Last Updated on September 30th, 2025
Introduction
At Shake Shack Canada, we prioritize your privacy and adhere to privacy regulations, including Quebec’s Act Respecting the Protection of Personal Information in the Private Sector. We aim to make it clear how we handle your personal information—what we collect, how we use it, who we share it with, and how we ensure its security.
By providing us with your personal information when interacting with our websites after being informed of this privacy notice, you consent to our use and disclosure of that information in the manner described in this policy.
In this policy, we’ll address:
We’re committed to ensuring your personal information remains safe and protected.
What Personal Information We Collect:
When you interact with our websites, we may ask for your Personal Information and collect data on your usage of our websites.
Types of Personal Information that we may collect:
We will only collect the following information where it is required and in connection with your use of the services described below:
How We Use Your Information
At Shake Shack Canada, we are dedicated to providing you with the best possible experience. To achieve this, we use your personal information (If granted) for several purposes, ensuring that our services are personalized, secure, and responsive to your needs. Here’s a breakdown of how we use your personal information, only when granted to us to use. Please note we never use information that is denied to us through our ordering application
Specific Personal Information Use
To fully access the website, as a user, you can register for an account by completing a registration form. Certain personal information is collected during this process, including your name and email address. This information is used to contact you, suggest appropriate products and services, and improve your user experience.
To place an order, as a registered user or guest, you must provide contact information (such as name and shipping address) and financial information (such as credit card number and expiration date). This data is used for billing and to fulfill your order. If there are issues with the order, we may use this information to contact you.
Personal information may be used without knowledge or consent in situations when legally required or permitted.
Information Retention
We will only retain your personal information for the duration necessary to fulfill the purposes for which it was collected. When defining the appropriate retention length, we consider the retention requirements in the applicable laws.
How We Protect Your Information
Securing your data is a priority for us, both online and offline. We have implemented appropriate safeguards to prevent personal data from being lost, misused, accessed, altered, or disclosed by unauthorized parties.
Shake Shack never sees or stores your credit card details. When you place an order, your payment information is securely encrypted and transmitted directly to the credit card processing networks through a protected ‘black box’ system.
Employees and third parties are provided only with personal data on a need-to-know basis and only the minimum amount they require to complete their specific job. All employees are also subject to confidentiality agreements and undergo annual training on the proper handling of sensitive data.
Procedures have been developed and tested to handle a potential data breach. These procedures are designed to ensure affected individuals and regulators are notified of the breach (if required by the applicable laws) and damages can be minimized.
Protecting Your Information
We follow a Zero-Trust model to ensure the security of your data, implementing robust safeguards in a controlled and secure environment. While we maintain reasonable administrative, technical, and physical measures to protect your personal information from unauthorized access, use, or disclosure, it’s important to note that no online method of data transmission or electronic storage is entirely risk-free. Although we employ commercially acceptable means to safeguard your data, we cannot guarantee its absolute security.
Your privacy is of paramount importance to us, and we continually strive to enhance and maintain the security of your personal information. Should you have any questions or concerns about data security, please don’t hesitate to contact us.
Cookies & Tracking
Cookies and Tracking Technologies
We utilize cookies and tracking technologies to enhance your experience and gather insights into website usage. These technologies help us understand how visitors interact with our websites.
Third-Party Services
We may engage third-party services. These services may place cookies on your device to collect data about your visits to our websites. This data includes page views, time spent on pages, and interactions with content.
How We Use Third-Party Data
We use data collected by third-party services to analyze website traffic, improve our services, and optimize your experience. This information is aggregated and does not allow for your direct identification.
Managing Your Preferences
You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may impact your browsing experience.
External Links
On our websites, you may encounter links to other third-party websites. Be aware that we are not responsible for the content or privacy practices of these other sites. We encourage all users to read the privacy notices of any other sites that collect your personal information.
Contacting us and/or Challenging Compliance