Privacy Policy

This Privacy Policy describes how Chuys ("we," "us," or "our") collects, uses, discloses, and safeguards your personal information when you visit our website chuysmexfood.click, place orders, use our services, or otherwise interact with us. Please read this policy carefully. By accessing or using our website and services, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy.

We are committed to protecting your privacy and handling your personal data in a transparent, lawful, and responsible manner. This policy applies to all visitors, customers, and users of our platform and is governed by applicable United States federal and state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), and other relevant regulations.

1. About Us

Chuys is a food business operating in the United States. We provide authentic Mexican cuisine and food-related services through our website and physical locations. Our contact details are as follows:

2. Information We Collect

We collect various types of information in connection with our services. The categories of personal information we may collect include, but are not limited to, the following:

2.1 Personal Identification Information

When you create an account, place an order, make a reservation, subscribe to our newsletter, or otherwise interact with our platform, we may collect:

• Full name
• Email address
• Phone number
• Mailing address or delivery address
• Date of birth (for age verification purposes)
• Profile photograph (if provided)
• Username and password (stored in encrypted form)

2.2 Payment and Financial Information

When you make a purchase through our website or in our establishment, we may collect:

• Credit or debit card information (processed securely through third-party payment processors)
• Billing address
• Transaction history and order details
• Gift card numbers or promotional code data

Please note that we do not store full payment card numbers on our servers. All payment transactions are processed through PCI-DSS compliant payment processors.

2.3 Order and Dining Information

To provide our food services, we collect information such as:

• Food preferences and dietary restrictions
• Order history and purchase records
• Reservation details including date, time, and party size
• Special requests or allergy information you provide
• Loyalty program information and reward points

2.4 Usage Data and Technical Information

When you access our website, we automatically collect certain technical information, including:

• Internet Protocol (IP) address
• Browser type and version
• Operating system and device type
• Pages visited and time spent on each page
• Referring URLs and exit pages
• Date and time of your visit
• Clickstream data
• Search queries entered on our website

2.5 Location Information

With your consent, we may collect your precise or approximate geographic location to:

• Identify the nearest Chuys location to you
• Provide delivery services to your address
• Show you location-based promotions or offers

You may disable location services at any time through your device or browser settings.

2.6 Cookie and Tracking Data

We use cookies, web beacons, pixels, and similar tracking technologies to collect information about your browsing behavior on our website. For detailed information about our use of cookies, please refer to Section 9 of this policy and our dedicated Cookie Policy.

2.7 Communications Data

When you contact us via email, phone, online chat, or social media, we may collect:

• The content of your messages and correspondence
• Records of complaints or feedback
• Customer service interaction logs
• Survey responses and review submissions

2.8 Information from Third Parties

We may receive information about you from third-party sources, including:

• Social media platforms when you log in using a social account
• Third-party delivery partners (e.g., DoorDash, Uber Eats, Grubhub)
• Marketing and analytics partners
• Publicly available databases

3. How We Use Your Information

We use the personal information we collect for the following purposes:

3.1 Service Provision and Order Fulfillment

• Processing and fulfilling your food orders
• Managing reservations and table bookings
• Creating and maintaining your customer account
• Processing payments and issuing receipts
• Coordinating delivery or pickup services
• Responding to your inquiries and customer support requests
• Sending order confirmations, status updates, and receipts

3.2 Marketing and Promotional Communications

• Sending promotional emails, newsletters, and special offers (with your consent where required)
• Notifying you about new menu items, seasonal specials, and events
• Administering loyalty programs and rewards
• Personalizing marketing content based on your preferences and purchase history
• Running contests, giveaways, or promotional campaigns

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any email we send or by contacting us directly at [email protected].

3.3 Analytics and Website Improvement

• Analyzing website traffic patterns and user behavior
• Improving the functionality and user experience of our website
• Testing new features, layouts, and menu presentations
• Conducting market research and customer satisfaction surveys
• Generating aggregated, anonymized statistical reports

3.4 Legal Compliance and Safety

• Complying with applicable federal and state laws and regulations
• Enforcing our Terms of Service and other agreements
• Detecting, preventing, and investigating fraud or illegal activity
• Protecting the rights, property, and safety of our customers, employees, and business
• Responding to legal processes, court orders, or government requests

3.5 Business Operations

• Managing our internal business records
• Conducting staff training and quality assurance
• Evaluating and improving our food offerings and services
• Planning and managing business operations, including staffing and inventory

4. Sharing Your Information with Third Parties

We respect your privacy and do not sell your personal information to third parties for monetary compensation. However, we may share your information in the following circumstances:

4.1 Service Providers and Business Partners

We work with trusted third-party vendors who assist us in operating our business. These may include:

• Payment processors (e.g., Stripe, Square, PayPal) for secure transaction processing
• Delivery partners (e.g., DoorDash, Uber Eats, Grubhub) for order fulfillment
• Email marketing platforms for sending newsletters and promotions
• Analytics providers (e.g., Google Analytics) for website analytics
• Cloud hosting and IT services for data storage and website infrastructure
• Customer relationship management (CRM) platforms
• Reservation management systems

All third-party service providers are contractually obligated to use your personal information only as necessary to provide services to us and to maintain appropriate security measures.

4.2 Legal Requirements and Law Enforcement

We may disclose your personal information if required to do so by law or in good-faith belief that such action is necessary to:

• Comply with a legal obligation, subpoena, court order, or government request
• Protect and defend the rights or property of Chuys
• Prevent or investigate possible wrongdoing in connection with our services
• Protect the personal safety of users or the public
• Comply with FTC regulations or other applicable regulatory requirements

4.3 Business Transfers

In the event that Chuys is involved in a merger, acquisition, sale of assets, bankruptcy, or other business transition, your personal information may be transferred as part of that transaction. We will notify you via email or a prominent notice on our website before your personal information is transferred and subject to a different privacy policy.

4.4 Aggregated and Anonymized Data

We may share aggregated, de-identified, or anonymized information that cannot reasonably be used to identify you with third parties for research, marketing, analytics, or other business purposes.

4.5 With Your Consent

We may share your information with third parties when you have given us explicit consent to do so, for example when you participate in joint promotions with our business partners.

5. Data Security

The security of your personal information is of paramount importance to us. We implement a comprehensive range of technical, administrative, and physical security measures designed to protect your data from unauthorized access, disclosure, alteration, or destruction.

5.1 Technical Safeguards

• Secure Socket Layer (SSL) / Transport Layer Security (TLS) encryption for all data transmitted between your browser and our servers
• Encryption of sensitive data at rest using industry-standard encryption protocols
• Secure, firewalled server infrastructure
• Regular security audits and vulnerability assessments
• Multi-factor authentication for administrative access
• Automated intrusion detection and monitoring systems

5.2 Administrative Safeguards

• Strict access controls limiting employee access to personal data on a need-to-know basis
• Regular staff training on data privacy and security best practices
• Documented data handling and privacy procedures
• Background checks for employees with access to sensitive information

5.3 Physical Safeguards

• Secured physical access to data centers and server rooms
• Secure disposal of physical records containing personal information

Despite our best efforts, no method of electronic transmission or storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. In the event of a data breach that affects your rights and freedoms, we will notify you in accordance with applicable law, including applicable state breach notification laws.

6. Your Rights and Choices

Depending on your state of residence, you may have specific rights regarding your personal information. We are committed to honoring these rights in accordance with applicable law.

6.1 Rights Under the California Consumer Privacy Act (CCPA/CPRA)

If you are a California resident, you have the following rights under the CCPA as amended by the CPRA:

• Right to Know: You have the right to request that we disclose what personal information we collect, use, disclose, and sell or share about you.
• Right to Delete: You have the right to request the deletion of your personal information that we have collected, subject to certain exceptions.
• Right to Correct: You have the right to request correction of inaccurate personal information we maintain about you.
• Right to Opt-Out of Sale or Sharing: You have the right to opt out of the sale or sharing of your personal information. We do not sell your personal information for monetary compensation.
• Right to Limit Use of Sensitive Personal Information: You have the right to limit our use of sensitive personal information to only what is necessary for providing our services.
• Right to Non-Discrimination: You have the right not to receive discriminatory treatment for exercising your CCPA/CPRA rights.
• Right to Data Portability: You have the right to receive a copy of your personal information in a portable and readily usable format.

6.2 General Privacy Rights (All Users)

Regardless of your state of residence, we offer the following privacy choices to all our users:

• Access: Request access to the personal information we hold about you
• Correction: Request correction of any inaccurate or incomplete personal information
• Deletion: Request deletion of your personal information, subject to legal retention requirements
• Marketing Opt-Out: Opt out of receiving promotional communications at any time
• Cookie Preferences: Manage your cookie preferences through our cookie consent tool
• Account Management: Update your account information at any time through your profile settings

6.3 How to Exercise Your Rights

To exercise any of the rights described above, please contact us using one of the following methods:

• Email: [email protected]
• Website: chuysmexfood.click

We will verify your identity before processing your request. We will respond to verifiable consumer requests within 45 days of receipt. If we need additional time, we will inform you of the reason and the extension period. We may deny certain requests if we are legally permitted or required to do so, and in such cases, we will provide you with an explanation.

6.4 Authorized Agents

California residents may designate an authorized agent to submit requests on their behalf. To do so, the authorized agent must provide written proof of authorization, and we may still require you to verify your own identity directly with us.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The criteria we use to determine retention periods include:

• Account Information: Retained for the duration of your account and for a period of up to 3 years after account closure to allow for dispute resolution and legal compliance
• Order and Transaction Records: Retained for a minimum of 7 years to comply with tax, accounting, and financial record-keeping requirements under federal and state law
• Marketing Data: Retained until you opt out of marketing communications or for up to 2 years from your last interaction with us, whichever comes first
• Customer Service Records: Retained for up to 3 years from the date of your last inquiry or complaint
• Usage and Analytics Data: Typically retained in aggregated or anonymized form for up to 2 years
• Cookie Data: Varies by cookie type; session cookies expire when you close your browser, while persistent cookies may last up to 2 years
• Legal Compliance Records: Retained for as long as required by applicable law or regulation

When your personal information is no longer required for the purposes for which it was collected, we will securely delete, destroy, or anonymize it in accordance with our data retention schedules and applicable legal requirements.

8. Children's Privacy

Chuys is committed to protecting the privacy of minors. Our website, online ordering platform, and marketing communications are directed toward adults aged 18 and over. We do not knowingly collect, solicit, or use personal information from individuals under the age of 18.

If you are a parent or legal guardian and believe that your child under the age of 18 has provided us with personal information without your consent, please contact us immediately at [email protected]. Upon verification, we will promptly delete such information from our systems.

We comply with the Children's Online Privacy Protection Act (COPPA), which prohibits the collection of personal information from children under the age of 13 without verifiable parental consent. If we become aware that we have collected personal information from a child under 13, we will take immediate steps to delete that information.

9. Cookie Policy

We use cookies and similar tracking technologies to enhance your experience on our website, analyze usage patterns, and deliver personalized content and advertising.

9.1 Types of Cookies We Use

• Essential/Strictly Necessary Cookies: These cookies are required for the website to function properly, enabling basic features such as page navigation, account access, and shopping cart functionality. These cannot be disabled.
• Performance and Analytics Cookies: These cookies help us understand how visitors interact with our website by collecting information about page views, traffic sources, and user behavior. We use tools such as Google Analytics for this purpose.
• Functional Cookies: These cookies allow our website to remember your preferences, such as your language settings, saved items, or previously viewed menu items, to provide a more personalized experience.
• Marketing and Advertising Cookies: These cookies track your browsing habits to enable us to deliver targeted advertisements relevant to your interests across our website and other platforms. You may opt out of these cookies.

9.2 Managing Cookie Preferences

You can control and manage cookies through several methods:

• Our cookie consent banner when you first visit our website
• Your browser settings (note that disabling certain cookies may affect website functionality)
• Opt-out tools provided by third-party analytics providers (e.g., Google Analytics Opt-Out Browser Add-on)
• Industry opt-out platforms such as the Digital Advertising Alliance (DAA) at optout.aboutads.info

For more detailed information about the specific cookies we use and how to manage them, please refer to our full Cookie Policy available on our website.

10. International Data Transfers

Chuys is a United States-based business and primarily operates within the United States. Your personal information is collected, stored, and processed in the United States.

If you access our website or services from outside the United States, please be aware that your information may be transferred to, stored in, and processed in the United States, where privacy laws may differ from those in your home country. By using our services, you consent to the transfer of your personal information to the United States and acknowledge that your data will be processed in accordance with this Privacy Policy and applicable U.S. law.

In the event we transfer data internationally (for example, to cloud service providers with servers in other countries), we take appropriate safeguards to ensure your personal information remains protected in accordance with this Privacy Policy and applicable law. These safeguards may include data processing agreements with standard contractual clauses or other legally approved transfer mechanisms.

11. Third-Party Links and Websites

Our website may contain links to third-party websites, applications, or services that are not owned or operated by Chuys. These include links to social media platforms, delivery partner apps, and other food service directories. This Privacy Policy does not apply to those third-party websites.

We encourage you to review the privacy policies of any third-party websites or services you visit through links on our website. We have no control over and assume no responsibility for the content, privacy practices, or security of any third-party sites or services.

12. Do Not Track Signals

Some web browsers include a "Do Not Track" (DNT) feature that sends a signal to websites requesting that your browsing activity not be tracked. Currently, there is no universally accepted standard for how websites should respond to DNT signals, and our website does not currently alter its data collection and use practices in response to DNT signals from browsers.

However, you may use the cookie preference tools described in Section 9 of this policy to limit certain types of tracking on our website.

13. California-Specific Disclosures

In addition to the rights described in Section 6.1, California residents have the following additional rights and disclosures under the CCPA/CPRA:

13.1 Categories of Personal Information Collected

In the past 12 months, we have collected the following categories of personal information from California consumers:

13.2 Shine the Light Law

Under California Civil Code Section 1798.83, California residents may request information about personal information we share with third parties for their direct marketing purposes. To make such a request, please contact us at [email protected].

14. How to File a Complaint

If you believe that we have violated your privacy rights or have handled your personal information in a manner inconsistent with this Privacy Policy or applicable law, we encourage you to first contact us directly so that we may address your concern:

• Email: [email protected]
• Website: chuysmexfood.click

We will acknowledge your complaint within 10 business days and aim to resolve it within 30 days. If we require more time, we will inform you of the expected resolution timeframe.

14.1 Regulatory Complaints

If you are not satisfied with our response or believe that we are processing your personal information in a non-compliant manner, you have the right to file a complaint with the appropriate regulatory authority:

• Federal Trade Commission (FTC): For general consumer privacy complaints under the FTC Act. Visit reportfraud.ftc.gov or call 1-877-382-4357.
• California Privacy Protection Agency (CPPA): For California residents, complaints regarding CCPA/CPRA violations may be filed with the California Privacy Protection Agency at cppa.ca.gov.
• State Attorney General Offices: Residents of other states may also file complaints with their respective state attorney general offices regarding privacy violations.

15. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. When we make material changes to this policy, we will:

• Update the "Last Updated" date at the top of this page
• Notify you by email if you have an account with us (for significant changes)
• Display a prominent notice on our website

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website and services after any changes to this Privacy Policy constitutes your acceptance of the revised policy.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact our privacy team:

We are committed to working with you to resolve any concerns about your privacy in a fair and timely manner. Thank you for trusting Chuys with your personal information. We value your business and your privacy.