Guest Feedback Privacy Notice

1. Who we are and scope

Burger Lounge III LLC, doing business as Burger Lounge ("we," "us," or "our"), is responsible for deciding how personal information is collected and used through our guest-feedback platform.

This notice applies to the guest surveys and feedback services that link to it. Other Burger Lounge services, including third-party ordering and delivery services, may have separate privacy notices.

For questions or privacy requests, contact Marketing@burgerlounge.com. Mailing address: 405 W G St, San Diego, CA 92101, United States.

2. Information we collect

We receive information you provide in the survey and limited technical information created while the survey and staff dashboard operate.

Contact identifiers: Required email address and any identifying information voluntarily included in comments; used for feedback-related follow-up and privacy-request handling.

Visit and survey information: Restaurant, date and general time of visit, service type, visit frequency, ratings, tags and written comments; used to evaluate service and prepare internal reports.

Technical identifiers and activity: Submission IDs, timestamps, survey-progress events, staff dashboard authentication cookies, and service diagnostics where collected; used for operations, security, troubleshooting and completion analysis.

Please do not include payment-card details, government ID numbers, medical information or unnecessary personal information about yourself or others in your comments. We do not request that information in this survey.

3. Why email is required and how information is used

We require your email address so an authorized team can follow up when needed, better understand your feedback and address service concerns. Providing your email does not subscribe you to marketing emails or a mailing list, and it does not by itself mean that you specifically requested contact.

We use ratings, visit details and comments to measure guest satisfaction, evaluate restaurant performance, identify improvements and prepare internal statistical reports. Information may also be used to operate and protect the platform, investigate concerns, respond to privacy requests and comply with legal obligations.

4. Who can access information and service providers

Access to survey information is limited to authorized personnel according to their assigned responsibilities. Certain Marketing personnel, operations leadership, area directors, designated reviewers and platform administrators may have access where needed. Guest communication is handled by Marketing or representatives expressly authorized by it.

We use Render for hosting and database services and Resend for service-related email delivery. These providers process information to perform services for us. We may also disclose information when legally required, to protect rights or safety, or in connection with a corporate transaction subject to applicable protections.

We do not sell personal information collected through this survey or share it for cross-context behavioral advertising. Survey email addresses are not used to enroll guests in promotional communications.

5. Cookies and survey-progress analytics

For authorized staff using the dashboard, the application uses a first-party authentication cookie named bl_session. It is marked Secure, HttpOnly and SameSite=Lax and has a maximum age of seven days. It supports staff login and is not used to enroll guests in marketing.

The guest survey measures completion progress using an in-page submission identifier and server-side events such as the restaurant, timestamps, screen and field identifiers, and progress indicators. This helps us understand where respondents stop and improve the survey. The progress records do not store unfinished comment text or the text of an email address.

Open and click tracking is disabled for the configured service-email sending domain. Delivery and error records are separate from tracking whether a recipient opens or clicks an email. Service providers may also maintain diagnostic or security records as part of operating their services.

6. Retention and security

We keep identifiable survey records for one year from submission and remove eligible records during the next scheduled daily cleanup, unless a legal obligation or authorized legal hold requires longer retention. This includes associated email information, ratings, visit information, comments and linked follow-up records.

Survey-progress records are likewise scheduled for removal after one year. Survey-notification emails in company receiving mailboxes are configured for automatic deletion after one year without affecting unrelated business emails. IT has confirmed that no copies of these notification emails remain in company Deleted Items, archives or corporate email backups under the configured process, and has identified no current company retention policy or legal hold preventing that deletion. Provider-managed delivery logs, hosting backups and any separately downloaded exports are subject to their own retention and disposal controls; we do not promise that all external copies are erased at exactly the same time as the primary survey record. If a legal obligation or authorized legal hold later applies, information may be retained as required by law.

We may retain aggregated statistics for longer if they no longer reasonably identify a guest. Records documenting qualifying privacy requests and our responses may be retained for at least 24 months where required by California law; this does not require us to preserve the original guest survey.

We maintain technical and administrative safeguards designed to protect personal information, including restricted access for authorized users. No internet system can be guaranteed completely secure.

7. Privacy rights and requests

Depending on applicable law, you may have rights to know about and access your personal information, request deletion or correction, and exercise other privacy choices provided by law. Legal exceptions may apply. You are entitled to the protections against unlawful discriminatory treatment for exercising applicable privacy rights.

To submit a privacy request, contact Marketing@burgerlounge.com. We may verify your identity to the extent reasonably necessary and will respond within the timelines required by applicable law. Authorized agents may submit requests where permitted, subject to applicable verification requirements.

8. Children’s information

This survey is intended for a general audience and is not intended for children under 13. Children under 13 should not submit personal information through it. If you believe such information has been provided, please contact Marketing@burgerlounge.com so we can address the matter as applicable law requires.

9. Changes to this notice

We may update this notice as our practices or legal requirements change. We will display an effective date and provide additional notice when required by law.