Privacy Policy
The Hillstone Restaurant Group, Inc. (collectively, “Hillstone,” “we,” “us,” or “our”) is committed to protecting the personal information entrusted to our care by you, our guests. Honoring your privacy is of paramount importance to us. This Privacy Policy describes the limited way Hillstone collects uses, and shares, your personal information. This Privacy Policy also describes how Hillstone protects your personal information and tells you about your privacy rights and choices, and how you can reach us to get answers to your questions.
How We Collect Information
We collect information from you in a variety of ways depending on how you interact with us and our websites and services, including:
- Directly from you when you provide it to us, to include, but not limited to, when you make an online reservation, place an online order for take-home food, submit feedback, or purchase a gift card.
- Automatically when you interact with our websites or emails using cookies, server logs, and other similar technologies.
- From other sources, including, for example, third parties, business partners, our affiliates, or publicly available sources. For example, if you submit a job application, or become an employee, we may conduct a background check.
For a list of the categories of personal information that we collect, see the chart below in the Sharing of Information section.
Use and Processing of Information
The following provides examples of how we use the information that we collect.
| Context | Types of Data | Primary Purpose for Collection and Use of Data |
|---|---|---|
| First-Party Tracking and Cookies | We use cookies and clear GIFs. “Cookies” are small pieces of information that a website sends to a computer’s hard drive while a web site is viewed. | We use this information to make our website operate efficiently. |
| Feedback/Support | If you provide us feedback or contact us for support, we will collect your name and e-mail address, as well as any other content that you send to us, in order to reply. | We use this information to receive or act upon your feedback and issues. |
| Order Placement | We collect your name, billing address, shipping address, e-mail address, phone number, and credit card number when you place an order. | We use your information to perform our contract to provide you with products or services. |
| Website Interactions | We use data collection technology to protect our website from malicious activity or fraud. This may include information that you type into our online forms or information about your device or browser. | We use this information to understand interactions with our website and use this information for detecting and preventing malicious activity or fraud. |
| Web Logs | We collect information including your browser type, operating system, Internet Protocol (IP) address (a number that is automatically assigned to a computer when the Internet is used), domain name, click activity, referring website, and/or a date/time stamp for visitors. | We use this information to monitor our networks and the visitors to our websites. Among other things, it helps us understand what types of operating systems—personal computer or mobile—are accessing our website in order to maximize design functionality. |
In addition to the purposes and uses described above, we use information in the following ways:
- To identify you when you visit our websites or restaurants.
- To improve our offerings.
- To conduct analytics.
- To respond to inquiries related to support, employment opportunities, or other requests.
- For internal administrative purposes, as well as to manage our relationships.
- Although the sections above describe our primary purpose in collecting your information, in many situations we have more than one purpose.
- To the extent we maintain and use personal information in a deidentified form, we will not attempt to reidentify the information, except for the purpose of determining whether our deidentification processes satisfy our legal obligations.
Sharing of Information
In addition to the specific situations discussed elsewhere in this policy, we may disclose personal information in the following situations:
- Acquisitions. If another company acquires, or plans to acquire, our company, business, or our assets, we will also share information with that company, including at the negotiation stage.
- Other Disclosures with Your Consent. We may ask if you would like us to share your information with other unaffiliated third parties who are not described elsewhere in this policy.
- Other Disclosures without Your Consent. We may disclose information in response to subpoenas, warrants, or court orders, or in connection with any legal process, or to comply with relevant laws. We may also share your information to establish or exercise our rights, to defend against a legal claim, to investigate, prevent, or take action regarding possible illegal activities, suspected fraud, safety of person or property, or a violation of our policies, or to comply with your request for the shipment of products to or the provision of services by a third-party intermediary.
- Service Providers. We may share your information with service providers. Among other things service providers may help us to administer our website, conduct surveys, provide technical support, process payments, and assist in the fulfillment of orders.
Some states require that organizations disclose whether the following categories of personal information are collected, disclosed to third parties for a “business purpose,” or “sold” or transferred for “valuable consideration.” The table below indicates the categories of personal information we collect and transfer in a variety of contexts. Note that we do not sell your personal information.
| Categories of Personal Information We Collect | To Whom We Disclose Personal Information for a Business Purpose |
|---|---|
| Identifiers—this may include real name, alias, postal address, unique personal identifier, online identifier, email address, account name, or other similar identifiers. | Business partners; data analytics providers; government entities, as may be needed to comply with law or prevent illegal activity; internet service providers; operating systems and platforms; other service providers; payment processors and financial institutions; and professional services organizations, this may include auditors and law firms. |
| Commercial information—this may include information about products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. | Business partners; data analytics providers; government entities, as may be needed to comply with law or prevent illegal activity; internet service providers; operating systems and platforms; other service providers; payment processors and financial institutions; and professional services organizations, this may include auditors and law firms. |
| Internet or other electronic network activity information—this may include browsing history, search history, and information regarding an individual’s interaction with an internet website, application, or advertisement. | Data analytics providers; government entities, as may be needed to comply with law or prevent illegal activity; internet service providers; operating systems and platforms; other service providers; and professional services organizations, this may include auditors and law firms. |
| Inferences drawn from any of the information listed above. | Business partners; data analytics providers; government entities, as may be needed to comply with law or prevent illegal activity; internet service providers; joint marketing partners; operating systems and platforms; other service providers; payment processors and financial institutions; and professional services organizations, this may include auditors and law firms. |
Your Choices
Some jurisdictions give you a right to make the following choices regarding your personal information:
- Knowledge of and Access to Your Personal Information. You may request access to your personal information (or confirmation that we have information about you) by contacting us at the address described below. If required by law, upon request, we will grant you access to the personal information that we have about you. Note that California residents may be entitled to ask us for a notice describing what categories of personal information (if any) we share with third parties or affiliates for direct marketing.
- Changes to Your Personal Information. We rely on you to update and correct your personal information. If our website does not permit you to update or correct certain information, you can contact us at the address described below to request that your information by modified. Note that we may keep historical information in our backup files as permitted by law.
- Deletion of Your Personal Information. Typically, we retain your personal information for the period necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law. You may, however, request information about how long we keep a specific type of information, or request that we delete your personal information by contacting us at the address described below. If required by law we will grant a request to delete information, but you should note that in many situations we must keep your personal information to comply with our legal obligations, resolve disputes, enforce our agreements, or for other business purposes.
- Objection to Certain Processing. You may object to our use or disclosure of your personal information by contacting us at the address described below.
Online Tracking. We do not currently recognize automated browser signals regarding tracking mechanisms, which may include “Do Not Track” instructions. You may exercise the rights described above by contacting us as indicated in the Contact Information section below. We do not discriminate against individuals that exercise state-conferred rights. If you disagree with how we handled a request, you may appeal our decision by contacting us with the subject line “Appeal.”
Note that, as required by law, we will require you to prove your identity. We may verify your identity by phone call or email. Depending on your request, we will ask for information such as your name, your email address, or the date of your last visit to one of our restaurants. We may also ask you to provide a signed declaration confirming your identity. Following a request, we will use reasonable efforts to supply, correct or delete personal information about you in our files.
In some circumstances, you may designate an authorized agent to submit requests to exercise certain privacy rights on your behalf. If you are an authorized agent submitting a request on behalf of an individual, you must attach signed permission from the data subject indicating that you are able to act on another person’s behalf.
How We Protect Personal Information
No method of transmission over the Internet or method of electronic storage is fully secure. While we use reasonable efforts to protect your personal information from unauthorized access, use, or disclosure, we cannot guarantee the security of your personal information. If we are required by law to inform you of a breach to your personal information, we may notify you electronically, in writing, or by telephone, if permitted to do so by law.
Additional Information for California Residents
California law requires us to disclose the following information related to our privacy practices:
- California Shine the Light. We do not share any personal information with third parties for those parties to use for direct marketing.
- California Sensitive Information Disclosure. We collect the following categories of sensitive personal information as defined under California law:
| Categories of Sensitive Personal Information We Collect | Purposes for Which It Is Collected | Is Information Sold or Shared for the Purpose of Cross-Context Behavioral Advertising? |
|---|---|---|
| Account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account. | Process payments from our restaurants. | No |
Other Important Information
The following additional information relates to our privacy practices:
- Transmission of Information to Other Countries. Your information may be processed in a foreign country where privacy laws may be less stringent than the laws in your country. By submitting your personal information to us, you agree to the transfer, storage, and processing of your information in a country other than your country of residence, including, but not necessarily limited to, the United States.
- Third-Party Applications/Websites. We have no control over the privacy practices of websites or applications that we do not own.
- Changes to This Privacy Policy. We may change our privacy policy and practices over time. To the extent that our policy changes in a material way, the policy that was in place at the time that you submitted personal information to us will generally govern that information unless we receive your consent to the new privacy policy. Our privacy policy includes an “effective” and “last updated” date. The effective date refers to the date that the current version took effect. The last updated date refers to the date that the current version was last substantively modified.
- Accessibility. If you are visually impaired, you may access this notice through your browser’s audio reader.
- Children. As with adults, we do not sell the personal information of minors under 16 years of age for the exchange of money.
Contact Information
We welcome your questions about our Privacy Policy and comments on how we can improve our practices. Please send your questions or comments to Hillstone by visiting our contact page here. You mail also mail us at 2710 East Camelback Road, Suite 200, Phoenix, AZ 85016 or call us at (800) 230-9787. We will attempt to respond to your requests and to provide you with additional privacy-related information.