See Supplemental CCPA and U.S. Privacy Laws Notices - Notice at Collection
To offer the [Bubbakoo’s Burritos] Rewards program (the “Services”), [Bubbakoo’s Burritos] (“Merchant”) has engaged Thanx, Inc. (“Thanx”) as a service provider to operate the mobile applications, websites and related online services that support the Services (the “Platform”).
This Privacy Policy explains the types of personal information Thanx collects on behalf of Merchant via the Platform, how Thanx may use and share that information on behalf of Merchant in the course of operating the Platform, and the choices you have within the Platform to manage your personal information.
Merchant is responsible for any personal information collected in connection with the Services, including any information you provide on the Platform.
Personal information you provide on the Platform.
Personal information that you may provide on the Platform includes:
Automatically collected personal information.
When you use the Platform, Thanx and other service providers and advertising partners may automatically log information about you, your computer or mobile device, your activity over time, and your interactions with marketing communications, such as:
Cookies and similar technologies. Some of the automatic collection described above is facilitated by cookies and similar technologies:
These cookies and similar technologies may be operated by third parties, and can be used by these parties to recognize your computer or mobile device when it visits the Platform. You can learn more about options for limiting use of cookies and similar technologies in the Your Choices section below.
The personal information collected through the Platform will be used to facilitate the Services you receive from the Merchant. This may include:
Merchant may also use personal information collected through the Platform for other purposes in accordance with its own policies and procedures. For example, Merchant may use personal information:
Personal information collected through the Platform may be shared as follows:
Sharing with Thanx to operate the Platform. Because the Platform is operated by Thanx, any information you provide via the Platform, or that Merchant inputs to the Platform, may be hosted and stored by Thanx on Merchant’s behalf. Thanx uses this information to provide the Platform under contract with Merchant and in accordance with Merchant’s instructions and applicable laws. Thanx may also rely on other third-party service providers that help it operate the Platform, such as hosting, information technology, support, email and text message delivery, and website analytics services. Your personal information may also be disclosed in connection with a merger, acquisition, reorganization or sale of all or a portion of Thanx's assets or in the event of bankruptcy.
Sharing with card networks. If you connect a payment card to the Services, your payment card information will be shared with your payment network (e.g., AMEX, MasterCard or Visa) to enable the payment network to examine transactions on your connected payment card and to facilitate your participation in the Services (e.g., to administer the loyalty programs you join and your accrual of rewards). You can remove your payment card from your account at any time in your settings. When you do so no future transactions will be associated with the removed card, but your previous transactions may be retained as necessary to maintain your rewards program progress and keep track of any applicable rewards.
Sharing initiated by Merchant. Merchant may share personal information through integrations in the Platform to provide services to you and for other purposes. For example, Merchant may enable third party software integrations, such as Olo, Toast, DoorDash, and Uber, to facilitate online ordering, point-of-sale, and delivery services. Merchant may also share personal information with advertising partners via integrations in the Platform, such as Klayvio, Braze, and others for the purpose of sending marketing campaigns.
Through the Platform, you may have the choices below regarding the collection, use and sharing of your personal information.
Merchant may offer additional choices and allow you to exercise any rights accorded to you under applicable laws. For more information, please contact Merchant directly
The Platform may contain links to other websites. If you choose to visit a third-party link, you will be directed to that third party's website. A link to a website is not an endorsement, authorization or representation of any affiliation with that third party, nor is it an endorsement of their privacy or information security policies or practices. Other sites follow different rules regarding the use or disclosure of the personal information you submit to them, and you should read the privacy policies or statements of the other websites you visit for more information.
The Services are not intended for use by children under 18. If a parent or guardian of a child believes the child has provided personal information without their consent as required by law, please contact custommersupport@bubbakoos.com.
Some Internet browsers may be configured to send “Do Not Track” signals to the online services that you visit. The Platform currently does not respond to "Do Not Track" signals. To find out more about “Do Not Track,” please visit http://www.allaboutdnt.com.
This supplemental notice sets forth the disclosures and rights applicable to U.S. residents residing in states which have enacted consumer data privacy laws, including, but not limited to, the California Consumer Privacy Act of 2018 (as amended by the California Privacy Rights Act of 2020) (collectively, the “CCPA”), federal privacy laws, and the consumer privacy laws enacted in Colorado, Connecticut, Oregon (effective July 1, 2024), Montana (effective October 1, 2024), Texas, Utah and Virginia, Delaware, Iowa, Nebraska, New Jersey, New Hampshire (effective January 1, 2025) and other consumer data privacy laws enacted and effective after the date of this Privacy Policy (collective “U.S. Privacy Laws”).
Below is a high-level snapshot of personal information collected and disclosed:
Category | Do We Collect? | How We Collect | Primary Purposes of Processing | Key Recipients | Can You Limit Sharing? |
|---|---|---|---|---|---|
Identifiers such as a real name, alias, postal address,unique personal identifier, online identifier, IP address, email address, account name | Yes | When you visit or use our Services; from third- party sites and services; from Merchants | |||
Other Potential Third Party Disclosures: Your personal information may also be disclosed to third parties to serve our legitimate business interests as follows: (1) as required by law, such as to comply with a subpoena, or similar legal process, (2) as part of a merger, acquisition, bankruptcy or other transaction in which a third party assumes control of all or part of the business, (3) to investigate, prevent, or take action regarding suspected or actual illegal activities or to assist government enforcement agencies as required by law; (4) enforce our agreements with you, and/or (5) investigate and defend ourselves against any third-party claims or allegations.
Cookies and other similar technologies may be used to help advertise Merchant’s services on other websites or services you might visit. Merchant may also share information with advertising networks and analytics partners to support interest-based advertising, which may qualify as a “sale” or “sharing” of personal information. You can opt-out of our use or sharing of personal information for these purposes through hhttps://dashboard.thanx.com/ccpaoptouttool.
Merchant only uses precise geolocation if you have consented by enabling location access through the Services and solely for purposes of providing you with goods or services you have requested.
Consumers may contact Merchant by email atcustomersupport@bubbakoos.com with "Privacy Request” in the subject line to exercise the following privacy requests:
Request to Disclose At No Charge:
Request to Delete At No Charge
Except as exempted pursuant to CCPA 1798.105 and applicable U.S. Privacy Laws, to request to delete personal information.
Deletion Requests can be submitted to Merchant be email at customersupport@bubbakoos.com or by mail to Merchant at: [Bubbakoo’s Burritos] Attention: Privacy Request to Delete, 1670 RT 34 North, Suite 1C Wall, NJ 07727
Request to Correct At No Charge
Requests to correct any inaccurate personal information collected by Thanx can be submitted by email to customersupport@bubbakoos.com
Merchant may ask for additional information to verify your request prior to taking action in response to such request. Under the CCPA and applicable U.S. Privacy Laws, you may also designate an authorized agent to make these requests on your behalf.
Authorized agents must demonstrate they have written authorization from you to make requests on your behalf. Merchant may additionally require the consumer to confirm their identity and verify the authorized agent’s permission before complying with any request.
Please note that these rights are not absolute and in certain cases are subject to conditions or limitations as specified in the CCPA or other applicable U.S. Privacy Laws, including, but not limited to:
Merchant will confirm and respond to all requests within the timeframe required under the CCPA. In responding to any request to disclose/delete, Merchant shall maintain a record of the requests as required under the CCPA and applicable U.S. Privacy Laws.
You have the right not to receive discriminatory treatment for exercising any rights conferred by the CCPA and applicable U.S. Privacy Laws. Merchant shall not discriminate against you for exercising any rights under the CCPA, including, but not limited to, (a) denying goods or services, (b) charging different prices or rates (including discounts/penalties) that are not directly related to the value provided to Merchant for the personal information, or (c) suggesting you will receive a different rate/price or different level of quality of goods/services.
If you are in a jurisdiction that recognizes your ability to appeal a decision made in connection with your attempt to assert a right under applicable U.S. Privacy Laws, you may file an appeal of our decision refusing your request to exercise your rights under this privacy notice. You may request an appeal of such decision by contacting us at privacy@merchant.com. Please provide the state that you are writing from, accompanied with documentation you may have regarding the matter you are appealing. Thanx will respond to your appeal request within the timeframe required under the U.S. Privacy Laws applicable to your state of residence.
If your jurisdiction allows you to file a complaint with the state’s Attorney General’s Office regarding any concerns with the result of your appeal request, you may do so by using the following links as may be applicable to you. You may submit a complaint to the Attorney General’s Office by selecting the appropriate l ink: Virginia (www.oag.state.va.us/consumer-protection/index.php/file-a-complaint), Montana (https:// dojmt.gov/office-of-consumer-protection/), Colorado (coag.gov/file-complaint), Connecticut (portal.ct.gov/AG/Common/Complaint-Form-Landing-page), Nebraska (https://www.nebraska.gov/apps-ago-complaints), or by email to privacy@delaware.gov (Delaware) or AskConsumerAffairs@dca.njoag.go (New Jersey).
California law permits you to request and obtain once a year, free of charge, certain information about your Personally Identifiable Information ("PII") (as defined by California law) disclosed to third parties for direct marketing purposes in the preceding calendar year (if any). If applicable, this information would include a list of the categories of PII that was shared and the names and addresses of all third parties with which we shared information in the immediately preceding calendar year.
In addition, a business subject to California Business and Professions Code Section 22581 must allow California residents under age 18 who are registered users of online sites, services or applications to request and obtain removal of content or information they have publicly posted. Your request should include a detailed description of the specific content or information to be removed. Please be aware that your request does not guarantee complete or comprehensive removal of content or information posted online and that the law may not permit or require removal in certain circumstances.
The Services enables you to receive a variety of rewards via loyalty programs in exchange for allowing us to collect and use personal information about you.
When you participate in the Services, you allow us to collect (directly or indirectly), use, and retain personal information on an ongoing basis, as described in this Privacy Policy. This includes personal information such as name, email address, phone number, preferred service locations, and at your option, birth date, gender, and payment data. If you join the Services, in exchange for your participation, you will be able to earn discounts on purchases, free items, personalized customer experiences, prize items, including from the rewards marketplace, reward points, credit towards your account, or other financial incentives, the amount and nature of which will be determined by the extent of your participation in the Services and other factors. We may adjust the Services periodically and will notify you of changes. You can opt into the Services by joining the Services on the mobile application or website, through a third party service, or at the point of sale in a store. You also have the right to withdraw from the rewards program at any time by leaving the Services
If you wish to stop participating in the Services, you can send an email to customersupport@bubbakoos.com.
The rewards available to you through the Services are based upon the reasonable determination of the value that Merchant receives from collecting and retaining personal information. This estimated value takes into account a variety of factors as permitted by law, including (but not limited to) the expenses incurred in collecting and retaining the information, the expenses incurred in providing rewards to you, and the estimated marginal revenue that derived from information related to a specific loyalty participant and program.
Please contact customersupport@bubbakoos.com for a copy of this privacy policy
If you have any questions about this Privacy Policy, please contact us at customersupport@bubbakoos.com
Last Updated: 3/25/2026