Privacy Policy

Welcome to Chopt ("we," "us," "our," or "the Company"). We operate the website choptnow.click and any related digital platforms, mobile applications, and online services (collectively, the "Services"). Your privacy is of the utmost importance to us. This Privacy Policy explains in detail how we collect, use, disclose, store, and protect your personal information when you interact with our Services, place orders, browse our website, or otherwise engage with our food business.

Please read this Privacy Policy carefully. By accessing or using our Services, you acknowledge that you have read, understood, and agree to the practices described in this document. If you do not agree with this Privacy Policy, please do not use our Services.

This Privacy Policy is governed by and complies with applicable United States federal and state privacy laws, including but not limited to the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), and other relevant consumer protection regulations. Where state-specific rights apply, we identify them clearly in the relevant sections below.

1. Who We Are

Chopt is a food business operating in the United States. We are committed to delivering fresh, high-quality food experiences to our customers through our digital ordering platforms and in-person services. For all privacy-related inquiries, you may contact us using the information provided at the end of this Privacy Policy.

2. Information We Collect

We collect various categories of information to provide, maintain, and improve our Services. The types of information we collect include the following:

2.1 Personal Identification Information

When you create an account, place a food order, subscribe to our newsletter, contact customer support, or otherwise interact with our Services, we may collect personal identification information such as:

  • Full name
  • Email address
  • Phone number
  • Billing and delivery address
  • Date of birth (where applicable for age verification)
  • Username and password (encrypted)
  • Profile photo or avatar (if uploaded voluntarily)

2.2 Payment and Financial Information

To process your food orders and transactions, we may collect payment-related information. Please note that full payment card details are processed and stored by our third-party payment processors and are not stored on our servers. We may collect:

  • Partial credit or debit card numbers (last four digits)
  • Billing zip code
  • Transaction history and order records
  • Payment method type (e.g., credit card, digital wallet)

2.3 Order and Dietary Preference Information

As a food business, we collect information related to your food orders and preferences, which may include:

  • Food items ordered, customizations, and special instructions
  • Dietary preferences and restrictions (e.g., vegan, gluten-free)
  • Order frequency and favorite items
  • Delivery preferences and scheduling

2.4 Usage Data and Analytics

When you visit our website choptnow.click or use our Services, we automatically collect certain technical and behavioral data, including:

  • IP address
  • Browser type and version
  • Operating system and device type
  • Pages visited and time spent on each page
  • Referring website URLs
  • Clickstream data and navigation patterns
  • Search queries entered on our website
  • Time and date of visits
  • Session identifiers

2.5 Device Information

We collect information about the devices you use to access our Services, which may include:

  • Device identifiers (such as mobile advertising IDs)
  • Device model and manufacturer
  • Screen resolution and display settings
  • Network information (Wi-Fi or mobile data connection)
  • Mobile carrier information (where applicable)

2.6 Location Information

With your consent, we may collect precise or approximate location data to facilitate delivery services, show you nearby Chopt locations, and provide personalized recommendations. You may disable location permissions through your device settings at any time.

2.7 Communications Data

When you contact us via email, phone, or our website's contact form, we collect the content of your communications, including:

  • Messages, inquiries, and feedback submitted to us
  • Customer support tickets and correspondence records
  • Reviews and ratings submitted through our platform

2.8 Cookie and Tracking Technology Data

We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about your interactions with our website. Please see Section 8 of this Privacy Policy for more detailed information about our cookie practices.

2.9 Information from Third Parties

We may receive information about you from third-party sources, including social media platforms (if you choose to connect your accounts), analytics providers, advertising partners, and delivery fulfillment partners. This information is combined with the data we collect directly from you to enhance our Services.

3. How We Use Your Information

We use the information we collect for a variety of legitimate business purposes. The primary uses of your personal data include:

3.1 Service Provision and Order Fulfillment

  • Processing and fulfilling your food orders
  • Managing your account and profile
  • Coordinating delivery and pickup services
  • Sending order confirmations, receipts, and delivery updates
  • Responding to customer service inquiries and resolving disputes
  • Processing payments and preventing payment fraud

3.2 Personalization and User Experience

  • Personalizing your food recommendations based on order history and preferences
  • Remembering your settings, preferences, and saved items
  • Providing a more tailored and efficient ordering experience
  • Enabling features such as saved addresses and favorite orders

3.3 Marketing and Promotional Communications

  • Sending promotional emails, special offers, and loyalty program updates (with your consent where required by law)
  • Displaying targeted advertisements on our website and third-party platforms
  • Conducting sweepstakes, contests, or promotional campaigns
  • Sending push notifications (if you have enabled them)

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any of our emails, or by contacting us at [email protected].

3.4 Analytics and Service Improvement

  • Analyzing website traffic, usage patterns, and user behavior to improve our Services
  • Conducting internal research and development
  • Testing new features, menu items, and website functionality
  • Measuring the effectiveness of our marketing campaigns
  • Generating aggregated, anonymized statistical reports

3.5 Legal Compliance and Safety

  • Complying with applicable federal, state, and local laws and regulations
  • Responding to lawful requests from government authorities and law enforcement
  • Protecting the rights, property, and safety of Chopt, our users, and the public
  • Detecting, investigating, and preventing fraudulent or illegal activities
  • Enforcing our Terms of Service and other applicable policies

3.6 Business Operations

  • Managing our business operations, including accounting and auditing
  • Facilitating corporate transactions such as mergers, acquisitions, or asset sales
  • Communicating with vendors, suppliers, and business partners

4. Sharing Your Information with Third Parties

We do not sell your personal information to third parties for monetary compensation. However, we may share your information with the following categories of third parties under specific circumstances:

4.1 Service Providers and Vendors

We engage trusted third-party companies and individuals to perform services on our behalf. These service providers have access to your personal information only as necessary to perform their services and are contractually obligated to maintain confidentiality and security. Categories of service providers include:

  • Payment Processors: To securely process your financial transactions
  • Delivery Partners: To fulfill food delivery orders to your address
  • Cloud Hosting Providers: To host our website and store our data
  • Analytics Providers: To help us analyze website traffic and user behavior (e.g., Google Analytics)
  • Email and Communication Services: To send transactional and marketing emails
  • Customer Support Platforms: To manage and resolve customer inquiries
  • Advertising Networks: To display targeted advertisements on our behalf

4.2 Legal Requirements and Law Enforcement

We may disclose your personal information when we believe in good faith that disclosure is necessary to:

  • Comply with a legal obligation, court order, subpoena, or governmental request
  • Enforce our Terms of Service or other agreements
  • Protect the rights, property, or personal safety of Chopt, our users, or the public
  • Prevent or investigate suspected fraud, security breaches, or illegal activities

4.3 Business Transfers

In the event that Chopt undergoes a business transaction such as a merger, acquisition, reorganization, bankruptcy, or sale of all or substantially all of our assets, your personal information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website of any such change in ownership and your choices regarding your personal information.

4.4 With Your Consent

We may share your information with third parties when you have given us explicit consent to do so, such as when you connect third-party applications to your Chopt account.

4.5 Aggregated and De-identified Data

We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you with third parties for research, marketing, analytics, and other business purposes.

5. Data Security

We take the security of your personal information seriously and implement a range of industry-standard technical, administrative, and physical security measures to protect your data from unauthorized access, disclosure, alteration, and destruction. Our security measures include:

  • Encryption: We use Secure Socket Layer (SSL) / Transport Layer Security (TLS) encryption to protect data transmitted between your browser and our servers.
  • Password Protection: Account passwords are hashed and salted using industry-standard algorithms and are never stored in plain text.
  • Access Controls: We restrict access to personal information to authorized personnel who need it to perform their job functions.
  • Secure Payment Processing: Payment card information is processed through PCI-DSS compliant payment processors.
  • Regular Security Audits: We conduct periodic reviews of our security practices and vulnerability assessments.
  • Data Minimization: We collect only the personal information that is necessary for the purposes described in this Privacy Policy.
  • Incident Response Plan: We maintain a data breach response plan and will notify affected users and relevant authorities as required by applicable law in the event of a security incident.

6. Your Privacy Rights

Depending on your location and applicable law, you may have the following rights regarding your personal information:

6.1 Rights Under the California Consumer Privacy Act (CCPA/CPRA)

If you are a California resident, you have the following specific rights under the CCPA as amended by the CPRA:

Right Description
Right to Know You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which we collected it, the business or commercial purpose for collecting it, and the categories of third parties with whom we share it.
Right to Delete You have the right to request that we delete personal information we have collected from you, subject to certain exceptions permitted by law.
Right to Correct You have the right to request that we correct inaccurate personal information that we maintain about you.
Right to Opt-Out of Sale/Sharing You have the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising purposes.
Right to Limit Use of Sensitive Information You have the right to limit our use and disclosure of your sensitive personal information to specific permitted purposes.
Right to Non-Discrimination We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you goods or services, charge different prices, or provide a different level of quality of service because you exercised your privacy rights.
Right to Data Portability You have the right to receive your personal information in a structured, commonly used, machine-readable format.

6.2 General Privacy Rights (All Users)

Regardless of your location, we strive to honor the following rights for all our users:

  • Right of Access: You may request a copy of the personal information we hold about you.
  • Right to Correction: You may request that we correct or update inaccurate or incomplete personal information.
  • Right to Deletion: You may request that we delete your personal information, subject to legal retention requirements.
  • Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
  • Right to Object to Marketing: You may object to the use of your personal information for direct marketing purposes at any time.

6.3 How to Exercise Your Rights

To exercise any of the rights described above, please submit a verifiable consumer request to us by:

We will acknowledge receipt of your request within 10 business days and respond to your request within 45 calendar days. If we require more time, we will notify you and may extend the response period by an additional 45 days where permitted by law. We may need to verify your identity before processing your request. You may designate an authorized agent to make a request on your behalf, provided that you submit written authorization and we are able to verify the agent's identity.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by applicable law. The criteria we use to determine retention periods include:

Category of Data Retention Period
Account and profile information Duration of account existence plus 3 years after account closure
Order history and transaction records 7 years (for tax and accounting compliance)
Payment processing information Retained by payment processors per their own policies; partial records retained for 3 years
Customer support communications 3 years from the date of the last interaction
Marketing preferences and opt-out records Indefinitely, to honor your opt-out preferences
Website usage and analytics data 26 months (anonymized after this period)
Cookie and tracking data Varies by cookie type (see Section 8)
Legal compliance records As required by applicable law, typically 5–7 years

When personal information is no longer needed, we securely delete or anonymize it in accordance with our data deletion procedures.

8. Cookie Policy

Our website choptnow.click uses cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and personalize content and advertisements. Cookies are small text files placed on your device when you visit our website.

8.1 Types of Cookies We Use

  • Strictly Necessary Cookies: These cookies are essential for the website to function properly and cannot be disabled. They include session management cookies and security cookies.
  • Performance and Analytics Cookies: These cookies collect information about how visitors use our website, such as which pages are most visited. We use tools like Google Analytics for this purpose.
  • Functionality Cookies: These cookies remember your preferences and settings, such as your language preference, saved cart items, and login status.
  • Targeting and Advertising Cookies: These cookies are used to deliver relevant advertisements to you and measure the effectiveness of our advertising campaigns. They may be set by us or by third-party advertising partners.

8.2 Managing Your Cookie Preferences

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, and set preferences for certain websites. Please note that disabling certain cookies may affect the functionality of our website.

For California residents, you have the right to opt out of the use of cookies that constitute the "sale" or "sharing" of personal information under the CCPA/CPRA. You may exercise this right by clicking the "Do Not Sell or Share My Personal Information" link on our website or by contacting us at [email protected].

For more detailed information about our cookie practices, including a full list of cookies we use, please refer to our Cookie Policy, available on our website at choptnow.click.

9. Children's Privacy

Our Services are intended for use by individuals who are 18 years of age or older. We do not knowingly collect, use, or disclose personal information from children under the age of 13. If you are under 13 years of age, please do not use our Services or provide any personal information to us.

We comply with the Children's Online Privacy Protection Act (COPPA). If we learn that we have inadvertently collected personal information from a child under the age of 13 without verifiable parental consent, we will take immediate steps to delete that information from our records.

If you are a parent or legal guardian and believe that your child under the age of 13 has provided personal information to us, please contact us immediately at [email protected], and we will take appropriate action to remove such information.

Users between the ages of 13 and 17 should only use our Services under the supervision and with the consent of a parent or legal guardian. By allowing a minor to use our Services, the parent or guardian accepts this Privacy Policy on their behalf.

10. International Data Transfers

Chopt is based in the United States, and your personal information is collected and processed primarily in the United States. If you are accessing our Services from outside the United States, please be aware that your information may be transferred to, stored in, and processed in the United States, where privacy laws may differ from those in your country of residence.

We use third-party service providers who may be located in countries other than your own. When we transfer personal information internationally, we take appropriate steps to ensure that your data is protected in accordance with applicable law and this Privacy Policy. These steps may include:

  • Entering into data processing agreements with third-party service providers that include standard data protection clauses
  • Ensuring that service providers maintain adequate security measures and data protection practices
  • Relying on legally recognized transfer mechanisms where required

By using our Services, you consent to the transfer of your personal information to the United States and other countries where we or our service providers operate, subject to the protections described in this Privacy Policy.

11. Third-Party Links and Services

Our website and Services may contain links to third-party websites, applications, or services that are not operated or controlled by Chopt. This Privacy Policy does not apply to any third-party websites or services. We are not responsible for the privacy practices of third parties, and we encourage you to review the privacy policies of any third-party websites you visit.

When you use third-party services integrated with our platform (such as social media sign-in features or third-party delivery applications), those services may collect and use your information according to their own privacy policies.

12. Do Not Track Signals

Some web browsers may transmit "Do Not Track" (DNT) signals to websites. Currently, there is no universally accepted standard for responding to DNT signals, and our website does not currently respond to DNT browser signals. However, we provide you with the ability to manage your cookie preferences as described in Section 8 of this Privacy Policy.

California residents are entitled to know whether we honor "Do Not Track" signals. As stated above, we currently do not alter our data collection and use practices in response to Do Not Track signals from your browser.

13. FTC Act Compliance

Our privacy and data practices comply with the requirements of the Federal Trade Commission Act (FTC Act), which prohibits unfair or deceptive acts or practices in or affecting commerce. We are committed to maintaining transparent, fair, and accurate representations about how we collect, use, and protect your personal information. We will not engage in deceptive data practices, and we implement reasonable security measures as required under FTC guidelines.

14. How to File a Complaint

If you have concerns about our privacy practices or believe that we have not complied with applicable privacy laws, we encourage you to first contact us directly so that we may address your concerns:

If you are not satisfied with our response, you may file a complaint with the appropriate regulatory authority:

14.1 Federal Trade Commission (FTC)

You may file a complaint with the FTC regarding unfair or deceptive business practices:

  • Website: www.ftc.gov/complaint
  • Phone: 1-877-FTC-HELP (1-877-382-4357)
  • Address: Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, DC 20580

14.2 California Residents — California Privacy Protection Agency (CPPA)

California residents may file a complaint with the California Privacy Protection Agency (CPPA) regarding potential violations of the CCPA/CPRA:

  • Website: cppa.ca.gov
  • Address: California Privacy Protection Agency, 2101 Arena Blvd, Sacramento, CA 95834

14.3 State Attorney General Offices

You may also file a complaint with the Attorney General's office in your state if you believe your consumer privacy rights have been violated. Contact information for state Attorney General offices is available on each state's official government website.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business practices, legal requirements, or the Services we provide. When we make material changes to this Privacy Policy, we will notify you by:

  • Posting the updated Privacy Policy on our website at choptnow.click with a new "Last Updated" date
  • Sending an email notification to the address associated with your account (for significant changes)
  • Displaying a prominent notice on our website

Your continued use of our Services after the effective date of the updated Privacy Policy constitutes your acceptance of the changes. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact us. We are committed to addressing your inquiries promptly and transparently.

We aim to respond to all privacy-related inquiries within 10 business days. For requests that require verification of your identity or involve complex data processing matters, we may require additional time to respond, and we will keep you informed of our progress.