Privacy Policy

This Privacy Policy describes how Chopt Fresh Salads ("Chopt," "we," "us," or "our") collects, uses, discloses, and protects personal information obtained from visitors and customers who interact with our website located at chopt-freshsalads.rest (the "Website") and any related services, applications, or platforms we operate (collectively, the "Services"). By accessing or using our Services, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy.

We are committed to protecting your privacy and handling your personal data with transparency, integrity, and care. This policy has been prepared in accordance with applicable United States federal and state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and the Federal Trade Commission Act (FTC Act), among other applicable regulations.

If you have any questions about this Privacy Policy or our data practices, please contact us using the information provided at the end of this document.

1. About Us

Chopt Fresh Salads operates as a food service business dedicated to providing fresh, high-quality salads and healthy meal options to our customers. We operate through our Website and may also offer mobile ordering, delivery integrations, and loyalty program services.

2. Scope of This Privacy Policy

This Privacy Policy applies to all personal information that Chopt Fresh Salads collects, processes, stores, or shares in connection with:

• Your use of our Website and any subdomains thereof;
• Your placement of online food orders, reservations, or catering requests;
• Your participation in our loyalty programs, promotions, contests, or surveys;
• Your communications with us via email, phone, chat, or social media;
• Your subscription to newsletters or marketing communications;
• Any other interaction you have with us as a customer, visitor, or prospective customer.

This Privacy Policy does not apply to third-party websites, applications, or services that may be linked to or from our Website. We are not responsible for the privacy practices of those third parties, and we encourage you to review their privacy policies independently.

3. Information We Collect

We collect several categories of personal information, depending on how you interact with us. These categories include, but are not limited to, the following:

3.1 Information You Provide Directly

When you voluntarily interact with our Services, we may collect the following types of personal information:

• Identification Information: Your full name, username, or display name;
• Contact Information: Email address, phone number, mailing address, and billing address;
• Account Credentials: Username and encrypted password for registered accounts;
• Payment Information: Credit or debit card numbers, billing details, and other financial information necessary to process your transactions (note: payment card data is processed by third-party payment processors and is not stored on our servers);
• Order Information: Details about the food items you order, dietary preferences, delivery instructions, and order history;
• Loyalty Program Data: Points accumulated, rewards redeemed, and program participation history;
• Communications: Any messages, feedback, reviews, complaints, or inquiries you send to us;
• Survey and Contest Data: Responses you provide when participating in surveys, promotions, or contests.

3.2 Information Collected Automatically

When you visit our Website or use our digital Services, we automatically collect certain technical and usage data, including:

• Device Information: Device type, operating system, browser type and version, device identifiers, and screen resolution;
• Network Information: IP address, geographic location (at the city or regional level), internet service provider, and connection type;
• Usage Data: Pages visited, links clicked, time spent on pages, referral URLs, search queries entered on our Website, and navigation paths;
• Session Data: Login timestamps, session duration, and logout information;
• Log Files: Server logs that automatically record access requests, errors, and system events;
• Cookie Data: Information collected through cookies, web beacons, pixel tags, and similar tracking technologies (see Section 8 for more information).

3.3 Information from Third Parties

We may also receive personal information about you from third-party sources, such as:

• Social Media Platforms: If you connect your social media account (e.g., Google, Facebook) to our Services or use social login features, we may receive certain profile information from those platforms;
• Delivery Partners: Third-party delivery platforms (such as DoorDash, Uber Eats, or Grubhub) may share order-related data with us to fulfill your requests;
• Analytics Providers: We may receive aggregated or de-identified data from analytics services to better understand how customers interact with our offerings;
• Marketing Partners: We may receive information from advertising or data broker partners to improve the relevance of our marketing campaigns;
• Payment Processors: We may receive transaction confirmation data from our payment processors.

3.4 Sensitive Personal Information

In limited circumstances, we may collect information that is considered sensitive, such as dietary restrictions or food allergy information that you provide to ensure a safe meal experience. We handle such information with heightened care and use it only for the purpose for which it was provided. We do not sell sensitive personal information.

4. How We Use Your Information

Chopt Fresh Salads uses the personal information we collect for the following purposes:

4.1 Service Provision and Order Fulfillment

• To process and fulfill your food orders, catering requests, and reservations;
• To manage your account and provide customer support;
• To communicate with you regarding your orders, including confirmations, updates, and delivery notifications;
• To administer loyalty programs and deliver earned rewards;
• To process payments and prevent fraudulent transactions.

4.2 Website Operation and Improvement

• To operate, maintain, and improve our Website and digital Services;
• To personalize your experience and tailor content, menus, and recommendations to your preferences;
• To diagnose technical problems, troubleshoot errors, and ensure the security and stability of our platform;
• To conduct analytics and measure the performance of our Website and marketing campaigns.

4.3 Marketing and Communications

• To send you promotional emails, newsletters, special offers, and information about new menu items, if you have opted in to receive such communications;
• To personalize advertising and marketing messages based on your preferences and order history;
• To conduct surveys, focus groups, or research to improve our products and services;
• To run contests, sweepstakes, or other promotional activities.

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any marketing email or by contacting us at [email protected].

4.4 Legal and Compliance Purposes

• To comply with applicable federal, state, and local laws and regulations;
• To respond to legal process, court orders, or governmental inquiries;
• To enforce our Terms of Service and other applicable agreements;
• To protect the rights, property, and safety of Chopt Fresh Salads, our customers, and the public;
• To detect, prevent, and investigate fraudulent, illegal, or harmful activities.

5. How We Share Your Information

We do not sell your personal information to third parties for monetary compensation. However, we may share your information in the following circumstances:

5.1 Service Providers

We engage trusted third-party companies and individuals to perform services on our behalf, including:

• Payment processing and fraud prevention;
• Cloud hosting and data storage;
• Email and SMS communication platforms;
• Analytics and performance monitoring tools;
• Customer support and helpdesk software;
• Delivery logistics and courier partners;
• Marketing and advertising platforms.

These service providers are granted access to your personal information only as necessary to perform their services and are contractually obligated to protect your data and use it solely for the purposes specified by us.

5.2 Business Partners

With your consent or where otherwise legally permitted, we may share your information with carefully selected business partners whose products or services may be of interest to you. We will not share your data with partners for their own independent marketing purposes without your explicit consent.

5.3 Legal Obligations

We may disclose your personal information to law enforcement agencies, regulatory authorities, courts, or other government bodies when required to do so by law, or when we have a good-faith belief that disclosure is necessary to:

• Comply with a legal obligation, subpoena, court order, or regulatory requirement;
• Protect and defend the legal rights or property of Chopt Fresh Salads;
• Prevent or investigate possible wrongdoing, fraud, or security incidents;
• Protect the personal safety of users of the Services or the public.

5.4 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal information may be transferred as part of that transaction. We will notify you via email or a prominent notice on our Website prior to your information being transferred or subject to a different privacy policy.

5.5 Aggregated and De-Identified Data

We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you with third parties for research, analytics, industry reporting, or other lawful purposes.

6. Data Security

Chopt Fresh Salads takes the security of your personal information seriously and implements a range of technical, organizational, and administrative measures designed to protect your data from unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption: We use industry-standard SSL/TLS encryption to protect data transmitted between your browser and our servers;
• Access Controls: Access to personal information is restricted to authorized employees and service providers who have a legitimate business need to access such data;
• Secure Storage: Personal data is stored on secured servers with appropriate firewall and intrusion detection protections;
• Payment Security: Payment card data is handled in accordance with Payment Card Industry Data Security Standards (PCI DSS) through our third-party payment processors;
• Regular Audits: We conduct periodic reviews of our security practices and systems to identify and address potential vulnerabilities;
• Employee Training: Our team members receive training on data privacy and security best practices.

7. Your Privacy Rights

Depending on your location, particularly if you are a resident of California or another state with applicable data protection laws, you may have certain rights with respect to your personal information. We honor these rights as described below:

7.1 Right to Know and Access

You have the right to request that we disclose to you the categories and specific pieces of personal information we have collected about you, the categories of sources from which we collected it, the business or commercial purposes for collecting it, and the categories of third parties with whom we share it.

7.2 Right to Correction

You have the right to request that we correct inaccurate personal information that we maintain about you, subject to verification of your identity and the accuracy of the correction requested.

7.3 Right to Deletion

You have the right to request that we delete personal information we have collected from you, subject to certain exceptions permitted by law (e.g., where we need to retain data to complete a transaction, comply with a legal obligation, or for other legitimate purposes).

7.4 Right to Opt Out of Sale or Sharing

Under the CCPA/CPRA, California residents have the right to opt out of the "sale" or "sharing" of their personal information. While we do not sell personal information for monetary value, certain sharing of data with advertising partners may constitute "sharing" under California law. You may exercise this right by contacting us at [email protected].

7.5 Right to Limit Use of Sensitive Personal Information

California residents have the right to limit our use and disclosure of sensitive personal information to purposes that are necessary for providing requested services, subject to certain exceptions under the CPRA.

7.6 Right to Data Portability

Where technically feasible, you have the right to receive a copy of the personal information you have provided to us in a structured, commonly used, and machine-readable format so that it can be transferred to another entity.

7.7 Right to Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights. This means we will not deny you goods or services, charge you different prices, provide a different quality of service, or retaliate against you for exercising your rights under applicable privacy laws.

7.8 How to Submit a Privacy Rights Request

To exercise any of the rights described above, please submit a verifiable consumer request by:

• Emailing us at: [email protected]
• Visiting our Website at: chopt-freshsalads.rest

We will respond to your request within 45 days of receipt. If we require additional time (up to an additional 45 days), we will notify you of the reason and extension period in writing. We may need to verify your identity before processing your request to protect the security of your information.

You may also designate an authorized agent to submit a request on your behalf, provided that the agent provides proof of authorization and you verify your identity directly with us.

8. Cookie Policy and Tracking Technologies

Our Website uses cookies and similar tracking technologies to enhance your experience, analyze usage patterns, and deliver relevant advertising. A cookie is a small text file stored on your device when you visit a website.

8.1 Types of Cookies We Use

8.2 Third-Party Cookies

We may allow third-party service providers (such as Google Analytics, Meta Pixel, or similar tools) to place cookies on our Website for analytics and advertising purposes. These third parties have their own privacy policies governing how they use such information.

8.3 Managing Your Cookie Preferences

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies or delete cookies that have already been set. Please note that disabling certain cookies may affect the functionality and performance of our Website. For more information, please refer to your browser's help documentation. You may also visit www.allaboutcookies.org for guidance on managing cookies across various browsers.

8.4 Do Not Track Signals

Some browsers include a "Do Not Track" (DNT) feature that signals to websites that you do not want your online activities tracked. Currently, there is no universally accepted standard for how websites should respond to DNT signals. Our Website does not currently alter its data collection practices in response to DNT signals, but we will update this policy if industry standards change.

9. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Our general retention guidelines are as follows:

When personal information is no longer needed, we securely delete or anonymize it in accordance with our data retention procedures. In some circumstances, we may retain anonymized data for statistical and analytical purposes indefinitely, as such data can no longer be attributed to any individual.

10. Children's Privacy

Chopt Fresh Salads does not knowingly solicit, collect, or maintain personal information from children under 18 years of age. If you are under 18, please do not use our Services or provide any personal information to us.

If we become aware that we have inadvertently collected personal information from a child under the age of 18 without verifiable parental consent, we will take prompt steps to delete such information from our records. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately at [email protected] so that we can take appropriate action.

Our practices in this regard are consistent with the requirements of the Children's Online Privacy Protection Act (COPPA), which governs the collection of personal information from children under 13 years of age in the United States.

11. International Data Transfers

Chopt Fresh Salads is based in the United States and operates primarily within the United States. If you are accessing our Services from outside the United States, please be aware that your personal information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country of residence.

By using our Services, you acknowledge and consent to the transfer of your information to the United States. We take appropriate steps to ensure that any international transfers of personal data are conducted in compliance with applicable laws and that adequate safeguards are in place to protect your information.

We do not actively market our Services to individuals outside of the United States. If you are located in the European Union, European Economic Area, United Kingdom, or another jurisdiction with specific data protection regulations, please contact us before using our Services to understand how your data may be handled.

12. Third-Party Links and Services

Our Website may contain links to third-party websites, social media platforms, delivery applications, or other services that are not operated or controlled by Chopt Fresh Salads. These links are provided for your convenience and do not imply our endorsement of, or affiliation with, those third parties.

When you click on a third-party link, you will be directed to that party's website, which has its own privacy policy. We strongly encourage you to review the privacy policies of any third-party sites you visit. We have no control over and assume no responsibility for the content, privacy practices, or security of any third-party websites or services.

13. California Privacy Rights

This section applies specifically to residents of the State of California and supplements the information provided elsewhere in this Privacy Policy. It is provided in accordance with the California Consumer Privacy Act of 2018 (CCPA) as amended by the California Privacy Rights Act of 2020 (CPRA).

13.1 Categories of Personal Information Collected in the Last 12 Months

13.2 Your California Rights

California residents have the right to:

• Know what personal information is collected, used, shared, or sold;
• Delete personal information held by businesses and their service providers;
• Opt out of the sale or sharing of personal information;
• Correct inaccurate personal information;
• Limit the use of sensitive personal information;
• Non-discrimination for exercising their CCPA/CPRA rights.

To exercise your California privacy rights, contact us at [email protected]. We will respond within the timeframes required under California law.

14. How to File a Complaint

If you have concerns about how we handle your personal information and are not satisfied with our response, you have the right to file a complaint with the appropriate data protection authority.

14.1 Federal Trade Commission (FTC)

In the United States, the Federal Trade Commission (FTC) enforces consumer protection laws, including those related to privacy and data security. You may file a complaint with the FTC at:

• Website: www.ftc.gov
• Phone: 1-877-FTC-HELP (1-877-382-4357)
• Address: Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, DC 20580

14.2 California Privacy Protection Agency (CPPA)

California residents who believe their CCPA/CPRA rights have been violated may file a complaint with the California Privacy Protection Agency (CPPA):

• Website: cppa.ca.gov
• Email: [email protected]

14.3 State Attorney General Offices

Residents of other US states may also have the right to file privacy complaints with their respective State Attorney General's office. Please consult your state's official government website for more information on available remedies and complaint procedures.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business practices, legal requirements, or the services we offer. When we make material changes, we will:

• Post the updated Privacy Policy on our Website at chopt-freshsalads.rest with a revised "Last Updated" date;
• Send a notification to the email address associated with your account, if applicable; and/or
• Display a prominent notice on our Website for a reasonable period of time.

Your continued use of our Services after any changes to this Privacy Policy constitutes your acceptance of the updated policy. We encourage you to review this page periodically to stay informed about how we protect your information.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact us. We are committed to addressing your inquiries promptly and transparently.

When contacting us about a privacy matter, please provide sufficient information to allow us to identify you and the nature of your request. We will respond to all verifiable requests within the timeframes required by applicable law, and in no event later than 45 days from receipt of your request.