PRIVACY POLICY

TONY ROMA’S RIBS INC.

Effective Date: June 9, 2026

Tony Roma’s Ribs Inc. (“Tony Roma’s,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect personal data when you visit our websites, use our online services, participate in our promotions and loyalty programs, or otherwise interact with us. We are committed to handling personal data in accordance with applicable U.S. state privacy laws, including the Texas Data Privacy and Security Act (“TDPSA”) and comparable laws in states such as California, Virginia, Colorado, and Connecticut.

1. Scope

This Policy applies to personal data we collect online and offline, including through our websites, mobile experiences, QR-code entry forms, sweepstakes and contests, loyalty programs, customer service interactions, and food truck and in-restaurant activities. Promotion- or sweepstakes-specific privacy notices may supplement this Policy; where a specific notice conflicts with this Policy as to that promotion, the specific notice controls.

2. Personal Data We Collect

Depending on how you interact with us, we may collect the following categories of personal data:

• Identifiers – name, email address, telephone number, postal or ZIP code, and similar identifiers;
• Commercial and transaction data – purchases, orders, and loyalty activity;
• Marketing and communications data – your preferences and consent status for emails and text messages;
• Online and technical data – device, browser, and usage information collected automatically through cookies and similar technologies, as described in Section 8;
• Promotion data – information you provide when entering a sweepstakes, contest, or giveaway.

We do not seek to collect sensitive personal data through our promotions and do not knowingly collect personal data from individuals under 18 through our sweepstakes.

3. How We Use Personal Data

We use personal data to:

• Provide and administer our services, promotions, sweepstakes, and loyalty programs;
• Verify eligibility, conduct drawings, and award and fulfill prizes;
• Communicate with you, respond to inquiries, and provide customer support;
• Send marketing communications where you have opted in, and manage your preferences;
• Detect, prevent, and address fraud, abuse, and security issues; and
• Comply with legal, tax, and regulatory obligations.

4. Marketing Communications

Where required, we obtain your consent before sending marketing emails or automated promotional text messages. Marketing consent is voluntary and is never a condition of purchase or of entering a promotion. You may unsubscribe from marketing emails at any time using the link in any message, and you may stop promotional texts by replying STOP. Message and data rates may apply.

5. How We Share Personal Data

We may share personal data with: (a) service providers and processors who perform services on our behalf, such as hosting, IT, security, communications, analytics, and promotion administration, under contracts that limit their use of the data; (b) our affiliates and franchisees; (c) parties involved in a corporate transaction such as a merger, financing, or sale of assets; and (d) governmental authorities or other parties where required by law or to protect our rights. We do not sell your personal data, and we do not process it for targeted advertising, within the meaning of applicable state privacy laws, without your consent where consent is required.

6. Data Security and Retention

We maintain reasonable administrative, technical, and physical safeguards designed to protect personal data against unauthorized access, use, or disclosure. No system is completely secure, and we cannot guarantee absolute security. We retain personal data only as long as necessary for the purposes described in this Policy or as required by law, after which we delete or de-identify it.

7. Your Privacy Rights

Depending on your state of residence and subject to applicable law and exceptions, you may have the right to:

• Confirm whether we are processing your personal data and access that data;
• Correct inaccuracies in your personal data;
• Delete personal data we have collected from or about you;
• Obtain a portable copy of personal data you previously provided; and
• Opt out of the sale of personal data, targeted advertising, or certain profiling.

To exercise these rights, contact us at trguestservices@romacorp.com or 3662 Avalon Park E. Blvd., Suite 2023, Orlando, Florida 32828. We will respond within the timeframe required by applicable law (for example, 45 days under the TDPSA, subject to a permitted extension), and we will take steps to verify your identity before responding. If we decline to act on your request, you may appeal by emailing trguestservices@romacorp.com with the subject line “Privacy Appeal.” You may also contact your state Attorney General if you have concerns about our response.

8. Cookies and Tracking Technologies

We and our service providers use cookies and similar technologies to operate our sites, remember your preferences, measure performance, and, where permitted, support analytics and advertising. You can manage cookies through your browser settings and, where available, through our preference controls. Some features may not function properly if you disable certain cookies.

9. Children’s Privacy

Our online services and promotions are intended for adults. We do not knowingly collect personal data from children under 13, and our sweepstakes are open only to individuals 18 and older. If you believe a child has provided us personal data, contact us and we will take appropriate steps to delete it.

10. Third-Party Links

Our services may contain links to third-party websites or services that we do not control. This Policy does not apply to those third parties, and we encourage you to review their privacy practices.

11. Changes to This Policy

We may update this Policy from time to time. Material changes will be reflected by an updated effective date and, where appropriate, additional notice. Your continued use of our services after an update constitutes acceptance of the revised Policy.

12. Contact Us

Tony Roma’s Ribs Inc., Attn: Privacy, 3662 Avalon Park E. Blvd., Suite 2023, Orlando, Florida 32828 — trguestservices@romacorp.com.