Consumer Privacy Rights & Legal Framework
Brick House Tavern + Tap operates strictly in compliance with applicable United States state consumer privacy frameworks (including the California Consumer Privacy Act as amended by the CPRA, Texas Data Privacy and Security Act, Virginia CDPA, Colorado CPA) and the General Data Protection Regulation (GDPR) for visitors accessing our portal from the European Union.
Depending upon your legal residence, you are entitled to exercise the following verifiable consumer rights without discrimination in pricing ($20–40 average check) or service hospitality:
-
Right to Know & Access
Request confirmation of whether we hold personal records, along with a copy of specific data points gathered from dining inquiries.
-
Right to Deletion & Erasure
Demand permanent removal of your contact history, email records, and chat transcripts across our operational databases.
-
Right to Correction & Rectification
Update inaccurate telephone numbers, spelling of guest names, or physical dining address records.
-
Right to Opt-Out of Marketing Attribution
Direct that your records not be processed for cross-context behavioral advertising via platforms such as Google Ads, Microsoft Advertising, or Meta Ads.
Jurisdictional Protections
California (CCPA/CPRA), Texas TDPSA, and US state privacy regulations apply. Visitors from the EU benefit from Chapter III GDPR rights.
What Data We Collect & Store
Because we operate an inquiry-only hospitality catalog and sports tavern, our digital data footprint is purposefully minimal. We do not maintain customer login accounts, do not store passwords, and do not process or store credit card payment numbers online.
Our backend systems hold records strictly when voluntarily submitted through our intake forms or generated automatically during HTTP server sessions:
| Record Category |
Data Fields Retained |
Retention Schedule |
| Dining Inquiries |
Name, phone, email, address, inquiry kind, requested dining specs, message notes, consent timestamp |
24 months from intake |
| Support Chat Dialogs |
Chat messages, temporary session token, visitor body text |
6 months from last message |
| Technical Server Logs |
IP address, browser user-agent, referring URL, timestamp |
60 days rolling purge |
| Consent Preferences |
Consent status recorded under site_consent_v2 |
12 months in visitor browser |
Strict Retention Limits
Inquiries: 24 months. Chat logs: 6 months. Access logs: 60 days. Consent choice: 12 months.
Identity Verification Protocol
To protect your confidential information and prevent unauthorized disclosures, we must verify that you are the lawful owner of the submitted records before fulfilling any access or deletion request.
Our verification workflow follows three straightforward steps:
Intake Submission
Submit the intake form below identifying the specific email or telephone number associated with your past dining reservations or inquiries.
Channel Verification
Within 7 days, our privacy officer transmits a verification challenge code directly to the provided email address or phone line.
Fulfillment or Purge
Upon return confirmation, your data report is delivered securely or your records are permanently scrubbed from our systems.
We will never ask you for sensitive government identifiers, social security numbers, or payment banking details to verify a tavern dining inquiry record.
No Sensitive IDs Needed
We verify requests through matching telephone or email channels. We never ask for SSNs or banking credentials.
Official DSAR Intake Form
Complete this form to initiate your privacy request. The submission posts directly to our secure handler at dogo172.php and alerts our management team at 12910 Northwest Fwy, Houston, Texas.
Appeals & Regulatory Complaints
If you disagree with our resolution of your data request, you have the right under applicable state law to file an internal appeal with our managing operator by emailing [email protected] with the subject line "DSAR Appeal".
You also maintain the right to submit an official regulatory complaint directly to relevant enforcement authorities:
-
California Residents
Complaints may be submitted directly to the California Privacy Protection Agency (CPPA) at
cppa.ca.gov or the California Office of the Attorney General.
-
Texas & Other US Residents
Complaints may be lodged with the Office of the Texas Attorney General Consumer Protection Division or your local state Attorney General.
-
European Union Residents
Complaints may be filed with your local National Data Protection Authority under GDPR Article 77.