California residents have the legal right to see what personal data Grubhub has collected, ask for it to be deleted or corrected, and opt out of data sharing for advertising purposes, all by submitting a request online or by email.
This analysis describes what Grubhub's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
These are legally enforceable rights under California law, not just company policy, meaning Grubhub is required by law to honor requests within specific timeframes, including responding to opt-out requests within 15 business days.
If you are a California resident, you have enforceable rights to access, delete, correct, and opt out of data sharing for advertising, and you can exercise these rights by contacting Grubhub at privacy@grubhub.com or through the online request mechanism.
How other platforms handle this
When you use them, we'll validate your request by verifying your identity (for example, by confirming that you're signed in to your Google Account).
By providing your mobile phone number, you consent to receive automated text (SMS) messages from Instacart...To opt out, reply STOP. For help, reply HELP or contact us directly...
Not be Discriminated Against by us for exercising your privacy rights.
"California residents have specific rights regarding their personal information under CCPA/CPRA. These rights include the right to know, the right to delete, the right to correct, the right to opt-out of sale or sharing of personal information, and the right to limit the use of sensitive personal information. To exercise your rights, you may submit a verifiable consumer request through our privacy rights request mechanism or by contacting us at privacy@grubhub.com.Excerpt from Grubhub's Privacy Policy
1) REGULATORY LANDSCAPE: CCPA as amended by CPRA, enforced by the California Attorney General and the California Privacy Protection Agency, mandates these rights and requires responses to verifiable consumer requests within 45 days (extendable by …
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
These are legally enforceable rights under California law, not just company policy, meaning Grubhub is required by law to honor requests within specific timeframes, including responding to opt-out requests within 15 business days.
If you are a California resident, you have enforceable rights to access, delete, correct, and opt out of data sharing for advertising, and you can exercise these rights by contacting Grubhub at privacy@grubhub.com or through the online request mechanism.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Grubhub.