HOMESTATE
Privacy Policy

Last Updated: November 2025

At HomeState, maintaining the trust of our customers and online users is of the utmost importance to us. This Privacy Policy (the “Policy”) describes how HomeState Hospitalities, LLC and its subsidiaries (collectively, “HomeState,” “we,” “us,” or “our”) collect, use, safeguard and share personal information about our users, and explains the rights and choices you may have with respect to your personal information and how to exercise those rights.

This Policy applies when you use our company website, https://www.myhomestate.com/, and all other websites that are owned or operated by HomeState and that direct to this Policy (collectively, the “Site” or “Sites”), as well as any HomeState mobile application (“Apps”), and when you engage with us through any other websites, pages, features, or content owned or operated by HomeState that direct to this Privacy Policy (“Content,” and, collectively, including the Sites and Apps, the “Services”). This Policy applies only to information we collect, process, and use through our Services. This policy does not apply to information that we collect through other channels, to any third-party websites that you may be able to access from our Sites, which may have data collection and use practices and policies that materially differ from those described in this Policy, or to any services that may be offered by our business partners.

For guests interacting with us in person at our restaurant locations, we make this Privacy Policy available via QR code displayed in-store, which links directly to the most current online version.

This Privacy Policy does not apply to the personal information we collect from our California employees, contractors, or job applicants. If you are applying for a job with us, please see our Applicant Privacy Policy.

By accessing, visiting, or using our Services, you understand and agree that the collection and use of your personal information will be made in accordance with this Privacy Policy and our Terms & Conditions, available here. If you do not feel comfortable with any part of this Policy, please discontinue use of the Services immediately.

Table of Contents

1. CHANGES TO THIS POLICY
2. INFORMATION WE COLLECT
3. HOW WE USE PERSONAL INFORMATION
4. HOW WE SHARE PERSONAL INFORMATION
5. COOKIES AND SIMILAR TRACKING TECHNOLOGIES
6. THIRD-PARTY LINKS
7. SOCIAL MEDIA PAGES
8. SECURITY
9. RETENTION
10. THIRD-PARTY STORAGE OF PERSONAL INFORMATION
11. CHILDREN'S PRIVACY
12. YOUR CHOICES
13. PRIVACY RIGHTS
14. CALIFORNIA CONSUMER NOTICE AT COLLECTION
15. NOTICE OF FINANCIAL INCENTIVE (HOMESTATE LOYALTY PROGRAM)
16. CONTACT US

1. CHANGES TO THIS POLICY

We reserve the right to revise this Policy from time to time, for example, to keep up with changes in the law, or to reflect changes in how we are doing business. When we make changes, we will update the “Last Updated” date at the top of this Policy. In the event that this Policy is modified in any way, we will use commercially reasonable efforts to notify users of any material changes, such as by posting a notice on our Sites or sending an email where required by law.

We recommend you review this Policy periodically to ensure you are aware of our current privacy practices. We also review our Privacy Policy at least once every 12 months and update it as needed to reflect our practices and legal requirements.

2. INFORMATION WE COLLECT

We get information about you in a range of ways, including directly from you, from others, and automatically when you use the Services. Depending on how you interact with us, the personal information we collect may vary.

Information You Give Us. We collect information about you to provide our Services. In connection with your use of the Services, we may collect:

• Contact information, such as your name, postal address, email address, and phone number
• Account information, such as usernames, passwords, and other credentials you use to access HomeState accounts or the Loyalty Program (link)
• Demographic information, where you choose to provide it
• Order and transaction information, such as your order history, in-restaurant and online purchases, reservation details, and other information relating to your use of our Services
• Loyalty Program information, such as your enrollment status, points balance, rewards earned and redeemed and related preferences
• Gift card related information, including your contact information and payment information used to complete the purchase
• Customer care information, including your name and email address, as well as any other content that you send to us in order to reply and address your request
• Other information you choose to provide directly to us in connection with your use of our Services

Information We Get From Others. We may get information about you from other sources and combine that with information we receive from you. For example, we may receive information about you from:

• Service providers who assist us with payment processing, account creation, ordering, delivery, reservation management, customer support, marketing, or analytics
• Third-party platforms you use to interact with us (for example, if you place an order through an integrated platform or engage with our content on social media)
• Other individuals, such as friends or family who purchase a gift card for you or designate you as a contact in connection with a catering or group order. If you provide personal information to us about other persons we ask that you obtain their approval to disclose their personal information to us and to direct them to read this Privacy Policy for information about how we use their information

We may add this information to information you have given us via the Services.

Information Automatically Collected. When you use the Services, your device is automatically providing information to us. The type of information we collect by automated means generally includes technical information about your computer or device, such as:

• IP address or other device identifier
• Device type and operating system version
• Browser type, language, and settings
• The website you visited before browsing our Site, pages you viewed, how long you spent on a page, access times, and information about your use of and action through our Services

We may automatically log this information when you visit or use the Services for functional purposes, security and fraud prevention, and to analyze and improve our Services.

Sensitive Information. Unless specifically requested, we ask that you not send us, and you not disclose, on or through the Services or otherwise to us, any sensitive personal information such as Social Security number, passport number, driver's license number, or other government-issued identification number; financial account details, with or without any information that would permit access to the account, or credit history; or information on race, religion, ethnicity, sexual practices or sexual orientation, medical or health information, genetic or biometric information, political or philosophical beliefs, or trade union membership.

3. HOW WE USE PERSONAL INFORMATION

We use the information we collect in order to best provide our Services and operate our business. Where you have provided us with your personal information, we may use that information in the following ways:

• To provide you with personalized content, Services, and offers of Services by HomeState, as well as to determine relevant search results and provide you with recommended content.
• To operate, maintain, and improve our Services;
• To process and fulfill orders and other transactions, and to provide and deliver products and Services in response to our customers' requests;
• To respond to comments and questions and provide customer service;
• To send information including confirmations, invoices, technical notices, updates, security alerts, and support and administrative messages;
• To communicate about promotions, upcoming events, and other news about products and services offered by us and our selected partners, where permitted by law;
• To further develop your user profile (which may include information collected elsewhere), or to update other user information we may have about you;
• To protect, investigate, and deter against fraudulent, unauthorized, or illegal activity and to enforce our rights; and
• To comply with applicable laws, regulations, and legal processes, and to exercise or defend legal claims.

Depending on how you interact with our Services, the personal information we collect and the way in which it is used may vary. When we collect any information that does not identify you as a specific natural person, we are permitted to use and disclose this information for any lawful purpose, notwithstanding anything to the contrary in this Policy, except where we are required to do otherwise by applicable law. Similarly, if applicable law requires that we treat such non-personal information as personal information, we will use and disclose this information as personal information in accordance with this Policy.

4. HOW WE SHARE PERSONAL INFORMATION

We may share personal information as follows:

• With your consent. We may share personal information with your consent. For example, you may consent to our sharing of personal information with others for their own marketing uses. Those uses will be subject to their privacy policies.
• With service providers and partners. We may share information with third-party vendors, service providers, contractors, and agents who perform services for us, such as hosting, payment processing, analytics, email delivery, marketing assistance, and customer support. These parties may access personal information only as needed to perform their functions on our behalf.
• In connection with business transfers. We may share personal information when we do a business deal, or negotiate a business deal, involving the sale or transfer of all or a part of our business or assets. These deals can include any merger, financing, acquisition, or bankruptcy transaction or proceeding.
• For legal, protection, and safety purposes.
  • We may share information to comply with laws.
  • We may share information to respond to lawful requests and legal processes.
  • We may share information to protect the rights and property of HomeState Hospitalities, LLC, our agents, customers, and others. This includes enforcing our agreements, policies, and terms of use.
  • We may share information in an emergency. This includes protecting the safety of our employees and agents, our customers, or any person.
• With those who need it to do work for us. We may share information with affiliates and other entities under common control, where permitted by law, for the purposes described in this Policy.

We may also share aggregated and/or anonymized data with others for their own uses, provided that this data does not identify you as an individual.

5. COOKIES AND SIMILAR TRACKING TECHNOLOGIES

As described above, we and our service providers may automatically collect information from you when you use the Services using cookies and other tracking technologies.

Cookies. We may log information using "cookies." Cookies are small data files stored on your computer or mobile device that relate to a website you have visited or used. We may use both session cookies (which are stored in temporary memory, are not retained after a browsing session ends, and do not collect information from a user’s device) and persistent cookies (which remain in a browser's sub-folder after the user closes their browser, are activated again once the user visits the online location that created the particular cookie, and remain for the duration period set within the cookie's file or until deleted) to provide you with a more personal and interactive experience through our Services. Cookies may help make the Services more useful to you and tailor the experience with us to meet your special interests and needs.

Promotions, advertisements or other third-party content displayed on the Sites may also contain cookies. HomeState does not have access to or control over information collected by outside advertisers when a user clicks on any such promotions or advertisements.

You can typically remove and reject cookies from our Sites with your browser settings. Many browsers are set to accept cookies until you change your settings. If you remove or reject our cookies, it could affect how our site works for you.

Pixel Tags. “Pixel Tags” are tiny graphics with a unique identifier, similar in function to cookies. In contrast to cookies, which are stored on your computer's hard drive, Pixel Tags are embedded invisibly on web pages. We may use Pixel Tags (also referred to as web beacons or clear GIFs), in connection with our services to, among other things, track the activities of users of our services, help us manage content, and compile statistics about usage of our services. We and our third-party service providers may also use Pixel Tags in HTML emails to our customers, to help us track email response rates, to identify when our emails are viewed, and to track whether our emails are forwarded.

Geolocation data. If you use any location-enabled products, you may be sending us location information. HomeState does not store or use this information other than to provide the Services you use. For example, our Mobile App may use GPS data to find a nearby HomeState and to send location-based services and marketing communications on our mobile app. Location-enabled features are opt-in, and you have control over your participation and can turn these services off at any time.

Do Not Track. HomeState understands that some users may have enabled a “do not track” feature or other mechanism intended to provide consumers with a choice regarding the collection of their personally identifiable information. However, consistent with our rights under applicable law, our Sites do not support or respond to do-not-track requests or other signals sent from a web browser.

6. THIRD-PARTY LINKS

Our Sites may include links to third-party websites. We are not responsible for the content or privacy practices of those other sites, which are governed by their own privacy policies and practices. We encourage you to review the privacy policies of any third-party sites you visit.

7. SOCIAL MEDIA PAGES

We may maintain pages on social media platforms such as Facebook, Instagram, or similar services. Any information you post or provide through such pages is subject to the privacy policies of those platforms, and you should review them carefully. We are not responsible for the collection, use, or disclosure practices (including data security) of any social media platform or other third party, including any personal information you disclose to other organizations through or in connection with our social media pages.

8. SECURITY

We use commercially reasonable administrative, technical, and physical safeguards to help protect and secure your personal information from unauthorized access, modification, disclosure, or destruction. However, no information system can be completely secure, and we cannot guarantee the absolute security of your personal information. We are not responsible for the security of information that you transmit to the Sites over networks we do not control, including the Internet and wireless networks. Protecting your personal information is also your responsibility, and we urge you to take appropriate precautions.

9. RETENTION

Our retention periods for personal information are based on business needs and legal requirements. We will keep your personal information for as long as is reasonably necessary for the purposes for which it is collected, for other purposes described in this Policy, or as may be required by applicable law. For example, we may retain:

• Order and transaction records for a period of time necessary to meet tax, accounting, and legal obligations.
• Contact and account information for as long as you maintain an account with us and for a reasonable period thereafter.

When we no longer need personal information for the purposes described in this Policy, we will delete or de-identify it, subject to any record-keeping or legal obligations that require us to retain it.

10. THIRD-PARTY STORAGE OF PERSONAL INFORMATION

Our Services are based in the United States and are intended for U.S. resident audiences. When we share your personal information with our trusted partners, they may store some of your personal information in their databases in the United States, or elsewhere in the world. If you are accessing this website from jurisdictions outside the United States, please be advised that you may be transferring your personal information to us in the United States where data protection and privacy laws may be less stringent than the laws of your country.

BY USING OUR SERVICES, YOU CONSENT TO THE TRANSFER AND USE OF YOUR PERSONAL INFORMATION IN ACCORDANCE WITH THIS PRIVACY POLICY.

11. CHILDREN'S PRIVACY

Our Services are not specifically directed at or intended for children under the age of 13. Therefore, HomeState does not knowingly collect personal information via the Services from anyone under 13. If you are under 13, you should not use our Services or send any information about yourself to us.

Any user who believes that HomeState has in its database the personal information of a child under the age of 13 should contact us using the email or postal address set forth under “Contact Us” below so that, if necessary, HomeState can have such information removed.

12. YOUR CHOICES

Our marketing emails provide the ability for you to “opt out.” If you choose to opt out, we may still send you non-marketing emails, such as emails about your accounts and our business dealings with you.

You may send requests about personal information by email or postal mail to the address listed in the “Contact Information” section below. Such requests can include requests to update your personal information, change contact choices, and opt out of our sharing of information with third parties where permitted by law.

As noted above, you can typically remove and reject cookies from our Sites with your browser settings. Please note that removing or rejecting cookies may affect your ability to use features of our Sites to their fullest potential.

If you maintain a HomeState or Loyalty Program account, you may update certain account information directly through your account settings where that functionality is available.

13. PRIVACY RIGHTS

Where allowed under local law, you may have the right to submit a request for access to the data we hold about you. Further, HomeState will correct inaccurate or out-of-date information about you at your request or when we become aware of the error. You can request that your data be made available for you to download or other export as well. Finally, you may request that HomeState delete certain data we hold about you. However, your data will not be deleted in the following situations:

• If you have any open or ongoing matter with HomeState's customer service or technical support personnel; or
• When retention is required by applicable law or for legal enforcement purposes.

California residents have additional rights, which are described in the “California Consumer Notice at Collection” section below.

Exercising Your Rights

To exercise these rights where allowed under your applicable local law, please contact us by email or postal mail using the information set forth under “Contact Information” below. HomeState will respond to your request within a reasonable timeframe in accordance with the applicable law. To protect your privacy, we must be able to verify your identity to confirm that the rights request came from you. We may contact you by phone or e-mail to verify your request before we can process your request to exercise certain privacy rights. Depending on your request, we will ask for information such as your name, address, an e-mail address or a phone number you have used with us. For certain requests, we may also ask you to provide details about your most recent purchases.

14. CALIFORNIA CONSUMER NOTICE AT COLLECTION

If you are a California resident, this section applies to you in addition to the rest of this Policy. The California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, the “CCPA”), requires us to provide certain information about our data practices and your rights.

Categories of Personal Information

In the preceding 12 months, depending on how you interact with us, we may have collected the following categories of personal information (as defined in the CCPA) about California consumers:

• Identifiers, such as name, postal address, email address, phone number, IP address, and account login identifiers.
• Customer records information, such as contact information, payment card information (processed by our payment processors), and transaction history.
• Commercial information, such as records of products or services purchased, obtained, or considered, and other purchasing or consuming histories or tendencies.
• Internet or other electronic network activity information, such as browsing history, search history, and information regarding your interactions with our Sites, App, or advertisements.
• Geolocation data, such as general location information derived from your IP address or device settings and, where you enable it, more precise location information for App features.
• Inferences drawn from any of the above to create a profile about your preferences and behavior (for example, to understand which menu items or locations you may be interested in).

We collect these categories of personal information from the sources below, and we use them for the business and commercial purposes described above in Section 3 “HOW WE USE PERSONAL INFORMATION”. We may disclose these categories of personal information to the types of recipients described above in Section 4 “HOW WE SHARE PERSONAL INFORMATION”.

We do not use or disclose “sensitive personal information” of consumers for purposes that would require a right to limit such use under the CCPA.

Retention

We retain each category of personal information described above for as long as reasonably necessary to achieve the purposes described in this Policy, including to provide the Services, comply with our legal obligations, resolve disputes, and enforce our agreements. As noted in the “Security” and “Retention” sections above, this generally means we keep:

• Contact and account information for as long as you maintain an account with us and for a reasonable period thereafter.
• Order and transaction information for a period needed to meet our business needs and legal obligations (for example, tax and accounting requirements).

Sale or Sharing of Personal Information

HomeState does not sell your personal information, and we do not share your personal information with third parties for “cross-context behavioral advertising” as those terms are defined under the CCPA. If our practices change, we will update this Policy and provide any required notices and choice mechanisms.

We may allow certain third-party service providers (such as analytics providers) to collect information about your use of our Services using cookies and similar technologies for the purposes described in this Policy. Because we do not permit them to use this information for their own independent advertising purposes, we treat this activity as a “service provider” use under the CCPA.

We do not have actual knowledge that we “sell” or “share” the personal information of consumers under 16 years of age.

California Privacy Rights

Subject to certain limitations and exceptions, California residents have the right to:

• Right to Know / Access. Request that we disclose the categories of personal information we collect, the categories of sources of that information, the business or commercial purposes for collecting it, the categories of third parties to whom we disclose it, and the specific pieces of personal information we have collected about you.
• Right to Delete. Request that we delete personal information we have collected from you, subject to certain exceptions (for example, where we must retain information to comply with legal obligations or for security purposes).
• Right to Correct. Request that we correct inaccurate personal information that we maintain about you.
• Right to Data Portability. Request that we provide certain personal information to you in a portable and, to the extent technically feasible, readily usable format.
• Right to Non-Discrimination. Not receive discriminatory treatment for exercising any of the rights described above.

Because we do not sell or share personal information for cross-context behavioral advertising, we do not offer a “Do Not Sell or Share My Personal Information” link at this time.

These rights are not absolute and may be denied in certain situations such as: (a) when denial of access is required or authorized by law; (b) when granting access would have a negative impact on another's privacy; (c) to protect our rights and properties; or (d) where the request is frivolous or vexatious.

Submitting a Request to Exercise Your Rights

California residents may exercise their CCPA rights by emailing us at [email protected], or through mail at:

HomeState Hospitalities, LLC
5611 N Figueroa St, Suite 211
Los Angeles, CA 90042

You may be limited to 2 times per year for submitting a Right to Know/Access. We may charge a reasonable fee for multiple requests in the same 12-month period, as permitted by law.

To protect your privacy, we must be able to verify your identity to confirm that the rights request came from you. We may contact you by phone or e-mail to verify your request before we can process your request to exercise certain privacy rights. Depending on your request, we will ask for information such as your name, address, an e-mail address or a phone number you have used with us. For certain requests, we may also ask you to provide details about your most recent purchases.

You may designate an authorized agent to submit a request on your behalf to access or delete your personal information. To do so, you must: (1) provide that authorized agent written and signed permission to submit such request; and (2) verify your own identity directly with us. Please note, we may deny a request from an authorized agent that does not submit proof that they have been authorized by you to act on your behalf.

Shine the Light. The California Shine the Light law permits California residents that have an established business relationship with us to request certain information regarding our disclosure of certain types of personal information to third parties for their direct marketing purposes during the immediately preceding calendar year. To make such a request, please contact us using the information above, and indicate in your message that you are a California resident making a “Shine the Light” inquiry. This request may be made no more than once per calendar year.

Do Not Track. Your browser may allow you to adjust your browser settings so that “do not track” requests are sent to the websites that you visit. However, since uniform standards for “DNT” signals have not been adopted, we do not disable tracking technology that may be active on the Site in response to any “do not track” requests that we receive from your browser.

15. NOTICE OF FINANCIAL INCENTIVE (HOMESTATE LOYALTY PROGRAM)

We offer a voluntary HomeState Loyalty Program and related App experience that allows guests to earn points on eligible purchases and redeem rewards. When you participate in the Loyalty Program or use our App, we collect the personal information you provide when creating an account, such as your name, contact information, account credentials, purchase history, and interactions with our website or App. We use this information to operate the program, award and track points, provide and administer rewards, send program-related communications, verify eligibility, and improve our services. Participation is voluntary and you may cancel your membership at any time using the instructions in the Loyalty Program Terms and Conditions.

Because the Loyalty Program provides discounts and other benefits in exchange for personal information, it may be considered a “financial incentive” under California law. The value of the personal information we collect is reasonably related to the value of the rewards and benefits offered, taking into account the costs of administering the program and the value derived from consumer engagement.

Additional terms governing eligibility, earning and redeeming points, account management, expiration of points and rewards, and promotional offers are available in our full Loyalty Program Terms and Conditions at https://www.myhomestate.com/tos/.

You may withdraw from the Loyalty Program at any time by following the instructions in the Loyalty Program Terms and Conditions or by contacting us using the information in the “Contact Us” section below. If you ask us to delete the personal information associated with your Loyalty Program account, we may be unable to continue providing Loyalty Program benefits, and any unused points or rewards may be forfeited as described in the program terms.

16. CONTACT US

We welcome your comments or questions about this Policy or our privacy practices. You may contact us at the following addresses:

HomeState Hospitalities, LLC
5611 N Figueroa St, Suite 211
Los Angeles, CA 90042

Email: [email protected]

If you have trouble accessing this Policy, please contact us using one of the methods above and we will provide the information in a reasonably accessible format.