This “Privacy Policy” describes how Sweetgreen, Inc. (“Sweetgreen,” “we”, “us”, “our”) handles the information we collect from and about you through:

- our digital platforms that link to this Privacy Policy, including our websites (collectively, the “Site”), mobile applications (collectively, the “Application”), and kiosks or tablets at Sweetgreen restaurant locations (together with the Site and Application, the “Services”);
- social media platforms;
- our other marketing activities; and
- offline activities at our restaurant locations described in this Privacy Policy.

**California Residents**: See the “Additional Information for California Residents” section below for additional information relevant to you.

## Information We Collect

The information we collect from and about you depends on how you interact with us and with our Services. The sources from which we collect personal information include the following:

**Information You Provide to Us.** You may provide us with information about you through the Services including but not limited to:

- **Contact Data.** Your first and last name, company name, email address, mailing, delivery or office addresses, and phone number.
- **Profile Data.** The username and password that you set to establish an online account with us, and other information you may choose to submit or include in your account profile, such as your birthday or gender.
- **Order and Transactional Data.** Information you provide to place an order at one of our restaurants or through the Services for delivery or pick up, including your order information, payment card information, information about your payment transactions, and your order history.
- **Communications Data.** Information in your communications with us, including when you request support, contact us with questions or feedback, communicate with us via chat features, complete our surveys, engage with us on social media, or otherwise communicate with us.  Communications may be monitored and recorded by Sweetgreen and its third-party service providers for the purposes described in the How We Use Your Information section below.
- **Marketing Data.** Your preferences for receiving marketing communications from us, the email or phone number you provide when you subscribe to our marketing emails or text messages, and information you provide when you participate in an event, contest, or promotion.
- **Security Data.** Security camera footage of our restaurants and other facilities.
- **Other Information** that is not specifically listed in this Privacy Policy, which we will use consistent with this Privacy Policy or as otherwise explained at or before the time of collection.

**Information We Collect Automatically.** When you access the Services or our communications, we, our service providers and third-party partners may automatically log, monitor and record information about you, your computer or mobile device, and your activity over time on the Services and other online services for the purposes described in the How We Use Your Information section below. This information includes:

- **Device Data.** Information about your computer’s or mobile device’s operating system type and version number, manufacturer and model, browser type, screen resolution, RAM and disk size, CPU usage, device type (e.g., phone, tablet), IP address, unique identifiers (including identifiers used for advertising purposes), language settings, mobile device carrier, radio/network information (e.g., Wi-Fi, LTE, 3G) and general location information such as city, state or geographic area.
- **Usage Data.** Date and time of your visit, pages or screens you viewed, how long you spent on a page or screen, navigation paths between pages or screens, information about your activity on a page or screen, search terms you enter using our Services, access times, and duration of access, whether you have opened our emails or clicked links within them, and other functional information on Service performance (like diagnostics and crash logs)
- **Precise Geolocation of Your Device** when you grant access to it in your device’s settings.

**Cookies and Other Data Collection Technologies.** Some of the information that we, our service providers and third-party partners collect automatically is collected through the following technologies:

- **Cookies**, which are text files that websites store on a visitor’s browser or device to uniquely identify the visitor’s browser or to store information or settings in the browser for the purpose of tracking user activity and patterns, helping the visitor navigate between pages efficiently, remembering preferences, improving the visitor’s browsing experience, and enabling functionality, analytics, and online advertising.
- **Pixels**, also known as web beacons or clear GIFs, which are embedded invisibly in image files within webpages or HTML formatted emails and used to demonstrate that a webpage or email was accessed or opened, or that certain content was viewed or clicked.
- **Browser web storage** (including HTML5), also known as locally stored objects, functions like cookies but enables the storage of a larger amount of data.
- **Software Development Kits** (SDKs), which are used to incorporate third-party computer code into our Application that allows our service providers or third-party partners to collect data directly from our Application for a variety of purposes, including to provide us with analytics regarding the use of our Application, to integrate with social media, add features or functionality to our Application, or to facilitate and measure the effectiveness of online advertising.

## How We Use Your Information

We use your information for the following purposes and as otherwise described in this Privacy Policy or at the time of collection:

**Service Delivery.** We may use your information to:
- Provide, operate and improve the Services and our business and develop new products or services;
- Create and administer your account;
- Fulfill your orders, including by communicating them to our local restaurants, delivery networks (including third-party delivery marketplaces), ecommerce platforms, and other service providers;
- Respond to your requests, resolve disputes and/or troubleshoot problems;
- Understand your needs and interests, and tailor the features and content of the Services and communications to you;
- Communicate with you about the Services, including sending you announcements, updates, security alerts, and administrative e-mail notifications such as security or support and maintenance advisories;
- Enable security features of the Services, such as by sending you security codes via email or SMS, and remembering devices from which you have previously logged in.

**Research and Development.** We may use your information for research and development purposes, including to analyze and improve the Services and our business.

**Interest-Based Advertising.** We work with third-party advertising companies and social media companies that display ads on our Services and other online services. These companies use cookies and other technologies to collect data (including the Device Data and Usage Data described above) on your activity over time across our Services and other online services or your interaction with emails, which they use to try to tailor the ads you see online to your interests.

**Marketing.** We may send you offers and promotions from Sweetgreen, our affiliates, joint venture partners and other companies that offer products or services that may be of interest to you, in each case, as permitted by law.

**Compliance and Protection.** We may use your information if we believe in good faith that such disclosure is appropriate to:
- comply with applicable laws, lawful requests, and legal process, such as to respond to subpoenas or requests from government authorities;
- protect our, your, or others’ rights, privacy, safety, or property;
- enforce the terms and conditions that govern the Services;
- secure the Services, including to monitor for and respond to security incidents;
- prevent, identify, investigate, and deter any activity that is fraudulent, harmful, unauthorized, unethical, or unlawful or that violates the relevant terms and conditions governing the Services.

## Your Rights and Choices

Depending on the state where you reside, applicable data protection laws may provide you with certain rights regarding your "personal information" or "personal data" as defined in such laws. Specifically, you may have the right to ask us to:
- Inform you about the categories of personal information we collect or disclose about you;
- Provide you access to and/or a copy of certain personal information we hold about you;
- Correct or update personal information we hold about you;
- Delete certain personal information we have about you;
- Opt you out of the processing of your personal information for purposes of profiling.

**Additional Information for California Residents**
If you are a California resident, California law requires us to provide you with some additional information about how we collect, use, and share your “personal information” (as defined in the California Consumer Privacy Act (“CCPA”)).

| Category of personal information we collect            | How we use this personal information  | Categories of third parties to which we disclose personal information for a business purpose        | Categories of third parties to which we “sell” and/or “share” this personal information            |
|-----------------------------------------------------|--------------------------------------|-------------------------------------------------------------------------------------------------------------------|--------------------------------------------------------------------------------------------------------------------|
| Contact Information                                  | - Service Delivery                    | - Service Providers<br>- Payment Processors<br>- Affiliates<br>- Third Parties Designated by You<br>- Joint Marketing Partners and Joint Venture Partners<br>- Advertising Partners | - Joint Marketing Partners and Joint Venture Partners<br>- Advertising Partners                                     |
| Commercial Information                               | - Service Delivery                    | - Service Providers<br>- Payment Processors<br>- Affiliates<br>- Third Parties Designated by You<br>- Joint Marketing Partners and Joint Venture Partners<br>- Advertising Partners | - Joint Marketing Partners and Joint Venture Partners<br>- Advertising Partners                                     |
| Financial Information                                | - Service Delivery                    | - Service Providers<br>- Payment Processors<br>- Affiliates<br>- Third Parties Designated by You                | We do not sell or share.                                                                                            |
| Login Information                                    | - Service Delivery                    | - Service Providers<br>- Affiliates<br>- Third Parties Designated by You                                        | We do not sell or share.                                                                                           |
| Device and Online Activity Information               | - Service Delivery                    | - Service Providers<br>- Payment Processors<br>- Affiliates<br>- Third Parties Designated by You<br>- Advertising Partners | Advertising Partners                                                                                                 |
| Professional or Employment-related Information       | - Service Delivery                    | - Service Providers<br>- Payment Processors<br>- Affiliates<br>- Third Parties Designated by You<br>- Joint Marketing Partners and Joint Venture Partners<br>- Advertising Partners | Advertising Partners                                                                                                 |
| Demographic Information                               | - Service Delivery                    | - Service Providers<br>- Affiliates<br>- Third Parties Designated by You<br>- Joint Marketing Partners and Joint Venture Partners | We sell this information to Joint Marketing Partners and Joint Venture Partners.                                    |
| Precise Geolocation Data                            | - Service Delivery                    | - Service Providers<br>- Affiliates                                                                                | We do not sell or share.                                                                                           |
| Audio, Visual, and Other Sensory Data                | - Service Delivery                    | - Service Providers<br>- Affiliates                                                                                | We do not sell or share.                                                                                           |
| Communications Data                                  | - Service Delivery                    | - Service Providers<br>- Affiliates<br>- Third Parties Designated by You                                        | We do not sell or share.                                                                                           |
| Marketing Data                                       | - Service Delivery                    | - Service Providers<br>- Affiliates<br>- Third Parties Designated by You<br>- Joint Marketing Partners and Joint Venture Partners<br>- Advertising Partners | Joint Marketing Partners and Joint Venture Partners and Advertising and Related Analytics Partners                   |
| Inferences (derived from the above categories)       | - Service Delivery                    | - Service providers<br>- Affiliates<br>- Third Parties Designated by You<br>- Joint Marketing Partners and Joint Venture Partners | Advertising Partners                                                                                                 |
| Other Information (any other information you choose to provide to us) | - Service Delivery                    | - Service Providers<br>- Affiliates<br>- Third Parties Designated by You<br>- Joint Marketing Partners and Joint Venture Partners<br>- Advertising Partners | Joint Marketing Partners and Joint Venture Partners and Advertising and Related Analytics Partners                   |

## Changes to This Privacy Policy

This Privacy Policy may be updated from time to time for any reason. If we make material changes to this Privacy Policy, we will notify you by posting the new Privacy Policy at sweetgreen.com and changing the effective date listed at the top of this Privacy Policy. If required by law we will also provide notification of changes in another way that we believe is reasonably likely to reach you, such as via e-mail or another manner through the Services. Any modifications to this Privacy Policy will be effective upon our posting the modified version as described above (or as otherwise indicated at the time of posting). In all cases, your continued use of the Services after the posting of any modified Privacy Policy indicates your acceptance of the modified Privacy Policy.