Privacy Policy

Last Updated: August 22, 2026

GK Mongolian BBQ ("we," "our," or "us") respects your privacy. This Privacy Policy describes how we collect, use, and share information when you visit our website, dine with us, place an order, or interact with our online services.

1. Information We Collect

We collect information directly from you, automatically when you browse our website, and through trusted third-party service providers:

• Direct Identifiers: Name, email address, phone number, physical address, and communication preferences when you fill out contact forms, sign up for rewards, or make catering inquiries.

• Commercial & Transaction Information: Records of menu items purchased, order history, and catering requests processed through our integrated vendors. (Note: Payment card details are tokenized and processed securely by third-party payment processors; we do not store full credit card numbers).

• Device & Internet Activity: IP address, browser type, operating system, device identifiers, referring URLs, and interaction data (such as pages viewed, buttons clicked, and time spent).

2. How We Use Your Information

We use personal information to:

• Provide, fulfill, and manage your dine-in, takeout, online ordering, and catering requests.

• Communicate order updates, promotional offers, and customer support responses.

• Measure and improve our website performance, customer experience, and menu offerings.

• Deliver targeted advertising, retargeting campaigns, and custom audience promotions via Meta (Facebook & Instagram) and other advertising platforms.

• Detect, investigate, and prevent fraudulent transactions and maintain website security.

3. Cookies, Tracking Technologies & Advertising

We use cookies, web beacons, and pixels (including the Meta Pixel) to track website interactions:

• Targeted Advertising (Cross-Context Behavioral Advertising): The Meta Pixel allows us to understand customer actions on our site and display relevant advertisements to you on Facebook, Instagram, and associated ad networks.

• Analytics: We use analytics cookies to measure site traffic and customer engagement patterns.

• Managing Cookies: You can accept, reject, or customize non-essential tracking cookies via our Cookie Consent Banner. You can also adjust your browser settings to block or alert you about cookies.

4. Third-Party Service Providers

We share data with trusted third-party service providers to facilitate restaurant operations, fulfill orders, process payments, and support our marketing:

• Online Ordering & Storefront Services (DoorDash): When you place an online order or use our integrated ordering buttons powered by DoorDash Storefront, your order and transaction details are processed according to the DoorDash Privacy Policy.

• Payment Processing & Rewards (Square): When you make a purchase or participate in our customer rewards program, transactions are processed subject to Square's Privacy Policy.

• Catering Services (ezCater): Catering inquiries and fulfillment initiated through our site are governed by the ezCater Privacy Policy.

• Targeted Advertising & Marketing (Meta Platforms, Inc.): We share device identifiers, browsing activity, and engagement signals via the Meta Pixel to deliver tailored ads, build custom audiences, and measure ad performance across Facebook and Instagram.

5. California Privacy Rights (CCPA / CPRA Notice)

If you are a California resident, California law provides specific rights regarding your personal information:

• Right to Know & Access: You have the right to request the categories and specific pieces of personal information we have collected, used, and disclosed over the past 12 months.

• Right to Delete: You have the right to request the deletion of personal information we have collected from you, subject to legal exceptions (such as completing an active transaction).

• Right to Correct: You have the right to request corrections to inaccurate personal information.

• Right to Opt-Out of Sale or "Sharing": Under California law, sharing personal information with third parties (like Meta) for targeted or cross-context behavioral advertising may qualify as "sharing." You have the right to opt out.

• Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights.

How to Exercise Your Rights:

• Submit an opt-out or deletion request by emailing gkmongolianroseville@gmail.com with the subject line "California Privacy Request".

• We recognize and honor Global Privacy Control (GPC) opt-out preference signals sent by your browser.

6. Data Security & Retention

We maintain appropriate organizational and technical safeguards to protect your personal data. We retain personal information only for as long as necessary to fulfill transactions, satisfy legal obligations, resolve disputes, and enforce agreements.