NOODLES & COMPANY PRIVACY NOTICE FOR UTAH RESIDENTS

Last Updated On August 1, 2023

This Privacy Notice for Utah Residents (the “UT Privacy Notice”) supplements the information contained in the Noodles & Company (“Noodles,” “we,” or “us”) Privacy Notice and applies solely to all visitors, users, and others who reside in the State of Utah (“consumers” or “you”). We adopt this UT Privacy Notice to comply with applicable Utah law, including the Consumer Privacy Act, as amended from time to time (hereinafter “UCPA”), and any terms defined in the UCPA have the same meaning when used in this UT Privacy Notice. Any other capitalized but undefined terms shall have the meanings set forth in the general Privacy Notice.

Please note that some of our restaurants are owned and operated by franchisees, who are independent from us. This UT Privacy Notice does not apply to franchisees or to websites or mobile apps that they operate. Please refer to our applicable franchisees’ privacy notices for information on how they collect and use your information.

As used in this UT Privacy Notice, “Personal Data” means any information that is linked or reasonably linkable to an identified or identifiable natural person. Personal Data does not include de-identified data, publicly available information, or data outside the scope of the UCPA.

HOW WE COLLECT, USE, AND DISCLOSE YOUR PERSONAL DATA

We collect, use, and disclose your Personal Data as set forth in the Privacy Notice.

Please note that the collection of precise geolocation is considered sensitive Personal Data under the UCPA. We will obtain your explicit consent and provide your ability to opt into such collection prior to any collection of this information.

If we use de-identified data, we also will maintain and use such de-identified data without attempting to re-identify such data.

RIGHTS AND CHOICES OF UTAH RESIDENTS

The UCPA also provides Utah residents with specific rights regarding their Personal Data. This section describes the rights of Utah residents under the UCPA, and explains how to exercise those rights.

Opt-Out Rights

Our use of tracking technology, including cookies and related technology, may be targeted advertising under the UCPA. If you would like to opt-out of this advertising you may click “Do Not Sell Or Share My Personal Information” (also found at the bottom of the page).

Access Rights

Utah residents have the right to request that we disclose certain information to you about our collection and use of your Personal Data. You may request (see Exercising Rights) the following:

• confirmation of whether or not we are processing your Personal Data.
• access to your Personal Data that we process.

Once we receive and verify a Utah resident’s consumer request (see Exercising Rights), we will provide confirmation/access to the applicable Personal Data. Please also see Data Portability Rights for how we may provide information.

Deletion Rights

Utah residents have the right to request that we delete any of their Personal Data that we collected from the Utah residents, subject to certain exceptions. Once we receive and verify a Utah resident’s consumer request (see Exercising Rights), we will delete their Personal Data from our records.

Data Portability Right

Utah residents have a right to request that we provide a portable copy of the Personal Data that the Utah consumer previously provided to us. Once we receive and verify the consumer request (see Exercising Rights), we will provide a copy of your Personal Data, to the extent reasonably and technically feasible, in a readily useable format to transmit the data to another business.

EXERCISING RIGHTS

Only Utah residents may make a “verifiable consumer request” (subsequently referred to as a “consumer request”) related to a Utah resident’s Personal Data. A Utah resident may also make a verifiable consumer request on behalf of their minor child or in the case of a guardianship or similar person, the guardian may exercise such rights on a Utah resident’s behalf. To be verifiable, a consumer request must include:

• Provide sufficient information that allows us to reasonably verify that the Utah resident is the person about whom we collected Personal Data or an authorized representative.
• Describe the request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We cannot respond to your request or provide a Utah resident with Personal Data if we cannot verify their identity or authority to make the request and confirm the Personal Data relates to that Utah resident.

To exercise the rights described above, please submit a consumer request to us by:

• Calling us at 720-214-1900; or
• Emailing us at [email protected].

INITIAL REQUEST RESPONSE TIMING AND FORMAT

We endeavor to respond to a consumer request within 45 days of its receipt. If we require more time (for a maximum total of 90 days), we will notify the Utah resident within 45 days of receiving the request along with the estimated time of delay. Any disclosures we provide will only cover the 12-month period preceding the receipt of a consumer request. The response we provide will also explain the reasons we cannot comply with a request, if applicable.

We do not charge a fee to process or respond to a Utah resident’s verifiable consumer request unless the request is excessive, manifestly unfounded, more than once in a 12-month period, or we believe the request, individually or as part of an organized effort, is intended to harass or disrupt our business. If we determine that the request warrants a fee, we will tell the Utah resident why we made that decision and provide him/her with a cost estimate before completing the request. Alternatively, we may decline to respond to the request and notify the Utah resident of our reason for doing so.

NON-DISCRIMINATION

We will not process Utah residents’ Personal Data in violation of state and federal laws that prohibit unlawful discrimination against Utah residents. We will also not discriminate against a Utah resident for exercising any of his/her UCPA rights. Unless permitted by the UCPA, we will not:

•    Deny a Utah resident goods or services.
•    Charge a Utah resident different prices or rates for goods or services.
•    Provide a Utah resident a different level or quality of goods or services, including denial of goods or services.

CHANGES TO OUR PRIVACY NOTICE

From time to time, we may update this UT Privacy Notice. If our information practices materially change at some time in the future, we will post the updated notice to our Site or Mobile App to notify you of these changes, and we will only use data collected from the time of the notice change forward for these new or different purposes. In the event we make a material change to how we use your Personal Data, we will provide you with an opportunity to opt out of such new or different use. The date this UT Privacy Notice was last revised is at the top of this page. You are responsible for periodically reviewing the Site and this UT Privacy Notice to check for any updates or changes.

CONTACT INFORMATION

If you have any questions or comments about this UT Privacy Notice, the ways in which Noodles collects and uses your data described below and in the Privacy Notice, your choices and rights regarding such use, or wish to exercise your rights under Utah law, please do not hesitate to contact us at:

Phone: 1-833-568-6108
Website: www.noodles.com
Email: [email protected]
Postal Address:
Noodles & Company
Attn: Noodles Guest Relations
520 Zang Street, Suite D
Broomfield, CO 80021