PRIVACY Policy

Introduction

Welcome. You have arrived at a website operated by Hof's Hut Restaurants, Inc. dba Lucille's Smokehouse BBQ ("Lucille's," "Company" or "we," "our" or "us"). We respect your privacy and want to protect your personal information.

This Privacy Policy governs www.lucillesbbq.com, its subdomains, and all portals, applications, products, goods, services, events, and any interactive features, applications, or other services that post a link to this Privacy Policy (collectively, the "Site"). This Privacy Policy also applies to information (including "Personal Information" as defined below) that we may collect from you in person at our physical restaurant locations (each, a "Location"), via phone calls or other communications with our personnel or in any other instance when you contact us. We refer to all of the above offerings as our "Goods and Services."

"Personal Information" (sometimes referred to as "Personal Data") means any personally identifiable relating to an identified or identifiable individual that is protected by applicable privacy laws. The definition of Personal Information does not include publicly available information from federal, state, or local government records, such as professional licenses and real estate or property records.

We handle all information you provide us with the utmost confidentiality. This Privacy Policy tells you what information we collect from you, why we collect it, how we use it, under what circumstances we may share it with third parties, how we protect that information, and how you may opt out of the sale of that information.

If you have questions about this Privacy Policy, contact us at privacy@lucillesbbq.com.

Please note that if you provide your information in the course of interacting with our Site, visiting our Locations, or otherwise using our Goods and Services, we will take that as your agreement to our collection, use, and disclosure of your information as set forth in this Privacy Policy. This Privacy Policy is incorporated into our Terms of Use which govern your use of this Site.

Please also note that this Privacy Policy does not apply to any products, goods, services, websites, or content that are offered by third parties ("Third Party Services"), which are governed by their respective privacy policies.

Information You Provide to Us

In connection with the Goods and Services we provide, we may ask you to provide us with certain information, including:

• your first and last name, email address, home or business address, telephone number, mobile number, username, and your birthdate;
• your credit card or debit card and your payment and/or visit history;
• your reservation, order, and delivery information, including menu items, delivery addresses, or other details about the orders you place (e.g., your car model and license plate to identify vehicle for pickup), and your order history;
• in the case of employment applications, your current or past employment information and educational information;
• social media information, such as social media handles, content and other data shared with us through third-party features that you use on our Site and other service (such as apps, tools, payment services, widgets and plug-ins offered by social media services like Facebook, Instagram and Twitter) or posted on social media pages (such as our social media page or other pages accessible to us);
• other information that could reasonably be used to identify you personally or identify your household or device; and/or
• demographic information, such as your country, state, or county of residence or business operation.

Your decision to provide us with information is voluntary, but if you choose not to provide requested information, you may not be able to take advantage of all of the Site's features or our Goods and Services.

We use collected information to provide the Site experience as well as our Goods and Services, to improve our Goods and Services, and to send you marketing communications at your request.

Sources of Personal Information

Additionally, we may obtain Personal Information from you where you expressly provide us with the information. Examples of sources from which we collect information include:

• via web forms or inputs/uploads into our Site;
• when you send an email or letter to contact us;
• from reservation software and/or applications;
• from food delivery or pickup software and/or applications;
• when you purchase products online or at our Locations;
• when you visit one of our locations;
• through interviews or phone calls with you;
• in documents you have provided to us, and
• from employment applications.

General Browsing

In addition to information that you choose to submit to us, we and/or our service providers may automatically collect and/or store certain information when you visit or interact with the Site ("Usage Information"). This Usage Information may be stored and/or accessed from your personal computer, laptop, tablet, mobile phone or other device (a "Device") whenever you visit or interact with our Site. Usage Information may include:

• Your IP address, IDFA, Android/Google Advertising ID, IMEI, or another unique identifier ("Device Identifier");
• Your Device functionality (including browser, browser language, operating system, hardware, mobile network information);
• Cookies, tags, pixels and SDKs (see our Use of Cookies and Other Tracking Technologies section below);
• Referring and exit web pages and URLs;
• The areas within our Site that you visit and your activities there, including remembering you and your preferences;
• Your Device location or other geolocation information, including the zip code, state, or country from which you accessed the Goods and Services;
• Your Device characteristics; and
• Certain other Device data, including the time of day you visit our Site.

For location information, we may use this information to provide customized Goods and Services, content, promotional offers, and other information that may be of interest to you.

If you no longer wish for us or our service providers to collect and use location information, you may disable the location features on your device. Consult your device manufacturer's settings for instructions. Please note that if you disable such features, your ability to access certain features, Goods and Services, content, promotions, or products may be limited or disabled.

Use of Cookies and Other Tracking Technologies

We may use various methods and technologies (such as cookies) to store or collect Usage Information ("Tracking Technologies"). Tracking Technologies may set, change, alter or modify settings or configurations on your Device.

By using this Site, you consent to our use of Tracking Technologies. If you have enabled an opt-out preference signal ("OOPS") or a Global Privacy Control ("GPC") or have opted out of cookies in our Site's cookie preference center, we will honor your choices.

A few of the Tracking Technologies used on the Site, include, but are not limited to, the following (as well as future-developed tracking technology or methods that are not listed here):

• HTML5 local or session storage: browser-based storage used to remember certain settings or behaviors;
• Pixel tags, clear GIFs and web beacons: small images or snippets of code that load when you visit a page or open an email, telling us or partners that you have engaged with content;
• Tags, scripts and containers (e.g., tag managers): snippets of code provided by analytics or marketing vendors to measure behavior or deliver functionality, or tools used to deploy and manage other tags (like Google Tag Manager);
• Software Development Kits (SDKs): a set of tools or code provided by a third party that developers add into an app or website to enable certain features, such analytics, advertising, or login, and that may also collect information from users' Devices.
• Cookies: a file placed on a Device to uniquely identify your browser or to store information on your Device. Our Site may use HTTP cookies, HTML5 cookies, Flash cookies and other types of cookie technology to store information on local storage.
• Embedded Scripts: programming code that is designed to collect information about your interactions with the Site, such as the links you click on.
• Click Identifiers and URL parameters: short tags added to the end of a URL that help track where website traffic comes from, including UTM parameters, such as which email, ad, or social media post a visitor clicked before landing on a page.
• Device Identifiers and probabilistic identifiers: identifiers unique to your Device (e.g., mobile advertising IDs), or technology that creates an identifier by analyzing characteristics of your Device or browser.
• Analytics and Session Replay Technologies: tools that help us understand how users interact with our Services, which may record page views, clicks, scrolling, or other usage activity for analytics and service improvement purposes;
• Browser Fingerprinting: collection and analysis of information from your Device, such as, without limitation, your operating system, plug-ins, system fonts and other data, for purposes of identification.
• Recognition Technologies: technologies, including application of statistical probability to data sets, which attempt to recognize or make assumptions about users and devices (e.g., that a user of multiple devices is the same user).

We may use Tracking Technologies for a variety of purposes, including:

• To allow you to use and access the Site, including for the prevention of fraudulent activity and improved security functionality;
• To assess the performance of the Site, including as part of our analytic practices or otherwise to improve the content, products or services offered through the Site;
• To offer you enhanced functionality when accessing the Site, including identifying you when you sign into our Site or keeping track of your specified preferences or to track your online activities over time and across third-party sites; and
• To deliver content relevant to your interests on our Site and third-party sites based on how you interact with our content.

We've put our cookies into the following categories or "types," to make it easier for you to understand why we need them:

• Strictly necessary – these are used to help make our Site work efficiently.
• Performance and Analytics – these are used to analyze the you interact with our Site, and how we can improve it.
• Functionality – these help to enhance your experience by doing things like remembering what you've done in our client portal.
• Targeting/advertising – these are used to share some information with third parties who we advertise with, so we know how you've reached our Site. We can also use cookies to identify the parts of the Site that you are interested in. We then use this information to show you advertisements and pages we think may also be of interest to you, to tailor how we communicate with you, or to tailor the contents of the communications we send to you. If you prefer, you can opt out of these. Tailoring of content means it includes information reflecting the interest you've shown in the content of our web pages or offers or promotions that we think may interest you, and to improve how we respond to your needs.

Cookies and You

To use our tools or sign up for information from us, you must have cookies enabled on your internet browser. Some of the more popular browsers (and links to manage your cookies on each) are:

• Microsoft Edge
• Mozilla Firefox
• Apple Safari
• Google Chrome

If you choose not to enable cookies, you will still be able to browse our Site, but it will restrict some of the functionality of the Site and what you can do.

Controlling Your Cookies

You can set your web browser to alert you when a cookie is being used. You can also get information on the duration of the cookie and what server your data is being returned to. You then can accept or reject the cookie. Additionally, you can set your browser to refuse all cookies or accept only cookies returned to the originating servers.

You can opt in or out of cookies at any time – except strictly necessary cookies (these are used to help make our Site work efficiently). You can access our Cookie Settings tool by clicking the persistent cookie link at the bottom of the page or by clicking on "Do Not Sell" in our footer.

You can enable or disable cookies in your browser. If you wish to restrict or block the cookies set by any website, you can do this through the web browser settings for each web browser you use, on each device you use to access the internet.

Information on controlling and deleting cookies, including on a wide variety of browsers, is also available at www.allaboutcookies.org.

If you want to opt-out of cookies across different advertising networks, visit resources from the Digital Advertising Alliance ("DAA"). We do not control these opt-out links or whether any organization chooses to participate in these opt-out programs.

If you don't wish to accept cookies from one of our emails, you can choose not to download any images or click on any links. You can also set your browser to restrict cookies or to reject them entirely. These settings will apply to all cookies, whether included on websites or in emails. Depending on your email or browser settings, cookies in an email may sometimes be automatically accepted (for example, when you've added an email address to your address book or safe senders list). For more information, refer to your email browser or device instructions.

Audiovisual Information

We may use closed circuit video surveillance cameras at some of our Locations to monitor building and parking lot security and assist in crime prevention, detection, and investigation, and to ensure the safety of our staff and visitors to our facilities. We may also record and store telephone calls and chat transcripts for a period of time when you interact with our customer or technical support personnel, or if you provide us with feedback about our Goods and Services.

Information We Collect When You Interact with Third-Party Sites

The Site may include functionality that allows certain kinds of interactions between the Site and your account on a third-party website or application. The use of this functionality may involve the third-party site providing information to us. For example, we may provide links on the Site to facilitate sending a communication from the Site or we may use third parties to facilitate emails or postings to social media (like a "Share" or "Forward" button). These third parties may retain any information used or provided in any such communications or activities and these third parties' practices are not subject to our Privacy Policy.

We do not control or have access to your communications through these third parties. Further, when you use third-party sites or services, you are using their services and not our services and they, not we, are responsible for their practices. You should read the applicable third-party privacy policies before using such third-party tools on our Site. Please see our Terms of Use for Lucille's BBQ for more information.

Information from Third Parties

In addition, we may collect information about you from other sources, including for employees, consumer credit reporting agencies and state or federal agencies. We may also obtain information about our visitors or potential visitors from marketers and market research firms. We may combine the information we collect from third parties with information that we have collected from you or through your use of our Services. You can opt out of this use of your information by using the Do Not Share My Personal Information form.

Why We Collect Information

We may use your information for various purposes, including:

• Responding to your requests for information;
• Providing Goods and Services to you;
• Processing your reservation at one of our Locations;
• Processing your takeout or delivery order at one of our Locations;
• Verifying your identity and for fraud prevention;
• Processing your payments;
• Deliver gift cards or e-gifts, and any associated personalized messages, in accordance with your instructions;
• Evaluating your employment application;
• Providing you with updates and information about products and services we provide;
• Sending you marketing information about us and our affiliated entities;
• Sending you email communications such as electronic newsletters about our Goods and Services and events and promotions which may be of interest to you;
• Improving the effectiveness of our Site, our marketing endeavors, and our Goods and Services offerings;
• Supporting and improving our loyalty program;
• Obtaining your feedback and reviews regarding our Site, Goods and Services, Locations, or your customer experience;
• Identifying your product and service preferences, providing personalized content and ads, and informing you of new or additional information, products and services that may be of interest to you;
• Helping us address problems with and improve our Site and our products and services, including testing and creating new products, features, and services;
• Providing mobile marketing messages and other communications and messages;
• Protecting the security and integrity of the Site, including understanding, and resolving any technical and security issues reported on our Sites;
• Engaging in analysis, research, and reports regarding the use of our Sites and Goods and Services;
• To create profiles that allow us to send communications and/or advertisements that may be more appropriate for or interesting to you;
• To ensure our terms, policies, and agreements with you and any third party are enforced;
• For internal business purposes;
• Complying with the law and protecting our safety, rights, property or security, Goods and Services, and the general public; and
• For purposes disclosed at the time you provide your information and your consent or as otherwise set forth in this Privacy Policy.

When We Disclose Information

In addition, to the extent permitted by law, certain Personal Information may be disclosed in the following situations:

Service Providers. We may disclose Personal Information to our affiliates and to third-party service providers who perform services on our behalf, such as a payment processor, reservations maker, merchandise store, customer service provider, email marketing provider, or food delivery service. These service providers may access Personal Information only as needed to perform their services and are required to enter into contractual agreement which prohibits them from disclosing or using the information other than for the purposes for which it was disclosed.

Legal process. To comply with law, legal process, or government requests, including responding to a validly issued and enforceable subpoena, court order, summons, search warrant, regulatory inquiry or other legally enforceable demand. We may also disclose information as necessary in connection with actual or threatened legal proceedings or alternative dispute resolution proceedings either initiated by or against us. When we do so, we limit the disclosure to what is reasonably necessary and take steps to seek confidential treatment or other protections to prevent the information from becoming public, unless we are legally prohibited from doing so.

Business Transfers and Corporate Transactions. We may use or share your Personal Information in conjunction with a prospective purchase, sale, or merger of all or part of our Company. This may include sharing information with potential or actual purchasers, investors, or other transaction partners and their advisors as part of due diligence or the transaction itself. Where appropriate, we will take steps to require those parties to protect the information and use it only for the purposes of evaluating or completing the transaction. If the transaction is completed, Personal Information may be transferred to the buyer or successor or affiliate as part of the transferred assets or ongoing business operations.

We may aggregate, de-identify, and/or anonymize any information collected through the Site or Goods and Services such that such information is no longer linked to your personally identifiable information. We may use and share this aggregated and anonymized information (non-Personal Information) for any purpose, including without limitation, for research and marketing purposes, and may also share such data with our affiliates and third parties, including advertisers, promotional partners, and others.

Ads and Information About You

You may see certain ads on our Site because we participate in advertising networks administered by third parties, including Google (Analytics, YouTube), and Shopify. These networks track your online activities over time and across third party websites and online services by collecting information through automated means, including through the use of the Tracking Technologies described above, and they use this information to show you advertisements that are tailored to your individual interests. The information they collect includes information about your visits to our Site, such as the pages you have viewed. This collection and ad targeting takes place both on our Site and on third-party websites that participate in the ad network. This process also helps us track the effectiveness of our communications and marketing efforts.

Your Choices About the Information We Collect

If you would prefer that we not share your name and mailing address with third parties (other than with our affiliates) to receive promotional offers, you have the option to opt out of such sharing. To do so, please email us at privacy@lucillesbbq.com or use our web form. Your choice will not affect our ability to share information in the other ways described in this Privacy Policy.

If you do not wish to receive e-mails about special offers, events, and other promotions from us, email us at privacy@lucillesbbq.com to opt out or click the link in the email to "unsubscribe." If you do not wish to receive other marketing materials by regular mail from us, please write us at:

Hof's Hut Restaurants, Inc. 2601 E. Willow St. Signal Hill, CA 90755

Please note that certain of your personal information, such as your name or other identifying information, may remain in our database even after a deletion request in order to maintain the integrity and historical record of our database and systems, or to comply with applicable laws and regulations.

Do Not Track Disclosures

Do Not Track ("DNT") is a web browser setting that requests that a web application disable its tracking of an individual user. When you choose to turn on the DNT setting in your browser, your browser sends a special signal to websites, analytics companies, ad networks, plug in providers, and other web services you encounter while browsing to stop tracking your activity. Various third parties are developing or have developed signals or other mechanisms for the expression of consumer choice regarding the collection of information about an individual consumer's online activities over time and across third-party websites or online services (e.g., browser do not track signals), but there is no universally agreed upon standard for what a company should do when it detects a DNT signal. Currently, we do not monitor or take any action with respect to these signals or other mechanisms. You can learn more about Do Not Track at www.allaboutdnt.com.

Updating Personal Information

We prefer to keep your Personal Information accurate and up to date. If you would like to change your contact information, please contact us at privacy@lucillesbbq.com.

If so, we will make good faith efforts to make requested changes in our then active databases as soon as reasonably practicable (but we may retain prior information as business records). Please note that it is not always possible to completely remove or delete all of your information from our databases and that residual data may remain on backup media or for other reasons, such as a legitimate business reason.

In addition, please note that if you implement a deletion request but later sign up for information or Goods and Services, your most recent request will control our information relationship with you.

Children's Privacy

We recognize the importance of children's safety and privacy. The Site is not designed to attract children and is not intended for use by any children under the age of 16. We do not request, or knowingly collect or sell, any personally identifiable information from children under the age of 16. If you are the parent or guardian of a child under 16 who has provided her or his information to us, please contact us at privacy@lucillesbbq.com.

Automated Decision Making

We may use Automated Decision-Making Technology ("ADMT") to support certain aspects of our Services. ADMT refers to systems, software or processes (including algorithms and artificial intelligence) that make a decision or facilitate human decision-making based on the automated processing of your Personal Information. We may use ADMT for security reasons, such as to detect fraudulent or illegal actions, or to protect consumer safety. When we do so, you cannot opt out of the use of the decision-making technology. Depending on how you interact with our Services, the use of ADMT may affect the content, recommendations, or advertisements you see, the security or monitoring applied to your activity, whether certain transactions require additional verification, your access to certain features or service tiers, or automated responses or suggestions provided to you. We do not use ADMT to make decisions that produce legal or similarly significant effects about you without offering required rights under applicable state law.

Retention of Personal Information

We will retain your Personal Information only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your Personal Information to the extent necessary to comply with our legal obligations (for example, if we are required to retain your Personal Information to comply with applicable laws), resolve disputes and enforce our legal agreements and policies.

All information you provide to us is stored on our secure servers or those of our third-party data storage providers.

We utilize the following criteria to determine the length of time for which we retain Personal Information:

• How long we have had a relationship with you or provided our Goods and Services to you;
• The business purposes for which the information is used, and the length of time for which the information is required to achieve those purposes;
• Whether we are required to retain the information, or the information is otherwise necessary, in order to: comply with legal obligations or contractual commitments: defend against potential legal claims: detect or prevent potential illegal activity or actions in violation of our policies and procedures; secure our systems and online environment; or protect health and safety;
• The privacy impact on individuals of ongoing retention; and
• The manner in which information is maintained and flows through our systems, and how best to manage the lifecycle of information in light of the volume and complexity of the systems in our infrastructure.

Links

For your convenience, the Site and this Privacy Policy may contain links to other websites. We are not responsible for the privacy practices, advertising, products, services, or the content of such other websites. None of the links on the Site should be deemed to imply that we endorse or has any affiliation with the links. Please see our Terms of Use for more information.

Security

We incorporate commercially reasonable safeguards to help protect and secure your Personal Information. However, no data transmission over the Internet, mobile networks, wireless transmission, or electronic storage of information can be guaranteed 100% secure. As a result, we cannot guarantee or warrant the security of any information you transmit to or from our Site, and you provide us with your information at your own risk.

Your California Privacy Rights

This section of Privacy Notice is for California Residents and applies solely to all visitors, users, and others who reside in the State of California. We adopt this Section to comply with the California Consumer Privacy Act of 2018 ("CCPA"). Any terms defined in the CCPA have the same meaning when used in this Section.

Notice at Collection of Personal Information We Collect and Purposes For Use

We will collect Personal Information for the business and commercial purposes outlined below identifying their categories and intended use. We do not collect additional categories of Personal Information or use the Personal Information we collect for materially different, unrelated, or incompatible purposes without providing notice at or before the time the information is collected.

Under the CCPA, "sell" means to disclose, make available, or otherwise communicate Personal Information to a third party for monetary or other valuable consideration. This may include certain disclosures made in connection with advertising or marketing relationships, depending on how the recipient uses the information. "Share" means to disclose Personal Information to a third party for cross-context behavioral advertising.

We will retain each category of Personal Information for the period reasonably necessary to fulfill the purposes described below, unless a longer retention period is required or permitted by law. Please see our "Retention of Personal Information" section above.

If we sell or share Personal Information or use or disclose Sensitive Personal Information ("SPI"), we indicate that in the table below.

Notice of California Privacy Rights

In addition to the rights set forth in the "Your Choices About the Information We Collect" section above, California residents have the following additional privacy rights:

• Right to Know (Categories): To know the categories of Personal Information we collect, the categories of sources from which it is collected, the purposes for which we use it, whether we sell or share it, and the categories of third parties to whom we disclose it.
• Right to Know (Retention): To know the length of time we intend to retain each category of Personal Information, or the criteria used to determine such period;
• Right to Know (Specific Pieces): To access the specific pieces of Personal Information we have collected about you;
• Right to Delete: To request deletion of the Personal Information you have provided to us, subject to certain exceptions;
• Right to Correct: To request that we correct inaccurate Personal Information that we maintain about you;
• Right to Opt-Out of Sale of Personal Information: To direct us not to sell your Personal Information;
• Right to Opt-Out of Sharing: To direct us not to share your Personal Information for cross-contextual behavioral advertising;
• Right to Know About Sensitive Personal Information: To know whether we collect Sensitive Personal Information ("SPI"), the categories of SPI, the purposes for which we use the SPI, and whether the SPI is sold or shared;
• Right to Limit the Use and Disclosure of Sensitive Personal Information: To request that we limit our use and disclosure of your SPI to the purposes permitted by the CCPA; and
• Right to Non-Discrimination: Not to receive discriminatory treatment for exercising any of your CCPA privacy rights.

Please note that if we collected information about you for a single one-time transaction and do not keep that information in the ordinary course of business, that information will not be retained for purposes of a request under this section. In addition, if we have de-identified or anonymized data about you, we are not required to re-identify or otherwise link your identity to that data if it is not otherwise maintained that way in our records.

Request to Know, Correct, or Delete

California residents have the right to request, under certain circumstances, that a business that collects Personal Information about them disclose the information listed below for the preceding 12 months:

• The categories of Personal Information collected about you;
• The categories of sources from which the Personal Information is collected;
• The business or commercial purpose for collecting, disclosing, selling or sharing Personal Information;
• The categories of third parties to whom the business discloses Personal Information for a business purpose;
• The categories of Personal Information that we sold or shared;
• The categories of third parties to whom we sold or shared Personal Information; and
• The specific pieces of Personal Information collected, disclosed, or sold or shared about you.
• Whether we collected Sensitive Personal Information about you and whether such information is sold or shared, subject to applicable exceptions.

You can also request that we correct or delete your Personal Information. There may be certain exceptions to our obligation to correct or delete your information such as if you have an existing account or transaction with us or if we have a legitimate business reason to keep your information.

Please note that if we collected information about you for a single one-time transaction and do not keep that information in the ordinary course of business, that information will not be retained for purposes of a request under this section. In addition, if we have de-identified or anonymized data about you, we are not required to re-identify or otherwise link your identity to that data if it is not otherwise maintained that way in our records.

Personal Information Collected Within Last Twelve (12) Months

We have collected, used and disclosed the following categories of Personal Information from consumers within the last twelve (12) months:

Information related to how long we retain each category of Personal Information is included in the Retention of Personal Information section above.

Do Not Sell My Personal Information

As a California resident, you also have the right, at any time, to tell us not to sell Personal Information – this is called the "right to opt-out" of the sale of Personal Information. We do not sell Personal Information, but we recognize that some privacy laws define "Personal Information" in such a way that making available identifiers linked to you for a benefit may be considered a "sale." To opt-out of this, please click on this link.

Right to Limit Use of Sensitive Personal Information

California residents have the right to limit the use of each type of Sensitive Personal Information for each purpose with each type of third-party partner. Please note that we only keep your Sensitive Personal Information for a limited time, and only for the purposes for which it is required such as your employment with us. As such, we do not use Sensitive Personal Information for purposes that give rise to the right to limit its use under California law. Specifically, we do not provide your Sensitive Personal Information to any third parties other than those service providers that are necessary for us to provide employee benefits to you.

Right Not to Be Discriminated Against

We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not:

• Deny you goods or services.
• Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
• Provide you a different level or quality of goods or services.
• Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

Notice of Financial Incentives

As permitted by the CCPA, we may offer you certain financial incentives through the rewards programs at our restaurants that can result in different prices, rates, or service levels. The information that we collect for enrollment in the program (listed above) allows us to tailor our communications and products and services suggestions for you. This, in turn, helps us establish a stronger relationship with you – something we truly value.

If you participate in our rewards programs, we may send you promotions or discounts on our Goods and Services. The value of these discounts varies and depends on the type of product you are buying. For example, you could receive a discount of a specified amount off your next visit with us or a free food item.

In determining the value of this data to us, we consider the profit generated from your visit to us based on the Personal Information you have provided, which is reasonably correlated to the value provided to the consumer through personalized coupons, promotions, and other discounts or offers.

Participation in our rewards programs is voluntary and requires your prior opt-in consent, which you may revoke at any time. If you wish to leave our rewards programs, please reach out to us using the information in the Contact Us section below.

For full program details, please click on the "EClub" or "Preferred Guest" section on our Home Page.

Exercising Your California Privacy Rights

You or your authorized agent may make a request to access, correct, delete, opt-out of the sale of your Personal Information, or limit the use of your Sensitive Personal Information by contacting us as follows:

• Web Form: Privacy Requests
• Email Address: privacy@lucillesbbq.com
• Toll-Free Number: (888) 914-9661 (please reference PIN #234011)
• Postal Address:

c/o Hof's Hut Restaurants, Inc. Attention: California Privacy Inquiry 2601 E. Willow St. Signal Hill, CA 90755

We also may require you to confirm your identity and your residency to obtain the information, and you are only entitled to make this request twice in a 12-month period. For emails, please include "California Privacy Rights" as the subject line. You must include your full name, email address, and attest to the fact that you are a California resident. We will acknowledge your request within 10 days and respond to your request within 45 days or let you know if we need additional time. If we are unable to honor your request for any reason, we will notify you of the reason within the request time period.

Your Privacy Rights under Other US State Laws

If you live in certain other U.S. states, such as Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, Nevada, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have rights under applicable privacy laws. If you live in Oklahoma or Alabama, you may have rights when the laws in those states become effective. These rights are in addition to those rights set forth in the "Your Choices About the Information We Collect" section above.

Based on the applicable law in the state where you live, you may have the following rights with respect to your Personal Information:

• To confirm whether or not a controller is processing your Personal Data and to access such Personal Data;
• To know the categories of Personal Information we collect about you, the purposes for the collection, how long we retain your Personal Information, and whether that information is sold or shared or disclosed and to whom;
• To correct inaccuracies in your Personal Data;
• To delete your Personal Data;
• To obtain a copy of your Personal Data that you previously provided to us in a portable, and if technically feasible, readily usable format, if processing is carried out by automated means;
• To opt out of the processing of your Personal Data for purposes of (i) targeted advertising, (ii) the sale of Personal Data, or (iii) profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer;

Although we do not have Locations in these states, for Minnesota and Oregon residents, you advise that you have the right to request a list of the specific third parties to whom we have disclosed your personal data.

For Nevada residents, you have the right to request certain information from us regarding the collection and sale of your personal information during your visit to our websites or when you otherwise interact with us online if you have purchased products for personal use. We do not sell your Personal Information.

Not to discriminate against you because you have exercised any of these rights, including by:

• denying you Services;
• charging different prices or rates for our Services, including through the use of discounts or other benefits or imposing penalties;
• providing you a different level or quality of Services; and/or
• suggesting that you will receive a different price or rate for Services, or at a different level or quality of Services.

To exercise any of these rights, you may make a request to confirm, access, correct, delete, obtain a copy, or opt-out of the processing of your Personal Data for targeted advertising, sale, or profiling by using the link to Do Not Sell at the bottom of the webpage, or contact us using the information in the Questions section below. Please include your state of residence.

We may require you to confirm your identity and your residency in order to obtain the information, and you are only entitled to make this request up to twice annually. For emails, please include "Privacy Rights" as the subject line. You must include your full name, email address, and attest to the state in which you are a resident.

We will process your request within 45 days or let you know if we need additional time or cannot process your request. If you make this request by telephone, we may also ask you to provide the request in writing so that we may verify your identity. If we are unable to honor your request for any reason, we will notify you of the reason within the request time period.

Right to Opt Out

You may have the right to opt out of the processing of your Personal Data for purposes of (i) targeted advertising, (ii) the sale of Personal Data, or (iii) profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer. To exercise your right, please click on the link to Do Not Sell on the bottom of the webpage where your information is being collected or write to us at the information in the Questions section below.

Appeals of Our Decisions

In some jurisdictions, you may appeal to us if we refuse to take action on your exercise of certain choices described above. In order to appeal such a refusal, please contact us using the information in the Contact Us section below with the subject line "Appeal of Refusal to Take Action on Privacy Request" and provide the relevant information in the email.

If we decline to take action on any request you make, we will provide you with the information required by the applicable law where you live. This may include an explanation of why we declined your request, information on how to appeal our decision, and/or how to make a complaint to your state Attorney General.

Visitors to the Site Outside of the United States

Our Site is intended for visitors in the United States only. If you are visiting the Site from a location outside of the U.S., your connection will be through and to servers located in the U.S. All information you receive from the Site will be created on servers located in the U.S., and all information you provide will be maintained on web servers and systems located within the U.S. The data protection laws in the United States may differ from those of the country in which you are located, and your information may be subject to access requests from governments, courts, or law enforcement in the United States according to laws of the United States. By using the Site or providing us with any information, you consent to the transfer to, and processing, usage, sharing and storage of your information in the United States and in other countries, as set forth in this Privacy Policy.

Questions / Changes in Privacy Policy

If you have questions or concerns with respect to our Privacy Policy, you may contact us at privacy@lucillesbbq.com.

We may elect to change or amend our Privacy Policy at any time; in such event, we will post the policy changes in our Privacy Policy on the Site, and they will become effective on the date posted. If you are concerned about how your personal information is used, please visit our Site often for this and other important announcements and updates. If required by applicable law, we will notify you of any changes.