Effective Date: January 1, 2020
Last Updated: April 22, 2021
In this Policy, the terms “Shake Shack UK,” “we,” and “us” refer to Shake Shack UK, Diverse Dining LTD and its wholly owned and operated locations. This Policy does not apply to information collected by Shake Shack licensees, which maintain their own privacy policies and procedures.
By using any of the Services, you consent to the terms of this Policy.
The Personal Information Shake Shack Collects and How We Use It
In connection with your interactions with us through the Services, we may collect personal information from you or from other sources. This information may be information that you directly provide to us, such as information that you provide when you visit the Services, or information that is passively or automatically collected from you, such as information collected from your browser or device. The personal information we collect may identify you directly (e.g., your name). We also collect certain information that does not identify you directly, but in certain circumstances could allow you to be identified indirectly (e.g. certain technical data associated with devices that you use to interact with the Services).
In some instances, Shake Shack UK may also collect information from third party sources, upon whom we rely to provide the Services. We use both business partners and service providers, such as payment processors and analytics providers, to perform services on our behalf. Some of these partners may have access to information about you that we may or may not otherwise have (for example, where you sign up directly with that provider) and may share some or all of this information with us. We may use this information to administer and improve the Services and to conduct marketing and advertising campaigns.
In response to public health guidance or mandates from government authorities, we may collect health data from our guests as we deem appropriate to provide a safe space for them and our employees.
How We Share and Disclose Information
Shake Shack UK only shares personal information with affiliated companies, as well as business partners and service providers whom we rely on to help us provide better service to you. These companies need information about you to perform their service function (such as to process and fulfil your order, verify your credit card information, and to protect you from fraud). We also share information with specially chosen companies that help us with marketing functions (such as to manage our Internet business and to maintain and manage our customer information, as well as to market our products and services). We may engage vendors to serve advertisements on our behalf across the Internet and to provide analytics services. These vendors may collect certain technical or other information from you (e.g. clickstream information, browser type, time and date, hardware/software information, cookie ID, IP address, etc.) when you visit our Website and may use that information to provide advertisements about goods and services that are deemed to be of greater interest to you.
We may also share your information for any other purpose as disclosed at the time of collection, or when we have otherwise obtained consent. Please note that this Policy is not intended to limit our ability to share or disclose aggregated, pseudonymized, or anonymized data. Shake Shack UK also reserves the right to use or disclose information as needed to satisfy any law, regulation or legal request, to fulfil your requests, to cooperate in any law enforcement or similar investigation, or to conduct any internal investigation or similar function we deem appropriate to protect our business.
How We Protect Your Information
Shake Shack UK uses technical, physical, and administrative security measures to reduce the risk of loss, misuse, unauthorized access, disclosure, or modification of your information. Examples of our safeguards include firewalls, data encryption, physical access controls, and administrative informational controls. When you transmit sensitive information through the Website, we encrypt the transmission of that information using the Secure Sockets Layer (SSL) protocol. No system or network can be guaranteed to be 100% secure. As a result, we recommend that you help us keep your information safe by taking reasonable steps such as keeping your passwords private, changing them from time to time, and not disclosing personal data in places that can be accessed publicly.
We retain your information only for as long as is necessary to provide the Services and to fulfil the transactions you have requested, or for other necessary purposes such as complying with our legal obligations, resolving disputes, and enforcing our agreements.
“Cookies” and Advertisers
The Website server, or the servers of companies that are used to operate the Website, may place “cookies” on your computer or device, store data in your computer browser or access features on your mobile device in order to allow you to use the Website and to personalise your experience. A “cookie” is a small piece of data that can be sent by a web server to your computer, which then may be stored by your browser on your computer or device. Cookies and browser storage allow us to recognize your computer or device while you are on our Website and the Mobile App and help customize your online experience and make it more convenient for you. Cookies and browser storage are also useful in allowing more efficient log-in for users, tracking transaction histories, and preserving information between sessions. The information collected from cookies and browser storage may also be used to improve the functionality of the websites and applications.
Most web browser applications (such as Microsoft Internet Explorer, Google Chrome, Firefox and Apple Safari) have features that can notify you when you receive a cookie or prevent cookies from being sent. If you disable cookies or other device tracking features, however, you may not be able to use certain functions of the Website
Links to Other Sites
In some areas of the Website, we may provide a link to another website. Other websites, including social media sites, have their own policies regarding privacy and security, and these may vary from ours.
The Services are directed toward and designed for use by persons aged 13 or older. Shake Shack UK will not approve applications of, or establish or maintain registrations for any child who Shake Shack knows to be under the age of 13. Shake Shack UK does not solicit or knowingly collect personally identifiable information from children under the age of 13. If Shake Shack UK nevertheless discovers that it has received personally identifiable information from an individual who indicates that he or she is, or whom Shake Shack UK otherwise has reason to believe is, under the age of 13, Shake Shack UK will delete such information from its systems. Additionally, a child’s parent or legal guardian may request that the child’s information be corrected or deleted from our files by requesting this via our Contact Us page.
If you have reason to believe that child under the age of 13 has provided personal data to us without parental consent, please contact us using any of the methods described in the “Contact Us” section of this Policy, and we will endeavour to delete that data from our systems.
|Categories of Personal Information Collected||Business Purposes for Collection|
|Personal Identifiers (e.g., name, email address, and date of birth)||
|Other personal information (e.g., driver’s license, credit card number, health insurance information)||
|Demographic information (e.g., gender, familial status, and citizenship status)||
|Commercial information (e.g., purchasing activity)||
|Internet or other electronic activity information (e.g., clickstream data and information regarding interaction with a web site)||
|Geolocation data (e.g., mobile device location)||
|Audio, electronic, or visual information (e.g., photographs)||
|Professional or employment-related information (e.g., employment history, educational information)||
|Customer order information (e.g., order number)||
|Inferences drawn from personal information (e.g., preferences)||
|Employee tax-related information (e.g., garnishments and tax remittance)||
|Other shareholder information (e.g., voting records)||
|Miscellaneous categories of consumer information (e.g., household income, dietary habits, allergies)||
Non-U.K. Visitors’ Rights
Shake Shack UK’s business is directed to United Kingdom customers. Non-U.K. persons, including persons visiting our U.K based physical or digital locations from other countries, should be aware that in visiting us you are agreeing to be subject to U.K. privacy law rather than the laws of your home country.
This Policy went into effect, and was last revised, on the dates noted at the top of this webpage. We may update this Policy from time to time. If we make material changes, we will post the updated Policy on this page and change the date at the top of this webpage. We encourage you to look for updates and changes to this Policy periodically. Your continued use of the Services after any changes to this Policy are in effect constitutes your acceptance of revisions to the Policy.