Privacy Policy

This Privacy Policy explains how Chuys ("we," "us," or "our") collects, uses, discloses, and protects your personal information when you visit our website at chuys-newhot.click (the "Website"), place orders, interact with our services, or otherwise engage with us. We are committed to protecting your privacy and handling your personal data in a transparent, responsible, and lawful manner consistent with applicable United States federal and state privacy laws.

Please read this Privacy Policy carefully. By accessing or using our Website and services, you acknowledge that you have read, understood, and agree to the practices described herein. If you do not agree with any part of this policy, please discontinue your use of our Website and services immediately.

1. About Us and Contact Information

This Privacy Policy applies to the following business entity:

For all privacy-related inquiries, requests, or complaints, you may contact us directly at the email address provided above. We aim to respond to all privacy-related communications within thirty (30) business days.

2. Scope of This Privacy Policy

This Privacy Policy applies to:

• All visitors to our Website at chuys-newhot.click
• Customers who place online orders, make reservations, or engage with our digital services
• Individuals who sign up for our newsletters, loyalty programs, or promotional communications
• Any person who contacts us via email, phone, or through contact forms on our Website
• Users who interact with our social media pages or third-party platforms linked to our services

This policy does not apply to third-party websites, applications, or services that may be linked from our Website. We encourage you to review the privacy policies of any third-party services you access through links on our site, as we are not responsible for their privacy practices.

3. Information We Collect

We collect various types of information in connection with your use of our Website and services. This information falls into the following categories:

3.1 Personal Identification Information

When you interact with our Website or services, we may collect information that can directly or indirectly identify you, including but not limited to:

• Full name
• Email address
• Phone number
• Mailing or delivery address
• Date of birth (for age verification or promotional purposes)
• Payment information (credit/debit card numbers, billing addresses — processed securely through our payment processors)
• Account credentials (username and password for registered accounts, stored in encrypted form)

3.2 Order and Transaction Data

When you place a food order or make a purchase through our Website or affiliated platforms, we collect:

• Order history and details (items ordered, quantities, special instructions)
• Transaction dates and times
• Payment confirmation details (excluding full card numbers)
• Delivery address and preferences
• Order feedback and ratings

3.3 Usage and Behavioral Data

We automatically collect certain information about how you interact with our Website, including:

• Pages you visit and time spent on each page
• Links clicked and navigation paths through the Website
• Search queries entered on the Website
• Referring URLs and exit pages
• Frequency and duration of visits
• Items viewed, added to cart, or purchased

3.4 Device and Technical Information

We collect technical information about the devices you use to access our Website, such as:

• IP address
• Browser type and version
• Operating system and device type (desktop, mobile, tablet)
• Screen resolution and language settings
• Time zone settings
• Unique device identifiers
• Mobile network information

3.5 Location Data

With your consent or where technically necessary for our services (such as finding nearby locations or enabling delivery), we may collect:

• General geographic location derived from your IP address
• Precise GPS location data if you grant permission through your browser or mobile device

3.6 Cookie and Tracking Data

We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about your browsing behavior and preferences. For detailed information about our use of cookies, please refer to Section 9 of this Privacy Policy.

3.7 Communications Data

When you contact us, subscribe to our mailing list, or submit feedback, we collect:

• The content of your messages, emails, or form submissions
• Your email address and any other contact information you provide
• Records of our communications with you
• Survey responses and feedback

3.8 Information from Third Parties

We may receive information about you from third-party sources, including:

• Social media platforms (if you log in or connect your social account)
• Third-party delivery or ordering platforms (e.g., DoorDash, Uber Eats, Grubhub)
• Analytics and advertising partners
• Loyalty or rewards program partners
• Publicly available sources

4. How We Use Your Information

We use the personal information we collect for the following purposes:

4.1 Providing and Managing Our Services

• Processing and fulfilling your food orders and delivery requests
• Managing your account and maintaining accurate records
• Processing payments and preventing fraudulent transactions
• Providing customer support and responding to your inquiries
• Sending order confirmations, receipts, and delivery updates
• Enabling table reservations or pick-up scheduling

4.2 Improving Our Services and Website

• Analyzing usage patterns and customer behavior to enhance our Website and menu offerings
• Conducting internal research, testing, and quality assurance
• Identifying technical issues and improving Website performance
• Developing new features, products, or services based on user feedback

4.3 Marketing and Promotional Communications

• Sending you promotional emails, newsletters, and special offers (with your consent where required by law)
• Delivering personalized recommendations based on your order history and preferences
• Running loyalty programs and reward campaigns
• Displaying targeted advertisements on our Website or third-party platforms

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any marketing email or by contacting us at [email protected].

4.4 Legal Compliance and Safety

• Complying with applicable federal, state, and local laws and regulations
• Responding to lawful requests from government authorities or law enforcement
• Enforcing our Terms of Service and other agreements
• Protecting the rights, safety, and property of Chuys, our users, and the public
• Detecting, preventing, and addressing fraud, security breaches, and other illegal activities

4.5 Business Operations

• Performing accounting, auditing, and financial reporting functions
• Facilitating business transactions such as mergers, acquisitions, or asset sales
• Maintaining business records as required by law

5. Legal Basis for Processing (Applicable US Laws)

As a business operating in the United States, our data processing practices are governed by applicable federal and state laws, including:

• The Federal Trade Commission Act (FTC Act): We are committed to fair and transparent data practices that do not constitute unfair or deceptive acts or practices as defined by the FTC.
• The California Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA): If you are a California resident, you have specific rights under CCPA/CPRA, detailed in Section 10 of this policy.
• CAN-SPAM Act: Our email marketing complies with the CAN-SPAM Act, ensuring all commercial emails include opt-out mechanisms and accurate sender information.
• Children's Online Privacy Protection Act (COPPA): We do not knowingly collect data from children under the age of 13, and our services are not directed at minors under 18.
• Applicable State Privacy Laws: We also comply with privacy laws enacted by other states where applicable, including the Virginia Consumer Data Protection Act (VCDPA), Colorado Privacy Act (CPA), and other emerging state-level legislation.

6. How We Share Your Information

We do not sell your personal information to third parties for monetary compensation. However, we may share your information in the following circumstances:

6.1 Service Providers and Business Partners

We engage trusted third-party vendors and service providers who assist us in operating our business and delivering services to you. These parties may have access to your personal information only to the extent necessary to perform their functions and are contractually obligated to maintain confidentiality and security. Service providers may include:

• Payment processors (e.g., Stripe, Square, PayPal)
• Email marketing platforms (e.g., Mailchimp, Klaviyo)
• Web hosting and cloud services providers
• Analytics providers (e.g., Google Analytics)
• Third-party food delivery platforms
• Customer relationship management (CRM) software providers
• IT support and cybersecurity vendors

6.2 Legal Requirements and Law Enforcement

We may disclose your personal information if required to do so by law or in response to valid legal process, including:

• Compliance with a court order, subpoena, or governmental investigation
• Responses to lawful requests by federal, state, or local law enforcement agencies
• Situations where disclosure is necessary to protect our legal rights or defend against legal claims
• Circumstances where disclosure is necessary to prevent harm, fraud, or illegal activity

6.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal information may be transferred as part of that transaction. We will notify you via email and/or prominent notice on our Website before your personal information becomes subject to a different privacy policy.

6.4 With Your Consent

We may share your information with third parties for purposes not described in this policy when we have obtained your explicit consent to do so.

6.5 Aggregated and De-Identified Data

We may share aggregated or de-identified information that cannot reasonably be used to identify you with third parties for research, marketing, analytics, or other business purposes.

7. Data Security

We take the security of your personal information seriously and implement a variety of technical, administrative, and physical safeguards designed to protect your data from unauthorized access, disclosure, alteration, or destruction. Our security measures include:

• Encryption: All sensitive data transmitted between your browser and our servers is protected using Secure Socket Layer (SSL) / Transport Layer Security (TLS) encryption. Payment data is encrypted using industry-standard PCI-DSS compliant methods.
• Access Controls: Access to personal data is restricted to authorized personnel on a need-to-know basis. All employees with data access undergo privacy and security training.
• Secure Storage: Personal data is stored on secure servers with firewalls, intrusion detection systems, and regular security audits.
• Password Security: Account passwords are stored in hashed and salted form and are never stored as plain text.
• Regular Security Assessments: We conduct periodic vulnerability scans and security assessments to identify and address potential risks.
• Incident Response: We maintain a data breach response plan and will notify affected users and relevant authorities in the event of a data breach as required by applicable law.

8. Data Retention

We retain your personal information only for as long as is necessary to fulfill the purposes for which it was collected, to comply with legal obligations, resolve disputes, and enforce our agreements. Our general retention periods are as follows:

When personal information is no longer required, we securely delete, anonymize, or aggregate it so that it can no longer be associated with any individual. Certain information may be retained for longer periods where required by law or for legitimate business purposes such as fraud prevention or legal defense.

9. Cookie Policy Summary

Our Website uses cookies and similar tracking technologies to enhance your browsing experience, analyze Website traffic, and deliver personalized content and advertising. Cookies are small text files stored on your device when you visit a website.

9.1 Types of Cookies We Use

9.2 Managing Your Cookie Preferences

You have the right to control and manage cookies. You can adjust your cookie preferences through:

• Our cookie consent banner when you first visit our Website
• Your browser settings (most browsers allow you to block or delete cookies)
• Third-party opt-out tools such as the NAI Opt-Out Tool and Digital Advertising Alliance Opt-Out

Please note that disabling certain cookies may impact the functionality and performance of our Website.

10. Your Privacy Rights

Depending on your state of residence, you may have specific rights regarding your personal information. We honor these rights as described below:

10.1 Rights for All US Residents

• Right to Know: You have the right to know what personal information we collect, use, disclose, and sell about you.
• Right to Access: You can request a copy of the personal information we hold about you.
• Right to Correction: You have the right to request correction of inaccurate or incomplete personal information.
• Right to Deletion: You may request that we delete your personal information, subject to certain legal exceptions.
• Right to Opt-Out of Marketing: You can opt out of receiving marketing communications from us at any time.

10.2 Additional Rights for California Residents (CCPA/CPRA)

If you are a California resident, you have the following additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to Know (Categories and Specific Pieces): The right to request disclosure of the categories and specific pieces of personal information collected, the sources of collection, the business purposes for collection, and the categories of third parties with whom we share information.
• Right to Opt-Out of Sale or Sharing: The right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising. As stated above, we do not sell personal information for monetary consideration, but we may share data with advertising partners. You may exercise this right by contacting us.
• Right to Limit Use of Sensitive Personal Information: The right to limit our use and disclosure of sensitive personal information to purposes necessary to provide our services.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you services, charge different prices, or provide a different level of quality because you exercised your privacy rights.
• Right to Data Portability: You may request a copy of your personal information in a portable, readily usable format.

10.3 Additional Rights for Residents of Other States

Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), and other states with applicable privacy laws may have additional rights including the right to appeal our decisions regarding privacy requests. To exercise these rights, please contact us using the information provided in Section 1.

10.4 How to Exercise Your Rights

To submit a privacy rights request, please contact us at:

• Email: [email protected]
• Website: chuys-newhot.click

We will verify your identity before processing your request to protect your information from unauthorized access. You may be asked to provide identifying information such as your name, email address, and details of your account or recent orders. We will respond to verified requests within the timeframes required by applicable law (typically 45 days, with a possible extension of an additional 45 days for complex requests).

You may also designate an authorized agent to submit requests on your behalf, provided that agent can demonstrate proper authorization.

11. Children's Privacy

In compliance with the Children's Online Privacy Protection Act (COPPA), we do not knowingly collect personal information from children under the age of 13. Furthermore, as our services involve food ordering and online transactions, we require all users to be at least 18 years of age to create an account or use our services.

If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at [email protected]. Upon verification, we will promptly delete such information from our records and take appropriate steps to prevent future collection.

We do not knowingly market our services to children and do not include features on our Website designed to attract users under 18. If we discover that we have inadvertently collected information from a minor, we will take immediate steps to delete that information.

12. International Data Transfers

Chuys is operated in the United States, and all data processing activities are primarily conducted within the United States. If you are accessing our Website from outside the United States, please be aware that:

• Your personal information will be transferred to and processed in the United States, where data protection laws may differ from those in your country of residence.
• By using our Website from outside the United States, you consent to the transfer of your personal information to the United States for the purposes described in this Privacy Policy.
• We take appropriate measures to ensure that any international transfers of personal data are conducted in compliance with applicable laws and with adequate protections in place.

If you are located in a jurisdiction with data transfer restrictions (such as the European Economic Area), please contact us at [email protected] to inquire about the specific safeguards we have in place for cross-border data transfers applicable to your situation.

13. Third-Party Links and Services

Our Website may contain links to third-party websites, social media platforms, delivery apps, or other external services. These third-party sites operate independently and have their own privacy policies. We have no control over, and are not responsible for, the content or privacy practices of these external sites.

We encourage you to review the privacy policies of any third-party services you visit through links on our Website. Common third-party services you may encounter include:

• Social media platforms (Facebook, Instagram, Twitter/X, TikTok)
• Online food ordering and delivery platforms
• Payment processing platforms
• Review and rating platforms (Yelp, Google Reviews)

Your interactions with these third-party services are governed by their respective privacy policies and terms of service, not this Privacy Policy.

14. Social Media and Online Reviews

We maintain an active presence on various social media platforms to engage with our customers. If you interact with us on social media, leave reviews, or participate in online promotions, please be aware that:

• Information you post publicly on social media or review platforms is subject to the privacy policies of those platforms.
• We may respond to or share user-generated content, including reviews or photos, with your permission.
• Social media platforms may use cookies or tracking pixels on our Website if we have integrated social sharing buttons.

15. Do Not Track Signals

Some web browsers have a "Do Not Track" (DNT) feature that signals to websites that users do not want to be tracked. Currently, there is no universally accepted standard for how websites should respond to DNT signals. At this time, our Website does not respond to DNT browser signals in a standardized way. However, you may manage your tracking preferences through your browser settings and our cookie consent tools as described in Section 9 of this Privacy Policy.

16. How to File a Complaint

If you have concerns about how we handle your personal information and are not satisfied with our response, you have the right to file a complaint with the relevant authorities:

16.1 Contact Us First

We encourage you to contact us directly before escalating any concerns:

• Email: [email protected]

We will acknowledge receipt of your complaint within 5 business days and will aim to resolve the matter within 30 business days.

16.2 Federal Trade Commission (FTC)

If you believe your privacy rights have been violated and our response is unsatisfactory, you may file a complaint with the Federal Trade Commission (FTC), the primary federal agency responsible for consumer protection in the United States:

• Website: www.ftc.gov/complaint
• Phone: 1-877-FTC-HELP (1-877-382-4357)
• Address: Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, DC 20580

16.3 California Residents — California Privacy Protection Agency (CPPA)

California residents may also file complaints with the California Privacy Protection Agency (CPPA) or the California Attorney General's Office:

• CPPA Website: cppa.ca.gov
• California AG: oag.ca.gov/privacy

16.4 Other State Residents

Residents of other states may contact their respective state attorney general's office or state consumer protection agency to file privacy-related complaints. We encourage you to research the specific regulatory body in your state.

17. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our business practices, legal requirements, or the services we offer. When we make material changes to this policy, we will:

• Update the "Last Updated" date at the top of this page
• Post a prominent notice on our Website homepage
• Send an email notification to registered users (where we have your email address on file)

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information. Your continued use of our Website after any changes take effect constitutes your acceptance of the updated policy. If you do not agree with any changes, you should discontinue your use of our services and may request deletion of your personal information as described in Section 10.

18. Acknowledgment and Agreement

By using our Website and services, you acknowledge that:

• You have read and understood this Privacy Policy in its entirety
• You consent to the collection, use, and disclosure of your personal information as described herein
• You are at least 18 years of age or have parental/guardian consent
• You agree to the practices described in this Privacy Policy and our Terms of Service

This Privacy Policy was last reviewed and updated on July 8, 2026. © 2026 Chuys. All rights reserved.