Effective Date: September 1, 2026

Cactus Jacks Bar & Grill Corp., doing business as Cactus Jack’s (“Cactus Jack’s,” “we,” “our,” or “us”), respects your privacy. This Privacy Policy explains how we collect, use, store, protect, and disclose information obtained through our websites, hiring application, interview-scheduling system, employee portal, training system, text-message program, and related services.

Depending on how you use our services, we may collect the following information:

• Name
• Email address
• Mobile telephone number
• Mailing address
• Applicant photograph
• Position applied for
• Employment eligibility information
• Availability and desired hours
• Desired pay
• Earliest available start date
• Transportation information
• Previous employment history
• Previous job titles, pay rates, dates employed, and reasons for leaving
• Résumés, certifications, and other uploaded documents
• Application answers and position-specific screening responses
• Interview dates, interview evaluations, ratings, and manager notes
• Hiring status and related communications

• Employee name and contact information
• Employee identification and linked Toast account information
• Toast employee status and job codes
• Assigned position or positions
• Employee portal account information
• Training assignments, documents, quizzes, scores, acknowledgments, and completion history
• Trainer assignments, comments, ratings, and certifications
• TABC and Food Handler certificates, including certificate numbers, issue dates, expiration dates, uploaded files, and approval status
• Policy acknowledgments and electronic signatures
• Disciplinary write-ups, manager notes, employee responses, signatures, verification records, and applicable dates
• Employment and portal-access status

Payroll-related forms, including tax and direct-deposit forms, are handled through a separate payroll system and are not intended to be collected through the Cactus Jack’s hiring and training application.

When you participate in our text-messaging program, we may collect:

• Your mobile telephone number
• Your SMS consent choice
• The date and time consent was provided or withdrawn
• Opt-in, opt-out, and help keywords you send
• Messages sent to and received from your number
• Message-delivery and failure information

We may automatically collect limited technical information, including:

• Internet Protocol address
• Browser and device type
• Operating system
• Login and security records
• Date and time of access
• Pages and features used
• Cookies or similar technologies necessary to operate and secure the service

We may use collected information to:

• Receive and evaluate job applications
• Schedule, confirm, reschedule, or cancel interviews
• Communicate with applicants and employees
• Evaluate candidates and document hiring decisions
• Create employee profiles after hiring
• Provide employee portal access
• Assign and track training materials
• Administer quizzes and position certifications
• Review TABC and Food Handler certificates
• Send expiration and compliance reminders
• Maintain training and employee records
• Create and maintain disciplinary write-ups
• Verify electronic signatures and acknowledgments
• Synchronize active employees and job codes with Toast
• Disable application access when an employee becomes inactive
• Protect accounts and prevent fraud or unauthorized access
• Maintain, troubleshoot, and improve our systems
• Comply with applicable laws, regulations, legal requests, and employment-record requirements

Applicants and employees may voluntarily agree to receive transactional text messages from Cactus Jack’s concerning applications, interviews, hiring updates, employee accounts, training, certifications, documents, signature verification, and related communications.

Message frequency varies. Message and data rates may apply.

Consent to receive text messages is optional and is not a condition of applying for a job, receiving an interview, being hired, or maintaining employment.

Reply STOP to opt out of text messages. Reply HELP for assistance.

Mobile telephone numbers, text-message opt-in information, and SMS consent records will not be sold, rented, or shared with third parties or affiliates for their marketing or promotional purposes.

We may provide mobile information to service providers only when necessary to operate our messaging program, deliver requested messages, maintain security, comply with the law, or support our business. Those providers are not authorized to use SMS consent information for their own marketing.

Text-message consent is specific to Cactus Jack’s and will not be transferred to another business for unrelated communications.

We may share information with service providers that help us:

• Host and maintain our websites and applications
• Store databases, documents, photographs, and certificates
• Authenticate users and protect accounts
• Deliver text messages and emails
• Provide point-of-sale and employee-status integrations
• Maintain application security and performance
• Provide technical support

These providers may use information only to perform services for Cactus Jack’s and must handle it according to their contracts and applicable law.

We may also disclose information:

• When required by law, subpoena, court order, or government request
• To protect the rights, safety, security, or property of Cactus Jack’s, our employees, applicants, guests, or others
• To investigate fraud, misuse, security incidents, or unlawful activity
• In connection with a business merger, acquisition, financing, restructuring, or sale, subject to applicable privacy requirements

We do not sell personal information collected through the hiring and training application.

When the application is connected to Toast, we may receive employee identifiers, employment status, job codes, and related information necessary to maintain accurate employee profiles.

Managers may link an existing training account to the correct Toast employee record. Job codes may be mapped, renamed, hidden, or excluded from employee profiles within the application.

If Toast reports that an employee is inactive, disabled, terminated, or otherwise no longer active, that employee’s access to the Cactus Jack’s application may be disabled. Historical training, certification, acknowledgment, and disciplinary records may be retained when permitted or required by law.

Authorized managers may create disciplinary write-ups that become part of an employee’s record. These records may include incident details, policy information, corrective actions, manager signatures, employee signatures, employee comments, witness information, verification codes, and timestamps.

The application may display the number of write-ups falling within a rolling 90-day period. A write-up becoming older than 90 days and no longer counting toward an internal disciplinary threshold does not necessarily mean that the underlying record is immediately deleted.

We retain information for as long as reasonably necessary to:

• Operate our hiring, training, and employee systems
• Maintain accurate business and employment records
• Document consent, acknowledgments, certifications, and disciplinary actions
• Resolve disputes
• Enforce agreements
• Meet legal, regulatory, insurance, accounting, and security obligations

Retention periods may differ based on the type of information and applicable legal requirements.

We use reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, loss, alteration, disclosure, or misuse.

No online service or storage system can guarantee absolute security. Applicants and employees are responsible for protecting their login credentials and promptly reporting suspected unauthorized access.

Depending on applicable law and the nature of your relationship with Cactus Jack’s, you may request to:

• Review or update your contact information
• Correct inaccurate personal information
• Withdraw text-message consent
• Request information about how your information is used
• Request deletion of eligible information

Certain employment, disciplinary, safety, compliance, or legal records may need to be retained even after a deletion request.

To stop text messages, reply STOP. To receive assistance, reply HELP.

Our websites and applications may use cookies or similar technologies necessary for authentication, security, preferences, performance, and operation of the service.

Our services may connect to or contain links to third-party services, including Toast, Twilio, email providers, hosting providers, and document-storage providers. Those services may have separate privacy policies governing information they process independently.

Our hiring application is not intended for children under 13. Applicants must meet all applicable minimum-age and employment-eligibility requirements for the position for which they apply.

We may update this Privacy Policy to reflect changes in our services, technology, business practices, or legal obligations. The updated policy will be posted on this page with a revised effective date.

Questions or requests concerning this Privacy Policy may be directed to:

Cactus Jacks Bar & Grill Corp.
13225 E I-10 Frontage Rd.
Mont Belvieu, Texas 77523
Phone: 832-558-0243
Website: https://cactusjacks.com