Privacy Policy

This Privacy Policy is provided by Chubby Cattle International, LLC, which operates this website (chubbybowls.com), Chubby Club, LLC for the Chubby Club membership program and app, and their affiliates and subsidiaries (together, “Chubby Group”, “we”, “us” or “our”). Chubby Group is committed to protecting your privacy. This Privacy Policy describes how we collect, use, protect, and disclose Personal Data (defined below) that we may collect from or about you or that you may provide when you visit our websites, including but not limited to the websites for our restaurant brands, applications, platforms, and any other services provided by Chubby Group (collectively, the “Services”).

Chubby Group may update this Privacy Policy at any time by posting the amended Privacy Policy to the Services and/or by sending a notice to the email address you have provided. For material changes, we will provide notice by email or a prominent notice on the Services before the changes take effect, and where required by law we will obtain your consent. Your continued use of the Services after the effective date of an updated Privacy Policy will be subject to the then-current Privacy Policy.

Please read this Privacy Policy carefully.

Chubby Group may collaborate with other companies to make Chubby Group’s content and/or services available via their websites (“Host Sites”) or vice versa. Personal and/or demographic information you provided to Host Sites may be included in Chubby Group’s database, and we will handle such information received or gathered via Host Sites subject to this Privacy Policy. Information gathered via Host Sites or a website co-sponsored by Chubby Group will remain the sole property of Chubby Group.

You may contact us with questions, comments, and requests regarding this Privacy Policy at support@chubbygroup.com.

This section explains what happens when you use chubbybowls.com, which Chubby Cattle International, LLC operates.

• Contact form: The contact form opens a pre-filled message in your own email app. This website does not store what you type; nothing reaches us unless you send that email yourself.
• Your location: Where we have more than one location, this website may offer to use your device’s location to find the nearest one. Your browser asks for permission first. The location is used only on your device to pick the nearest location and is never sent to us or anyone else.
• Maps and Yelp details: The Locations and Chubby Club pages show map tiles from CARTO, built on OpenStreetMap data, and a photo of the restaurant from Yelp. Your browser loads these directly from CARTO and Yelp, so those companies receive your IP address, browser details and this website’s address. The rating and hours shown with them come from Yelp through our server.
• Menu photos: Menu photos come from our ordering partner Chowbus. They are normally served through our own image service; if that fails, your browser may load the photo directly from Chowbus. Our Order links take you to the Chowbus website, which has its own privacy notice.
• Analytics: When this website offers optional analytics, it stays off unless you allow it, and a Do Not Track or Global Privacy Control signal keeps it off. When it is not offering that choice, it instead uses cookieless Vercel Web Analytics to understand aggregate website usage for every visitor; the two are never used at the same time. Our Cookie Policy describes what each records and how long it is kept.
• Hosting: This website is hosted by Vercel, which processes technical request data, such as IP addresses, to deliver pages and keep the service secure. Our optional analytics service runs on our hosting and database providers, Vercel and Supabase.

This website does not sell your Personal Data, does not share it for cross-context behavioral advertising, and does not use advertising cookies.

In this Privacy Policy, we use the term “Personal Data” to refer to information that can be used to identify you.

When you interact with our Services, we may collect certain Personal Data directly from you or automatically from the devices you use to access our Services. Chubby Group receives and may store any information you enter in on the Services or provide us in any other way.

This may include but is not limited to:

• Identifying Information: Name, email address, phone number, street address.
• Account & Transaction Information: Membership details, purchase history, rewards points.
• Device & Browsing Information: IP address, browser type, pages visited, device identifiers.
• Payment Information: We do not store full payment details; payment processing is handled by third-party providers.
• Location-Based Data: To personalize services, marketing, and recommendations.
• Marketing Preferences: Subscription to promotional emails, SMS, or push notifications.

If you have voluntarily provided information, you consent to the collection and use of your Personal Data as described in this Privacy Policy. We do not sell Personal Data for money or rent it to anyone. We may provide aggregate statistics about visitors to the Services such as volume, traffic patterns, and related site information to reputable third parties; these statistics will not include any Personal Data. Some Chubby Group services other than this website may share Personal Data for cross-context behavioral advertising, which you can opt out of as described in Your privacy choices.

Chubby Group also may receive and store information on our server logs about your browser and/or computer, including, but not limited to, IP address, pages viewed and requested, referring website and web browser software (e.g. Internet Explorer, Mozilla, etc.).

When you use the Services, Chubby Group may collect information from you automatically through “cookies” or similar technology. Web cookies are small-unique identifier text files that allow a web server to recognize that you are a user that accessed the server on previous occasions. For more information on cookies and other trackers, please see our Cookie Policy.

We collect personally identifiable information when you interact with our Services, such as creating an account, making a purchase, or subscribing to marketing communications. This information includes, but is not limited to, your name, email address, phone number, and preferences. We use this information to personalize your experience, send updates and promotional materials, and improve our Services. You may update your identifying information at any time through your account settings.

Our Services may use location-based tracking to provide targeted offers, promotions, and location-specific content. When enabled, we collect and process your device’s location data to enhance your experience, such as offering nearby restaurant discounts and tailoring recommendations based on your location. You can manage your location settings through your device settings or app preferences. Disabling location tracking may limit certain functionalities of the Services. Precise geolocation is treated as “sensitive personal information” under certain privacy laws, including the California Privacy Rights Act. We use precise geolocation only to provide and improve the location-based features described above, and we do not use or disclose it to infer characteristics about you. Where required by law, you may limit our use of sensitive personal information as described in the U.S. State Privacy Rights section below, and you can turn off location access at any time in your device or app settings.

Personal Data may be used for general purposes including, but not limited to, sending you Chubby Group’s newsletters and text messages, notifying you of updates and other concepts, products or services that may be of interest to you, requesting your voluntary opinion/feedback, communicating with you in general, and/or other services.

Chubby Group processes Personal Data based on legal reasons to comply with data protection laws and improve user experiences. When providing services or managing relationships with users, including personalizing experiences and communications, the basis lies in fulfilling contractual obligations or the company’s legitimate interests. These interests also support internal business analyses aimed at service improvement, and efforts to protect the company’s rights, ensure safety, and comply with legal requirements.

Marketing activities and user engagement efforts, such as sending information about new concepts, products, events or promotions, are conducted based on Chubby Group’s legitimate interests or user consent when needed. Organizing contests or promotions might require entering a contract or obtaining user consent.

Chubby Group does not sell Personal Data for money or rent it. We share Personal Data with other people or nonaffiliated companies only when we have your permission, for Chubby Group services other than this website for cross-context behavioral advertising that you can opt out of as described in Your privacy choices, or in the following instances:

1. To send marketing and other communications to our visitors about Chubby Group restaurants, concepts, products or services;
2. To third party vendors that provide business services to Chubby Group, including customer service, marketing, etc.;
3. In response to court order, subpoena, other legal process, or as otherwise required by law;
4. To exercise or establish our legal rights and/or defend against claims;
5. When Chubby Group believes it to be reasonably necessary to investigate, prevent, or take action regarding illegal activities, suspected fraud, violations of Chubby Group’s Terms of Service or as otherwise required by law;
6. In connection with a corporate transaction (e.g. consolidation, merger, sale of assets, etc.); or
7. Providing anonymous or aggregate information (i.e. non-personal and non-billing information) to third parties (e.g. investors, advertisers, business partners and clients) to the extent necessary to allow them to understand the kinds and number of visitors to the Services and how those visitors use the Services.

Chubby Group may also disclose information in special cases when we have a good faith belief that such action is necessary to: (a) conform to legal requirements or comply with legal process; (b) protect and enforce our rights or property; (c) enforce the website Terms & Conditions or this Privacy Policy; (d) act to protect the interests of our users or others; (e) resolve disputes, or (f) troubleshoot website problems.

Opt-out preference signal honored

This website does not sell your Personal Data and does not share it for cross-context behavioral advertising. Other Chubby Group services, such as the Chubby Club membership program and app, may share Personal Data for cross-context behavioral advertising, or use technologies that certain laws treat as a “sale” or “sharing.” You can opt out of the sale or sharing of your Personal Data at any time, and we will not discriminate against you for doing so.

How to opt out of sale or sharing:

• Email support@chubbygroup.com with the subject “Do Not Sell or Share”. If you use other Chubby Group services, include the email address or phone number on your account so we can apply your request to it.
• Use any of the request methods in the U.S. state privacy rights section below, including through an authorized agent.
• Turn on Global Privacy Control (GPC) in a browser or browser extension that supports it.

Global Privacy Control: We honor GPC as a valid request to opt out of the sale or sharing of Personal Data for the browser or device that sends it. On chubbybowls.com, GPC also keeps optional website analytics off.

When you make a purchase or subscribe to our services, we collect and store your payment information securely through trusted third-party payment processors. Here’s how we handle your payment data:

Secure Payment Processing: Payment information is collected via secure HTTPS connections using payment gateways that comply with the Payment Card Industry Data Security Standard (PCI DSS).

No Direct Storage of Payment Information: We do not store your complete credit card or debit card information directly on our servers. Instead, our payment processors store this information in secure environments. We store payment method details and transaction history for record-keeping and customer support purposes.

Tokenization: For certain transactions, we use tokenization methods, whereby sensitive payment details are replaced with a unique identifier (token) that is meaningless outside the context of the transaction.

Fraud Detection: We leverage fraud detection and monitoring systems to identify and mitigate fraudulent activities.

Third-Party Processors: The payment processors we use are subject to stringent security requirements and data protection regulations, including compliance with GDPR and CCPA, where applicable. Our current customer checkout is handled by Crossmint and other approved payment processors as needed.

We do not access or retain your full payment information unless explicitly required for lawful purposes, such as refunds or chargebacks, and in those cases, such data is handled in a compliant and secure manner.

We collect technical information from and about your device using cookies and other data collection technologies. Please see our Cookie Policy for further information.

On chubbybowls.com, we may offer optional website analytics, which stays off until you choose to allow it. If you select Accept in the analytics prompt, an analytics script from Chubby Group’s Website Control Station records page views and clicks on links to other websites, together with a general page category, the referring and destination website domains, your device type, your country derived from your IP address, and a one-way coded daily visitor identifier calculated from your IP address and browser user-agent string, which are not themselves stored. It does not use cookies, and analytics events are deleted after 180 days. You can change your choice at any time using Analytics choices in the footer of each page. When this website is not offering that choice, it instead uses cookieless Vercel Web Analytics to understand aggregate website usage; the two are never used at the same time. This website does not load Google Analytics or advertising cookies. Our Cookie Policy describes this website's analytics and storage in detail, and the separate Chowbus ordering service. Other Chubby Group websites and applications may use different technologies, as described in their own notices.

Marketing Communications. By providing your contact information and opting into our communications, you consent to receive marketing and informational messages from us, including emails, SMS, or push notifications. The following terms apply:

Message Frequency: The frequency of messages may vary based on your subscription preferences and interactions.

Message and Data Rates: Standard message and data rates may apply, depending on your wireless carrier and service plan.

Opt-Out Instructions: You can opt out of receiving further text messages at any time by texting STOP to the message you receive. After sending STOP, you will receive one final confirmation message acknowledging your opt-out request. You can opt out of our promotional emails by clicking the “unsubscribe” link in the email received or by sending us an email stating your request to support@chubbygroup.com.

Help Instructions: For assistance, you may text HELP to the message you receive or visit our website for more details.

We will not send you promotional emails or SMS without your explicit opt-in consent, in compliance with applicable laws such as the CAN-SPAM Act and TCPA (Telephone Consumer Protection Act). Please note that you may continue to receive administrative, legal, and other important emails from us even if you opt out of receiving promotional messages.

Cookies. You can disable cookies using your web browser’s settings. Disabling cookies will generally not interfere with your use of the Services. However, refusal of a cookie may, in some cases, preclude you from using or negatively impact the display or function of the Services or certain areas or features of the Services.

You have the right to access, correct, or request deletion of the Personal Data that we collect, subject to certain exceptions. To protect the privacy and the security of your Personal Data, we may request information from you to enable us to verify your identity and your right to access such data, as well as to search for and provide you with the personal information we maintain. If we cannot verify your identity based on the information we have on file, we may request additional information from you, which we will only use to verify your identity, and for security or fraud-prevention purposes. Please note that there may be instances where applicable laws or regulatory requirements allow or require us to refuse to provide or delete some or all of the personal information that we maintain.

Depending on your jurisdiction, you may have the following rights:

• Right to Access: Request copies of Personal Data.
• Right to Rectification: Correct inaccurate or incomplete data.
• Right to Erasure: Request deletion of Personal Data.
• Right to Restrict Processing: Limit how your data is used.
• Right to Object: Object to processing based on legitimate interests.
• Right to Data Portability: Transfer data to another provider.
• Right to Withdraw Consent: Revoke previously given consent.
• Right to Opt Out of Sale or Sharing (CCPA/CPRA): We do not sell your Personal Data for money. This website does not sell or share Personal Data for cross-context behavioral advertising; other Chubby Group services may “share” Personal Data for cross-context behavioral advertising, or use analytics and advertising technologies that certain laws treat as a “sale” or “sharing.” You may opt out as described in Your privacy choices, including by using an opt-out preference signal such as Global Privacy Control.

To exercise any of the rights set forth above, please contact us by email at support@chubbygroup.com.

We will retain your Personal Data for as long as necessary for the purposes disclosed in this Privacy Policy, unless required by our legal obligations to retain it for longer. To determine the appropriate retention period for Personal Data, we consider the amount, nature and sensitivity of the data, the potential risk of harm from unauthorized use or disclosure of the data, the purposes for which we process data, whether we can achieve those purposes through other means, and applicable legal, regulatory, and compliance requirements.

We take the protection of your personal data seriously and have implemented industry-standard security measures designed to prevent unauthorized access, disclosure, use, or alteration of your personal information. These measures include:

Data Encryption: All sensitive data, such as personal and payment information, is encrypted using industry-standard encryption protocols, such as TLS (Transport Layer Security), both in transit and at rest.

Access Controls: We enforce role-based access controls (RBAC) to ensure that only authorized personnel have access to your personal data and maintain strict login procedures, including multifactor authentication (MFA).

Intrusion Detection and Prevention: We utilize intrusion detection and prevention systems (IDPS) to monitor our networks for suspicious activities.

Firewall Protection: Our systems are protected by robust firewalls designed to prevent unauthorized access to internal networks.

Regular Security Audits and Testing: We conduct regular vulnerability assessments, penetration tests, and third-party security audits to ensure our systems remain resilient to potential security threats.

Secure Data Centers: If applicable, our data is stored in secure data centers that maintain physical security measures, such as surveillance, keycard entry, and onsite security personnel.

However, please note that no security measure is entirely foolproof, and while we strive to protect your data, we cannot guarantee absolute security. In the event of a data breach, we will notify you promptly in accordance with applicable laws and regulations.

Our Services may contain links or references to third party websites outside of our control. Please be aware that this Privacy Policy does not apply to those websites and we are not responsible for the privacy practices of those third parties. We encourage you to read the privacy policies of those third parties.

The Services are intended for use by persons aged 13 or older, and by your use of these Services you affirm that you are at least 13 years of age. In addition, if you are under the age of 18, you are only permitted to use the Services with the consent of your parents or an adult guardian. Chubby Group does not knowingly allow registration of an account for any person that Chubby Group believes to be younger than 13. We also do not collect any Personal Data from any persons under the age of 13 and if we discover that we have been provided any such information, we will delete this information from our records. If you believe we might have any information from or about a child under the age of 13, please contact us at support@chubbygroup.com.

Web browsers and other technologies you may use to access the Services may include a Do-Not-Track (“DNT”) feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. Currently, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As a result, except as described below for chubbybowls.com, we do not currently respond to DNT browser signals. However, where required by law, we treat recognized opt-out preference signals, such as the Global Privacy Control (GPC), as a valid request to opt out of the “sale” or “sharing” of Personal Data for the browser or device from which the signal is sent. On chubbybowls.com, optional website analytics stays off whenever your browser sends a DNT or GPC signal.

The Personal Data that we collect about you will be stored in the United States and may be shared with third parties located in the United States. If you are located in the European Economic Area (“EEA”), Switzerland, or United Kingdom and we transfer your Personal Data to third parties in other countries that do not provide adequate legal protection as defined by applicable data protection laws, we will ensure that appropriate safeguards are implemented to secure such data transfers in compliance with applicable data protection laws. Such safeguards may include the EEA or United Kingdom Standard Contractual Clauses.

Depending on your state of residence (for example, California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and other states with comprehensive privacy laws), you may have some or all of the following rights, subject to legal exceptions:

• To know and access the Personal Data we collect, use, and disclose about you;
• To correct inaccurate Personal Data;
• To delete Personal Data you provided or that we collected;
• To obtain a portable copy of your Personal Data;
• To opt out of the “sale” or “sharing” of Personal Data and of targeted advertising;
• To opt out of profiling in furtherance of decisions that produce legal or similarly significant effects; and
• To limit the use and disclosure of sensitive Personal Data.

How to Exercise. You may submit a request by emailing support@chubbygroup.com. You may also opt out of sale, sharing, and targeted advertising as described in Your privacy choices, including by using a recognized opt-out preference signal such as Global Privacy Control. We will not discriminate against you for exercising any of these rights.

Verification and Authorized Agents. To protect your Personal Data, we will take steps to verify your identity before responding, and where permitted by law you may use an authorized agent to submit a request on your behalf, subject to our verification of the agent’s authority.

Right to Appeal. If we deny your request and applicable law provides an appeal right, you may appeal by replying to our decision or contacting support@chubbygroup.com, and we will respond within the time required by applicable law.

If you are located in the EEA, Switzerland, or the United Kingdom, you have the following rights:

• Right to access. You have the right to obtain confirmation from us as to whether or not we process your Personal Data.
• Right to data portability. You may receive your Personal Data that you have provided to us in a structured, commonly used, and machine-readable format in certain cases.
• Right to rectification. You have the right to request the rectification of inaccurate, incomplete, or outdated Personal Data concerning you.
• Right to erasure. You have the right to request that we erase your Personal Data in certain cases.
• Right to restrict processing. You have the right to request that we restrict processing of your Personal Data in certain cases.
• Right to objection. You have the right to object to the processing of your Personal Data in certain cases.
• Right to withdraw consent. Where our processing of your Personal Data is based on consent, you have the right to withdraw such consent at any time. The lawfulness of processing based on your consent before its withdrawal will not be affected.
• Right to lodge a complaint. You have the right to lodge a complaint with a supervisory authority concerning our processing of your Personal Data.
• Right to not be subject to automated decision-making. You have the right to not to be subject to a significant decision based solely on automated processing and to be given more information about why any such decision was made.

The rights described in this section can be exercised at any time by contacting us at support@chubbygroup.com.

If you are in Canada, the disclosures set out below apply to you in addition to the general sections of this Privacy Policy.

Your Rights. You may request access to or correction of Personal Data about you in our control by contacting us at support@chubbygroup.com. These rights are subject to certain exceptions, and we may take steps to verify your identity before responding to your request.

We and other parties with whom Personal Data about you may be shared as described in this Privacy Policy may process Personal Data about you outside of Canada, including in the United States and in other countries. While outside of Canada, Personal Data about you will be subject to applicable local laws, which may not afford the same level of protection to Personal Data about you as the laws of Canada.

If you are a California resident, you may request certain information regarding our disclosure of certain categories of Personal Data to third parties for those third parties’ direct marketing purposes. To make such a request, please contact us at support@chubbygroup.com. This request may be made no more than once per calendar year, and we reserve our right not to respond to requests submitted other than to the designated email address.

The Chubby Club membership and rewards program offers benefits such as points, member pricing, and promotional offers. Because you provide Personal Data (such as your identifying, account, transaction, and location information) to participate, the program may be considered a “financial incentive” under the California Consumer Privacy Act.

Material Terms. When you enroll, we collect and process the categories of Personal Data described in this Privacy Policy to operate the program, credit points, deliver member benefits, and personalize offers. Participation is entirely voluntary.

How to Join or Withdraw. You may join by creating a Chubby Club account, and you may withdraw at any time by cancelling your membership or contacting us at support@chubbygroup.com. Withdrawing will end your participation and the associated benefits.

Good-Faith Estimate of Value. The value of the Personal Data we process in connection with the program relates reasonably to the value of the benefits we provide, which we estimate to be approximately equal to the expense we incur in offering the program, including the value of the points, discounts, and rewards provided to members. We calculate this estimate based on the aggregate cost of program benefits relative to program participation, and we do not otherwise assign a monetary value to your Personal Data.

This website does not sell your Personal Data. For other Chubby Group services, and how to opt out of any sale or sharing, see Your privacy choices. If our practices change, we will update this Privacy Policy.

We may update this Privacy Policy periodically. Material changes will be notified via email or website notice. Continued use of the Services after updates constitutes acceptance of the revised policy.

If you have questions about this Privacy Policy or would like to contact us about it, you may do so by contacting us at:

Email: support@chubbygroup.com