Privacy Policy

This Privacy Policy explains how Miguel's Jr. ("we," "us," or "our") collects, uses, discloses, and protects information when you visit our website at miguelsjr.com, use our mobile services, or otherwise interact with us. By using our service, you agree to the collection and use of information in accordance with this policy.

The following definitions apply throughout this Privacy Policy:

• Account — A unique account created for you to access our service.
• Company — Miguel's Jr., located at 280 Corporate Terrace Cir, Corona, CA 92879.
• Personal Data — Any information that relates to an identified or identifiable individual.
• Service — The Miguel's Jr. website at miguelsjr.com and related services.
• Usage Data — Information collected automatically, including device IP address, browser type, browser version, pages visited, and time spent.
• Cookies — Small files placed on your device that track your browsing activity.

Personal Data

While using our service, we may ask you to provide personally identifiable information, including:

• Email address
• First name and last name
• Phone number
• Address, state, ZIP/postal code, city
• Usage data

Usage Data

Usage data is collected automatically and may include your device's IP address, browser type and version, the pages of our service you visit, the time and date of your visit, the time spent on those pages, unique device identifiers, and other diagnostic data.

Third-Party Social Media Information

You may register through accounts on Google, Facebook, Instagram, Twitter, or LinkedIn. With your permission, we may collect personal information already associated with your social media account.

Tracking Technologies and Cookies

We use cookies and similar tracking technologies to monitor activity on our service. These include:

• Necessary / Essential Cookies — Session cookies required for authentication and core service functionality.
• Functionality Cookies — Persistent cookies that remember your preferences such as login details or language.
• Tracking and Performance Cookies — Third-party cookies used to track website traffic and user behavior.
• Targeting and Advertising Cookies — Persistent cookies that track your browsing habits to deliver relevant advertising.

Miguel's Jr. may use your personal data for the following purposes:

• To provide and maintain our service, including monitoring usage.
• To manage your account and registration as a user.
• To perform a contract for products or services you purchase from us.
• To contact you by email, phone, SMS, or other electronic communication.
• To send you news, special offers, and information about products and services.
• To deliver targeted advertising and measure its performance.
• For business transfers, such as a merger, acquisition, or asset sale.
• For any other purpose with your consent.

We may share your personal information in the following situations:

• With service providers — to monitor and analyze the use of our service or to contact you.
• With affiliates — companies under common control with us, who will honor this Privacy Policy.
• With business partners — to offer you certain products, services, or promotions.
• With other users — when you share personal information in public areas of the service.
• With your consent — for any other purpose with your permission.

We will retain your personal data only as long as necessary for the purposes set out in this Privacy Policy. We will retain and use your personal data to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

Usage data is generally retained for a shorter period of time, except when used to strengthen security, improve service functionality, or where we are legally obligated to retain it longer.

Your information may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.

Miguel's Jr. will take all steps reasonably necessary to ensure your data is treated securely and in accordance with this Privacy Policy.

You have the right to delete or request that we assist in deleting the personal data that we have collected about you. You may update, amend, or delete your information at any time by signing in to your account and visiting the account settings section, or by contacting us directly.

Please note that we may need to retain certain information when we have a legal obligation or lawful basis to do so.

The security of your personal data is important to us. We use commercially acceptable means to protect your information, but no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use acceptable means to protect your personal data, we cannot guarantee its absolute security.

Analytics

We may use third-party service providers to monitor and analyze the use of our service, including Google Analytics. You can opt-out of Google Analytics by installing the Google Analytics opt-out browser add-on.

Email Marketing

We may use your personal data to contact you with newsletters and promotional materials through Mailchimp. You may opt out of receiving emails from us by following the unsubscribe link in any email.

SMS Communications

By providing your phone number, you agree that Miguel's Jr. may send text messages to you. Standard message and data rates may apply. You can opt out at any time by replying "STOP."

Behavioral Remarketing

We use remarketing services to advertise on third-party websites after you visit our service, including:

• Google Ads — You can opt out via your Google Ads Settings.
• Facebook — You can manage interest-based ads through your Facebook account settings.

If you are a California resident, you have specific rights regarding access to your personal information.

Categories of Personal Information Collected

• Category A — Identifiers: name, address, email, IP address.
• Category B — Customer Records: phone number, financial information.
• Category F — Internet Activity: interactions with our website.
• Category L — Sensitive Information: account login credentials.

We do not collect protected classifications, biometric data, geolocation data, sensory data, or education information.

Your Rights

• Notice — to know what personal information is collected and how it is used.
• Access — to request disclosure of the personal information we have collected.
• Opt-out — to refuse the sale or sharing of personal information.
• Correct — to request the correction of inaccurate information.
• Delete — to request the deletion of your personal information.
• Non-discrimination — you cannot be denied service for exercising your rights.

Sale of Personal Information

We do not sell personal information as the term sell is commonly understood. We do allow service providers to use your personal information for the business purposes described in our Privacy Policy.

Exercising Your Rights

To exercise your rights under the CCPA/CPRA, contact us by email, phone, or mail (see Contact below). Requests must provide sufficient information to verify your identity. We will respond within 45 days, with an additional 45-day extension if reasonably necessary.

Miguel's Jr. does not knowingly collect information from users under 13. Users between 13 and 16 may opt into the sale of personal information only with affirmative consent.

California residents may request limiting the use of their sensitive personal information to that which is necessary to perform the services requested.

Miguel's Jr. does not currently respond to Do Not Track (DNT) browser signals. You can enable DNT in the settings of most popular web browsers.

Under California Civil Code Section 1798 (Shine the Light Law), California residents with an established business relationship with us may request information once a year about the sharing of their personal information with third parties for direct marketing purposes.

California residents under 18 who are registered users of our service may request removal of content or information they have publicly posted. To request removal, contact us using the contact information below and include the email associated with your account. Please note that this request does not guarantee complete or comprehensive removal of the content from our systems.

Our service does not address anyone under the age of 13. We do not knowingly collect personally identifiable information from anyone under the age of 13. If you are a parent or guardian and you are aware that your child has provided us with personal data, please contact us so that we can take appropriate action.

Our service may contain links to third-party websites that are not operated by us. If you click on a third-party link, you will be directed to that party's site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For material changes, we will notify you via email or a prominent notice on our service prior to the change becoming effective. You are advised to review this Privacy Policy periodically for any changes.

If you have any questions about this Privacy Policy, or wish to exercise any of your rights described above, you can reach us using the contact details below.