Privacy Policy

Welcome to Chuy's. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website mexican-chuys.click, place orders, or interact with our food services. Please read this policy carefully. If you disagree with its terms, please discontinue use of our site.

This Privacy Policy applies to all information collected through our website (mexican-chuys.click), any related services, and any interactions you have with us, whether online or in person. By accessing or using our services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

1. Who We Are

Chuy's is a food service business operating in the United States. We are dedicated to serving our customers with quality Mexican-inspired cuisine and exceptional customer experiences both in-restaurant and through our digital platforms.

For any privacy-related questions, concerns, or requests, you may contact us using the details above. We will respond to your inquiries promptly and in accordance with applicable law.

2. Information We Collect

We collect several types of information in connection with the operation of our website and food services. The information we gather helps us deliver a better, more personalized experience and improve our services over time.

2.1 Personal Information You Provide Directly

When you interact with us — whether by placing an order, creating an account, signing up for our newsletter, making a reservation, or contacting us — you may provide us with personally identifiable information, including but not limited to:

• Full Name: So we can address you personally and process your orders.
• Email Address: For order confirmations, promotional communications, and customer service responses.
• Phone Number: For delivery coordination, reservation confirmations, and customer support.
• Mailing or Delivery Address: Required for food delivery orders and billing purposes.
• Payment Information: Credit card numbers, debit card details, billing address, and related financial information necessary to process transactions. Note: We do not store full payment card numbers; payment processing is handled through secure third-party processors.
• Date of Birth: Used for age verification and special birthday offers or promotions.
• Dietary Preferences and Restrictions: When voluntarily provided to help us serve you better.
• Account Credentials: Username and password if you create an account on our platform.
• Feedback and Survey Responses: Information you provide when completing satisfaction surveys or submitting reviews.

2.2 Usage Data and Technical Information

When you visit our website, our servers and analytics tools automatically collect certain technical information about your visit, including:

• IP Address: Your Internet Protocol address, which may indicate your approximate geographic location.
• Browser Type and Version: The web browser you use to access our site (e.g., Chrome, Safari, Firefox).
• Operating System: The operating system running on your device (e.g., Windows, macOS, iOS, Android).
• Pages Visited: The specific pages and content you view on our website, including timestamps.
• Referring URLs: The website or link that directed you to our site.
• Session Duration: How long you spend on individual pages and throughout your visit.
• Clickstream Data: The sequence of pages you visit and actions you take.
• Search Queries: Terms you search within our website.
• Error Logs: Records of any errors that occurred during your visit.

2.3 Device Information

We may collect information about the device you use to access our services, including:

• Device type (mobile phone, tablet, desktop computer)
• Unique device identifiers
• Mobile network information
• Hardware model
• Screen resolution and display settings
• Time zone settings
• Language preferences

2.4 Cookies and Tracking Technologies

We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about your browsing behavior on our website. These technologies help us remember your preferences, analyze site traffic, and deliver more relevant content and advertisements. Please see Section 9 of this Privacy Policy for more detailed information about our use of cookies.

2.5 Information from Third Parties

We may receive information about you from third-party sources, such as:

• Delivery Partners: Third-party food delivery platforms that process orders on our behalf.
• Social Media Platforms: If you interact with our social media pages or use social login features.
• Marketing Partners: Analytics and advertising companies that provide us with aggregated or anonymized data.
• Review Platforms: Public reviews you post on third-party restaurant review sites.
• Payment Processors: Transaction confirmation data from our payment processing partners.

3. How We Use Your Information

We use the information we collect for a variety of purposes, all aimed at providing you with excellent food service experiences and maintaining the efficient operation of our business. Specifically, we use your information to:

3.1 Service Provision and Order Fulfillment

• Process and fulfill your food orders, including online orders and reservations
• Coordinate delivery or pickup arrangements
• Send order confirmations, receipts, and status updates
• Manage your account and maintain account security
• Process payments and prevent fraudulent transactions
• Respond to your customer service inquiries and complaints
• Handle refunds, returns, or order adjustments

3.2 Marketing and Promotional Communications

• Send you promotional emails, newsletters, and special offers (with your consent where required by law)
• Notify you about new menu items, seasonal specials, and upcoming events
• Deliver personalized offers based on your order history and preferences
• Run loyalty programs and reward initiatives
• Conduct contests, sweepstakes, or promotional campaigns

You may opt out of receiving marketing communications at any time by clicking the "unsubscribe" link in any email or by contacting us directly at [email protected].

3.3 Analytics and Service Improvement

• Analyze website usage patterns to improve site navigation and user experience
• Understand customer preferences and ordering habits to refine our menu
• Monitor and analyze the effectiveness of our marketing campaigns
• Conduct research and development to improve our products and services
• Generate statistical reports and business analytics
• Test new features, menu items, and website functionalities

3.4 Legal and Compliance Purposes

• Comply with applicable federal and state laws and regulations
• Respond to legal processes, court orders, or government requests
• Enforce our Terms of Service and other legal agreements
• Protect the rights, property, and safety of Chuy's, our customers, and the public
• Detect, investigate, and prevent fraudulent or illegal activities
• Maintain required business records for tax and regulatory purposes

4. Legal Basis for Processing Your Information

As a business operating in the United States, we process your personal information based on the following lawful grounds:

• Contractual Necessity: Processing is necessary to fulfill our obligations to you, such as processing your food orders and managing your account.
• Legitimate Interests: We process certain data to pursue our legitimate business interests, including improving our services, preventing fraud, and marketing our products, provided these interests are not overridden by your rights.
• Consent: Where required by law, we obtain your explicit consent before processing your data, particularly for direct marketing communications and non-essential cookies.
• Legal Obligation: We process data when required to comply with applicable federal or state laws.

For California residents, please refer to Section 11 for specific disclosures required under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA).

5. Sharing Your Information with Third Parties

We respect your privacy and do not sell your personal information to third parties for monetary compensation. However, we may share your information in the following circumstances:

5.1 Service Providers and Business Partners

We engage trusted third-party service providers who assist us in operating our website and delivering our services. These providers are contractually obligated to protect your information and use it only for the specified purposes. Categories of service providers include:

• Payment Processors: Companies that securely handle credit card and debit card transactions on our behalf.
• Delivery Partners: Third-party delivery platforms and logistics providers who help fulfill delivery orders.
• Cloud Hosting Providers: Companies that provide the infrastructure to host our website and store data securely.
• Email and Communication Platforms: Services used to send transactional and marketing emails.
• Analytics Providers: Companies such as Google Analytics that help us understand website traffic and user behavior.
• Customer Support Tools: Platforms used to manage and respond to customer inquiries.
• Marketing and Advertising Partners: Companies that help us deliver targeted advertisements and measure campaign performance.
• Point-of-Sale (POS) System Providers: Technology companies that manage our ordering and transaction systems.

5.2 Legal Requirements and Law Enforcement

We may disclose your personal information when we believe in good faith that such disclosure is necessary to:

• Comply with a legal obligation, subpoena, court order, or government request
• Enforce our Terms of Service or other agreements
• Protect and defend the rights or property of Chuy's
• Prevent or investigate possible wrongdoing in connection with our services
• Protect the personal safety of users of our services or the public
• Comply with requirements of the Federal Trade Commission (FTC) Act and applicable consumer protection laws

5.3 Business Transfers

In the event that Chuy's undergoes a merger, acquisition, asset sale, reorganization, or bankruptcy proceeding, your personal information may be transferred as part of that transaction. We will notify you via email or prominent notice on our website before your information becomes subject to a different privacy policy.

5.4 With Your Consent

We may share your information with third parties for purposes not described in this Privacy Policy when we have obtained your explicit consent to do so.

6. Data Security

We take the security of your personal information seriously and implement a variety of technical, administrative, and physical security measures to protect your data from unauthorized access, alteration, disclosure, or destruction.

6.1 Security Measures We Employ

• Encryption: We use Secure Socket Layer (SSL) / Transport Layer Security (TLS) encryption to protect data transmitted between your browser and our website.
• Access Controls: Access to personal information is restricted to authorized personnel who need it to perform their job functions.
• Secure Payment Processing: Payment card information is processed through PCI DSS-compliant payment processors. We do not store full credit card numbers on our servers.
• Regular Security Audits: We periodically review our security practices and update them to address new threats and vulnerabilities.
• Employee Training: Our staff members are trained on data privacy and security best practices.
• Incident Response Plan: We have procedures in place to respond to data security incidents promptly and notify affected individuals as required by law.
• Firewall Protection: Our servers are protected by firewalls and intrusion detection systems.
• Password Security: Stored passwords are hashed using industry-standard cryptographic functions.

6.2 Limitations of Security

Despite our best efforts, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security. In the event of a data breach that affects your personal information, we will notify you in accordance with applicable state breach notification laws.

7. Your Privacy Rights

Depending on your location and applicable law, you may have certain rights regarding your personal information. We are committed to honoring these rights and providing you with the means to exercise them.

7.1 Right of Access

You have the right to request a copy of the personal information we hold about you. We will provide this information in a commonly used, machine-readable format upon verified request.

7.2 Right to Correction

If any of your personal information is inaccurate or incomplete, you have the right to request that we correct or update it. You may also update certain information directly through your account settings.

7.3 Right to Deletion

You may request that we delete your personal information. We will honor such requests to the extent permitted by law. Please note that certain information may need to be retained to comply with legal obligations, resolve disputes, or enforce agreements.

7.4 Right to Data Portability

Where technically feasible, you may request that we provide your personal data in a structured, commonly used, and machine-readable format so that you can transfer it to another service provider.

7.5 Right to Opt Out of Marketing

You have the right to opt out of receiving marketing communications from us at any time. You can unsubscribe from our email list by clicking the "unsubscribe" link in any marketing email or by contacting us at [email protected].

7.6 Right to Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights. Exercising your rights will not result in you receiving a lower quality of service or being denied service altogether.

7.7 How to Submit a Request

To exercise any of your privacy rights, please contact us using the information below. We will respond to verifiable consumer requests within 45 days. In certain complex cases, we may require up to 90 days, and we will notify you of any extension.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

When personal information is no longer needed, we securely delete or anonymize it in accordance with our data disposal procedures.

9. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze site performance, and deliver relevant content and advertising.

9.1 What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They allow websites to remember your preferences, login status, and other information to personalize your experience.

9.2 Types of Cookies We Use

• Essential Cookies: These are necessary for the website to function properly. They enable core features such as security, network management, and account access. These cookies cannot be disabled.
• Performance and Analytics Cookies: These cookies collect information about how visitors use our website, such as which pages are visited most often and any error messages received. This data is used to improve the website's performance.
• Functional Cookies: These cookies allow the website to remember choices you make (such as your preferred language or region) and provide enhanced, more personalized features.
• Targeting and Advertising Cookies: These cookies are used to deliver advertisements that are more relevant to you and your interests. They also help measure the effectiveness of advertising campaigns.
• Social Media Cookies: These enable you to share our content on social media platforms and may track your browsing activity across other websites.

9.3 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or alert you when cookies are being sent. However, disabling certain cookies may affect the functionality of our website. Please refer to your browser's help documentation for instructions on managing cookie settings.

Additionally, you may opt out of interest-based advertising through the Digital Advertising Alliance (DAA) at optout.aboutads.info or the Network Advertising Initiative (NAI) at optout.networkadvertising.org.

10. Children's Privacy

Our food services and website at mexican-chuys.click are not directed at children under the age of 18. We do not knowingly collect, solicit, or maintain personal information from anyone under 13 years of age. If you are under 13, please do not use our website or submit any personal information through our services.

If we become aware that we have inadvertently collected personal information from a child under the age of 13 without verifiable parental consent, we will take immediate steps to delete that information from our servers. If you believe we may have collected information from or about a child under 13, please contact us immediately at [email protected].

Parents and guardians who believe their children may have submitted personal information to us are encouraged to contact us so that we can identify and delete such information promptly. Our commitment to children's privacy aligns with the requirements of the Children's Online Privacy Protection Act (COPPA).

11. California Privacy Rights (CCPA/CPRA)

If you are a resident of California, you have specific rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA). This section provides additional disclosures and explains your rights under California law.

11.1 Categories of Personal Information Collected

In the preceding 12 months, we have collected the following categories of personal information from California consumers:

• Identifiers (name, email address, IP address, account credentials)
• Commercial information (purchase history, order records)
• Internet or other electronic network activity information (browsing history, interaction with our website)
• Geolocation data (approximate location derived from IP address or delivery address)
• Financial information (payment card details processed through secure third-party processors)
• Inferences drawn from the above to create a profile about your preferences

11.2 Your California Rights

California residents have the right to:

• Know: Request disclosure of the categories and specific pieces of personal information we have collected about you.
• Delete: Request deletion of your personal information, subject to certain exceptions.
• Correct: Request correction of inaccurate personal information we maintain about you.
• Opt Out of Sale/Sharing: We do not sell your personal information for monetary compensation. However, certain sharing activities with advertising partners may constitute "sharing" under CPRA. You may opt out by contacting us.
• Limit Use of Sensitive Personal Information: Request that we limit our use of sensitive personal information to what is necessary to provide our services.
• Non-Discrimination: We will not discriminate against you for exercising your California privacy rights.

11.3 Submitting California Privacy Requests

To submit a verifiable consumer request under CCPA/CPRA, please contact us at [email protected]. We will respond within 45 calendar days of receiving a verifiable request. You may submit up to two requests per year free of charge.

12. Federal Consumer Protection

Our privacy practices comply with applicable federal laws, including the Federal Trade Commission (FTC) Act, which prohibits unfair or deceptive acts or practices in commerce. We do not engage in deceptive data collection practices, and we honor all representations made in this Privacy Policy.

The FTC has enforcement authority over companies that fail to honor their privacy commitments. If you believe we have engaged in unfair or deceptive privacy practices, you have the right to file a complaint with the FTC at ftc.gov/complaint.

13. International Data Transfers

Chuy's is a U.S.-based business, and all our operations, servers, and data storage are primarily located within the United States. If you access our services from outside the United States, please be aware that your information will be transferred to, stored in, and processed in the United States, where privacy laws may differ from those in your country of residence.

By using our services and providing us with your personal information, you consent to the transfer of your information to the United States and to its processing in accordance with this Privacy Policy and U.S. law.

If you are located in a jurisdiction with specific data transfer requirements (such as the European Economic Area), we will take appropriate steps to ensure that any transfer of your personal information complies with applicable data protection laws, including through the use of appropriate contractual safeguards.

14. Third-Party Links and Services

Our website may contain links to third-party websites, social media platforms, or other services that are not operated by us. These may include food delivery platforms, review sites, social media pages, or partner businesses. When you click on these links, you will be directed to a third-party site.

We strongly advise you to review the privacy policy of every website you visit. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party sites or services. This Privacy Policy applies solely to information collected by our website and services at mexican-chuys.click.

15. How to File a Complaint

If you have concerns about how we handle your personal information and are not satisfied with our response, you have the right to file a complaint with the appropriate regulatory authority.

15.1 Contact Us First

We encourage you to contact us directly in the first instance, as we will make every effort to resolve your concerns promptly and satisfactorily:

15.2 Regulatory Complaints

If you are not satisfied with our response, you may file a complaint with:

• Federal Trade Commission (FTC): For concerns about unfair or deceptive privacy practices, visit ftc.gov/complaint or call 1-877-382-4357.
• California Attorney General (California Residents): If you are a California resident, you may contact the California Attorney General's Office at oag.ca.gov or call 1-800-952-5225.
• State Attorney General: Residents of other states may file complaints with their respective state attorney general's office.
• Better Business Bureau (BBB): You may also file a complaint at bbb.org.

16. Do Not Track Signals

Some web browsers have a "Do Not Track" (DNT) feature that signals to websites that you do not want to have your online activity tracked. Currently, there is no universally accepted standard for how websites should respond to DNT signals, and our website does not currently alter its data collection practices in response to DNT signals. We will continue to monitor developments in this area and update our practices accordingly.

17. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. We will notify you of any material changes by posting the new Privacy Policy on this page with a revised effective date, and, where required by law or where we deem appropriate, by sending you a notification via email or a prominent notice on our website.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website and services after any changes to this Privacy Policy constitutes your acceptance of the updated terms.

If we make material changes that affect how we use your personal information in ways that require your consent, we will request your consent before implementing such changes.

18. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact us. We are committed to addressing your inquiries in a timely and transparent manner.

We will make every effort to resolve your privacy concerns promptly and fairly. If you submit a request or inquiry, please provide as much detail as possible so that we can address your concern effectively. We may need to verify your identity before processing certain requests.