For Merchants and Developers
1. Personal Information We Collect
1.1. Data Provided Directly By You:
Contact and Profile Information. When you create a LevelUp User Account, pay using LevelUp, join a Loyalty Program, or otherwise communicate or interact with us, we may collect information from you, such as your name, birthday, gender, age, dietary preferences, phone number, location, payment information, and email address. We use this contact and profile information to: (i) create, verify, and personalize your LevelUp User Account; (ii) communicate with you directly about the Services as well as about any questions, issues, or concerns you or other Users may have; (iii) fulfill your order; and (iv) send you marketing communications in accordance with the preferences you elect in setting up your User Account
Payment Information. When you submit an order, you are required to provide payment information, such as your credit card, debit card, gift card details, or any other Payment Instrument. We use this information to fulfill your order, complete the transaction, and detect and prevent fraud or abuse.
Transaction Information. When you submit an order, we collect information, including the items purchased, date, time, and location of your transaction, special instructions, and points you accrue or User Credit or promotions you redeem as part of a Loyalty Program. We also generate a QR code based on the payment information you provide. We use this transaction information to fulfill your order, update your User Credits, detect and prevent fraud, personalize your experience, perform analytics/identify usage trends, and inform our advertising and marketing campaigns.
Communications, Participation and Other Content. We maintain all communications resulting from your interactions with us by email, phone, mail, or chat. We also record comments and opinions you express when responding to surveys, entering a sweepstakes, or taking part in promotions we help to run. We use all of the foregoing communications to address your questions, issues, and concerns, and to improve our Services.
Other Information You Provide. With your permission, we may access your photos or contact list from your mobile device, Facebook Messenger account or email account to enable you to share content or promotions or invite your friends to connect with our Services, including through our friend referral program.
1.2. Personal Information Generated and/or Automatically Collected During Your Use of The Platform:
Information About Your Device and Its Software. Information about your device and its software includes your IP address, browser type, Internet service provider, device type/model/manufacturer, operating system, date and time stamp, and a unique ID that allows us to identify your browser, mobile device, or your User Account (including, for example, a persistent device identifier or an Ad ID), identifiers of beacons communicated to LevelUp, and other similar information. We may use this device and software information to diagnose and fix technology problems, serve you personalized advertising, personalize your experience, perform analytics/identify usage trends, and improve our products and Services.
Information About The Way You Access and Use Our Services. For example, information about the way you access and use our Services include the site from which you came and the site to which you are going when you leave. In addition, we track the pages you visit on our Apps, the links you click on our Apps, whether you open emails or click the links contained in emails that we send, and other actions you take on the Services. We may also use the information about the way you access and use our Services to determine products and services that may be of interest to you, to improve our products and services, to evaluate the success of our advertising and marketing campaigns, and to send you marketing communications.
Analytics Information. We may collect analytics data or use third-party analytics tools such as Google Analytics to help us measure traffic and usage trends and the demographics of our users in order to improve our Services. You can learn more about Google's practices at http://www.google.com/policies/privacy/partners.
We, or the third-party partners we use, may use the data collected automatically through tracking technologies to: (a) remember information so that you will not have to re-enter it during your visit or the next time you visit the Apps; (b) provide custom, personalized content and information; (c) provide and monitor the effectiveness of our Services; (e) perform analytics and detect usage patterns on our Services; (f) diagnose or fix technology problems; (g) detect or prevent fraud or other harmful activities, and (h) otherwise plan for and enhance our Services and for other internal purposes.
1.3. Data From Other Sources:
Information We Receive From Third-Party Sites You Connect to The Services. We may receive personal information about you from third parties and combine that with information we collect through the Services. For example, we may obtain information when you login through a third-party social network or authentication service, such as Facebook or Google. These services will authenticate your identity and provide you the option to share certain personal information with us, which could include your name, email address, gender, address book and contacts, or other information. The data we receive from these third-party sites is dependent upon that third party’s policies and your privacy settings on that third-party site.
Information We Receive From Affiliates or Third Parties. From time to time, we may receive information about you from our Restaurant partners, from other Grubhub entities and affiliates, from co-marketing partners, service providers, and from other third parties. We may also collect information about you that is publicly available. We may receive additional information about you, such as fraud detection information, from third-party partners and combine it with other information that we have about you. We use this information from affiliates or third parties to create your User Accounts, to contact you, to send you advertising or promotional materials or to personalize our services, to protect against bot attacks and account takeovers, and to better understand the demographics and interests of our Users.
We do not control, supervise or respond to how the third parties providing your information process your personal information, and any information request regarding the disclosure of your personal information to us should be directed to such third parties.
2. How We Use Your Information
2.1 Provide Services to The Restaurant and to You. We provide the Services to you on behalf of Restaurants; accordingly, we use your personal information to create LevelUp User Accounts, accept orders, process payments, and operate Loyalty Programs for Restaurants.
2.2 Maintain and Improve The Apps and Services. We may use your personal information to provide, maintain, improve and develop the Apps and Services. Specifically, we use your personal information in order to (i) provide the Services to you on behalf of Restaurants, including, without limitation, processing charges, sending receipts, and tracking and notifying you of User Credit; (ii) providing custom and personalized content and information; (iii) to perform analytics, detect activity patterns and otherwise research usage; and (iv) to test and develop new features and functionality and otherwise enhance the Apps and Services.
2.3 Maintain The Safety, Stability and Security Of The Services. For example, we may use your personal information to investigate and remedy fraudulent or allegedly fraudulent activity as well as diagnose or fix technology problems.
2.4 Communications With You to Provide Support and Other Important Messages. We may use personal information to communicate important messages to you and/or to provide you with support. For example, we might send you service-related emails or messages (e.g., changes or updates to features of the Services, technical and security notices) and other communications from or about the Service.
2.5 For Advertising and Marketing Purposes. For example, LevelUp or Restaurants may contact you, or engage a third-party to contact you, in relation to our Services as well as other promotions and offers that you have requested or we believe might interest you. We may permit you to refer us to your friends so that we may send them promotional offers. Additionally, any personal information that we collect via Facebook may be used for open graph posts.
3. Sharing Of Your Information
We may share your personal information in the instances described below. For further information on your choices regarding your information, see the “Control Over Your Information” section below.
We May Share Your Personal Information With:
Third Parties At Your Direction or Request. For example, you may have the option to share your activities on the Service with your friends through email, text or on various social media sites. In some cases, you may also elect to share your personal information with more than one Restaurant through the Services, either by granting the Restaurant’s express request for permissions in the mobile application or website, or by downloading and/or logging into a LevelUp mobile application or website with your LevelUp credentials, which grants the Restaurant access to your Personal Information, including the email address you use to log in, and certain of your User Account information.
Third Parties At The Restaurant’s Request. We may share information with third parties at the direction of the Restaurant in accordance with our agreement with the Restaurant to provide the Services, which may include point of sale providers, customer service providers, advertising and marketing partners, email service providers, texting service providers, social networks, our affiliate Grubhub and its subsidiaries and affiliates.
Third Parties Necessary to Complete Your Order or to Enable Your Use Of Our Apps and Services. In addition to Restaurants you order from, we disclose personal information to third parties as needed to fulfill your orders, including, without limitation, online ordering providers, point of sale providers, and payment processors.
Service Providers and Contractors. These third parties perform Services on our behalf as needed to carry out their obligations to us. For example, our service providers may have access to personal information as needed to provide website hosting, data analysis, infrastructure provisioning, IT services, customer services, email delivery services, promotional prize fulfillment, marketing and other similar services.
Analytics Providers. We work with third-party analytics providers to better understand the demographics of our Users and visitors, and to personalize, enhance and improve our Apps and Services.
Business Transaction or Reorganization. We may take part in or be involved with a corporate business transaction, such as a merger, acquisition, joint venture, or financing or sale of all or a portion of company assets. We may disclose personal information to a third party during negotiation of, in connection with or as an asset in such a corporate business transaction. Personal information may also be disclosed in the event of insolvency, bankruptcy, or receivership.
Public. We may make available through the Apps and Services certain features which may enable you to post information and materials, for example, ratings and reviews. Please note that any information you provide in connection with such Services may be available to site visitors and to the general public. Please do not disclose your personal information in these public or interactive areas, and we urge you to exercise discretion and caution when deciding to disclose any other information and/or materials in these public or interactive areas on the Services.
Consent. We may disclose personal information about you to other third parties with your consent.
We may also use aggregate personal information for regulatory compliance, industry and market analysis, research, demographic profiling, marketing and advertising, and other business purposes as long as the end-product does not uniquely identify you or any other User of the Apps and Services.
4. Control Over Your Information
Profile and Data Sharing Settings. You may update your profile information in your User Account settings.
Access to Your Device Information and Push Notifications. You may control access to your device information or opt out of push notifications through your “Settings” app on your device. For instance, you can withdraw permission for the app to access your location data through your device settings, though we may continue to approximate your location based on your IP address or through other means.
How to Control Your Communications Preferences: You can stop receiving promotional email communications that we send on behalf of the Restaurant by clicking the “unsubscribe link” provided in such communications. This unsubscribe action applies only to promotional email communications that LevelUp sends on behalf of the Restaurant, and will have no effect on promotional email communications that LevelUp sends on behalf of other Restaurant customers or email communications that are sent by the Restaurant directly. You may not opt out of service-related communications (e.g., User Account verification, transactional communications, changes/updates to features of the Service, technical and security notices).
Texting is also offered by some Restaurants. Once you have opted in through our Services, you will need to communicate directly with the Restaurant for instructions on how to opt out.
Modifying or Deactivating Your Information: If you would like to review, modify, or deactivate your Account, including removal of your financial information from LevelUp’s data vault provider, you can go to the “Account” tab at https://www.thelevelup.com/login. Alternatively, you can contact us directly at firstname.lastname@example.org or 1-855-538-3542. We may not be able to modify or deactivate your information in all circumstances.
Do Not Track. Although we do our best to honor the privacy preferences of our Users, we are unable to respond to Do Not Track signals set by your browser at this time.
5. Third-Party Tracking and Online Advertising
Interest Based Advertising. Depending on the features and functionality our Restaurant customers expressly request, the Services may engage in interest-based advertising and use third-party advertising companies to serve you targeted advertisements based on your browsing history. We may share, or we may permit third-party online advertising networks, social media companies and other third-party Services, to collect information about your use of our Service over time so that they may play or display ads on other devices you may use, and on other websites, apps or Service, including on social media sites. These third parties may collect information such as click stream information, browser type, time and date you visited the Service, mobile device identifiers, your use of third-party applications, and/or precise geolocation data and other information. This information is used to make the advertisements you see online more relevant to your interests, as well as to provide advertising-related Service such as reporting, attribution, analytics and market research.
Cookies and Flash Cookies. Most browsers allow you to adjust your browser settings to: (i) notify you when you receive a cookie, which lets you choose whether or not to accept it; (ii) disable existing cookies; or (iii) set your browser to automatically reject cookies.
Blocking or deleting cookies may negatively impact your experience using the Services, as some features may not work properly. Depending on your mobile device and operating system, you may not be able to delete or block all cookies, you may not be able to block non-cookie technologies or the changes to your settings may have no effect. You may also set your email options to prevent the automatic downloading of images that may contain technologies that would allow us to know whether you have accessed our email and performed certain functions with it.
Some of these opt-outs may not be effective unless your browser is set to accept cookies. If you delete cookies, change your browser settings, switch browsers or computers, or use another operating system, you will need to opt-out again.
Interest-Based Advertising. To learn about interest-based advertising and how you may be able to opt-out of some of this advertising, you may wish to visit the Network Advertising Initiative’s online resources, at http://www.networkadvertising.org/choices, and/or the DAA’s resources at www.aboutads.info/choices. You may also be able to limit interest-based advertising through the settings on your mobile device by selecting “limit ad tracking” (iOS) or “opt-out of interest based ads” (Android).
Google Analytics. We use Google Analytics to recognize you and link the devices you use when you visit our Service on your browser or mobile device, login to your User Account on our Service, or otherwise engage with us. We share a unique identifier, like a user ID or hashed email address, with Google to facilitate the service. Google Analytics allows us to better understand how our Users interact with our Service and to tailor our advertisements and content to you. For information on how Google Analytics collects and processes data, as well as how you can control information sent to Google, review Google's site “How Google uses data when you use our partners' sites or apps” located at http://www.google.com/policies/privacy/partners. You can learn about Google Analytics’ currently available opt-outs, including the Google Analytics Browser Ad-On here https://tools.google.com/dlpage/gaoptout/.
6. Third Party LevelUp Apps and Links to Other Web Sites and Services
7. How We Store and Protect Your Information
Data Storage and Transfer. Your information collected through the Services is stored and processed in the United States. If you are located in the European Union or other regions with laws governing data collection and use that may differ from U.S. law, please note that we may transfer information, including personal information, to a country and jurisdiction that does not have the same data protection laws as your jurisdiction.
Keeping Your Information Safe. We care about the security of your information and employ physical, administrative, and technological safeguards designed to preserve the integrity and security of all information collected through our Service. However, no security system is impenetrable and we cannot guarantee the security of our systems. Please recognize that protecting your personal information is also your responsibility. Accordingly, we strongly recommend that you choose unique passwords that are not reused across other apps or websites, and otherwise take precautions when communicating your personal information on the internet. If you know or have reason to believe that your User Account credentials have been lost, stolen, misappropriated, or otherwise compromised or in case of any actual or suspected unauthorized use of your User Account, please contact us following the instructions in the “Contact Us” section below.
8. Children’s Privacy
The Services are not directed to children under the age of 13; nor do we knowingly attempt to collect or solicit personal information from children under the age of 13. In the event that we are informed that we have inadvertently collected personal information from a child under age 13, we will disable the User Account and delete the provided information as quickly as possible. If you believe that we have any information from a child under 13, please contact us at email@example.com.
9. Region Specific Disclosures
We may choose or be required by law to provide different or additional disclosures relating to the processing of personal information about residents of certain countries, regions or states. Please refer below for disclosures that may be applicable to you:
California. If you are a resident of the State of California in the United States, please click here for additional California-specific privacy disclosures.
Nevada. If you are a resident of the State of Nevada, Chapter 603A of the Nevada Revised Statutes permits a Nevada resident to opt-out of future sales of certain covered information that a website operator has collected or will collect. To submit such a request, please contact us at firstname.lastname@example.org with the subject line “Nevada opt-out.”
11. How to Contact Us
Please note that email communications will not necessarily be secure; accordingly, please do not include credit card information and/or other sensitive personal information in your email correspondence with us.
Effective Date of this policy: January 30, 2020