Privacy Policy

This Privacy Policy describes how Chopt ("we," "us," or "our") collects, uses, shares, and protects information about you when you visit our website at new-chopt.click, place orders, use our digital services, or otherwise interact with us. We are committed to protecting your privacy and handling your personal information with transparency, integrity, and respect.

Please read this Privacy Policy carefully before using our website or services. By accessing or using new-chopt.click, you acknowledge that you have read, understood, and agree to the practices described in this policy. If you do not agree with any part of this Privacy Policy, please discontinue use of our website and services immediately.

For any questions, concerns, or requests related to your privacy, you may contact us at any time using the contact details provided at the end of this document.

1. Who We Are

Chopt is a food service business operating in the United States. We operate the website new-chopt.click and provide food-related services including online ordering, menu browsing, nutritional information, and customer engagement programs.

2. Scope of This Privacy Policy

This Privacy Policy applies to all personal information collected through:

• Our website located at new-chopt.click
• Online ordering platforms and digital menus linked to or operated by us
• Email communications, newsletters, and marketing messages we send to you
• Customer loyalty or rewards programs we operate
• Any surveys, feedback forms, or promotions we conduct
• Social media interactions where we are referenced or tagged
• Any other direct or indirect digital interaction between you and Chopt

This policy does not apply to third-party websites, applications, or services that may be linked from our website. Those third parties have their own privacy policies, and we encourage you to review them carefully.

3. Information We Collect

We collect various categories of information depending on how you interact with our website and services. Below is a detailed breakdown of the types of data we collect.

3.1 Personal Identification Information

When you create an account, place an order, subscribe to our newsletter, or contact us, we may collect the following personal identification data:

• Full name
• Email address
• Phone number
• Mailing or delivery address
• Date of birth (where required for age verification or promotional purposes)
• Username and password for account access

3.2 Payment and Financial Information

When you make purchases through our website, we collect billing information necessary to process your transaction. This may include:

• Credit or debit card details (processed through secure third-party payment processors)
• Billing address
• Transaction history and order amounts

We do not directly store complete payment card numbers on our servers. All payment data is handled by PCI-DSS compliant third-party processors.

3.3 Order and Dietary Information

Given the nature of our food service business, we may collect information related to:

• Food items ordered and order history
• Dietary preferences or restrictions you voluntarily provide
• Customization choices and special instructions
• Preferred locations or pickup points

3.4 Usage and Behavioral Data

We automatically collect certain data about how you interact with our website, including:

• Pages you visit and time spent on each page
• Links and buttons you click
• Items you view, add to cart, or order
• Search queries entered on our site
• Referring URLs and exit pages
• Frequency and duration of website visits

3.5 Device and Technical Information

When you access our website, we may automatically collect technical information from your device, such as:

• IP address
• Browser type and version
• Operating system and device type
• Screen resolution and language settings
• Time zone and geographic region (derived from IP address)
• Unique device identifiers

3.6 Cookies and Tracking Technologies

We use cookies, web beacons, pixels, and similar tracking technologies to collect information about your browsing behavior. Please refer to Section 10 of this Privacy Policy for a more detailed explanation of our cookie usage, or consult our dedicated Cookie Policy available on our website.

3.7 Communications Data

If you contact us via email, our contact form, or any other channel, we may collect and store:

• The content of your message
• Your email address and name
• Date and time of your communication
• Any attachments or supporting documents you provide

3.8 Information from Third Parties

We may also receive information about you from third-party sources, including:

• Social media platforms when you interact with our profiles or use social login features
• Marketing partners who share data in accordance with applicable law
• Analytics and advertising providers
• Delivery partners or third-party ordering platforms

4. How We Use Your Information

We use the information we collect for a variety of legitimate business purposes. We will only process your personal data where we have a lawful basis to do so, which may include fulfilling a contract with you, complying with a legal obligation, obtaining your consent, or pursuing our legitimate business interests.

4.1 Providing and Managing Our Services

• Processing and fulfilling your food orders
• Managing your account and providing access to order history
• Facilitating payments and issuing receipts or invoices
• Coordinating delivery or pickup arrangements
• Responding to your inquiries, complaints, or support requests

4.2 Improving Our Website and Services

• Analyzing usage patterns to identify areas for improvement
• Conducting internal research and data analytics
• Testing new features, menus, or website functionalities
• Monitoring and enhancing website performance and security

4.3 Marketing and Personalization

• Sending promotional emails, special offers, and newsletters (where you have consented or we have a legitimate interest)
• Personalizing your experience on our website based on your preferences and behavior
• Retargeting advertising campaigns on third-party platforms
• Administering loyalty programs, contests, or sweepstakes

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any marketing email we send, or by contacting us directly at info@new-chopt.click.

4.4 Legal Compliance and Safety

• Complying with applicable federal and state laws and regulations, including the Federal Trade Commission Act (FTC Act) and applicable state consumer protection laws
• Responding to lawful requests from government authorities or law enforcement
• Enforcing our Terms of Service and other agreements
• Detecting, investigating, and preventing fraud, abuse, or security incidents
• Protecting the rights, property, and safety of Chopt, our customers, and the public

5. Legal Basis for Processing (California Residents)

If you are a resident of California, you have specific rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). Under these laws, we are required to disclose the categories of personal information we collect, the purposes for which we use it, and whether we sell or share it with third parties.

Categories of personal information we have collected within the past twelve (12) months include: identifiers, commercial information, internet or network activity information, geolocation data, and inferences drawn from any of the above.

6. Sharing Your Information with Third Parties

We respect the confidentiality of your personal information. We do not sell, rent, or trade your personal data to unrelated third parties for their own marketing purposes without your explicit consent. However, we do share your information in the following limited circumstances:

6.1 Service Providers and Business Partners

We work with third-party companies and individuals who assist us in operating our website and providing our services. These service providers are granted access to your information only to the extent necessary to perform their functions and are contractually bound to maintain the confidentiality and security of your data. Categories of service providers include:

• Payment processors and fraud prevention services
• Web hosting and cloud infrastructure providers
• Analytics and data intelligence platforms (e.g., Google Analytics)
• Email marketing and customer communication tools
• Delivery and logistics partners
• Customer support platforms
• Advertising and retargeting networks

6.2 Legal Requirements and Law Enforcement

We may disclose your personal information when we believe in good faith that such disclosure is required or permitted by law, including:

• To comply with a court order, subpoena, or legal process
• To respond to a request from a government or regulatory authority
• To enforce our Terms of Service or other agreements
• To protect and defend the rights or property of Chopt
• To prevent or investigate possible wrongdoing in connection with our services
• To protect the personal safety of users of our services or the public

6.3 Business Transfers

In the event that Chopt undergoes a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of its assets, your personal information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website if your data becomes subject to a different privacy policy as a result of such a transaction.

6.4 Aggregated and De-Identified Data

We may share aggregated or de-identified data that cannot reasonably be used to identify you with third parties for research, marketing, analytics, or other purposes. This data does not constitute "personal information" under applicable law.

7. Data Security

We take the security of your personal information seriously and have implemented a variety of technical, administrative, and physical safeguards designed to protect your data from unauthorized access, use, alteration, or destruction. Our security measures include, but are not limited to:

• Encryption: We use SSL/TLS encryption for all data transmitted between your browser and our website.
• Access Controls: Personal information is accessible only to authorized personnel who have a legitimate need to access it in the course of their duties.
• Secure Servers: Our data is stored on secure servers hosted by reputable cloud infrastructure providers with industry-standard security certifications.
• Payment Security: All payment transactions are processed through PCI-DSS compliant third-party processors. We do not store full card numbers on our systems.
• Regular Audits: We conduct periodic security reviews and vulnerability assessments of our systems.
• Incident Response: We have procedures in place to detect, report, and investigate data breaches and security incidents promptly.

Despite our efforts, no method of transmission over the internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. You are encouraged to use strong, unique passwords for your account and to notify us immediately if you suspect any unauthorized access.

8. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The criteria we use to determine retention periods include:

• Account Data: Retained for the duration of your active account relationship with us, plus a reasonable period thereafter to resolve disputes or address legal claims.
• Order and Transaction Records: Typically retained for a minimum of seven (7) years to comply with tax, accounting, and financial record-keeping requirements under federal and state law.
• Marketing Data: Retained until you withdraw your consent or opt out of marketing communications, after which we will remove your information from active marketing lists promptly.
• Customer Support Communications: Retained for up to three (3) years from the date of the most recent communication.
• Analytics and Usage Data: Typically retained in an aggregated or de-identified form for up to two (2) years for business analysis and service improvement purposes.
• Legal Compliance Data: Retained for as long as required to comply with applicable legal obligations, resolve disputes, and enforce our agreements.

Upon expiration of the applicable retention period, we will securely delete or anonymize your personal information in accordance with our data disposal procedures.

9. Your Privacy Rights

Depending on your location and applicable law, you may have certain rights regarding your personal information. We are committed to honoring these rights in compliance with applicable United States federal and state laws, including the FTC Act and the California Consumer Privacy Act (CCPA/CPRA) for California residents.

9.1 Right to Know and Access

You have the right to request that we disclose to you the personal information we have collected, used, disclosed, or sold about you. This includes the right to know the categories of personal information collected, the purposes for collection, and the categories of third parties with whom we share data.

9.2 Right to Correction

You have the right to request that we correct inaccurate personal information that we maintain about you. Upon receiving a verifiable request, we will use commercially reasonable efforts to correct the inaccurate information.

9.3 Right to Deletion

You have the right to request that we delete personal information we have collected about you, subject to certain exceptions. We may retain your data where necessary to complete transactions, comply with legal obligations, detect security incidents, or exercise our legal rights.

9.4 Right to Data Portability

Where technically feasible and required by applicable law, you have the right to receive a copy of your personal information in a structured, commonly used, and machine-readable format.

9.5 Right to Opt Out of Sale or Sharing (California Residents)

California residents have the right to opt out of the sale or sharing of their personal information with third parties for cross-context behavioral advertising. To exercise this right, you may contact us at info@new-chopt.click with the subject line "Do Not Sell or Share My Personal Information."

9.6 Right to Limit Use of Sensitive Personal Information (California Residents)

Under the CPRA, California residents have the right to limit our use and disclosure of sensitive personal information to purposes necessary for providing the services requested.

9.7 Right to Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights. We will not deny you services, charge you different prices, or provide a different level of quality of service because you exercised your privacy rights.

9.8 How to Submit a Privacy Request

To exercise any of the above rights, please submit a verifiable consumer request by:

• Emailing us at info@new-chopt.click with the subject line "Privacy Rights Request"
• Visiting our website at new-chopt.click and using our designated privacy request form if available

We will acknowledge your request within ten (10) business days and respond to your request within forty-five (45) days, or within the timeframe required by applicable law. In some cases, we may need to extend this period by an additional forty-five (45) days, in which case we will notify you of the extension and the reason for it.

We may require you to verify your identity before we can process your request. This may involve confirming your email address, account credentials, or other identifying information to protect your data from unauthorized disclosure.

You may designate an authorized agent to make a request on your behalf. We may require proof of your written authorization before processing the agent's request.

10. Cookie Policy Summary

Our website uses cookies and similar tracking technologies to enhance your experience, analyze site traffic, and support our marketing activities. A cookie is a small text file that is placed on your device when you visit a website.

10.1 Types of Cookies We Use

• Essential Cookies: Necessary for the basic functioning of our website, including order processing and account management. These cannot be disabled.
• Performance and Analytics Cookies: Allow us to understand how visitors interact with our website by collecting anonymous usage data. We use tools such as Google Analytics for this purpose.
• Functional Cookies: Enable enhanced functionality and personalization, such as remembering your preferences, language settings, or items in your cart.
• Advertising and Targeting Cookies: Used to deliver relevant advertisements and track the effectiveness of our marketing campaigns on third-party platforms.

10.2 Managing Your Cookie Preferences

You can control and manage cookies through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling certain cookies may affect the functionality of our website and your ability to place orders or access certain features.

You may also opt out of interest-based advertising through the Network Advertising Initiative (NAI) opt-out tool or the Digital Advertising Alliance (DAA) opt-out tool.

For full details about our use of cookies and tracking technologies, please refer to our dedicated Cookie Policy available on our website at new-chopt.click.

11. Children's Privacy

We are committed to complying with the Children's Online Privacy Protection Act (COPPA), which prohibits the collection of personal information from children under 13 years of age without verifiable parental consent. Our website is not directed at children, and we do not knowingly market our services to minors.

If you are a parent or guardian and you believe that your child under the age of 18 has provided us with personal information without your consent, please contact us immediately at info@new-chopt.click. Upon confirmation, we will take prompt steps to delete such information from our records and terminate any associated account.

12. International Data Transfers

Chopt is based in the United States, and we operate primarily within the United States. If you are accessing our website from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country of residence.

By using our website and services, you consent to the transfer of your information to the United States and the processing of your information in the United States in accordance with this Privacy Policy.

Where required by applicable law, we will implement appropriate safeguards to ensure the protection of your personal information during any international transfer, including the use of standard contractual clauses or other lawful transfer mechanisms recognized under applicable data protection legislation.

13. Third-Party Links and Services

Our website may contain links to third-party websites, plugins, applications, and services, including social media platforms, delivery apps, and payment gateways. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy practices.

We encourage you to review the privacy policy of every website you visit and every third-party service you use. The inclusion of a link on our website does not constitute an endorsement of that third party's privacy practices.

14. Do Not Track Signals

Some browsers include a "Do Not Track" (DNT) feature that signals to websites that you do not want your online activity tracked. Currently, there is no universally accepted standard for how websites should respond to DNT signals. As such, our website does not currently alter its data collection practices in response to DNT signals from browsers. We will continue to monitor industry developments regarding DNT and update this policy if our practices change.

California residents may also exercise their rights under the CCPA to opt out of the sale or sharing of personal information as described in Section 9.5 above.

15. How to File a Complaint

If you believe that we have violated your privacy rights or failed to comply with applicable data protection laws, we encourage you to first contact us directly so that we can attempt to resolve your concern:

• Email: info@new-chopt.click
• Subject Line: Privacy Complaint

We take all privacy complaints seriously and will respond within a reasonable timeframe.

If you are a resident of California and you are not satisfied with our response to your privacy complaint, you may also contact the following regulatory authority:

For general consumer protection complaints at the federal level, you may contact:

16. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. When we make material changes to this policy, we will:

• Update the "Last Updated" date at the top of this page
• Post a prominent notice on our website notifying you of the changes
• Send an email notification to registered users if the changes are significant

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website after any changes are posted constitutes your acceptance of the revised Privacy Policy.

If you disagree with the revised policy, you should discontinue use of our website and services and may request deletion of your data by contacting us at info@new-chopt.click.

17. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of the United States and applicable state laws. For California residents, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) apply in addition to this general policy. For all users, the Federal Trade Commission Act and other applicable federal consumer protection statutes govern our data practices at the federal level.

18. Contact Us

If you have any questions, comments, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to reach out to us. We are committed to addressing your inquiries promptly and transparently.

When contacting us regarding a privacy matter, please include your full name, the email address associated with your account (if applicable), a description of your request or concern, and your preferred contact method so that we may respond to you effectively.

We will do our best to respond to all privacy-related inquiries within ten (10) business days of receipt.