Privacy Policy

Effective Date: June 10, 2026

Last Revised: June 10, 2026

Hugo’s Frog Bar respects every individual’s right to privacy. We provide information about, and offer, products and services through websites, mobile applications, online ordering and reservation platforms, gift card services, and other digital tools that we or our affiliates own or operate (collectively, the “Services”). Your use of the Services means you have read and understood this Privacy Policy.

Scope of This Policy

This Privacy Policy explains the categories of personal information we collect; why we collect, use, and share it; how we protect it; and the rights and choices you may have. It applies to personal information we collect through the Services. It does not apply to information collected by third parties whose links or tools may appear within the Services, or to your in-restaurant interactions except where those interactions are tied to a digital Service (for example, an online reservation).

What Is Personal Information?

“Personal information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual or household. It does not include publicly available information or information that has been de-identified or aggregated so that it can no longer reasonably be linked to you.

Examples of personal information we may collect include:

Contact information, such as your name, postal address, email address, and telephone number;
Reservation and dining information, such as party size, dates, seating or accessibility preferences, dietary restrictions, and special-occasion notes you choose to share;
Transaction and billing information, such as payment card details, billing and shipping addresses, order history, and gift card information (note: full payment card numbers are processed by our payment processors and are not retained by us in our systems);
Account credentials, such as usernames and passwords, including where you authenticate through a third-party or social media platform;
Communications and content, such as comments, questions, survey responses, reviews, or other content you submit to us;
Marketing preferences, such as your subscription status and the topics you ask to hear about; and
Technical and usage information collected automatically, such as IP address, device and browser type, operating system, pages viewed, links clicked, referring pages, and approximate location, as described under “Cookies and Tracking Technologies” below.

How We Collect Personal Information

In addition to the uses described above, we may use your Personal Information for one or more of the following business purposes:

We collect personal information in three principal ways:

Directly from you — when you make a reservation, place an order, purchase or redeem a gift card, create an account, contact us, join our mailing list, or otherwise interact with the Services.
Automatically — through cookies and similar technologies that are part of the technology underlying the Services.
From third parties — such as our reservation, ordering, payment, marketing, and analytics service providers, and social media platforms when you choose to connect them.

How We Use Personal Information

We use personal information for the following business purposes:

To provide the Services you request, including fulfilling reservations and orders, processing payments, and issuing and redeeming gift cards;
To establish and verify your identity and maintain your account;
To communicate with you about your reservations, orders, and requests, and to provide customer support;
To send you marketing communications, promotions, events, and offers, where permitted and subject to your choices;
To operate, evaluate, improve, and secure the Services, including testing, research, and analytics;
To carry out our obligations and enforce our rights under any agreement with you, including for billing and collections;
To detect, prevent, and respond to fraud, security incidents, and other unlawful or harmful activity;
To comply with legal obligations and respond to lawful requests from public authorities; and
To evaluate or complete a merger, financing, reorganization, sale, or transfer of some or all of our assets, including in connection with bankruptcy or a similar proceeding, in which personal information may be among the assets transferred.

Cookies and Tracking Technologies

The Services use cookies, pixels, tags, and similar technologies to operate the site, remember your preferences, measure performance, and support analytics and advertising. Some of these technologies are operated by third parties (for example, analytics and social media providers) that may collect information about your activity over time and across different websites.

You can manage cookies through your browser settings and, where available, through cookie preference controls offered on the Services. Some features of the Services may not function properly if you disable certain cookies. Where required by law, we honor recognized opt-out preference signals, such as Global Privacy Control (GPC).

How We Share Personal Information

We may disclose your personal information to:

Our affiliates and the restaurants within our group;
Service providers that perform functions on our behalf, such as reservation, ordering, payment processing, hosting, email and marketing, analytics, and customer support;
Third parties to whom you direct or authorize disclosure;
Law enforcement, regulators, courts, or other government authorities where required by law or to protect our rights, safety, or property, or that of others; and
A successor entity in connection with a merger, financing, reorganization, sale, or transfer of assets.

Before sharing personal information with a service provider, we direct that party to use the information only for the purposes for which it was disclosed, to keep it confidential and secure, and to comply with applicable law.

How We Protect Personal Information

We maintain reasonable administrative, technical, and physical safeguards designed to protect personal information from loss and from unauthorized access, use, modification, or disclosure. The Services use encryption in transit (such as Transport Layer Security) to help protect information as it travels over the internet. When we share personal information with service providers or affiliates, we impose confidentiality obligations on them.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You play an important role in protecting your information: keep your account credentials confidential, do not share your password, and log out after using a shared device.

Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Policy, to comply with our legal, accounting, and reporting obligations, to resolve disputes, and to enforce our agreements. Retention periods vary based on the type of information and the purpose for which it was collected.

Children’s Privacy

The Services are intended for a general audience and are not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are under 13, please do not use the Services or provide any personal information. If we learn that we have collected personal information from a child under 13 without verified parental consent, we will delete it. If you believe a child under 13 may have provided us with personal information, please contact us using the details under “Contact Us.”

Your Rights and Choices

Depending on where you live, you may have some or all of the following rights regarding your personal information, subject to legal exceptions:

Right to know / access — to request the categories and specific pieces of personal information we have collected about you, the sources, the purposes, and the categories of third parties with whom we share it.
Right to correct — to request correction of inaccurate personal information.
Right to delete — to request deletion of personal information we collected from you, subject to exceptions.
Right to opt out — to opt out of any “sale” or “sharing” of personal information and of targeted/cross-context behavioral advertising.
Right to limit — where applicable, to limit the use of sensitive personal information.
Right to non-discrimination — to not receive discriminatory treatment for exercising your rights.
Right to data portability — to receive a copy of certain personal information in a portable, usable format.

Marketing Choices

You may opt out of marketing emails at any time by using the unsubscribe link in any marketing message or by contacting us. We may still send you non-promotional messages about your reservations, orders, or account.

How to Submit a Request

To exercise your rights, you or your authorized agent may contact us:

By email: [INSERT PRIVACY EMAIL, e.g., privacy@grgmc.com]
By phone: 1-312-640-0999

We will verify your request by matching the information you provide against information in our records, and we may ask for additional information to confirm your identity. You may use an authorized agent to submit a request on your behalf, and you may submit a request on behalf of your minor child. We will not use information provided for verification for any unrelated purpose.

How We Respond

We will acknowledge and respond to verifiable requests within the timeframes required by applicable law (generally within 45 days, with the possibility of an extension where permitted, and we will notify you if more time is needed). We do not charge a fee to process most requests unless a request is excessive, repetitive, or manifestly unfounded; if a fee applies, we will tell you why and provide an estimate before proceeding. If we cannot comply with a request, we will explain why.

Appeals

If we decline to act on your request and the law in your state provides a right to appeal, you may appeal by contacting us at the email above with the subject line “Privacy Appeal.” We will respond to your appeal within the period required by applicable law.

Notice to Residents of Certain U.S. States

Residents of California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, and other states with comprehensive privacy laws may have specific rights as described above. References to particular statutes (such as the California Consumer Privacy Act, as amended) are intended to describe rights available to residents of those states. The specific rights available to you, and the exceptions that apply, depend on your state of residence and the applicable law.

Third-Party Links and Features

The Services may contain links to, or features from, third-party websites and platforms, including social media. These third parties may collect information about you and may set their own cookies. Their practices are governed by their own privacy policies, not by this Privacy Policy. We encourage you to review the privacy policies of any third party before providing information to them.

Accessibility

If you have a disability and would like this Privacy Policy provided in an alternative format, please contact us at the email or phone number under “Contact Us” and we will work with you to provide it in a method that is accessible to you.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time at our discretion. If we make a material change that reduces your privacy rights, we will provide notice and, where required, obtain your consent. We encourage you to review this Policy periodically, and especially before providing personal information. The version posted on the Services is the current version and governs our processing of your information. Changes are effective as of the “Last Revised” date shown above.

Contact Us

If you have questions or concerns about this Privacy Policy or our privacy practices, please contact us:

By email: forms@grgmc.com
By phone: 1-312-640-0999
By mail: Hugo’s Frog Bar, 750 N Orleans St, Chicago, IL 60654