Chipotle -- Privacy Policy




Thank you for visiting Chipotle online. This Privacy Policy describes how Chipotle Mexican Grill, Inc. and its subsidiaries and affiliated companies (collectively, "Chipotle", “we” or “our”) collect, use and disclose personal information of visitors to our websites, users of our online services and others to whom we expressly provide that this Privacy Policy will apply.

Information You Provide

When you visit or interact with the Services, Chipotle may obtain certain personal information from you such as your name, email address or other user ID, phone number, company affiliation, delivery or shipping address, job application information (e.g., resume, employment and educational history, references), precise location, and payment information.

If you submit someone else’s personal information to us (e.g., someone else’s contact information), you represent that you are authorized to provide this information to us.

Information Collected Automatically

We may collect certain information about you automatically. This information may include your IP address, device identifier, browser characteristics, operating system details, language preference, referring URLs, length of visits, and pages viewed. We automatically collect this information using various tools and technologies such as cookies and web server logs. A cookie is a piece of data that a website can send to your browser, which may then be stored on your computer, sometimes with a tag that identifies your computer. Many web browsers are set to accept cookies by default, but you may be able to set your browser to notify you before you receive a cookie, or to remove or reject cookies. Please note that disabling cookies may affect the availability and functionality of the Services and other websites.

We may also use certain third-party web and mobile app analytics services – including but not limited to Google Analytics, Twitter Analytics, and Facebook Custom Audiences – to help us understand and analyze how visitors use the Services and serve ads on our behalf across the Internet. We’ve implemented Google Analytics Advertising features such as remarketing with analytics, interest-based advertising, demographics and interests reporting, user segment analysis, look-alike modeling and impression reporting. We and third-party vendors may use first-party cookies or other first-party identifiers as well as third-party cookies or other third-party identifiers to get insight into behavior information relating to visitor age, gender, and interests on an anonymous and aggregate level, and to deliver advertisements to you, create a profile of you, measure your interests, detect your demographics, detect your location, personalize content, and detect online behaviors such as site visitation, dwell time and actions taken. For more information on how the Google Marketing Platform uses the data collected through the Services, visit:

In addition to the automatic collection mechanisms listed above, we may also:

·      As an advertising publisher, use Tags in connection with the Nielsen Digital Ad Ratings Service for Google Ad Manager;

·      Through tracking technologies, receive and use Foursquare service user data, including search terms, what pages you view, your access times, the time you spend on each page, the IP address used to access the pages, and other user data (see Foursquare Privacy Policy); and

·      Use Microsoft’s Bing Universal Event Tracking (UET) feature, in which case Microsoft collects your personal information (see Microsoft Privacy Statement).

To find out more about how third-party analytics services manage the privacy of information in conjunction with delivering ads online, and how to opt-out of information collection by these networks generally, please visit:,, or Please note that we are not responsible for the opt out process of third parties.

Information Collected from Third Parties

Third-party service providers may share with us your personal information that you submit to them. For example, if you apply for a job using the career portal, order food or catering, order gift cards, make a purchase for merchandise, make a payment through the Services, or provide feedback on your experiences, you may submit personal information to one or more third parties that may share your information with us. Additionally, for certain features of the Services, you may log in through your third-party social media account or share content from the Services through third-party social media platforms. We may combine information that we have about you with information we obtain from third parties. When you submit information to a third party, you are subject to that third party’s terms of use and privacy policies, for which we are not responsible.


Depending on your personal device and App permission settings, when using the App we may collect or have access to your:

  • Precise geolocation. When enabled, this may allow the App to collect real-time information about the location of your device (GPS and network-based) to provide requested location services, ensure your orders are placed at the correct location, and to serve you relevant offers or promotions.
  • Camera. When enabled, this may allow the App to access the camera to scan and input payment method details.
  • Wi-Fi connection information. When enabled, this may allow the App to view Wi-Fi connections.
  • Other. The App will send and receive data to and from the Internet, and may view network connections, have full network access, control vibration of your device, or prevent your device from sleeping.

You may be able to enable or disable location tracking by the App by adjusting the permissions in your account or device settings. Be aware that if GPS precise location services are disabled, other means of establishing or estimating location (e.g., connecting to or proximity to Wi-Fi, Bluetooth, beacons, or our networks) may persist. Enabling location tracking may allow the App to track your location in the background, which can decrease battery life.

We will store personal information we obtain through the App for no longer than is necessary to achieve the purposes for which the information was collected, or as otherwise required or permitted under applicable law.

Note that for information we collect via Apple services (e.g., iOS), we will obtain your consent before sharing your personal information with third parties for those third parties’ direct marketing purposes.


use of information

We may use personal information we obtain about you to:

  • facilitate and personalize your user experience and improve the Services;
  • conduct statistical analysis of the content, layout, and features of the Services for our marketing purposes;
  • communicate with you regarding our restaurants and the Services;
  • respond to your requests or inquiries;
  • register you for accounts on the Services;
  • register you for our email and postal mailing lists or for promotions or offers conducted through the Services;
  • process payment information for online food orders or online purchases through our merchandise or gift card store;
  • respond to job inquiries and job applications submitted by you;
  •  process your fundraiser applications;
  • send marketing information to you, such as promotional offers or information about new product offerings, programs, or restaurant openings;
  • provide location services;
  • prevent, investigate, identify, stop, or take any other action with regard to suspected or actual fraudulent or illegal activity, or any activity that violates our policies; or
  • for any other purpose, with your consent where appropriate.

We may share your personal information with our third-party service providers for a variety of reasons, such as fulfilling orders, assisting with promotions, performing website analytics, delivering relevant marketing messages and advertisements, and providing technical services. We generally require our service providers provide the same or equal protection of user data as stated in this Privacy Policy.

For advertising purposes, we may share your information (e.g., information we collect automatically, email address) with third-party service providers (for additional information see “Information Collected Automatically).  These third parties may view, edit, or set their own tracking technologies/cookies.

We may also publicly post on our Services certain user-generated content you submit to us.

In the event of a business transaction, such as if we sell or transfer all or a portion of our business or assets (e.g., further to a merger, reorganization, liquidation, or any other business transaction, including negotiations of such transactions), we reserve the right to disclose any information we obtain through the Services. You acknowledge that such transfers may occur and are permitted by this Privacy Policy.  To the extent legally permitted, the acquiring party may use the information pursuant to their own privacy policy instead of this one.

We may also disclose personal information when required by subpoena, search warrant, or other legal processes, or in response to activities that are unlawful or a violation of Chipotle’s rules for use of the Services, or to protect and defend the rights or property of Chipotle or others.


The Services are not intended for, and are not intentionally targeted to, children under 13, and we do not knowingly request or collect personal information from any person under 13 years of age through the Services. If we learn that the Services have received personal information directly from a child who is under the age of 13, we will delete the information in accordance with applicable law.


If at any time you want to correct the personal information we have about you, or if you wish to change your preferences (including your communication preferences), you may do so by (1) logging into your registered website or App account and changing your account settings (including location tracking), (2) visiting our Contact page, or (3) writing to:

Chipotle Mexican Grill, Inc.
610 Newport Center Dr.
Newport Beach, CA 92660

Attention: Privacy Inquiry

You also can make certain choices by using the options described in the Information Collected Automatically and “APP PERMISSIONS” sections above.  If you no longer wish to provide us information through the App, you may uninstall the App from your device.


We use various security measures as part of an effort to protect your personal information from loss, theft, misuse, unauthorized access, disclosure, alteration, and destruction. Nevertheless, transmission via the Internet and online digital storage are not completely secure and we cannot guarantee the security of your information collected through the Services.


From time to time we may elect to share certain “personal information” (as defined by California’s “Shine the Light” law) about you with third parties for those third parties’ direct marketing purposes. Residents of the State of California may request a list of third parties to whom we have disclosed your personal information for those third parties’ direct marketing purposes during the preceding year. If you are a California resident, you may contact us via email at or via postal mail at:

Attn: Chief Legal Officer, Legal Department

Chipotle Mexican Grill, Inc.
610 Newport Center Dr.
Newport Beach, CA 92660

To make a request, please provide sufficient information for us to determine if this applies to you, attest to the fact that you are a California resident, and provide your current California address to which we will send our response. Your inquiry must specify “California Privacy Rights Request” in the subject line of the email or the first line of the letter, and include your name, street address, city, state, and ZIP code. Please note that we are only required to respond to one request per customer each year.


The Services may offer links to websites and other services that are not maintained by Chipotle. By visiting one of these linked websites or services, you are subject to their privacy and other policies. We are not responsible for, or able to monitor or control, the policies and practices of other companies.


From time to time, Chipotle may change this Privacy Policy. Changes will be indicated by the “Last Updated” date at the top of this page.


For questions about this Privacy Policy, you may contact us at