Privacy Policy
This Privacy Policy describes how Chipotle ("we," "us," or "our") collects, uses, and shares your personal information when you visit or make a purchase from our website or use our fast-food services. We are committed to protecting your privacy and ensuring transparency in our data practices. By accessing or using our services, you agree to the terms outlined in this policy.
Changes to This Privacy Policy
We may update our Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any changes by posting the new Privacy Policy on this page and updating the 'Last updated' date at the top of this policy. You are advised to review this Privacy Policy periodically for any changes.
Information We Collect
We collect various types of information to provide and improve our fast-food services, including personal data you provide when placing an order or creating an account. This may include your name, email address, phone number, delivery address, and payment information. We also gather information about your order history and preferences to enhance your customizable meal experience. Also, we may collect location data if you use features like 'find a Chipotle near me' to provide relevant service recommendations.
Use of Data
The data we collect is primarily used to process your orders, help quick service, and deliver your customizable bowls and burritos efficiently. We also use this information to personalize your experience, offer relevant promotions, and improve our website and mobile application functionality. Your data helps us communicate with you regarding your orders, provide customer support, and inform you about new menu items or services. We may also use aggregated, anonymized data for internal analytics and business development purposes.
Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. The retention period for different types of personal data may vary depending on the nature of the information and the legal obligations applicable to it. Once your data is no longer needed, we will securely delete or anonymize it.
Transfer of Data
Your information, including personal data, may be transferred to - and maintained on - computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction. We take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy. This includes using standard contractual clauses or other legal mechanisms for data transfers to third parties, such as payment processors and delivery partners, to ensure adequate protection.
Security of Data
We implement a variety of security measures designed to maintain the safety of your personal information when you place an order or access your account. These measures include encryption, firewalls, and secure socket layer (SSL) technology to protect data transmissions. While we strive to use commercially acceptable means to protect your personal data, keep in mind: that no method of transmission over the Internet or method of electronic storage is 100% secure. Hence, we cannot guarantee its absolute security.
Your Rights
As a user, you have certain rights regarding your personal data, including the right to access, update, or delete the information we hold about you. You may also have the right to object to certain processing activities or request restrictions on how your data is used. To exercise any of these rights, please contact us using the information provided below. We will respond to your request in accordance with applicable data protection laws.