Privacy Policy

Welcome to Chopt Fresh Salads. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website at chopt-freshsalads.click, place orders, interact with our digital services, or otherwise engage with us. Please read this document carefully. By using our website or services, you agree to the practices described herein.

We are committed to protecting your privacy and handling your personal information with transparency, integrity, and respect. This policy is designed to comply with applicable United States federal and state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Federal Trade Commission Act (FTC Act), and other applicable consumer protection regulations.

1. About Us

Chopt Fresh Salads operates the website chopt-freshsalads.click and provides fresh, made-to-order salads and related food products and services. For the purposes of this Privacy Policy, "we," "us," "our," or "the Company" refers to Chopt Fresh Salads.

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us using the information provided in Section 14 of this document.

2. Information We Collect

We collect various types of information in connection with your use of our website, online ordering platform, and related services. The categories of personal information we collect include:

2.1 Personal Identification Information

When you create an account, place an order, subscribe to our newsletter, or contact us, we may collect:

• Full name
• Email address
• Phone number
• Mailing or delivery address
• Username and password (encrypted)
• Date of birth (to verify age eligibility)
• Profile photo (if voluntarily provided)

2.2 Payment and Financial Information

When you make a purchase through our website, we collect payment-related information, including:

• Credit or debit card details (processed through secure third-party payment processors)
• Billing address
• Transaction history and order details

We do not store full credit card numbers or CVV codes on our own servers. All payment data is handled through PCI-DSS-compliant third-party processors.

2.3 Order and Dietary Information

As a food service business, we may collect information about:

• Your food preferences, customizations, and order history
• Dietary restrictions or allergies (if voluntarily provided)
• Loyalty program participation and reward redemptions

2.4 Usage and Technical Data

When you browse our website, we automatically collect certain technical data, including:

• IP address
• Browser type and version
• Operating system and device type
• Referring website URLs
• Pages visited, links clicked, and time spent on pages
• Date and time of access
• Geographic location data (derived from IP address)

2.5 Cookie and Tracking Data

We use cookies, web beacons, pixel tags, and similar tracking technologies to collect data about your browsing behavior on our site. Please see Section 9 (Cookies) for detailed information about the types of cookies we use and how to manage your preferences.

2.6 Communications Data

If you contact us through email, contact forms, or customer support channels, we may retain records of those communications, including:

• Content of messages sent to us
• Your contact details associated with the communication
• Support ticket information and resolution history

2.7 User-Generated Content

If you submit reviews, ratings, photos, or comments on our platform or social media channels, we may collect and store that content in association with your account or publicly display it in accordance with our Terms of Service.

3. How We Use Your Information

We use the personal information we collect for a variety of legitimate business purposes, including:

3.1 Service Provision and Order Fulfillment

• Processing and fulfilling your food orders
• Managing your account and user profile
• Communicating order confirmations, updates, and delivery notifications
• Responding to your inquiries and customer service requests
• Administering our loyalty and rewards programs

3.2 Personalization and User Experience

• Remembering your food preferences and past orders
• Providing personalized menu recommendations
• Saving your delivery addresses for faster checkout
• Tailoring content and promotions based on your preferences

3.3 Marketing and Promotional Communications

• Sending promotional emails, newsletters, and special offers (with your consent where required by law)
• Notifying you of new menu items, seasonal promotions, and exclusive deals
• Running targeted advertising campaigns through digital platforms
• Conducting surveys and gathering feedback about your experience

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in our emails or by contacting us directly at [email protected].

3.4 Analytics and Business Improvement

• Analyzing website traffic and user behavior to improve our platform
• Monitoring the performance of our website and digital services
• Conducting internal research and product development
• Identifying trends in menu popularity and customer satisfaction

3.5 Legal Compliance and Safety

• Complying with applicable federal and state laws and regulations
• Detecting, preventing, and addressing fraudulent activity or security breaches
• Enforcing our Terms of Service and other agreements
• Protecting the rights, safety, and property of our users and the public
• Responding to lawful requests from law enforcement or government authorities

4. Legal Basis for Processing (U.S. Consumer Rights Context)

Under United States law, including the FTC Act and applicable state consumer protection statutes, we process your personal information based on the following lawful grounds:

• Contractual Necessity: Processing is necessary to fulfill your orders, manage your account, and provide services you have requested.
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as preventing fraud, improving our services, and ensuring website security, provided such interests do not override your rights.
• Consent: For marketing communications and certain non-essential cookies, we rely on your express consent, which you may withdraw at any time.
• Legal Obligation: Processing is required to comply with applicable laws, including tax laws, food safety regulations, and law enforcement requests.

5. Sharing Your Information with Third Parties

We do not sell your personal information to third parties for monetary compensation. However, we may share your information with certain trusted third parties in the following circumstances:

5.1 Service Providers and Business Partners

We engage third-party companies and individuals to assist in operating our business. These service providers have access to your personal information only as necessary to perform their functions and are contractually obligated to maintain its confidentiality. Categories of service providers include:

• Payment Processors: To securely process credit card and digital payments
• Delivery and Logistics Partners: To fulfill and track food delivery orders
• Email and Communication Platforms: To send transactional and marketing emails
• Cloud Hosting and IT Infrastructure Providers: To host and maintain our website and databases
• Analytics Providers: Such as Google Analytics, to analyze website usage and performance
• Customer Support Platforms: To manage help desk and support ticket systems
• Advertising Networks: To deliver targeted advertisements on third-party platforms

5.2 Legal Requirements and Law Enforcement

We may disclose your personal information if we believe in good faith that such disclosure is necessary to:

• Comply with a legal obligation, court order, subpoena, or government request
• Enforce our Terms of Service or other applicable agreements
• Investigate potential violations of our policies
• Protect the rights, property, or safety of Chopt Fresh Salads, our users, or the public
• Prevent, detect, or investigate fraud or illegal activity

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy proceeding, your personal information may be transferred to a successor entity. We will notify you via email or prominent notice on our website before your information is transferred and becomes subject to a different privacy policy.

5.4 With Your Consent

We may share your information with third parties for purposes not described in this policy when we have obtained your express consent to do so.

5.5 California-Specific Disclosure

Under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), California residents should note that while we do not "sell" personal information in the traditional sense, we may "share" personal information with advertising partners for cross-context behavioral advertising purposes. California residents have the right to opt out of such sharing. Please see Section 8 for information on exercising your rights.

6. Data Security

We take the security of your personal information seriously and implement a variety of technical, administrative, and physical safeguards to protect it from unauthorized access, disclosure, alteration, or destruction.

6.1 Technical Safeguards

• SSL/TLS encryption for all data transmitted between your browser and our servers
• Encrypted storage of sensitive data, including passwords (using bcrypt or equivalent hashing)
• Firewalls and intrusion detection systems
• Regular security audits and vulnerability assessments
• Multi-factor authentication for administrative access

6.2 Administrative Safeguards

• Access to personal information restricted to authorized employees on a need-to-know basis
• Regular employee training on data privacy and security best practices
• Contractual data protection obligations with all third-party service providers
• Documented incident response and breach notification procedures

6.3 Limitations

While we strive to protect your personal information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security. In the event of a data breach that is likely to result in risk to your rights and freedoms, we will notify affected individuals and relevant authorities as required by applicable law.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Upon expiration of the applicable retention period, we will securely delete or anonymize your personal information. Where deletion is not immediately possible (for example, because data is stored in backup archives), we will isolate the data from further processing until deletion is feasible.

8. Your Privacy Rights

Depending on your state of residence and applicable law, you may have the following rights regarding your personal information:

8.1 General Rights (All U.S. Users)

• Right to Know/Access: You may request information about the categories and specific pieces of personal information we have collected about you.
• Right to Correction: You may request that we correct inaccurate or incomplete personal information we hold about you.
• Right to Deletion: You may request that we delete your personal information, subject to certain exceptions (such as legal compliance obligations).
• Right to Opt Out of Marketing: You may opt out of receiving marketing communications from us at any time.

8.2 California Residents — CCPA/CPRA Rights

If you are a California resident, you have additional rights under the CCPA as amended by the CPRA:

• Right to Know: The right to request disclosure of personal information collected, used, disclosed, or sold in the past 12 months.
• Right to Delete: The right to request deletion of personal information we have collected from you, subject to exceptions.
• Right to Correct: The right to request correction of inaccurate personal information.
• Right to Opt Out of Sale/Sharing: The right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising.
• Right to Limit Use of Sensitive Personal Information: The right to limit our use of sensitive personal information (such as precise geolocation or dietary information) to necessary purposes.
• Right to Data Portability: The right to receive a copy of your personal information in a portable, readily usable format.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you goods or services, charge different prices, or provide a lower quality of service because you exercised your privacy rights.

8.3 How to Submit a Privacy Rights Request

To exercise any of your privacy rights, please contact us using one of the following methods:

• Email: [email protected] with the subject line "Privacy Rights Request"
• Website: chopt-freshsalads.click (via our contact or privacy request form)

We will verify your identity before processing your request to protect your personal information from unauthorized access. You may designate an authorized agent to submit requests on your behalf; the agent must provide written authorization from you and verify their own identity.

9. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and support our marketing efforts.

9.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the basic functioning of our website (e.g., maintaining your shopping cart, session management).
• Performance and Analytics Cookies: Help us understand how visitors interact with our website (e.g., Google Analytics).
• Functionality Cookies: Remember your preferences and settings for a more personalized experience (e.g., saved delivery addresses).
• Marketing and Advertising Cookies: Used to deliver relevant advertisements and track the effectiveness of our marketing campaigns.
• Third-Party Cookies: Placed by trusted partners such as social media platforms and advertising networks.

9.2 Managing Your Cookie Preferences

You can manage or disable cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of our website. Most browsers allow you to:

• View and delete cookies stored on your device
• Block third-party cookies
• Block all cookies from specific websites
• Receive notifications when cookies are set

For more information about cookies and how to manage them, please visit www.allaboutcookies.org.

For detailed information about the specific cookies we use and their individual purposes and durations, please refer to our Cookie Policy available on our website.

10. Children's Privacy

Our website and services are intended for individuals who are 18 years of age or older. We do not knowingly collect, use, or disclose personal information from children under the age of 13, and we do not direct our services toward minors.

This policy is consistent with the Children's Online Privacy Protection Act (COPPA), which restricts the online collection of personal information from children under 13 without verifiable parental consent.

If you are a parent or guardian and believe that your child under the age of 13 has provided us with personal information without your consent, please contact us immediately at [email protected]. We will take prompt steps to investigate and delete such information from our records.

Individuals between the ages of 13 and 17 may only use our services with the express consent and supervision of a parent or legal guardian. By using our services, you represent and warrant that you are at least 18 years of age or that you have obtained parental consent if you are between 13 and 17.

11. International Data Transfers

Chopt Fresh Salads is based in the United States and primarily processes your personal information within the United States. However, some of our third-party service providers may be located in other countries, which means your personal information may be transferred to, stored in, or processed in countries outside the United States.

When we transfer personal information internationally, we take steps to ensure that appropriate safeguards are in place to protect your information and to ensure that the transfer complies with applicable data protection laws. These safeguards may include:

• Standard contractual clauses approved by applicable data protection authorities
• Data processing agreements with third-party service providers that include appropriate protections
• Ensuring that recipient countries provide an adequate level of data protection

By using our website and services, you acknowledge and consent to the transfer of your personal information to the United States and potentially to other countries, where data protection laws may differ from those in your country of residence. We will always handle your information in accordance with this Privacy Policy regardless of where it is processed.

12. Third-Party Websites and Links

Our website may contain links to third-party websites, social media platforms, and partner services that are not owned or controlled by Chopt Fresh Salads. These links are provided for your convenience and informational purposes only.

We have no control over the privacy practices or content of these third-party websites. Once you leave our website and visit a third-party site, your interactions are governed by that site's own privacy policy. We encourage you to review the privacy policies of any third-party websites you visit.

We are not responsible for the privacy practices, content, or security of any third-party websites or services, and our Privacy Policy does not apply to your use of such sites.

13. California "Shine the Light" Law

Under California Civil Code Section 1798.83 (the "Shine the Light" law), California residents who have an established business relationship with us may request information about any personal information we may have shared with third parties for direct marketing purposes during the preceding calendar year.

If you are a California resident and wish to make such a request, please contact us at [email protected] with "Shine the Light Request" in the subject line. We will respond within 30 days of receiving your request. Please note that we are only required to respond to one request per customer per year, and we are not required to respond to requests made by means other than those specified above.

14. Filing Complaints with Regulatory Authorities

If you believe that we have not handled your personal information in accordance with applicable law or this Privacy Policy, we encourage you to contact us first so that we can try to resolve your concern directly.

If you are dissatisfied with our response, or if you believe your rights have been violated, you have the right to file a complaint with the appropriate regulatory authority:

14.1 Federal Trade Commission (FTC)

The FTC is the primary federal agency responsible for consumer protection in the United States, including privacy and data security matters.

• Website: www.ftc.gov
• Complaint Portal: reportfraud.ftc.gov
• Phone: 1-877-FTC-HELP (1-877-382-4357)

14.2 California Privacy Protection Agency (CPPA)

California residents may file complaints with the California Privacy Protection Agency, which enforces the CCPA/CPRA.

• Website: cppa.ca.gov
• Email: [email protected]

14.3 State Attorneys General

Residents of all U.S. states may also file privacy-related complaints with their respective State Attorney General's office. Contact information for your State AG can typically be found on your state government's official website.

15. Contact Us for Privacy Inquiries

If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal information, please do not hesitate to contact our privacy team using the information below:

We are committed to resolving privacy-related concerns promptly and transparently. When you contact us with a privacy inquiry or request, please provide sufficient information to allow us to verify your identity and understand the nature of your request. We will acknowledge receipt of your inquiry within 5 business days and provide a substantive response within the timeframes required by applicable law.

16. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes to this policy, we will notify you through one or more of the following methods:

• Posting a prominent notice on our website homepage
• Sending an email notification to the address associated with your account
• Updating the "Last Updated" date at the top of this Privacy Policy

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website or services after the posting of any changes constitutes your acceptance of the revised Privacy Policy.

If you disagree with the changes made to this Privacy Policy, you should discontinue your use of our website and services and may request deletion of your account and personal information by contacting us at [email protected].

17. Glossary of Key Terms

For the purposes of this Privacy Policy, the following terms have the meanings set out below: