Privacy Policy

Effective Date: June 12, 2026  |  Last Updated: June 12, 2026

1. Introduction and Scope

Welcome to Chopt ("we," "us," "our," or "the Company"). We are a food business operating in the United States and are committed to protecting the privacy and security of your personal information. This Privacy Policy applies to all users of our website located at foodchopt.click, our online ordering platform, mobile applications, and any other digital services or products we offer (collectively, the "Services").

By accessing or using our Services, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with any part of this policy, you must discontinue use of our Services immediately.

This Privacy Policy is governed by applicable United States federal and state privacy laws, including but not limited to the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), the Children's Online Privacy Protection Act (COPPA), and other applicable state and federal regulations. We are dedicated to maintaining full compliance with all relevant legal requirements.

1.1 Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, you may contact us using the following details:

2. Information We Collect

We collect various types of information in connection with your use of our Services. The categories of information we collect include the following:

2.1 Personal Identification Information

When you create an account, place an order, subscribe to our newsletter, or otherwise interact with our Services, we may collect personal identification information, including:

• Full name
• Email address
• Phone number
• Billing and delivery address (including street address, city, state, ZIP code)
• Date of birth (for age verification and personalization purposes)
• Username and password credentials
• Profile photo (if voluntarily submitted)
• Payment information (credit card numbers, billing addresses — processed through secure third-party payment processors)

2.2 Order and Transaction Data

When you place food orders through our platform, we collect information related to your transactions, such as:

• Order history and purchase records
• Food preferences and dietary restrictions
• Special instructions or customizations
• Delivery preferences
• Payment transaction identifiers and confirmation numbers
• Subscription or loyalty program details

2.3 Usage Data and Interaction Information

We automatically collect certain usage data when you access our website or Services, including:

• Pages visited and content viewed
• Time spent on specific pages
• Clickstream data and navigation patterns
• Search queries entered on our platform
• Features used and frequency of use
• Referring URLs and exit pages
• Error logs and crash reports

2.4 Device and Technical Information

We collect technical information about the device and software you use to access our Services, including:

• IP address
• Browser type and version
• Operating system and device type (desktop, mobile, tablet)
• Device identifiers (device ID, advertising ID)
• Screen resolution and display settings
• Time zone settings
• Language preferences
• Network connection type

2.5 Location Data

With your permission, we may collect precise or approximate geolocation data from your device to facilitate food delivery services, locate nearby restaurant options, and personalize your experience. You may disable location access through your device settings at any time, though this may limit certain features of our Services.

2.6 Communications and Feedback

When you contact our customer service team, submit reviews, respond to surveys, or communicate with us through any channel, we collect and retain the content of those communications, including:

• Customer support tickets and correspondence
• Survey responses and feedback forms
• Product reviews and ratings
• Social media mentions and messages

2.7 Cookies and Tracking Technologies

We use cookies, web beacons, pixel tags, local storage, and similar tracking technologies to collect information about your browsing activities. Please refer to Section 7 of this Privacy Policy for detailed information about our cookie practices.

2.8 Information from Third Parties

We may receive information about you from third-party sources, such as:

• Social media platforms (when you connect your account or use social login)
• Third-party food delivery partners and aggregators
• Marketing and analytics providers
• Publicly available sources and databases
• Fraud prevention and identity verification services

3. How We Use Your Information

We use the information we collect for various legitimate business purposes, including:

3.1 Service Provision and Order Fulfillment

• Processing and fulfilling your food orders
• Coordinating delivery logistics and providing estimated delivery times
• Managing your account and profile settings
• Processing payments and preventing fraudulent transactions
• Sending order confirmations, receipts, and status updates
• Facilitating loyalty programs, promotions, and rewards

3.2 Customer Support and Communication

• Responding to customer inquiries, complaints, and support requests
• Sending important service-related notices and announcements
• Notifying you about changes to our policies, terms, or services
• Communicating with you about your account security

3.3 Analytics and Service Improvement

• Analyzing usage patterns to improve our website and platform
• Conducting internal research and product development
• Measuring the performance of our features and services
• Understanding customer preferences to enhance menu offerings
• Generating aggregated, anonymized statistical reports

3.4 Marketing and Personalization

• Sending promotional emails, newsletters, and special offers (with your consent where required by law)
• Personalizing your experience based on your preferences and order history
• Displaying targeted advertisements on our platform and third-party sites
• Recommending menu items or promotions based on your past interactions
• Conducting A/B testing to improve marketing effectiveness

3.5 Legal Compliance and Safety

• Complying with applicable federal, state, and local laws and regulations
• Enforcing our Terms of Service and other agreements
• Protecting the rights, property, and safety of Chopt, our users, and the public
• Detecting, investigating, and preventing fraudulent, unauthorized, or illegal activities
• Responding to legal process, subpoenas, or lawful government requests

4. Sharing of Your Information

We do not sell your personal information for monetary compensation. However, we may share your information with certain third parties under the circumstances described below. Please note that under the CCPA/CPRA, "sharing" may include sharing for cross-context behavioral advertising purposes.

4.1 Service Providers and Business Partners

We engage trusted third-party companies and individuals to assist us in operating our Services. These service providers are granted access to your information only as necessary to perform their functions and are contractually obligated to maintain appropriate data security standards. Categories of service providers include:

• Payment processors (e.g., Stripe, PayPal) for secure transaction processing
• Delivery and logistics partners for fulfilling food orders
• Cloud hosting and infrastructure providers for storing and managing data
• Email and SMS communication platforms for sending notifications
• Analytics providers (e.g., Google Analytics) for usage analysis
• Customer relationship management (CRM) platforms for managing customer interactions
• Fraud detection and security services for preventing unauthorized activity

4.2 Legal Requirements and Law Enforcement

We may disclose your personal information if we believe in good faith that such disclosure is necessary to:

• Comply with a legal obligation, court order, subpoena, or government request
• Enforce our Terms of Service or other agreements
• Protect against legal liability, fraud, or security threats
• Protect the vital interests of any person

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal information may be transferred to the successor entity. We will notify you via email or prominent notice on our website prior to your data being transferred and becoming subject to a different privacy policy.

4.4 Aggregated and Anonymized Data

We may share aggregated or anonymized information that cannot reasonably be used to identify you with third parties for research, marketing, analytics, or other business purposes.

4.5 With Your Consent

We may share your information with other third parties when you have provided explicit consent for such sharing, for example, when you participate in co-branded promotions or integrate third-party services with your account.

5. Data Security

The security of your personal information is a top priority at Chopt. We implement a comprehensive set of technical, administrative, and physical safeguards designed to protect your information from unauthorized access, disclosure, alteration, or destruction.

5.1 Technical Security Measures

• Encryption: All data transmitted between your browser and our servers is encrypted using SSL/TLS protocols. Sensitive data such as payment information is encrypted at rest.
• Secure Payment Processing: We do not store full credit card numbers. Payment data is processed directly by PCI DSS-compliant payment processors.
• Access Controls: We implement role-based access controls to limit employee access to personal data on a need-to-know basis.
• Firewalls and Intrusion Detection: Our systems are protected by industry-standard firewalls and intrusion detection systems.
• Regular Security Audits: We conduct periodic security assessments and vulnerability testing of our systems.

5.2 Organizational Security Measures

• Employee training on data protection and privacy best practices
• Confidentiality agreements with employees and contractors
• Data breach response procedures and incident management protocols
• Vendor security assessments for all third-party processors

5.3 Data Breach Notification

In the event of a data breach that is reasonably likely to result in harm to affected individuals, we will notify affected users and relevant authorities as required by applicable state data breach notification laws, including laws in California, New York, Texas, and other applicable jurisdictions. Notifications will be provided within the timeframes required by law.

6. Your Privacy Rights

Depending on your state of residence and applicable law, you may have the following rights with respect to your personal information. We are committed to honoring these rights in a timely and transparent manner.

6.1 Right to Know and Access

You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the purposes for which we use it, and the categories of third parties with whom we share it.

6.2 Right to Correction

You have the right to request that we correct inaccurate personal information we hold about you. We will use commercially reasonable efforts to honor such requests, taking into account the nature of the information and the purposes of processing.

6.3 Right to Deletion

You have the right to request the deletion of your personal information, subject to certain exceptions permitted by law (such as when the information is necessary to complete a transaction, comply with a legal obligation, or detect security incidents).

6.4 Right to Data Portability

To the extent required by applicable law, you have the right to receive a copy of your personal information in a structured, commonly used, machine-readable format, and to transmit that information to another service provider where technically feasible.

6.5 Right to Opt-Out of Sale or Sharing

Under the CCPA/CPRA, California residents have the right to opt out of the sale or sharing of their personal information for cross-context behavioral advertising. To exercise this right, please use the "Do Not Sell or Share My Personal Information" link on our website or contact us at [email protected].

6.6 Right to Limit Use of Sensitive Personal Information

Under the CPRA, California residents may have the right to limit our use and disclosure of sensitive personal information (such as precise geolocation, financial information, and health-related data) to purposes that are necessary to provide the requested service.

6.7 Right to Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights. We will not deny you goods or services, charge different prices, provide different quality of service, or suggest that you will receive inferior treatment for exercising your legal rights.

6.8 How to Submit a Privacy Request

To exercise any of the rights described above, you may submit a verifiable consumer request by:

• Emailing us at [email protected] with the subject line "Privacy Rights Request"
• Visiting our website at foodchopt.click and using the privacy request form

We will respond to verified requests within 45 days as required under the CCPA/CPRA, with a possible extension of an additional 45 days when reasonably necessary, provided we notify you of the extension. We may need to verify your identity before processing your request.

6.9 Authorized Agents

You may designate an authorized agent to submit a privacy request on your behalf. The authorized agent must provide written proof of authorization, and we may still require you to verify your identity directly with us to ensure the legitimacy of the request.

7. Cookie Policy

We use cookies and similar tracking technologies on our website foodchopt.click to enhance your browsing experience, analyze site traffic, and support our marketing efforts.

7.1 Types of Cookies We Use

7.2 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling certain cookies may affect the functionality of our Services. Additionally, you can opt out of interest-based advertising by visiting the Digital Advertising Alliance opt-out page or the Network Advertising Initiative opt-out page.

For more detailed information about our use of cookies, including a full list of cookies deployed on our website, please refer to our full Cookie Policy available on our website.

8. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

8.1 Retention Periods

When personal information is no longer needed, we securely delete, destroy, or anonymize it in accordance with our data retention and disposal policies.

9. Children's Privacy

We are committed to protecting the privacy of minors. Our website, foodchopt.click, and all associated Services are not directed to individuals under 18 years of age. We do not knowingly collect, use, or disclose personal information from children under 18 without verifiable parental consent, in compliance with the Children's Online Privacy Protection Act (COPPA).

If you are a parent or legal guardian and believe that your child under 18 has provided us with personal information, please contact us immediately at [email protected]. Upon receiving and verifying such a notification, we will take prompt steps to delete the child's information from our records. We reserve the right to terminate any account we believe to be held by a minor and to delete any associated personal information.

For users between the ages of 13 and 17 (where state law allows limited data collection), we comply with applicable state regulations and require verifiable parental consent prior to any data collection or processing activities.

10. International Data Transfers

Chopt is a United States-based company, and your personal information is primarily collected, stored, and processed within the United States. However, in certain circumstances, your information may be transferred to, stored, or processed in other countries where our service providers or business partners operate.

Please be aware that privacy laws in other countries may differ from those in the United States and may not provide the same level of protection. When we transfer personal information internationally, we take appropriate safeguards to ensure that your information remains protected in accordance with this Privacy Policy and applicable law, including:

• Contractual clauses with service providers that require them to maintain appropriate data protection standards
• Ensuring that recipient countries offer an adequate level of data protection
• Obtaining your explicit consent for specific transfers where required by law

By using our Services from outside the United States, you understand and acknowledge that your personal information will be transferred to and processed in the United States, where data protection laws may differ from those in your country of residence.

11. Do Not Track Signals

Some web browsers have a "Do Not Track" (DNT) feature that signals to websites that the user does not wish to have their browsing activity tracked. At this time, our website does not respond to browser-initiated DNT signals because the Internet industry has not yet established a uniform standard for recognizing and implementing DNT requests. However, you can use the cookie management options described in Section 7 to control tracking on our website.

12. Third-Party Websites and Links

Our website and Services may contain links to third-party websites, applications, or services that are not owned or controlled by Chopt. This Privacy Policy applies solely to our own Services and does not cover the privacy practices of third-party sites. We strongly encourage you to review the privacy policies of any third-party websites you visit. We have no responsibility for or control over the privacy practices of third parties and are not liable for their actions.

13. Marketing Communications and Opt-Out

With your consent where required by law, we may send you promotional emails, text messages, or push notifications about new menu items, special offers, loyalty rewards, and company news. You have the following options to manage your marketing preferences:

13.1 Email Marketing

You may unsubscribe from marketing emails at any time by clicking the "Unsubscribe" link included in any promotional email or by contacting us at [email protected]. Please note that even after unsubscribing from marketing emails, you will continue to receive transactional and service-related emails such as order confirmations and account notifications.

13.2 SMS Marketing

If you have opted into SMS marketing communications, you may opt out at any time by replying "STOP" to any marketing text message or by contacting us directly. Standard message and data rates may apply.

13.3 Push Notifications

If you have enabled push notifications on your device, you may disable them at any time through your device or browser settings.

14. Complaint Process and Regulatory Authorities

We take all privacy concerns seriously and are committed to resolving complaints in a timely and fair manner. If you have a concern about how we handle your personal information, we encourage you to first contact us directly:

• Email: [email protected]
• Website: foodchopt.click

We will acknowledge your complaint within 10 business days and strive to resolve it within 30 business days. If you are not satisfied with our response, you have the right to escalate your complaint to the appropriate regulatory authority.

14.1 Filing a Complaint with U.S. Authorities

If you believe your privacy rights have been violated, you may file a complaint with the following regulatory bodies:

15. California-Specific Privacy Rights

This section applies specifically to residents of California and is provided in accordance with the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), effective January 1, 2023.

15.1 Categories of Personal Information Collected

In the past 12 months, we have collected the following categories of personal information as defined under the CCPA/CPRA:

• Identifiers (name, email, IP address, account credentials)
• Commercial information (purchase history, ordering preferences)
• Internet or electronic network activity (browsing history, usage data)
• Geolocation data (approximate and precise location)
• Inferences drawn from personal information (user preferences profiles)
• Sensitive personal information (precise geolocation, financial account data)

15.2 California Shine the Light Law

California Civil Code Section 1798.83 ("Shine the Light" law) permits California residents to request, once per calendar year, a list of the categories of personal information shared with third parties for their direct marketing purposes and the categories of third parties with whom such information was shared. To make such a request, please contact us at [email protected].

16. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Send a notification email to registered users (where required by law)
• Display a prominent notice on our website

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our Services after any changes become effective constitutes your acceptance of the updated Privacy Policy. If you do not agree to the revised policy, you must stop using our Services and request deletion of your account.

17. Governing Law

This Privacy Policy shall be governed by and construed in accordance with the laws of the United States of America and the applicable laws of the state in which Chopt operates, without regard to conflict of law principles. Any disputes arising out of or relating to this Privacy Policy or our data practices shall be resolved in accordance with applicable U.S. federal and state law.

18. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please do not hesitate to reach out to us. We are committed to responding to all legitimate inquiries promptly and thoroughly.