Privacy Policy

This Privacy Policy describes how Chopt ("we," "us," or "our") collects, uses, discloses, and safeguards your personal information when you visit our website at chopt-cafe.click, place orders, use our services, or otherwise interact with us. Please read this policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access or use our website or services.

We are committed to protecting your privacy and handling your personal data in an open and transparent manner. This Privacy Policy applies to all users of our website and services located in the United States and is designed to comply with applicable federal and state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and the Federal Trade Commission (FTC) Act.

1. About Us

Chopt is a food service business operating in the United States. We are dedicated to providing high-quality food products and an exceptional dining and ordering experience to our customers. Our contact details for all privacy-related matters are as follows:

For any questions, requests, or concerns regarding this Privacy Policy or your personal data, please contact us using the information provided above or through the contact details in Section 15 of this policy.

2. Information We Collect

We collect various types of information in connection with your use of our website and services. The categories of personal information we collect include:

2.1 Personal Identification Information

When you create an account, place an order, make a reservation, subscribe to our newsletter, or contact us, we may collect the following personally identifiable information:

• Full name
• Email address
• Phone number
• Billing and shipping address (including city, state, ZIP code)
• Date of birth (where provided for promotional purposes or age verification)
• Username and password for account creation
• Payment information (processed securely through third-party payment processors; we do not store full card numbers)
• Dietary preferences, food allergies, and special instructions you voluntarily provide

2.2 Usage Data and Technical Information

When you visit our website, we automatically collect certain technical and usage information, including:

• Internet Protocol (IP) address
• Browser type and version
• Operating system and device type
• Pages visited and time spent on each page
• Referring URL (the page that led you to our website)
• Date and time of your visit
• Clickstream data and navigation patterns
• Search queries entered on our website
• Items viewed, added to cart, or purchased

2.3 Cookies and Tracking Technologies

We use cookies, web beacons, pixel tags, local storage, and similar tracking technologies to collect information about your interactions with our website. This includes session data, preferences, and behavioral analytics. For more detailed information, please refer to Section 9 (Cookie Policy) of this document.

2.4 Device Information

We may collect information about the device you use to access our services, including:

• Device identifiers (such as advertising IDs)
• Mobile carrier information
• Time zone settings and language preferences
• Screen resolution and hardware model

2.5 Communications and User-Generated Content

If you contact our customer support team, leave a review, complete a survey, or communicate with us through social media or email, we collect and retain the content of those communications, including your name, contact information, and the substance of your messages.

2.6 Location Information

With your permission, we may collect precise or approximate geolocation data from your device to provide location-based services, such as finding nearby restaurant locations or estimating delivery times.

2.7 Information from Third Parties

We may receive information about you from third-party sources, including:

• Social media platforms (if you choose to connect your account or interact with our social media pages)
• Third-party delivery partners and food ordering platforms
• Marketing and advertising partners
• Analytics providers
• Publicly available databases

3. How We Use Your Information

We use the personal information we collect for the following purposes:

3.1 Service Provision and Order Fulfillment

• To process and fulfill your food orders and transactions
• To manage your account and provide customer support
• To send order confirmations, receipts, and delivery notifications
• To facilitate payment processing through our secure payment processors
• To accommodate dietary restrictions and food allergies you have disclosed
• To respond to your inquiries, complaints, and requests

3.2 Analytics and Service Improvement

• To analyze how users interact with our website and services
• To understand trends, preferences, and purchasing behavior
• To improve our menu offerings, website functionality, and overall user experience
• To conduct internal research and development
• To monitor and analyze the effectiveness of our marketing campaigns
• To detect, prevent, and address technical issues and security vulnerabilities

3.3 Marketing and Promotional Communications

• To send you promotional emails, newsletters, and special offers (with your consent where required)
• To personalize your experience and recommend menu items based on your preferences and order history
• To display targeted advertisements on our website and third-party platforms
• To administer loyalty programs, contests, sweepstakes, and promotional campaigns
• To send you surveys and request feedback about your experience

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any email we send or by contacting us directly at [email protected].

3.4 Legal Compliance and Safety

• To comply with applicable laws, regulations, and legal obligations
• To respond to lawful requests from government authorities and law enforcement
• To enforce our Terms of Service and other agreements
• To protect the rights, safety, and property of Chopt, our customers, and the public
• To prevent fraud, unauthorized access, and other illegal activities

3.5 Business Operations

• To operate and maintain our website and online ordering platform
• To manage business relationships with vendors and partners
• To facilitate corporate transactions such as mergers, acquisitions, or asset sales
• To maintain accurate business and financial records

4. Legal Basis for Processing

We process your personal information on the following legal grounds:

• Performance of a Contract: Processing necessary to fulfill orders and provide the services you request.
• Legitimate Interests: Processing for our legitimate business interests, such as fraud prevention, analytics, and service improvement, where those interests are not overridden by your privacy rights.
• Consent: Where we rely on your consent, such as for optional marketing communications, you may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.
• Legal Obligation: Processing necessary to comply with applicable laws and regulatory requirements.

5. Sharing Your Information with Third Parties

We do not sell, rent, or trade your personal information for monetary compensation. However, we may share your information with third parties in the following circumstances:

5.1 Service Providers and Business Partners

We engage trusted third-party service providers to assist us in operating our business and delivering our services. These providers are contractually obligated to use your information only for the purposes we specify and to maintain appropriate security measures. Categories of service providers include:

• Payment processors (e.g., for secure transaction handling)
• Delivery and logistics partners
• Cloud hosting and data storage providers
• Email and SMS marketing platforms
• Customer relationship management (CRM) software providers
• Website analytics and performance monitoring tools
• Advertising and retargeting platforms
• Fraud detection and cybersecurity service providers
• Customer support and help desk software providers

5.2 Legal Requirements and Law Enforcement

We may disclose your personal information if we believe in good faith that such disclosure is necessary to:

• Comply with a legal obligation, court order, subpoena, or government request
• Protect and defend the rights or property of Chopt
• Prevent or investigate possible wrongdoing in connection with our services
• Protect the personal safety of users of our services or the public

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal information may be transferred to the acquiring entity. We will notify you of any such change in ownership or use of your personal information and any choices you may have regarding your information.

5.4 Advertising Partners

We may share certain information (such as hashed email addresses or advertising identifiers) with digital advertising partners to deliver targeted advertisements on our website and third-party platforms. These partners may use cookies and similar tracking technologies. Under the CCPA/CPRA, sharing data with advertising networks for cross-context behavioral advertising may constitute a "sale" or "sharing" of personal information, and California residents have the right to opt out of such practices. See Section 11 for more information.

5.5 With Your Consent

We may share your personal information with other third parties when we have your explicit consent to do so.

6. Data Security

We take the security of your personal information seriously and implement a range of technical and organizational measures designed to protect your data from unauthorized access, disclosure, alteration, and destruction. These measures include:

6.1 Technical Safeguards

• Secure Socket Layer (SSL) / Transport Layer Security (TLS) encryption for data transmitted between your browser and our servers
• Encryption of sensitive data at rest
• Firewalls and intrusion detection systems
• Regular security audits and vulnerability assessments
• Secure coding practices and regular software updates
• Access controls and multi-factor authentication for internal systems

6.2 Organizational Safeguards

• Employee training on data privacy and security best practices
• Limiting access to personal information to employees and contractors who need it to perform their job functions
• Contractual data protection obligations with all third-party service providers
• Incident response procedures for detecting and responding to data breaches

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

When data is no longer required for the purposes for which it was collected, we will securely delete or anonymize it in accordance with our data retention procedures.

8. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information. We are committed to honoring these rights in accordance with applicable law.

8.1 Rights for All Users

• Right to Access: You have the right to request a copy of the personal information we hold about you.
• Right to Correction: You have the right to request that we correct any inaccurate or incomplete personal information we hold about you.
• Right to Deletion: You have the right to request that we delete your personal information, subject to certain exceptions (such as where retention is required by law).
• Right to Portability: You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit it to another controller where technically feasible.
• Right to Withdraw Consent: Where we process your data based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to Opt Out of Marketing: You can unsubscribe from marketing communications at any time by clicking the unsubscribe link in any marketing email or contacting us at [email protected].

8.2 Additional Rights for California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Know: You have the right to know what personal information we collect, use, disclose, and sell or share about you, including the categories and specific pieces of information.
• Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions.
• Right to Correct: You have the right to request correction of inaccurate personal information we maintain about you.
• Right to Opt Out of Sale or Sharing: You have the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising. To exercise this right, you may contact us at [email protected] or use the "Do Not Sell or Share My Personal Information" option where available on our website.
• Right to Limit Use of Sensitive Personal Information: You have the right to limit our use and disclosure of sensitive personal information to purposes permitted by the CPRA.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you goods or services, charge you different prices, or provide a different level of quality because you exercised your privacy rights.

To submit a California privacy rights request, please contact us at [email protected] with the subject line "California Privacy Request." We will respond to verifiable consumer requests within 45 days, with the possibility of a 45-day extension where necessary.

8.3 Exercising Your Rights

To exercise any of your privacy rights, you may:

• Send an email to [email protected] with the subject line "Privacy Rights Request"
• Visit our website at chopt-cafe.click and use any available privacy request forms

We may need to verify your identity before processing your request to protect the security of your personal information. We will not use personal information provided in a rights request for any purpose other than responding to the request.

9. Cookie Policy

Our website uses cookies and similar tracking technologies to enhance your experience, analyze website traffic, and support our marketing activities.

9.1 What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They allow the website to remember your actions and preferences over a period of time, so you do not have to keep re-entering them when you return to the website or browse from one page to another.

9.2 Types of Cookies We Use

• Essential Cookies: Necessary for the website to function properly (e.g., shopping cart, login sessions). These cannot be disabled.
• Analytics Cookies: Help us understand how visitors interact with our website by collecting and reporting information anonymously (e.g., Google Analytics).
• Functional Cookies: Enable enhanced functionality and personalization, such as remembering your preferences and language settings.
• Marketing and Advertising Cookies: Used to track visitors across websites to display relevant advertisements. These are placed by advertising partners with our permission.

9.3 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or receive a warning before a cookie is stored. Please note that disabling certain cookies may affect the functionality of our website. You may also opt out of certain advertising cookies through industry opt-out tools such as the Digital Advertising Alliance's opt-out tool at optout.aboutads.info.

For more detailed information about our cookie practices, please contact us at [email protected].

10. Children's Privacy

We do not direct our website or services to children under the age of 18, and we do not knowingly collect personal information from children. Our website, menu, and online ordering services are designed for adults and are not directed at minors.

If you are a parent or guardian and believe that your child under the age of 18 has provided us with personal information without your consent, please contact us immediately at [email protected]. We will take prompt steps to delete such information from our records. We comply with the Children's Online Privacy Protection Act (COPPA) in our data practices.

By using our website or services, you represent and warrant that you are at least 18 years of age. If you are under 18 years of age, please do not use our website or provide any personal information to us.

11. Do Not Sell or Share My Personal Information

Under the CCPA/CPRA, California residents have the right to opt out of the "sale" or "sharing" of their personal information. While we do not sell personal information in the traditional sense of exchanging it for money, we may share certain data with advertising partners for cross-context behavioral advertising, which may be considered "sharing" under California law.

Categories of personal information that may be shared with advertising partners include:

• Identifiers (such as hashed email addresses or advertising IDs)
• Internet or other electronic network activity information (such as browsing behavior on our website)
• Inferences drawn from the above information

To opt out of the sale or sharing of your personal information, please contact us at [email protected] with the subject line "Do Not Sell or Share My Personal Information." We will process your request within 15 business days. We will not discriminate against you for exercising this right.

We also honor Global Privacy Control (GPC) signals where technically feasible. If your browser or browser extension transmits a GPC signal indicating your preference to opt out of the sale or sharing of personal data, we will treat this as a valid opt-out request for California residents.

12. International Data Transfers

Chopt is based in the United States, and the personal information we collect is primarily stored and processed within the United States. Our operations are focused on serving customers in the United States, and our data is stored on servers located within the United States.

However, some of our third-party service providers may be located in other countries or may transfer data internationally as part of their operations. Where such international transfers occur, we take steps to ensure that appropriate safeguards are in place to protect your personal information in accordance with applicable data protection laws.

If you access our website from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States. By using our services, you acknowledge and consent to the transfer of your information to the United States and its processing in accordance with this Privacy Policy.

The data protection laws in the United States may differ from those in your country of residence. We encourage you to review this Privacy Policy and contact us with any questions or concerns about how your information may be handled.

13. Third-Party Links and Services

Our website may contain links to third-party websites, social media platforms, and services that are not operated by us. These third-party services have their own privacy policies, and we do not accept responsibility or liability for their policies or practices. We encourage you to review the privacy policies of any third-party services you visit.

Third-party integrations on our website may include, but are not limited to:

• Social media sharing buttons and widgets (e.g., Facebook, Instagram, X/Twitter)
• Third-party payment processors
• Food delivery platforms and aggregators
• Google Maps and location services
• Customer review platforms

These third parties may independently collect information about you when you interact with their features on our website. We are not responsible for the privacy practices of these third parties.

14. Federal Trade Commission (FTC) Compliance

We are committed to compliance with the Federal Trade Commission Act and FTC guidelines regarding consumer protection and privacy. We do not engage in deceptive or unfair practices with respect to consumer data. Our privacy practices are designed to be transparent, fair, and consistent with consumer expectations.

If you believe that we have engaged in any deceptive or unfair privacy practices, you have the right to file a complaint with the Federal Trade Commission (FTC). The FTC can be contacted at:

15. Filing Privacy Complaints

We take all privacy concerns seriously and are committed to resolving any complaints or disputes in a fair and timely manner. If you have a concern about how we handle your personal information, we encourage you to contact us first so that we can attempt to resolve the issue directly.

15.1 Contact Us First

Please send your privacy complaint or concern to:

• Email: [email protected]
• Subject Line: Privacy Complaint
• Website: chopt-cafe.click

We will acknowledge receipt of your complaint within 5 business days and aim to resolve it within 30 business days. If the matter is complex, we may require additional time, and we will keep you informed of our progress.

15.2 Regulatory Authorities

If you are a California resident and are not satisfied with our response to your privacy complaint, you may escalate your complaint to the California Privacy Protection Agency (CPPA):

You may also file a complaint with the California Attorney General's Office or the Federal Trade Commission (FTC) as described in Section 14 above.

16. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy
• Post the revised policy on our website at chopt-cafe.click
• Send email notification to registered users where required by law or where changes materially affect how we use your personal information
• Display a prominent notice on our website for a reasonable period following the update

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website or services after any changes to this Privacy Policy will constitute your acknowledgment of the changes and your consent to abide by and be bound by the updated policy.

If you disagree with any changes to this Privacy Policy, you should discontinue your use of our website and services and, if applicable, delete your account.

17. Contact Information for Privacy Inquiries

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact us. We are committed to addressing your concerns promptly and thoroughly.

When contacting us regarding privacy matters, please provide:

• Your full name and email address associated with your account (if applicable)
• A clear description of your inquiry or request
• The specific right you wish to exercise (if submitting a privacy rights request)

We will respond to your inquiry as promptly as possible and in accordance with applicable legal timelines. For California residents submitting CCPA/CPRA requests, we will respond within 45 days of receipt of a verifiable consumer request.

This Privacy Policy was last updated on June 24, 2026. © 2026 Chopt. All rights reserved.