Privacy Policy

Welcome to Chuys Cafe. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website chuyscafe.rest, place orders, interact with our services, or otherwise engage with us. Please read this policy carefully. If you disagree with its terms, please discontinue use of our site and services.

This Privacy Policy applies to all information collected through our website, mobile experiences, online ordering systems, loyalty programs, and any related services, promotions, or events (collectively, the "Services").

1. About Us

Chuys Cafe operates as a food service business in the United States. We are dedicated to providing our customers with a warm, welcoming dining and ordering experience — both in person and online. As part of this commitment, we take the privacy of your personal data seriously.

• Business Name: Chuys Cafe
• Website: chuyscafe.rest
• Email: [email protected]

For all privacy-related questions, requests, or concerns, please contact us at the email address listed above.

2. Applicable Law

As a business operating in the United States, we comply with all applicable federal and state privacy laws, including but not limited to:

• The Federal Trade Commission (FTC) Act, which governs unfair or deceptive practices in commerce, including privacy and data security.
• The California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) — applicable to California residents.
• The CAN-SPAM Act — governing commercial electronic communications.
• The Children's Online Privacy Protection Act (COPPA) — protecting the privacy of children under 13.
• Any applicable state-level privacy laws in the state where the business is registered and where users reside.

Where California law applies, additional rights and disclosures are provided in Section 12 of this policy.

3. Information We Collect

We collect information about you in a variety of ways depending on how you interact with Chuys Cafe and our Services. The categories of information we collect include the following:

3.1 Personal Information You Provide Directly

When you voluntarily interact with us — such as by creating an account, placing an order, signing up for a newsletter, or contacting us — we may collect:

• Identity Data: First name, last name, username or similar identifier.
• Contact Data: Email address, telephone number, billing address, and delivery address.
• Account Data: Login credentials (username and password), account preferences, and order history.
• Transaction Data: Details about orders you place, products or menu items purchased, payment method type (we do not store full card numbers), transaction amounts, and dates.
• Communications Data: Any messages, feedback, reviews, inquiries, or other content you submit to us via email, contact forms, or social media.
• Marketing Preferences: Your preferences in receiving marketing communications from us.

3.2 Information Collected Automatically

When you access or use our website at chuyscafe.rest, we automatically collect certain technical and usage data, including:

• Device Information: IP address, browser type and version, operating system, device identifiers, and screen resolution.
• Usage Data: Pages visited, time spent on pages, links clicked, referring URLs, search queries on our site, and navigation paths.
• Log Data: Server logs that record requests made to our site, error logs, and access timestamps.
• Location Data: General geographic location inferred from your IP address. We do not collect precise GPS-level location data unless you expressly grant permission.

3.3 Cookies and Tracking Technologies

We use cookies, web beacons, pixel tags, local storage, and similar tracking technologies to collect information about your browsing behavior and preferences on our website. For a detailed explanation of how we use cookies and your choices regarding them, please refer to Section 9 of this policy.

3.4 Information From Third Parties

We may receive information about you from third parties, such as:

• Third-party payment processors (e.g., Stripe, Square) who confirm payment status and fraud signals.
• Delivery platform partners if you order through a third-party food delivery app.
• Analytics providers (e.g., Google Analytics) who provide aggregated or pseudonymized insights about site usage.
• Social media platforms if you interact with our pages or use social login features.
• Business partners running joint promotions or events with us.

4. How We Use Your Information

We use the information we collect for a variety of legitimate business purposes, including:

4.1 Providing and Managing Our Services

• To process and fulfill your food orders, including delivery or pickup coordination.
• To manage and maintain your account on our website.
• To process payments and send transaction confirmations.
• To respond to your inquiries, complaints, or customer support requests.
• To manage reservations and special event bookings.

4.2 Improving Our Services

• To analyze how users interact with our website and identify areas for improvement.
• To conduct internal research and development to improve our menu, offerings, and digital experience.
• To monitor the performance and security of our website and systems.
• To understand customer preferences and trends in food ordering behavior.

4.3 Marketing and Promotions

• To send you promotional emails, newsletters, special offers, and updates about Chuys Cafe — but only if you have opted in or we have a legitimate interest to do so.
• To personalize content and advertisements shown to you on our site or via third-party advertising platforms.
• To administer loyalty programs, contests, surveys, and promotional events.
• To measure the effectiveness of our marketing campaigns.

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any email we send you, or by contacting us at [email protected].

4.4 Legal and Compliance Purposes

• To comply with applicable laws, regulations, and legal obligations.
• To detect, investigate, and prevent fraudulent transactions, abuse, or other illegal activity.
• To enforce our Terms of Service and other agreements.
• To protect the rights, property, or safety of Chuys Cafe, our customers, or others.

5. Legal Basis for Processing

We process your personal information based on one or more of the following legal grounds:

6. Sharing Your Information With Third Parties

We do not sell your personal information to third parties. However, we may share your information with selected third parties under the following circumstances:

6.1 Service Providers and Business Partners

We share information with trusted third-party companies that help us operate our business and deliver our Services. These include:

• Payment Processors: To securely handle payment transactions. These providers are PCI-DSS compliant.
• Delivery Partners: To coordinate food delivery orders placed through our platform or integrated third-party delivery apps.
• Email Service Providers: To send transactional and marketing emails on our behalf.
• Analytics Providers: Such as Google Analytics, to help us understand website traffic and user behavior.
• Cloud Hosting Providers: To host our website and store data securely.
• Customer Support Tools: Platforms that help us manage and respond to customer inquiries.

All such third parties are contractually bound to use your information only for the purposes we specify and to maintain appropriate security measures.

6.2 Legal Requirements

We may disclose your personal information if required to do so by law, or in good-faith belief that such disclosure is necessary to:

• Comply with a legal obligation, court order, subpoena, or governmental request.
• Protect and defend the rights or property of Chuys Cafe.
• Prevent or investigate possible wrongdoing in connection with our Services.
• Protect the personal safety of our customers, staff, or the public.
• Protect against legal liability.

6.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal information may be transferred to the acquiring entity. We will notify you via email and/or a prominent notice on our website prior to your data becoming subject to a different privacy policy.

6.4 With Your Consent

We may share your information with other third parties when we have your explicit consent to do so.

7. Data Security

Chuys Cafe takes the security of your personal information seriously. We implement a range of administrative, technical, and physical security measures to protect your data from unauthorized access, alteration, disclosure, or destruction.

7.1 Security Measures We Use

• SSL/TLS Encryption: All data transmitted between your browser and our website is encrypted using industry-standard Secure Socket Layer (SSL) or Transport Layer Security (TLS) protocols.
• Access Controls: Access to personal data is restricted to authorized personnel only, on a need-to-know basis.
• Firewalls and Intrusion Detection: Our systems are protected by firewalls and monitored for suspicious activity.
• Data Minimization: We only collect the personal data necessary for the purposes described in this policy.
• Regular Security Audits: We periodically review our security practices and update them as needed.
• Payment Security: We do not store full payment card numbers. All payment transactions are processed through PCI-DSS compliant third-party processors.

7.2 Data Breach Notification

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected individuals and, where required by law, the appropriate regulatory authorities, in accordance with applicable US federal and state law timelines.

8. Your Privacy Rights

Depending on your location and applicable law, you may have certain rights regarding the personal information we hold about you. We are committed to honoring these rights.

8.1 General Rights (All Users)

• Right to Access: You may request a copy of the personal information we hold about you.
• Right to Correction: You may ask us to correct any inaccurate or incomplete personal data we hold about you.
• Right to Deletion: You may request that we delete your personal data, subject to certain legal exceptions (e.g., where we are required by law to retain data).
• Right to Data Portability: You may request that we provide your data in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing before the withdrawal.
• Right to Opt Out of Marketing: You may opt out of receiving promotional communications from us at any time.

8.2 How to Exercise Your Rights

To exercise any of your privacy rights, please contact us at:

• Email: [email protected]
• Website: chuyscafe.rest

We will respond to your request within 30 days. In some cases, we may need to verify your identity before processing your request. We will not charge a fee for reasonable requests, but may charge a reasonable fee for manifestly unfounded, repetitive, or excessive requests.

9. Cookie Usage

Our website chuyscafe.rest uses cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and support our marketing activities.

9.1 What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They allow the site to recognize your device and remember certain information about your visit, such as your preferences and login status.

9.2 Types of Cookies We Use

9.3 Managing Your Cookie Preferences

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies or delete existing cookies. However, please note that disabling certain cookies may affect the functionality of our website.

For more detailed information about cookies, including how to manage and delete them, please visit www.allaboutcookies.org. We encourage you to review our full Cookie Policy (available on our website) for complete information.

10. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

When personal data is no longer required, we securely delete or anonymize it so that it can no longer be associated with you.

11. Children's Privacy

Chuys Cafe does not knowingly collect, solicit, or maintain personal information from individuals under the age of 18. Our website, online ordering system, and related digital services are not directed at children.

In compliance with the Children's Online Privacy Protection Act (COPPA), we do not knowingly collect personal information from children under the age of 13 without verifiable parental consent. If we become aware that we have inadvertently collected personal information from a child under 13, we will take prompt steps to delete that information from our records.

If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at [email protected] and we will take appropriate action.

12. Additional Rights for California Residents (CCPA/CPRA)

If you are a resident of California, you have specific rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). This section supplements the rest of this Privacy Policy.

12.1 Categories of Personal Information Collected

In the past 12 months, we have collected the following categories of personal information:

• Identifiers (name, email address, IP address)
• Commercial information (order history, products purchased)
• Internet or other electronic network activity information (browsing behavior on our site)
• Geolocation data (general, inferred from IP)
• Inferences drawn to create a profile about preferences

12.2 Your California Privacy Rights

California residents have the right to:

• Know: Request information about the categories and specific pieces of personal information we have collected about you, the sources, the purposes for collection, and the categories of third parties with whom we share it.
• Delete: Request deletion of personal information we have collected from you, subject to certain exceptions.
• Correct: Request correction of inaccurate personal information we maintain about you.
• Opt Out of Sale/Sharing: We do not sell or share personal information for cross-context behavioral advertising purposes. If this practice ever changes, California residents will have the right to opt out.
• Limit Use of Sensitive Personal Information: Request that we limit the use and disclosure of sensitive personal information to what is necessary for providing our services.
• Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny goods or services, charge different prices, or provide a different level of quality based on your exercise of these rights.

12.3 Submitting a California Privacy Request

To submit a verifiable consumer request for any of the above rights, please contact us at:

• Email: [email protected]

We will respond to verified requests within 45 days, with the possibility of a 45-day extension where reasonably necessary. You may designate an authorized agent to make a request on your behalf, provided the agent has your written permission and we can verify your identity.

13. International Data Transfers

Chuys Cafe is a United States-based business and your personal information is primarily collected, stored, and processed within the United States. If you are accessing our website from outside the United States, please be aware that your data will be transferred to, stored, and processed in the United States.

The data protection laws in the United States may differ from those in your country of residence. By using our Services and providing us with your personal information, you acknowledge and consent to this transfer.

When we transfer data internationally to third-party service providers, we take steps to ensure appropriate safeguards are in place to protect your information in accordance with applicable law, including through contractual protections such as data processing agreements.

14. Third-Party Links and Services

Our website may contain links to third-party websites, social media platforms, and services (such as food delivery apps or payment portals) that are not operated by us. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party sites. We encourage you to review the privacy policies of any third-party services you visit or interact with.

The inclusion of a link to a third-party website does not constitute an endorsement of that site or its privacy practices by Chuys Cafe.

15. How to File a Complaint

If you have concerns about how we handle your personal information and are not satisfied with our response to your inquiry, you have the right to file a complaint with the relevant data protection or consumer protection authority.

15.1 Federal Level

You may file a complaint with the:

• Federal Trade Commission (FTC)
  The FTC enforces federal consumer protection laws, including laws governing privacy and data security practices.
  Website: www.ftc.gov/complaint
  Phone: 1-877-382-4357

15.2 California Residents

California residents may also contact the:

• California Privacy Protection Agency (CPPA)
  Website: cppa.ca.gov
• California Attorney General's Office
  Website: oag.ca.gov/privacy

15.3 Contact Us First

Before filing a formal complaint with a regulatory authority, we encourage you to contact us directly so that we may have the opportunity to address your concern. Please reach out to us at [email protected] and we will do our best to resolve the matter promptly and fairly.

16. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes to this policy, we will:

• Update the "Last Updated" date at the top of this page.
• Post a prominent notice on our website notifying you of the change.
• Where required by law, notify you directly via email.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website and Services after any changes constitutes your acceptance of the updated policy.

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact us. We are here to help.

We aim to respond to all privacy-related inquiries within 30 days of receipt. For California residents, we adhere to the 45-day response window as required under the CCPA/CPRA.