Privacy Statement

Effective Date: April 29, 2026
Last Updated: April 29, 2026
  1. Introduction

    Duro Hospitality and its affiliated entities, including all owned and operated restaurant concepts (collectively, “Company,” “we,” “us,” or “our”), are committed to protecting your privacy.

    This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you:

    1. Visit our restaurants
    2. Use our websites
    3. Purchase or redeem gift cards
    4. Make reservations
    5. Sign up for marketing communications
    6. Otherwise interact with our brands
    7. This policy applies across all current and future concepts operated by the Company.
  2. Information We Collect
    1. Personal Information
      1. Name
      2. Email address
      3. Phone number
      4. Billing and mailing address
      5. Payment details (processed by third-party providers)
    2. Transaction & Dining Information
      1. Gift card purchases, balances, and redemptions
      2. Reservation history and dining preferences
      3. Visit frequency and spend data
    3. Marketing & Communication Data
      1. Email and SMS subscription preferences
      2. Campaign engagement (opens, clicks, responses)
    4. Technical & Usage Data
      1. IP address
      2. Device and browser information
      3. Website activity and analytics data
  3. How We Use Your Information

    We use your information to:

    1. Process transactions, including gift cards and payments
    2. Manage reservations and guest experiences
    3. Communicate confirmations, receipts, and updates
    4. Send marketing communications (email and SMS where consent is provided)
    5. Personalize offers, promotions, and experiences
    6. Improve our operations, services, and hospitality offerings
    7. Detect fraud and maintain security
  4. Information We Collect from Website Visitors.

    When you visit our website, we or third-parties we work with (like advertising networks, analytics providers, and social media platforms and networks), may collect certain information using online tracking technologies such as pixels, web beacons, software developer kits, third-party libraries, and cookies (collectively, “Tracking Technologies”). These Tracking Technologies only collect your Personal Information when you consent by clicking your preference on the Privacy Banner that is displayed on our website.

    The Website Tracking Technologies we use include:

    1. Necessary Cookies help make a website usable by enabling basic functions like page navigation and access to secure areas of the website. These cookies to not store any Personal Information.
    2. Preferences Cookies enable a website to remember information that changes the way the website behaves or looks, like your preferred language or the region that you are in.
    3. Statistics cookies help website owners to understand how visitors interact with websites by collecting and reporting information anonymously.
    4. Marketing cookies are used to track visitors across websites. The intention is to display ads that are relevant and engaging for the individual user and thereby more valuable for publishers and third party advertisers. This information may include your IP address, browsing history, and device information. Depending on your preferences, it may be shared with third-party advertising providers like Meta and Google.
    5. Uncategorized cookies that are being analyzed and do not belong to any of the categories listed above.

    Additional information about the specific cookies in each category may be found in our Privacy Consent banner. Once you select a preference on the banner, you can view the information or modify your cookie preferences and opt-out of the collection, sale, or sharing of this information by clicking the icon displayed in the bottom left-hand corner of our website.

  5. Who We Share Your Personal Information With
    1. We share or disclosed your Personal Information for a business purpose as described below:
    2. We share or disclose Personal Information with our service providers to process this data on our behalf in order to help deliver our services to you. For example, we use Paytronix to operate our gift card and loyalty systems and OpenTable to manage reservations and guest relationships.
    3. We may also disclose and exchange Personal Information with law enforcement agencies and regulatory bodies to comply with our legal and regulatory obligations.
    4. As set forth in Section 4 (Information We Collect from Website Visitors).
  6. Marketing Communications (Email & SMS)
    1. Email Marketing

      If you opt in, we may send emails regarding:

      1. Promotions and events
      2. New restaurant openings and concepts
      3. Exclusive offers and updates

      You may unsubscribe at any time via the link in our emails.

    2. SMS/Text Marketing

      If you provide your phone number and consent to receive SMS messages:

      1. You may receive promotional and transactional text messages
      2. Message frequency may vary
      3. Standard message and data rates may apply

      You may opt out at any time by replying STOP.

      We will not send SMS marketing without appropriate consent.

  7. Sharing of Information

    We do not sell your personal information for monetary value. However, some jurisdictions consider the sharing or disclosing of Personal Information collected by Website Tracking Technologies with third-parties like Meta or Google to be a “sale” of Personal Information. To the extent this information is considered a sale, we share some of the Technical Information gathered when you browse our website with third-parties who process it to deliver content or advertisements that are more relevant to your interests, but only if you consent to the use of the applicable cookies. For additional information, please refer to Section 4 (Information We Collect from Website Visitors).

  8. Data Retention

    We retain personal information only as long as necessary to fulfil the purposes outlined in this privacy policy, unless a longer retention is required or permitted by law. We will also keep your Personal information for as long as is necessary to:

    1. Provide services to you
    2. Maintain business records
    3. Comply with legal obligations
    4. Resolve disputes
  9. Children’s Privacy

    Our services are not directed to individuals under 13, and we do not knowingly collect personal information from children. If we learn that we have collected Personal Information from someone under the age of 13 that was not provided with the supervision and consent of the minor’s parents or legal guardian, we will promptly delete that Personal Information. If you believe we have impermissibly collected Personal Information from someone under the age of 13, please contact us immediately.

  10. Your Rights

    We do not offer our services in the EEA, the UK, or Switzerland. However, in the event that we collect Personal Information of a resident of these jurisdictions, we process that Personal Information on the following legal bases: consent; as necessary to perform our agreement to provide services or other applicable agreements; as necessary for compliance with a legal obligation to which we are subject; or as necessary for our legitimate interests.

    Residents of the EEA, UK, or Switzerland may have the following rights.

    For further information on each of those rights, including the circumstances in which they apply, see the guidance from the UK Information Commissioner’s Office (ICO) on individual rights under the General Data Protection Regulation.

    Your RightThe Right Explained
    Right to AccessThe right to be provided with a copy of your Personal Information (the right of access)
    Right to RectificationThe right to require us to correct any mistakes in your Personal Information
    Right to be ForgottenThe right to require us to delete your Personal Information—in certain situations
    Right to Restriction of ProcessingThe right to require us to restrict processing of your Personal Information—in certain circumstances, e.g. if you contest the accuracy of the data
    Right to Data PortabilityThe right to receive the Personal Information you provided to us, in a structured, commonly used and machine-readable format and/or transmit that data to a third party—in certain situations
    Right to Object

    The right to object:

    • at any time to your Personal Information being processed for direct marketing (including profiling);
    • in certain other situations to our continued processing of your Personal Information, e.g. processing carried out for the purpose of our legitimate interests.
    Right Not to be Subject to Automated Individual Decision-MakingThe right not to be subject to a decision based solely on automated processing (including profiling) that produces legal effects concerning you or similarly significantly affects you
    Right to Lodge a ComplaintUsers that reside in the EEA, the UK, or Switzerland have the right to lodge a complaint about our data collection and processing actions with the supervisory authority concerned. Contact details for data protection authorities are available at: https://edpb.europa.eu/about-edpb/about-edpb/members_en
    Right to Independent Dispute Resolution Body Designated to Address Complaints and Provide Appropriate Recourse Free of Charge to You

    We commit to resolve complaints about privacy and its collection or use of your Personal Information. European Union or Swiss individuals with inquiries or complaints regarding this Policy should first contact Us at info@durohospitality.com. If we are acting as the Processor pursuant to instructions from a Controller, it may refer you to the applicable Controller to exercise your rights with respect to the data we are processing on its behalf.

    Furthermore, we have committed to refer unresolved privacy complaints under the Privacy Shield Principles to JAMS (Judicial Arbitration & Mediation Services), an independent alternative dispute resolution provider located in the United States and recognized for this purpose by the U.S. Department of Commerce. If you do not receive timely acknowledgment of your complaint, or if your complaint is not satisfactorily addressed, please visit JAMS at: https://www.jamsadr.com/eu-us-data-privacy-framework for more information and to file a complaint.

    United State privacy law provide residents with certain rights that may be applicable to you:

    Disclosure of Personal Information We Collect About You

    You have the right to know:

    • Whether we are processing your Personal Information;
    • The categories of Personal Information we have collected about you;
    • The categories of sources from which the Personal Information is collected;
    • Our business or commercial purpose for collecting or selling Personal Information;
    • The categories of third parties with whom we share Personal Information, if any; and
    • The specific pieces of Personal Information we have collected about you.

    Please note that we are not required to:

    • Retain any Personal Information about you that was collected for a single one-time transaction if, in the ordinary course of business, that information about you is not retained;
    • Reidentify or otherwise link any data that, in the ordinary course of business, is not maintained in a manner that would be considered Personal Information; or
    • Provide the Personal Information collected to you more than twice in a 12-month period.
    Personal Information Sold or Used for a Business Purpose

    In connection with any Personal Information we may sell or disclose to a third party for a business purpose, you have the right to know:

    • The categories of Personal Information about you that we sold and the categories of third parties to whom the Personal Information was sold; and
    • The categories of Personal Information that we disclosed about you for a business purpose.
    Right to Opt-outYou have the right to opt-out of the sale of your Personal Information to third parties or Service Providers, the use for targeted advertising, and profiling in furtherance of a decision that produces a legal or similarly significant effect concerning you.
    Right to AccessThe right to be provided with a copy of your Personal Information (the right of access)
    Right to Limit the Use and Disclosure of Sensitive Personal Information.The right to limit the use and disclosure of any Sensitive Personal Information about you.
    Right to Rectification or Correct Personal InformationThe right to require us to correct any mistakes in your Personal Information
    Right to be Forgotten or Deleted

    The right to require us to delete your Personal Information

    We may deny the request if the information is necessary to:

    • Complete providing a service requested or reasonably anticipated by the Opt-In Participant
    • Detect and protect against security incidents, malicious, deceptive, fraudulent, or illegal activity, or take action against those responsible for such activity
    • debug to identify and repair errors impairing intended functionality
    • Engage in research in the public interest adhering to applicable ethics and privacy laws where the Opt-In Participant has provided informed consent
    • Enable solely internal uses reasonably aligned with the Opt-In Participant’s expectations based on the Opt-In Participant’s relationship with us
    • Comply with any legal proceeding, court order, law, legal investigation, regulatory body, or other legal obligation
    • Otherwise use the information internally in a lawful manner compatible with the context in which the Opt-In Participant provided the information
    Right to Restriction of ProcessingThe right to require us to restrict processing of your Personal Information—in certain circumstances, e.g. if you contest the accuracy of the data
    Right to Data PortabilityThe right to receive the Personal Information you provided to us in a portable and readily usable format. If the Personal Information is in a platform, you may have the right to receive the information in a format that allows the transfer to another platform.
    Right to Object

    The right to object:

    • At any time to your Personal Information being processed for direct marketing (including profiling)
    • In certain other situations to our continued processing of your Personal Information, e.g. processing carried out for the purpose of our legitimate interests
    Right Not to Be Subject to Automated Individual Decision-MakingThe right not to be subject to a decision based solely on automated processing (including profiling) that produces legal effects concerning you or similarly significantly affects you
    Right Not to Be Discriminated Against

    You have the right to not be discriminated against by us because you exercised any of your rights. This means we cannot, among other things:

    • Deny goods or services to you;
    • Charge different prices or rates for goods or services, including through the use of discounts or other benefits or imposing penalties;
    • Provide a different level or quality of goods or services to you; or
    • Suggest that you will receive a different price or rate for goods or services or a different level or quality of goods or services.

    Please note that we may charge a different price or rate or provide a different level or quality of goods and services to you, if that difference is reasonably related to the value provided to our business by your Personal Information.

    Right to Appeal the Denial of an Enforcement of Your Right by Us

    You have the right to appeal the denial or failure to enforce any request of your rights listed above by us.

    You can appeal any data privacy decision or indecision we make concerning your Personal Information by emailing us and including the word “Appeal” in the subject line of the email with information sufficient to allow us to identify the original request.

  11. How to Contact us or Exercise Your Rights. If you would like to contact us or exercise any of your rights as described in this Policy, please email us at info@durohospitality.com.

    Not all of the rights listed above may apply to you depending on your state of residence and other factors, including restrictions on the number of times per year you can make certain kinds of requests. We reserve the right to evaluate your request to determine our responsibilities for complying with the request.

    If you choose to contact us directly, you will need to provide us with:

    1. Enough information to identify you (e.g., your full name, email address and phone number);
    2. Proof of your identity and address (e.g., a copy of your driving license or passport and a recent utility or credit card bill); and
    3. A description of what right you want to exercise and the information to which your request relates.

    We are not obligated to make a data access or data portability disclosure if we cannot verify that the person making the request is the person about whom we collected information, or is someone authorized to act on such person’s behalf.

    Any Personal Information we collect from you to verify your identity in connection with you request will be used solely for the purposes of verification.

  12. Updates to This Policy

    We may update this Privacy Policy periodically. Updates will be posted with a revised “Last Updated” date.

  13. Contact Us

    Duro Hospitality
    1622 Market Center Blvd
    Dallas, Texas 75207
    info@durohospitality.com