P.F. Chang's Privacy Policy

effective as of Jan 1, 2025.

This Privacy Policy describes how P.F. Chang's China Bistro, Inc.  and our subsidiaries and affiliates (collectively, " P.F. Chang's," "we", “us” or "our") process personal information that we collect in relation to both our P.F. Chang’s and Pagoda Asian Grill brands.

This Privacy Policy covers personal information we collect through our restaurants in the contiguous United States (including through kiosks and tablets), through our online properties or services that link to this Privacy Policy (including our website and mobile application), in connection with our marketing and social media activities, and through other activities described in this Privacy Policy (collectively, the “Service”)

See the State law privacy rights section below for important information about rights you may have under applicable state privacy laws.

Index

You can click the links below to jump to specific sections, but we recommend that you read this Privacy Policy in its entirety.

PERSONAL INFORMATION WE COLLECT

The personal information we collect from you, directly or indirectly, will depend on how you interact with us and with our Services. The sources from which we collect personal information include the following:

Information you provide to us. Personal information you may provide to us through the Service or otherwise includes:

• Account data, such as the username and password that you may set to establish an online account on the Service, birth month, and any other information you choose to include with your account, such as your account preferences.
• Contact data, such as your first and last name, email address, billing and mailing addresses, zip code, and phone number.
• Communications data from your interactions with the Service and your communications with us, including when you interact with us through the Service or social media, you contact our support team, or you otherwise communicate with us. When you communicate with us through social media, this will include your social media handle. When you communicate with us via text messages, this may include your cell phone number; your mobile carrier's name; and the date, time, and content of your messages. 

• Order data, such as information we collect when you place orders for delivery or pickup, dietary preferences you share, and your order and transaction history, including your payment card or bank account information if you use them to make payments.
• Promotions data, including information you share when you choose to enter a contest, promotion, sweepstakes, rewards program, or complete a survey. Participation in these activities is voluntary.
• Marketing data, such as your preferences for receiving communications about our Services, restaurants, products, activities, events and publications.
• Security data, such as security camera footage of our restaurants and other facilities.
• Other data not specifically listed in this Privacy Policy, which we will use as described in this Privacy Policy or as otherwise made apparent at the time of collection.

Third-party sources. We may combine personal information we receive from you with personal information (e.g., demographic, navigation and contact information) that we obtain from other sources, such as:

• Data brokers, which provide personal information about our customers and prospective customers, such as brokers that help our marketing partners associate the IP addresses and other usage data of our website visitors with email addresses and other personal information that we use to send marketing emails to them. 
• Public sources, such as government agencies, public records, social media platforms, and other publicly available sources.
• Marketing partners, such as third party food ordering or delivery services that provide us with your information to facilitate your P.F. Chang’s orders, event co-sponsors, and joint marketing partners.
• Third-party services, such as social media services, that you use to log into, or otherwise link to, your Service account. This data may include your username, profile picture and other information associated with your account on that third-party service that is made available to us based on your account settings on that service.

Automatic collection. When you access or interact with the Services, our communications, and other online services, we, our service providers, and our marketing partners may automatically log, monitor, and record information about you, your computer or mobile device, and your interaction over time with the Service, our communications and other online services. This information includes:

• Device data, such as your computer or mobile device's operating system type and version, manufacturer and model, browser type, screen resolution, RAM and disk size, CPU usage, device type (e.g., phone, tablet), IP address, unique identifiers (including identifiers used for advertising purposes), language settings, mobile device carrier, radio/network information (e.g., Wi-Fi, Bluetooth, LTE, 3G) and location data that can be derived from it, general location information such as city, state or geographic area that can be derived from your IP address, and precise geolocation of your device when you authorize our mobile application to access it in your device's settings.
• Usage data, such as pages or screens you viewed, how long you spent on a page or screen, the website you visited before browsing to the Service, navigation paths between pages or screens, information about your activity on a page or screen, access times and duration of access, whether you have opened our emails or clicked links within them, and other functional information on Service performance (like diagnostics and crash logs).
• Precise geolocation of your device when you grant access to it in your device's settings.

Web technologies. We, our service providers and our marketing partners use the following technologies to facilitate some of the automatic collection described above, including to enable Service functionality, analytics on Service use, and  targeted marketing:

• Cookies, which are text files that websites store on a visitor's device to uniquely identify the visitor's browser or to store information or settings in the browser for the purpose of tracking user activity and patterns, helping the visitor navigate between pages efficiently, remembering preferences and whether a visitor is logged in, and improving the visitor's browsing experience. Some cookies store information only during a user session, others persist in your browser and collect data from multiple sessions. You can learn more about cookies and how to control them at www.allaboutcookies.org
• Pixels (also known as web beacons or clear GIFs), which are embedded in code and/or invisible as image files within webpages or HTML formatted emails and used to demonstrate that a webpage or email was accessed or opened, or that certain content was viewed or clicked, at a specific date and time using a particular device, typically to compile statistics about usage of websites and the success of marketing campaigns.
• Browser web storage (including HTML5), also known as locally stored objects, which functions like cookies but enables the storage of a larger amount of data.
• Chat technologies provided by third parties that operate the chat features that you can use to communicate with us through the Service. These third parties may access and use the data described in the automatic collection section above, and monitor and record your chats, for the purposes described in this Privacy Policy. When you use these features, you are not communicating with a human unless we confirm that you are.
• Session replay, a technology that uses third-party software code to record users' interactions with the Services in a manner that allows us to watch and analyze visual reconstructions of them. The replays include users' clicks/taps, mouse movements, scrolls, and keystrokes/touches during those sessions. These replays help us diagnose usability problems and identify areas for improvement.  You can learn more about FullStory, one of our session replay providers, at https://www.fullstory.com/legal/privacy-policy and you can opt-out of session recording by FullStory at https://www.fullstory.com/optout/. 
• Software development kits, or SDKs, which are used to incorporate third party computer code into our mobile app that allows our third party service providers or marketing partners to collect data directly from our app for a variety of purposes, including to provide us with analytics regarding use of our app, to integrate with social media, add features or functionality to our app, or to facilitate targeted marketing and measure its effectiveness.
• Embedded scripts, which use software code temporarily downloaded to your device to collect information about your interactions with the Service such as the links you click on.

You can see a list of the web domains of certain service providers and marketing partners that use these technologies by clicking Your Privacy Choices in the footer of our homepage. You can find their privacy policies at the listed web domains.

HOW WE USE YOUR PERSONAL INFORMATION

We may use your personal information for the following purposes or as otherwise described at the time of collection:

Service delivery and operations. We may use your personal information to:

• provide, operate and improve the Service;

• communicate with you about the Service, including by sending Service-related and administrative messages;

• fulfill your orders, including by communicating them to our local restaurants, third party delivery services, marketplaces, and service providers and by providing you with receipts, order confirmations and pickup instructions;

• communicate with you about your orders, reservations or other requests;

• administer and communicate with you about events, promotions or contests in which you participate;

• personalize your experience with the Service and our communications, and other online services, including by using the location data we have collected about you to give you information relevant to that location; and

• provide support for the Service and improve our customer support capabilities, including through training and quality assurance activities.

Marketing. We, our service providers and our third-party advertising partners may collect and use your personal information for marketing and advertising purposes, including:

• Targeted marketing. When you visit the Service, our third-party marketing partners use the web technologies described above to collect device data and usage data (as described in the automatic collection section above) about you to enable targeted marketing in various ways. For example, some of our marketing partners send this data to third party data brokers who return to us email addresses and other personal information believed to be associated with you, which we may use to send marketing emails and other targeted marketing messages to you. Other marketing partners may use this data and information about your interaction with other online services over time and with different browsers and devices, to serve online ads that they think will interest you and measure their effectiveness. We may also share user contact data with these marketing partners to facilitate targeted marketing to those or similar users on other online platforms. See the marketing choices section below for guidance on opting-out of or limiting these activities.

• Direct marketing. We may send you direct marketing communications via mail, email or (as permitted by law) text messages and may personalize these messages based on your needs and interests. You may opt-out of our marketing communications as described in the Opt-out of direct marketing  section below.

Research and development. We may use your personal information for research and development purposes, including to analyze and improve the Service and our business and to develop new products and services. As part of these activities, we may create aggregated, de-identified and/or anonymized data from personal information we collect. We make personal information into de-identified or anonymized data by removing information that makes the data personally identifiable to you. We may use this aggregated, de-identified or otherwise anonymized data and share it with third parties for our lawful business purposes, including to analyze and improve the Service and promote our business. We do not to attempt to reidentify deidentified information derived from personal information, except that we may do so to test whether our deidentification processes are effective and comply with applicable law.

Compliance and protection. We may use your personal information to:

• comply with applicable laws, lawful requests, and legal process, such as to respond to subpoenas or requests from government authorities;

• protect our, your or others' rights, privacy, safety or property (including by making and defending legal claims);

• audit our internal processes for compliance with legal and contractual requirements or our internal policies;

• enforce the terms and conditions that govern the Service; and

• prevent, identify, investigate and deter fraudulent, harmful, unauthorized, unethical or illegal activity, including cyberattacks and identity theft.

Artificial Intelligence. We, our service providers and the third parties we work with may use artificial intelligence (AI) and machine learning technologies, including generative AI, to facilitate the processing of personal information described in this Privacy Policy.

HOW WE SHARE YOUR PERSONAL INFORMATION

Except as otherwise specified in this Privacy Policy, we may share the categories of personal information listed above with the following parties and as otherwise described in this Privacy Policy or at the time of collection.

Affiliates. We may share personal information with our corporate parent, subsidiaries, and affiliates, for purposes consistent with this Privacy Policy.

Service providers. We share personal information with third parties that provide services on our behalf or help us operate the Service or our business (such as food order processing, food delivery, mail delivery, hosting, information technology, customer support, email delivery, marketing, advertising, payment processing, point of sale systems, chat functionality, generative artificial intelligence, consumer research and website analytics).

Payment processors. Any payment card information you use to make a purchase through the Service is processed by third-party banking, processing agents and distribution institutions to verify and authorize your payment card information, process your order, verify the authenticity of any financial transaction involving P.F. Chang's, and/or to update your billing information.

Marketing partners. We share personal information with third-party marketing companies for the targeted marketing purposes described above. Their use of your personal information is subject to their own privacy policies.

Third parties designated by you. We may share your personal information with third parties where you have instructed us to do so or you have consented to the sharing. For example, if you participate in sweepstakes, raffles, or other promotions offered as a collaboration between P.F. Chang’s and our third party marketing partners, we will share personal information that is needed for the partner to provide the services that you have requested.

CAPTCHA providers. To enhance the security of our Service, we use captcha features that require users to complete a task to authenticate to the Service. Third party providers of these CAPTCHA services collect Device Data and Usage Data, as described above to enable the CAPTHCA features and as described in their privacy policies. For example, we use the Google reCAPTCHA service. Your use of the Google reCAPTCHA feature is subject to its Terms of Service and Privacy Policy .

Co-branding partners. Certain areas on our Service may be provided in association with an identified third party co-branding partner. If you register for the products or services provided in these co-branded areas, you are providing your personal information directly to P.F. Chang’s and the co-branding partner. Your personal information will be subject to this Privacy Policy as well as the privacy policy and practices of the co- branding partner. We are not responsible for the privacy practices of our co-branding partners and suggest you review their privacy policies.

Linked third-party services. If you log into the Service with, or otherwise link your Service account to, a social media or other third-party service, we may share your personal information with that third-party service. The third party's use of the shared information will be governed by its privacy policy and the settings associated with your account with the third-party service.

Professional advisors. We may share your personal information with professional advisors, such as lawyers, auditors, bankers and insurers, where necessary in the course of the professional services that they render to us.

Authorities and others. We may share your personal information with law enforcement, government authorities, and private parties, as we believe in good faith to be necessary or appropriate for the Compliance and protection purposes described above or as otherwise permitted by law.

Business transferees. We may share your personal information with parties (and their advisors) to business transactions and prospective transactions involving a corporate divestiture, merger, consolidation, acquisition, reorganization, sale or other disposition of all or any portion of the business or assets of P.F. Chang's or our affiliates (including, in connection with bankruptcy, insolvency, receivership or similar proceedings) where the transaction involves the transfer of personal information or the direct or indirect control over the processing thereof, including in connection with the negotiation of and due diligence for such transactions. Personal information about our customers and users of our Service may also need to be disclosed in connection with a commercial transaction where we or any one of our businesses are seeking financing, investment, or funding.

YOUR CHOICES

Privacy rights. Residents of certain states can exercise privacy rights with respect to the personal information we hold, as described in the State law privacy rights section below.

Access or update your information. If you have registered for an account with us through the Service, you may review and update certain account information and preferences by logging into the account (opens in a new window)

Opt-out of direct marketing.You may request to opt-out of marketing emails by following the opt-out or unsubscribe instructions at the bottom of the email, or by contacting us with your request. If you choose to opt-out of marketing emails, you may continue to receive marketing emails until your opt-out is processed, and you may continue to receive service-related and other non-marketing emails indefinitely. If you receive text messages from us, you may opt-out of receiving further text messages from us by replying STOP to our message. Unless required by law, we are not responsible for informing third parties with whom we have already shared your personal information of any changes requested pursuant to this section or causing information to be removed from the databases or records of such third parties.

Cookies. Most browsers let you remove and/or stop accepting cookies from the websites you visit. To do this, follow the instructions in your browser settings. Many browsers accept cookies by default until you change your settings. Please note that if you set your browser to disable cookies, certain features of the Service may not work properly. For more information about cookies, including how to see what cookies have been set on your browser and how to manage and delete them, visit www.allaboutcookies.org (opens in a new window). You can learn more about Google Analytics, one of the analytics services we use, and how to opt-out of being tracked by Google Analytics, here: https://tools.google.com/dlpage/gaoptout (opens in a new window)

Pixels. Most browsers and devices allow you to configure your device to prevent pixel images from loading. To do this, follow the instructions in your browser or device settings.

Mobile location data. You can disable our access to your device's precise geolocation in your mobile device settings.

Marketing choices. You may be able to limit use of your personal information for targeted marketing through the following settings/options/tools:

• Visitor identification opt-out.One of our marketing partners that helps us associate Service visitors with email addresses and other personal information that we use to send marketing emails to them allows you to opt-out here: https://customers.ai/opt-out.

• Browser settings. Changing your internet web browser settings to block third-party cookies.

• Privacy browsers/plug-ins. Using privacy browsers and/or ad-blocking browser plug-ins that let you block tracking technologies.

• Ad industry tools. Opting out of targeted ads from companies that participate in the following industry opt-out programs:

  • Network Advertising Initiative (opens in a new window)

  • Digital Advertising Alliance (opens in a new window)

  • AppChoices mobile app (opens in a new window), which will allow you to opt-out of targeted ads in mobile apps served by participating members of the Digital Advertising Alliance.

• Mobile settings. Using your mobile device settings to limit use of the advertising ID associated with your mobile device for targeted marketing purposes.

• Opt-out rights. You may have the right under applicable state law to opt-out of the sharing of your personal information for certain targeted marketing purposes, as described in the State law privacy rights section below.

You will need to apply these opt-out settings on each device and browser from which you wish to limit the use of your personal information for targeted marketing purposes. We cannot offer any assurances as to whether the companies we work with participate in the opt-out programs described above.

Do not track signals. Some Internet browsers may be configured to send “Do Not Track” signals to the online services that you visit. We currently do not respond to “Do Not Track” signals. To find out more about “Do Not Track,” please visit All About DNT. (opens in a new window)

Linked third-party platforms. If you choose to connect to the Service through your social media account or other third-party platform, you may be able to use your settings in your account with that platform to limit the information we receive from it. If you revoke our ability to access information from a third-party platform, that choice will not apply to information that we have already received from that third party.

Delete your account. You can request to delete your online Service account by using the delete account option in the account settings of our mobile app or by contacting us with your request. Following an account deletion request, we delete the user's account and data, unless they must be retained for the compliance and protection purposes described above, or because of an issue relating to the user's account such as an outstanding credit or an unresolved claim or dispute.

OTHER SITES AND SERVICES

The Service may contain links to websites, mobile applications, and other online services operated by third parties. In addition, our content may be integrated into web pages or other online services that are not associated with us. These links and integrations are not an endorsement of, or representation that we are affiliated with, any third party. We do not control websites, mobile applications or online services operated by third parties, and we are not responsible for their actions. We encourage you to read the privacy policies of the other websites, mobile applications and online services you use.

SECURITY AND RETENTION‌

We employ a number of technical, organizational, and physical safeguards designed to protect the personal information we collect. However, security risk is inherent in all internet and information technologies, and we cannot guarantee the security of your personal information.

We generally retain personal information to fulfill the purposes for which we collected it, including to comply with applicable legal, tax, accounting, or reporting requirements; to establish or defend legal claims; and for fraud prevention purposes. The primary criteria determining the length of time we retain particular categories of personal information is whether it is sufficient to achieve such purposes. When we no longer require the personal information, we will either delete or anonymize it or if this is not practicable (for example, because your personal information has been stored in backup archives), isolate it from further processing.

INTERNATIONAL DATA TRANSFERS

We are headquartered in the United States and may use service providers that operate in the United States and other countries. Your personal information may be transferred to the United States or other locations where privacy laws may not be as protective as those where you live.

CHILDREN

The Service is not intended for use by children under 18 years of age. If you are a parent or guardian of a child from whom you believe we have collected personal information in a manner prohibited by law, please contact us. If we learn that we have collected personal information through the Service from a child without the consent of the child's parent or guardian as required by law, we will comply with applicable legal requirements to delete the information.

CHANGES TO THIS PRIVACY POLICY

We reserve the right to modify this Privacy Policy at any time. If we make material changes to this Privacy Policy, we will notify you by updating the date of this Privacy Policy and posting it on the Service and/or through other appropriate means. Any modifications to this Privacy Policy will be effective upon our posting the modified version (or as otherwise indicated at the time of posting). In all cases, your use of the Service after the effective date of any modified Privacy Policy indicates your acceptance of the modified Privacy Policy.

HOW TO CONTACT US

If you have any questions or comments concerning this Policy, please email us at privacy@pfcb.com (opens in a new window), call us at 1-866-694-9972 or write to us at:

P.F. Chang's
Attn: Guest Relations Manager
8377 East Hartford Drive
2nd Floor
Scottsdale, AZ 85255

STATE LAW PRIVACY RIGHTS

Scope. Except as otherwise provided, this section applies to residents of CA, CO, CT, DE, IA, NE, NJ, NV, OR, TX, UT, VA, and any other U.S. state with privacy laws applicable to us that grant their residents the rights or require the disclosures described below. P.F. Chang’s is the controller of your personal information for purposes of these laws. 

For purposes of this section, “personal information” has the meaning given to “personal data”, or similar terms under the applicable privacy laws of the state in which you reside.

Please note that the rights listed and disclosures made below may not apply to you if you are not a resident of the state in which these rights are granted or the disclosures are required to be made.

In some cases, we may provide a different privacy notice to certain categories of residents of these states, such as job applicants, in which case that notice will apply with respect to the activities it describes instead of this section.

Your Privacy Rights. You have the rights listed below. The rights described above are not absolute, and, in certain cases, we may decline your request as permitted by law or where the laws in your state do not afford you these rights.

• Information/Know.

  You can request whether we have collected your personal information, and in certain cases, categorical information about the personal information we collect, the purposes for which we use them, the sources from which we collected personal information, the third parties with whom personal information is/was sold, shared or disclosed for a business purpose, and the personal information sold/disclosed. The specific categorical information that may be requested varies depending on your state of residence.

• Access. You can request a copy of certain personal information that we have collected about you in a portable format that can be transmitted to another entity.

• Deletion. You can ask us to delete certain personal information that we maintain about you.

• Correction. You can ask us to correct inaccurate personal information that we have collected about you.

• Opt-out of

  • Processing/sharing for targeted advertising purposes. You can opt-out of certain sharing and other processing of personal information for the targeted advertising purposes described in the targeted marketing section above.

  • Sales of personal information. You can opt-out of "sales" of your personal information as defined by applicable state privacy laws. We do not "sell" personal information as defined in applicable state privacy laws, except to the extent the use of targeted marketing services described above constitutes a ”sale” under such laws.

  •  Profiling. You can request to opt-out of the processing of personal information for the purposes of "profiling" as defined in applicable privacy laws that will have a legal or similarly significant effect on you. However, we do not currently engage in such profiling.

• Nondiscrimination. You are entitled to exercise the rights described above free from discrimination as prohibited by the privacy laws of the state where you reside.

Residents of some states have additional rights described in the state-specific disclosures at the bottom of this Privacy Policy.

How to exercise your rights.

• Information/know, access, correction, and deletion. You may submit requests to exercise these rights described above by submitting a request through our privacy request portal (opens in a new window) or by calling us at 866-694-9972. We cannot process your request if you do not provide us with sufficient detail to allow us to understand and respond to it.
• Opt-out of sharing/selling/processing for targeted advertising. For purposes of applicable privacy laws, our use of the targeted marketing services described above may constitute the "sharing", "sale", or processing of personal information for targeted advertising purposes from which you have the right to opt-out. You can request to opt-out of this activity where enabled by cookies and other web technologies on the Service by:

• clicking the Your Privacy Choices link in the footer of this webpage and following the opt-out instructions; or.

• transmitting your opt-out request through the Global Privacy Control   or another universal opt-out mechanism or preference signal recognized by applicable state privacy law, which we will recognize to the extent required by law with respect to the browser from which it is transmitted and otherwise as required by law. For more info visit globalprivacycontrol.org.

• You can request to opt-out of any offline or other sharing/sales/processing for targeted advertising that results from our activities by submitting a request through our Privacy Request Portal (opens in a new window).
• Verification of identity. We may need to verify your identity to process your information/know, access, deletion, and correction requests, and we reserve the right to confirm your state residency. To verify your identity, we may require you to authenticate into your Service account if you have one, verify your email address, provide personal identifiers we can match against information we may have collected from you previously, confirm your request using contact details stated in the request, provide government identification, or provide a declaration under penalty of perjury, where permitted by law.
• Authorized agents. Your authorized agent may make a request on your behalf upon our verification of the agent's identity and our receipt of a copy of a valid power of attorney given to your agent pursuant to applicable state law. If you have not provided your agent with such a power of attorney, we may ask you and/or your agent to take additional commercially reasonable steps permitted by law to verify that your request is authorized, such as by verifying your identity directly with us, providing proof that you have given the authorized agent signed permission to submit the request, and directly confirming with us that you gave the authorized agent such permission.
• Appeals. If we deny your request to exercise your privacy rights, you can appeal the denial through the same mechanism this Privacy Policy designates for the submission of the relevant request.

Profiling. We do not use personal information to profile you in furtherance of decisions that have legal or similarly significant effects as regulated by applicable U.S. state privacy laws.

Sensitive data. With the exception of the username and password you use to access your Service account and your device’s precise geolocation when you grant us access to it, we do not require you to provide us with data considered “sensitive” under U.S. state privacy laws. For example, this includes but may not be limited todata revealing racial or ethnic origin, religious/philosophical beliefs, a mental or physical health condition /treatment/ diagnosis, data related to pregnancy and reproductive health, genetic data, biometric data, sex life/sexuality/ sexual orientation, status as transgender or nonbinary, personal data of a known child under age 13, union membership, citizenship or citizenship/immigration status, status as victim of a crime, government-issued IDs, and financial account data. However, it is possible that some users may voluntarily provide this sensitive data to us. Do not provide us with this sensitive data if you do not consent to our handling of it as described in this Privacy Policy. By providing this sensitive data you affirmatively confirm that you freely give your informed, unambiguous agreement to our use and disclosure of it for the purposes explained or apparent at the time of collection or otherwise as described in this Privacy Policy. You can withdraw this consent at any time by contacting us but we will not be able to provide services or grant requests that require it.

Additional information for California residents. While you should read this Privacy Policy in its entirety, the following summarizes our practices currently and during the past 12 months regarding the categories of personal information that we collect and how we use them.

• Collection and disclosure. The list below describes the personal information we collect by reference to the categories of personal information specified in the California Consumer Privacy Act (”CCPA”) and the categories of third parties to whom we disclose it. The terms in the list refer to the categories of information and third parties detailed above in the Personal information we collect section. Information you voluntarily provide to us, such as in emails or free form webforms, may contain other categories of personal information (including sensitive personal information) not described below. We may also disclose personal information to professional advisors, law enforcement and government authorities, and business transferees as described above in the How we share your personal information section of this Privacy Policy.

  • Identifiers

    • Categories containing this data: All categories

    • Third parties to which we disclose for a business purpose: Affiliates, Co-brand partners, Service providers, Payment processors, Linked third-party services, Third parties designated by you

  • California Customer Records (as defined in Cal. Civ. Code §1798.80)

    • Categories containing this data: All categories

    • Third parties to which we disclose for a business purpose: Affiliates, Co-brand partners, Service providers, Payment processors, Linked third-party services, Third parties designated by you

  • Commercial Information

    • Categories containing this data: Account data, order data, promotional data, marketing data

    • Third parties to which we disclose for a business purpose: Affiliates, Co-brand partners, Service providers, Payment processors, Linked third-party services, Third parties designated by you

  • Audio/visual data

    • Categories containing this data: Recordings of customer service calls; security camera footage

    • Third parties to which we disclose for a business purpose: Affiliates, Service providers

  • Internet or Network Information

    • Categories containing this data: Device data, usage data

    • Third parties to which we disclose for a business purpose: Affiliates, Co-brand partners, Service providers, Payment processors, Linked third-party services, Third parties designated by you

  • Geolocation data

    • Categories containing this data: Device data

    • Third parties to which we disclose for a business purpose: Affiliates, Service providers

  • Sensitive personal information

    • Categories containing this data: Service username/password; payment card details; precise geolocation of your device when you grant us access to it;

    • Third parties to which we disclose for a business purpose: Affiliates, Payment processors, Service providers

  • Inferences

    • May be derived from all of the categories above.

    • Third parties to which we disclose for a business purpose: Affiliates, Co-brand partners, Service providers

• Sources and purposes. We collect all categories of personal information from the sources and use them for the business/commercial purposes described above in the Privacy Policy.

• Children. Although our Service is not intended for children under 16 years of age, we are required to inform you that we do not have actual knowledge that we have sold the personal information of California residents under the age of 16.

• Sensitive personal information. We do not use or disclose sensitive personal information for restricted purposes that California residents have a right to limit under the CCPA.

• Retention. We retain personal information as described in the Security and Retention section above.

• Sale and sharing of personal information. We do not sell or share personal information except as described in the  Opt-out of sharing/selling/processing for targeted advertising section above.

• Notice of financial incentive. We offer a rewards program that provides certain perks, such as menu items at no additional charge and exclusive offers, in exchange for participating in the program and our use of the personal information participants provide when they sign up for and interact with the program, which includes information made available to us by Facebook about members who use Facebook to sign up. The material terms and conditions applicable to participation in the rewards program are described in our Rewards Terms & Conditions (opens in a new window). Members can sign up for our rewards program on our website by clicking the rewards tab. The information we collect through the rewards program includes all of the categories described in the “Collection and disclosure” section above. Members have a right to cancel participation in the rewards program at any time and may do so by contacting us. Our good faith estimate of the value of the personal information we collect is the value of the benefits we offer to you. The factors considered in calculating this estimate include the benefit, insights and goodwill that we realize and expect to realize when they participate in the program and remain a customer; sales directly or indirectly generated from participation in the Rewards Program; and the costs of the program.

• Shine the light law. Under California's Shine the Light law (California Civil Code Section 1798.83), California residents may ask companies with whom they have formed a business relationship primarily for personal, family or household purposes to provide the names of third parties to which they have disclosed certain personal information (as defined under the Shine the Light law) during the preceding calendar year for those third parties’ own direct marketing purposes, and the categories of personal information disclosed. You may send us requests for this information to privacy@pfcb.com (opens in a new window). In your request, you must include the statement “Shine the Light Request," and provide your first and last name and mailing address and certify that you are a California resident. We reserve the right to require additional information to confirm your identity and California residency. Please note that we will not accept requests via telephone, mail, or facsimile, and we are not responsible for notices that are not labeled or sent properly, or that do not have complete information.

  
  

Additional information for Colorado residents. If you are a Colorado resident, please note the following with respect to the P.F. Chang’s Rewards programs (“Rewards Programs”):

• All categories of personal information collected through the Rewards Program, including your name, email address, device data, and usage data may be processed for targeted advertising as described above in the  Opt-out of sharing/selling/processing for targeted advertising section.
• The categories of third parties that will receive personal information collected through the Rewards Program are listed above in the section entitled How we share your personal information. Such data is not provided to data brokers.

If you exercise your right to delete the personal information we collect through the Rewards Program, we will not be able to provide Rewards Program benefits because we will not have the information necessary to keep track of the rewards to which you are entitled and otherwise administer the program.

Additional information for Oregon residents. Oregon residents can request a list of specific third parties, other than natural persons, to which we have disclosed personal information. The list we provide may be limited to the third parties to which we have disclosed your personal information. You can submit this request by following the instructions in the how to exercise your rights section above.  

Nevada opt-out rights. Nevada residents can request to opt-out of the sale of certain personal information regulated by Nevada privacy law by submitting a request online.