P.F. Changs Privacy Policy

Effective as of January 1, 2023.

This Privacy Policy describes how P.F. Changs and our subsidiaries and affiliates (collectively, " P.F. Changs," "we", “us” or "our") process personal information that we collect through our restaurants in the contiguous United States, through our online properties or services that link to this Privacy Policy (including our website and mobile application), through kiosks/tablets at our restaurant locations, in connection with our marketing and social media activities, and through other activities described in this Privacy Policy (collectively, the “Service”).

California, Virginia and Nevada Residents: See the State law privacy rights section below for important information about your rights under applicable state privacy laws.




Information you provide to us. Personal information you may provide to us through the Service or otherwise includes:

  • Account data, such as the username and password that you may set to establish an online account on the Service, and any other information you choose to include with your account, such as your month of birth and account preferences.

  • Contact data, such as your first and last name, email address, billing and mailing addresses, and phone number.

  • Communications data based on our communications and interactions with you, including when you contact us through the Service, social media, or otherwise. When you communicate with us through social media, this will include your social media handle. When you communicate with us via text messages, this may include your cell phone number, your mobile carriers name, and the date, time and content of your messages.

  • Order data, such as information we collect when you place orders for delivery or pickup, and your order and transaction history, including your payment card or bank account information if you use them to make payments.

  • Promotions data, including information you share when you choose to enter a contest, promotion, sweepstakes, rewards program or complete a survey. Participation in these activities is voluntary.

  • Marketing data, such as your preferences for receiving communications about our Services, restaurants, products, activities, events and publications.

  • Security data, such as security camera footage of our restaurants and other facilities.

  • Other data not specifically listed here, which we will use as described in this Privacy Policy or as otherwise disclosed at the time of collection.

  • Third-party sources. We may combine personal information we receive from you with personal information (e.g., demographic, navigation and contact information) that we obtain from other sources, such as:

    • Data providers, such as information services and data licensors.

    • Public sources, such as government agencies, public records, social media platforms, and other publicly available sources.

    • Marketing partners, such as joint marketing partners and event co-sponsors.

    • Third-party services, such as social media services, that you use to log into, or otherwise link to, your Service account. This data may include your username, profile picture and other information associated with your account on that third-party service that is made available to us based on your account settings on that service.

    Automatic data collection. We, our service providers, and our business partners may automatically log information about you, your computer or mobile device, and your interaction over time with the Service, our communications and other online services, such as:

  • Device data, such as your computer or mobile devices operating system type and version, manufacturer and model, browser type, screen resolution, RAM and disk size, CPU usage, device type (e.g., phone, tablet), IP address, unique identifiers (including identifiers used for advertising purposes), language settings, mobile device carrier, radio/network information (e.g., Wi-Fi, Bluetooth, LTE, 3G) and location data that can be derived from it, general location information such as city, state or geographic area that can be derived from your IP address, and precise geolocation of your device when you authorize our mobile application to access it in your devices settings.

  • Online activity data, such as pages or screens you viewed, how long you spent on a page or screen, the website you visited before browsing to the Service, navigation paths between pages or screens, information about your activity on a page or screen, access times and duration of access, and whether you have opened our emails or clicked links within them.

  • Precise geolocation of your device when you grant access to it in your devices settings.

  • Cookies and similar technologies. Some of the automatic collection described above is facilitated by cookies, web beacons, HTML 5, embedded scripts, and e-tags/cache browsers/web logs, as described in more detail here: https://www.pfchangs.com/tracking-technologies. We also use session replay services that employ software code to record users interactions with the Services in a manner that allows us to watch DVR-like replays of those user sessions. The replays may include users clicks, mobile app touches, mouse movements, scrolls and keystrokes/key touches during those sessions. These replays help us diagnose usability problems and identify areas for improvement. For example, we use session replay services provided by FullStory. You can learn more about FullStory at https://www.fullstory.com/legal/privacy-policy and you can opt-out of session recording by FullStory at https://www.fullstory.com/optout/.


    We may use your personal information for the following purposes or as otherwise described at the time of collection:

    Service delivery and operations. We may use your personal information to:

  • provide, operate and improve the Service and our business and develop new products or services;

  • communicate with you about the Service, including by sending Service-related announcements, updates, security alerts, and support and administrative messages;

  • fulfill your orders, including by communicating them to our local restaurants, delivery networks (including third party delivery marketplaces) and other service providers and by providing you with receipts, order confirmations and pickup instructions;

  • communicate with you about your orders, reservations or other requests;

  • administer and communicate with you about events, promotions or contests in which you participate;

  • understand your needs and interests, and personalize your experience with the Service and our communications, including by using the location data we have collected about you to give you information relevant to that location; and

  • provide support for the Service, and respond to your requests, questions and feedback.

  • Marketing and advertising. We, our service providers and our third-party advertising partners may collect and use your personal information for marketing and advertising purposes:

  • Direct marketing.We may send you direct marketing communications via mail, email or (with your consent) text messages and may personalize these messages based on your needs and interests. You may opt-out of our marketing communications as described in the Opt-out of marketing section below.

  • Interest-based advertising. Our third-party advertising partners may use cookies and similar technologies to collect information about your interaction (including the data described in the automatic data collection section above) with the Service, our communications and other online services over time and with different browsers and devices, and use that information to serve online ads that they think will interest you. This is called interest-based advertising. We may also share user contacts with these companies to facilitate interest-based advertising to those or similar users on other online platforms.

  • Research and development. We may use your personal information for research and development purposes, including to analyze and improve the Service and our business and to develop new products and services. As part of these activities, we may create aggregated, de-identified and/or anonymized data from personal information we collect. We make personal information into de-identified or anonymized data by removing information that makes the data personally identifiable to you. We may use this aggregated, de-identified or otherwise anonymized data and share it with third parties for our lawful business purposes, including to analyze and improve the Service and promote our business.

    Compliance and protection. We may use your personal information to:

  • comply with applicable laws, lawful requests, and legal process, such as to respond to subpoenas or requests from government authorities;

  • protect our, your or others rights, privacy, safety or property (including by making and defending legal claims);

  • audit our internal processes for compliance with legal and contractual requirements or our internal policies;

  • enforce the terms and conditions that govern the Service; and prevent, identify, investigate and deter fraudulent, harmful, unauthorized, unethical or illegal activity, including cyberattacks and identity theft.

  • Cookies and similar technologies. The Services employ cookies and similar technologies to facilitate the purposes for which we use personal information:

  • Service delivery and operation. To allow the technical operation of the Service, such as by remembering your selections and preferences as you navigate the site, and whether you are logged in when you visit password protected areas of the Service, and to enhance the performance and functionality of our services.

  • Interest-based advertising. To facilitate interest-based advertising as described above.

  • Research and development. To help us understand user activity on the Service, including which pages are most and least visited and how visitors move around the Service, as well as user interactions with our emails and advertisements. For example, we use Google Analytics cookies for this purpose. You can learn more about Google Analytics and how to prevent the use of Google Analytics relating to your use of our sites here: https://tools.google.com/dlpage/gaoptout?hl=en.

    Retention. We generally retain personal information to fulfill the purposes for which we collected it, including to comply with applicable legal, tax, accounting, or reporting requirements; to establish or defend legal claims; and for fraud prevention purposes. The primary criteria that determines the length of time we retain particular categories of personal information is whether it is sufficient to achieve such purposes. When we no longer require the personal information, we will either delete or anonymize it or if this is not practicable (for example, because your personal information has been stored in backup archives), isolate it from further processing.


    We may share your personal information with the following parties and as otherwise described in this Privacy Policy or at the time of collection.

    Affiliates. Our corporate parent, subsidiaries, and affiliates.

    Service providers. Third parties that provide services on our behalf or help us operate the Service or our business (such as mail delivery, hosting, information technology, customer support, email delivery, marketing, consumer research and website analytics).

    Payment processors. Any payment card information you use to make a purchase on the Service is processed by third-party banking, processing agents and distribution institutions to verify and authorize your payment card information, process your order, verify the authenticity of any financial transaction involving P.F. Changs, and/or to update your billing information.

    Advertising partners. Third-party advertising companies for the interest-based advertising purposes described above, including those listed here:https://www.pfchangs.com/third-party-providers Their use of your personal information is subject to their own privacy policies.

    Third parties designated by you. We may share your personal information with third parties where you have instructed us or provided your consent to do so. For example, we may share your personal information with third-party advertisers with whom we are collaborating to offer you additional services such as sweepstakes, raffles, and promotions. We will share personal information that is needed for these other companies to provide the services that you have requested.

    Co-branding partners. Certain areas on our Service may be provided to you in association with identified third party co-branding partner. If you register for the products or services provided in these co-branded areas, either you will be providing your personal information to both P.F. Changs and the co-branding partner, or we may be providing your Information directly to the co-branding partner. Your personal information will be subject to this Privacy Policy as well as the privacy policy and practices of the co- branding partner. We are not responsible for the privacy practices of those third parties and we suggest you review their respective privacy policies to learn more about their privacy practices.

    Linked third-party services. If you log into the Service with, or otherwise link your Service account to, a social media or other third-party service, we may share your personal information with that third-party service. The third partys use of the shared information will be governed by its privacy policy and the settings associated with your account with the third-party service.

    Professional advisors. Professional advisors, such as lawyers, auditors, bankers and insurers, where necessary in the course of the professional services that they render to us.

    Authorities and others. Law enforcement, government authorities, and private parties, as we believe in good faith to be necessary or appropriate for the Compliance and protection purposes described above or as otherwise permitted by law.

    Business transferees. Parties (and their advisors) to business transactions and prospective transactions involving a corporate divestiture, merger, consolidation, acquisition, reorganization, sale or other disposition of all or any portion of the business or assets of P.F. Changs or our affiliates (including, in connection with bankruptcy, insolvency, receivership or similar proceedings) where the transaction involves the transfer of personal information or the direct or indirect control over the processing thereof, including in connection with the negotiation of and due diligence for such transactions. Personal information about our customers and users of our Service may also need to be disclosed in connection with a commercial transaction where we or any one of our businesses are seeking financing, investment, or funding.


    Privacy rights. Residents of certain states can exercise privacy rights with respect to the personal information we hold, as described in the State law privacy rights section below.

    Access or update your information. If you have registered for an account with us through the Service, you may review and update certain account information and preferences by logging into the account: https://www.pfchangs.com/account/sign-in

    Opt-out of marketing communications.You may opt-out of marketing-related emails by following the opt-out or unsubscribe instructions at the bottom of the email, or by contacting us. Please note that changes requested of us may not be effective immediately, and until such changes take effect, you may still receive or not receive promotional communications from us. If you choose to opt-out of marketing- related emails, you may continue to receive service-related and other non-marketing emails. If you receive text messages from us, you may opt out of receiving further text messages from us by replying STOP to our message. Unless required by law, we are not responsible for informing third parties with whom we have already shared your Information of any changes requested pursuant to this section, or causing information to be removed from the databases or records of such third parties.

    Cookies. Most browsers let you remove and/or stop accepting cookies from the websites you visit. To do this, follow the instructions in your browser settings. Many browsers accept cookies by default until you change your settings. Please note that if you set your browser to disable cookies, certain features of the Service may not work properly. For more information about cookies, including how to see what cookies have been set on your browser and how to manage and delete them, visit www.allaboutcookies.org. You can also configure your device to prevent images from loading to prevent web beacons from functioning.

    Clear GIFs. Most browsers and devices allow you to configure your device to prevent images from loading. To do this, follow the instructions in your particular browser or device settings.

    Mobile location data. You can disable our access to your devices precise geolocation in your mobile device settings.

    Advertising choices. You may be able to limit use of your information for interest-based advertising through the following settings/options/tools:

  • Browser settings. Changing your internet web browser settings to block third-party cookies.

  • Privacy browsers/plug-ins. Using privacy browsers and/or ad-blocking browser plug-ins that let you block tracking technologies.

  • Ad industry tools. Opting out of interest-based ads from companies that participate in the following industry opt-out programs:

  • Mobile settings. Using your mobile device settings to limit use of the advertising ID associated with your mobile device for interest-based advertising purposes.

  • Opt-out rights. You may have the right under applicable state law to opt-out of the sharing of your personal information for interest-based advertising purposes, as described in the State law privacy rights section below.

You will need to apply these opt-out settings on each device and browser from which you wish to limit the use of your information for interest-based advertising purposes. We cannot offer any assurances as to whether the companies we work with participate in the opt-out programs described above.

Do not track signals. Some Internet browsers may be configured to send “Do Not Track” signals to the online services that you visit. We currently do not respond to “Do Not Track” or similar signals, except where we expressly indicate otherwise. To find out more about “Do Not Track,” please visit http://www.allaboutdnt.com.

Linked third-party platforms. If you choose to connect to the Service through your social media account or other third-party platform, you may be able to use your settings in your account with that platform to limit the information we receive from it. If you revoke our ability to access information from a third-party platform, that choice will not apply to information that we have already received from that third party.

Delete your account. To request to delete your online Service account, please contact us. Following an account deletion request, we delete the users account and data, unless they must be retained for the compliance and protection purposes described above, or because of an issue relating to the users account such as an outstanding credit or an unresolved claim or dispute.


The Service may contain links to websites, mobile applications, and other online services operated by third parties. In addition, our content may be integrated into web pages or other online services that are not

associated with us. These links and integrations are not an endorsement of, or representation that we are affiliated with, any third party. We do not control websites, mobile applications or online services operated by third parties, and we are not responsible for their actions. We encourage you to read the privacy policies of the other websites, mobile applications and online services you use.


We employ a number of technical, organizational, and physical safeguards designed to protect the personal information we collect. However, security risk is inherent in all internet and information technologies, and we cannot guarantee the security of your personal information.


We are headquartered in the United States and may use service providers that operate in other countries. Your personal information may be transferred to the United States or other locations where privacy laws may not be as protective as those in your state, province, or country.


The Service is not intended for use by anyone under 16 years of age. If you are a parent or guardian of a child from whom you believe we have collected personal information in a manner prohibited by law, please contact us. If we learn that we have collected personal information through the Service from a child without the consent of the childs parent or guardian as required by law, we will comply with applicable legal requirements to delete the information.


We reserve the right to modify this Privacy Policy at any time. If we make material changes to this Privacy Policy, we will notify you by updating the date of this Privacy Policy and posting it on the Service and/or through other appropriate means. Any modifications to this Privacy Policy will be effective upon our posting the modified version (or as otherwise indicated at the time of posting). In all cases, your use of the Service after the effective date of any modified Privacy Policy indicates your acceptance of the modified Privacy Policy.


If you have any questions or comments concerning this Policy, please email us at privacy@pfcb.com, call us at 1-866-694-9972 or write to us at:

P.F. Chang's
Attn: Guest Relations Manager
8377 East Hartford Drive
2nd Floor
Scottsdale, AZ 85255


Scope. Except as otherwise provided, this section applies to residents of California, Virginia and other states to the extent they have privacy laws applicable to us that grant their residents the rights described below. These laws include the California Consumer Privacy Act (“CCPA”), the Virginia Consumer Data Protection Act, and Nevadas law entitling residents to opt-out of certain sales of their personal information.

For purposes of this section, “personal information” has the meaning given to “personal data”, “personal information” or similar terms under the applicable privacy laws of the state in which you reside.

Please note that not all rights listed below may be afforded to all users and that if you are not a resident of the state in which these rights are granted, you may not be able to exercise these rights.

In some cases, we may provide a different privacy notice to certain categories of residents of these states, such as job applicants, in which case that notice will apply with respect to the activities it describes instead of this section.

Your Privacy Rights. You have the rights listed below.

  • Information/Know. You can request whether we have collected your personal information, and in certain cases, information about how we use and share it, including the information in the Personal information collection, use and disclosure section below. For example, if you live in California, you may be able to request information about the categories of personal information that we have collected, the categories of sources from which we collected personal information, the business or commercial purpose for collecting, sharing and/or selling personal information, the categories of third parties with whom we share personal information, the categories of personal information that we sold or disclosed for a business purpose, and the categories of third parties with whom the personal information was sold, shared or disclosed for a business purpose.

  • Access. You can request a copy of certain personal information that we have collected about you.

  • Deletion. You can ask us to delete certain personal information that we maintain about you.

  • Correction. You can ask us to correct inaccurate personal information that we have collected about you.

  • Opt-out

    • Opt-out of tracking for targeted advertising purposes. You can opt-out of certain tracking activities for targeted advertising purposes by clicking the DO NOT SELL OR SHARE MY PERSONAL INFORMATION link in the footer of our website. Like many companies, we use the interest-based advertising services described above.

    • Opt-out of other sales of personal information. You can opt-out of “sales” of your personal information as defined by state law.

  • Nondiscrimination. You are entitled to exercise the rights described above free from discrimination as prohibited by the privacy laws of the state where you reside.

    How to exercise your rights. You can exercise your privacy rights described above by submitting a request at https://privacy-pfchangs.truyo.com or by calling us at 866-694-9972. The rights described above are not absolute, and, in certain cases, we may decline your request as permitted by law or where the laws in your state do not afford you these rights. We cannot process your request if you do not provide us with sufficient detail to allow us to understand and respond to it. You can ask to appeal any denial of your request in the same manner through which you may submit a request.

    Verification of identity; authorized agents. We may need to verify your identity to process your information/know, access, deletion, and correction requests, and we reserve the right to confirm your residency. To verify your identity, we may require authentication into your Service account if you have one, provide personal identifiers we can match against information we may have collected from you previously, confirm your request using the email or telephone account stated in the request, provide government identification, or provide a declaration under penalty of perjury, where permitted by law. Furthermore, your authorized agent may make a request on your behalf upon our verification of the agents identity and our receipt of a copy of a valid power of attorney given to your authorized agent pursuant to applicable state law. If you have not provided your agent with such a power of attorney, we may ask you and/or your agent to take additional steps permitted by law to verify that your request is authorized, such as information required to verify your identity and that you have given the authorized agent permission to submit the request.

  • Additional information for California residents. The following describes our practices currently and during the past 12 months.

  • Sales and sharing of personal information. Our use of the interest-based advertising services described above may constitute “sharing” of your personal information for cross-contextual advertising from which you have the right to opt-out under the CCPA. You can request to opt-out of this “sharing” of your personal information here by clicking the DO NOT SELL OR SHARE MY PERSONAL INFORMATION link in the footer of this webpage. Your request to opt-out will apply only to the browser and the device from which you submit the request. We do not “sell” personal information as defined by the CCPA, except to the extent the “sharing” described above constitutes a “sale” under the CCPA. Although our Services are not intended for children under 16 years of age, we are required to inform you that we do not have actual knowledge that we have sold the personal information of children under 16.

  • Sensitive personal information. We do not use or disclose sensitive personal information for restricted purposes that California residents have a right to limit under the CCPA.

  • Deidentified data. We do not to attempt to reidentify deidentified information that we derive from personal information other than for purposes of testing whether our deidentification processes comply with applicable law.

  • Sources and purposes. We collect all categories of personal information from the sources and use them for the business/commercial purposes described above in the Privacy Policy.

  • Collection and disclosure. The list below describes the personal information we collect by reference to the categories of personal information specified in the CCPA (Cal. Civ. Code §1798.140), and the categories of third parties to whom we disclose it. The terms in the list refer to the categories of information and third parties detailed above in the Personal information we collect section. Information you voluntarily provide to us, such as in emails or free-form webforms, may contain other categories of personal information not described below. We may also disclose personal information to professional advisors, law enforcement and government authorities, and business transferees as described above in the How we share your personal information section of this Privacy Policy.

    • Identifiers

      • Categories containing this data: All categories

      • Third parties to which we disclose for a business purpose: Affiliates, Co-brand partners, Service providers, Payment processors, Linked third-party services, Third parties designated by you

    • California Customer Records (as defined in Cal. Civ. Code §1798.80)

      • Categories containing this data: All categories

      • Third parties to which we disclose for a business purpose: Affiliates, Co-brand partners, Service providers, Payment processors, Linked third-party services, Third parties designated by you

    • Commercial Information

      • Categories containing this data: Account data, order data, promotional data, marketing data

      • Third parties to which we disclose for a business purpose: Affiliates, Co-brand partners, Service providers, Payment processors, Linked third-party services, Third parties designated by you

    • Audio/visual data

      • Categories containing this data: Recordings of customer service calls); Security camera footage

      • Third parties to which we disclose for a business purpose: Affiliates, Service providers

    • Internet or Network Information

      • Categories containing this data: Device data, online activity data

      • Third parties to which we disclose for a business purpose: Affiliates, Co-brand partners, Service providers, Payment processors, Linked third-party services, Third parties designated by you

    • Geolocation data

      • Categories containing this data: Device data

      • Third parties to which we disclose for a business purpose: Affiliates, Service providers

    • Sensitive personal information

      • Categories containing this data: Service username/password in your account data; payment card details; precise geolocation of your device when you grant us access to it);

      • Third parties to which we disclose for a business purpose: Affiliates, Payment processors, Service providers

    • Inferences

      • May be derived from all of the categories above.

      • Third parties to which we disclose for a business purpose: Affiliates, Co-brand partners, Service providers

  • Notice of financial incentive. We offer a rewards program that provides certain perks, such as menu items at no additional charge and exclusive offers, in exchange for participating in the program and our use of the personal information participants provide when they sign up for and interact with the program, which includes information made available to us by Facebook about members who use Facebook to sign up. The material terms and conditions applicable to participation in the rewards program are available at: https://www.pfchangs.com/rewards-terms. Members can sign up for our rewards program on our website by clicking the rewards tab. The information we collect through the rewards program includes all of the categories described in the “Collection and disclosure” section above. Members have a right to cancel participation in the rewards program at any time and may do so by contacting us. Our good faith estimate of the value of the personal information we collect is the value of the benefits we offer to you. The factors considered in calculating this estimate include the benefit, insights and goodwill that we realize and expect to realize when they participate in the program and remain a customer; sales directly or indirectly generated from participation in the Rewards Program; and the costs of the program.

  • Shine the light law. Under Californias Shine the Light law (California Civil Code Section 1798.83), California residents may ask companies with whom they have formed a business relationship primarily for personal, family or household purposes to provide the names of third parties to which they have disclosed certain personal information (as defined under the Shine the Light law) during the preceding calendar year for their own direct marketing purposes, and the categories of personal information disclosed. You may send us requests for this information to privacy@pfcb.com. In your request, you must include the statement “Shine the Light Request," and provide your first and last name and mailing address and certify that you are a California resident. We reserve the right to require additional information to confirm your identity and California residency. Please note that we will not accept requests via telephone, mail, or facsimile, and we are not responsible for notices that are not labeled or sent properly, or that do not have complete information.