Privacy Policy

Effective Date: June 24, 2026  |  Last Updated: June 24, 2026

1. Introduction and Who We Are

Welcome to Chuy's Cafe. We operate the website located at chuyscafe.click and provide food-related products and services to our customers across the United States. We are committed to protecting the privacy and personal information of every individual who interacts with our business, whether you are browsing our menu, placing an online order, signing up for our newsletter, or simply visiting our website.

This Privacy Policy has been drafted in accordance with applicable United States federal and state privacy laws, including but not limited to the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), and other relevant consumer protection regulations. Depending on your state of residence, additional rights and protections may apply to you.

If you have any questions about this Privacy Policy or our data practices, you may contact us at any time using the information provided in the "Contact Us" section at the end of this document.

2. Business Contact Information

3. Information We Collect

We collect various types of information in connection with your use of our website and services. The categories of personal information we may collect are described below.

3.1 Personal Identification Information

When you interact with us directly — for example, by creating an account, placing an order, filling out a contact form, or subscribing to our mailing list — we may collect personally identifiable information, including:

• Full name
• Email address
• Phone number
• Billing and shipping address
• Date of birth (when required for age verification)
• Username and password for account creation
• Payment information (credit card numbers, billing details processed through secure third-party payment processors)
• Dietary preferences and food allergies (when voluntarily provided)
• Any other information you voluntarily provide to us

3.2 Usage Data and Behavioral Information

We automatically collect certain information when you visit our website or use our digital services. This usage data helps us understand how visitors interact with our platform and improve our services. This may include:

• Pages viewed and the sequence in which they were visited
• Time and date of your visit
• Duration of time spent on individual pages
• Links and buttons clicked
• Menu items browsed or added to cart
• Search queries entered on our website
• Referring website or source that directed you to our site
• Bounce rates and session information

3.3 Device and Technical Information

We may collect technical information about the device you use to access our website, including:

• IP address
• Browser type and version
• Operating system and platform
• Screen resolution and device type (mobile, tablet, desktop)
• Device identifiers and hardware model
• Language preferences
• Time zone settings
• Plug-ins and technologies installed in your browser

3.4 Location Data

With your permission, we may collect precise or approximate location data from your mobile device or computer. This information is used to provide you with location-based services such as finding our nearest cafe location, estimating delivery zones, or offering locally relevant promotions. You may disable location services through your device settings at any time.

3.5 Communications Data

When you contact us via email, contact forms, or other communication channels, we retain records of those communications, including the content of messages, attachments, and associated metadata, to respond to your inquiries and improve our customer service.

3.6 Transaction and Order History

If you place an order through our website, we collect and retain information related to that transaction, including the items ordered, order amounts, payment method type (not full card details), transaction timestamps, and delivery addresses. This allows us to process your orders, manage returns or refunds, and maintain accurate records.

3.7 Cookies and Tracking Technologies

We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about your browsing behavior on our website. For a detailed explanation of the types of cookies we use and how you can manage your cookie preferences, please refer to Section 9 (Cookie Policy) of this document.

4. How We Use Your Information

The personal information we collect is used for a variety of legitimate business purposes. Specifically, we use your data in the following ways:

4.1 Service Provision and Order Fulfillment

We use your personal information primarily to process and fulfill your orders, manage your account, provide customer support, send order confirmations and updates, arrange delivery or pickup, and process payments securely through our payment partners.

4.2 Communication and Customer Support

We use your contact details to respond to your inquiries, resolve complaints or disputes, notify you of changes to our menu, services, or policies, and send transactional messages directly related to your use of our services (such as order receipts and delivery confirmations).

4.3 Marketing and Promotional Communications

With your explicit consent, or where permitted by applicable law, we may use your email address or phone number to send you promotional materials, newsletters, special offers, new menu announcements, loyalty program updates, and other marketing communications from Chuy's Cafe. You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any marketing email, by texting STOP in response to SMS messages, or by contacting us directly at [email protected].

4.4 Analytics and Service Improvement

We analyze usage data and behavioral information to understand how our customers use our website, which menu items are most popular, where users encounter difficulties, and how we can optimize our digital experience. This analysis helps us improve our website functionality, design, and content over time.

4.5 Personalization

We may use information about your preferences and past orders to personalize your experience on our website, such as displaying menu recommendations, remembering your dietary preferences, or offering relevant promotions based on your order history.

4.6 Legal Compliance and Safety

We may use your information to comply with applicable laws, regulations, legal processes, or governmental requests; to enforce our Terms of Service; to detect, prevent, and address fraud, security issues, or technical problems; and to protect the rights, property, or safety of Chuy's Cafe, our customers, or the public.

4.7 Business Operations

We may use aggregated and anonymized data for internal business reporting, financial auditing, supply chain management, and strategic planning. Such aggregated data does not identify you personally.

5. Sharing Your Information with Third Parties

We do not sell your personal information for monetary compensation. However, we may share your information with certain third parties under the circumstances described below.

5.1 Service Providers and Business Partners

We engage trusted third-party service providers to perform functions on our behalf, including:

• Payment processors: To securely handle payment transactions
• Delivery and logistics partners: To fulfill food delivery orders
• Email marketing platforms: To send newsletters and promotional emails
• Analytics providers: Such as Google Analytics, to analyze website usage
• Cloud hosting providers: To store and manage our website and data infrastructure
• Customer relationship management (CRM) tools: To manage customer interactions and records
• IT security and fraud prevention services: To protect our systems and your data

These third parties are contractually obligated to use your information only as necessary to perform their services for us and are prohibited from using your data for their own independent purposes. We require all service providers to implement appropriate security measures to protect your personal information.

5.2 Legal Requirements and Law Enforcement

We may disclose your personal information if required to do so by law, court order, subpoena, or other legal process, or if we believe in good faith that such disclosure is necessary to: (a) comply with applicable laws or regulations; (b) protect and defend our legal rights or property; (c) prevent or investigate possible wrongdoing in connection with our services; or (d) protect the personal safety of users or the public.

5.3 Business Transfers

In the event that Chuy's Cafe undergoes a merger, acquisition, reorganization, sale of assets, or bankruptcy proceeding, your personal information may be transferred as part of that transaction. We will notify you via email or a prominent notice on our website before your personal information is transferred and becomes subject to a different privacy policy.

5.4 With Your Consent

We may share your information with other third parties when we have obtained your explicit consent to do so. You have the right to withdraw your consent at any time.

5.5 Aggregated and Anonymized Data

We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you with partners, advertisers, or the public for research, marketing, analytics, and other legitimate business purposes.

6. Data Security

Protecting your personal information is a top priority for Chuy's Cafe. We implement a comprehensive set of administrative, technical, and physical security measures designed to protect your data from unauthorized access, disclosure, alteration, or destruction.

6.1 Security Measures We Employ

• SSL/TLS Encryption: All data transmitted between your browser and our website is encrypted using industry-standard Secure Socket Layer (SSL) or Transport Layer Security (TLS) protocols.
• Secure Payment Processing: We do not store full credit card information on our servers. All payment transactions are processed through PCI-DSS compliant third-party payment processors.
• Access Controls: Access to your personal information within our organization is restricted to employees and contractors who need that information to perform their job functions. All personnel with access to personal data are required to maintain confidentiality.
• Regular Security Audits: We periodically review and update our security practices to address new and evolving threats.
• Firewalls and Intrusion Detection: We use firewalls, intrusion detection systems, and monitoring tools to protect our network and systems.
• Data Minimization: We collect only the personal information that is necessary for the purposes outlined in this policy.

7. Your Privacy Rights

Depending on your state of residence, you may have specific rights regarding your personal information. We are committed to honoring these rights in accordance with applicable law.

7.1 Rights Under the California Consumer Privacy Act (CCPA/CPRA)

If you are a California resident, you have the following rights under the CCPA as amended by the CPRA:

• Right to Know: You have the right to request that we disclose what personal information we have collected about you, the categories of sources from which it was collected, the purposes for which it is used, and the categories of third parties with whom it has been shared.
• Right to Delete: You have the right to request that we delete the personal information we have collected about you, subject to certain exceptions.
• Right to Correct: You have the right to request that we correct inaccurate personal information we maintain about you.
• Right to Opt-Out of Sale or Sharing: You have the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising.
• Right to Limit Use of Sensitive Personal Information: You have the right to limit our use and disclosure of sensitive personal information to purposes specified by the CPRA.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you goods or services, charge you different prices, or provide a different quality of service based on the exercise of your privacy rights.
• Right to Data Portability: You have the right to receive a copy of your personal information in a portable, readily usable format that allows you to transmit the data to another entity.

To exercise any of these rights, please submit a verifiable consumer request to us at [email protected]. We will respond to your request within 45 days as required by law, with the possibility of a 45-day extension when reasonably necessary.

7.2 General Privacy Rights for All U.S. Residents

Regardless of your state of residence, you have the following general rights with respect to your personal information:

• Right to Access: You may request access to the personal information we hold about you.
• Right to Correction: You may request that we correct inaccurate or incomplete information.
• Right to Deletion: You may request that we delete your personal information, subject to legal and operational requirements.
• Right to Opt-Out of Marketing: You may opt out of receiving marketing communications from us at any time.
• Right to Withdraw Consent: Where we rely on your consent as the legal basis for processing your personal information, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

7.3 How to Submit a Privacy Request

To exercise any of your privacy rights, please contact us using one of the following methods:

• Email: [email protected]
• Website: chuyscafe.click

We may need to verify your identity before processing your request. This verification process may require you to provide information that matches information we already have on file. We will not use personal information submitted for verification purposes for any other purpose.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The criteria used to determine our retention periods include:

• The duration of our ongoing relationship with you (e.g., as long as you have an account with us or continue to use our services)
• Legal obligations requiring us to retain data for minimum periods (e.g., tax, accounting, and financial record-keeping requirements)
• Statutes of limitations applicable to potential legal claims
• Recommendations from regulatory authorities

When your personal information is no longer needed, we will securely delete or anonymize it in accordance with our data retention schedule.

9. Cookie Policy

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and support our marketing efforts. This section provides a summary of our cookie practices.

9.1 What Are Cookies?

Cookies are small text files that are placed on your device when you visit a website. They allow the website to recognize your device on subsequent visits and store certain preferences or information. Cookies do not contain viruses or malicious code and cannot execute programs.

9.2 Types of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for the website to function properly. They enable core features such as security, network management, and account access. You cannot opt out of these cookies.
• Performance and Analytics Cookies: These cookies collect information about how visitors use our website, such as which pages are most visited and whether error messages are received. We use this data to improve our website performance.
• Functional Cookies: These cookies allow our website to remember choices you make (such as your preferred language or region) and provide enhanced, personalized features.
• Targeting and Advertising Cookies: These cookies are used to deliver advertisements more relevant to you and your interests. They may also limit the number of times you see an advertisement and help measure the effectiveness of advertising campaigns.

9.3 Managing Your Cookie Preferences

You can manage or disable cookies through your browser settings. Most web browsers allow you to refuse new cookies, delete existing cookies, or receive a warning before a cookie is stored. Please note that disabling certain cookies may affect the functionality of our website.

For more detailed information about the specific cookies we use, their purposes, and how to opt out, please refer to our full Cookie Policy, which is available on our website at chuyscafe.click.

10. Children's Privacy

Chuy's Cafe does not knowingly collect, use, or disclose personal information from individuals under the age of 18. Our website is not directed at children, and we do not intentionally market our products or services to minors. If you are under 18 years of age, please do not use our website or provide any personal information to us.

If we become aware that we have inadvertently collected personal information from a child under the age of 18, we will take immediate steps to delete that information from our records. If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us immediately at [email protected] so that we can take appropriate action.

We comply with the Children's Online Privacy Protection Act (COPPA), which prohibits the collection of personal information from children under 13 without verifiable parental consent. While our services are designed for users aged 18 and over, we take all age-related privacy obligations seriously.

11. International Data Transfers

Chuy's Cafe is based in the United States, and our primary data processing activities occur within the United States. If you are accessing our website from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country of residence.

When we transfer personal information internationally, we take appropriate steps to ensure that such transfers are conducted in compliance with applicable law and that adequate protections are in place for your data. These safeguards may include:

• Standard contractual clauses approved by relevant authorities
• Ensuring that recipient parties have implemented appropriate technical and organizational security measures
• Relying on recognized international data transfer frameworks where applicable

By using our website and providing us with your personal information, you acknowledge that your information may be transferred to and processed in the United States as described in this Privacy Policy.

12. Third-Party Links and Services

Our website may contain links to third-party websites, social media platforms, food delivery apps, or other external services. These third-party sites are not operated or controlled by Chuy's Cafe, and this Privacy Policy does not apply to them. We encourage you to review the privacy policies of any third-party sites or services you visit or use.

Common third-party services that may be integrated into our website include:

• Social media platforms (Facebook, Instagram, Twitter/X)
• Food delivery partners (DoorDash, Uber Eats, Grubhub)
• Google Maps and location services
• Online review platforms (Yelp, Google Reviews)
• Payment processors (Stripe, PayPal, Square)

We are not responsible for the privacy practices or content of these third-party services, and we make no representations or warranties regarding their privacy policies or data security practices.

13. California-Specific Disclosures

This section applies specifically to California residents and supplements the information provided elsewhere in this Privacy Policy, in accordance with the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA).

13.1 Categories of Personal Information Collected

In the past 12 months, we have collected the following categories of personal information from California consumers:

13.2 "Do Not Sell or Share My Personal Information"

California residents have the right to opt out of the sale or sharing of their personal information. To exercise this right, please contact us at [email protected] with the subject line "Do Not Sell or Share My Personal Information."

14. Filing a Complaint with a Data Protection Authority

If you believe that we have not adequately addressed your privacy concerns or have violated applicable privacy laws, you have the right to file a complaint with the appropriate regulatory authority.

14.1 For California Residents

California residents may file a complaint with the California Privacy Protection Agency (CPPA) or the California Attorney General's Office:

• California Privacy Protection Agency: cppa.ca.gov
• California Attorney General: oag.ca.gov/privacy

14.2 For All U.S. Consumers

You may file a complaint with the Federal Trade Commission (FTC), which is the primary federal agency responsible for consumer privacy protection:

• FTC Consumer Portal: reportfraud.ftc.gov
• FTC Website: www.ftc.gov

We encourage you to contact us first at [email protected] before filing a formal complaint, as we are committed to resolving privacy concerns directly and promptly.

15. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our business practices, legal requirements, or the ways we use your personal information. When we make material changes to this policy, we will:

• Update the "Last Updated" date at the top of this page
• Post the revised policy prominently on our website at chuyscafe.click
• Where required by law or where changes are significant, notify you via email or a prominent notice on our website

Your continued use of our website or services after any changes to this Privacy Policy constitutes your acceptance of the revised policy. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact us. We are committed to addressing your inquiries promptly and transparently.

We will make every effort to respond to all privacy-related inquiries within 30 business days of receipt. For requests submitted by California residents under the CCPA/CPRA, we will respond within 45 calendar days, with a possible extension of an additional 45 days when reasonably necessary and with prior notice.