# Privacy Policy This “Privacy Policy” describes how Sweetgreen, Inc. (“ **Sweetgreen**,” “ **we**,” “ **us**,” **"our"**) handles the information we collect from and about you through: - our digital platforms that link to this Privacy Policy, including our websites (collectively, the “ **Site**”), mobile applications (collectively, the “ **Application**”), and kiosks or tablets at Sweetgreen restaurant locations (together with the Site and Application, the “ **Services**”); - social media platforms; - our other marketing activities; and - offline activities at our restaurant locations described in this Privacy Policy. **California Residents**: See the “Additional Information for California Residents” section below for additional information relevant to you. ## Information We Collect The information we collect from and about you depends on how you interact with us and with our Services. The sources from which we collect personal information include the following: **Information You Provide to Us.** You may provide us with information about you through the Services including but not limited to: - **Contact Data.** Your first and last name, company name, email address, mailing, delivery or office addresses, and phone number. - **Profile Data.** The username and password that you set to establish an online account with us, and other information you may choose to submit or include in your account profile, such as your birthday or gender. - **Order and Transactional Data.** Information you provide to place an order at one of our restaurants or through the Services for delivery or pick up, including your order information, payment card information, information about your payment transactions, and your order history. - **Communications Data.** Information in your communications with us, including when you request support, contact us with questions or feedback, communicate with us via chat features, complete our surveys, engage with us on social media, or otherwise communicate with us. Communications may be monitored and recorded by Sweetgreen and its third-party service providers for the purposes described in the How We Use Your Information section below. - **Marketing Data.** Your preferences for receiving marketing communications from us, the email or phone number you provide when you subscribe to our marketing emails or text messages, and information you provide when you participate in an event, contest, or promotion. - **Security Data.** Security camera footage of our restaurants and other facilities. - **Other Information** that is not specifically listed in this Privacy Policy, but that you may provide to us and that we will use consistent with this Privacy Policy or as otherwise explained at or before the time of collection. **Information We Collect Automatically.** When you access the Services or our communications, we, our service providers and third-party partners may automatically log, monitor and record information about you, your computer or mobile device, and your activity over time on the Services and other online services for the purposes described in the "How We Use Your Information" section below. This information includes: - **Device Data.** Information about your computer’s or mobile device’s operating system type and version number, manufacturer and model, browser type, screen resolution, RAM and disk size, CPU usage, device type (e.g., phone, tablet), IP address, unique identifiers (including identifiers used for advertising purposes), language settings, mobile device carrier, radio/network information (e.g., Wi-Fi, LTE, 3G) and general location information such as city, state or geographic area. - **Usage Data.** Date and time of your visit, pages or screens you viewed, how long you spent on a page or screen, navigation paths between pages or screens, information about your activity on a page or screen, search terms you enter using our Services, access times, and duration of access, whether you have opened our emails or clicked links within them, and other functional information on Service performance (like diagnostics and crash logs) - **Precise Geolocation of Your Device** when you specifically grant us access to it in your device’s settings. ## How We Use Your Information We use your information for the following purposes and as otherwise described in this Privacy Policy or at the time of collection: **Service Delivery.** We may use your information to: - Provide, operate and improve the Services and our business and develop new products or services; - Create and administer your account; - Fulfill your orders, including by communicating them to our local restaurants, delivery networks (including third-party delivery marketplaces), ecommerce platforms, and other service providers and by providing you with receipts, order confirmations and pickup instructions; - Provide customer support and improve our customer support capabilities, including to perform quality assurance monitoring of support calls and to train support personnel; - Administer your participation in rewards programs and other offers and promotional programs we may provide; - Respond to your requests, resolve disputes and/or troubleshoot problems; - Understand your needs and interests, and tailor the features and content of the Services and communications to you; - Communicate with you about the Services, including sending you announcements, updates, security alerts, and administrative email notifications such as security or support and maintenance advisories; and - Enable security features of the Services, such as by sending you security codes via email or SMS, and remembering devices from which you have previously logged in. ### Information We Disclose We may disclose your information as described below and as otherwise described in this Privacy Policy or at the time of collection: - **Third Parties Designated by You.** When you use the Services and authorize a third party to receive your information, we will disclose it to them. - **Service Providers.** We may disclose your information to companies and individuals that provide services on our behalf or help us operate the Services or our business (such as customer support, online chat functionality, fraud detection/prevention, security, hosting, payment processing, order and menu processing, ecommerce, analytics, email delivery, food delivery, marketing, advertising, privacy preference management, security, fraud prevention, generative artificial intelligence, and mobile application development and operation). These third parties may use your information only to help us operate the Services or our business as authorized under our contracts with them. - **Payment processors.** When you make purchases through the Service, your transactions are processed by third party payment processors, such as Stripe. These payment processors may collect your name, phone number, e-mail address, mailing address, billing address, payment card information, and other information needed to process your payment. They do not share your payment card information with us. - **Business Transferees.** We may disclose some or all of your information in connection with or during negotiation of any actual or prospective business transaction (e.g., mergers, financings, acquisitions or dissolution, transactions or proceedings involving sale, transfer, divestiture, or disclosure of all or a portion of our business or assets) to the parties to that transaction and their representatives. ## Your Rights and Choices **Rights Regarding Your Information.** Depending on the state where you reside, applicable data protection laws may provide you with certain rights regarding your "personal information" or "personal data" as defined in such laws (collectively, for purposes of this section, "personal information"). Specifically, you may have the right to ask us to: - Inform you about the categories of personal information we collect or disclose about you; - Provide you access to and/or a copy of certain personal information we hold about you; - Correct or update personal information we hold about you; - Delete certain personal information we have about you; or - Opt you out of the processing of your personal information for purposes of profiling in furtherance of decisions that produce legal or similarly significant effects, if applicable. If you are a resident of California, Colorado, or other specified states, you can opt out of sales or targeted advertising of your personal information. ## Contact Us Please direct any questions or comments to Sweetgreen, Inc. 3102 West 36th Street, Los Angeles, CA 90018 Attention: Legal Department or via email to [privacy@sweetgreen.com](mailto:privacy@sweetgreen.com). ## Additional Information for California Residents If you are a California resident, California law requires us to provide you with some additional information about how we collect, use, and share your “personal information” (as defined in the California Consumer Privacy Act (“CCPA”)). | Category of personal information we collect | How we use this personal information | Categories of third parties to which we disclose personal information for a business purpose | Categories of third parties to which we “sell” and/or “share” this personal information | | --- | --- | --- | --- | | Contact Information (such as your name, address, email address, and phone number) | - Service Delivery - Research and Development - Interest-Based Advertising - Marketing - Compliance and Protection - Consent | - Service Providers - Payment Processors - Affiliates - Third Parties Designated by You - Joint Marketing Partners and Joint Venture Partners - Advertising Partners | - Joint Marketing Partners and Joint Venture Partners - Advertising Partners | This Privacy Policy may be updated from time to time for any reason. If we make material changes to this Privacy Policy, we will notify you about new changes through appropriate notifications or a revision of this document. Continuation of your usage of our Services indicates acceptance of the conditions set forth herein.