Taco Bell®Supplemental Notice For Residents Of Covered U.S. States
Last Updated: This Supplemental Notice For Residents Of Covered U.S. States was last modified on and is effective as of November 11, 2024. This Supplemental Notice For Residents Of Covered U.S. States supplements the information contained in our Privacy Policy and describes how Taco Bell processes personal information about residents of states that have privacy laws applicable to us that grant their residents the rights described below (collectively, the “State Privacy Laws”). In the event of any conflict or inconsistency between this notice and our Privacy Policy, this Supplemental Notice For Residents of Covered U.S. States will control for residents of states with State Privacy Laws. We maintain separate notices for California job applicants here. Unless otherwise expressly stated, all terms in this Supplemental Notice For Residents of Covered U.S. States have the same meaning as defined in our Privacy Policy or as otherwise defined by the privacy law of the state of your residence (such as, for California residents, the California Consumer Privacy Act of 2018, as amended (“CCPA”)). This Supplemental Notice For Residents of Covered U.S. States describes how we collect, use and share personal information of consumers in our capacity as a “controller” or “business” and describes the rights consumers in covered states may have with respect to their personal information.For purposes of this Supplemental Notice For Residents of Covered U.S. States, the terms “personal information” and “sensitive personal information” have the meanings provided to these terms (or analogous terms) by the State Privacy Laws, as applicable, and do not include information exempted from the scope of those laws. Similarly, for purposes of this Supplemental Notice For Residents of Covered U.S. States, the terms “sell,” “share,” and “targeted advertising” have the meanings provided to these terms by State Privacy Laws, as applicable, and do not include activities exempted from the scope of those laws.Your privacy rights. The State Privacy Laws may provide residents with some or all of the rights listed below. However, these rights are not absolute and some State Privacy Laws do not provide these rights to their residents. Therefore, we may decline your request in certain cases as permitted by law.

• Information.You can request information concerning whether we are processing your personal information as well as the following information about how we have collected and used your personal information:

  • The categories of personal information that we have collected.

  • The categories of sources from which we collected personal information.

  • The business or commercial purpose for collecting and/or selling personal information.

  • The categories of third parties with which we share personal information.

  • The categories of personal information that we sold or disclosed for a business purpose.

  • The categories of third parties to whom the personal information was sold or disclosed for a business purpose.

• Access

  . You can request a copy of the personal information that we have collected about you. If available in a digital format, you can request a copy of your personal information be provided in a portable and, to the extent technically feasible, readily usable format.

• Appeal.

  You can appeal our denial of any request validly submitted. If we deny your request, we will inform you of the reason for denying your request and provide you with instructions on how you may be able to appeal the decision. If we deny your appeal, we will also inform you, if applicable, of any online mechanism that may be available to you to submit a complaint to the applicable attorney general.

• Correction.

  You can ask us to correct inaccurate personal information that we have collected about you.

• Deletion.

  You can ask us to delete the personal information that we have collected about you and/or from you.

• Opt-out.

  • Opt-out of certain processing for targeted advertising purposes.

    We may process personal information for targeted advertising purposes. You can opt-out of certain processing of personal information for targeted advertising purposes.

  • Opt-out of profiling/automated decision making.

    We do not use your personal information to engage in profiling or perform automated decision-making that results in significant financial impacts, significant impacts on housing, education, employment, health care, or criminal justice, or similarly significant impacts.

  • Opt-out of other sales of personal information.

    You can opt-out of other sales of your personal information.

• Consumers under 16

  . We do not have actual knowledge that we collect, sell or share the personal information of consumers under 16 years of age.

• Sensitive personal information

  . While we process certain categories of sensitive personal information as described in our

  Privacy Policy

  , we do not process sensitive personal information for the purpose of inferring characteristics about consumers under the CCPA.

• Nondiscrimination.

  You are entitled to exercise the rights described above free from discrimination as prohibited by the State Privacy Laws.

Exercising your right to information/know, access, appeal, correction, and deletion. You may submit requests to exercise your right to information/know, access, appeal, correction, or deletion found here or by calling us toll free at 1-866-992-4115. You may submit requests to appeal via email to privacypolicy@yum.com or by calling us toll free at 1-866-992-4115. Exercising your right to opt-out of the “sale” or “sharing” of your personal information. Unless you have exercised your right to opt-out of sales and sharing of personal information, we may sell personal information to third parties for monetary or other valuable consideration and may share your personal information with third parties for cross-context behavioral advertising. Opt-Out of Sales. You have the right to direct us not to “sell” personal information we have collected about you to third parties now or in the future. The third parties to whom we sell personal information may use such information for their own purposes in accordance with their own privacy statements, which may include reselling this information to additional third parties. To exercise the right to opt-out of sales of personal information, you may submit a request by clicking the following link: Do Not Sell or Share My Personal Information.Opt-Out of Sharing / Targeted Advertising. You have the right to direct us to not “share” or disclose personal information for cross-context behavioral advertising (targeted advertising based on your personal information). Like many companies, we use services that help deliver interest-based ads to you. Certain State Privacy Laws may provide you with the right to opt out of the sharing of your personal information with the advertising partners that provide these services. These third parties use this information for, among other purposes, serving ads that are more relevant and may sell that information to, or share that information with, other businesses for advertising and other purposes. Note that opting out will not affect your receipt of advertising based on activities within or across our own websites or apps or the processing of your personal information solely for measuring or reporting advertising performance, reach, or frequency. To exercise the right to opt-out of the “sharing” or disclosure of personal information for purposes of targeted advertising, you may submit a request by clicking the following link: Do Not Sell or Share My Personal Information.Additionally, we also interpret browser-based universal opt-out preference signals (such as the Global Privacy Control), where applicable, as signals to opt out of the sale or sharing of your personal information for purposes of targeted advertising. You may opt out by broadcasting an Opt-Out Preference Signal, such as the Global Privacy Control (“GPC”) (on the browsers and/or browser extensions that support such a signal). If you choose to use the GPC signal, you will need to turn it on for each supported browser or browser extension you use.If you would like us to make the connection between your browser and your account when you send the opt-out of “sale” / “sharing” of your personal information request or GPC signal, and you have not yet opted out of “sale” / “sharing” your personal information, we recommend you submit the Do Not Sell or Share My Personal Information form by clicking the following link: Do Not Sell or Share My Personal Information. Verification of Identity; Authorized agents. We may need to verify your identity in order to process your information/know, access, appeal, correction, or deletion requests and reserve the right to confirm your residency. To verify your identity, we may require government identification, a declaration under penalty of perjury, or other information, where permitted by law. For example, we may request your email address and send you a link to verify your email address. Under some State Privacy Laws, you may enable an authorized agent to make a request on your behalf. However, we may need to verify your authorized agent’s identity and authority to act on your behalf. We may require a copy of a valid power of attorney given to your authorized agent pursuant to applicable law. If you have not provided your agent with such a power of attorney, we may ask you to take additional steps permitted by law to verify that your request is authorized, such as by providing your agent with written and signed permission to exercise your State Privacy Laws rights on your behalf, the information we request to verify your identity, and confirmation that you have given the authorized agent permission to submit the request. We cannot process your request if you do not provide us with sufficient detail to allow us to understand and respond to it. In certain circumstances, we may decline a request to exercise the rights described above, particularly where we are unable to verify your identity or locate your information in our systems. If we are unable to comply with all or a portion of your request, we will explain the reasons for declining to comply with the request.Personal information that we collect, use and disclose. We have summarized the personal information and sensitive personal information we collect, the purposes for which we collect it and the third parties with or to whom we may disclose, sell or share it or by reference below to both the categories defined in the “What Personal Information Do We Collect About You?” section of our Privacy Policy and the categories of personal information specified in the CCPA (Cal. Civ. Code §1798.140). The categories of personal information described below may be collected directly from you, automatically through tracking and other technologies, from Yum! Brands entities, affiliates and franchises, and from third parties such as social networks or services you use to log into the Service, as further described in our Privacy Policy. These charts describe our practices currently and during the 12 months preceding the effective date of this Supplemental Notice For Residents of Covered U.S. States. Information you voluntarily provide to us, such as in free-form webforms, may contain other categories of personal information not described below.

*Your personal information, including your sensitive personal information, may also be disclosed to third parties at your request or with your consent, to third parties in connection with a business transaction, and/or to law enforcement, regulators and other third parties for legal reasons.**Each of the categories of personal information that is sold or shared with third parties is sold or shared for purposes of marketing, advertising, analytics and service personalization.Additional information for California residents.

• Shine the light law.

  Under California’s Shine the Light law (California Civil Code Section 1798.83), California residents may ask companies with whom they have formed a business relationship primarily for personal, family or household purposes to provide the names of third parties to which they have disclosed certain personal information (as defined under the Shine the Light law) during the preceding calendar year for their own direct marketing purposes, and the categories of personal information disclosed. You may send us requests for this information to

  privacypolicy@yum.com

  . In your request, you must include the statement “Shine the Light Request," and provide your first and last name and mailing address and certify that you are a California resident. We reserve the right to require additional information to confirm your identity and California residency. Please note that we will not accept requests via telephone, mail, or facsimile, and we are not responsible for notices that are not labeled or sent properly, or that do not have complete information.

• Metrics Regarding Privacy Requests

The following metrics relate to our handling of California rights requests in the period from January 1, 2023, to December 31, 2023.

Contact Us. If you have questions or concerns about our privacy policies or information practices, please contact us using the contact details set forth in the “How to contact us?” section of our Privacy Policy. Please take note that we will not respond to requests not to sell or share your personal information or to delete, access, or correct personal information over email.NOTICE OF FINANCIAL INCENTIVEWe provide financial incentives to consumers who allow us to collect and retain personal information, such as Identifiers, such as your name and email address, and Commercial Information, such as your purchase history. These incentives may result in differences in our prices or services offered to consumers, and may include payments to consumers (e.g., free food), and/or a lower price for goods and services (e.g., discounts and other promotions). For example, the financial incentives we may provide include:

• Loyalty programs, where you earn rewards credits based upon spend levels.

• Discounts or free products for frequent visitors.

• Periodic promotional discounts and other offers.

The material aspects of any financial incentive will be explained and described in its program terms or in the details of the incentive offer. For details of our current loyalty program terms can be found here. Please note that participating in any financial incentive program is entirely optional and participants may withdraw from the program at any time. To opt-out of the program and forgo any ongoing incentives, please follow the instructions in the program’s terms and conditions, or contact us using the contact information in our Privacy Policy. Each financial incentive or price or service difference related to the collection and use of personal information is based upon our reasonable, good-faith determination of the estimated value of such information to our business, taking into consideration the value of the offer itself and the anticipated revenue generation that may be realized by rewarding brand loyalty and repeat purchases. We calculate the value of the offer and financial incentive by using the expense related to the offer.We use your information to create and manage your Taco Bell Rewards account (e.g., registration for events, online ordering, mobile payments, contests, promotions, etc.) and administer your participation in our programs, events and other offerings. More information on the information we collect as part of creating an account with Taco Bell Rewards is available in the Notice Of Financial Incentive found here.3/11/2025, 8:06:34 AM