Privacy Policy

Effective Date: April 10, 2026  |  Last Updated: September 7, 2026

Karachi Chaat House ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website at karachichaathouse.com, dine at our restaurant, or participate in our ChaatPass loyalty program.

1. Information We Collect

We may collect the following types of information:

• Personal information you provide voluntarily, such as your name, email address, and phone number when signing up for ChaatPass or contacting us.
• Transaction data including order history and loyalty point activity through our ChaatPass program.
• Usage data such as pages visited, browser type, and device information when you visit our website.
• Location data if you interact with location-based features on our website or app.

2. How We Use Your Information

We use the information we collect to:

• Operate and manage your ChaatPass loyalty account
• Process orders and transactions
• Send you updates about promotions, new menu items, and events (with your consent)
• Respond to your inquiries and customer service requests
• Improve our website, menu, and services
• Comply with legal obligations

3. How We Share Your Information

We do not sell your personal information to third parties. We may share your information with:

• Service providers who assist us in operating our website, processing payments, or managing our loyalty program (e.g., Square, Supabase, Twilio)
• Legal authorities if required by law or to protect our rights

4. ChaatPass Loyalty Program

By enrolling in ChaatPass, you consent to the collection of your purchase history and loyalty point activity for the purpose of administering your rewards account. ChaatPass data is governed by this Privacy Policy. Points expire 12 months after the date they are earned. Full program terms are on our Terms & Refunds page and at chaatpass.com.

5. Text Messages (SMS)

Karachi Chaat House sends text messages (SMS) through Twilio, our messaging provider. This section describes the program as it runs.

Who receives texts.

• ChaatPass members who opted in when joining at our in-store kiosk or the table QR code.
• Anyone who places an online order receives order texts at the mobile number given at checkout: an order confirmation, a delivery tracking link for delivery orders, and a refund notice if a delivery cannot be dispatched.
• Members who redeem points on an online order receive a one-time verification code by text.

How consent is captured. At the kiosk, you opt in by tapping Continue on the phone-entry screen after the consent disclosure shown there. At the table QR code, you opt in by ticking the consent box on the signup form. When you opt in we record that you did, the version of the consent text you were shown, and the time. Consent is not a condition of purchase.

What we send and how often. A welcome text when you join ChaatPass; order texts for each order you place; verification codes when you redeem; and, to members who opted in, occasional recurring automated marketing texts such as a "we miss you" message. Marketing texts are limited to no more than one per member in any 30-day period and are sent only between 9 AM and 8 PM Chicago time. Message frequency otherwise varies with how often you order.

How to opt out. Reply STOP to any message at any time to stop receiving texts from us. Reply HELP for help. You can also contact us using the details in Section 10.

Message and data rates may apply. Carriers are not liable for delayed or undelivered messages.

6. Cookies & Tracking

Our website may use cookies and similar tracking technologies to enhance your experience. You can control cookie settings through your browser preferences. Disabling cookies may affect certain features of our website.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. You may request deletion of your data at any time by contacting us (see Section 10).

8. Data Security

We implement reasonable technical and organizational measures to protect your information from unauthorized access, loss, or misuse. However, no method of transmission over the internet is 100% secure.

9. Children's Privacy

Our services are not directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. Your Rights

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate data
• Request deletion of your personal information
• Opt out of marketing communications at any time

To exercise any of these rights, contact us at the information below.

11. Third-Party Links

Our website may contain links to third-party websites (such as Facebook, Instagram, or Google). We are not responsible for the privacy practices of those sites and encourage you to review their policies separately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of our services after changes constitutes acceptance of the updated policy.