See Supplemental CCPA and U.S. Privacy Laws Notices — Notice at Collection (Part 1, Section F below).
To offer the Bubbakoo’s Burritos Rewards program (the “Services”), Bubbakoo’s Burritos (“Merchant”) has engaged Thanx, Inc. (“Thanx”) as a service provider to operate the mobile applications, websites and related online services that support the Services (the “Platform”).
This Privacy Policy explains the types of personal information Thanx collects on behalf of Merchant via the Platform, how Thanx may use and share that information on behalf of Merchant in the course of operating the Platform, and the choices you have within the Platform to manage your personal information.
Merchant is responsible for any personal information collected in connection with the Services, including any information you provide on the Platform.
Information You Provide
Personal information that you may provide on the Platform includes:
• Contact data, such as your name, phone number, email address, postal address.
• Profile data, such as the username and password you set for your account on the Services as well as your age, date of birth, gender, and other information you include in your Services account profile.
• Payment data, such as your payment card number and other billing information. This information is handled by Stripe and Basis Theory.
• Order data, such as information about orders you place with Merchant and the deliveries of those orders.
• Image data, such as pictures of order receipts you place with Merchant to receive loyalty credit.
• Communications, such as information about you that you provide when you correspond with Merchant.
• Account preferences, such as your preferences for receiving our communications and any other preferences you set in your account on the Platform.
Automatically Collected Information
When you use the Platform, Thanx and other service providers and advertising partners may automatically log information about you, your computer or mobile device, your activity over time, and your interactions with marketing communications, such as:
• Device data, such as your device’s operating system type and version, manufacturer and model, browser type, mobile application/SDK version, screen resolution, RAM and disk size, CPU usage, device type, internet protocol (IP) address, unique identifiers, API keys, language settings, mobile device carrier, radio/network information, time zones, and general location information.
• Online activity data, such as pages or screens you viewed, how long you spent on a page or screen, the website you visited before browsing to the Platform, navigation paths between pages or screens, information about your activity on a page or screen, access times, and duration of access.
• Precise geolocation when authorized by you through the Platform.
Cookies and Similar Technologies
Some of the automatic collection described above is facilitated by cookies and similar technologies:
• Cookies are small data files stored on your device for record-keeping purposes. The Platform may use cookies to save your login information, enable certain features, better understand how you interact with the Platform, and monitor usage and web traffic routing.
• Web Beacons (also known as pixel tags or clear GIFs) are tiny graphics with a unique identifier that may be included on the Platform for several purposes, including to deliver or communicate with cookies, track and measure the performance of the Platform, track when email messages are opened, and monitor the effectiveness of advertising.
• SDKs.
The personal information collected through the Platform will be used to facilitate the Services you receive from the Merchant. This may include:
• Providing, operating and improving the Services and Platform;
• Enabling the functionality of the Platform, including to authenticate you, enable features, prevent fraud, implement security measures, ensure server up-time, minimize crashes, and improve scalability and performance;
• Communicating with you about the Services, including by sending announcements, updates, security alerts, and support and administrative messages;
• Sending you Merchant-related service messages, such as text messages about the status of an order or delivery;
• Understanding your needs and interests, and personalizing your experience;
• Providing support for the Services, and responding to your requests, questions and feedback.
Merchant may also use personal information for other purposes, including:
• To analyze user behavior and for research and development purposes;
• To send you direct marketing communications, such as marketing emails and text messages, where permitted by applicable laws;
• For interest-based advertising, such as to display ads on other online services, including through the use of third-party advertising cookies;
• To comply with applicable laws, lawful requests, and legal process; to protect rights, privacy, safety or property; to enforce the terms and conditions that govern the Services; and to prevent, identify, investigate and deter fraudulent, harmful, unauthorized, unethical or illegal activity.
Sharing with Thanx to Operate the Platform
Because the Platform is operated by Thanx, any information you provide via the Platform, or that Merchant inputs to the Platform, may be hosted and stored by Thanx on Merchant's behalf. Thanx uses this information to provide the Platform under contract with Merchant and in accordance with Merchant's instructions and applicable laws. Thanx may also rely on other third-party service providers that help it operate the Platform, such as hosting, information technology, support, email and text message delivery, and website analytics services.
Sharing Initiated by Merchant
Merchant may share personal information through integrations in the Platform to provide services to you and for other purposes. For example, Merchant may enable third party software integrations, such as Olo, Toast, DoorDash, and Uber, to facilitate online ordering, point-of-sale, and delivery services. Merchant may also share personal information with advertising partners via integrations in the Platform, such as Klaviyo, Braze, and others for the purpose of sending marketing campaigns.
• Opt-out of offers and promotional communications: You can opt out of promotional emails and text messages by following the instructions provided in the communication you receive.
• Changing or deleting your account information: You can review, update, correct or delete the personal information accessible from your accounts by contacting support@thanx.com.
Links to Other Sites
The Platform may contain links to other websites. A link to a website is not an endorsement, authorization or representation of any affiliation with that third party, nor is it an endorsement of their privacy or information security policies or practices.
Children
The Services are not intended for use by children under 18. If a parent or guardian of a child believes the child has provided personal information without their consent as required by law, please contact customersupport@bubbakoos.com.
“Do Not Track” Signals
The Platform currently does not respond to “Do Not Track” signals. To find out more, please visit http://www.allaboutdnt.com.
Sale or Sharing of Personal Information — Right to Opt-Out
Cookies and other similar technologies may be used to help advertise Merchant’s services on other websites or services you might visit. Merchant may also share information with advertising networks and analytics partners to support interest-based advertising, which may qualify as a “sale” or “sharing” of personal information. You can opt-out of our use or sharing of personal information for these purposes by contacting us.
Collection of Sensitive Information
Merchant only uses precise geolocation if you have consented by enabling location access through the Services and solely for purposes of providing you with goods or services you have requested.
Consumer Rights.
Consumers may contact Merchant by email at customersupport@bubbakoos.com with “Privacy Request”
in the subject line to exercise the following rights:
1. Request to Disclose (at no charge) — specific pieces of personal information collected about you; categories of personal information collected, used, and/or disclosed about you; categories of sources from which personal information is collected; business and/or commercial purposes for collecting and disclosing your personal information; and categories of third parties with whom your personal information has been disclosed/shared.
2. Request to Delete (at no charge) — except as exempted pursuant to CCPA 1798.105 and applicable U.S. Privacy Laws.
3. Request to Correct (at no charge) — requests to correct any inaccurate personal information collected by Thanx.
Deletion Requests can also be submitted by mail to: Bubbakoo’s Burritos, Attention: Privacy Request to Delete, 1670 RT 34 North, Suite 1C, Wall, NJ 07727.
Non-Discrimination Policy
You have the right not to receive discriminatory treatment for exercising any rights conferred by the CCPA and applicable U.S. Privacy Laws.
Right to Appeal
If your jurisdiction allows you to appeal a decision made in connection with your attempt to assert a right under applicable U.S. Privacy Laws, you may file an appeal by contacting us at privacy@merchant.com. Please provide the state that you are writing from, accompanied with documentation you may have regarding the matter you are appealing.
California Financial Incentive Notice
When you participate in the Services, you allow us to collect, use, and retain personal information on an ongoing basis, including your name, email address, phone number, preferred service locations, and at your option, birth date, gender, and payment data. In exchange, you will be able to earn discounts on purchases, free items, personalized customer experiences, reward points, and other financial incentives.
Contact
If you have any questions about this Privacy Policy, please contact us at customersupport@bubbakoos.com.
Effective Date: January 1, 2026
These Terms of Service ("Terms") govern the use and access of the Bubbakoo's Burritos loyalty rewards and customer engagement program made available through thanx.com/bubbakoosburritos and/or order.thanx.com/bubbakoosburritos and as an application for mobile devices (the "Services"). The Services are owned and operated on Merchant's behalf by Thanx Inc. ("Thanx"), a third-party service provider of Merchant.
By accessing or using the Services, you agree to be bound by these Terms.
In order to be eligible to enroll for and redeem Rewards, you must:
The Loyalty Program is subject to all applicable laws and regulations and is VOID WHERE PROHIBITED.
In order to enroll for and redeem Rewards, you will have to create an account. You may only create one account and it is non-transferable to a third party. When you create an account, you agree to provide accurate, current and complete information about yourself. You are responsible for safeguarding your account and are responsible for activities that occur under your account. Notify us immediately if your account has been compromised.
The means by which you can earn promotional rewards may include: (i) a digital "punch card" experience; (ii) opportunities to earn points that may be redeemed for rewards ("Points"); and (iii) other similar experiences where eligible spending or activity will earn you rewards (collectively, "Rewards").
Points are earned at a rate of 1 point for $1 spent.
By enrolling in Rewards and registering a payment card ("Linked Card"), you agree that the payment card network on which your payment card is issued may examine transactions on your Linked Card to identify Qualifying Actions and share transaction data with Bubbakoo's Burritos and Thanx.
Not all payment cards are eligible for use to earn Rewards. For example, corporate purchasing cards, HSA, FSA cards, government-administered prepaid cards (including EBT cards), insurance prepaid cards, and Visa Buxx are not eligible. If you use a PIN when paying with your Linked Card, the transaction will not count toward Rewards.
At the time a Reward Opportunity is made available to you, Reward Opportunity-specific terms will be made available to you which may include details related to: (i) what actions may be required to earn Rewards; (ii) what Rewards are available; (iii) expiration details; and (iv) how you can redeem your Rewards.
All Rewards are provided by and redeemable only with Bubbakoo's Burritos. Thanx is not responsible for the Rewards or the terms under which Rewards are made available.
Reward Progress:
Rewards Expiration will vary. You should review the Reward Opportunity Terms presented to you. Rewards will expire pursuant to the Reward Opportunity Terms or as otherwise set forth in the Termination section below.
Verifying Your Account: It may take up to 7 days after a Qualifying Action is made for your Reward Progress to be viewable via your account. Contact support@thanx.com if it has been more than 7 days and the Reward Progress has not been applied. Requests received after 21 days of a Qualifying Action may not be eligible to be credited.
You hereby release Thanx, and Thanx's respective affiliates, officers, directors, employees, agents, successors, assigns, and service providers from any and all claims, demands, liabilities, losses and damages of every kind and nature arising out of or in any way connected with your use of the Services and any disputes between you and Bubbakoo's Burritos.
You agree that you will not: (1) access or tamper with the Services or our computer systems; (2) gather and use information such as user names or email addresses to transmit unsolicited advertising; (3) use the Services for any commercial purpose not authorized by these Terms; (4) violate any applicable law or regulation; (5) use any robot, spider, scraper, or other automated data gathering tools without our permission; or (6) encourage or enable any other individual to do any of the foregoing.
Additionally, the following activities are prohibited:
You may cancel your account at any time through the Services or by sending an email to support@thanx.com. We may terminate, modify, or suspend the Loyalty Program as well as your access and your account, at our sole discretion, at any time for any reason.
Accounts that remain inactive for more than 6 months may be subject to automatic cancellation. Once your account is cancelled, you will lose all of your accumulated Rewards and Reward Progress.
THE SERVICES ARE PROVIDED "AS IS" AND ON AN "AS AVAILABLE" BASIS, WITHOUT WARRANTY OF ANY KIND. TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, BUBBAKOO'S BURRITOS AND ITS SERVICE PROVIDERS EXPRESSLY DISCLAIM ALL WARRANTIES OF ANY KIND, WHETHER EXPRESS, IMPLIED, OR STATUTORY.
TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT WILL BUBBAKOO'S BURRITOS OR OUR SERVICE PROVIDERS BE LIABLE FOR ANY SPECIAL, INCIDENTAL, INDIRECT, PUNITIVE, OR CONSEQUENTIAL DAMAGES WHATSOEVER. MERCHANT AND OUR SERVICE PROVIDERS' TOTAL LIABILITY TO YOU FROM ALL CAUSES OF ACTION AND UNDER ALL THEORIES OF LIABILITY WILL NOT EXCEED ONE HUNDRED ($100.00) DOLLARS.
Choice of Law: This Agreement shall be governed by and construed in accordance with the laws of the State of California, without regard to conflict of law principles. The Parties consent to the jurisdiction of the State of California and venue in the County of Santa Clara.
Questions: If you have any questions about these Terms, please contact us at support@thanx.com.
Last Updated: March 25, 2026
We use services provided by third parties that collect device data and online activity data from individuals who visit our website or use the app to analyze website traffic and facilitate advertising, such as Google and Facebook. There are a number of ways to opt-out, which we have summarized below.
All Members may review, update, correct or delete the personal information accessible from their accounts by contacting us. If you request to delete all such information or information we designate as mandatory, then your account may become deactivated. If you would like us to delete your account in our system, please contact us at customersupport@bubbakoos.com. We will use commercially reasonable efforts to honor your request. We may retain an archived copy of your records as permitted by law.
Most browsers let you remove or reject cookies, including cookies used for interest-based advertising. To do this, follow the instructions in your browser settings. Many browsers accept cookies by default until you change your settings. See more at:
Your mobile device settings may provide functionality to limit use of the advertising ID associated with your mobile device for interest-based advertising purposes.
You can block our site from setting cookies used for interest-based ads by using a browser with privacy features or installing browser plugins such as:
Brave browser: brave.com
Privacy Badger: eff.org/privacybadger
Ghostery: ghostery.com
uBlock Origin: ublock.org
Google and Facebook offer opt-out features that let you opt-out of use of your information for interest-based advertising:
Google: adssettings.google.com
Facebook: facebook.com/about/ads
You can also use these opt-out options to limit use of your information for interest-based advertising by participating companies:
Digital Advertising Alliance: optout.aboutads.info
Network Advertising Initiative: optout.networkadvertising.org
Effective Date: January 1, 2026 · Last Updated: March 25, 2026
Our website is committed to protecting your privacy and ensuring the security of any personal information you provide to us. This Privacy Policy outlines how we collect, use, protect and disclose your information when you access or use our website. By using our website, you are consenting to this Privacy Policy.
1.1 Personal Information
We may collect personal information that you voluntarily provide to us, such as your name, email address, contact details, identifiers, credit card information and any other information you choose to provide.
1.2 Usage Data
We may also collect non-personal information automatically when you interact with our website. This may include your IP address, browser type, operating system, referring URLs, and other technical information.
2.1 Personal Information
We may use your personal information for the following purposes:
2.2 Usage Data
We may use usage data for statistical purposes, to analyze trends, administer the website, track user activities, gather demographic information for aggregate use, and transactional information. This information will help us improve our website and tailor it to the needs and preferences of our users.
2.3 Loyalty Club
We use contact information, identifiers, financial information, personal characteristics or traits, and sensitive information to enroll you into our rewards program and loyalty club, create your online account, and administer your rewards account and benefits.
3.1 Third-Party Service Providers
We may engage trusted third-party service providers to assist us in operating our website, conducting business, or servicing you in their work for us (including, for example, cloud hosting providers, analytics, payment processing, financial institutions, order fulfillment, email delivery, marketing, insurance, internet service providers, operating systems and platforms, transportation, credit verification, maintenance, and customer support services). These service providers may have access to your personal information but are only authorized to use it as necessary to perform the requested services on our behalf.
3.2 Legal Requirements
We may disclose your personal information if required to do so by law or in response to a valid legal request, such as a court order, government investigation, tax authorities, or as otherwise required to protect our rights, property, or safety or the rights, property, or safety of others.
3.3 Corporate Transaction Recipients
We may share information with potential investors, purchasers, merger partners, and their advisors in the event we: (i) sell or transfer, or are considering selling or transferring, all or a portion of our business or assets; or (ii) are considering or engaging in any reorganization, conversion, merger, sale, joint venture, assignment, transfer or disposition of all or any portion of our ownership interest, business or operations.
We implement appropriate security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. However, please note that no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
Our website may contain links to external websites that are not operated by us. We have no control over the content and practices of these external sites and are not responsible for their privacy policies or practices. We encourage you to review the privacy policies of any external websites you visit.
Our website is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe we may have inadvertently collected personal information from your child, please notify us immediately by sending an email to updates@bubbakoos.com.
We are based in the United States. If you are using the website from outside the United States, please be aware that information we obtain about you will be processed in the United States or in other jurisdictions. By using the website or our services, you acknowledge your personal information may be transferred to and processed in jurisdictions outside your own, including the United States, as described in this Privacy Policy. Please be aware that the data protection laws and regulations that apply to your personal information transferred to the United States or other countries may be different from the laws in your country of residence.
If you are a Nevada resident, you may request that we stop selling certain categories of personal information that we collect. To exercise any of your rights, please email us at updates@bubbakoos.com. For all requests, you must provide us with your name, email address, phone number, and mailing address. We will verify your identity by matching the information we have collected against the information you have provided.
9.1 Your Rights
Subject to certain exceptions and limitations, the Virginia Consumer Data Protection Act (VCDPA) affords Virginia consumers the following rights:
9.2 Exercising Your Rights
To exercise any of your rights, please email updates@bubbakoos.com. For all requests, you must provide us with your name, email address, phone number, and mailing address. We will verify your identity by matching the information we have collected against the information you have provided. Failure to provide the foregoing information may prevent us from processing your request.
9.3 Appealing Our Decision
If we refuse to take action on your request, you may appeal our decision within a reasonable period of time, not to exceed 90 calendar days from the date of your receipt of our response. You may exercise your appeal rights by emailing us at updates@bubbakoos.com.
If you have any questions about this Policy or our data practices, please email us at updates@bubbakoos.com.
We reserve the right to modify this Privacy Policy at any time. Any changes will be effective immediately upon posting the revised Privacy Policy on our website. Your continued use of our website after the posting of any changes constitutes your acceptance of such changes