Data Privacy Notice
Last updated July 21, 2026
This is the Data Privacy Notice of The Halal Guys, Inc. (“THG,” “The Halal Guys,” the “Company,” “we,” “us,” or “our”).
We provide our products and services through our websites, mobile applications, loyalty and membership programs, online ordering services, communications, and other digital and offline interactions. These websites, applications, programs, services, and interactions are collectively referred to in this Privacy Notice as the “Services.”
Our Services may ask for and collect personal information to provide products and services, process orders, administer accounts and programs, improve user experiences, respond to requests, maintain security, and provide relevant information about our offerings.
This Privacy Notice applies to personal information collected through our Services and through certain offline interactions. It applies to personal information we collect about customers, prospective customers, employees, job applicants, suppliers, franchise applicants, franchisees, and other individuals who interact with us.
This Privacy Notice explains our information practices and the choices and rights available regarding how personal information is collected, used, shared, retained, and protected.
The Halal Guys is responsible for the personal information it collects and controls. Where applicable under European data protection laws, The Halal Guys acts as the data controller.
The Company is committed to protecting the information that our customers, employees, suppliers, franchisees, and others entrust to us. We expect our employees and the parties with whom we share personal information to handle that information in accordance with this Privacy Notice, applicable contractual obligations, and applicable law.
Additional rights may be available to residents of certain states, countries, provinces, territories, or regions. Those additional rights are described in the regional sections of this Privacy Notice.
However, the right to request deletion described in Section 4 is available to all users regardless of where they live.
If you are located outside the United States, your personal information may be transferred to, processed, accessed, or stored in the United States or another country where we or our service providers operate.
1. Personal Information We Collect and Use
The types of personal information we collect depend on how you interact with us and which Services you use.
Personal Information You Provide
Your privacy is important to us, and we seek to collect personal information that is reasonably necessary for the purposes described in this Privacy Notice.
Depending on how you interact with our Services, we may collect the following personal information:
- To respond to questions, requests, communications, complaints, or feedback relating to our Services, we may collect your name, email address, telephone number, mailing address, another identifier through which you may be contacted, and any other information you choose to provide.
- When you create or use a membership, rewards, or loyalty account, we may collect your name, membership information, email address, telephone number, order history, favorite orders, birthday, account preferences, social media username, and any other information you choose to provide.
- When you place an order or make a purchase, we may collect your name, email address, telephone number, billing or delivery address, order details, transaction information, payment information, and precise location with your permission.
- When you request information about our products and services, we may collect your name, email address, telephone number, order history, favorite orders, preferences, and communication choices.
- When you enter a sweepstakes, contest, promotion, or similar activity, we may collect your name, email address, telephone number, birthday, social media username, or another identifier through which you may be contacted.
- When you post, publish, submit, or transmit information through our Services, we may collect your name, email address, username, comments, reviews, photographs, videos, recordings, and any other information you choose to provide.
- When you apply for employment through our Services, we may collect your name, email address, telephone number, résumé, employment history, desired position, preferred restaurant location, professional qualifications, references, and other application information.
- When you inquire about or apply for a franchise, we may collect your name, email address, company name, telephone number, date of birth, citizenship information, marital status, spouse’s name, number of dependents, address, employment information, education information, homeownership information, asset and debt information, income, liabilities, business experience, financial qualifications, and information relating to your interest in becoming a franchisee.
You are not required to provide all personal information requested by us. However, we may not be able to provide certain Services, complete certain transactions, or respond to certain requests when necessary information is not provided.
Information Collected From Your Devices
We may automatically collect certain information from your computer, mobile device, browser, or other device when you use our Services.
This information may include:
- Internet Protocol address;
- Browser type;
- Device type;
- Device identifiers;
- Hardware model;
- Operating system;
- Domain names;
- Access dates and times;
- Referring and exit pages;
- Links selected;
- Website or application usage;
- Events occurring within an application;
- Performance and diagnostic information;
- Download sources;
- Approximate location derived from an Internet Protocol address; and
- Precise location when you grant permission through your device.
For example:
- When you use our Services to place an order, we may collect your precise location with your permission to identify nearby restaurants, support pickup or delivery, prevent fraud, or provide location-based functionality.
- For analytics, research, auditing, security, and Service improvement, we may use cookies and similar technologies to collect log information, usage information, performance information, and device information.
We use this information to operate and improve our Services, understand how users interact with them, diagnose technical issues, personalize user experiences, measure performance, maintain security, and protect individuals who use our Services.
Children’s Personal Information
Our Services are not directed to children under 18, and we do not knowingly collect personal information directly from children under 18 without appropriate authorization.
If we learn that personal information has been collected from a child in a manner that is not permitted by applicable law, we will take reasonable steps to delete it.
A parent or legal guardian who believes a child has provided personal information to us may contact us using the information in Section 10.
Personal Information Provided by Others
Depending on how you interact with our Services, we may receive personal information from third parties.
These third parties may include:
- Website and application service providers;
- Online ordering providers;
- Payment processors;
- Delivery providers;
- Loyalty and membership providers;
- Analytics providers;
- Marketing and communications providers;
- Affiliates and franchisees;
- Third-party platforms and applications;
- Social media and online review platforms;
- Recruitment providers;
- Professional advisers; and
- Publicly available sources.
When you connect a third-party platform, application, account, or sign-in service to our Services, we may receive information authorized by you or made available by that third party. This may include a unique account identifier, name, email address, telephone number, profile information, or other information you authorize the third party to provide.
When you interact with us through social media, we may collect your social media username, public posts, comments, reviews, photographs, videos, audio, and other information made available through the applicable platform.
Our Services may contain links to third-party websites, applications, or services where you may be able to post comments, submit reviews, access content, or complete transactions.
Your use of third-party websites, applications, and services is governed by their own terms and privacy practices. We are not responsible for the privacy or security practices of services that we do not own or control.
Other Ways We Use the Information We Collect
In addition to the purposes described above, we may use personal information to:
- Provide and operate our Services;
- Create and administer accounts;
- Process and deliver orders;
- Process payments and transactions;
- Administer loyalty, rewards, membership, and promotional programs;
- Provide customer support;
- Respond to questions, requests, complaints, and feedback;
- Communicate about accounts, orders, transactions, products, services, promotions, and events;
- Personalize user experiences;
- Analyze and improve our products, restaurants, Services, and business operations;
- Conduct research and analytics;
- Maintain transaction and business records;
- Evaluate employment applications;
- Evaluate franchise inquiries and applications;
- Enforce our agreements and policies;
- Monitor the technical operation and security of our networks and Services;
- Detect, investigate, and prevent fraud, abuse, security incidents, and unlawful activity;
- Protect the rights, safety, property, and security of the Company, our customers, employees, franchisees, service providers, and others;
- Comply with applicable laws, regulations, legal obligations, court orders, and governmental requests;
- Establish, exercise, or defend legal claims; and
- Carry out another purpose disclosed to you at the time the information is collected.
Marketing Communications
You may opt out of promotional emails by using the unsubscribe link included in the message or by contacting us.
You may also update your communication preferences through your account, where that option is available.
After opting out of promotional communications, you may continue to receive non-promotional communications relating to your account, orders, transactions, security, legal notices, or an ongoing business relationship with us.
4. Privacy Rights Available to All Users
Universal Right to Request Deletion
All users, regardless of where they live, have the right to request deletion of personal information that The Halal Guys maintains about them.
This right is available to users of our:
- Websites;
- Mobile applications;
- Online ordering services;
- Loyalty and membership programs;
- Communications;
- Third-party sign-in integrations; and
- Other digital and offline Services.
The right to request deletion is not limited to residents of a particular country, state, province, territory, or region.
You may request deletion of:
- Personal information associated with your account;
- Contact and profile information;
- Personal information submitted through our websites or applications;
- Personal information received through a third-party platform, application, or sign-in service;
- Loyalty or membership information;
- Order or transaction information, subject to applicable retention requirements;
- Communications submitted to us; and
- Other personal information that can reasonably be linked to you.
How to Submit a Deletion Request
To request deletion of your personal information, email:
Use the subject line:
Personal Information Deletion Request
Include the following information in your request:
- Your full name;
- The email address or telephone number associated with your account or interaction;
- The website, application, account, restaurant, program, or Service involved;
- A clear statement that you are requesting deletion of your personal information or account; and
- Any additional information reasonably necessary to locate the relevant records.
Please do not send passwords, payment card information, financial account information, government identification numbers, or other highly sensitive information by email.
Verification of Requests
We may need to verify your identity before processing a deletion request.
Verification protects personal information from unauthorized access, alteration, or deletion.
Depending on the nature of the request, we may ask you to confirm information already associated with your account or interaction, such as:
- Email address;
- Telephone number;
- ZIP code;
- Order information;
- Membership information; or
- Other identifying information reasonably necessary to verify the request.
We will request only the information reasonably necessary to verify your identity and process the request.
Processing Deletion Requests
After verifying a deletion request, we will delete, de-identify, or anonymize the personal information covered by the request within the period required by applicable law and, where no specific period applies, generally within 30 days.
Where appropriate, we may instruct service providers that maintain personal information on our behalf to delete the information covered by the request.
We will notify you when the request has been completed.
If we cannot delete all or part of the requested information, we will explain the reason, unless applicable law prevents us from providing that explanation.
Information We May Retain
We may retain limited personal information when reasonably necessary to:
- Complete an order or transaction you requested;
- Provide a product or Service;
- Maintain financial, tax, accounting, or transaction records;
- Comply with legal, regulatory, contractual, or reporting obligations;
- Detect, investigate, or prevent fraud, abuse, or security incidents;
- Protect the rights, safety, property, and security of the Company, our customers, employees, franchisees, service providers, and others;
- Resolve disputes;
- Enforce our agreements and policies;
- Respond to legal claims or governmental requests;
- Establish, exercise, or defend legal rights;
- Maintain records documenting a communication opt-out;
- Prevent the re-creation of an account that was deleted for fraud, abuse, or security reasons; or
- Accomplish another purpose permitted by applicable law.
Information retained for these purposes will be used only for the reason it was retained and will remain subject to appropriate safeguards.
Deleted information may remain temporarily in secure backups until those backups are deleted, overwritten, or rendered inaccessible through our standard backup-retention process.
Additional Privacy Requests
All users may also contact us to:
- Request access to personal information associated with them;
- Request correction of inaccurate personal information;
- Update account or contact information;
- Opt out of promotional communications;
- Ask questions about how personal information is used; or
- Submit a privacy-related complaint.
The availability and scope of these additional rights may depend on applicable law. Requests may also be subject to identity verification, legal exceptions, and technical limitations.
Authorized Representatives
You may authorize another person to submit a privacy request on your behalf.
We may require documentation showing that the representative has permission to act for you. We may also verify your identity directly before completing the request.
No Discrimination
We will not unlawfully discriminate against, penalize, or deny Services to an individual solely because the individual submitted a privacy request.
5. California Privacy Notice
This section applies to California residents and supplements the privacy rights available to all users under Section 4.
Legal Categories of Personal Information
California law requires businesses to describe personal information using specified legal categories.
The California Privacy Chart in Section 11 explains:
- The legal category of personal information;
- Examples of the personal information included in each category;
- The sources from which the information may be collected;
- The purposes for which the information may be collected and used; and
- The categories of third parties with whom the information may be shared for a business purpose.
The chart also identifies categories of personal information that we do not generally collect.
Your Rights and Choices
Subject to applicable law and exceptions, California residents may have the right to:
- Know the categories and specific pieces of personal information collected about them;
- Know the categories of sources from which personal information was collected;
- Know the business or commercial purposes for collecting, using, selling, or sharing personal information;
- Know the categories of third parties to whom personal information was disclosed;
- Request access to personal information;
- Request deletion of personal information;
- Request correction of inaccurate personal information;
- Receive personal information in a portable format;
- Opt out of the sale or sharing of personal information;
- Limit certain uses or disclosures of sensitive personal information, where applicable;
- Use an authorized agent to submit a request; and
- Receive equal service and pricing without unlawful discrimination for exercising privacy rights.
How to Make a California Request
You may submit a request using the information in Section 10.
Please include:
- Your name;
- Email address;
- Telephone number;
- The nature of your relationship with us; and
- The specific type of request you are submitting.
Responding to Requests
We will evaluate and respond to requests in accordance with applicable California law.
If we cannot honor all or part of a request, we will explain the reason unless applicable law prevents us from doing so.
Verifying Your Identity
To protect personal information, we may ask you to confirm information before completing a request.
Depending on the request, we may use a combination of your email address, telephone number, ZIP code, birthday, account information, order information, or other information associated with you to verify your identity.
Authorized Agents
An authorized agent may submit a request on behalf of a California resident.
We may require documentation showing that the agent is authorized to act for the resident. We may also require the resident to verify their identity directly with us.
Sale and Sharing
We do not sell personal information for monetary payment.
Where our use of advertising, analytics, or similar technologies is considered a sale or sharing under California law, California residents may exercise applicable opt-out rights by contacting us or using privacy preference tools made available through our Services.
6. Canadian Privacy Notice
This section applies to Canadian residents and supplements the rights available to all users under Section 4.
These rights apply to personal information and not to information that cannot reasonably be linked to an identifiable person.
Correcting or Changing Your Information
You may update certain information through your account, where that functionality is available.
You may also challenge the accuracy or completeness of personal information we maintain about you and request that it be corrected.
To submit a correction request, contact us using the information in Section 10.
Opting Out of Marketing Communications
You may opt out of marketing communications at any time by:
- Using the unsubscribe link included in a marketing email;
- Updating your account preferences, where available; or
- Contacting us using the information in Section 10.
You may continue to receive transactional, account-related, security, or legally required communications.
Access to Your Information
You may request access to the personal information we maintain about you and information regarding how it has been used or disclosed.
After verifying your identity, we will generally provide the requested information without charge unless we have a legal basis to charge a reasonable fee.
If a fee applies, we will notify you of the anticipated cost before processing the request.
If we cannot provide the requested information, we will explain the reason unless applicable law prevents us from doing so.
Withdrawing Consent
Where we rely on consent to process personal information, you may withdraw that consent, subject to legal or contractual restrictions and reasonable notice.
Withdrawing consent may affect our ability to provide certain products or Services.
Right to Make a Complaint
You may submit a complaint about our privacy practices using the information in Section 10.
We will evaluate the complaint and may contact you for additional information.
You may also have the right to submit a complaint to the Office of the Privacy Commissioner of Canada or the applicable provincial or territorial privacy regulator.
How to Make a Request
To exercise a Canadian privacy right, contact us using the information in Section 10.
Please include your name, email address, telephone number, and the type of request you are submitting.
Responding to Requests
After verifying the request, we will respond within the period required by applicable law and generally within 30 days.
We may decline or limit a request when permitted or required by applicable law, including where fulfilling the request could violate another person’s rights.
7. European Privacy Notice
This section applies to individuals located in the European Economic Area, the United Kingdom, or another jurisdiction that provides substantially similar data protection rights.
International Data Transfers
The Halal Guys primarily stores the personal information it collects in the United States.
Our employees, affiliates, franchisees, and service providers may access or process personal information from locations outside the country where the information was originally collected.
When required, we use appropriate safeguards for international transfers, which may include:
- A determination by an appropriate authority that the receiving country provides an adequate level of protection;
- Approved standard contractual clauses;
- Contractual, organizational, and technical safeguards; or
- Another transfer mechanism permitted by applicable law.
Your Privacy Rights
Subject to applicable law, you may have the right to:
- Request access to your personal information;
- Receive a copy of personal information we maintain about you;
- Request correction of inaccurate or incomplete personal information;
- Request deletion of personal information;
- Object to certain processing;
- Request restriction of processing;
- Request transfer of personal information in a structured, commonly used, machine-readable format;
- Withdraw consent where processing is based on consent;
- Object to direct marketing;
- Submit a complaint to a data protection authority; and
- Exercise other rights available under applicable data protection law.
The right to request deletion under Section 4 is available regardless of whether you qualify for rights under European data protection laws.
Legal Bases for Processing
Depending on the circumstances, we may process personal information based on one or more of the following legal bases:
Performance of a Contract
We may process personal information where necessary to perform a contract with you or take steps at your request before entering into a contract.
This may include processing information to:
- Provide products or Services;
- Process orders;
- Administer an account;
- Process payments;
- Deliver an order; or
- Evaluate a franchise application.
Legitimate Interests
We may process personal information where necessary for our legitimate business interests or those of a third party, provided those interests are not overridden by your rights and freedoms.
Our legitimate interests may include:
- Operating and improving our business and Services;
- Providing customer support;
- Communicating with existing or prospective customers;
- Managing employment recruitment;
- Evaluating franchise opportunities;
- Preventing fraud;
- Maintaining security;
- Conducting analytics;
- Maintaining records;
- Using cookies as described in this Privacy Notice; and
- Marketing products and Services where permitted.
Legal Obligations
We may process personal information where necessary to comply with a legal or regulatory obligation.
Consent
We may process personal information with your consent when consent is an appropriate lawful basis.
Where processing is based on consent, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing completed before the withdrawal.
Vital Interests and Other Lawful Bases
We may process personal information to protect vital interests or based on another lawful basis recognized under applicable law.
Data Retention
We retain personal information only for as long as reasonably necessary to:
- Fulfill the purpose for which it was collected;
- Provide products and Services;
- Maintain business and transaction records;
- Satisfy legal, accounting, tax, reporting, and regulatory obligations;
- Resolve disputes;
- Prevent fraud;
- Maintain security; and
- Enforce agreements.
When personal information is no longer required, we may delete, de-identify, anonymize, or securely dispose of it.
We may retain anonymized information that can no longer reasonably be associated with an identifiable person.
8. How We Protect Your Personal Information
We use reasonable administrative, organizational, technical, and physical safeguards designed to protect personal information from unauthorized access, use, disclosure, alteration, loss, misuse, or destruction.
These safeguards may include:
- Restricting access to authorized employees and service providers;
- Applying authentication and access controls;
- Encrypting sensitive information where appropriate;
- Maintaining security policies and procedures;
- Monitoring systems for security threats;
- Training personnel regarding information security;
- Requiring appropriate confidentiality obligations; and
- Working with service providers expected to maintain reasonable safeguards.
We retain personal information for as long as reasonably necessary to carry out the purposes described in this Privacy Notice and to satisfy applicable legal, accounting, reporting, recordkeeping, contractual, and regulatory requirements.
No website, application, network, electronic transmission, database, or storage system can be guaranteed to be completely secure.
You are responsible for maintaining the confidentiality of passwords and account credentials and for notifying us if you believe your account or personal information has been compromised.
Our Services may contain links to websites or services operated by third parties. The privacy and security practices of those third parties are not governed by this Privacy Notice.
9. Changes to This Notice
We may modify or update this Privacy Notice periodically to reflect changes in our Services, technology, information practices, legal requirements, or business operations.
When we update this Privacy Notice, we will revise the “Last updated” date at the top of the page.
Where required by applicable law, we may provide additional notice of material changes through our websites, applications, accounts, email communications, or another appropriate method.
10. Contact Us
For questions about this Privacy Notice or to submit an access, correction, deletion, opt-out, complaint, or other privacy request, contact us using the information below.
Deletion requests are available to all users regardless of their country, state, province, territory, or region of residence.
The Halal Guys, Inc.
26-44 Borough Pl.
Woodside, NY 11377
Email:
info@thehalalguysny.com
For deletion requests, use the subject line:
Personal Information Deletion Request
Telephone:
(347) 527-1505
11. California Privacy Chart
The following chart describes the categories of personal information we may collect, examples of information included in each category, the sources from which it may be collected, the purposes for which it may be collected and used, and the categories of third parties with whom it may be shared for a business purpose.
| Legal Category* | Examples of Information Collected | Source | Purposes for Collection and Use | Sharing With Third Parties for a Business Purpose |
|---|---|---|---|---|
| A. Identifiers | Real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, membership number, telephone number, device identifier, Social Security number, driver’s license number, passport number, or other similar identifiers. |
|
|
|
| B. Personal information categories listed in the California Customer Records statute, Cal. Civ. Code § 1798.80(e) | Name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification number, insurance policy number, education, employment, employment history, bank account number, payment card information, financial information, medical information, or health insurance information. Some personal information included in this category may overlap with other categories. |
|
|
|
| C. Protected classification characteristics under California or federal law | Age, race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex, gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions, sexual orientation, veteran or military status, genetic information, and other characteristics protected by applicable law. |
|
|
|
| D. Commercial information | Records of personal property, products or services purchased, obtained, or considered; order and transaction history; favorite orders; membership and rewards activity; purchasing preferences; and other purchasing or consuming histories or tendencies. |
|
|
|
| E. Biometric information | Genetic, physiological, behavioral, or biological characteristics, or activity patterns used to extract an identifier or identifying information, including fingerprints, faceprints, voiceprints, iris or retina scans, keystroke patterns, gait, sleep, health, or exercise data. | Not intentionally collected for the purpose of uniquely identifying an individual. | Not intentionally used for this purpose. | Not intentionally shared for this purpose. |
| F. Internet or other similar network activity | Browsing history, search history, information regarding interaction with a website, mobile application, email, or advertisement; device type; browser type; Internet Protocol address; operating system; application activity; log information; and advertising interactions. |
|
|
|
| G. Geolocation data | Physical location or movements, including approximate location derived from an Internet Protocol address and precise location when permission is granted through a device. |
|
|
|
| H. Sensory data | Audio, electronic, visual, thermal, olfactory, or similar information. | Not generally collected as a separate category. Information you voluntarily submit, such as photographs, videos, or recordings, may be collected as described in Section 1. |
|
|
| I. Professional or employment-related information | Current or past job history, résumé information, job title, professional experience, performance information, business ownership, franchise experience, references, and professional qualifications. |
|
|
|
| J. Non-public education information under the Family Educational Rights and Privacy Act, 20 U.S.C. § 1232g and 34 C.F.R. Part 99 | Education records directly related to a student and maintained by an educational institution or a party acting on its behalf, including grades, transcripts, class lists, student schedules, student identification codes, student financial information, or disciplinary records. | Not generally collected. Education history or qualifications may be voluntarily submitted through an employment or franchise application. |
|
|
| K. Inferences drawn from other personal information | Profiles or inferences reflecting preferences, characteristics, tendencies, behavior, attitudes, abilities, or likely interests. | Not generally collected or created as a separate category. Limited inferences may be generated from order history, account activity, or interactions to understand preferences and improve the Services. |
|
|
| L. Sensitive personal information, where applicable under California law | Government identification numbers, account credentials, precise geolocation, racial or ethnic origin, religious beliefs, health information, contents of certain communications, and other information treated as sensitive under applicable law. |
|
|
|
* We may also collect, use, retain, or disclose personal information as reasonably necessary to comply with laws, regulations, court orders, governmental requests, contractual obligations, legal claims, fraud-prevention requirements, and security obligations that may not fit within one of the categories described above.
Information Disclosed for a Business Purpose
We may disclose the following categories of personal information for the business purposes described in this Privacy Notice:
- A. Identifiers
- B. California Customer Records information
- C. Protected classification characteristics
- D. Commercial information
- F. Internet or other similar network activity
- G. Geolocation data
- H. Sensory data, where voluntarily provided
- I. Professional or employment-related information
- J. Education information, where voluntarily provided
- K. Inferences, where created
- L. Sensitive personal information, where collected and necessary for an authorized purpose
We do not sell personal information for monetary payment.
Where applicable law defines certain advertising or analytics disclosures as a “sale” or “sharing,” eligible users may exercise the applicable opt-out rights described in this Privacy Notice.