Effective: June 4, 2018
1. What Types of Information Do We and Our Third Party Service Providers Collect from You and in What Circumstances Do We Collect It?
We, and our third party service providers who perform services on our behalf, collect information in a variety of circumstances when you visit and use our Sites.
For example, we may collect information:
The information we collect includes Personal Information that can uniquely identify you (whether alone or in combination with other data or information), such as your name, postal address, telephone number, email address, date of birth, or similar data. Personal Information also includes certain sensitive information related to your finances or, for business accounts, related to the finances of your employer, such as a credit card number or other payment account number (including the three  or four  digit validation code for your credit card). In order for you to take advantage of the services provided through the Sites, we may require that you furnish Personal Information or, for certain business accounts, that your employer furnish Personal Information for you. We may also collect non-personal information from you, including information about your use of our Sites, but when such non-personal information is linked to your Personal Information, we will treat it as Personal Information. We may also receive information about you from third party sources, such as other users of our Sites, drivers, merchants, and other partners.
Information collected automatically when you visit or use our Sites. We and our third party service providers may collect certain types of usage information when you visit our Sites, read our emails, or otherwise engage with us. We may use this information to enhance and personalize your user experience, to monitor and improve our websites and services, and for other similar purposes. In some instances, we and our third party service providers may combine this usage information with Personal Information. If we do combine any usage information with Personal Information, the combined information will be treated by us as Personal Information hereunder (as long as it is so combined).
We and our third party partners use tracking technologies, including cookies, web beacons, embedded scripts, location-identifying technologies, file information, and similar technology, to automatically collect usage and device information, such as:
Information about your device and its software, including your IP address, browser type, Internet service provider, device type/model/manufacturer, operating system, date and time stamp, and a unique ID that allows us to identify your browser, mobile device, or your account (including, for example, a persistent device identifier or an Ad ID), and other similar information. We may also work with third party partners to employ technologies, including the application of statistical modeling tools, that permit us to recognize and contact you across multiple devices.
Information about the way you access and use our Sites, for example, the site from which you came and the site to which you are going when you leave our Sites, the pages you visit, the links you click, whether you open emails or click the links contained in emails, whether you access the Sites from multiple devices, and other actions you take on the Sites.
Analytics information. We may collect analytics data or use third party analytics tools such as Google Analytics to help us measure traffic and usage trends for the Sites and to understand more about the demographics of our users. You can learn more about Google's practices at http://www.google.com/policies/privacy/partners.
If you would prefer not to accept cookies, most browsers will allow you to: (i) change your browser settings to notify you when you receive a cookie, which lets you choose whether or not to accept it; (ii) disable existing cookies; or (iii) set your browser to automatically reject cookies; however, doing so may negatively impact your experience using the Sites, as some features and services on our Sites may not work properly. You may also set your email options to prevent the automatic downloading of images that may contain technologies that would allow us to know whether you have accessed our email and performed certain functions with it. See Section 4 below to learn more about our online advertising practices.
How We Respond to Do Not Track Signals. Although we do our best to honor the privacy preferences of our users, we are currently unable to respond to Do Not Track signals set by your browser.
Location Information. With your consent, we may obtain information about your physical location through geolocation features on your device, including GPS (e.g. latitude and/or longitude). We may use this information to improve order efficiency and enhance your user experience. We may also infer your location based on other information we collect. For example, your IP Address indicates the general geographic region from which you are connecting to the Internet.
2. How Do We and Our Third Party Service Providers Use Information Collected from You?
We and our third party service providers may use Personal Information:
We and our third party service providers may also use aggregate Personal Information in a manner such that the end-product does not uniquely identify you or any other user of the Sites. For example, we may use Personal Information to calculate the percentage of our users who have a particular telephone area code.
3. How Do We and Our Third Party Service Providers Share Your Personal Information with Others?
We and our third party service providers may disclose Personal Information:
We may also share Personal Information which has been aggregated or de-identified in a manner such that the end-product does not uniquely identify you or any other user of the Sites.
4. Third Party Tracking and Online Advertising.
We participate in interest-based advertising and use third party advertising companies to serve you targeted advertisements based on your online browsing history and your interests. We permit third party online advertising networks, social media companies, and other third party services to collect information about your use of our Sites over time so that they may play or display ads on our Sites, on other websites, apps, or services you may use, and on other devices you may use. Typically, though not always, the information used for interest-based advertising is collected through cookies or similar tracking technologies. We may share a common account identifier (such as an email address or user ID) or hashed data with our third party advertising partners to help identify you across devices. We and our third party partners use this information to make the advertisements you see online more relevant to your interests, as well as to provide advertising-related services such as reporting, attribution, analytics, and market research.
To learn more about interest-based advertising and how you may be able to opt-out of some of this advertising, you may wish to visit the Network Advertising Initiative's ("NAI") online resources, available at http://www.networkadvertising.org/choices, and/or the Digital Advertising Alliance's ("DAA") resources, available at http://www.aboutads.info/choices. You may also be able to set your browser to delete or notify you of cookies by actively managing the settings on your browser or mobile device. Please note, however, that some advertising opt-outs may not be effective unless your browser is set to accept cookies. Furthermore, if you use a different device, change browsers, or delete the opt-out cookies, you may need to perform the opt-out task again.
You may also be able to limit certain interest-based mobile advertising through the settings on your mobile device by selecting "limit ad tracking" (iOS) or "opt out of interest-based ads" (Android).
Google Analytics and Advertising. We may also utilize certain forms of display advertising and other advanced features through Google Analytics, such as Remarketing with Google Analytics, Google Display Network Impression Reporting, and Google Analytics Demographics and Interest Reporting. These features enable us to use first-party cookies (such as the Google Analytics cookie) and third party cookies (such as the DoubleClick advertising cookie) or other third party cookies together to inform, optimize, and display ads based on your past visits to the Sites. You may control your advertising preferences or opt out of certain Google advertising products by visiting the Google Ads Preferences Manager, currently available at https://google.com/ads/preferences, or by vising NAI's online resources at http://www.networkadvertising.org/choices.
5. Profiles and Interactive Areas.
We and our third party service providers may make available through the Sites certain features and services (for example, ratings and reviews, photo uploads, and chat functionality) to which you may be able to post information and materials. Please note that any information you provide in connection with such services may become public, and may be available to visitors to the Sites and to the general public, including without limitation the ratings, reviews, and photographs that accompany many restaurant listings. We urge you to exercise discretion and caution when deciding to disclose your Personal Information, and/or any other information and/or materials, on the Sites. NEITHER WE, NOR ANY OF OUR THIRD PARTY SERVICE PROVIDERS, NOR ANY OTHER PERSON OR ENTITY DULY AUTHORIZED BY US AND/OR BY OUR THIRD PARTY SERVICE PROVIDERS, IS OR SHALL BE RESPONSIBLE FOR ANY USE BY ANY UNAUTHORIZED PERSON OR ENTITY OF ANY PERSONAL INFORMATION YOU DISCLOSE IN THE MANNER DESCRIBED IN THIS SECTION 5 THROUGH THE SITES.
6. Third Party Sites.
We and our third party service providers use reasonable organizational, technical, and administrative measures designed to protect Personal Information under our control. However, no data transmission over the Internet or data storage system can be guaranteed to be 100% secure. If you have reason to believe that your interaction with us is not secure (for example, if you feel that the security of any account you might have with us has been compromised), you must immediately notify us of the problem by contacting us in accordance with the "Contacting Us" section below.
9. Control Over Your Personal Information.
You may review, correct, and/or update certain elements of your Personal Information by adjusting your preferences in the "Your account" section of the Sites. However, neither we nor our third party service providers are responsible for altering Personal Information from the databases and/or other records of third parties with whom we and our third party service providers have previously shared your Personal Information. If you are a California resident under the age of 18 and want to remove your Personal Information from our publicly-displayed content, you can contact us directly at email@example.com. We may not be able to modify or delete your information in all circumstances.
10. Data Retention.
11. Note Regarding the Use of the Sites by Children.
Under no circumstances are the Sites directed to and/or intended for use by individuals under the age of thirteen (13), and we do not knowingly collect Personal Information from children under age 13. If you believe that we might have any information from a child under 13, please contact us at firstname.lastname@example.org so that we may delete it as soon as possible.
If you choose to access the Sites, you do so at your own risk and are responsible for complying with all applicable laws, rules, and regulations. We may limit the availability of the Sites, in whole or in part, to any person, geographic area, and/or jurisdiction we choose, at any time and in our sole discretion. By using the Sites and submitting any Personal Information, you consent to the transfer of Personal Information to other countries, which may provide a different level of data security than your country of residence provides.
13. California Privacy Rights.
If you are a user of the Sites and a California resident, California's "Shine the Light" law (California Civil Code §1798.83) permits you to request and obtain from us once a year, free of charge, information regarding our disclosure of your Personal Information (if any) to third parties for direct marketing purposes. If this law applies to you and you would like to make such a request, please submit your request in writing to the address provided below.
14. Changes to this Policy.
15. Contacting Us.
Grubhub Holdings Inc.
Attention: Privacy Team
5 Bryant Park, 15th Floor
New York, NY 10018
Please note that email communications will not necessarily be secure; accordingly, please do not include credit card information and/or other sensitive Personal Information in your email correspondence with us.