Privacy Policy

1. Who we are

This Privacy Policy explains how Blend Bar The Woodlands ("Blend," "we," "us," or "our") collects, uses, shares, and protects information about you when you visit our website at www.blendthewoodlands.com, interact with our forms or email, dine or book private events with us, or otherwise engage with our services.

We are a hospitality business operating at 1701 Lake Robbins Dr, The Woodlands, TX 77380. This policy applies to all data we collect, in person or online, in connection with our restaurant, cigar lounge, membership program, private events, and related services.

2. What we collect

Information you give us directly

• Contact & reservation details: name, email, phone number, party size, dietary or seating preferences, dates, special-occasion notes you share when inquiring about a reservation, private event, membership, or general question via our contact forms (such as the "Tell Us More" inquiry form and "Plan Your Event" inquiry form).
• Event & membership information: for private event inquiries, membership applications, and corporate engagements — company name, billing details, attendee counts, event type, and similar information needed to plan and serve your event.
• Communications: the content of emails, voicemails, text messages, social-media messages, and any other communications you send us.
• Marketing preferences: if you opt in to our newsletter or other communications, your preferred contact method and the categories of updates you'd like to receive.
• In-venue information: when you dine or attend an event in person, our staff may record reservation details, allergies, dietary notes, seating preferences, and similar service-related information.

Information we collect automatically

• Device & usage data: when you visit our website, our analytics service (Google Analytics 4) automatically receives information such as your IP address, browser type and version, operating system, the pages you view, the order in which you view them, time spent on each page, referring URLs, and approximate location based on your IP address.
• Cookies and similar technologies: see Cookies & tracking below.
• Server logs: standard web server access logs (IP address, timestamp, request URL, response code, user agent) retained for security and operational diagnostics.

Information from third parties

• Reservation and payment partners: if you book or pay through a third-party platform that integrates with our services, that platform may share basic reservation, payment-confirmation, or no-show data with us.
• Social platforms: if you interact with our pages on Instagram, Facebook, Yelp, or Google, we may receive public-profile information made available to us by those platforms in accordance with their own privacy policies.

We do not knowingly collect Social Security numbers, government identification numbers, biometric data, precise geolocation data, or other "sensitive" categories of personal information through our website.

3. How we use it

We use the information we collect to:

• Respond to your inquiries, confirm and manage reservations, and plan private events.
• Provide, operate, maintain, and improve our website and in-venue services.
• Communicate with you about your visit, reservation, membership, event, or follow-up details.
• Send you marketing communications (such as our newsletter, event invitations, or special offers) only if you have opted in and not opted out.
• Personalize your experience — for example, remembering a dietary restriction or seating preference from a prior visit.
• Monitor and analyze trends, usage, and effectiveness of our website and marketing.
• Detect, investigate, and prevent fraudulent, abusive, or unlawful activity, and protect the rights, property, or safety of Blend, our guests, our staff, or others.
• Comply with our legal obligations, respond to lawful requests, and enforce our terms of service and other agreements.

We do not sell your personal information, and we do not "share" your personal information for cross-context behavioral advertising as those terms are defined under California law.

4. Who we share with

We share your information only as needed to operate our business and only with the following categories of recipients:

• Service providers and vendors we engage to provide services on our behalf, such as web hosting, email delivery, analytics, customer-relationship management, event coordination, and IT infrastructure. These providers are contractually obligated to use your information only to deliver their service to us. Current providers include Google (Workspace email, Analytics, Search Console), GoDaddy (web hosting), and Cloudflare (when used for traffic delivery).
• Reservation, payment, or event platforms we may use from time to time to coordinate bookings, payments, or guest communications.
• Professional advisors such as accountants, attorneys, and insurers, where reasonably necessary.
• Authorities or other parties where required by law, valid legal process, or to protect the rights, property, or safety of Blend, our guests, our staff, or others.
• Successors in connection with a merger, acquisition, financing, reorganization, or sale of assets — in which case any successor will be bound by commitments substantially equivalent to those in this policy.

5. Cookies & tracking technologies

We use a small set of cookies and similar technologies to operate our website and understand how guests use it.

• Strictly necessary: session and form-handling cookies required for the website to function (for example, to keep your form entries intact while you navigate).
• Analytics: Google Analytics 4 (gtag.js) sets cookies and similar identifiers to help us understand which pages visitors view, where traffic comes from, and how to improve the site. These cookies do not identify you by name. You can opt out of Google Analytics for all websites by installing the Google Analytics Opt-out Browser Add-on.
• Third-party platforms: if you click links to Instagram, Facebook, Yelp, Google Maps, or our reservation provider, those services will set their own cookies governed by their own policies.

You can control cookies through your browser settings — most browsers let you block, delete, or be notified when cookies are set. Disabling cookies may affect parts of the website's functionality.

We do not currently respond to "Do Not Track" browser signals because there is no consistent industry standard for them. We do, however, honor opt-out preference signals (such as the Global Privacy Control) for users protected by U.S. state privacy laws that recognize them.

6. Your rights (everyone)

Regardless of where you live, you can:

• Ask what we have about you and request a copy.
• Correct inaccurate information.
• Delete information we hold about you, subject to legitimate exceptions (for example, records we must retain for tax, accounting, legal-defense, or fraud-prevention purposes).
• Unsubscribe from marketing emails at any time using the unsubscribe link in those emails or by emailing us (see Contact us below).

7. State-specific rights

Residents of certain U.S. states have additional rights under state privacy laws.

Texas residents (TDPSA)

Under the Texas Data Privacy and Security Act, you have the right to confirm whether we process your personal data, access and obtain a copy, correct inaccuracies, request deletion, and opt out of targeted advertising, the "sale" of personal data, and certain profiling. You may also appeal a refusal to act on your request. We do not engage in the targeted advertising or sale of personal data as those terms are defined under TDPSA, but you may still exercise your other rights via Contact us.

California residents (CCPA / CPRA)

You have the right to know the categories and specific pieces of personal information we have collected; the categories of sources, the business purposes for collection, and the categories of third parties with whom we share it; to request deletion; to correct inaccurate information; to opt out of "sale" or "sharing" of personal information for cross-context behavioral advertising; to limit the use of sensitive personal information; and to be free from retaliation for exercising any of these rights. We do not sell or share personal information for cross-context behavioral advertising. Authorized agents may submit requests on your behalf with valid written authorization.

Virginia, Colorado, Connecticut, Utah, and other states

Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), and other states with comprehensive privacy laws have rights substantially similar to those described above — including access, correction, deletion, portability, and opt-outs from targeted advertising and "sale." Specific entitlements vary by state law.

Right	How to use it
Access / copy of your data	Email us at the address in Contact us with the subject line "Privacy Request — Access."
Correct inaccurate data	Email us with the corrections requested and any supporting context.
Delete your data	Email us with the subject line "Privacy Request — Delete." We will confirm receipt and respond within the timeframe required by your state's law.
Opt out of marketing	Use the unsubscribe link in any marketing email, or email us.
Appeal a refused request	Reply to our refusal email within 30 days. We will respond within the timeframe required by your state's law.

8. Children's privacy

Our website and services are intended for adults. Because we operate a cigar lounge and serve alcohol, our in-venue services are restricted by law to guests 21 and over. We do not knowingly collect personal information from children under 13, and our website is not directed at children. If you believe a child has provided personal information to us, please contact us and we will promptly delete it.

9. Data retention

We keep personal information only as long as we need it for the purposes described in this policy, to comply with legal, accounting, or reporting obligations, to resolve disputes, and to enforce our agreements. Reservation and inquiry details are typically retained for up to 36 months after your most recent interaction unless a longer retention period is required by law. Server logs are retained for up to 90 days. Marketing-list information is retained until you unsubscribe.

10. Security

We use reasonable technical, administrative, and physical safeguards to protect personal information, including TLS encryption for data in transit, access controls on our administrative systems, and vendor due diligence. No system can be guaranteed to be 100% secure. If we ever experience a security incident affecting your personal information and applicable law requires notice, we will notify you in accordance with that law.

11. International users

We operate primarily in the United States and our website is hosted in the United States. If you visit or contact us from outside the U.S., you should understand that your information will be transferred to, processed, and stored in the United States, which may have data-protection laws different from those in your country.

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. When we do, we will revise the "Last updated" and "Version" lines at the top of the page and, for material changes, may take additional steps to notify you (for example, a banner on the website or an email to subscribers). We encourage you to review this page periodically. Older versions are listed below in Version history.

13. Contact us

14. Version history