Privacy Policy

Effective Date: May 27, 2026  |  Last Updated: May 27, 2026

1. Introduction and Who We Are

Welcome to Chuy's. We are a food service business operating in the United States, dedicated to providing our customers with an exceptional dining and ordering experience. We understand that your privacy is important, and we are committed to protecting your personal information in accordance with applicable United States federal and state privacy laws.

This Privacy Policy applies to all users of our website located at meal-chuys.rest, including visitors, registered users, and customers who place orders online or interact with our digital services. By accessing or using our website and services, you acknowledge that you have read, understood, and agree to the terms described in this Privacy Policy.

Our contact details for privacy-related matters are as follows:

2. Information We Collect

We collect various categories of personal information depending on how you interact with us. The information we collect falls into the following categories:

2.1 Personal Identification Information

When you register an account, place an order, make a reservation, sign up for our newsletter, or otherwise engage with our services, we may collect the following personal identification information:

  • Full name
  • Email address
  • Phone number
  • Billing and delivery address
  • Date of birth (when required for age verification or loyalty programs)
  • Username and password for account access
  • Payment information, including credit or debit card numbers, billing details, and transaction history (processed through secure third-party payment processors)
  • Dietary preferences and food allergy information (when voluntarily provided)

2.2 Usage Data and Online Activity

We automatically collect certain information about your interactions with our website and services. This usage data may include:

  • Pages and content viewed on our website
  • Time and date of your visits
  • Time spent on individual pages
  • Links and buttons clicked
  • Search queries entered on our website
  • Referring URLs (the website you came from before visiting ours)
  • Exit pages
  • Order history and purchasing behavior
  • Frequency and patterns of visits

2.3 Device and Technical Information

When you access our website, we may collect technical information about the device and browser you are using, including:

  • IP address
  • Browser type and version
  • Operating system and platform
  • Device identifiers
  • Screen resolution and display settings
  • Language settings
  • Mobile network information (for mobile device users)
  • Cookie identifiers and similar tracking technologies

2.4 Location Data

With your permission, or as necessary to fulfill your delivery orders, we may collect location information, including:

  • Precise GPS location (when you enable location services on your device)
  • Approximate location derived from your IP address
  • Delivery addresses you provide when placing an order

2.5 Communications and Feedback

If you contact us directly, submit feedback, write a review, or participate in surveys or promotions, we may collect:

  • The content of your messages, emails, or communications
  • Your feedback, reviews, and survey responses
  • Customer service interaction records
  • Any other information you choose to provide to us

2.6 Information from Third Parties

We may also receive information about you from third-party sources, such as:

  • Social media platforms (if you log in or connect via social accounts)
  • Third-party food delivery platforms that list or partner with us
  • Analytics and advertising partners
  • Publicly available sources

3. How We Use Your Information

We use the personal information we collect for a variety of purposes, all aimed at providing you with the best possible service and experience. Specifically, we use your information for the following purposes:

3.1 Service Provision and Order Fulfillment

  • To process and fulfill your food orders, whether for pickup or delivery
  • To manage your account and maintain accurate records
  • To facilitate payment processing and prevent fraudulent transactions
  • To provide customer support and respond to your inquiries
  • To communicate order confirmations, status updates, and delivery notifications
  • To manage reservations and special event bookings

3.2 Analytics and Service Improvement

  • To analyze how users interact with our website and services
  • To understand customer preferences and ordering patterns
  • To improve our menu offerings and overall user experience
  • To conduct internal research and develop new features
  • To monitor and ensure the technical performance and security of our website
  • To troubleshoot technical issues and errors

3.3 Marketing and Promotions

  • To send you promotional offers, discount codes, and special deals (with your consent where required by law)
  • To deliver personalized recommendations based on your order history and preferences
  • To run loyalty programs and reward schemes
  • To notify you about new menu items, seasonal specials, and restaurant news
  • To serve targeted advertisements on our website and third-party platforms
  • To conduct surveys and gather feedback to improve our offerings

3.4 Legal and Compliance Purposes

  • To comply with applicable federal and state laws and regulations
  • To enforce our Terms of Service and other legal agreements
  • To protect the rights, property, and safety of our business, customers, and the public
  • To respond to lawful requests from government authorities or law enforcement
  • To detect, investigate, and prevent fraudulent activity or other illegal conduct

4. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and personalize content and advertisements. Cookies are small text files stored on your device when you visit our website.

We use the following types of cookies:

Cookie Type Purpose Duration
Essential Cookies Necessary for the website to function properly, including shopping cart functionality and login sessions Session or up to 1 year
Analytics Cookies Help us understand how visitors use our website (e.g., Google Analytics) Up to 2 years
Functional Cookies Remember your preferences, such as language settings and saved addresses Up to 1 year
Marketing Cookies Used to deliver relevant advertisements and track campaign performance Up to 2 years

You can control or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website. For more detailed information about the cookies we use, please refer to our Cookie Policy available on our website.

5. Sharing Your Information with Third Parties

We do not sell, rent, or trade your personal information to third parties for their own independent marketing purposes. However, we may share your information with trusted third parties in the following circumstances:

5.1 Service Providers and Business Partners

We work with carefully selected third-party service providers who assist us in operating our business and delivering services to you. These service providers may include:

  • Payment processors: To securely handle payment transactions
  • Delivery partners: To fulfill food delivery orders on our behalf
  • Cloud hosting and IT providers: To store and manage our data securely
  • Email and SMS communication platforms: To send order confirmations and marketing messages
  • Analytics providers: Such as Google Analytics, to analyze website traffic and user behavior
  • Customer relationship management (CRM) platforms: To manage customer interactions and support
  • Advertising networks: To display targeted advertisements

All third-party service providers are required to use your information only for the purposes we specify and in accordance with this Privacy Policy and applicable law.

5.2 Legal Requirements and Law Enforcement

We may disclose your personal information when required or permitted by law, including in the following situations:

  • To comply with a court order, subpoena, or other legal process
  • To respond to requests from government agencies, including law enforcement authorities
  • To protect the rights, property, or safety of Chuy's, our customers, or the public
  • To detect, prevent, or address fraud, security breaches, or technical issues
  • To enforce our Terms of Service or other legal agreements

5.3 Business Transfers

In the event that Chuy's undergoes a merger, acquisition, reorganization, or sale of all or a portion of its assets, your personal information may be transferred as part of that transaction. We will notify you of any such change by posting a notice on our website or sending you an email notification, and we will ensure that the acquiring party honors the commitments made in this Privacy Policy.

5.4 With Your Consent

We may share your information with other third parties when you have given us your explicit consent to do so, such as when you participate in a joint promotion or opt into a partner program.

6. Data Security

We take the security of your personal information seriously and implement a range of technical, administrative, and physical security measures designed to protect your information from unauthorized access, disclosure, alteration, or destruction. Our security measures include:

  • Encryption: We use Secure Socket Layer (SSL) / Transport Layer Security (TLS) encryption to protect data transmitted between your browser and our servers.
  • Access controls: We limit access to your personal information to employees, contractors, and service providers who need to know that information to operate, develop, or improve our services.
  • Secure payment processing: Payment card information is processed by PCI DSS-compliant third-party payment processors. We do not store full payment card numbers on our servers.
  • Regular security audits: We periodically review our information collection, storage, and processing practices and security measures to guard against unauthorized access.
  • Employee training: Our team members are trained on data privacy and security best practices.
  • Incident response: We have procedures in place to detect, report, and respond to data security incidents in a timely manner.

7. Your Privacy Rights

Depending on your state of residence within the United States, you may have certain rights regarding your personal information. We are committed to honoring these rights in accordance with applicable law.

7.1 Rights Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA)

If you are a resident of California, you have the following rights under the CCPA and CPRA:

  • Right to Know: You have the right to request that we disclose what personal information we collect, use, disclose, and sell about you.
  • Right to Delete: You have the right to request the deletion of personal information we have collected from you, subject to certain exceptions.
  • Right to Correct: You have the right to request that we correct inaccurate personal information we maintain about you.
  • Right to Opt-Out of Sale or Sharing: You have the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising.
  • Right to Limit Use of Sensitive Personal Information: You may have the right to limit our use and disclosure of sensitive personal information.
  • Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you goods or services, charge you different prices, or provide a different quality of service because you exercised your rights.
  • Right to Data Portability: You have the right to receive your personal information in a portable, readily usable format.

To exercise your California privacy rights, please submit a verifiable consumer request to us by emailing [email protected] with the subject line "California Privacy Rights Request." We will respond to verifiable requests within 45 days, with the possibility of a 45-day extension when reasonably necessary.

7.2 General Privacy Rights for All U.S. Residents

Regardless of your state of residence, we provide all our customers with the following rights:

  • Right to Access: You may request a copy of the personal information we hold about you.
  • Right to Correction: You may request that we correct inaccurate or incomplete information about you.
  • Right to Deletion: You may request that we delete your personal information, subject to our legal obligations to retain certain data.
  • Right to Opt-Out of Marketing: You may opt out of receiving promotional communications from us at any time.
  • Right to Data Portability: You may request a copy of your data in a structured, commonly used format.

Other states including, but not limited to, Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), and Texas (TDPSA) have enacted comprehensive consumer privacy laws that may afford additional rights to their residents. We are committed to complying with all applicable state privacy laws and will honor requests made pursuant to these laws.

7.3 How to Exercise Your Rights

To exercise any of your privacy rights, you may contact us using the following methods:

  • Email: [email protected] (subject line: "Privacy Rights Request")
  • Website: meal-chuys.rest

To protect your privacy and security, we may need to verify your identity before processing your request. We will make reasonable efforts to respond to your request in a timely manner consistent with applicable law. In some cases, we may not be able to fulfill your request, in which case we will explain the reason for our decision.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with our legal obligations, resolve disputes, and enforce our agreements. Our general data retention guidelines are as follows:

Data Category Retention Period Basis for Retention
Account information Duration of account + 3 years after closure Contractual obligation and legal compliance
Order history and transaction records 7 years Tax, financial, and legal compliance
Customer support communications 3 years from last interaction Legitimate business interest and legal claims
Marketing preferences and consent records 3 years after opt-out or account deletion Legal compliance and proof of consent
Website usage and analytics data Up to 26 months Analytics and service improvement
Cookie data Per cookie type (session to 2 years) Technical necessity and analytics
Payment information As required by payment processors and law Financial compliance and fraud prevention

When personal information is no longer needed for the purposes described above, we will securely delete, destroy, or anonymize it in accordance with our data retention and disposal procedures.

9. Children's Privacy

We are committed to protecting the privacy of minors. Our website is not directed to children under 18 years of age, and we do not knowingly collect, use, or disclose personal information from children under 18. If you are under 18, please do not use our website or provide any personal information to us.

If we become aware that we have inadvertently collected personal information from a child under the age of 18 without appropriate parental consent, we will take immediate steps to delete that information from our records. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately at [email protected] so we can take appropriate action.

We comply with the Children's Online Privacy Protection Act (COPPA), which restricts the online collection of personal information from children under 13 years of age. However, our services are intended only for adults aged 18 and over.

10. International Data Transfers

Chuy's is a United States-based business, and your personal information is primarily collected, stored, and processed within the United States. However, some of our third-party service providers may operate in other countries, which may result in the transfer of your personal information to countries outside of the United States.

Where personal information is transferred internationally, we take steps to ensure that your information receives an adequate level of protection, including by entering into appropriate data transfer agreements with our service providers and ensuring that such transfers comply with applicable U.S. law.

If you are accessing our website from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where privacy laws may differ from those in your country. By using our services, you consent to the transfer of your information to the United States in accordance with this Privacy Policy.

11. Third-Party Links and Services

Our website may contain links to third-party websites, applications, or services that are not owned or controlled by Chuy's. This Privacy Policy applies only to our website and services. We are not responsible for the privacy practices of any third-party websites or services, and we encourage you to review the privacy policies of any third-party sites you visit.

Third-party integrations on our website may include, but are not limited to:

  • Social media platforms (Facebook, Instagram, Twitter/X)
  • Third-party food ordering and delivery platforms
  • Online payment gateways
  • Google Maps and location services
  • Review and rating platforms

12. The FTC Act and Consumer Protection

As a business operating in the United States, Chuy's is subject to the Federal Trade Commission Act (FTC Act), which prohibits unfair or deceptive acts or practices in commerce. We are committed to maintaining fair and transparent privacy practices and to honoring the commitments we make in this Privacy Policy. Our privacy practices are designed to comply with FTC guidelines on privacy and data security, including guidelines relating to data collection, use, and disclosure transparency; data security; and consumer rights regarding their personal information.

13. How to File a Complaint

If you have concerns about our privacy practices or believe that we have failed to comply with applicable privacy laws, we encourage you to contact us first so that we can address your concerns:

We will do our best to respond to your complaint within 30 days and work with you to resolve the issue. If you are not satisfied with our response, or if you believe we are processing your personal information unlawfully, you also have the right to file a complaint with the relevant authorities:

13.1 Federal Trade Commission (FTC)

The FTC is the primary federal agency responsible for consumer protection and enforcing consumer privacy rights in the United States. You can file a complaint with the FTC at:

  • Website: www.ftc.gov/complaint
  • Phone: 1-877-FTC-HELP (1-877-382-4357)
  • Address: Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, DC 20580

13.2 California Residents — California Privacy Protection Agency (CPPA)

If you are a California resident and have concerns about how we handle your personal information under the CCPA/CPRA, you may also file a complaint with the California Privacy Protection Agency:

  • Website: cppa.ca.gov
  • Address: California Privacy Protection Agency, 2101 Arena Boulevard, Sacramento, CA 95834

13.3 State Attorneys General

Residents of other states may also have the right to file complaints with their state Attorney General's office regarding violations of state privacy laws. We encourage residents to contact their state Attorney General if they believe their privacy rights have been violated.

14. Do Not Track Signals

Some web browsers and devices allow users to transmit a "Do Not Track" (DNT) signal to websites they visit. At this time, there is no uniform standard for how websites should respond to DNT signals. As a result, our website does not currently alter its data collection or use practices in response to DNT signals. We will continue to monitor developments in this area and update our practices accordingly.

California residents may also request information about our disclosure of personal information to third parties for direct marketing purposes under California's "Shine the Light" law. If applicable, you may submit such a request by contacting us at [email protected].

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational, legal, or regulatory reasons. When we make material changes to this Privacy Policy, we will notify you by:

  • Posting the updated Privacy Policy on our website with a new "Last Updated" date at the top of this page
  • Sending an email notification to users who have provided us with their email address (for significant changes)
  • Displaying a prominent notice on our website

We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use, and protect your information. Your continued use of our website and services after any changes to this Privacy Policy constitutes your acceptance of the revised policy.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact us. Our privacy team is available to assist you:

Privacy Contact Information

This Privacy Policy was last reviewed and updated on May 27, 2026. Chuy's is committed to protecting your privacy and handling your personal information responsibly and transparently.