Taco Bell® Privacy Policy
Taco Bell®Privacy Policy
Last modified: November 11, 2024
California Notice at Collection/State Law Privacy Rights See our Supplemental Notice for Residents of Covered U.S. States for important information about your rights under applicable state privacy laws. For California residents, click here for our California notice at collection.Yum! Brands, Inc. and its global subsidiaries and affiliate “Brands” (including, but not limited to, KFC Corporation, Pizza Hut, LLC, Taco Bell Corp., The Habit Restaurants, LLC, Yum Connect and Yum! Restaurant Services Group, LLC, which may include entities that you interact with under other names including Collider Labs, Tictuk, and DragonTail) (collectively, “Yum! Brands,” “we,” “our,” or “us”) is committed to protecting your privacy. This Yum! Brands Privacy Policy (this “Policy”) applies to our websites, online experiences, and mobile apps for Apple iOS, Windows, or Android mobile devices that link to this Policy (collectively, our "Sites"), and describes how we collect, use and disclose your personal information when you visit, use, order from, or make an account with our Sites or our restaurants and in-store kiosks, or otherwise engage with us (collectively, our "Service"). We may provide additional or supplemental privacy policies to individuals for specific products or services that we offer at the time we collect personal information. While Yum! Brands, Inc. does not directly own or operate any restaurants, we may, however, throughout this Policy refer to restaurants that are owned or operated by our Brands or our Brands’ franchisees. You may have been directed here from a Brand affiliate company to better understand how Yum! Brands uses your information. Our corporate group includes many affiliates and Brands, and this Policy applies to all of your interactions with Yum! Brands and our Brands, affiliates, and Services. The specific Brand, entity or affiliate which controls your information will depend on which Brand, entity, affiliate or Service you engage with. The data controller relevant to you may be found in the Jurisdictional Supplemental Disclosures found below.By accessing or using our Service, you signify that you have read, understood, and agree to our collection, storage, use, and disclosure of your personal information as described in this Policy and our Terms of Use, available on our Site, each as may be updated from time to time. See the “Your Choices and Control Over Your Information” section and the specific Jurisdictional Supplemental Disclosures section of this Policy to learn more about your choices with respect to our processing of your personal information.Note that many of our restaurants are operated by independent franchisees, who may have their own data collection practices and privacy policies that may apply, separately from this Policy.JURISDICTIONAL SUPPLEMENTAL DISCLOSURESWe may choose or be required by law to provide different or additional disclosures about our data privacy practices depending on your state or country of residence. Please review this section to understand how our practices or policies may differ in your jurisdiction:UNITED STATES. Residents of certain states in the United States that have privacy laws applicable to us should click here to view our Supplemental Notice for Residents of Covered U.S. States, which contains additional information about our data privacy practices and the rights such residents may have under applicable state privacy laws. CANADA. If you are a Canadian resident, please click here for additional information about our data privacy practices. EUROPE. Where we have an establishment in the European Economic Area ("EEA"), the United Kingdom or Switzerland, or if you are located in the EEA, the UK, or Switzerland, please click here to view our European Privacy Notice for additional information about our data privacy practices and your rights as a data subject.Click on the links below to jump to each section:
1. WHAT PERSONAL INFORMATION DO WE COLLECT ABOUT YOU?
We collect personal information in a variety of ways. For example, you may provide us your personal information when you place an order, register for an account or loyalty membership, make an online purchase, submit a query or complaint with our customer service team, post a review, send us messages, subscribe to our mailing lists, newsletters or other forms of marketing communications, participate in a survey, contest or sweepstakes, redeem a promotion, or use some other feature of our Service.We may link or combine your activities and information collected from you on our websites and mobile apps with information we have collected from you offline (e.g., in-store via kiosks or front counter), information we receive from third parties, as well as information we collect automatically through tracking technologies (defined below). These third-party partners include, but are not limited to, FullStory, Meta, Google Analytics, Microsoft, Braze, Mparticle, and Splunk, whose privacy policies may be different than our own, and where you may make your privacy choice preferences through methods available on their websites. By visiting our Sites, you agree that your information may be shared with these third parties to perform ad measurement and other services.The categories of personal information we collect include: Information you provide in-store or through customer service interactions:
In-store location information.
In some locations, we may work with third-party partners that collect location and movement data from your mobile device when you’re using a mobile app configured for this purpose. We receive aggregated information about visitors to our stores and may use this data to analyze foot traffic patterns and measure the effectiveness of our marketing and promotional campaigns. If you have a loyalty account with our Brand, we may offer you the ability to see a menu that is tailored to your preferences by connecting your account to a location. See “Your Choices and Control Over Your Information” below to learn how you may adjust location data collection through your mobile device.
In-store Wi-Fi.
In some locations, we may offer free Wi-Fi services to our guests. Our Wi-Fi network providers may capture certain data from devices you connect to it such as a unique device identifier. We may also enable Bluetooth or other technologies in our stores, which enables us to detect the presence of your device in our stores and also provides us with operational insights.
Information related to your order and customer service communications.
Some locations may collect information about you and your order in accordance with the law and technology available at the store location. The types of information collected will be clearly identifiable in the store location, and you may be able to opt out of the collection in ways that are indicated. These include new technologies, including those utilizing artificial intelligence (“AI”). For example, we may record or otherwise capture your interactions with our drive thru service or customer service lines in order to take and transcribe your verbal orders and for quality assurance and service improvement purposes, including AI training. Other technologies that we may use include technology to recognize vehicles in our drive-thrus or other image recognition.
CCTV We may use CCTV in our stores or restaurant service centers to capture video footage and images of individuals within and around our premises. In particular, we only use CCTV where it is lawful to do so, and for the following purposes:
To prevent and detect any crime, misconduct, accidents, and/or health and safety issues within our stores or restaurant service centers;
To report incidents involving any crime, misconduct, accidents and/or health and safety issues to relevant management within our organization and to take appropriate follow-up action;
To report any alleged criminal activity involving incidents within our stores or restaurant service centers to the appropriate law enforcement authorities, and to assist law enforcement authorities with their investigations into any such alleged criminal activity;
To ensure the security of our property, systems and facilities and to protect our assets against the risk of any form of damage, destruction or fraudulent activity;
To provide us with evidence in order to pursue or defend legal proceedings issued by or against us in relation to any activities within our stores or restaurant service centers;
To assist us in the ongoing operational management of our stores and restaurant service centers, including dealing with any complaints and/or internal investigations; and
To enable us to carry out analytics and improve operations within our stores and restaurant service centers.
Other Information you provide:
Contact and profile information
. We may collect personal information, such as your name, phone number payment card information, business information, gender, age, date of birth, postal/zip code, address, and e-mail address, when you register for our Service, place an order, sign up for our mailing list, participate in an offer or loyalty program, redeem or participate in a promotion, enter a contest or sweepstakes, purchase or redeem a gift card, or otherwise communicate or interact with us. We use this information to create, verify and personalize your account, to fulfill your request or transaction, to communicate with you directly, and to send you marketing communications in accordance with your preferences and as permitted by law.
Payment and transaction information
. We and our franchisees may collect information such as items purchased, date and time of your transaction, amount purchased, whether you used a particular coupon or deal, and payment information, such as your credit/debit card or gift card or loyalty program details, when you make an in-store or online purchase. We use this information to fulfill your order and complete your transaction, update your rewards, streamline future transactions (e.g., where your payment information has been saved in any of our apps), detect and prevent fraud, and to inform our advertising and marketing activities.
Comments, chat and opinions
. When you contact us directly (e.g., by email, phone, mail, in-app messages or by completing an online form or participating in online chat), we may collect your comments and opinions, and may also utilize AI technologies to transcribe your comments and opinions. We may also store comments and opinions you express when responding to surveys, entering a contest or sweepstakes, submitting a query, complaint or compliment with our customer service team, or taking part in a promotion or competition. We use this information to respond to your questions or comments, to evaluate and improve our products and services, including for AI training purposes, and to inform our marketing and advertising activities.
Information we collect when you use our Sites and our Services:
Location information.
We may collect information about your general location if you provide your physical address or postal/zip code or we may approximate your general location based on your IP address. We may use your general location information to provide personalized content and advertising, to enhance your customer experience, to allow you to view deals and products available to you based on your general location, to assist us with analytics such as foot traffic measurement, and to improve the effectiveness of our websites, restaurants, mobile applications, merchandise, advertising, and customer service. We may also use your general location information to provide you with more information regarding events, personalized offers regarding products, services, or other opportunities, and notifications (such as through our app, email, or via social media) which may interest you. If you provide our mobile applications with access to location services on your device, or when you look up stores on our websites, in order to facilitate the transaction, we and our third-party providers may collect more precise geolocation data through GPS, Wi-Fi, wireless network triangulation or other similar methods, such as the Google Maps Application Programming Interface in order to facilitate transactions by finding your closest store. Google uses various technologies to determine your location, including your IP address, GPS, and other sensors that may, for example, provide Google with information on nearby devices, Wi-Fi access points, and cell towers. By using these services, you are directing us to share your geolocation data with Alphabet, the parent company of Google. These services are governed by Alphabet and control of your choices and data is governed by Alphabet if you choose to engage with precise store mapping or delivery using your web browser, phone, or app. Use of Google Maps features and content is subject to the Google Maps/Google Earth Additional Terms of Service and the Google Maps Privacy Policy.
Information you may post or submit to our Sites
. We may collect information about how you use and interact with our Sites and our Service, including any content you post to the Service. If you share photos and video from a mobile device, we will access your device camera roll and camera with your permission as needed to post your content. We also offer customer service messaging functionality on many of our sites and mobile apps, which may include automated “chatbots”. Your conversations with our chatbots may be recorded and transcribed for quality assurance and service improvement purposes, including for AI training. Chatbot functionality may be provided through a third-party, in which case your communications will be transmitted to a third-party and you consent to such transmission by using the service.
Address Book information
. With your permission, and depending on the country in which you reside, we may access your contact list available on your mobile device or your email accounts, or you may choose to provide your friends’ contact information manually, so that you can send invitations or special content to your friends. Please do not share anyone’s personal information with us without their permission. When communicating with your friends, we may include your name and photo in order to let them know that you are the person extending the invitation or sending the message. With your permission, we may also send reminder emails to your friends on your behalf, which may also include your name and photo, and enable you to send invitations to your friends via email or SMS/text. We may retain the additional email addresses you have provided to let you know when the recipient received a gift card or other communication from us.
Information you provide when you participate in a charitable partnership or philanthropic program.
We may collect information about how you interact with or donate to, via kiosk or special purchases, fundraising initiatives, programs we may sponsor, jointly support with a third-party non-profit organization or directly support through our Brands’ charitable entities and non-profits including (without limitation): the KFC Foundation, the Taco Bell Foundation, and the Pizza Hut BOOK IT! Program.
Information provided by others:
Information provided by social networks.
When you interact with our Service through various social media networks, such as when you “Like” us on Facebook or when you follow us or share our content or comment on our content on Facebook, Twitter / X, Snapchat, LinkedIn, Instagram or other social networks, we will receive some information about you to the extent that you have permitted the social network to share information about you with third parties. We use this information to complete your profile, to better understand the demographics of our customers and to inform our advertising and marketing activities. The data we receive is dependent upon your privacy settings with the social network. You should always review and, if necessary, adjust your privacy settings on third-party websites and social media networks and services before linking or connecting them to our Sites or Service.
Information we receive from services connected to our Service
. Some parts of our Service may allow you to login through a third-party social network or authentication service, such as Facebook or Google. These services will authenticate your identity and provide you with the option to share certain personal information with us, which could include your name, email address, address book and contacts, or other information. The data we receive is dependent on that third party’s policies and your privacy settings on that third-party site. If you choose to connect a Google or Gmail account to our Sites, we will ask you to grant us application permissions to access your Gmail account. These permissions are necessary to sustain the functionality of our Sites. We will store your authentication token and account email address. This data will be stored securely to be used by us to provide you with the Service (including but not limited to logging into your account and sending emails). This data will not be voluntarily shared with any third parties, but we may provide this information to legal authorities upon their lawful request. Should you choose to disconnect your Gmail account or decide to close your account, any information from Google that is stored on our servers will be removed permanently. We do not use data obtained from our customers (from their Google accounts) for advertising purposes. We may need access to the user data to resolve a support issue, provide advice on service usage or provide any other help requested by the user, or as such access may be necessary for a security investigation or to comply with applicable laws.
We may offer Face ID, Touch ID or fingerprint authentication as a log-in method if you access the Service through an Apple or Android device equipped with authentication technology. We are only notified as to whether the authentication was successful and cannot access the data associated with the enrolled fingerprint or facial scan. For more details, please refer to the fingerprint or facial scan security guides offered by your device provider.We collect information that may include video recording and/or transcription of the communications content from individuals or entities that use our technology services. When recording or transcription is activated (for instance, while using an application such as Microsoft Teams), you will be alerted through the service and are consenting to this by continuing to participate in the training program or business communication. When you participate in or provide information through a training program or business communication, we will retain this information in accordance with our retention policy.
Information provided by others
. From time to time, we may receive information about you from other third parties and other users. For example, we may obtain information from our marketing partners or from third parties to enhance or supplement our existing user information. We may also collect information about you that is publicly available. We may combine this information with the information we collect from you directly.
Information provided by Yum! Brands entities and Brand franchisees.
We may receive information about you from other Yum! Brands companies, affiliates, and other Brands, or our franchisees, or the franchisees of other Brands, so that information you provide to one Brand, affiliate or Brand franchisee may be used by another Brand or by us to provide you services, develop more complete customer profiles for analytics, marketing research, to develop new products, understand our customers, and to communicate with you or provide you advertisements or other personalized content, in accordance with your permissions and applicable laws.
2. HOW DO WE USE PERSONAL INFORMATION?
To fulfill your requests and provide our Services to you.
For example, we or our Brands or Brand franchisees may use your information to complete your order or other online and in-store transactions, deliver orders you place online, provide contests, sweepstakes, or other promotions, or respond to your customer service requests or feedback. We may also use your information to personalize your experience with us. Your information for personalization also helps facilitate our rewards or loyalty programs, which may share your information across Brands to support your experience. We also use this information to provide the Service to you across our operations, including by supporting your in-store experience when you engage with our Brands or Brand franchisee-owned locations.
For marketing, advertising and analytics purposes.
We may send you communications about new features, updates, products and special offers. We and our third-party partners may also use your information to serve you ads about products and special offers about our products or other products or services we think you might find interesting. We may also use individual and aggregate information about you to develop more complete customer profiles to develop new products, understand our customers, and to inform our marketing and advertising campaigns. This profile information will be used by Yum and our Brands and affiliated entities to engage in analytical modeling to understand performance, preferences, and make projections that we may share in aggregated or non-identified form with our Franchisees. For more information on your choices about marketing communications, see “Your Choices and Control Over Your Information” below. Personal, non-public information collected from you via our SMS short code communications (in jurisdictions where this is applicable) will not be disclosed to third parties (excluding Affiliates) for their own advertising purposes. We also use service providers such as The Trade Desk, that specialize in marketing technologies designed to create targeted advertising, by converting email address/phone numbers into identifiers used for advertising purposes. If we engage in this type of marketing and advertising, we will provide you with an opportunity to opt-out of this advertising by completing the form to opt out of the third-party sale or processing of your information, or to otherwise revoke consent, as determined by local law.
To communicate with you.
We will use automated decisioning and analytical modeling to determine the best way to communicate with our customers, including with tailored offers.
For example, we may communicate with you about your account activities, such as by providing you transaction confirmations, or alerting you when a gift card you sent has been received by the recipient. If you register an account or make an order where you provide a phone number or email, we may enroll you in our email marketing communication or other periodic electronic communications and may also send you user surveys and promotional communications. We may communicate with you by email, postal mail, telephone, text message, or other means. We may use push notifications on our mobile apps to your mobile device. For more information on how to adjust your communications preferences, see “Your Choices and Control Over Your Information” below.
To monitor, improve and develop our products and services.
We may use your information to understand our visitors and customers and tailor our product offerings accordingly and to otherwise improve our services and develop new products and services. For example, orders may be used in automated systems or with AI to, among other things, understand orders and trends, to improve efficiency, and to assist Franchisees with understanding their inventory and staffing demands. We may use your interactions with our Services as the basis for developing new customer service capabilities; for example, by using records of your website chats with our chatbot or drive-thru voice orders or phone call recordings with our customer service team, and tracking order speed to train artificial intelligence and measure our customer service efficiency. We do not use your voice information to create “voiceprints” or other biometric identifiers to identify you. Your personal information may be used in combination with Yum! Brands’, its subsidiaries’ and affiliates’, and Brands’ personal information and transactions in order to understand our visitors, customers, and product responses. From time to time, we analyze statistics and trends to make our Sites and Services better and to develop new services or features.
Events, promotions and contests. We may use your personal information to:
administer promotions and contests
communicate with you about promotions or contests in which you participate
contact or market to you after collecting your personal information at an event
To protect the security and integrity of our business, comply with legal requirements and obligations, or as otherwise permitted by law.
We may use information to protect our company, our customers, our Brands and our websites. We may also use information in order to comply with laws, regulations, court orders, or other legal obligations or to assist in an investigation, to protect and defend our rights and property, or the rights or safety of third parties, to enforce our Terms of Use , this Policy, or agreements with third parties, to detect and prevent fraud or for crime-prevention purposes, or for any other reason permitted by law.
To create aggregated, de-identified and/or anonymized data
. We may create aggregated, de-identified and/or anonymized data from your personal information and other individuals whose personal information we collect. We make personal information into de-identified and/or anonymized data by removing information that makes the data identifiable to you and we will not attempt to reidentify any such data. We may use this aggregated, de-identified and/or anonymized data and share it with third parties for our lawful business purposes, including to analyze and improve the Service and promote our business and to train our AI models and for other machine learning purposes.
Further uses.
In some cases, we may use your personal information for further uses, in which case we will ask for your consent to use of your personal information for those further purposes if they are not compatible with the initial purpose for which information was collected.
3. WHAT INFORMATION MAY BE COLLECTED AUTOMATICALLY?
When you use our Sites and Services, read our emails, or otherwise engage with us through a computer or mobile device, we and our third-party partners may automatically collect information about how you access and use the Service and information about the device you use to access the Service.We typically collect this information through a variety of tracking technologies, including cookies, software code or software development kits, Flash objects, web beacons, embedded scripts, location-identifying technologies, and similar technology (collectively, “tracking technologies”). Information we collect automatically about you may be combined with other personal information we collect directly.Specifically, we and our third-party partners may use tracking technologies to automatically collect usage and device information, such as:
Information about how you access the Service,
such as the site from which you came and the site to which you are going when you leave our Sites, how frequently you access the Service, when and whether you open emails or click the links contained in emails, whether you access the Service from multiple devices, and other actions you take on the Service.
Information about how you use the Service, such as the pages you visit and the items and content that you view, click on, or scroll through, your mouse movements, your keystrokes/key touches, information that you type or enter, the ads you view and click on, purchase information and your checkout process, your location when you access or interact with our Service, and other similar actions. For example, we use session-replay technologies, such as those provided by Fullstory or Splunk that employ software code to record users’ interactions with the Service in a manner that allows us to watch video replays of those user sessions. In some countries, we may also utilize session-replay technologies, which are software code to log your interactions with the Sites in a manner that allows us to reproduce or review the items and content that you view, click on, or scroll through, your mouse movements, your keystrokes/key touches, and other information that you type or enter during your browsing session. This information allows us to provide you with a personalized experience regardless of how you interact with us, and helps us diagnose any usability problems to improve our Service, identify areas for improvement, and verify that users are not bots for security purposes. You can learn more about our providers and their privacy policies here: Fullstory Privacy Policy | Fullstory Splunk Privacy Policy | Splunk
Information about the computer, tablet, smartphone or other device you use,
such as your IP address, browser type, Internet service provider, platform type, device type/model/manufacturer, operating system, date and time stamp, a unique ID that allows us to uniquely identify your browser, mobile device or your account (including, e.g., a persistent device identifier or an Ad ID), and other such information. For example, we may collect this information if you connect to our in-store Wi-Fi, or if your mobile device is configured to search for available Wi-Fi networks, we may receive information about your device even if you don’t connect to our Wi-Fi services. Additionally, we use chat technologies, such as those provided by Yum, Quiq, Yellow AI, and others depending on your location that employ software code to operate the chat features that you can use to communicate with us through the Service. Yum and other third parties may access and use information about webpages visited on our website, your IP address, your general geographic information (e.g., city, state), and other personal information you share through online chats for the purposes described in this Policy.
Analytics information.
We may collect analytics data, or use third-party analytics tools, to help us measure traffic and usage trends for the Services and to understand more about the demographics and behaviors of our users. Where required by law in countries where you browse our sites, you provide your written authorization in jurisdictions where it is required to collect and transmit your behavior (such as videos watched on our site, webchats or comments, and register of communications) by accepting and agreeing to the notice that may appear when you first visit our site.
We, or our third-party partners, may collect and use the data collected through tracking technologies to: (a) remember information so that you will not have to re-enter it during your visit or the next time you visit the Sites; (b) provide custom, personalized content and information, including targeted content and advertising; (c) better understand the interests of our customers and Site visitors; (d) identify and contact you across multiple devices; (e) provide and monitor the effectiveness of our Service; (f) perform analytics and detect usage patterns on our Service; (g) diagnose or fix technology problems; (h) detect or prevent fraud or other harmful activities, and (h) otherwise to plan for and enhance our Service.We and our third-party partners may collect information about you, including for targeted advertising purposes, whether you are logged into an account or not, and may associate this tracking data with your registration information or other identifiable data; in which case, we will treat your tracking data as personal information. Your choices to control tracking technologies. You may control cookies and other online tracking technologies by managing your browser-based cookie settings or you may be able to use the options in your web browser, or the options provided when you visit one of our websites (e.g., the options presented via a cookie banner), in order to make your selection, depending on your location. If you disable cookies, you may not be able to take advantage of all the features available on a website. Service providers acting on our behalf may also offer you choices to control whether your data is sent to them on their own service websites. See the “Your Choices and Control Over Your Information” section, below, for more information. Do Not Track. You may use the options in your web browser to delete cookies or, if available, make selections within one of our websites to control your cookie settings. Some web browsers may allow you to select a “Do Not Track” option. However, we currently do not respond to “Do Not Track” signals, as a uniform technological standard has not yet been developed. Please note that if you disable or delete certain cookies, this may affect your ability to access, view or use all of the available features on a website. In some jurisdictions, we respond to Global Privacy Control settings enabled in your web browser as required by applicable law.
4. HOW WE SHARE YOUR INFORMATION?
We may share, sell or disclose your information in the instances described below. For further information on your choices regarding your information, see “Your Choices and Control Over Your Information” below.
Our Brands:
Yum! and its Brands and our affiliates may disclose, sell or share personal information between our Brands and our affiliates, who may similarly use your information in the manner described in this Policy. Yum! Brands may collect, collate, aggregate, and store information combined from our Brands, subsidiaries, and affiliates.
This information will be used to understand purchasing patterns, understand customer preferences, and to assist business decisions regarding products, marketing, and services.
Our Brands’ franchisees:
Many of our Brands’ restaurants are independently owned and operated by third-party franchisees, who are wholly separate and independent organizations with their own privacy policies. We will disclose personal information to our franchisees, particularly when we collaborate in providing the Service to you, such as, to process payments, provide loyalty program details or facilitate delivery and carry-out services that you may request through the Service. For example, we may need to disclose certain personal information with a franchisee to provide or facilitate the Service or to ensure quality assurance for our Brands. Please note that our franchisees operate independently and they will have their own privacy policies and data collection, retention policy and use practices that are not governed by this Policy.
Third parties at your request:
You may choose to share your activities on the Service with your friends through email, text or on various social media networks. Other third-party business partners involved in your customer experience may also receive your information, such as food delivery platforms.
Promotional partners:
We may sell or share limited information with third parties with whom we partner to provide contests and sweepstakes, or other joint promotional activities. These partners will usually be clearly identified in the contest rules or promotional materials.
Business partners:
We may sell or share limited data with certain business partners, such as our preferred marketing and strategic business partners who may provide you with information and marketing messages about products or services that may interest you. These parties may use your information in accordance with their own privacy policies.
Advertising partners:
We may sell or share information with third-party online advertising partners or permit these partners to collect information from you directly on our Sites to facilitate online advertising.
The public:
When you provide feedback or post user content on our Service (e.g., if you post a product review on our Sites or comment on our social media sites), your information (e.g., your first name, last initial, state of residence, and your comments) may be displayed on our Sites or on our social media pages. When you engage with us on social media, we may tag your social media account or the social media account of others (e.g., to give photo credit to another user).
With notice, your consent, or at your direction:
In addition to the sale, sharing and disclosure described in this Policy, we may share information about you with third parties whenever you consent to or direct such sharing or with notice to you in compliance with applicable laws.
Other instances in which we may disclose your personal information:
Service providers and advisors:
Personal information may be disclosed with third-party service providers who perform services for us or on our behalf. This may include vendors and providers who engage in marketing or advertising activities or provide mailing or email services, tax and accounting services, product fulfillment, delivery services, payments processing, data enhancement services, fraud prevention, web hosting, chatbot functionality, or analytic services. Increasingly, our service providers use AI to assist us with providing technology, services, and information to you, our Brands and affiliates, and our Franchisees. Where we use AI, we may train such systems using your data, depending on the way you are interacting with us and if required by applicable law, where we have your permission to do so.
Purchasers and third parties in connection with a business transaction:
Personal information may be disclosed to third parties in connection with a corporate transaction, such as a merger, sale of any or all of our company assets or shares, reorganization, financing, change of control or acquisition of all or a portion of our business by an affiliate or third party, or in the event of a bankruptcy or related or similar proceedings. In any such case, the recipient parties will be contractually required to keep the information confidential and use it only for the purposes of the transaction, or proposed transaction, in question. In the event a business transaction is completed, assignees or successors of our business or assets may use and disclose personal information obtained from us only for the purposes set out in this Policy, unless further consent is obtained.
Law enforcement, regulators and other parties for legal reasons:
Personal information may be disclosed to third parties, as required by law or subpoena, or if we reasonably believe that such action is necessary to (a) comply with the law and the reasonable requests of law enforcement; (b) to enforce our Terms of Use or to protect the security or integrity of our Service; and/or (c) to exercise or protect the rights, property, or personal safety of our organization, our visitors, or others.
5. RELATIONSHIP WITH FRANCHISEES AND FRANCHISE DATA.
Our Brands’ Relationship with Franchisees. Many of our Brands’ restaurants are independently owned and operated by third-party franchisees, who are wholly separate and independent organizations with their own privacy policies. When you interact with a franchisee, such as placing an order in a store location, your interaction with that franchisee will be governed by that franchisee’s privacy policy, which may be different from this Policy. Please note that our franchisees operate independently and they will have their own privacy policies and data collection, retention policy and use practices that are not governed by this Policy.
6. YOUR CHOICES AND CONTROL OVER YOUR INFORMATION.
Please see the Jurisdictional Supplemental Disclosures for your jurisdiction or location for more complete information on your choices and control over your information. You will not be unlawfully discriminated against for exercising your legal privacy rights in accordance with the policies and procedures described therein.Profile and settings: You may update your account information and adjust your account settings by logging into your account. You may not be able to change your account information that is tied to aspects of active Services provided to you (such as your email address), and deleting your account may result in loss of accumulated rewards or promotions. Some changes may not be made on certain platforms, or take some time to take effect. In order to ensure our records are as complete and accurate as possible, customers/users are responsible for informing us of any relevant changes to their personal information, such as a change of name, a change of address, or a change in any other pertinent information.How to control your email preferences: You can stop receiving promotional email communications from us by clicking on the “unsubscribe link” provided in such communications. We make every effort to promptly process all unsubscribe requests. You may not opt out of service-related communications (e.g., account verification, transactional communications, changes/updates to features of the Service, technical and security notices). You may also be able to adjust certain communications preferences by logging into your account. Online advertising and tracking. You may be able to limit use of your personal information for interest-based advertising through the following settings/options/tools:
Browser settings
. Changing your internet web browser settings to block third-party cookies.
Privacy browsers/plug-ins
. Using privacy browsers and/or ad-blocking browser plug-ins that let you block tracking technologies.
Platform settings. Certain platforms offer opt-out features that let you opt-out of use of your information for interest-based advertising or analytics. For example, you may be able to exercise that option for the following platforms, respectively, by visiting the websites provided and following any related instructions:
Google (advertising): https://adssettings.google.com/
Google (analytics): https://tools.google.com/dlpage/gaoptout?hl=en
Facebook: https://www.facebook.com/about/ads
X: https://help.x.com/en/safety-and-security/privacy-controls-for-tailored-ads
LinkedIn: https://www.linkedin.com/mypreferences/d/categories/ads
Ad industry tools. Opting out of interest-based ads from companies that participate in the following industry opt-out programs:
Network Advertising Initiative: http://www.networkadvertising.org/managing/opt_out.asp
Digital Advertising Alliance: optout.aboutads.info
AppChoices mobile app, available at https://www.youradchoices.com/appchoices
, which will allow you to opt-out of interest-based ads in mobile apps served by participating members of the Digital Advertising Alliance.
Mobile settings. Using your mobile device settings to limit use of the advertising ID associated with your mobile device for interest-based advertising purposes. You may also be able to adjust your location services settings on your mobile device to limit the use of your precise geolocation for advertising purposes. Additionally, you can withdraw permission for the Service to access your address book, location, photo stream, and camera.
You will need to apply these opt-out settings on each device and browser from which you wish to limit the use of your information for interest-based advertising purposes. We cannot offer any assurances as to whether the companies we work with participate in the opt-out programs described above.
7. HOW WE STORE AND PROTECT YOUR INFORMATION.
Data storage and transfer: Your information collected through our Services may be stored and processed in the United States or any other country in which Yum! Brands, its affiliates or service providers maintain facilities, where it will be subject to the laws of the jurisdiction in which it is stored. If you are located in regions with laws governing data collection and use that may differ from U.S. law, please note that we may transfer information, including personal information, to a country and jurisdiction that have data protection laws that may be more or less restrictive than those required under U.S. law. Data retention: We will retain your personal information for only as long as reasonably necessary to maintain the Service, to meet legal and accounting obligations, and for the other purposes described in this Policy, or as otherwise required or permitted by law. We may anonymize and/or aggregate personal information and store such anonymized/aggregated information in order to analyze aggregate metrics and trends. To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means, and the applicable legal requirements. When we no longer require the personal information we have collected about you, we will either delete or anonymize it or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible. If we anonymize your personal information (so that it can no longer be associated with you), we may use this information indefinitely without further notice to you.Keeping your information safe: Security of your information is very important to us, and we have put in place appropriate technological, physical and contractual safeguards designed to preserve the integrity and security of information we and our service providers collect, retain and disclose. However, no security system is impenetrable and we cannot guarantee the security of our systems at all times. In the event that any information under our control is compromised as a result of a breach of data security, we will take reasonable steps to investigate the situation and, where appropriate or otherwise required by law, notify those individuals whose information may have been compromised and take additional steps, in accordance with any applicable laws and regulations.
8. CHILDREN’S PRIVACY.
Our Service is not intended for children under 16 years of age and we request that individuals under the age of 16 not provide us with personal information. In the event we learn that we have inadvertently collected personal information from a child under age 13, we will delete that information as quickly as possible. We urge parents to regularly monitor and supervise the online activity of their children, including visiting websites or using mobile apps. If you are a parent or guardian of a minor and you have reason to believe your child or ward under the age of 13 has provided us with their personal information without your prior consent, or if you believe that we may have collected personal information from your child or ward under the age of 13, please contact us to request deletion of their personal information using the contact information in the “How to contact us?” section below. For more information on specific country protections relating to the information of children, please review the specific Jurisdictional Supplemental Disclosures above.
9. LINKS TO OTHER WEB SITES AND SERVICES.
The Service may contain links to and from third-party websites of our business partners, advertisers, and social media sites and users may post links to third party websites. If you follow a link to any of these websites, please note that these websites have their own privacy policies and we do not accept any responsibility or liability resulting from you following a link to these third-party websites. We may also make third party apps, tools, widgets, or plug-ins available to you on the Service, such as Facebook “Like” buttons, which may use automated methods to collect information about how you use these features. These third parties may use your information in line with their respective policies. Additionally, other privacy policies may apply when you engage with us through a co-branded or co-sponsored promotional or marketing activity. Additionally, if you access any social media or other third-party services through the Service to login or to share information about your experience of the Service with others, we may collect information about you from these third-party services. We strongly recommend that you read the privacy policies and terms and conditions of use of any third-party website, app or service to understand how your information will be collected, used and shared. You may also see our Brands offered for sale on third-party delivery apps and websites. We are not responsible for the privacy practices or the content on any third-party apps or websites.
10. HOW TO CONTACT US?
Where appropriate, we provide you with choices as to how we use your personal information. You may also have certain rights under applicable data protection laws, which you may exercise free of charge. For more information regarding these rights, and the countries where these rights are available, please refer to the terms of the specific Jurisdictional Supplemental Disclosures above and the local contact information provided in these specific Jurisdictional Supplemental Disclosures. The contact details of our data protection officer, if one is appointed, can also be found in the specific Jurisdictional Supplemental Disclosures. If you are located in a country or region that is not included in the list of Jurisdictional Supplemental Disclosures above, you can contact us about this Privacy Policy and/or how we process your personal information by sending an email to privacypolicy@yum.com. Any personal information you submit will be used in accordance with this policy in order to answer your questions or fulfill your request. We may use this information to contact you with follow-up responses.
11. DATA SUBJECT RIGHTS OF INDIVIDUALS IN EUROPE.
Data subject rights of individuals in the European Economic Area (“EEA”), the United Kingdom and Switzerland: If you are located in the EEA, the United Kingdom, or Switzerland, you have the following data subject rights in relation to the personal data we hold about you:
Right to object.
You have the right to object to any processing of your personal data based on our legitimate interests where there are grounds relating to your particular situation. You have the right to object to marketing activities for any reason.
Right of access.
You have the right to obtain access to your personal data.
Right to rectification.
You have the right to obtain the rectification of your personal data without undue delay where such personal data is inaccurate or incomplete and requires to be updated.
Right to erasure.
You have the right to obtain the erasure of your personal data without undue delay in certain circumstances, for example where the personal data is no longer necessary for the purposes for which it was collected or processed.
Right to restriction.
You have the right to obtain the restriction of the processing we carry out on your personal data in certain circumstances, for example where you contest the accuracy of the personal data, for a period of time allowing us to verify the accuracy of that personal data.
Right to data portability.
You have the right to data portability – this right allows you to easily move, copy, or transfer personal data from one organization to another.
Right to withdraw consent.
You have the right withdraw your consent to the processing of your personal data at any time in those cases where we rely on your consent as the lawful basis for processing your personal data. Please note that the withdrawal of your consent will not affect the validity or lawfulness of any processing of your personal data that took place before the withdrawal of your consent.
If you wish to exercise any of these rights, please click on the following links: (i) for KFC, please click here; (ii) for Pizza Hut, please click here; or (iii) for Taco Bell, please click here. Alternatively, you can also exercise any of these rights by contacting us using the contact details set out in our European Privacy Notice (please see the relevant link in the Jurisdictional Supplemental Disclosures above).You also have the right to lodge a complaint with your local data protection authority. For individuals located in the EEA, further information on how to contact your local data protection authority can be found at: https://www.edpb.europa.eu/about-edpb/about-edpb/members_en.For individuals located in the United Kingdom, the relevant local data protection authority is the Information Commissioner’s Office (“ICO”). Further information on how to contact the ICO can be found at: https://ico.org.uk/for-the-public/.For individuals located in Switzerland, the relevant local data protection authority is the Swiss Federal Data Protection and Information Commissioner (“FDPIC”). Further information on how to contact the FDPIC can be found at: https://www.edoeb.admin.ch/edoeb/en/home/deredoeb/kontakt.html.
12. CHANGES TO OUR PRIVACY POLICY.
We may modify or update this Policy from time to time to reflect the changes in our business and practices, so you should review this Policy periodically. When we change this Policy in a material manner, we will notify you by updating the “last modified” date in the heading of this Policy or through other appropriate means. If you object to any changes in this Policy, you may close your account associated with the Services, or exercise your rights as described in your local JURISDICTIONAL SUPPLEMENTAL DISCLOSURES.