This analysis describes what Grubhub's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The updated policy discloses that Grubhub collects payment card identifiers, merchant information, and transaction details from payment card networks and third-party service providers when users participate in rewards programs like In-Person Dining and Card-Linked Offers. The policy states this data may be used to provide rewards, calculate credits, and shared with participating merchants in aggregated form. You can opt out of these programs by visiting your account page, clicking on 'The Drop,' and selecting 'Manage' next to Linked Cards.
View change record →How other platforms handle this
If we are unable to provide you with any Data or to make a correction requested by you, we shall generally inform you of the reasons why we are unable to do so (except where we are not required to do so under applicable laws).
We may take reasonable steps to verify your identity before responding to your request, which may include verifying your name, email address, and other information regarding your use of our services...
If you use an authorized agent to submit a request, we will not act on that request unless we are able to authenticate, with commercially reasonable efforts, both your identity and the authorized agent's authority to act on your behalf.
"If you choose not to provide this information, we may only be able to process your request to the extent we are able to identify you in our data systems, including only processing your request on the device from which you submitted the request.Excerpt from Grubhub's Privacy Policy
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
The clause states: “If you choose not to provide this information, we may only be able to process your request to the extent we are able to identify you in our data systems, including only processing your request on the device from which you submitted the request.”
ConductAtlas has identified this type of provision across 277 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Grubhub.