Privacy Policy

Effective Date: October 13, 2025

Last Updated: October 13, 2025

This Privacy Policy describes how Chopsticks Chinese Buffet ("we," "us," or "our") collects, uses, and discloses information when you visit and use our website, [YOUR WEBSITE ADDRESS].

1. Contact Information

If you have any questions or concerns about this policy or our data practices, please contact us:

Business Name: Chopsticks Chinese Buffet
Mailing Address: 4903 NW Loop 410, San Antonio, Texas 78229
Contact Email: chopstixbuffetsa@gmail.com

2. Information We Collect

We only collect non-personally identifiable and pseudonymous information through the use of third-party website analytics. We do not have any forms on our website (such as contact forms, reservation forms, or email sign-up forms) that directly collect your name, email, or other direct identifiers.

Information Collected Automatically (Through Google Analytics 4 - GA4)

When you visit our website, **Google Analytics 4 (GA4)** automatically collects certain information about your device and activity. While this data is generally considered pseudonymous, under some data protection laws (like GDPR), it may be treated as "Personal Data."

Categories of Data Collected:

• Usage Data: Pages viewed, time spent on the site, paths taken through the site, and the page you visited before ours.
• Technical Data: Anonymized IP address, browser type, operating system, device type, screen resolution, and language preferences. **GA4 is configured to anonymize IP addresses by default.**
• Location Data: General geographic location (down to the city/region level) derived from the anonymized IP address.

3. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies primarily through **Google Analytics 4 (GA4)** to collect information about your browsing activity. We confirm there are **no other third-party tracking embeds or social media pixels** on this website.

• Cookies: Small data files stored on your device that help us track user sessions.
• GA4 Cookies: These are used to distinguish users and sessions.

How to Opt-Out of Analytics

You can prevent your data from being used by Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

Note on Consent: We currently do not employ a cookie banner or a Consent Management Platform (CMP). **Visitors from the European Union (EU) and the UK should be aware that their data is being processed based on our legitimate interest to analyze and improve the website.** Implementing a CMP is strongly recommended to ensure full compliance with the GDPR and ePrivacy Directive requirements for obtaining explicit consent before setting non-essential cookies.

4. How We Use Your Information

We use the information collected solely for the following business purposes:

• Website Improvement: To analyze website traffic, usage patterns, and popular content to improve the design and content of our website.
• Internal Business Analysis: To track the success of marketing efforts and understand the general geographic reach of our business.
• Security: To monitor and prevent unauthorized activity on our website.

5. Sharing Your Information (Third-Party Disclosure)

We share your usage and technical data with the following third party:

Google, LLC: As the provider of Google Analytics, Google processes this data on our behalf. Google's ability to use and share information collected by Google Analytics is governed by the Google Analytics Terms of Service and Google’s Privacy Policy. You can learn about how Google uses data when you use our website by visiting: www.google.com/policies/privacy/partners/.

We **do not** sell or "share" (as defined under CCPA/CPRA for targeted advertising) the personal information collected through Google Analytics.

6. Data Retention

We retain the user-level and event-level data collected via Google Analytics for the default period of **14 months**, after which it is automatically deleted. We recommend the website owner verify this setting in the GA4 administrative console.

7. Your Privacy Rights

Depending on your location, you may have specific rights regarding your personal information. These rights are generally exercised through an email request to our contact address.

A. European Economic Area (EEA) and UK Rights (GDPR)

If you are a resident of the EEA or UK, you have the right to:

1. **Right of Access:** Request a copy of the personal data we hold about you.
2. **Right to Rectification:** Request correction of inaccurate personal data.
3. **Right to Erasure (Right to be Forgotten):** Request that we delete your personal data.
4. **Right to Restrict Processing:** Request that we limit how we use your data.
5. **Right to Object to Processing:** Object to our processing of your data.
6. **Right to Data Portability:** Request a copy of your data in a structured, common format.
7. **Right to Lodge a Complaint:** Lodge a complaint with a supervisory authority.

We rely on our **Legitimate Interests** as the lawful basis for processing your website usage data to ensure our site functions correctly and to analyze its performance, provided these interests are not overridden by your data protection rights. We encourage you to contact us at the email above if you wish to exercise any of these rights.

B. California Residents' Rights (CCPA/CPRA)

The California Consumer Privacy Act (CCPA), as amended by the CPRA, grants specific rights to California residents. Based on our current annual revenue and the volume of consumer data processed, **Chopstix Buffet does not meet the criteria to be considered a "Business" under the CCPA/CPRA**, and therefore, the full requirements of the law, such as providing a "Do Not Sell or Share" link, do not apply to us.

However, we are committed to upholding good privacy practices and will respond to reasonable requests from California residents regarding their data.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The "Last Updated" date at the top of this policy will indicate when the most recent changes took effect. We encourage you to review this policy periodically. Your continued use of the site after any changes to this Privacy Policy constitutes your acceptance of the new terms.