Grubhub keeps your personal information for as long as your account is active, and potentially for an unspecified additional period afterward that Grubhub determines based on legal needs.
This analysis describes what Grubhub's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The additional retention period beyond account closure is not defined by a specific timeframe, meaning your data may be retained for an indeterminate period after you close your account, which limits the practical effect of account deletion.
Interpretive note: The phrase 'such additional period as Grubhub determines is necessary' is not defined with a specific maximum timeframe, creating ambiguity about the practical retention duration after account closure.
Closing your Grubhub account does not guarantee immediate deletion of your personal data; Grubhub may retain your information for an unspecified additional period it determines necessary for legal compliance and defense, which could mean years of continued data storage.
How other platforms handle this
to request that your data be transferred to a third party (data portability)
Your organization may allow you to access and export your data in order to back it up or transfer it to a service outside of Google.
Further, you may take legal actions in relation to any potential breach of your rights regarding the processing of your Personal Information, as well as to lodge complaints before the competent data prot...
"Grubhub retains identifiers for as long as you have an account with Grubhub, and for such additional period as Grubhub determines is necessary to comply with its legal obligations and defend against legal claims. Grubhub retains payment information for as long as you have an account with Grubhub, and for such additional period as Grubhub determines is necessary to comply with its legal obligations and defend against legal claims.Excerpt from Grubhub's Privacy Policy
1) REGULATORY LANDSCAPE: CCPA/CPRA requires that businesses retain personal information only as long as reasonably necessary for the disclosed purpose, and the absence of specific retention timeframes beyond 'as Grubhub determines' may create tension with …
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
The additional retention period beyond account closure is not defined by a specific timeframe, meaning your data may be retained for an indeterminate period after you close your account, which limits the practical effect of account deletion.
Closing your Grubhub account does not guarantee immediate deletion of your personal data; Grubhub may retain your information for an unspecified additional period it determines necessary for legal compliance and defense, which could mean years of continued data storage.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Grubhub.