Home / Your Privacy Choices

Your Privacy Choices

Access it, correct it, port it, delete it, or opt out. Free, for anyone, in any state — and this form files a real tracked request.

Last updated: August 26, 2026

The Short Answer

You can ask us what personal information we hold about you, get a copy of it, have it corrected, or have it deleted — and we will do it, for free, regardless of what state you live in. Use the form on this page. Most requests are done in under two weeks.

We Do Not Sell or Share Your Personal Information

IN N’ OUT Market does not sell your personal information, and never has. We do not share it for cross-context behavioral advertising or targeted advertising. We do not use it for profiling that produces legal or similarly significant effects. We do not knowingly collect or sell the personal information of anyone under 16. We run no advertising network, no third-party ad pixels and no data broker relationships.

That means there is nothing for a “Do Not Sell or Share My Personal Information” link to switch off. We provide the opt-out option on this form anyway, and we honor it, so that you never have to take our word for it.

Your Rights

Right	What it means here
Know / Access	We tell you the categories and the specific pieces of personal information we hold, where we got them, why we have them, and who we disclosed them to.
Portability	We send you your Rewards profile, points ledger, voucher history and consent records as a structured, machine-readable JSON file, plus a plain-language summary.
Correct	We fix inaccurate personal information. Note that we correct your profile data, not your transaction history — a purchase that happened, happened.
Delete	We erase your personal information and close your Rewards account, except records we are legally required to keep (see below).
Opt out of sale, sharing, targeted advertising and profiling	Nothing to opt out of — we do none of these. We record and honor the opt-out anyway.
Limit use of sensitive personal information	We do not collect sensitive personal information as those laws define it — no government ID numbers, no precise geolocation, no biometrics, no health, racial, religious or sexual-orientation data.
Non-discrimination	Exercising any of these rights never changes your prices, your points, your tier or your service. We do not offer a “pay for privacy” financial incentive.
Appeal	If we decline, you get a written reason and a way to appeal, at no cost.

What deletion cannot remove. We must retain certain records even after you delete your account: completed transaction and payment records required for tax, accounting and fuel-tax reporting; age-verification logs for tobacco, nicotine and lottery sales required under our licenses; employment records if you have worked for us; and any record subject to a legal hold. These are kept in the narrowest form necessary, are not used to market to you, and are purged on their normal retention schedule.

Which Law Applies to You

We honor these rights for everyone. Your state determines the specific statute and the deadline:

Minnesota — the Minnesota Consumer Data Privacy Act, in effect since July 31, 2025. Minnesota residents additionally have the right to obtain a list of the specific third parties to whom we have disclosed personal data, and the right to question the result of profiling. We are a Minnesota business and this is our home statute.
California — the CCPA as amended by the CPRA, including the right to know, delete, correct, opt out of sale or sharing, limit sensitive data use, and be free from retaliation.
Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Indiana, Kentucky, Rhode Island, Maryland and other states with comprehensive privacy laws — the corresponding rights under your state’s act.
Nevada — the right to direct us not to sell covered information. We do not sell it.
Everywhere else, including outside the United States — submit the request anyway. We do not check whether you qualify before helping you.

Submit a Request

This form files a real, tracked request. You get a reference number immediately and a written response by email. You can also email [email protected], call (651) 227-8820, or write to IN N’ OUT Market, Attn: Privacy, 743 Century Ave N, Maplewood, MN 55119.

What do you want us to do? * Deleting your data also closes your IN N’ OUT Rewards account and forfeits any unredeemed points and vouchers permanently.

First name

Last name

Email on your account * We reply here, so use the address we can match to your record.

Mobile number on your account Rewards accounts are keyed to phone number — including it speeds up verification a lot.

State of residence Determines which statutory deadline applies. We honor the request either way.

You are…

Details

Company website

We use what you enter here only to verify you and to process this request. We do not add you to any marketing list from this form and we never charge for a request. See our Privacy Policy.

How We Verify You

Before we hand over or delete personal data, we have to be sure it is yours. For most requests we send a confirmation link to the email address on your Rewards account, or a one-time code to the mobile number on it. For a deletion request, or where the request covers sensitive records, we may ask you to confirm two additional data points we already hold — for example, the approximate date you joined and the last four digits of the phone on the account. We will never ask you for a Social Security number, a full payment card number, or a photograph of your ID to verify a privacy request. If we cannot verify you, we will tell you why and what would let us proceed; we treat an unverifiable deletion request as an opt-out request instead.

How Long We Take

Acknowledgment — within 5 business days, with your reference number.
Substantive response — within 45 days of a verified request. If a request is genuinely complex we may extend once by an additional 45 days, and we will tell you before the first deadline passes, with the reason.
Opt-out requests — processed within 15 business days, and in practice immediately.
Appeals — decided within 45 days, in writing.
Cost — free. We may decline or charge for requests that are manifestly unfounded or excessive, particularly repetitive ones, and we will explain that in writing first. This has never happened.

Authorized Agents, Parents and Guardians

Someone may file on your behalf — an authorized agent, a parent or guardian of a minor, or a conservator. Choose that option on the form and attach or email us written proof of authorization signed by the person the data is about. We may still contact that person directly to confirm, and we may ask them to verify their own identity, as state law permits.

If We Decline

You get a written explanation with the specific reason and the statutory basis, plus instructions to appeal at no cost. Choose “Appeal” on the form above and include your original reference number. If we deny the appeal, we will tell you in writing how to submit a complaint to your state attorney general. For Minnesota residents, that is the Office of the Minnesota Attorney General. For California residents, the California Privacy Protection Agency.

Global Privacy Control

This site detects and honors the Global Privacy Control browser signal as a valid opt-out of sale and sharing, with no account and no form required. Because we do not sell or share personal information, GPC does not change what we do — but we treat it as a binding opt-out anyway, and it also suppresses optional analytics on this browser. See our Cookie Policy.

Other Ways to Control Your Data

Cookie preferences — turn optional analytics on or off on this browser, instantly.
Text messages — reply STOP to any message, or opt out through your account.
Email — the unsubscribe link at the bottom of any marketing email works immediately and permanently.
Rewards account — update your name, email, phone and communication preferences yourself, any time.
Privacy Policy — the full detail of what we collect and why.