Effective as of June 30, 2021
Information You Provide to Us
We collect information that you provide to us, depending on how you interact with us. For example, you may provide information to us when you:
(a) Sign up for our loyalty programs, events, or communications
During the sign-up or registration process or when you communicate with us, you may provide information such as your name, email address, physical address, phone number, mobile phone number, date of birth and/or age.
(b) Participate in promotions and events or respond to surveys and feedback requests
You may provide information to us about you, your household and/or other personal attributes through promotions, events, surveys, and feedback. This information may include your name, your contact information, name and age of your family members, (including your children), and other information you provide to us when you participate in an event or provide survey responses or feedback content. We may use this information to administer your participation in the promotion, event or survey and to respond to your feedback as well as for analysis either on an aggregate or identifiable basis.
(c) Order or purchase our products or services
You may provide your payment information to us (or we may process your payment information on behalf of another CFA Group entity or Franchised Operators and Licensees), such as credit and debit card numbers, expiration date, and CVV as well as mailing address through orders, purchases, or other payment or subscription services. You may also provide additional information such as the type and color of your vehicle and delivery addresses to help us serve you better.
(d) Share stories, content or suggestions, or submit requests for information
We collect information when you share stories, content, experiences, suggestions, preferences or other input (e.g., expressing your preferences, comments, complaints, etc.), or submit requests for information from us. This includes information you share when you access or interact with Chick-fil-A pages or accounts on any third-party social media platforms such as Facebook, Twitter, Instagram, or LinkedIn or contact us by email or phone or in-person. This may also include recordings of telephone conversations you may have with our CARES customer support personnel.
We may obtain some information automatically, for example, when you:
(a) Access or use the Online Services
Traffic Data. Our Online Services automatically track and collect your IP address, domain server, type of computer or device, and type of web browser. This helps us customize your online experience and assists with our marketing. We use this information to make our online experience better and more relevant for you. For example, we can show you menu items for the correct time of day in your location.
Web Beacons. Certain pages on the Online Services and social media pages may contain web beacons (also known as Internet tags, pixel tags, and clear GIFs), which are small bits of code embedded in pages or images on the Online Services and social media pages (“Web Beacons”). The Web Beacons may be used with Cookies to understand how you interact with us, so we can manage and improve those interactions. We may also include Web Beacons in e-mails we send to you to learn if messages have been opened, acted on, or forwarded. This helps us improve future messages and makes them more meaningful to you.
Other Technologies. We also utilize other tracking technologies. For example, if permitted by applicable law, we may collect “referrers”. A “referrer” is information your web browser passes along to web servers that refers to the URL from which you accessed the Online Services.
Like most websites, we may also collect environmental variables, which include, among other things, the domain from which you access the Internet, the time you accessed the Online Services or social media pages, the type of web browsers and operating system or platform used, the Internet address of the website you left to visit the Online Services or social media pages, the names of the web pages you visit, and the Internet address of the website you visit next. We use these technologies for marketing purposes and to improve your experience with our Online Services.
Information collected automatically may be combined with other personal information we have about you so that we can improve and customize the Online Services and our communications and promotions. When we know how you interact with our Online Services, we can serve you better.
In a nutshell, the following are examples of information we collect with these automated technologies:
(b) Use location-enabled devices like a mobile phone to access the location-based services
If you utilize any of the location-based services such as “Find a Restaurant” on our Online Services or from location-enabled devices like your mobile phone or tablet, with your consent where required, we may collect, use, store, and share location data, including the real-time geographic location (e.g., geolocation and GPS location) of your device. We use the location data to provide Services such as mobile order fulfillment, and to improve location-based services, to enhance your experience and our operations, and for marketing and promotions. We may share your location data with third-party service providers who help us provide the Services such as identifying nearby restaurants, surfacing available market offers, and estimating mobile order pickup or delivery timing. You may limit access to your location data by adjusting the permissions in your device. If you grant us permission, we may collect location information when the app is running in the foreground or background.
(c) Order or purchase our products or services
We also collect information, through our business partners, relating to your purchases from us and our Franchised Operators and Licensees to process your transactions and to perform research and marketing analytics, such as the authorization code of the transaction, payment method, the date and time of the transaction, items purchased, the purchase price, and other order or purchase related information (e.g., a photo of delivered meals, etc.).
(d) Use social media platforms or other connected third-party services
We may obtain information about you from Linked Sites. For example, when you link your account or engage with the Online Services through Linked Sites such as third-party social media sites, you may be allowing us to have ongoing access to certain information stored on those Linked Sites as described to you by those Linked Sites (e.g., your public profile, profile photo, friends list). We may receive certain information about you which is stored on Linked Sites if other users of those sites give us access to their profiles and you are one of their friends or connections, depending upon your settings on those Linked Sites. The information we have access to from Linked Sites varies and is controlled by your privacy settings on each Linked Site and by your consent.
We also obtain some personal information from others, for example:
Your Friends and Family. We may obtain additional information about you when someone, like your friend or family member, provides your information to us as part of a refer-a-friend or other referral or promotional program.
If we offer you the ability to share information with a friend or family member through email or other means, we rely on you to ensure that you only share information with individuals with whom you have a personal or family relationship and who would want to receive the communication. We will use the contact information you provide to communicate with your friend or family member on your behalf.
Franchised Operators and Licensees. We process information about you from our Franchised Operators and Licensees when we provide certain services for them. We may access and process personal information to provide these services, for example, to process your payment and manage mobile orders and other services like third-party delivery service order fulfilment on behalf of Franchised Operators and Licensees or at your direction. For more information, please see the Section.
CFA Group Entities and Other Third Parties. We may also collect personal information from CFA Group entities, third-party providers and business partners, including delivery partners, public databases, social media platforms, or third parties such as analytics or advertising and marketing providers, where permitted under applicable law.
We use the information we collect, on its own and combined with other information we collect about you, for the following purposes:
(a) Providing our products or services to you
We use your information to process your orders and payments, including on behalf of another CFA Group entity and Franchised Operators and Licensees, and for operation of our business.
(b) Communicating with you
We use your information to communicate with you regarding our restaurants, products, services, events, promotions and other offers and respond to your inquiries, comments, feedback, stories, or postings. We may also provide information on our employment opportunities and job openings. You can unsubscribe from our email marketing communications at any time. See the “Communication Preferences” Section for more information.
(c) Customizing and improving your experience
We use your information to tailor our products, services, promotions, communications and the Services so that they are more useful and relevant to you, such as through targeted advertising and messaging personalization.
(d) Creating and managing your accounts with us
We use your information to create and manage your accounts (e.g., Chick-fil-A One accounts, registration for events, online ordering, mobile payments, contests, promotions, etc.) and administer your participation in our programs, events and other offerings.
(e) Getting to know our customers
Your information helps us understand your preferences and provide and improve support related to our product and service offerings and marketing efforts. For example, we may use your information to:
(f) Marketing and advertising
We promote our products and services and aim to provide tailored ads to you and others. We may advertise our products and services on third-party websites or online services. Please see our and to learn more about our third-party advertising and marketing partners and how you may opt out of targeted advertising delivered by the members of the Digital Advertising Alliance (“DAA”), the Digital Advertising Alliance of Canada (“DAAC”) or the Network Advertising Initiative (“NAI”).
(g) Fraud detection, security, legal enforcement and compliance
We use your information to protect the security and integrity of our business and the Services, for enforcement of our agreement with you, for example, Terms and Conditions of Use, Chick-fil-A One Terms & Conditions, and Canadian Terms & Conditions of Use, as applicable, and our compliance with our applicable law.
When we process information as de-identified information, we will not re-identify such de-identified information, except as permitted under applicable.
To perform our Services, we may share your information within Chick-fil-A and with third parties as necessary to complete your order, to provide our products and services, for purposes described in the Section, or with your consent. However, we do not sell your personal information to third parties for their marketing purposes.
We may share your information with the following types of third parties:
(a) Within Chick-fil-A, with CFA Group Entities and Franchised Operators and Licensees
We share personal information within Chick-fil-A, Inc. and with CFA Group entities and Franchised Operators and Licensees to provide our products, services, promotions and other Services to you and for our marketing purposes, in accordance with applicable law. We may also share personal information with CFA Group entities and Franchised Operators and Licensees at your direction or request.
(b) Service providers
We share personal information with third-party service providers that provide a variety of services on our behalf, including but not limited to the development, maintenance, and support of the Services and social media pages, payment processing, online and mobile application ordering, delivery of products and services, the distribution of email and mobile messages, promotions, advertising services, and marketing research and analysis. Our service providers may be located outside of the jurisdiction in which you reside. Please see the Section for more information.
We may also share the personal information we collect with our analytics vendors and partners to develop aggregate analysis and business intelligence for our advertising and marketing purposes. For example, we use personal information to create custom audiences and measure the success of promotions.
(c) Other entities
We may also share personal information as may be necessary to protect the safety, property, or other rights of Chick-fil-A, Inc. and CFA Group entities, Franchised Operators and Licensees, and their respective employees, customers, visitors, users, service providers, or any other person or entity; to comply with law, a court order, or other legal process (which may include access by courts, law enforcement or governmental authorities in the US or other jurisdictions), or in connection with a legal investigation; to enforce any applicable terms and conditions and other agreements; as otherwise may be required or permitted by applicable law; or in accordance with your consent.
Access to Information and Your Choices
We provide you with the opportunity to access, update or delete certain information and to unsubscribe or opt-out from certain communications For example, you may exercise your choices as below. Please be aware that, if you do not allow us to collect and use your personal information, we may not be able to deliver certain products, services, promotions, and offerings to you.
(a) Opportunity to access, update and delete your information
(b) Communication preferences
You may choose how and whether to receive promotional or marketing communications from us. You may exercise your choices by following instructions available on the Online Services or in communications sent to you. For example, to unsubscribe from our email communications, follow the unsubscribe instructions contained in each of our email messages. Please note that we may continue to send transactional or account-related messages to you.
You may also receive communications from our Franchised Operators and Licensees. To opt out of these communications, please refer to the unsubscribe instructions contained in those communications.
Because we plan our communications in advance, it may take up to 3-5 business days for your “unsubscribe” request to become effective. If you continue to receive our communications after submitting an “unsubscribe” request, please let us know by contacting us using one of the methods listed in the Section so that we can investigate the situation.
(c) Account deactivation
You may close your account by calling Chick-fil-A CARES at 1-866-232-2040 if you are a resident of the United States or by accessing your profile online if you are a resident of Canada. Please note, you may not be able to close your account when you have a remaining balance on your Chick-fil-A One account or associated gift cards. Please contact us at the toll-free number as listed in the "Contact Us" Section. When you close your account, we may keep some of your information for legal or our internal business purposes.
We seek to keep your personal information secure by implementing reasonable technical, administrative, and physical safeguards to help us protect such information from unauthorized access, use, and disclosure. When we collect or transmit sensitive information such as a credit card number, we endeavor to use industry standard methods to protect that information. We also ask our third-party service providers to use reasonable security measures to protect your information from unauthorized access, use and disclosure. However, please be aware that no method of electronically transmitting or storing information is ever completely secure.
E-mail Security & How You Can Help
“Phishing” is a scam designed to steal your personal information. If you receive an e-mail that looks like it is from us asking you for your personal information which you suspect may be a scam, please notify us as provided in the Section.
We retain personal information for as long as necessary to fulfill the purposes for which it is collected or processed. We also retain information for related business purposes, security, legal compliance, and disputes and claims handling as permitted by applicable law.
When you watch videos on the Online Services, you agree that we may share your video viewing with or obtain information about your video viewing from analytics service providers, advertising partners and social media platforms for two years or until you withdraw your consent. Where required by applicable law, we will obtain your consent prior to obtaining or sharing your video viewing data.
Notice to California Consumers
We have collected the following categories of California Personal Information within the last 12 months from the sources listed below:
(a) Identifiers, such as a real name, physical address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, or other similar identifiers. This category of information is collected from you, your devices, and third parties such as Linked Sites, your family and friends, Franchised Operators and Licensees, and public databases.
(b) Personal information described in subdivision (e) of Section 1798.80 (California customer records statute), such as a name, address, telephone number, credit card number, debit card number, or other payment information. This category of information is collected from you, your devices, other CFA Group entities, Franchised Operators and Licensees or other third parties such as our business partners.
(c) Commercial information, including products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. This category of information is collected from you, your devices, other CFA Group entities, Franchised Operators and Licensees or other third parties such as our business partners.
(d) Internet or other similar network activity, including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with a website, application, or advertisement. This category of information is collected from you and your devices.
(e) Geolocation data, including physical location or movements. This category of information is collected from you and your devices.
(f) Sensory data, including electronic, visual, or similar information. This category of information, such as photos, is collected from you and third parties such as Linked Sites, CFA Group entities, our service providers, or Franchised Operators and Licensees.
(g) Inferences, such as a profile about a consumer’s preferences, characteristics, and behavior, drawn from information we collect and insights we receive from third parties such as our marketing and advertising partners and data analytics providers.
For each of the above categories, we use the California Personal Information for a variety of business purposes such as:
We may also use the information we collect for our own or our service providers’ other operational purposes, purposes for which we provide you additional notice, or for purposes compatible with the context in which the California Personal Information was collected.
Within the last 12 months, we have disclosed California Personal Information for our business purposes. To learn more about the categories of third parties with whom we share such information, please see the Section.
We do not sell and, within the last 12 months, we have not sold, California Personal Information.
Your California Privacy Rights
If you are a California consumer, you have certain rights related to your California Personal Information, including:
You may request to exercise these rights by:
As required under applicable law, please note that we will take steps to verify your identity before granting you access to information or acting on your request to exercise your rights. We may require you to provide your email address to verify your identity in response to exercising requests of the above type. You will, therefore, need access to your email account to receive our communications necessary to process your request. Please make sure to check your spam inbox to ensure these important communications are not missed. We may limit our response to your exercise of the above rights as permitted under applicable law. When you submit a request to exercise your rights above, we will use the information you provide to process your request and to maintain a record of your request and our response, as permitted under applicable law.
We may not discriminate against you because of your exercise of any of the above rights or any other rights, subject to the rights and the obligations under the California Consumer Privacy Act, including by:
However, we may offer you certain financial incentives permitted by law that can result in different prices, rates, or quality levels. Any permitted financial incentive we offer will reasonably relate to your personal information’s value and contain written terms that describe the program’s material aspects. Participation in a financial incentive program requires your prior opt-in consent, which you may revoke at any time.
Under California law, you may designate an authorized agent to make a request on your behalf. You may make such a designation by providing the agent with written permission to act on your behalf. We will require the agent to provide proof of that written permission. As permitted by law, we may require you to verify your own identity in response to a request, even if you choose to use an agent.
We publish metrics regarding the number of requests we have received, complied with (in whole or in part) or denied, and also the median number of days in which we responded to such requests, in the previous year, as applicable to the time period in which the CCPA was in effect.
The following details the metrics regarding consumer rights requests we received from all individuals, regardless of their state of residence, from January 1, 2020 to December 31, 2020.
Total Requests Received in 2020: 922
Granted (in whole or in part)
Median Days to Respond
Request to Know
*All 489 requests were denied because we were unable to verify the identity of the requestor
Request to Delete
*218 requests were denied because we were unable to verify
*30 requests were denied because they called for information exempt from disclosure.
Requests to Opt-Out of Personal Information Sales
* N/A – We do not sell California Personal Information.
California Job Applicants
In the context of job applications, we also collect information from you and third parties, including business contact information such as company name, physical address and email address, education information, and past work experience. Please see more information in the “Collection and Use of Personal Information of Chick-fil-A, Inc. Employment Applicants” Section.
California Do Not Track
California Business & Professions Code Section 22575(b) (as amended effective January 1, 2014) provides that California residents are entitled to know how we respond to “Do Not Track” browser settings. We do not currently take actions to respond to Do Not Track signals because a uniform technological standard has not yet been developed.
This California-specific addendum was last reviewed and updated as of June 30, 2021.
The Online Services are not intended for children under the age of 13, without parental or legal guardian consent. We do not knowingly collect personal information from users in this age group. If you believe your child has provided personal information to us, please contact us via the email listed in the Section and we will work to delete it.
Please see below for important additional information:
The Chick-fil-A Franchise System
We may allow a Franchised Operator or Licensee to link to the Online Services. Chick-fil-A, however, is not responsible or liable for any Franchised Operator or Licensee Online Services, even if it is linked to our Online Services, or for any Franchised Operator's or Licensee's online conduct and privacy practices.
Collection and Use of Personal Information of Prospective Chick-fil-A Franchised Operators
If you complete an application for a franchise opportunity with Chick-fil-A, Inc., Chick-fil-A (PR) LLC, or Chick-fil-A Canada ULC, or express interest or otherwise request information about franchise opportunities, we collect personal information that you provide in connection with your request for information and/or to evaluate your application for a franchise restaurant business opportunity. We may also collect personal information about you from third parties to supplement, update, or verify your information, and/or to process your application for consideration as a Franchised Operator. Applicable law may require that you authorize a third party to share your personal information with us before we can acquire it. Failure to provide any requested information may negatively impact consideration of your application to become a Franchised Operator. By expressing interest in becoming and/or applying to become a Franchised Operator, you consent to our collection, use, and disclosure of your personal information in this manner, to the extent permitted by applicable law.
If you complete an application for employment with Chick-fil-A, Inc., or request information regarding such opportunities, we may collect personal information that you provide (such as information contained in a resume or cover letter) in connection with your request for information and/or to evaluate your application for employment with Chick-fil-A, Inc. We may also collect personal information about you from third parties to supplement, update, or verify your information, and/or to process your application for consideration as a Chick-fil-A, Inc. employee. Applicable law may require that you authorize a third party to share your personal information with us before we can acquire it. Failure to provide any requested information may negatively impact consideration of your employment application. By applying to become an employee of Chick-fil-A, Inc., you consent to our collection, use, and disclosure of your personal information as described above, to the extent permitted by applicable law.