Privacy Policy

This Privacy Policy details the data protection practices of Simply Salad Restaurants LLC, including its subsidiaries and affiliates (collectively referred to as “Simply Salad,” “we,” “us,” or “our”). It governs the use of the https://www.simplysalad.com/ website, the Simply Salad mobile application, and any other online services under our control that reference or link to this Privacy Policy (collectively, the “Service”). It also outlines your rights and options regarding your personal data.

For the purposes of this Privacy Policy, unless otherwise indicated, “personal information” refers to any data relating to an identified or identifiable person. This excludes aggregated data or any information that cannot be used to identify you.

This Privacy Policy does not extend to the processing of personal information by third parties or to personal information collected in the context of your employment with Simply Salad.

Personal Information We Collect

We gather personal information about you in various scenarios, as outlined below.

Personal Information You Provide Through the Service

When you utilize the Service, you may be required to provide personal information, such as when you create an account, make a purchase, subscribe to our marketing materials, enter a promotion, respond to surveys, or contact customer support. The types of personal information we collect include:

• Contact Information: Your first and last name, email address, postal address, and phone number.
• Demographic Information: Your age, date of birth, gender, and country.
• Transaction Data: Records of products or services you purchased, considered, or obtained, including order history and order details.
• Profile Data: Your interests and preferences.
• Account Credentials: Your password, password hints, and other authentication or account access information.
• Payment Information: Your payment instrument number (such as credit or debit card number), expiration date, and security code for processing payments, handled by our payment processors.
• Communications: Any content you provide when contacting us with questions, feedback, survey responses, or other correspondences.
• User-Generated Content: Any content you provide when publicly posting (including product reviews).
• Third-Party Contact Information: Contact details of other individuals for whom you purchase items or gifts.

Please refrain from providing any unsolicited personal information.

Automatic Collection from Your Browser or Device

When you use the Service, we and third parties may automatically collect personal information from your browser or device. Categories of automatically collected information include:

• Device Identifiers: Your device’s IP address and Ad ID.
• Device Data: Your device’s operating system type and version, manufacturer and model, browser type, screen resolution, and regional and language settings.
• Internet Activity Data: Your browsing history and interactions, pages or screens viewed, duration spent on a page or screen, navigation paths, activity details on a page or screen, access times, and durations.
• Location Data: General location derived from IP address indicating city or postal code level, and precise location data (latitude/longitude) with your consent.
• Precise location data, such as latitude/longitude, with your consent.

Automatic data collection is facilitated through cookies and similar technologies incorporated into our Service. Refer to our Cookie Policy below for more information.

Personal Information from Business Relationships

Through our business relationships with you, we collect personal information about you such as your contact identifiers. This information is not subject to this privacy policy except as required by applicable law.

Personal Information from Other Sources

We also obtain personal information from various other sources, including:

• • Business Partners: Engaged in joint marketing or promotional activities.
  • Data Providers: Licensors of private and public databases.
  • Public Sources: Blogs, forums, or other publicly available information.
  • Third-Party Vendors and Advertising Partners.
  • Social Media Platforms: Interaction with our content on social media, including comments and authorized disclosures from the platform.

Inferred Personal Information

We derive new personal information from the data we collect, generating insights into your likely preferences or other characteristics.

Sensitive Personal Information

To the extent that any personal information we collect qualifies as sensitive under applicable law, we process such information only for limited, lawful purposes. We do not sell or use sensitive personal information for targeted advertising or to make inferences.

How We Utilize Your Personal Information

We gather and utilize your personal information for the following reasons, as detailed in this Privacy Policy or at the point of collection:

Service Delivery

We use your personal information to:

• Operate and provide the Service, such as enabling purchases of food listed on the Service.
• Establish and maintain your account on the Service.
• Communicate with you about the Service, including sending announcements, updates, security alerts, and support or administrative messages.
• Provide customer support and maintenance for the Service.
• Enable security features of the Service, such as sending security codes via email or SMS (if you have opted in) and remembering devices from which you have previously logged in.

Direct Marketing

We use your personal information to send you marketing communications related to Simply Salad, as permitted by law. You can opt out of our marketing and promotional communications as described in the “Your Privacy Choices” section below.

Research and Development

We use your personal information for research and development purposes, including analyzing and improving the Service and our business through surveys, cookies, and other technologies. You may have the ability to limit some analytics through cookies and other technologies as described in the “Your Privacy Choices” section below.

Promotions

When you voluntarily enter a promotion, we use your information as set out in the official rules governing the promotion, for administrative purposes, and as required by law. By entering a promotion, you agree to the official rules and that, except where prohibited by applicable law, we, the sponsor, and related entities may use your name, voice, and/or likeness in advertising or marketing materials.

Advertising

We may work with agencies, ad networks, technology providers, and other third-party advertising companies to display ads on our Service and other websites and services. We use cookies and similar technologies to automatically collect personal information about you (including device identifiers, device data, internet activity data, and/or non-precise location data) over time across our Service and other non-affiliated sites and services, or your interaction with our emails, and use that personal information to serve ads that we think may interest you. This process is known as “targeted advertising.” You can learn more about your choices regarding targeted advertising in the “Your Privacy Choices” section below and our “Cookie Policy”. We also use audience matching services (a type of targeted advertising) to reach people (or similar people) who have visited our Service or are identified in one or more of our databases (“Matched Ads”). This is done by providing a list of hashed email addresses to a third party or incorporating a pixel from a third party into our Service, with the third party matching common factors between our data and theirs. For example, we incorporate the Facebook pixel in our Service and may disclose your hashed email address to Facebook as part of our use of Facebook Custom Audiences.

Recruitment

We use your personal information to make recruitment decisions and in anticipation of a contract of employment.

Compliance, Fraud Prevention, and Safety

We use your personal information and disclose it to law enforcement, government authorities, and private parties as we believe necessary or appropriate to:

• Protect our, your, or others’ rights, privacy, safety, or property (including by making and defending legal claims).
• Audit our internal processes for compliance with legal and contractual requirements.
• Enforce the terms and conditions that govern the Service.
• Comply with applicable laws, lawful requests, and legal processes, such as responding to subpoenas or requests from government authorities.
• Protect, investigate, and deter against fraudulent, harmful, unauthorized, unethical, or illegal activity, including cyber-attacks and identity theft.

At Your Direction or With Your Consent

We use personal information for additional purposes where you direct us to use it in a certain way. In some cases, we may provide you notice of additional uses and specifically ask for your consent to collect, use, or disclose your personal information.

Aggregated or De-identified Information

Sometimes we aggregate or de-identify information so it is no longer considered personal information. We may use non-personal information for any purpose to the extent permitted by law.

How We Disclose Your Personal Information

We disclose your personal information to the following categories of persons for the purposes described in this Privacy Policy or at the time of collection:

Affiliates

Our subsidiaries and affiliates, for purposes consistent with this Privacy Policy.

Service Providers

Companies and individuals that process personal information to provide services on our behalf (such as order fulfillment, shipping, payment processing, customer support, hosting, analytics, email delivery, marketing, database management services, returns processing, and risk and fraud mitigation). We contractually prohibit our service providers from retaining, using, or disclosing information about you for any purpose other than performing the services for us, although we may permit them to use non-personal information for any purpose to the extent permitted by law.

Third-Party Vendors

Some third-party vendors independently control the purposes and means of processing your personal information. For example, certain analytics, security, and fraud prevention vendors.

Advertising Partners

Third-party agencies, ad networks, technology providers, and other advertising partners receive personal information from us for advertising purposes, including targeted advertising. These partners may act as our service providers or, in certain contexts, independently control the purposes and means of processing your personal information. You can learn more about your choices regarding targeted advertising in the “Your Privacy Choices” section below and our “Cookie Policy”.

Business Partners

Business partners in connection with offering co-branded services, selling or distributing our products, or engaging in joint marketing or promotional activities.

The Public

Other users of the Service and the public when you disclose personal information for public use. For instance, if you review a product that you purchased, we will display your name along with the content you submit. We do not control how other users or third parties use any personal information that you make available to them. Please be aware that any information you post publicly can be cached, copied, screen captured, or stored elsewhere by others (e.g., search engines) before you have a chance to edit or remove it.

Professional Advisors

Professional advisors, such as lawyers, bankers, auditors, and insurers, where necessary in the course of the professional services they render to us.

Authorities and Other Recipients for Security and Enforcement

Law enforcement, government authorities, and private parties, as we believe in good faith to be necessary or appropriate to comply with the law or for compliance, fraud prevention, and safety purposes described above.

Business Transferees

We may disclose some or all of your personal information in connection with or during negotiation of any merger, financing, acquisition, dissolution, transaction, or proceeding involving the sale, transfer, divestiture, or disclosure of all or a portion of our business or assets, or in the event of an insolvency, bankruptcy, or receivership.

Recipients at Your Direction or With Your Consent

We disclose personal information where you direct us to or with notice to you and your consent. Please note, we do not control the third party’s use of your personal information.

Aggregated or De-identified Information

Sometimes we aggregate or de-identify information so it is no longer considered personal information. We may disclose non-personal information for any purpose to the extent permitted by law.

Mobile / Phone Information

No mobile / phone information will be shared with third parties for marketing or promotional purposes. All the above categories exclude SMS messaging data and details which will not be shared with third parties.

Your Privacy Choices

We provide a variety of ways for you to exercise choice, as described below.

Region-Specific Rights: Some regions provide additional rights by law, as described in our region-specific terms. This subsection details how you may exercise some of those rights to the extent they apply to you.

• Data Subject Requests: To access, correct, delete, or exercise similar rights available to you in your region with respect to your personal information, please submit a request to info@simplysalad.com.
• Opt-Out of Sales, Shares, and Targeted Advertising: To opt out of sales or shares (as defined by applicable law), or the processing of personal information for targeted advertising purposes, manage your settings through the “Your Privacy Choices” link in the footer of our website or turn on a recognized opt-out preference signal, such as Global Privacy Control, in your browser or extension. Please note that when you opt-out through either of the above methods, we do not know who you are within our systems, and your opt-out will apply only to personal information collected from tracking technologies on the specific browser from which you opt-out. If you delete or reset your cookies, or use a different browser or device, you will need to reconfigure your settings. If you want the opt-out to apply to personal information we have about you in our systems, please also submit to info@simplysalad.com.

Communications

• Email: You may opt out of marketing-related emails by following the opt-out or unsubscribe instructions located at the bottom of the email. You may continue to receive service-related and other non-marketing emails.
• Text: If you opt in to receive text messages from us, you may opt out of receiving further text messages by replying STOP in response to a message.
• Push Notifications: You may opt out of push notifications by adjusting your device settings or uninstalling our apps.

Account Management

If you have registered an account with us, you can access, review, and update your personal information through your account settings. You also have the option to delete your account entirely through these settings.

Cookie and Pixel Controls

Blocking Cookies in Your Browser: Most web browsers allow you to delete or reject cookies, including those used for targeted advertising. Follow the instructions in your browser settings to manage cookies. This may also affect the operation of associated pixels. Note that these settings apply only to our website. If you use multiple browsers, you must configure each one separately. Deleting or resetting cookies will require you to reconfigure your settings. Your ability to manage cookies is subject to your browser’s capabilities. For more information on cookies, visit All About Cookies.

Preference Signals: Some browsers or extensions allow you to send Do Not Track or other preference signals automatically. We do not respond to these signals unless legally required.

Using Privacy Plug-ins or Browsers: You can block our websites from setting cookies used for targeted advertising by using a privacy-focused browser (e.g., Brave) or installing privacy plug-ins (e.g., Privacy Badger, Ghostery, uBlock Origin) and configuring them to block third-party cookies and trackers.

Third-Party Opt-Out Tools: Certain third-party vendors we work with offer their own opt-out mechanisms. We are not responsible for the effectiveness of these tools. Here are some links:

• Google: Opt-Out and Ads Settings
• Facebook: About Ads
• Criteo: Disable Criteo Services

Advertising Industry Opt-Out Tools: Some third parties participate in programs offering choices regarding targeted advertising. To opt-out from participating companies:

• Digital Advertising Alliance
• Network Advertising Initiative
• For European users: Your Online Choices

Controls for App Technologies

Resetting Advertising ID: Your device settings may allow you to reset the advertising ID associated with your device, which can limit the use of personal information collected. You can also stop all information collection by uninstalling the app.

Advertising Industry Opt-Out Tools: The Digital Advertising Alliance offers the AppChoices mobile app for opting out of targeted advertising in mobile apps. Note the limitations of these tools as described above.

Precise-Location Technologies: You can disable our access to your device’s precise location data through your device settings or by uninstalling the app.

Matched Ads

To opt-out of us disclosing your hashed email address to third parties for Matched Ads purposes, please submit a request to info@simplysalad.com. We will comply with legal requirements to remove your email address from subsequent lists disclosed to third parties.

Third Parties

The Service may contain links to third-party websites and online services. These links are not endorsements or representations of affiliation with any third party. We do not control third-party websites or services and are not responsible for their actions. These sites follow different rules regarding the collection, use, and sharing of your personal information. We encourage you to read their privacy policies.

Security Practices

We implement organizational, technical, and physical safeguards to protect the personal information we collect. However, security risks are inherent in all internet and information technologies, and we cannot guarantee the security of your personal information.

Retention

We retain personal information for as long as necessary to fulfill the purposes for which it was collected and to comply with legal obligations, resolve disputes, prevent fraud, and enforce our agreements.

International Data Transfers

Simply Salad is headquartered in the United States and may use service providers in other countries. Your personal information may be transferred to the United States or other locations where privacy laws may not be as protective as those in your jurisdiction. We provide appropriate safeguards for data transfers as required by law.

Children

The Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe we have collected personal information from a child, please contact us at info@simplysalad.com, and we will delete the information in accordance with the Children’s Online Privacy Protection Act (COPPA).

Changes to this Privacy Policy

We reserve the right to modify this Privacy Policy at any time. If we make material changes, we will notify you by updating the date of this Privacy Policy and posting it on the Service. If required by law, we will also provide notification in another way, such as via email or through the Service. Any modifications will be effective upon posting. Your continued use of the Service after any changes indicates your acceptance of the modified Privacy Policy.

Contact Us

If you have any questions or trouble accessing this Privacy Policy, please contact us: info@simplysalad.com or by mail at: Simply Salad, PO BOX 14487, Van Nuys, CA 91409.

Notice to California Residents

In compliance with the California Privacy Rights Act (“CPRA”), we provide California residents with information about our collection, use, and disclosure of their personal information, as well as their rights regarding that information. “Personal information” in this context is defined by the CPRA.

Data Collection, Use, and Disclosure

• Categories of Personal Information Collected: Refer to the “Personal Information We Collect” section above for details on the types of personal information we have gathered in the last 12 months.
• Sources of Personal Information: Refer to the “Personal Information We Collect” section for the origins of the personal information.
• Purposes for Collection and Use: Details on why we collect and use personal information can be found in the “How We Use Your Personal Information” section.
• Disclosure to Third Parties: See the “How We Disclose Your Personal Information” section for information on the categories of third parties to whom we disclose personal information.
• Retention Criteria: The criteria used to determine the retention period for personal information are described in the “Retention” section above.
• We do not traditionally sell personal information. However, under the CPRA, certain disclosures of personal information might be classified as a “sale” or “share.” These terms are broadly defined to include exchanges for value and disclosures for cross-context behavioral advertising. The categories of personal information we collect, sell, or share for commercial purposes include contact identifiers, demographics, commercial data, profile data, device identifiers, internet activity, non-precise location data, and inferences drawn from the aforementioned data. We share this information with vendors and parties involved in cross-context behavioral advertising. For more details on your rights regarding sales and shares, see the “Right to Opt-Out of Sales and Sharing” section below. We do not knowingly sell or share personal information of minors under 16 years old who are California residents.

Some collected personal information may be classified as sensitive under the CPRA, such as account credentials. We only collect, use, and disclose this sensitive information for permissible business purposes and do not infer characteristics about consumers from it. We do not sell or share sensitive personal information.

Rights of California Residents

The CPRA grants California residents specific rights regarding their personal information, though these rights are not absolute, and we may decline requests as permitted by law.

• Right to Know: You have the right to know what personal information we have collected about you, including the categories of personal information, sources, purposes for collecting, selling, or sharing the information, the categories of third parties to whom we disclosed it, and the specific pieces of personal information we have collected.
• Right to Correct: You have the right to correct inaccurate personal information we have collected from you.
• Right to Delete: You have the right to request the deletion of personal information we have collected from you.

You can exercise these rights without facing discrimination. To exercise these rights, follow the instructions in the “Your Privacy Choices” section above. If you have an account with us, we may require you to use it to submit your request. We will acknowledge receipt of your request within 10 business days and respond within 45 days. To process your requests, we may need to confirm your California residency and verify your identity, which could involve asking for your email or other identification forms. If we cannot verify your identity, we may deny your request as permitted by the CPRA.

Right to Opt-Out of Sales and Sharing

To the extent we “sell” or “share” your personal information as defined under the CPRA, you have the right to opt out. Follow the instructions for opting out of sales, shares, and targeted advertising in the “Your Privacy Choices” section above.

Authorized Agent

You may designate an authorized agent to submit a request on your behalf in accordance with California law. Except for opt-out preference signal requests, we will require written and signed proof of the agent’s authority and may verify your identity directly with you. Submit requests through the methods listed above.

Shine the Light

Under California’s “Shine the Light” law (California Civil Code § 1798.83), California residents can request information about our sharing of certain personal information with third parties for their direct marketing purposes. To make such a request, contact us at info@simplysalad.com with “Shine the Light” in the subject line. Include your current name, street address, city, state, zip code, and a statement confirming your California residency. We may request additional information to verify your identity. We are only required to respond to such requests once per calendar year.

Notice to Colorado, Connecticut, Utah, and Virginia Residents

The following rights and disclosures apply exclusively to residents of Colorado, Connecticut, Utah, and Virginia. The terms used herein have the meanings assigned to them in the Colorado Privacy Act (“CPA”), the Connecticut Data Privacy Act (“CTDPA”), the Utah Consumer Privacy Act (“UCPA”), and the Virginia Consumer Data Protection Act (“VCDPA”), as applicable.

Your Rights

Under the applicable laws in your state, you are entitled to the following rights:

• Right to Confirm: The right to confirm whether we are processing your personal data.
• Right to Access: The right to access your personal data.
• Right to Correct: The right to correct inaccuracies in your personal data.
• Right to Delete: The right to delete your personal data.
• Right to Data Portability: The right to obtain a copy of your personal data that you previously provided to us in a portable and readily usable format.

To exercise these rights, please follow the instructions for data subject requests in the “Your Privacy Choices” section above. These rights are subject to certain exceptions. We will respond to your request within 45 days. If you have an account with us, we may require you to use it to submit your request. We may need specific information from you to verify your identity and process your request. We do not process personal data for profiling purposes in furtherance of decisions that produce legal or similarly significant effects concerning consumers.

Right to Opt-Out

You have the right to opt out of the processing of your personal data for purposes of targeted advertising or the sale of personal data. To exercise this right, follow the instructions for opting out of sales, shares, and targeted advertising in the “Your Privacy Choices” section above.

Authorized Agent

You may designate an authorized agent to submit requests on your behalf. Except for requests made via opt-out preference signals, we will require written and signed proof of the agent’s authorization to act on your behalf and may verify your identity directly with you. Requests must be submitted through the designated methods listed above.

Appeals Process

If we refuse to take action on a request, you have the right to appeal our decision. To appeal, contact us at info@simplysalad.com and specify that you wish to appeal. We will inform you in writing of any action taken or not taken in response to your appeal within 60 days of receiving it, including a written explanation of the reasons for our decision. If your appeal is denied, you may submit a complaint as follows:

• For Colorado residents, to the Colorado Attorney General at https://coag.gov/file-complaint/
• For Connecticut residents, to the Connecticut Attorney General at https://www.dir.ct.gov/ag/complaint/
• For Virginia residents, to the Virginia Attorney General at https://www.oag.state.va.us/consumercomplaintform

Notice to Nevada Residents

We do not sell and will not sell your covered information as defined by Nevada privacy law.

Cookie Policy

This Cookie Policy outlines how Simply Salad utilizes cookies and similar technologies in connection with our services. By using our services, you agree to our use of these technologies as described in this policy, including the transmission of information to third parties.

What Are Cookies?

Cookies are small data files placed on your browser when you visit a website, open or click on an email, or interact with an advertisement. They serve various functions such as helping us understand how the site is used, enabling efficient navigation between pages, remembering your preferences, personalizing your browsing experience, preventing fraud, securing the website, performing measurements and analytics, and providing advertising.

Our services use both session cookies (which expire when you close your web browser) and persistent cookies (which remain on your device until they expire or are deleted). We categorize cookies into two types: (1) first-party cookies, which are set by us, and (2) third-party cookies, which are set by our service providers and partners.

What Are Pixels?

Pixels, also known as web beacons, are codes embedded within a service. There are different types of pixels, such as image pixels (transparent images) and JavaScript pixels (containing JavaScript code). Pixels often work in conjunction with cookies and provide similar functionality. When you access a service containing a pixel, it may allow us or a third party to place or read cookies on your browser or collect information about your browser or device.

Types of Cookies and Pixels Used by Simply Salad

Our services use cookies and pixels for the purposes described below:

• Strictly Necessary: These cookies and pixels are essential for the website to function and cannot be disabled in our systems. They are typically set in response to actions taken by you, such as setting your privacy preferences, logging in, or filling out forms. Blocking these cookies and pixels may impact the site’s functionality.
• Performance: These cookies and pixels allow us to count visits and traffic sources, enabling us to measure and improve site performance and understand analytics. They help identify the most and least popular pages and how visitors navigate the site. In some cases, they may generate visual representations of visitor activity (heat maps).
• Functional: These cookies and pixels enable the website to offer enhanced functionality and personalization. They may be set by us or third-party providers whose services we use. Disabling these cookies and pixels may impact the functionality of certain services.
• Advertising: These cookies and pixels may be set by us or our advertising partners to build a profile of your interests and show you relevant ads on our site and other sites. They may also be used for messaging purposes such as cart abandonment reminders. Disabling these cookies and pixels may result in less relevant advertising.
• Social Media: These cookies and pixels are set by social media services added to our site. They can track your browser across different sites and build a profile of your interests, potentially impacting the content and messages you see on other websites. Disabling these cookies may affect your ability to use or see these services.

App-Technologies

We use technologies within our apps that function similarly to cookies and pixels but are not browser-based and cannot be controlled via browser settings. For example, our apps may use Software Development Kits (SDKs) provided by third parties to collect information about your browser or device. SDKs may allow third parties to collect information directly through our apps.

Precise Location Technologies

With your consent, we may access precise location technologies on your device (such as GPS or Bluetooth) to collect location data. This data may be used for purposes such as verifying your device’s location and delivering or restricting relevant content and advertising based on that location.

For more information about your choices regarding cookies and similar technologies, including analytics and targeted advertising, please see the “Your Privacy Choices” section.