Last Revised: June 3, 2025
Steak ‘n Shake Enterprises, Inc., its affiliates, subsidiaries, divisions or designees (“Steak ‘n Shake” or “we” “us” and “our”) are committed to protecting the information of visitors and consumers who use our products and services. This California Privacy Disclosure (“Disclosure”) outlines how Steak ‘n Shake collects, uses, and discloses the personal information of California consumers covered by the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively, the “CCPA”). The words “you” and “your” refer to you as a user of the Website (defined below); “consumer” shall mean California consumers as defined in the CCPA.
This Disclosure describes the types of information we collect from you anywhere, including our restaurant locations in the United States (excluding Hawaii and U.S. Territories), our websites at www.steaknshake.com, and other websites where we post this Disclosure, and mobile applications (collectively, “Website”).
PRIVACY POLICY; TERMS OF USE
This Disclosure is incorporated by reference and should be read in conjunction with Steak ‘n Shake’s (1) Privacy Policy and (2) Terms of Use.
PERSONAL INFORMATION WE COLLECT
To ensure that we provide you with the best possible experience, we will store, use, and share personal information about you in accordance with this Disclosure. Personal information is information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular user, household or device (“Personal Information”). We may collect the following categories of Personal Information from visitors and users of the Website. Additionally, the “Disclosed” column below details what categories of Personal Information have been disclosed in the past 12 months and to which category of third parties.
| Category | Examples | Collected | Disclosed |
|---|---|---|---|
| Identifiers. | A first and last name, postal address, email address, telephone number, date of birth, unique personal identifier, online identifier, Internet Protocol address, account name. | YES | YES – Affiliates and/or Service Providers. |
| Personal information categories listed in the California Customer Records statute (Cal. Civ. | A first and last name, signature, postal address, telephone number, bank account number, credit card number, debit card number, or any other financial information. | YES | |
| Code § 1798.80(e)). | Information in this section may overlap with other data categories. | ||
| Protected classification characteristics. | Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information). | NO | |
| Centro comercial Moctezuma | Francisco Chang | Mexico | |
| Commercial information. | Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. | YES | YES – Affiliates and/or Service Providers. |
| Sensitive Personal Information | Precise geolocation, financial account, debit card, credit card number with security, or access code or password. | YES | YES – Payment Processors; and/or Service Providers. |
| Biometric information. | Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data. | NO | N/A |
| Internet or other similar network activity. | Browsing history, search history, information on a consumer’s interaction with a website, application, or advertisement. | YES | YES – Service Providers. |
| Geolocation data. | Physical location or movements when finding your local restaurant. | YES | YES – Service Providers. |
| Sensory data. | Audio, electronic, visual, thermal, olfactory, or similar information. | NO | N/A |
| Professional or employment-related information. | Current or past job history and other information normally contained in a resume. | YES | YES – Affiliates and/or Service Providers. |
| Non-public education information. | Physical location or movements when finding your local restaurant. | NO | N/A |
| Inferences drawn from other Personal Information. | Profile reflecting a person’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. | NO | N/A |
We obtain the categories of Personal Information listed above from the following categories of sources:
- Directly from you. For example, when you:
- register yourself with the Website;
- purchase a gift card;
- utilize online ordering or make a payment;
- place an order at one of our restaurants
- make purchases from the e-store;
- enter a contest or sweepstakes or participate in a promotion;
- want to fill out customer comment cards;
- join our customer loyalty programs and/or email lists;
- E-mail or other forms of electronic communication, including website submission, are not secure and/or confidential means of communication.
- subscribe to one of our e-newsletters;
- review or comment on one of our products;
- submit a job application; or
- otherwise communicate with us, such as contacting us for more information.
- Indirectly from you. For example, through information we collect from you in the course of providing our services to you.
- Directly and indirectly from activity on our Website. For example, from Website usage details that are collected automatically. For more information on automatic information collection, please review the “Automatically Collected Information” section in the Privacy Policy.
USE OF PERSONAL INFORMATION
We do not sell or lease your Personal Information to any third party. We may disclose your Personal Information to a third party for a business purpose. For information about what categories of Personal Information are disclosed by Steak ‘n Shake and to which third parties, please see the “PERSONAL INFORMATION WE COLLECT” section above and the “How We Use and Disclose Personal Information” section of our Privacy Policy.
Duration. The length of time Steak ‘n Shake intends to retain each category of Personal Information, including sensitive personal information, if any, is for as long as reasonably necessary to carry out Steak ‘n Shake’s intended business purpose for such information.
YOUR RIGHTS AS A CALIFORNIA CONSUMER
Shine the Light Law. Pursuant to California Civil Code Section 1798.83, we will not disclose or share your Personal Information with third parties for the purposes of third-party marketing to you without your prior consent.
Do Not Track Signals. Other than as disclosed in this Disclosure, the Website does not operate any differently when it receives Do Not Track signals from your internet web browser.
WE DO NOT SELL OR SHARE YOUR PERSONAL INFORMATION. If we ever decide to “sell” or “share” (i.e., targeted advertising) Personal Information, as those terms are defined under the CCPA, we will update you via this Disclosure and include a link entitled “Do Not Sell or Share My Personal Information,” to provide you with an opportunity to opt out of the selling or sharing of your Personal Information.
- Access. You have the right to request that we disclose certain information to you about our collection, use and disclosure of your Personal Information over the past twelve (12) months. Any disclosures we provide will only cover the 12-month period preceding the receipt of your request. The response we provide will also explain the reasons we cannot comply with a request, if applicable.
- Correction. You can correct what Personal Information we maintain by accessing your account directly, or by contacting us to request that we correct or rectify any Personal Information that you have provided to us.
- Limit Use and Disclosure of Sensitive Personal Information. If we collect any sensitive personal information, you have the right to request that we limit the use of the sensitive personal information to that use which is necessary to perform the services or provide the goods reasonably expected by an average consumer who requests those goods or services.
- Portability. Upon request and when possible, we can provide you with copies of your Personal Information. When such a request cannot be honored, we will advise you accordingly. You can then choose to exercise any other rights under this Disclosure
- Deletion. You have the right to request that we delete any of your Personal Information, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers to delete) your Personal Information from our records, unless an exception applies. Where applicable, we will ensure such changes are shared with trusted third parties.
- Opt-out of Processing. You have the right to request that we do not sell your Personal Information, use your Personal Information for Targeted Advertising, or use your Personal Information for profiling. Where applicable, we will ensure such changes are shared with trusted third parties.
- Non-Discrimination.If a California consumer exercises his or her rights under the CCPA, we shall not discriminate against that consumer by denying our goods or services, charging different prices or rates to similarly situated consumers, providing a different level or quality of our goods or services, or taking any other adverse action.
- Exercising your rights. If you are California consumer who chooses to exercise the rights listed above, you can:
- Submit a request via email at snsprivacy@steaknshake.com; or
- Call us at 317-633-4100 to submit your request.
Only you, or someone legally authorized to act on your behalf, may make a request related to your Personal Information. If an authorized agent makes a request on your behalf, we may require proof that you gave the agent permission to submit the request.
Responding to Your Request. Upon receiving your request, we will confirm receipt of your request by sending you an email confirming receipt. To help protect your privacy and maintain security, we may take steps to verify your identity before granting you access to the Personal Information. In some instances, such as a request to delete personal information, we may first separately confirm that you would like for us to in fact delete your Personal Information before acting on your request.
We will respond to your request within forty-five (45) days. If we require more time, we will inform you of the reason and extension period in writing. You may have the right to appeal our decision regarding your request. If you would like to appeal our decision, please contact us using the contact information provided above.
In some cases our ability to uphold these rights for you may depend upon our obligations to process Personal Information for security, safety, fraud prevention reasons, compliance with regulatory or legal requirements, or because processing is necessary to deliver the services you have requested. Where this is the case, we will inform you of specific details in response to your request.
CHANGES TO THIS DISCLOSURE
This Disclosure may be amended from time to time and we shall post the revised Disclosure on our Website. Changes will be effective upon posting.
CONTACT US
We value your opinions and welcome your feedback. To contact us about this Disclosure or your Personal Information, please contact us at:
a. snsprivacy@steaknshake.com; or
b. Send a request in writing with your current contact information to:
Steak n Shake Enterprises, Inc.
Attn: Chief Legal Officer
107 S Pennsylvania Street
Suite 400
Indianapolis IN 46204