Effective: May 20, 2022
1.1. Data provided directly by you
Contact and profile information. When you create an Account, complete your Account profile, sign up for a mailing list, or otherwise communicate or interact with us (whether or not through an Account), we may collect information from you, such as your name, phone number, e-mail address, and physical address. We use this contact and profile information to: (i) create and personalize your Account; (ii) communicate with you directly about the Services as well as answer any questions, issues or concerns you or other users may have, (iii) fulfill your order, and (iv) send you marketing communications in accordance with your preferences.
Payment information. When you submit an order or join GH+, you are required to provide payment information, such as your credit card, debit card or gift card details. For corporate Accounts that are used for business purposes, we may also have corporate credit card numbers or other payment account numbers. We use this payment information to fulfill your order, complete the transaction, and detect and prevent fraud.
Transaction information. When you submit an order, we collect information, including the items purchased, the date and time of your transaction, any special instructions, and any points you accrue or rewards or promotions you redeem as part of a loyalty or rewards program. We use this transaction information to fulfill your order, update your rewards, detect and prevent fraud, personalize your experience, perform analytics/identify usage trends, and inform our advertising and marketing.
Communications, Participation and other content. We maintain all communications (including email, phone, mail and chat) resulting from your interactions with us or with Delivery Partners. We also record comments and opinions you express when responding to surveys, entering a sweepstakes or taking part in promotions we run. We use all of the foregoing communications to address your questions, issues and concerns and provide other related customer support services, for safety and security purposes, to improve our Services, and for analytics. We also maintain your Ratings and Reviews regarding Merchants on the Platform and/or Services, which we may post for the benefit of all of our users.
Other information you provide. With your permission, we may access your photos or contact list from your mobile device, Facebook Messenger account or email account to enable you to share content or promotions or invite your friends to connect with our Platform and/or Services, including through our friend referral program. If you are ordering an alcoholic beverage, our Delivery Partners may collect the information contained on your government-issued identification card for age verification purposes in order to complete the delivery.
We may also use aggregate personal information for regulatory compliance, industry and market analysis, research, demographic profiling, marketing and advertising, and other business purposes, as long as the end-product does not uniquely identify you or any other user of the Platform and/or Services.
1.2. Personal Information Generated and/or Automatically Collected during your use of the Platform and/or Services
Information about your device and its software. Information about your device and its software includes your IP address, browser type, internet service provider, device type/model/manufacturer, operating system, date and time stamp, and a unique ID that allows us to identify your browser, mobile device, or your Account (including, for example, a persistent device identifier or an Ad ID), and other similar information. We may also work with third-party partners to employ technologies, including statistical modeling tools, that permit us to recognize and contact you across multiple devices. We use this device and software information to diagnose and fix technology problems, serve you personalized advertising, personalize your experience, perform analytics/identify usage trends, and improve our products, Platform and/or Services.
Information about the way you access and use our Services. Information about the way you access and use our Services includes the site from which you came and the site to which you are going when you leave. In addition, we track the pages you visit on the Platform, the links you click on the Platform, whether you open emails or click the links contained in emails that we send, other actions you take on the Services, and whether you access the Services from multiple devices. We may use third-party analytics tools to record your mouse movements, scrolling, and click activity on our Services to understand how our users engage with our Services and to monitor and improve our online offerings. We may also use the information about the way you access and use our Services to determine products and services that may be of interest to you, to improve our products and Services, to evaluate the success of our advertising and marketing campaigns, and to send you marketing communications.
Analytics information. We may collect analytics data or use third-party analytics tools such as Google Analytics to help us measure traffic and usage trends and the demographics of our users in order to improve our Platform and/or Services. You can learn more about Google's practices at http://www.google.com/policies/privacy/partners.
We, or the third-party partners we use, may use the data collected automatically through tracking technologies to: (a) remember information so that you will not have to re-enter it during your visit or the next time you visit the Platform and/or Services; (b) provide custom, personalized content and information; (c) identify and contact you across multiple devices; (d) provide and monitor the effectiveness of our Platform and/or Services; (e) perform analytics and detect usage patterns on our Platform and/or Services; (f) diagnose or fix technology problems; (g) detect or prevent fraud or other harmful activities, and (h) otherwise plan for and enhance our Platform and/or Services and for other internal purposes.
1.3. Data from other sources
Information from other Account holders. We may receive personal information about you from Grubhub Account holders. For example, when using the group order feature, a Grubhub Account holder can invite other users (“Group Order Users”) to add to an order using the Grubhub Account holder’s own account. As a result, the Grubhub Account holder will provide information on the Group Order Users to Grubhub.
Information we receive from third-party sites you connect to our Services. We may receive personal information about you from third parties and combine that with information we collect through our Platform and Services. For example, we may obtain information when you login through a third-party social network or authentication service, such as Facebook or Google. These services will authenticate your identity and provide you the option to share certain personal information with us, which could include your name, email address, address book and contacts, or other information. Similarly, when you interact with us through a social media site or third-party service, such as when you like, follow or share Grubhub content on Facebook, Twitter, or other sites, we may receive information that you permit the social network to share with third parties. The data we receive from these third-party sites is dependent upon that third party’s policies and your privacy settings on that third-party site.
Information we receive from affiliates or third parties. From time to time, we may receive information about you from third parties, including without limitation: our Merchant partners, other Grubhub entities and affiliates, co-marketing partners and service providers, as well as in connection with our enterprise programs. For example, if your company, university, or organization participates in one of our enterprise programs, we may receive your information from that participating organization for the purpose of setting up your Accounts or for billing purposes. We may receive additional information about you, such as fraud detection information, from third-party partners and combine it with other information that we have about you. We use this information from affiliates or third parties to create your Accounts, to contact you, to send you advertising or promotional materials or to personalize our Platform and Services, to protect against bot attacks and account takeovers, and to better understand the demographics of our users.
We do not control, supervise, or respond to how third parties providing your information process your personal information. Therefore, any information request regarding the disclosure of your personal information to us should be directed to such third parties.
In addition to the uses described above, we may collect and use personal information to:
2.1. Provide, maintain, improve and develop the Platform and Services. We may use the personal information to provide, maintain, improve and develop the Platform and Services. For example, we:
2.2. Maintain the safety, stability and security of our Platform and Services. We may use the personal information to maintain the safety and security of our Platform and Services. For example, we:
2.3. Communications with you to provide support and other important messages. We may use personal information to communicate important messages to you and/or to provide you with support. For example, we might send you service-related emails or messages (e.g., user Account verification, changes or updates to features of the Platform or Services, technical and security notices) and other communications from or about Grubhub.
2.4. Provide, personalize, measure and improve our advertising and marketing. We may use personal information to provide, personalize, measure, and improve our advertising and marketing. For example, we may:
2.5. Legal and regulatory requirements and proceedings. We may use the personal information in connection with legal and regulatory proceedings and requirements. For example, we may need the personal information to enforce our corporate reporting obligations, or to comply with applicable laws.
We disclose personal information to the following types of third parties:
3.1. Merchant Sharing. We disclose personal information to the Merchants you order from and third parties engaged by those Merchants (e.g., point of sale providers or their own delivery personnel), as needed to fulfill your orders (including communicating with you about the status of your order or cancelled items). If you make a purchase from a Merchant that offers loyalty or rewards programs through our Platform and Services, we may disclose your personal information to the Merchant as needed to facilitate your participation in the Merchant’s loyalty or rewards programs, including to track points and redemptions. In some cases, you may also affirmatively opt in on the Platform or Services to share your information directly with the Merchant.
3.3. Information provided to third parties in connection with our enterprise customers. If your company, university, or organization participates in one of our enterprise programs, we may share some of your information with that organization, including your name, student ID number, contact details, order history, and other information as required to enable use by you and the organization of such Services. If you are a campus user, we also share your information with food providers that operate restaurants and other food ordering and delivery services on your campus to facilitate your use of the Services and for such providers to send you personalized communications and marketing.
3.4. Service providers and contractors. We disclose personal information to third parties that provide services for us or on our behalf, such as website hosting, data analysis, infrastructure provisioning, IT services, customer service, email delivery services, fraud detection, security monitoring, advertising and marketing, and other similar services.
3.5. Analytics providers. We share personal information with third-party analytics providers to better understand the demographics of our users and visitors, and to personalize, enhance and improve our Platform and Services.
3.6. Advertising, Marketing, and Promotions providers. We share personal information with third parties in connection with co-marketing activities, the development of customized and targeted marketing campaigns, to launch promotions and for other similar advertising efforts. For example:
3.8. Public. We make available through the Platform and Services certain features which may enable you to post information and materials, for example, Ratings and Reviews, photo uploads, and chat functionality. Please note that any information you provide in connection with such Services may be available to site visitors and to the general public. We urge you to exercise discretion and caution when deciding to disclose information and/or materials in these public or interactive areas on the Services, and in no event should you disclose your personal information in these public or interactive areas on the Platform or Services.
3.9. Business Transaction or Reorganization. We may take part in or be involved with a corporate business transaction, such as a merger, acquisition, joint venture, or financing or sale of all or a portion of company assets. We may disclose personal information to a third party during negotiation of, in connection with, or as an asset in such a corporate business transaction. Personal information may also be disclosed in the event of insolvency, bankruptcy, or receivership.
3.11. Consent. We may disclose personal information about you to other third parties with your consent.
Profile Settings. You may update your profile information in the “Your Account” section of the Services.
Access to your Device Information and Push Notifications. You may control access to your device information or opt out of push notifications through the “Settings” app on your device. For instance, you can withdraw permission for the app to access your location data through your device settings, though we may continue to approximate your location based on your IP address or through other means.
To learn more about how you may control your online advertising choices, please see our About Our Ads policy.
Data storage and transfer. If you create an Account on the Platform as a visitor from outside the United States, by using and/or accessing the Platform or Services, you consent to the collection, transfer, storage, and processing of your information to and in the United States. If you are located in the European Union or other regions with laws governing data collection and use that may differ from U.S. law, please note that we may transfer information, including personal information, to a country and jurisdiction that does not have the same data protection laws as your jurisdiction.
Keeping your information safe. We care about the security of your information and employ physical, administrative, and technological safeguards designed to preserve the integrity and security of all information collected through our Platform and Services. However, no security system is impenetrable and we cannot guarantee the security of our systems. Please recognize that protecting your personal information is also your responsibility. Accordingly, we strongly recommend that you change your passwords often, use a combination of letters and numbers, make sure you use a secure browser, and otherwise take precautions when communicating your personal information on the internet. If you know or have reason to believe that your Account credentials have been lost, stolen, misappropriated, or otherwise compromised or in case of any actual or suspected unauthorized use of your Account, please contact us following the instructions in the Contact Us section below.
Our websites and online Services are not directed to, and we do not intend to, or knowingly, collect or solicit personal information from children under the age of 13. In the event that we learn that we have inadvertently collected personal information from a child under age 13, we will delete that information as quickly as possible. If you have a basis for believing that we have any information from a child under 13, please contact us at firstname.lastname@example.org.
We may choose or be required by law to provide different or additional disclosures relating to the processing of personal information about residents of certain countries, regions or states. Please refer below for disclosures that may be applicable to you:
Alternatively, inquiries may be addressed to:
Grubhub Holdings Inc. Attention: Privacy Team 5 Bryant Park, 15th Floor New York, NY 10018
Please note that email communications will not necessarily be secure; accordingly, please do not include credit card information and/or other sensitive personal information in your email correspondence with us.