarily)

2.2 Financial and Transaction Information

When you make a purchase or payment through our website, we may collect:

• Payment card information (processed securely through third-party payment processors)
• Billing address
• Transaction history, including items ordered, order amounts, and dates
• Gift card or promotional code information

2.3 Usage and Behavioral Data

When you browse or interact with our website, we automatically collect certain technical and behavioral information, including:

• Pages visited and time spent on each page
• Links clicked and features used
• Search queries entered on our website
• Referring URLs (the website that directed you to ours)
• Shopping cart contents and abandoned cart data
• Frequency and recency of visits

2.4 Device and Technical Information

We collect technical information about the device and software you use to access our website, including:

• IP address
• Browser type and version
• Operating system and device type (desktop, mobile, tablet)
• Screen resolution
• Unique device identifiers
• Language settings
• Time zone

2.5 Location Data

With your consent, we may collect approximate or precise geolocation data to:

• Identify the nearest Chuy's restaurant location
• Facilitate delivery services to your area
• Provide location-relevant promotions and offers

2.6 Communications and Customer Service Data

When you contact us by email, phone, or through our website's contact forms, we collect:

• The content of your messages and inquiries
• Records of communications and support tickets
• Feedback, reviews, and survey responses you voluntarily submit

2.7 Cookies and Tracking Technologies

We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about your interactions with our website. Please refer to Section 9 of this policy for detailed information about our use of cookies and your choices regarding them.

2.8 Information You Provide Voluntarily

We may also collect any other information you choose to provide voluntarily, such as dietary preferences, food allergy information, special occasion details, or social media handles when engaging with our promotional campaigns or contests.

3. How We Use Your Information

We use the personal information we collect for a variety of legitimate business purposes, including:

3.1 Providing and Managing Our Services

• Processing your online food orders and reservations
• Creating and managing your account on our website
• Facilitating payment transactions and sending order confirmations
• Arranging delivery or pickup services
• Managing your participation in our loyalty rewards program

3.2 Customer Support and Communications

• Responding to your inquiries, complaints, and support requests
• Sending transactional emails such as order confirmations, receipts, and delivery updates
• Notifying you of changes to our menu, services, policies, or terms

3.3 Marketing and Promotional Activities

• Sending you promotional emails, newsletters, and special offers (with your consent where required by law)
• Delivering personalized advertisements based on your preferences and browsing history
• Conducting contests, sweepstakes, and other promotional campaigns
• Informing you about new menu items, seasonal offerings, and events at Chuy's

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in our emails or by contacting us at [email protected].

3.4 Analytics and Service Improvement

• Analyzing usage patterns and trends to improve the functionality and user experience of our website
• Conducting internal research, testing, and data analysis
• Monitoring website performance and identifying technical issues
• Developing new features, products, and services based on customer behavior

3.5 Legal Compliance and Safety

• Complying with applicable federal, state, and local laws and regulations
• Responding to lawful requests from government authorities, courts, or law enforcement agencies
• Preventing, detecting, and investigating fraud, security breaches, and other unlawful activity
• Enforcing our Terms of Service and other legal agreements
• Protecting the rights, property, and safety of Chuy's, our customers, and the public

3.6 Business Operations

• Managing our business relationships with vendors, partners, and service providers
• Conducting due diligence in connection with business transactions such as mergers, acquisitions, or asset sales
• Maintaining accurate business records and financial accounts

4. Legal Basis for Processing

To the extent required by applicable law, we rely on the following legal bases for processing your personal information:

• Contract Performance: Processing necessary to fulfill your orders, manage your account, or perform services you have requested.
• Legitimate Interests: Processing necessary for our legitimate business interests, including improving our services, preventing fraud, and ensuring network security, where such interests are not overridden by your rights.
• Legal Obligation: Processing required to comply with applicable laws and regulations.
• Consent: Where we rely on your consent, such as for marketing communications or certain cookie placements, you have the right to withdraw that consent at any time.

5. Sharing Your Information with Third Parties

We do not sell, rent, or trade your personal information to third parties for their own independent marketing purposes. However, we may share your information in the following circumstances:

5.1 Service Providers and Business Partners

We engage trusted third-party companies and individuals to perform services on our behalf, including:

• Payment processors and financial institutions
• Food delivery and logistics partners
• Cloud hosting and data storage providers
• Email marketing and communication platforms
• Analytics and data intelligence providers (e.g., Google Analytics)
• Customer relationship management (CRM) software providers
• Cybersecurity and fraud prevention services
• Advertising networks and retargeting platforms

These service providers are contractually obligated to use your personal information only for the purpose of providing services to us and are prohibited from using or disclosing your information for any other purpose.

5.2 Legal Requirements and Law Enforcement

We may disclose your personal information if we believe in good faith that such disclosure is necessary to:

• Comply with a legal obligation, court order, subpoena, or lawful government request
• Protect and defend the rights or property of Chuy's
• Prevent or investigate possible wrongdoing in connection with our services
• Protect the personal safety of users of our website or the general public
• Protect against legal liability

5.3 Business Transfers

In the event that Chuy's undergoes a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal information may be transferred to the acquiring entity. We will provide notice of such a transfer and any choices you may have regarding your information in accordance with applicable law.

5.4 With Your Consent

We may share your personal information with third parties when you have given us your explicit consent to do so, such as when participating in third-party promotions or integrating your account with social media platforms.

5.5 Aggregated and Anonymized Data

We may share aggregated or de-identified data that cannot reasonably be used to identify you with third parties for research, analytics, marketing, or other business purposes.

6. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA). These rights include:

6.1 Right to Know

You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which we collected it, the business or commercial purpose for collecting it, and the categories of third parties with whom we share it.

6.2 Right to Delete

You have the right to request the deletion of personal information we have collected from you, subject to certain exceptions permitted by law, such as when the information is necessary for us to provide you with a service you requested or to comply with a legal obligation.

6.3 Right to Correct

You have the right to request that we correct inaccurate personal information that we maintain about you.

6.4 Right to Opt-Out of Sale or Sharing

You have the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising. To exercise this right, please contact us at [email protected].

6.5 Right to Limit Use of Sensitive Personal Information

You have the right to limit the use and disclosure of your sensitive personal information (such as precise geolocation, financial data, and health-related information) to purposes necessary for providing our services.

6.6 Right to Non-Discrimination

We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you goods or services, charge you different prices, or provide a different level of service because you exercised your privacy rights.

To submit a CCPA/CPRA request, please contact us at [email protected]. We will verify your identity before processing your request and respond within 45 days, with an extension of up to 90 days if necessary.

7. Your Privacy Rights (All Users)

Regardless of your location, we respect your privacy rights and will honor reasonable requests to:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request that we correct any inaccurate or incomplete personal information.
• Deletion: Request that we delete your personal information, subject to legal limitations.
• Portability: Request that we provide your personal information in a structured, commonly used, machine-readable format.
• Opt-Out: Opt out of marketing communications, certain data sharing practices, or the use of your data for profiling purposes.
• Withdraw Consent: Where processing is based on your consent, withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact us at [email protected]. We will respond to verified requests within a reasonable timeframe as required by applicable law.

8. Data Security

The security of your personal information is of utmost importance to us. We implement a variety of industry-standard technical, administrative, and physical security measures designed to protect your personal data from unauthorized access, disclosure, alteration, and destruction. These measures include:

• Encryption: We use SSL/TLS encryption to protect data transmitted between your browser and our website.
• Access Controls: We restrict access to personal information to authorized employees and service providers who need it to perform their job functions.
• Secure Payment Processing: All payment transactions are processed through PCI-DSS compliant third-party processors.
• Regular Security Audits: We conduct periodic assessments of our security infrastructure and data practices.
• Data Minimization: We collect only the personal information necessary for the purposes described in this policy.
• Incident Response: We maintain a data breach response plan and will notify affected individuals and relevant authorities as required by law in the event of a security incident.

9. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and deliver relevant content and advertising.

9.1 Types of Cookies We Use

• Essential Cookies: Necessary for the website to function properly. They enable core functionality such as security, network management, and account access. You cannot opt out of these cookies.
• Performance and Analytics Cookies: These cookies help us understand how visitors interact with our website by collecting and reporting information anonymously.
• Functional Cookies: These cookies allow our website to remember your preferences and provide enhanced, more personal features.
• Marketing and Advertising Cookies: These cookies are used to track visitors across websites and deliver targeted advertising relevant to your interests.

9.2 Managing Your Cookie Preferences

You can manage or disable cookies through your browser settings. Most browsers allow you to refuse cookies or alert you when a cookie is being sent. Please note that disabling certain cookies may affect the functionality and performance of our website. You may also opt out of interest-based advertising by visiting the Network Advertising Initiative opt-out page or the Digital Advertising Alliance opt-out page.

For more detailed information about the specific cookies we use and how to manage them, please refer to our Cookie Policy available on our website.

10. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, to provide our services, and to comply with our legal obligations. The specific retention periods depend on the type of data and the purpose for which it is processed:

After the applicable retention period, we will securely delete or anonymize your personal information in accordance with our data disposal procedures.

11. Children's Privacy

Our website is not directed at children under 18 years of age. We do not knowingly solicit data from or market to children. In compliance with the Children's Online Privacy Protection Act (COPPA) and applicable state laws, if we become aware that we have inadvertently collected personal information from a child under 18 without verifiable parental consent, we will take immediate steps to delete such information from our records.

If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at [email protected] so that we can take appropriate action.

12. International Data Transfers

Chuy's is based in the United States and our primary data processing activities take place within the United States. However, some of our third-party service providers may be located in or process data in other countries.

If your personal information is transferred outside of the United States to countries that may not offer the same level of data protection as your home jurisdiction, we will take appropriate safeguards to ensure your information remains protected in accordance with this Privacy Policy and applicable data protection laws. These safeguards may include:

• Entering into data processing agreements with standard contractual clauses or equivalent protections
• Ensuring service providers adhere to recognized data protection frameworks
• Implementing technical and organizational measures to protect data in transit and at rest

By using our website and services, you acknowledge that your personal information may be transferred to and processed in the United States or other countries where data protection laws may differ from those in your jurisdiction.

13. Third-Party Links and Services

Our website may contain links to third-party websites, social media platforms, and other online services that are not operated or controlled by Chuy's. This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party websites you visit, as we are not responsible for their privacy practices or content.

We may integrate with third-party services such as:

• Social media platforms (Facebook, Instagram, Twitter/X) for social sharing and login features
• Online review platforms (Yelp, Google Reviews)
• Food delivery aggregator platforms
• Mapping and location services (Google Maps)

Your interactions with these third-party services are governed by their respective privacy policies and terms of service.

14. Do Not Track Signals

Some browsers transmit "Do Not Track" (DNT) signals to websites. Because there is currently no industry-wide standard for what companies should do when they receive these signals, we do not currently respond to DNT browser signals. However, you can manage your cookie and tracking preferences as described in Section 9 of this policy.

15. Contact Us for Privacy Inquiries

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact our privacy team using the following information:

We will acknowledge your request within 10 business days and strive to resolve all privacy inquiries within 45 days. For complex requests, we may require additional time and will notify you accordingly.

16. Filing a Complaint with a Data Protection Authority

If you believe your privacy rights have been violated and we have not adequately resolved your concern, you have the right to file a complaint with the appropriate regulatory authority:

16.1 For California Residents

California residents may file a complaint with the California Privacy Protection Agency (CPPA):

• Website: cppa.ca.gov
• Address: 2101 Arena Boulevard, Sacramento, CA 95834

16.2 For All U.S. Consumers

Consumers across the United States may file a complaint with the Federal Trade Commission (FTC) regarding unfair or deceptive privacy practices:

• Website: reportfraud.ftc.gov
• Phone: 1-877-382-4357
• Address: Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, DC 20580

We encourage you to contact us first at [email protected] before filing a regulatory complaint, as we are committed to resolving privacy concerns promptly and fairly.

17. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, services, legal requirements, or for other operational reasons. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy
• Post the revised policy on our website at chuysrestaurant.click
• Where required by law, notify you directly by email or through a prominent notice on our website

Your continued use of our website following the posting of any changes constitutes your acceptance of the revised Privacy Policy. We encourage you to review this policy periodically to stay informed about how we are protecting your information.

18. FTC Compliance Statement

Chuy's is committed to complying with the standards set forth by the Federal Trade Commission (FTC) regarding online privacy and consumer protection. We follow the FTC's principles of notice, choice, access, security, and enforcement in our data handling practices. We do not engage in unfair or deceptive practices with respect to the collection, use, or disclosure of consumer information.

Our marketing practices, including email marketing and interest-based advertising, comply with applicable FTC guidelines and the CAN-SPAM Act. Recipients of our marketing communications always have the ability to opt out at any time.