Privacy Request

PLEASE READ THE FOLLOWING TERMS OF USE AND DISCLAIMERS CAREFULLY BEFORE USING THE ONLINE SERVICES.

El Pollo Loco, Inc. (“EPL,” “we” or “our”), as a convenience to you grants you access to its website, accessible via www.elpolloloco.com, its mobile/tablet applications, loyalty programs, stored value cards and other online programs (collectively, the “Online Services”), conditioned on your acceptance of the terms, conditions and notices contained herein (these “Terms of Use”).  For the purposes of these Terms of Use, “Content” means, collectively, any content, including, without limitation any text, software, source code, applications, specifications, images, audio files, articles, and other information or content available through the Online Services.

You are also subject to the EPL Privacy Policy.  You agree that EPL may modify these Terms of Use and the Privacy Policy at any time and from time to time, with or without notice to you.  When you access, download or use any of the Online Services, you accept, without limitation or qualification, these Terms of Use as if you had signed them.  You are responsible for regularly reviewing these Terms of Use.  In addition, EPL may discontinue, or change from time to time, any Online Service without prior notice.

These Terms of Use are effective as of February 15, 2017.

ACCEPTANCE OF TERMS

Please read these Terms of Use and EPL’s Privacy Policy carefully.  By accessing, downloading or using the Online Services, you agree to these Terms of Use, and you consent to the collection and use of information as described in our Privacy Policy.  If you do not agree to these Terms of Use and the terms and conditions of our Privacy Policy, you must cease using the Online Services immediately and discontinue any use of any Content.

ADDITIONAL TERMS

Certain services offered by or through the Online Services, including mobile/tablet applications, loyalty programs, sweepstakes and other prize promotions may be governed by additional terms and conditions presented in conjunction with them.  You must agree to the additional terms before using such services.  These Terms of Use and any additional terms will apply equally.  In the event of an irreconcilable inconsistency between any additional terms and these Terms of Use, the additional terms will prevail.

USE OF THE ONLINE SERVICES

YOU MUST BE AT LEAST 13 YEARS OF AGE TO ACCESS AND USE THE ONLINE SERVICES. Some Online Services may require that you must be 18 or older to use the Online Service. The Online Services are not targeted toward, nor are they intended to be used by, anyone under the age of 13. If you are between the ages of 13 and 18, you may only use the Online Services under the supervision of a parent or legal guardian who agrees to be bound by these Terms of Use.

Unless otherwise specified, the Online Services are for your personal and noncommercial use. You may not (i) modify, copy, distribute, reverse engineer, transmit, display, perform, reproduce, publish, license, create derivative works of, transfer, or sell any Content, other than for your use of the Online Services as expressly permitted in these Terms of Use; (ii) access or attempt to access any systems or servers on which the Online Services are hosted or modify or alter the Online Services in any way; (iii) forge headers, create a false identity or otherwise manipulate identifiers in order to deceive others or disguise the origin of any Content transmitted to or via the Online Services; (iv) use any device, software or routine to interfere or attempt to interfere with the proper working of the Online Services or any business being conducted on the Online Services; (v) use the Online Services or any Content, features, or services for any unlawful, fraudulent, or malicious purposes, or to solicit any such activity.

You may display and, subject to any expressly stated restrictions or limitations relating to specific material, electronically copy, download and print hard copy portions of the material from different areas of the Online Services solely for your own noncommercial use.  Any other use of materials on the Online Services, including but not limited to the modification, reproduction, distribution, republication, display or transmission of any Content, without prior written permission of EPL is strictly prohibited.

EPL does not accept or consider unsolicited suggestions and materials, including any ideas, comments, suggestions, or the like (collectively, “Information”).  Please do not submit any Information to EPL by electronic mail, contact us forms or otherwise.  Notwithstanding the foregoing and except as otherwise provided under the Privacy Policy concerning personally identifying information, if you submit Information to EPL, such Information will be treated as non-confidential and non-proprietary.  Furthermore, you give up all intellectual property rights, including any moral, publicity and privacy rights you have in any Information.  EPL is free to use any Information, without limitation and without any compensation to you, for any purpose whatsoever, including but not limited to developing, manufacturing and marketing products using Information or editing, altering, broadcasting, posting, publishing, copying, disclosing, distributing, incorporating and otherwise using Information.  By submitting Information to EPL, you agree EPL is free to use the Information for any purpose whatsoever.

COPYRIGHTS  

The Content and the Online Services, including the selection and arrangements thereof, are copyrighted as a collective work under the United States and other copyright laws and are the sole property of EPL and/or its licensors and are protected by patent, trademark, copyright and other intellectual property laws and may not be used except in accordance with these Terms of Use or with EPL’s express written consent.  Other than as necessary for your use of the Online Services in accordance with these Terms of Use, EPL grants no other privileges or rights in the Content to you, and you must keep intact all patent, trademark, copyright and other proprietary notices on the Content.  Any Content owned by EPL’s licensors may be subject to additional restrictions.

TRADEMARKS

All trademarks, service marks, trade names and tradedress, whether registered or unregistered (collectively the “Marks”) that appear within the Online Services are proprietary to EPL or other respective owners that have granted EPL the right and license to use such Marks.  You may not display or reproduce the Marks other than with the prior written consent of EPL, and you may not remove or otherwise modify any trademark notices from any Content.

USER CONTENT

This Online Services may allow users to post, submit, or display information, messages, suggestions, questions, comments, postings, ratings, ideas, techniques, notes, know-how, drawings, concepts, designs, audio visual material, photographs and pictures, digital images, or other content in any form (collectively “User Content”).  By posting or submitting User Content on the Online Services, you hereby grant EPL an exclusive, unrestricted, transferable and sub-licensable, irrevocable, royalty-free and fully paid-up, world-wide, and perpetual license to reproduce, distribute, market, publicly display, modify, make, have made, sell and offer for sale, practice all applicable patent, copyright, moral right, mask work, trade secret, and other intellectual property rights, make derivative works of, exploit and otherwise use the User Content in any media whatsoever now known or later invented throughout the world for any purpose whatsoever, commercial or not.  You hereby disclaim any right to any compensation from EPL in connection with the EPL’s exercise of its license rights in and to the User Content you have posted on or submitted to the Online Services.  By posting or submitting the User Content on the  Online Services, you represent and warrant that you own the copyright in such User Content or that you have a legitimate license to post the User Content, including photographs or other audiovisual material, without any restrictions whatsoever. 

NOTICES AND PROCEDURES FOR MAKING CLAIMS OF COPYRIGHT INFRINGEMENT

Pursuant to Title 17, United States Code, Section 512(c)(2), notifications of claimed copyright infringement should be sent to the Online Service’s designated agent.  ALL INQUIRIES NOT RELEVANT TO OR NOT COMPLYING WITH THE FOLLOWING PROCEDURE WILL RECEIVE NO RESPONSE.  EPL respects the intellectual property of others, and we ask our users and visitors to do the same.  EPL will process and investigate notices of alleged infringement and will take appropriate actions under the Digital Millennium Copyright Act (“DMCA”) and other applicable intellectual property laws.  Upon receipt of notices complying with the DMCA, EPL will act to remove or disable access to any material found to be infringing or found to be the subject of infringing activity and will act to remove or disable access to any reference or link to material or activity that is found to be infringing.

If you believe that your work has been copied in a way that constitutes copyright infringement, please provide EPL the following information.  Please be advised that to be effective, the notification must include ALL of the following:

a physical or electronic signature of the person authorized to act on behalf of the owner of an exclusive copyright that is allegedly infringed;
a description of the copyrighted work that you claim has been infringed;
a description of where the material that you claim is infringing is located on the Online Services;
your address, telephone number, and email address and all other information reasonably sufficient to permit EPL to contact you;
a statement by you that you have a good faith belief that the disputed use is not authorized by the copyright owner, its agent, or the law;
a statement by you, made under penalty of perjury, that the above information in your notice is accurate and that you are the copyright owner or authorized to act on behalf of the owner of an exclusive right that is allegedly infringed.
Notices of claimed copyright infringement should be directed to El Pollo Loco, Inc., Attention: Legal Department, at 3535 Harbor Blvd., Suite 100, Costa Mesa, CA 92626.

IMPORTANT NOTE: THE PRECEDING INFORMATION IS PROVIDED EXCLUSIVELY FOR NOTIFYING EPL THAT YOUR COPYRIGHTED MATERIAL MAY HAVE BEEN INFRINGED.  ALL OTHER INQUIRIES, SUCH AS PRODUCT OR SERVICE RELATED QUESTIONS AND REQUESTS, OR QUESTIONS ON PRIVACY, WILL NOT RECEIVE A RESPONSE THROUGH THIS PROCESS.

TERM & TERMINATION

These Terms of Use are applicable to you upon your accessing, downloading or using the Online Services.  These Terms of Use may be modified, altered, updated or terminated by EPL without notice at any time for any reason.  Your continued use of the Online Services after such modifications, alterations or updates, as the case may be, signifies your agreement to be bound by such modifications, alterations or updates.  The provisions relating to Copyrights, Trademarks, Disclaimer, Limitation of Liability, Indemnification, Applicable Laws, and General shall survive any termination of these Terms of Use.

ONLINE ORDERING

EPL may make available to you the ability to order online from our participating El Pollo Loco restaurants. These Terms of Use apply only to orders placed through the Online Services. Any applicable fees, taxes and other amounts due in connection with your order will be identified when you place your order. There may be limits on the dollar values and number of orders that may be placed through the Online Services. You are responsible for payment of your order by means of a payment option made available through the Online Services at the time of ordering. We use third party providers and may accept various third party services to process payments. The El Pollo Loco restaurant identified when you place your order is responsible for fulfilling your order and for any questions or other communications regarding your order. Discounts, coupons and other offers may not be able to be combined with online ordering. Every participating El Pollo Loco restaurant location may not have all menu items identified through the Online Services.

LINKS TO THIRD PARTY SITES AND SOCIAL MEDIA PAGES

The Online Services may contain links to other third-party websites, including the franchised operators of El Pollo Loco restaurants, and social media platforms, such as Facebook, Twitter, or Foursquare (all links to third-party websites and social media platforms are collectively referred to herein as "External Sites"). External Sites are provided only for your convenience.  However, even if the third party is affiliated with EPL, EPL has no control over the External Sites, all of which have separate privacy and data collection practices, independent of EPL.  If you decide to visit any External Site, you do so at your own risk. EPL and its affiliates have no responsibility or liability for any External Sites, or the content, policies, or actions thereof. If you choose to purchase any product or service from an External Site, your relationship is with that third party. You agree that we are not responsible for the quality of third-party products or services, or fulfilling any of the terms of your agreement with the seller, including, but not limited to, the delivery of products and services and warranty obligations related to products and services. Links do not imply that we sponsor, endorse, are affiliated with or associated with, or are legally authorized to use any trademark, trade name, service mark, design, logo, symbol, or other copyrighted materials displayed on or accessible through such External Site.

TRANSACTIONS WITH EPL AND THIRD PARTIES

If you wish to make purchases through the Online Services or an External Site, you may be asked by us or the merchant or operator from whom you are making the purchase to supply certain information, including credit card, debit card, or other payment mechanism information. You agree not to hold EPL liable for any loss or damage of any sort incurred as a result of any such dealings. You agree that all information you provide in connection with such purchase shall be accurate, complete and current. You agree to pay all charges incurred by users of your credit card, debit card, or other payment mechanism at the prices in effect when such charges are incurred. You also will pay any applicable taxes, if any, relating to any purchases you make.

MOBILE APPS

In order to use Online Services made available through a mobile or tablet application (an “App”) you must have a compatible mobile device.  EPL does not warrant that the App will be compatible with your mobile device.

If you access the App using an Apple iOS or Android powered device, Apple Inc. or Google, Inc., and their subsidiaries, respectively, shall be a third-party beneficiary to these Terms of Use and you agree that these third-party beneficiaries have the right to enforce these Terms of Use against you. However, these third-party beneficiaries are not a party to these Terms of Use and are not responsible for the provision or support of the App. You agree that your access to the App also shall be subject to the usage terms set forth in the applicable third-party beneficiary’s terms of service.

The App may automatically download and install updates from time to time or require the downloading and installation of updates or new versions for continued use. You acknowledge that in some instances updates and/or new versions may reduce or remove features and functionality in prior versions of the App.

DISCLAIMERS

EPL makes no warranties or representations about the accuracy or completeness of the Online Service’s content or the content of any External Sites.  EPL does not filter advertisements or other content that children may view through our Online Services or “hot-linked” sites, and they could receive content and materials from the Internet and/or advertising that are inappropriate for children. We encourage parents and guardians to spend time online with their children and to consider using an electronic filtering software.

THE ONLINE SERVICES AND ANY CONTENT, PRODUCTS OR SERVICES PROVIDED VIA THE ONLINE SERVICES, INCLUDING LINKS, ARE PROVIDED "AS IS" AND WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS OR IMPLIED.  TO THE FULLEST EXTENT PERMISSIBLE PURSUANT TO APPLICABLE LAW, EPL DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE, TITLE, NON-INFRINGEMENT, FREEDOM FROM COMPUTER VIRUS, AND WARRANTIES ARISING FROM COURSE OF DEALING OR COURSE OF PERFORMANCE.  EPL DOES NOT REPRESENT OR WARRANT THAT THE FUNCTIONS CONTAINED IN THE ONLINE SERVICES WILL BE UNINTERRUPTED OR ERROR-FREE, THAT DEFECTS WILL BE CORRECTED, OR THAT THE  ONLINE SERVICES OR THE SERVER THAT MAKES THE ONLINE SERVICES AVAILABLE ARE FREE OF VIRUSES OR OTHER HARMFUL COMPONENTS.  EPL DOES NOT MAKE ANY WARRANTIES OR REPRESENTATIONS REGARDING THE USE OF THE MATERIALS IN THE ONLINE SERVICES IN TERMS OF THEIR COMPLETENESS, CORRECTNESS, ACCURACY, ADEQUACY, USEFULNESS, TIMELINESS, RELIABILITY OR OTHERWISE.  AS A CONDITION OF YOUR USE OF THE ONLINE SERVICES, YOU WARRANT TO EPL THAT YOU WILL NOT USE THE ONLINE SERVICES FOR ANY PURPOSE THAT IS UNLAWFUL OR PROHIBITED BY THESE TERMS OF USE.

LIMITATION OF LIABILITY

IN NO EVENT SHALL EPL, OR ANY OF ITS OFFICERS, DIRECTORS, EMPLOYEES, AGENTS, SUPPLIERS, LICENSORS OR THIRD PARTY PARTNERS, BE LIABLE FOR ANY DIRECT, INDIRECT, SPECIAL, PUNITIVE, INCIDENTAL, EXEMPLARY OR CONSEQUENTIAL, DAMAGES, OR ANY DAMAGES WHATSOEVER, EVEN IF EPL HAS BEEN PREVIOUSLY ADVISED OF THE POSSIBILITY OF SUCH DAMAGES, WHETHER IN AN ACTION UNDER CONTRACT, TORT, OR ANY OTHER THEORY ARISING OUT OF OR IN CONNECTION WITH ANY UNAVAILABILITY OR NONPERFORMANCE OF THE ONLINE SERVICES, ERRORS, OMISSIONS, VIRUSES AND MALICIOUS CODE.  THESE LIMITATIONS WILL APPLY NOTWITHSTANDING ANY FAILURE OF ESSENTIAL PURPOSE OF ANY LIMITED REMEDY.  BECAUSE SOME JURISDICTIONS DO NOT ALLOW LIMITATIONS ON HOW LONG AN IMPLIED WARRANTY LASTS, OR THE EXCLUSION OR LIMITATION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES, THE ABOVE LIMITATIONS MAY NOT APPLY TO YOU.  IN NO EVENT SHALL EPL’S LIABILITY FOR DAMAGES ARISING OUT OF OR RELATING TO YOUR USE OF THE ONLINE SERVICES EXCEED TEN DOLLARS.

INDEMNIFICATION

You agree to indemnify, defend, and hold harmless EPL, and its parents, subsidiaries, and affiliates, and their respective officers, directors, employees, agents, licensors, suppliers and third party partners from and against all losses, expenses, damages and costs, including reasonable attorneys' fees, resulting from any violation of these Terms of Use.

APPLICABLE LAWS

Your use of the Online Services shall be governed in all respects by the laws of the State of California, without regard to choice of law provisions.  You agree that jurisdiction over and venue in any legal proceeding directly or indirectly arising out of or relating to the Online Services shall be in the state or federal courts located in California.  Any cause of action or claim you may have with respect to the Online Services must be commenced within one (1) year after the claim or cause of action arises.  EPL’s failure to insist upon or enforce strict performance of any provision of these Terms of Use shall not be construed as a waiver of any provision or right.  Neither the course of conduct between the parties nor trade practice shall act to modify any of these Terms of Use.  EPL may assign its rights and duties under these Terms of Use to any party at any time without notice to you.

GENERAL

EPL may revise these Terms of Use at any time by updating this posting.  You should visit this page from time to time to review the then-current Terms of Use because they are binding on you.  Certain provisions of these Terms of Use may be superseded by expressly designated legal notices or terms located on particular sections or pages on or within the Online Services.  If any provision of these Terms of Use is held to be invalid, illegal or unenforceable in any respect under any applicable law or rule in any jurisdiction, such invalidity, illegality or unenforceability will not affect the effectiveness or validity of any provision in any other jurisdiction, and these Terms of Use will be reformed, construed and enforced in such jurisdiction as if such provision had never been contained herein.  You agree that no joint venture, partnership, employment, or agency relationship exists between you and EPL as a result of these Terms of Use, our Privacy Policy or any use of the Online Services.  EPL’s performance of these Terms of Use is subject to existing laws and legal process, and nothing contained in these Terms of Use or our Privacy Policy is in derogation of EPL’s right to comply with law enforcement requests or requirements relating to your use of the Online Services or information provided to or gathered by EPL with respect to such use.  Except as expressly provided herein, these Terms of Use and our Privacy Policy constitute the entire agreement between you and EPL with respect to the Online Services, and they supersede all prior or contemporaneous communications and proposals, whether electronic, oral or written, between you and EPL with respect to the Online Services.  We may provide notice to you hereunder by posting announcements to the Online Services. 

NOTICES

Except with respect to notices of alleged copyright infringement, which must be submitted as described above, and unless explicitly stated otherwise in the Online Services, you must provide all notices or complaints to EPL via email to legal@elpolloloco.com or mail at El Pollo Loco, Inc., Attention: Legal Department, 3535 Harbor Blvd., Suite 100, Costa Mesa, CA 92626. 

PRIVACY POLICY

EXTERNAL PRIVACY POLICY
ISSP-PP-001

This policy was last updated on December 30, 2019.

INTRODUCTION

At El Pollo Loco, Inc. (“EPL”), our Mission is to Feed the Love that Makes us All Feel Like Family. Treating our valued customers like family means we respect, value, and safeguard the personal information you provide to us. At EPL, your Privacy is a high priority. This Privacy Policy describes how EPL, and its subsidiary and affiliated entities, collect, use, and disclose personal information of visitors to our restaurants and websites, and users of our mobile application, loyalty programs, and other online services. This policy applies to all personal information we may collect about you, via each of the means referenced below. EPL’s Privacy Policy does not apply to our franchisees. Please see our franchisees’ privacy policies for information on how they use customer information that they separately collect in their restaurants.

POLICY SUMMARY

The following summary provides highlights of our policy, but please read further below to review our full policy.

INFORMATION WE COLLECT

We collect various types of information about you, including:

  • Information you provide to us;
  • Information we collect about your use of our websites, mobile application, and other online services; and
  • Information we obtain from third parties, such as those providing services to us to improve your customer experience.

We also may collect information in ways that we describe to you at the time we collect it or via other means, with your consent.

USE OF INFORMATION

We use the information we collect about our customers for the following business purposes:

  • To communicate with you regarding our products, offers, promotions;
  • To facilitate business transactions such as the purchase of food from our restaurants;
  • To deliver targeted advertising, including offers and promotions;
  • To learn more about our customers in order to improve our customers’ experience with EPL; and
  • To manage online and other services your request from EPL

We may also use information we collect about you for other business purposes when you consent or otherwise request that we do so.

COOKIES AND ONLINE ADVERTISING

As with most companies, when you use EPL’s websites and online services, we may use cookies, web beacons, do-not-track signals, and other related technologies to improve and customize the advertisements you see and your overall experience with our services. See below for additional information about our collection of information using these technologies.

DISCLOSURE OF INFORMATION

We may disclose to or share the personal information we collect about you to the following parties:

  • Business partners and service providers, including those that provides advertising or social media services;
  • Companies and entities affiliated with EPL;
  • Franchisees of EPL; and
  • Other parties when required or permitted by applicable law, such as to protect our consumers and their data, or to facilitate a transaction such as the purchase of food

DATA SECURITY

Although EPL cannot guarantee security of our online services or information transmitted over the Internet, we have put in place certain procedures to safeguard your personal information when it is in our control. Please see the full policy below for more information regarding data security.

YOUR DATA PRIVACY RIGHTS

Your personal information is important. Please see below for information regarding EPL’s websites and online services, links to third-party sites, your privacy rights under California law, and children’s privacy.

PRIVACY POLICY

This Privacy Policy describes how El Pollo Loco, Inc. (“EPL”) and its subsidiaries and affiliated companies (collectively, "EPL", “we”, or “our”) collect, use and disclose personal information of customers and others who visit our restaurants or our websites, as well as users of our online services and others to whom we expressly provide that this Privacy Policy will apply. This policy applies to data collected when you visit and use EPL’s website, mobile or tablet applications, or loyalty programs, and to data collected in restaurants, and other on-line services or platforms (collectively, the “Services”). With respect to personal information collected via the Internet, this Privacy Policy outlines the types of personal information that you may provide to us on any Services controlled by EPL which link to this Privacy Policy, and it explains how EPL handles such personal information. This Privacy Policy does not apply to websites or applications that do not link to this Privacy Policy or to third-party websites to which the Services may link. Your use of the Services is subject to this Privacy Policy and any additional terms and conditions that may be applicable to such Services, including EPL’s Terms of Use.

Please note that if you are a California resident you may have additional rights as set forth in the California Privacy Notice below.

COLLECTON OF PERSONAL INFORMATION

We collect personal information about customers and users of our Services in a variety of ways. We may collect information you provide to us, information we collect through your use of the Services, and information we collect from our third-party business partners and from publicly available sources.

Information You Provide to Us

We collect personal information from you when you voluntarily use or engage with the Services, such as providing general comments, making purchases of food or gift cards in one of our restaurants, online, or through our mobile application, registering for sweepstakes or contests, participating in our loyalty programs, and content submissions. For example, you may submit your name, postal address, e-mail address, IP address, phone number, gender, and/or birthdate in order to receive information about various subjects, register for or participate in programs, contact customer service, make purchases, or respond to surveys.

In order to process a financial transaction you request, such as the purchase of food or gift cards in a restaurant, through our mobile app, or online, we [Our Third-Party processor] may collect credit card information such as your credit card number, security code, the card’s expiration date, and a signature. When you enter one of our restaurants, we may collect information through our security cameras.

It is always your option to provide your personal information, but you may not be able to participate in some or all of the Services if you choose not to provide your personal information. By providing personal information through the Services, you explicitly consent to our collection and use of all such personal information as described in this Privacy Policy. If you submit someone else’s personal information to us (e.g., someone else’s contact information), you represent that you are authorized to provide this information to us.

INFORMATION COLLECTED AUTOMATICALLY

When you visit or use our Services, EPL may collect certain personal information by automated means. We may use “cookies” to store certain personal information on your computer that allows us to customize your use of EPL’s Services or to simply facilitate signing into the Services. A cookie is a small file placed on the hard drive of your computer. You may refuse to accept browser cookies by activating the appropriate setting on your browser. However, if you select this setting you may be unable to access certain parts of our Services. Unless you have adjusted your browser setting so that it will refuse cookies, our system will issue cookies when you direct your browser to our Services. You can set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. To learn how you can manage your Flash cookie settings, visit the Flash player settings page on Adobe’s website. If you disable or refuse cookies, please note that some parts of our websites may then be inaccessible or not function properly.

The personal information we collect through cookies and tracking technologies may include your Internet Protocol (IP) address, computer/mobile device operating system and browser type, type of mobile device, the unique device identifier (UDID) or mobile equipment identifier (MEID) for your mobile device, the address of a referring web site (if any), and the pages you visit on our Services. We may use this personal information to operate, maintain, and manage our Services and to provide services such as technical support. In addition, we may collect certain personal information using various tracking technologies, Internet tags, and web beacons such as number of visitors/users of the Online Services, but only in an aggregate and non-personally identifiable form.

For each user of EPL’s Services, EPL’s Web server automatically recognizes and stores computer-readable personal information such as the visitor’s IP address and domain name combination. This is typically anonymous information automatically provided by your computer. We use this personal information to follow visitor traffic patterns through the Services to improve user experience.

INFORMATION COLLECTED THROUGH YOUR USE OF THE SERVICES

When you use the Services, such as EPL’s website or mobile application (the “App”) and related content, we may collect information about your use of these Services. The information automatically collected may include:

Usage Details. Certain details of your access to and use of the App, including traffic data, location data, logs and other communication data and the resources that you access and use on or through the App.

Device Information. Information about your mobile device and internet connection, including the device’s unique device identifier, IP address, operating system, browser type, mobile network information and the device’s telephone number.

Stored Information and Files. Metadata and other information associated with other files stored on your device. This may include, for example, photographs, audio and video clips, personal contacts and address book information.

Geolocation: Our App and mobile versions of our website may collect precise personal information about the location of your mobile device using location awareness technologies such as GPS, Wi-Fi, Bluetooth or cell tower proximity if you have consented to such tracking.

Depending on the permission settings of your personal mobile device(s) and the permission settings you choose for EPL’s mobile application, when using the App we may also collect or have access to your:

  • Camera. If you enable this functionality, the App may access the camera to scan and input payment method details.
  • Wi-Fi connection information. If you enable this functionality, this may allow the App to view Wi-Fi connections.
  • Other. Depending on the transactions or services you choose, the App will send and receive data to and from the Internet, enable network access, control vibration of your device, or prevent your device from sleeping.

By adjusting the permissions either in your mobile device settings or your settings for the App, you may enable or disable location tracking. Please note, however, that even if you disable location services, other means of establishing or estimating location may exist and be used (such as connecting to WiFI, your device’s proximity to a WiFi network, Bluetooth technology, beacons, or our networks). Note also that if you enable location tracking, you may allow the App to track your location in the background, which can decrease battery life.

EPL may combine the personal information you provide through the Services with personal information we may collect off-line from you or from third parties.

INFORMATION COLLECTED BY OR THROUGH THIRD PARTIES

We may work with certain third parties who use one or more automated information collection technologies to collect information about you or your mobile or computing device. These third parties may include:

  • Advertisers, ad networks and ad servers.
  • Analytics companies.
  • Your mobile device manufacturer.
  • Your mobile service provider.

We or these third parties may use tracking technologies to collect information about you when you use the App. The information collected may be associated with your personal information or may include information, including personal information, about your online activities over time and across different websites, apps, and other online services websites.

Some functionality provided by the Services may allow you to log in via one or more of your third-party social media accounts or share information or content from the Services in or through your social media platforms. We may combine information we collect about you with information we obtain from these or other publicly or commercially available third party sources, as permitted by law. When you submit information to a third party, you are subject to that third party’s terms of use and privacy policies, for which we are not responsible.

DO-NOT-TRACK AND OTHER CHOICES WITH RESPECT TO ONLINE ADVERTISING

If your Internet browser employs blocking or “Do Not Track” technology that limits recognition or the collection of such computer-readable personal information, EPL will not alter or bypass such technology. EPL does not provide access to third parties to track your personal information through your use of the Services, but EPL may allow third parties to access certain personal information you provide as described in the Use and Disclosure of Your Personal Information Section below. For websites, you may opt-out of certain tracking, however, by disabling cookies through your browser or by visiting the opt-outs provided by the Network Advertising Initiative, Digital Advertising Alliance, and Google.

For more information regarding managing the privacy of your information with respect to online advertising, and to learn how to opt-out of having your information collected by these networks, please visit: http://www.youradchoices.com, http://www.aboutads.info/appchoices, http://www.networkadvertising.org, or https://www.networkadvertising.org/mobile-choice. To opt out in mobile apps, please download the Digital Advertising Alliance’s AppChoices tool at http://www.aboutads.info/appchoices and adjust the advertising preferences on your mobile device. Please note that we are not responsible for the opt out process of third parties.

USE OF YOUR PERSONAL INFORMATION

The privacy of your personal data is important. EPL will only use the personal information we collect about you for the purposes described in this Privacy Policy. Generally, EPL may use the personal information you provide, or that we collect from other sources, for our general business purposes, such as responding to your requests or questions, processing transactions such as food or gift card orders, to fulfill the purpose for which you provided it, communicating about customer service, informing you about others’ products or services you might find interesting, or personalizing our Services to meet your needs or preferences, or for marketing our products and services to you.

More specifically, EPL may use the personal information we collect about you for the following purposes:

  • To facilitate your use of the Services;
  • To improve your user experience with the Services;
  • To conduct or facilitate business transactions, such as processing payment information for food or gift card purchases;
  • To enable and facilitate participation in our gift card, mobile app, loyalty and other program;
  • To communicate with you about our restaurants and the Services, including through interest-based (behavioral) and other targeted advertising and content;
  • To respond to your requests, comments, questions, or feedback;
  • To register you for accounts on the Services, such as EPL’s loyalty program;
  • To provide you with marketing communications, such as promotions or offers, new product information, and information about our restaurants
  • To register you for SMS, email and/or mailing lists for marketing communications;
  • To provide location-based services;
  • To perform analyses of the various features and functionality of the Services for our marketing purposes;
  • To analyze and understand your and other consumers’ interaction with EPL and the Services, including your demographic information, EPL-related behavior and your preferences and interests, so that we may improve our products and the Services to delight our customers;
  • To enable “Share With a Friend” or related services. (Note that unless and only where it is permitted by law, we do not use the contact information you provide for “Share With a Friend” functionality for other unrelated purposes without your consent or that of the recipient, if and as applicable.);
  • To prevent, identify, investigate, or take action concerning suspected or actual illegal activity, or any activity that violates our policies, either in restaurant or online; or
  • For any other purpose, with your consent where appropriate.

With respect to location information in particular, EPL uses this personal information for location-based services that you request, such as locating nearby EPL restaurants, identifying special offers that may be of interest to you, or personalizing your interactions with EPL. For most mobile devices, you can withdraw your permission for EPL to acquire location information through the device settings. If you have questions about how to disable your mobile device's location services, we recommend you contact your mobile device service provider or the device manufacturer. If you would like us to delete location personal information we have collected, please contact us at the email or postal address listed below. Please note that the applications may not function properly following deletion, and that we may be required by law to retain certain personal information.

See the chart below for more information about how we use personal information we collect about you.

DISCLOSURE OF YOUR PERSONAL INFORMATION

In order to fulfill the purposes described above, we may disclose your personal information to third parties as set forth below:

  • To our subsidiaries, affiliates and franchisees who are restricted to using such information in accordance with this Privacy Policy.
  • To our vendors and service providers who provide services or perform functions on our behalf, (including but not limited to, Punchh Loyalty, Heartland Payment Systems, IBM Marketing Cloud, Google Analytics, Facebook, Oracle Data Cloud, Place IQ, BlueLithium, Quantcast, Rocket Fuel, and Envysion) who are bound by obligations to keep personal information confidential and use it only for the purposes for which we disclose it to them. This includes providing personal information to social media companies which you connect with the Services and other third parties who provide content, advertising, or other functionality related to the Services.
  • To third parties with your consent.
  • To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of EPL’s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by EPL’s services’ users is among the assets transferred.
  • To comply with any court order, law, or legal process, including to respond to any government or regulatory request.
  • To enforce or apply our EPL Website terms of use, Online Ordering Terms of Sale and other agreements, including for billing and collection purposes.
  • If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of EPL, our customers, or others. This includes exchanging personal information with other companies and organizations for the purposes of fraud protection and credit risk reduction.
  • We may also publicly post on our Services certain user-generated content you submit to us.

We may also disclose aggregated personal information about our users, and personal information that does not identify any individual.

In all instances the personal information will be used only for the purposes enunciated in this Privacy Policy.

EPL fully encourages all parents to supervise their children's on-line activities and regularly monitor their children's use of the Internet, including use of EPL’s Services. Parents should consider using parental control tools and other services to assist them in supervising their children's on-line use or on-line disclosure of their name, address or other personal information without parental consent.

THIRD-PARTY INFORMATION & MOBILE APPLICATION COLLECTION, ANALYSIS AND TRACKING

EPL’s Services and communications through the Services may contain links and pointers to other third party websites, including, without limitation, websites for employment applications, advertising, and social media platforms. This Privacy Policy does not apply to these third party websites, and we are not responsible for the privacy practices, policies, or content of any such third party websites, even if you link to them through the Services or communications related to the Services. We have no control over how such third party websites collect or use personal information, and we have no responsibility for any personal information you provide or content you post on such third party websites. We encourage you to read and understand the privacy policies of any third party websites that you visit.

CORRECTING, ACCESSNG, & DELETING YOUR INFORMATION

You can change or review your personal information by logging into your account on the applications provided through the Services and visiting your account profile page. We cannot delete your personal information except by also deleting your user account. We provide you with the ability to access, rectify, port and erase your data. We store data until such data is no longer necessary to provide our Services or until your account is deleted, whichever comes first. We may not accommodate a request to change information if we believe the change would violate any or legal requirement or cause the information to be incorrect. Regarding information about children, see above re Children Under the Age of 13.

NOTICE TO CALIFORNIA CONSUMERS

This Notice to California Consumers contains the disclosures required under the California Consumer Privacy Act (“CCPA”). For individuals who are California residents, the CCPA requires certain disclosures about the categories of personal information we collect and how we use it, the categories of sources from whom we collect personal information, and the third parties with whom we share it.

California residents may request a list of certain third parties to which we have disclosed personally identifiable information about you for their own direct marketing purposes. You may make a personal information request twice in a 12-month period, so that EPL can collect information from the requesting party so that it can verify your identity, and that EPL will respond within 45 days of receiving a personal information request.

You have the following rights under the CCPA:

  • Right to know about personal information collected, disclosed or sold

California residents have the right to request that we disclose what categories of personal information that we collect, use, disclose or sell about you. You may also request the specific pieces of personal information that we have collected about you. You may only make two such requests in a 12-month period, and the information provided need only cover the 12-month period prior to your request.

  • Right to request deletion of your personal information

You may also request that we delete any personal information that we have collected from you, provided that we may retain personal information as authorized under the CCPA, including, but not limited to, retaining personal information necessary to provide our Services, detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, debug to identify and repair errors that impair our Site and Services, to enable solely internal uses that are reasonably aligned with your expectations based on the your relationship with us, comply with a legal obligation, or otherwise use your personal information, internally, in a lawful manner that is compatible with the context in which your provided it. If you are a California resident, you may exercise your rights under the CCPA and submit your requests in one of the following methods: (a) by submitting this online form; (b) by calling the following toll free number 877-EPL-4YOU (877-375-4968). You may also receive information about how to submit a request by visiting one of our restaurants.

NOTE: we do not sell your personal information as that term is defined in the CCPA or under Nevada Law (Section Chapter 603A of the Nevada Revised Statutes). We may provide your personal information to service providers that perform services on our behalf, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytic services, or providing similar services on behalf of EPL. Such service providers are prohibited retaining, using, or disclosing the personal information for any purpose other than for the specific purpose of performing the services for us.

In order to submit a request, we will need to verify your identity. If you have an account with us that is password-protected, we may verify your identity through our existing authentication practices for your account. We may request two or more data points of personal information and other proof of identification depending on the nature of the request and the personal information requested to verify your identity.

Please note that following your verified request, we will send you your personal information from the following email address: IRM Notification <no-reply@trustarc.com>. (Any response to your request, including any personal information may be sent as an encrypted file).

We will process and respond to your request within 45 days (in some cases, as is allowed under the CCPA, this process may be extended by an additional 45-90 days).

Please note that once you have submitted a request, we will send you a receipt, acknowledging your request, within 10 days. If, for some reason, you do not receive such a receipt within 10 days of your submitted request, please send us an email to privacy@elpolloloco.com as an error may have occurred.

As a California resident, you also have the right to designate an agent to exercise these rights on your behalf. We may require proof that you have designated the authorized agent to act on your behalf and to verify your identity directly with us. Please contact us at privacy@elpolloloco.com for more information if you wish to submit a request through an authorized agent.

We hereby inform you that if you exercise any of your rights under the CCPA, we may not deny you goods or services for that reason, or subject you to different prices than those paid by other consumers, unless provided otherwise under the CCPA, Federal, or State law.

Notice of Information We Collect

Pursuant to California Civil Section 1798.100(b), this serves as notice of the categories of personal information that we collect through the Site and at our locations and the commercial purposes for which we collected that information. All of the categories of personal information we collect about you (as detailed below) come from the following categories of sources:

  • You, including through your use of our Site and Services and on behalf of any students that you enroll for our Services
  • Automatically collected from you
  • Our affiliate companies and franchisees
  • Third parties

In particular, we have collected the following categories of personal information from California consumers within the last twelve (12) months for the following purposes:

Category

Collected

Purpose

A. Identifiers.

YES

Limited to name, email, and ip address, for loyalty, email campaigns, and online ordering systems

B. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)).

YES

Limited to name, phone number, address, credit card number, and signature, which may be used for online order processing purposes

C. Protected classification characteristics under California or federal law.

YES

Limited to age and gender which may be used by our loyalty and offers platform

D. Commercial information.

YES

Limited to your El Pollo Loco purchase history

E. Biometric information.

NO

N/A

F. Internet or other similar network activity.

YES

Limited to interactions with the El Pollo Loco website or iOS/Android APPS

G. Geolocation data.

YES

Some 3rd parties such as Facebook may use Geolocation data for advertising purposes, related PII is not stored or shared with El Pollo Loco

H. Sensory data.

YES

Limited to video and audio in restaurant through our security camera systems. Used to assure physical safety and security in our restaurants. Not used for identification or linking to consumer activity.

I. Professional or employment-related information.

NO

N/A

J. Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)).

NO

N/A

K. Inferences drawn from other Personal Information.

YES

Limited to ordering preferences for marketing purposes. Some 3rd parties such as Facebook may be evaluating other preferences or characteristics.

NOTICE OF DISCLOSURES OF PERSONAL INFORMATION FOR A BUSINESS PURPOSE

In the past 12 months we have disclosed the following categories of personal information listed in Section A through K above for one or more business purposes. Such disclosures have been made to service providers and other recipients as listed in the Section entitled “DISCLOSURE OF YOUR PERSONAL INFORMATION.” In addition, please note that user generated content may be disclosed to other users of our website and Services.

The definition of “business purpose” is as follows:

  • Auditing related to a current interaction with the consumer and concurrent transactions, including, but not limited to, counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with laws and other standards;
  • Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity;
  • Performing services on behalf of the business, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytic services, or providing similar services on behalf of the business;
  • Debugging to identify and repair errors that impair existing intended functionality;
  • Short-term, transient use, provided the personal information is not disclosed to another third party and is not used to build a profile about a consumer or otherwise alter an individual consumer’s experience outside the current interaction, including, but not limited to, the contextual customization of ads shown as part of the same interaction;
  • Undertaking internal research for technological development and demonstration; and
  • Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the company, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business.

INFORMATION SECURITY

EPL takes great pride and care in maintaining the safety and security of your personal information and in preventing its unauthorized access by employing appropriate technology and internal procedures. When we transmit sensitive personal information through our Services, we protect it by encryption, such as Secure Socket Layer (SSL) protocol. However, EPL does not guarantee that unauthorized access is completely preventable in every circumstance, as no method of electronically storing or transmitting data is completely secure. It is highly recommended that you monitor your credit card activity and use of your personal information on a regular basis.

The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of our Services, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.

Unfortunately, the transmission of information via the internet is not completely secure. Although we strive to protect your personal information, we cannot guarantee the security of your personal information transmitted via our Services. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained in the Services.

CONSENT

Your continued use of the Services constitutes your agreement to this Privacy Policy and any updates. By accepting the terms of this Privacy Policy, you are consenting to the collection and processing of all personal information provided by you through your use of the Services and sharing of such personal information in accordance with the terms of this Privacy Policy.

UPDATES TO OUR PRIVACY POLICY

EPL will update this Privacy Policy annually or if a change in business is impactful to assure that we are open and transparent about the categories and elements of personal information that we collect directly from you. For any material change to this Privacy Policy, particularly any change relating to the collection and use of your personal information, we will notify you (for example, by posting a notice with the Services or sending an e-mail to an e-mail address that you had agreed to provide). You are responsible for ensuring we have an up-to-date active and deliverable email address for you, and for visiting our Services and this privacy policy to check for any revisions to stay informed about our use and protection of your personal information.

REVOCATIONS OF POLICY AND QUESTIONS

Please feel free to contact us to discuss concerns or expectations or to raise your concerns and contact authorities if you feel we have not adequately fulfilled our obligations or respected your rights under the law. You may revoke acceptance of the terms of this Privacy Policy, request that your e-mail address or other personal information is not shared, or send any other inquiries about our practices relating to personal information and Privacy Policy by clicking the “PRIVACY REQUEST” button on this policy page.