Privacy Policy & Paid Advertising Governance

This privacy policy took effect on November 12, 2026 (2026-11-12) and applies to all digital visitors, dining guests, and event inquiries reaching Lou’s Diner through lousdiners.com. It outlines our operating standards under Nevada state law, federal commercial guidelines, and reciprocal international data conventions.

Lou’s Diner operates as an authentic American diner on Decatur Blvd in Las Vegas. We serve scratch breakfasts ($22–$85), flat-top griddle smash burgers ($20.59–$25), and traditional diner lunch plates ($15–$30) à la carte. Our web presence is purely inquiry-oriented. We do not operate an online shopping cart, do not store customer credit cards, and do not process binding financial transactions on this website.

The designated data controller responsible for personal information submitted through this website is:

Operator: Lousdiners, trading at lousdiners.com
Physical Address: 431 S Decatur Blvd, Las Vegas, Nevada 89107, Las Vegas, Nevada, United States
Direct Phone: 702-870-1876
General Kitchen & Privacy Email: [email protected]
Kitchen Lead: Head Chef Ivan Petrov, managing diner kitchen service since 2018.

All data governance choices, vendor selections, and operational protocols are managed directly by our Las Vegas dining room management without intermediary holding entities.

Lou’s Diner records minimal categories of data necessary to arrange dining party seating, answer scratch-cooking questions, and evaluate marketing performance:

• Inquiry Form Entries: When submitting an inquiry through puboe68.php, the server records your full name, telephone number, email address, address or pickup neighborhood, the category of dining enquiry (breakfast seating, griddle burger group lunch, or party platter), your specific notes, menu specifications, and explicit consent confirmation.
• Live Support Chat Records: When chatting through dema53a.php, our system saves the textual exchange alongside an arbitrary session token stored in your browser’s local storage so you can review responses during return visits.
• Automated Network Metadata: With each submission, web server software logs your Internet Protocol (IP) address, browser user-agent header, referring URL, timestamp of initial page render, and timestamp of form submission.
• Paid Campaign Identifiers: Advertising platforms append query parameters when you click a paid promotion: Google Ads attaches gclid, Microsoft Advertising attaches msclkid, and Meta Ads attaches fbclid.
• Consent State Records: Your affirmative or negative privacy preferences are stored locally in your browser storage under the key site_consent_v2.

We do not request, handle, or store payment card numbers, social security identifiers, biometric profiles, or protected account passwords.

We process your personal information strictly for specified diner business purposes:

• Table & Party Coordination: Answering requests for morning counter spots, booth arrangements for parties larger than 4 guests, or custom breakfast platter prep times managed by chef Ivan Petrov.
• Direct Customer Support: Replying via phone or email to questions about our cast-iron skillet recipes, gluten-conscious griddle space, or Decatur Blvd restaurant directions.
• Advertising Campaign Verification: Measuring the effectiveness of search and social campaigns run across Google Ads, Microsoft Advertising, and Meta Ads by matching click references to real inquiries.
• Operational Integrity: Guarding our digital contact forms from automated bot submissions, spam, or denial-of-service abuse using server-side timestamps and honeypots.

Under applicable US statutory standards and international privacy benchmarks, every processing activity at Lou’s Diner relies on an identified legal ground:

• Consent: Storing analytical or advertising cookies, processing non-essential marketing tags, and recording marketing contact information requires affirmative, uncoerced consent granted via our cookie banner.
• Pre-Contractual Steps: Reviewing seating requests, coordinating party sizes, and calculating diner platter pricing ($15–$85) requested by patrons prior to visiting our Decatur Blvd dining room.
• Legitimate Interests: Securing our web server infrastructure, detecting automated spam via honeypot fields, and compiling aggregated counts of seated patrons for restaurant inventory planning.
• Legal Obligation: Complying with Nevada commercial registration requirements, local health authority documentation, and state tax accounting standards.

Lou’s Diner runs commercial paid advertising campaigns to reach Las Vegas residents and visitors looking for homestyle breakfast plates, griddle smash burgers, and traditional diner lunch specials. We actively use:

• Google Ads: Paid search and display campaigns operated by Google LLC. When you click an advertisement on Google search or partner properties, Google attaches the parameter gclid to the landing page link.
• Microsoft Advertising: Search and audience placements across Bing, Yahoo, and the Microsoft network. When a link is clicked, Microsoft attaches the parameter msclkid to identify the ad placement.
• Meta Ads: Targeted visual promotions across Facebook and Instagram managed by Meta Platforms, Inc. Inbound traffic carries the fbclid parameter.

These platform parameters (gclid, msclkid, and fbclid) allow our measurement scripts to correlate click investments with real inquiries. No ad network has inspected, pre-approved, or formally verified our diner website; we maintain compliance through transparent operation and strict adherence to ad platform network policies.

To preserve visitor autonomy, Lou’s Diner deploys Consent Mode v2 across every page of lousdiners.com. When you arrive at our site, the four core storage signals are initialized strictly to denied:

If you select Decline Optional or dismiss the consent banner, all four parameters (ad_storage, ad_user_data, ad_personalization, and analytics_storage) remain in the denied state. If you previously accepted and later withdraw consent via our footer link, our script immediately sets all four signals back to denied and purges optional cookies.

Lou’s Diner does not sell, rent, or trade guest personal details to data brokers. Data is processed exclusively by trusted infrastructure partners acting on our strict written instructions:

• Google LLC / Google Ireland Ltd: Web analytics and Google Ads conversion measurement. Governed by the Google Privacy Policy (policies.google.com/privacy).
• Microsoft Ireland Operations Ltd / Microsoft Corporation: Ad campaign attribution for Bing search under Microsoft Advertising. For comprehensive details on Microsoft data handling, review the Microsoft privacy statement at https://privacy.microsoft.com/privacystatement.
• Meta Platforms Ireland Ltd / Meta Platforms, Inc.: Campaign attribution and social ad delivery. Governed by Meta’s privacy disclosures.
• Hosting Infrastructure & Database Provider: US-based secure server facility hosting our PHP runtime, MariaDB inquiry store, and web server logs.
• Email Relay Provider: Transporting dining inquiry notifications from our web forms to chef Ivan Petrov’s kitchen operations inbox.

Our commercial operations, kitchen, and web hosting infrastructure are situated entirely in the United States. If you visit lousdiners.com from outside the US (including the European Economic Area or the United Kingdom), your data is transferred to and processed within the United States.

Where cross-border transfers occur through service providers like Google, Microsoft, or Meta, such transfers rely on Standard Contractual Clauses (SCCs) approved by the European Commission, the UK International Data Transfer Addendum, or participation in the EU-US Data Privacy Framework.

We enforce exact timeframes for retaining digital records rather than indefinite retention:

• Guest Inquiries & Email Notifications: Stored in our database and staff email archives for exactly 36 months to manage repeat party reservations, allergen history, and operational audits.
• Live Support Chat Transcripts: Preserved in server logs and browser tokens for exactly 12 months following the last exchange.
• Web Server Access & Security Logs: IP addresses and raw HTTP transaction logs are automatically purged after 90 days.
• Consent Preference Records: Your site_consent_v2 choice is retained in local storage for exactly 12 months before prompting for re-confirmation.
• Data Subject Request Processing: Inquiries submitted regarding access, deletion, or correction are answered within 5 days.

Lou’s Diner implements industry-recognized security safeguards to protect visitor data:

• Transport Layer Security: All web traffic is forced over HTTPS with modern TLS 1.3 cipher suites to prevent packet sniffing and man-in-the-middle attacks.
• Database Access Controls: Inquiry records stored on our server are accessible only via credentialed internal connections protected by key-based authentication.
• Sanitization & Defense: Form endpoints in puboe68.php employ strict parameter type validation, SQL parameter binding, and visual honeypots to defeat code injection and unauthorized scrapers.

If you access our site from the European Union, the General Data Protection Regulation (gdpr) grants you the following enforceable rights regarding your personal information:

• Right of Access: You may request a complete copy of all inquiry records and metadata associated with your email address or phone number.
• Right to Rectification: You may request immediate correction of inaccurate or outdated contact information.
• Right to Erasure (Right to be Forgotten): You may demand deletion of your inquiry submissions and chat transcripts from our active records.
• Right to Restrict Processing: You may limit how we process your information while a dispute regarding accuracy is resolved.
• Right to Data Portability: You may request your submitted data in a structured, commonly used machine-readable format.
• Right to Object: You may object at any time to processing grounded in legitimate interests or direct marketing attribution.
• Right to Withdraw Consent: You may revoke prior cookie consent at any moment via the Cookie Settings button in our footer.

Under the California Consumer Privacy Act and California Privacy Rights Act (ccpa / CPRA), as well as Nevada Revised Statutes Chapter 603A, American visitors have specific protections:

• Right to Know & Access: You may request the categories and specific pieces of personal information we have collected about you over the past 12 months.
• Right to Delete: You can request deletion of personal information collected directly from you, subject to business record exceptions.
• Right to Correct: You may ask that we correct inaccurate personal data maintained in our diner archives.
• Opt-Out of Sale or Sharing: Lou’s Diner does not sell personal information for monetary compensation. To the extent third-party marketing tags like Google Ads, Microsoft Advertising, or Meta Ads are deemed “sharing” or “targeted advertising” under state definitions, you may opt out via our consent banner or Global Privacy Control signal.
• Non-Discrimination: We never deny service, charge different prices, or alter our scratch-diner portions ($15–$85) because you exercised your statutory privacy rights.

Lou’s Diner respects your browser privacy preferences. If your browser transmits the global privacy control (Sec-GPC) signal, our site automatically interprets this header as a request to decline all non-essential analytics and advertising cookies.

When GPC is active, all Google Consent Mode v2 signals remain strictly denied, marketing identifiers (such as gclid, msclkid, and fbclid) are not stored for targeting, and no tracking scripts are loaded. You will not be prompted to opt out again.

Lou’s Diner provides restaurant dining services to families and individuals in Las Vegas, but our online website is directed solely toward adults and teens capable of entering into dining inquiries. We do not intentionally collect, solicit, or maintain personal information from individuals under 16 years of age.

If a parent or guardian becomes aware that a child has submitted personal details through our inquiry or chat forms without parental consent, please contact us immediately at [email protected]. We will promptly delete such records within 5 days.

If you believe Lou’s Diner has mishandled your personal data or infringed upon your privacy rights, you have the right to file a formal complaint with relevant enforcement agencies:

• Nevada Residents: Office of the Nevada Attorney General, Bureau of Consumer Protection, 100 North Carson Street, Carson City, NV 89701.
• California Residents: California Privacy Protection Agency (CPPA), P.O. Box 241800, Sacramento, CA 95824, or the California Attorney General’s Office.
• European Economic Area Residents: The data protection supervisory authority in your country of habitual residence, place of work, or place of alleged infringement.

We invite you to contact us first at [email protected] so we can address your grievance directly and expeditiously.

To exercise any statutory right under GDPR, CCPA, Nevada law, or other applicable privacy legislation, please send your request using our official contact routes:

• Email Request: Send your message to [email protected] with the subject line “Data Subject Privacy Request”.
• Postal Mail: Mail a signed inquiry letter to Lou’s Diner, 431 S Decatur Blvd, Las Vegas, Nevada 89107, Las Vegas, Nevada, United States.
• Telephone Inquiry: Call 702-870-1876 during standard dining operating hours.

Verification & Response Timeline: To safeguard guest records from fraudulent intrusion, we will verify your identity by confirming your phone number or replying to the email address on file. We confirm receipt promptly and provide a comprehensive resolution within 5 days without assessing any administrative fee.

Lou’s Diner is committed to ensuring digital accessibility for people with disabilities. We continually refine our web interface to conform with Web Content Accessibility Guidelines (WCAG) 2.1 Level AA benchmarks.

• Semantic Architecture: Native HTML5 landmarks, explicit table headers, logical form labels, and a skip-to-content mechanism for keyboard navigators.
• Color Contrast & Typography: High-contrast color scales adhering to a minimum 4.5:1 ratio for body type, fluid scalable typography via clamp(), and legible serif typefaces.
• Assistive Tech Compatibility: All graphic elements carry descriptive text alternatives, dialogs implement focus management, and interactive controls maintain a minimum 44px tap area.
• Physical Restaurant Access: Our diner at 431 S Decatur Blvd features street-level ramp access, wide entrance doorways, accessible counter stool spacing, and ADA-compliant restroom facilities.

If you encounter any accessibility barrier on our website or require assistance with menu accommodations, please telephone us at 702-870-1876 or email [email protected].

Lou’s Diner reserves the right to modify these privacy disclosures to reflect changes in our scratch-kitchen operations, marketing platforms, or evolving state and federal legal standards. Any revisions will be published immediately on this page with an updated effective date at the top of the document.

For substantive alterations that impact how previously submitted guest contact records are processed, we will provide a prominent notice across our website header or communicate directly via email before changes take effect.

If you have questions regarding this privacy policy, ad campaign disclosures, or our kitchen hospitality practices, please connect with a real team member: