Grubhub may collect and use sensitive information including your precise location, health-related inferences (such as dietary restrictions or health conditions suggested by your orders), and potentially religious or other beliefs inferred from your food choices.
This analysis describes what Grubhub's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Health-related and belief-related inferences drawn from food ordering data represent a sensitive category of personal information that carries heightened privacy risk, particularly if shared or used beyond the immediate service context.
Interpretive note: The scope of health-related and belief-related inferences drawn from order data is not precisely defined in the document, and whether these inferences are shared with advertising partners is not explicitly confirmed or excluded.
Grubhub may infer sensitive information about your health, dietary needs, or beliefs based on what you order, and may use these inferences to personalize your experience; California residents have the right to limit how this sensitive information is used.
How other platforms handle this
If you choose to reveal any personal information about yourself to other users, you do so at your own risk. We strongly encourage you to use caution in disclosing any personal information online.
You can contact us in order to (1) update or correct your personally identifiable information, (2) change your preferences with respect to communications and other information you receive from us, or (3) delete the personally identifiable information maintained about you...
Access information about you consistent with legal requirements. In addition, you may have the right in some cases to receive or have your electronic information transferred to another party.
"We may use this information to: (i) provide and improve the Platform and Services; (ii) personalize your Grubhub experience; (iii) detect and prevent fraud, abuse, or other harmful activities; and (iv) for other purposes described in this Privacy Policy. We may also use inferences we draw from your information, including information that may indicate health conditions, dietary preferences, or religious beliefs, to personalize your experience and for other purposes described in this Privacy Policy.Excerpt from Grubhub's Privacy Policy
1) REGULATORY LANDSCAPE: CPRA establishes a distinct category of sensitive personal information (SPI) and requires businesses to provide consumers with the right to limit its use and disclosure to what is necessary to perform the …
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Health-related and belief-related inferences drawn from food ordering data represent a sensitive category of personal information that carries heightened privacy risk, particularly if shared or used beyond the immediate service context.
Grubhub may infer sensitive information about your health, dietary needs, or beliefs based on what you order, and may use these inferences to personalize your experience; California residents have the right to limit how this sensitive information is used.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Grubhub.