Privacy Policy

Welcome to Chopt. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website chopt-food.click, place orders, or otherwise interact with our food services. Please read this policy carefully. If you disagree with its terms, please discontinue use of our website.

This Privacy Policy is governed by the laws of the United States, including applicable federal privacy regulations enforced by the Federal Trade Commission (FTC) under the FTC Act (15 U.S.C. § 45), and, where applicable, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), California Civil Code § 1798.100 et seq. We take our obligations under these laws seriously and have designed this policy to be transparent and comprehensive.

1. About Us

Chopt is a food service business operating through its website chopt-food.click. We provide customers with the ability to browse our menu, place orders, and engage with our brand online. For all privacy-related matters, you may contact us using the details below:

2. Scope of This Privacy Policy

This Privacy Policy applies to all information we collect through our website chopt-food.click, as well as any related services, sales, marketing, or events. It does not apply to third-party websites, applications, or services that may be linked from our website. We encourage you to review the privacy policies of any third-party sites you visit, as we have no control over their content or practices.

This policy covers:

• Information collected when you visit or use our website
• Information collected when you create an account or place an order
• Information collected through cookies, tracking technologies, and analytics tools
• Information you voluntarily provide when contacting us or signing up for communications

3. Information We Collect

We collect several types of information in connection with the services we provide. Below is a detailed breakdown of the categories of personal information we may collect:

3.1 Personal Identification Information

When you register an account, place an order, or contact us, we may collect information that identifies you personally, including but not limited to:

• Full name
• Email address
• Phone number
• Billing address and delivery address
• Username and password (stored in encrypted form)
• Payment information (credit/debit card numbers, processed through secure third-party payment processors)
• Any other information you voluntarily provide to us

3.2 Order and Transaction Data

When you place an order through our website, we collect data related to your transaction, including:

• Items ordered and preferences (e.g., dietary preferences, customizations)
• Order history and frequency
• Payment confirmation and transaction identifiers
• Delivery instructions and fulfillment records

3.3 Usage Data and Technical Information

When you access our website, we automatically collect certain technical information about your device and browsing behavior, including:

• IP address
• Browser type and version
• Operating system and device type
• Pages visited and the sequence in which they were visited
• Time and date of your visit
• Time spent on specific pages
• Referring URL (the website that directed you to ours)
• Clickstream data and interactions with website elements

3.4 Cookies and Tracking Technologies

We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about your use of our website. For more information about how we use cookies and how you can control them, please see Section 10 of this policy (Cookie Usage).

3.5 Communications Data

If you contact us via email, telephone, or through any contact form on our website, we may retain records of those communications, including the content of messages, your contact details, and any responses we provide.

3.6 Marketing and Preference Data

If you opt in to receive marketing communications, we collect information about your communication preferences, including the types of promotions and content you are interested in, your opt-in and opt-out history, and engagement data (such as whether you open our emails).

3.7 Information from Third Parties

We may receive information about you from third parties, including social media platforms (if you log in via a social account or interact with our social media presence), analytics providers, advertising partners, and payment processors. We treat all such information in accordance with this Privacy Policy.

4. How We Use Your Information

We use the personal information we collect for a variety of lawful purposes connected to the operation of our food business and the delivery of services to you. Specifically, we use your information for:

4.1 Service Provision and Order Fulfillment

• Processing your food orders and facilitating delivery or pickup
• Managing your account and providing customer support
• Sending order confirmations, receipts, and delivery notifications
• Responding to your inquiries, complaints, and feedback
• Improving the accuracy and quality of our food offerings and services

4.2 Payment Processing

• Verifying your identity and processing payments securely
• Detecting and preventing fraud, unauthorized transactions, and security breaches
• Maintaining financial records in compliance with applicable laws

4.3 Analytics and Website Improvement

• Analyzing how visitors use our website to improve its functionality, layout, and content
• Understanding customer preferences and behavioral patterns to enhance our menu and service offerings
• Conducting internal research and development activities
• Monitoring and measuring the performance of our website

4.4 Marketing and Promotional Communications

• Sending you promotional emails, special offers, and newsletters if you have opted in to receive them
• Personalizing marketing content based on your preferences, order history, and browsing behavior
• Administering contests, sweepstakes, or surveys you participate in
• You may opt out of marketing communications at any time as described in Section 8 of this policy.

4.5 Legal and Compliance Purposes

• Complying with applicable federal and state laws, including tax and financial reporting obligations
• Enforcing our Terms of Service and other applicable agreements
• Responding to lawful requests from law enforcement or government authorities
• Protecting our legal rights and defending against claims

5. Sharing Your Information with Third Parties

We respect your privacy and do not sell your personal information to third parties for their own marketing purposes. However, we may share your information in the following circumstances:

5.1 Service Providers and Business Partners

We may share your personal information with trusted third-party service providers who assist us in operating our website and delivering our services. These include:

• Payment processors — to securely handle payment card transactions
• Delivery and logistics partners — to fulfill food delivery orders
• Cloud hosting and IT providers — to host and maintain our website and systems
• Email and marketing platforms — to send transactional and marketing communications
• Analytics providers — such as Google Analytics, to help us understand website usage
• Customer support tools — to manage communications and resolve customer inquiries

All service providers are contractually required to handle your information in accordance with applicable law and this Privacy Policy. They may only use your data to perform services on our behalf and are not authorized to use it for their own independent purposes.

5.2 Legal Requirements and Law Enforcement

We may disclose your personal information if required to do so by law, court order, subpoena, or other legal process, or if we believe in good faith that such disclosure is necessary to:

• Comply with applicable federal or state laws or regulations
• Protect the rights, property, or safety of Chopt, our customers, or the public
• Detect, prevent, or address fraud, security, or technical issues
• Enforce our Terms of Service or other agreements

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our business assets, your personal information may be transferred to the acquiring entity as part of the transaction. We will notify you via email or prominent notice on our website before your information is transferred and becomes subject to a different privacy policy.

5.4 With Your Consent

We may share your personal information with third parties in other circumstances when you have given us your explicit consent to do so.

6. Data Security

We take the security of your personal information seriously and have implemented a range of administrative, technical, and physical safeguards designed to protect your data from unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption: All data transmitted between your browser and our website is encrypted using Secure Socket Layer (SSL) / Transport Layer Security (TLS) technology.
• Password Protection: User account passwords are stored in hashed and salted form and are never stored in plain text.
• Access Controls: Access to personal information is restricted to authorized personnel on a need-to-know basis, with role-based permissions enforced.
• Secure Payment Processing: We do not store complete payment card numbers on our servers. All payment data is handled by PCI-DSS compliant third-party payment processors.
• Regular Security Audits: We conduct periodic reviews of our information collection, storage, and processing practices, including physical security measures.
• Data Minimization: We collect only the minimum amount of personal information necessary to fulfill the purposes described in this policy.

Despite our best efforts, no method of data transmission or storage is completely secure. We cannot guarantee the absolute security of your information and encourage you to take steps to protect yourself, including using strong passwords and keeping your account credentials confidential. If you suspect any unauthorized access to your account, please contact us immediately at [email protected].

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, to comply with our legal obligations, resolve disputes, and enforce our agreements. The following retention periods apply as general guidelines:

After the applicable retention period expires, we will securely delete or anonymize your personal information. If deletion is not immediately possible (for example, because data is stored in backup archives), we will isolate the data from further processing until deletion is possible.

8. Your Privacy Rights

Depending on your location and applicable law, you may have a number of rights regarding your personal information. We are committed to honoring these rights and providing you with the tools to exercise them.

8.1 General Rights (All Users)

• Right to Access: You may request a copy of the personal information we hold about you.
• Right to Correction: You may request that we correct inaccurate or incomplete personal information.
• Right to Deletion: You may request that we delete your personal information, subject to certain legal exceptions (e.g., legal compliance, fraud prevention).
• Right to Opt Out of Marketing: You may opt out of receiving marketing emails at any time by clicking the "unsubscribe" link in any email we send, or by contacting us at [email protected].
• Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, and machine-readable format.

8.2 California Residents — CCPA/CPRA Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), including:

• Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which we collected it, the purposes for which we collected it, and the categories of third parties with whom we share it.
• Right to Delete: You have the right to request deletion of personal information we have collected from you, subject to certain exceptions.
• Right to Correct: You have the right to request correction of inaccurate personal information.
• Right to Opt Out of Sale/Sharing: You have the right to opt out of the sale or sharing of your personal information. We do not sell personal information as defined under CCPA/CPRA.
• Right to Limit Use of Sensitive Personal Information: You have the right to limit our use of sensitive personal information to purposes necessary for providing our services.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you goods or services, charge you different prices, or provide you with a lower quality of service as a result of exercising these rights.

To exercise any of your California privacy rights, please submit a verifiable consumer request to us by email at [email protected]. We will respond to your request within 45 days as required by law.

8.3 Exercising Your Rights

To exercise any of your rights described above, please contact us at:

• Email: [email protected]

We may need to verify your identity before processing your request. This may involve asking you to confirm information we already hold about you. We will not fulfill requests that we are unable to verify. We will respond to all verifiable requests within the timeframe required by applicable law.

9. Children's Privacy

Our website and services are intended for use by individuals who are 18 years of age or older. We do not knowingly collect personal information from children under the age of 18. If we become aware that we have inadvertently collected personal information from a child under 18 without verifiable parental consent, we will take steps to delete that information as quickly as possible.

If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately at [email protected] so that we can take appropriate action.

Our practices regarding children are also governed by the Children's Online Privacy Protection Act (COPPA), 15 U.S.C. § 6501 et seq., and we comply fully with its requirements. We do not direct any part of our online services toward children under the age of 13, and we do not knowingly collect personal information from children in that age group.

10. Cookie Usage

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and personalize content and advertisements. A cookie is a small text file placed on your device when you visit a website.

We use the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the operation of our website and cannot be turned off. They include cookies that enable you to log in to your account, add items to your cart, and complete orders.
• Performance and Analytics Cookies: These cookies help us understand how visitors interact with our website by collecting and reporting information anonymously. We use tools such as Google Analytics for this purpose.
• Functionality Cookies: These cookies allow us to remember your preferences and choices (such as your preferred language or saved delivery address) to provide a more personalized experience.
• Targeting and Advertising Cookies: These cookies may be set by our advertising partners to build a profile of your interests and show you relevant ads on other websites. They do not store personal information directly but identify your browser and device uniquely.

You can control or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website. For detailed information about the specific cookies we use and how to manage your preferences, please refer to our Cookie Policy, which is available on our website.

11. International Data Transfers

Chopt is based in the United States, and your personal information is primarily collected, stored, and processed in the United States. However, our service providers and partners may be located in other countries, which means your personal information may be transferred to, stored in, and processed in countries outside of the United States.

When we transfer personal information internationally, we take steps to ensure that your information continues to receive an appropriate level of protection in accordance with applicable law. These measures may include entering into data transfer agreements with our service providers, implementing standard contractual clauses, or relying on other legally recognized transfer mechanisms.

By using our website and services, you acknowledge and consent to the transfer of your personal information to countries outside the United States, which may have different data protection laws than your country of residence.

12. Third-Party Links and Services

Our website may contain links to third-party websites, social media platforms, and other online services. These links are provided for your convenience and informational purposes only. We have no control over the content or privacy practices of those third-party websites and are not responsible for their privacy policies or data collection practices.

When you leave our website and follow a link to another site, you do so at your own risk. We strongly encourage you to read the privacy policy of every website you visit. This Privacy Policy applies solely to information collected by our website chopt-food.click.

13. Do Not Track Signals

Some web browsers offer a "Do Not Track" (DNT) signal that you can enable to indicate your preference not to be tracked across websites. Currently, there is no universally accepted standard for how websites should respond to DNT signals. As a result, our website does not currently respond to DNT signals. We will continue to monitor developments in DNT technology and update our practices accordingly.

For more information about Do Not Track, you may visit allaboutdnt.com.

14. FTC Compliance

We are committed to complying with the Federal Trade Commission Act (FTC Act, 15 U.S.C. § 45), which prohibits unfair or deceptive acts or practices in commerce. Our privacy practices are designed to be honest, transparent, and fair to our users. We do not engage in deceptive data collection practices and strive to clearly communicate how your information is used.

In addition, we adhere to the FTC's guidelines on endorsements, testimonials, and commercial email practices as applicable to our online food business.

15. Filing a Complaint

If you have concerns about how we have handled your personal information and you are not satisfied with our response, you have the right to file a complaint with the appropriate authority.

15.1 Federal Trade Commission (FTC)

For complaints related to unfair or deceptive trade practices, you may contact the U.S. Federal Trade Commission:

• Website: www.ftc.gov/contact
• Phone: 1-877-382-4357 (1-877-FTC-HELP)
• Address: Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, DC 20580

15.2 California Residents — California Privacy Protection Agency (CPPA)

If you are a California resident and believe your rights under the CCPA/CPRA have been violated, you may file a complaint with the California Privacy Protection Agency:

• Website: cppa.ca.gov
• Email: [email protected]

15.3 State Attorneys General

Depending on your state of residence, you may also have the right to file a complaint with your state's attorney general office. Most state attorneys general have consumer protection divisions that handle privacy-related complaints.

16. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes to this policy, we will notify you by:

• Posting the updated policy on this page with a revised "Last Updated" date
• Sending an email notification to the address associated with your account (where applicable)
• Displaying a prominent notice on our website

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website and services after any changes to this policy constitutes your acceptance of the updated terms.

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please do not hesitate to contact us using the information below. We will make every effort to respond promptly and address your concerns.

When contacting us about a privacy-related matter, please include your full name, email address, and a clear description of your request or concern. This will help us verify your identity and respond to you more efficiently.

This Privacy Policy was last reviewed and updated on June 12, 2026. This document constitutes the complete and current privacy policy of Chopt, operated through chopt-food.click.