1. Who we are & scope

Great NH Restaurants, Inc. and our restaurant brands: T-BONES, Cactus Jack’s, Copper Door, and FEEDNH.org (collectively, the “Services”).

This notice applies to personal information we collect online (websites, mobile experiences, forms) and offline (in-restaurant, events) when you interact with our Services in New Hampshire.

Controller: Great NH Restaurants, Inc. acts as the Controller under RSA 507-H and is responsible for this notice and for fulfilling consumer rights. Our vendors may act as Processors on our behalf.

2. Categories of personal data we collect

Data you provide

  • Contact details (name, email, phone, mailing address)
  • Account & loyalty info (program ID, activity)
  • Reservations, event, or feedback form details
  • Payment-related details (handled by payment processors)

Data we obtain automatically or from others

  • Device & usage (pages viewed, IP address, approximate location)
  • Cookies/identifiers for analytics and experience
  • Gift card activity and transaction metadata
  • Information from service providers (e.g., delivery, marketing)
More about cookies & analytics
We use functional cookies and may use analytics to improve our Services. Where required, we will provide controls to manage preferences.

3. Why we use personal data (purposes)

  • Provide Services (dining, reservations, loyalty, gift cards, support)
  • Process transactions and prevent fraud/abuse
  • Communicate about your account and respond to inquiries
  • Send promotions and updates when you opt in
  • Improve menus, websites, and guest experience
  • Comply with law and enforce terms

4. Sharing & categories of third parties

We share personal data only as needed to operate our Services:

  • Payment processors (securely handle payments)
  • Loyalty & gift card providers
  • IT & cloud hosting and security providers
  • Marketing & communications platforms (with your consent/opt-in)
  • Google Analytics and website operations vendors
  • Professional advisors and as required by law
We do not sell personal data. If our practices change, we will update this notice and provide required opt-out choices.

5. Your rights under RSA 507-H

Subject to certain exceptions, New Hampshire consumers have the right to:

  • Access personal data we process about you
  • Correct inaccuracies in your personal data
  • Delete your personal data
  • Obtain a copy of your data in a portable, usable format
  • Opt-out of targeted advertising, the sale of personal data, or profiling in furtherance of solely automated decisions that produce legal or similarly significant effects

You may exercise these rights once in any 12-month period free of charge. Additional or unfounded/excessive/repetitive requests may be subject to a reasonable fee or denial as permitted by law.

6. How to submit a request, timelines & appeals

You can submit a privacy request using either of these secure methods:

Submit a Privacy Request Email: privacy@greatnhrestaurants.com

Response timelines

  • We will respond without undue delay and no later than 45 days after receiving your request.
  • We may extend by an additional 45 days when reasonably necessary; we will notify you within the initial 45-day period with the reason for the extension.

Identity verification

We may request information to verify your identity using commercially reasonable efforts. If we cannot authenticate your request, we will notify you and provide instructions for resubmission.

If we decline your request

If we decline to act on your request, we will explain why within 45 days and provide instructions on how to appeal.

Appeals

You may appeal a denial by following the instructions provided in our response. We will respond to appeals within 60 days with a written explanation. If your appeal is denied, we will provide a method to contact the New Hampshire Attorney General’s Office to submit a complaint.

Deletion requests for data obtained from other sources
Where we obtained personal data about you from a source other than you, we may comply with a deletion request by retaining a record of the deletion request and the minimum data needed to ensure your data remains deleted and not used for other purposes, as permitted by RSA 507-H.

7. Opt-out of targeted ads, sale, or profiling

You may opt-out of the processing of your personal data for targeted advertising, the sale of personal data, or profiling in furtherance of solely automated decisions that produce legal or similarly significant effects.

Manage Preferences / Opt-Out Have a Question?

We are not required to authenticate an opt-out request, but may deny a request we have a good-faith, reasonable, and documented belief is fraudulent. If denied, we will send a notice explaining why.

8. Data security & retention

We use technical and organizational measures to protect personal data. We retain personal data only as long as necessary for the purposes described in this notice or as required by law. Retention periods can vary by data type and legal requirements.

9. Children’s privacy

Our Services are intended for general audiences. We do not knowingly collect personal data from children under 13 without appropriate consent where required. If you believe a child has provided us personal data, please contact us so we can take appropriate action.

10. Accessibility

This Privacy Notice is provided in a reasonably accessible format and is compatible with digital accessibility tools. If you need this information in an alternative format, please contact us using the methods below.

11. Changes to this notice

We may update this Privacy Notice from time to time. We will revise the “Last updated” date at the top and make the updated notice available where this notice is posted.

12. Contact us

If you have questions about this Privacy Notice or how we handle your data, contact us:

If you are not satisfied with our response, you may contact the New Hampshire Attorney General’s Office to submit a complaint.

Appendix: Key definitions

Controller

The person or entity that determines the purpose and means of processing personal data (Great NH Restaurants, Inc.).

Processor

A person or entity that processes personal data on behalf of a controller (e.g., our service providers).

Personal data

Information that is linked or reasonably linkable to an identified or identifiable individual, subject to statutory exceptions.

Targeted advertising / Sale / Profiling

As used in RSA 507-H regarding consumer rights to opt-out of these practices.

↑ Back to top