Privacy Policy & Consumer Data Protection

Effective Date

This privacy policy took effect on October 13, 2026. It applies to all interactions with the marketing website and digital inquiry tools operated at brickhousetaverna.com. Any updates will be reflected with a revised date at the top of this document.

Data Controller

The data controller responsible for personal information processed through this website is Brickhousetaverna, trading online at brickhousetaverna.com. Our physical establishment and postal address is located at 12910 Northwest Fwy, Houston, Texas 77040, Houston, Texas, United States. You can reach our management team by telephone at 716-834-1490 or by electronic mail at [email protected].

Categories of Data Collected

Our website functions as an inquiry-only hospitality catalogue and booking intake portal. We collect only what is strictly necessary to arrange dining service, answer questions, and monitor site operations:

• Inquiry Form Data: When you submit a table or group feast request through dogo172.php, we collect your name, phone number, email address, physical address or Houston neighborhood, inquiry kind, event specification, message notes, and affirmative consent confirmation.
• Technical & Log Data: Automatic server logs capture your IP address, browser user-agent string, referring URL, timestamp of page rendering, and timestamp of form submission.
• Support Chat Logs: The support chat widget communicates via kiloa0d.php, storing chat transcripts and an assigned local session token.
• Advertising Click Identifiers: We capture campaign click identifiers when you land on our site from paid advertisements: gclid for Google Ads, msclkid for Microsoft Advertising, and fbclid for Meta Ads.

We do not create customer accounts, we do not require passwords, and we do not process debit or credit card payments on this website. Nothing is sold online and no payment transaction is taken through our web servers.

Purposes of Data Processing

We process your personal information strictly for genuine restaurant hospitality and administrative purposes:

• Reviewing and responding to table reservation requests, private dining inquiries, and game day watch bookings.
• Operating the interactive support chat and clarifying draft beer line questions or menu allergens.
• Monitoring server uptime, preventing fraudulent spam form submissions, and securing our web infrastructure.
• Evaluating the performance of our advertising campaigns across search engines and social platforms.

Legal Bases for Processing

We process personal data only when an established legal ground exists under applicable law:

Advertising Platforms and Click Identifiers

This website receives paid traffic from commercial ad campaigns. We actively run campaigns across three designated advertising platforms: google ads, microsoft advertising, and Meta Ads. Each platform appends a unique cryptographic query parameter to our destination URL when a user clicks our sponsored ad:

• Google Ads: Appends the gclid (Google Click Identifier) parameter to evaluate search query performance.
• Microsoft Advertising: Appends the msclkid (Microsoft Click Identifier) parameter to measure Bing and partner network conversions.
• Meta Ads: Appends the fbclid (Facebook Click Identifier) parameter for social campaign reach analysis.

No platform review or endorsement is claimed or implied. These identifiers allow our systems to tie an incoming inquiry back to the specific advertisement that generated the visit without storing invasive biometric or behavioral profiling.

Google Consent Mode v2 Architecture

To honor visitor autonomy and comply with international privacy directives, we implement Google consent mode v2 across all analytics and advertising tags. The four canonical tracking signals are initialized strictly in a denied status upon page load:

• ad_storage: Held denied until explicit permission is granted.
• ad_user_data: Held denied until explicit permission is granted.
• ad_personalization: Held denied until explicit permission is granted.
• analytics_storage: Held denied until explicit permission is granted.

If you click “Decline” on our banner or withdraw your consent, all four parameters are immediately switched back to denied. No marketing cookies or ad tracking pixels are written to your browser when consent is refused.

Third-Party Data Processors

We work with trusted third-party technical providers who process data strictly under our contractual instructions:

• Google LLC / Google Ireland Ltd: Provides Google Ads conversion measurement and Google Consent Mode v2 integration.
• Microsoft Ireland Operations Ltd: Provides Microsoft Advertising conversion metrics; its handling of personal data is governed by the Microsoft Privacy Statement available at privacy.microsoft.com.
• Meta Platforms Ireland Ltd / Meta Platforms Inc: Provides Meta Ads attribution measurement.
• Infrastructure & Mail Providers: Our hosting provider operates secure web servers housing the inquiry database, and our SMTP mail relay securely transmits booking alerts to our restaurant floor team.

International Data Transfers

Our web servers are hosted within the United States. If you visit brickhousetaverna.com from outside the United States, your personal data will be transferred to and processed in the US. We rely on standard contractual clauses (SCCs) and adequacy determinations recognized under international law to protect cross-border data transfers.

Data Retention Periods

We do not keep personal data indefinitely. We adhere to exact, documented retention windows based on business need and legal liability statutes:

• Table Inquiries & Email Notifications: Retained for exactly 24 months from submission, after which records are purged from our database.
• Support Chat Transcripts: Retained for exactly 6 months to assist with customer service follow-ups.
• Server Access & Security Logs: Retained for exactly 60 days for network forensic and intrusion defense.
• Consent Choice Records: Stored locally under site_consent_v2 for exactly 12 months before requiring re-prompting.
• Data Subject Access Requests (DSAR): Logged and answered within 7 days of verified identity receipt.

Data Security Measures

We protect visitor information using commercial best practices: mandatory 256-bit TLS encryption in transit, strict database access restrictions, firewall monitoring, bot mitigation via honeypots, and regular security patching of all server infrastructure.

European & UK Visitor Rights (GDPR)

For visitors accessing our website from the European Union, European Economic Area, or United Kingdom, the General Data Protection Regulation (gdpr) grants specific legal rights regarding personal data:

• Right to Access: You may request a copy of the personal information we hold about you.
• Right to Rectification: You may correct inaccurate or incomplete contact records.
• Right to Erasure (“Right to be Forgotten”): You may request complete deletion of your booking inquiry logs.
• Right to Restriction: You may restrict the scope of how we process your records while a dispute is resolved.
• Right to Data Portability: You may receive your data in a structured, machine-readable JSON or CSV format.
• Right to Object: You may object to data processing grounded on our legitimate interests.
• Right to Withdraw Consent: You may withdraw cookie or marketing consent at any time without penalty.

United States State Privacy Rights (CCPA / CPRA & Others)

Under United States state privacy regulations, including the California Consumer Privacy Act (ccpa) as amended by the California Privacy Rights Act (CPRA), and equivalent laws in Texas, Virginia, Colorado, and other states, residents hold enforceable privacy rights:

• Right to Know & Access: You can request disclosure of specific pieces of personal information collected.
• Right to Delete: You have the right to request deletion of personal information collected from you.
• Right to Correct: You may request correction of inaccurate personal records.
• Right to Opt Out of Sale / Sharing: We do not sell your personal data for monetary consideration. However, because ad tracking tags may be classified as “sharing” under CCPA, you may opt out at any time by declining cookies or enabling Global Privacy Control.
• Non-Discrimination: We will not deny you restaurant seating, alter food prices, or change tavern service quality because you exercised your privacy rights.

Global Privacy Control (GPC)

Our website actively respects the global privacy control browser signal (Sec-GPC). When your browser sends a valid Global Privacy Control header indicating an opt-out preference, our systems automatically treat this as an explicit refusal of non-essential cookies and targeted advertising tracking, disabling analytics and marketing pixels without requiring additional manual steps.

Children’s Privacy Protection

This website is directed toward adults, families, and sports enthusiasts of legal dining age. We do not knowingly solicit or collect personal information from individuals under the age of 13 (or under 16 where required by state or international laws). If we discover that a minor has provided information through our inquiry form, we will delete that data immediately.

Regulatory Complaints

If you believe that our handling of your personal data violates applicable privacy laws, you have the right to file a complaint with a regulatory oversight authority. In the United States, you may contact the Office of the Attorney General in your respective state, or the California Privacy Protection Agency (CPPA) if you are a California resident. Visitors in the European Union may lodge a complaint with their national Data Protection Authority (DPA).

Exercising Your Data Rights

To exercise any of your privacy rights (including access, erasure, correction, or portability), you can submit a formal request through our Data Request Intake Portal or send a written notice to our privacy coordinator at [email protected]. You may also mail your request to:

Brickhousetaverna • Privacy Desk
12910 Northwest Fwy, Houston, Texas 77040, Houston, Texas, United States

We verify the identity of the requester to ensure personal data is not inadvertently exposed. A data request is answered within 7 days of identity verification, free of charge.

Changes to This Privacy Policy

We may update this privacy statement periodically to reflect changes in our hospitality operations, legal requirements, or advertising platform standards. When material revisions occur, we will update the “Effective Date” at the head of this page. Continued use of brickhousetaverna.com following posted revisions constitutes acceptance of the updated terms.

Contact Information

If you have questions, comments, or concerns regarding our privacy practices or how your reservation inquiries are handled, please reach a human representative using our verified contact channels: