Chick-fil-A Privacy Policy
Effective as of June 30, 2021
Your privacy is very important to us. This Chick-fil-A Privacy Policy ("Privacy Policy") describes how Chick-fil-A, Inc., its affiliates, subsidiaries and related entities such as CFA Properties, Inc., CFA Servco, Inc., Chick-fil-A Canada ULC, and Chick-fil-A (PR) LLC, (collectively, “Chick-fil-A”, “CFA Group”, “we”, “us”, or “our”) process and use the personal information that we collect through our websites and mobile apps ("Online Services"), our restaurant technologies such as Wi-Fi services at your favorite Chick-fil-A Restaurant, our interactions with you over the phone or offline related to our products and services (collectively, together with Online "Services"), and other sources.
We would love for you to know how we gather information about you and use that information to make your Chick-fil-A experience more remarkable across both online and offline worlds. So, this Privacy Policy describes the types of personal information we collect about you and how we process personal information. We have tried to make this Privacy Policy clear and easy to navigate, but if you don’t understand something, please feel free to reach out. You can contact us as described in the “Contact Us” Section.
Please note this Privacy Policy does not apply to any affiliate or related entity of Chick-fil-A, Inc. that maintains and publishes its own privacy policy. Also, this Privacy Policy does not apply to the privacy practices of any Franchised Operator or Licensee because Chick-fil-A restaurants are owned and operated by Franchised Operators and Licensees who are independent third parties. Please see the “Franchised Operator and Licensee Online Services” Section for more information.
We Make Updates to This Privacy Policy
We may update this Privacy Policy from time to time, and the updated Privacy Policy applies to you after the effective date stated in the revised Privacy Policy. Please come back to this page occasionally to check to see if it has been updated. You can also contact us as described in the “Contact Us” Section to receive a copy of the current Privacy Policy. If our information practices change, we will post an updated policy on our website. If we change the policy in a material way, we will provide appropriate notice to you such as posting a prominent notice on our website or emailing you if you provided your email to
Information You Provide to Us
We collect information that you provide to us, depending on how you interact with us. For example, you may provide information to us when you:
(a) Sign up for our loyalty programs, events, or communications
During the sign-up or registration process or when you communicate with us, you may provide information such as your name, email address, physical address, phone number, mobile phone number, date of birth and/or age.
(b) Participate in promotions and events or respond to surveys and feedback requests
You may provide information to us about you, your household and/or other personal attributes through promotions, events, surveys, and feedback. This information may include your name, your contact information, name and age of your family members, (including your children), and other information you provide to us when you participate in an event or provide survey responses or feedback content. We may use this information to administer your participation in the promotion, event or survey and to respond to your feedback as well as for analysis either on an aggregate or identifiable basis.
(c) Order or purchase our products or services
You may provide your payment information to us (or we may process your payment information on behalf of another CFA Group entity or Franchised Operators and Licensees), such as credit and debit card numbers, expiration date, and CVV as well as mailing address through orders, purchases, or other payment or subscription services. You may also provide additional information such as the type and color of your vehicle and delivery addresses to help us serve you better.
(d) Share stories, content or suggestions, or submit requests for information
We collect information when you share stories, content, experiences, suggestions, preferences or other input (e.g., expressing your preferences, comments, complaints, etc.), or submit requests for information from us. This includes information you share when you access or interact with Chick-fil-A pages or accounts on any third-party social media platforms such as Facebook, Twitter, Instagram, or LinkedIn or contact us by email or phone or in-person. This may also include recordings of telephone conversations you may have with our CARES customer support personnel.
Content you share on our Online Services or social media pages (e.g., stories, comments, blogs, postings, etc.) may include personal information. You are responsible for all actions resulting from any information you post on our Online Services or social media pages. Please remember that any information you post on social media pages may become publicly available, is not subject to this Privacy Policy, and Chick-fil-A is not responsible for the results of such postings.
Information We Collect Automatically or from Others
We may obtain some information automatically, for example, when you:
(a) Access or use the Online Services
Traffic Data. Our Online Services automatically track and collect your IP address, domain server, type of computer or device, and type of web browser. This helps us customize your online experience and assists with our marketing. We use this information to make our online experience better and more relevant for you. For example, we can show you menu items for the correct time of day in your location.
Cookies. We also use cookies, which are small text files that are stored on your computer and allow websites to remember information about you (“Cookies”). You may adjust your browser and/or Chick-fil-A's Cookie Preference Center settings to accept a Cookie or to not accept certain Cookies. However, if you decide not to accept Cookies from our Online Services, you may not be able to take advantage of all available features. Please see our Cookie and Interest-based Advertising Policy to learn about the types of Cookies we use, how we use them, and your choices for Cookies.
Web Beacons. Certain pages on the Online Services and social media pages may contain web beacons (also known as Internet tags, pixel tags, and clear GIFs), which are small bits of code embedded in pages or images on the Online Services and social media pages (“Web Beacons”). The Web Beacons may be used with Cookies to understand how you interact with us, so we can manage and improve those interactions. We may also include Web Beacons in e-mails we send to you to learn if messages have been opened, acted on, or forwarded. This helps us improve future messages and makes them more meaningful to you.
Other Technologies. We also utilize other tracking technologies. For example, if permitted by applicable law, we may collect “referrers”. A “referrer” is information your web browser passes along to web servers that refers to the URL from which you accessed the Online Services.
Like most websites, we may also collect environmental variables, which include, among other things, the domain from which you access the Internet, the time you accessed the Online Services or social media pages, the type of web browsers and operating system or platform used, the Internet address of the website you left to visit the Online Services or social media pages, the names of the web pages you visit, and the Internet address of the website you visit next. We use these technologies for marketing purposes and to improve your experience with our Online Services.
Information collected automatically may be combined with other personal information we have about you so that we can improve and customize the Online Services and our communications and promotions. When we know how you interact with our Online Services, we can serve you better.
In a nutshell, the following are examples of information we collect with these automated technologies:
(b) Use location-enabled devices like a mobile phone to access the location-based services
If you utilize any of the location-based services such as “Find a Restaurant” on our Online Services or from location-enabled devices like your mobile phone or tablet, with your consent where required, we may collect, use, store, and share location data, including the real-time geographic location (e.g., geolocation and GPS location) of your device. We use the location data to provide Services such as mobile order fulfillment, and to improve location-based services, to enhance your experience and our operations, and for marketing and promotions. We may share your location data with third-party service providers who help us provide the Services such as identifying nearby restaurants, surfacing available market offers, and estimating mobile order pickup or delivery timing. You may limit access to your location data by adjusting the permissions in your device. If you grant us permission, we may collect location information when the app is running in the foreground or background.
(c) Order or purchase our products or services
We also collect information, through our business partners, relating to your purchases from us and our Franchised Operators and Licensees to process your transactions and to perform research and marketing analytics, such as the authorization code of the transaction, payment method, the date and time of the transaction, items purchased, the purchase price, and other order or purchase related information (e.g., a photo of delivered meals, etc.).
(d) Use social media platforms or other connected third-party services
The Online Services and our communications may contain links to third-party websites, including social media platforms such as Facebook, Twitter, Instagram, or LinkedIn (collectively, “Linked Sites”). We are not responsible for the privacy practices, policies, or content of any Linked Sites, even if you followed a link to them from the Online Services or our communications. This Privacy Policy does not apply to any Linked Sites. We encourage you to read and understand the privacy policies of any Linked Sites that you visit.
We may obtain information about you from Linked Sites. For example, when you link your account or engage with the Online Services through Linked Sites such as third-party social media sites, you may be allowing us to have ongoing access to certain information stored on those Linked Sites as described to you by those Linked Sites (e.g., your public profile, profile photo, friends list). We may receive certain information about you which is stored on Linked Sites if other users of those sites give us access to their profiles and you are one of their friends or connections, depending upon your settings on those Linked Sites. The information we have access to from Linked Sites varies and is controlled by your privacy settings on each Linked Site and by your consent.
We also obtain some personal information from others, for example:
Your Friends and Family. We may obtain additional information about you when someone, like your friend or family member, provides your information to us as part of a refer-a-friend or other referral or promotional program.
If we offer you the ability to share information with a friend or family member through email or other means, we rely on you to ensure that you only share information with individuals with whom you have a personal or family relationship and who would want to receive the communication. We will use the contact information you provide to communicate with your friend or family member on your behalf.
Franchised Operators and Licensees. We process information about you from our Franchised Operators and Licensees when we provide certain services for them. We may access and process personal information to provide these services, for example, to process your payment and manage mobile orders and other services like third-party delivery service order fulfilment on behalf of Franchised Operators and Licensees or at your direction. For more information, please see the “Franchised Operator and Licensee Online Services” Section.
CFA Group Entities and Other Third Parties. We may also collect personal information from CFA Group entities, third-party providers and business partners, including delivery partners, public databases, social media platforms, or third parties such as analytics or advertising and marketing providers, where permitted under applicable law.
How We Use Your Information
We use the information we collect, on its own and combined with other information we collect about you, for the following purposes:
(a) Providing our products or services to you
We use your information to process your orders and payments, including on behalf of another CFA Group entity and Franchised Operators and Licensees, and for operation of our business.
(b) Communicating with you
We use your information to communicate with you regarding our restaurants, products, services, events, promotions and other offers and respond to your inquiries, comments, feedback, stories, or postings. We may also provide information on our employment opportunities and job openings. You can unsubscribe from our email marketing communications at any time. See the “Communication Preferences” Section for more information.
(c) Customizing and improving your experience
We use your information to tailor our products, services, promotions, communications and the Services so that they are more useful and relevant to you, such as through targeted advertising and messaging personalization.
(d) Creating and managing your accounts with us
We use your information to create and manage your accounts (e.g., Chick-fil-A One accounts, registration for events, online ordering, mobile payments, contests, promotions, etc.) and administer your participation in our programs, events and other offerings.
(e) Getting to know our customers
Your information helps us understand your preferences and provide and improve support related to our product and service offerings and marketing efforts. For example, we may use your information to:
(f) Marketing and advertising
We promote our products and services and aim to provide tailored ads to you and others. We may advertise our products and services on third-party websites or online services. Please see our Cookie and Interest-Based Advertising Policy and Cookie Preference Center to learn more about our third-party advertising and marketing partners and how you may opt out of targeted advertising delivered by the members of the Digital Advertising Alliance (“DAA”), the Digital Advertising Alliance of Canada (“DAAC”) or the Network Advertising Initiative (“NAI”).
(g) Fraud detection, security, legal enforcement and compliance
We use your information to protect the security and integrity of our business and the Services, for enforcement of our agreement with you, for example, Terms and Conditions of Use, Chick-fil-A One Terms & Conditions, and Canadian Terms & Conditions of Use, as applicable, and our compliance with our applicable law.
We may combine personal information about you with other information we have acquired from third parties in accordance with applicable law. We will treat the combined information as personal information under this Privacy Policy.
When we process information as de-identified information, we will not re-identify such de-identified information, except as permitted under applicable.
How We Share Information
To perform our Services, we may share your information within Chick-fil-A and with third parties as necessary to complete your order, to provide our products and services, for purposes described in the “How We Use Your Information” Section, or with your consent. However, we do not sell your personal information to third parties for their marketing purposes.
We may share your information with the following types of third parties:
(a) Within Chick-fil-A, with CFA Group Entities and Franchised Operators and Licensees
We share personal information within Chick-fil-A, Inc. and with CFA Group entities and Franchised Operators and Licensees to provide our products, services, promotions and other Services to you and for our marketing purposes, in accordance with applicable law. We may also share personal information with CFA Group entities and Franchised Operators and Licensees at your direction or request.
(b) Service providers
We share personal information with third-party service providers that provide a variety of services on our behalf, including but not limited to the development, maintenance, and support of the Services and social media pages, payment processing, online and mobile application ordering, delivery of products and services, the distribution of email and mobile messages, promotions, advertising services, and marketing research and analysis. Our service providers may be located outside of the jurisdiction in which you reside. Please see the “Transfer Outside Your Jurisdiction” Section for more information.
We may also share the personal information we collect with our analytics vendors and partners to develop aggregate analysis and business intelligence for our advertising and marketing purposes. For example, we use personal information to create custom audiences and measure the success of promotions.
(c) Other entities
In addition, we may share personal information with other entities for additional purposes. For example, we may share personal information with our business partners and other third parties upon your request or at your direction. We may also share personal information as part of a sale, merger or change in control, or in preparation for these corporate events. An entity that buys us or part of our business may continue to use your data in accordance with the Privacy Policy, unless you request otherwise.
We may also share personal information as may be necessary to protect the safety, property, or other rights of Chick-fil-A, Inc. and CFA Group entities, Franchised Operators and Licensees, and their respective employees, customers, visitors, users, service providers, or any other person or entity; to comply with law, a court order, or other legal process (which may include access by courts, law enforcement or governmental authorities in the US or other jurisdictions), or in connection with a legal investigation; to enforce any applicable terms and conditions and other agreements; as otherwise may be required or permitted by applicable law; or in accordance with your consent.
Access to Information and Your Choices
We provide you with the opportunity to access, update or delete certain information and to unsubscribe or opt-out from certain communications For example, you may exercise your choices as below. Please be aware that, if you do not allow us to collect and use your personal information, we may not be able to deliver certain products, services, promotions, and offerings to you.
(a) Opportunity to access, update and delete your information
(b) Communication preferences
You may choose how and whether to receive promotional or marketing communications from us. You may exercise your choices by following instructions available on the Online Services or in communications sent to you. For example, to unsubscribe from our email communications, follow the unsubscribe instructions contained in each of our email messages. Please note that we may continue to send transactional or account-related messages to you.
You may also receive communications from our Franchised Operators and Licensees. To opt out of these communications, please refer to the unsubscribe instructions contained in those communications.
Because we plan our communications in advance, it may take up to 3-5 business days for your “unsubscribe” request to become effective. If you continue to receive our communications after submitting an “unsubscribe” request, please let us know by contacting us using one of the methods listed in the “Contact Us”Section so that we can investigate the situation.
(c) Account deactivation
You may close your account by calling Chick-fil-A CARES at 1-866-232-2040 if you are a resident of the United States or by accessing your profile online if you are a resident of Canada. Please note, you may not be able to close your account when you have a remaining balance on your Chick-fil-A One account or associated gift cards. Please contact us at the toll-free number as listed in the "Contact Us" Section. When you close your account, we may keep some of your information for legal or our internal business purposes.
Information Security
We seek to keep your personal information secure by implementing reasonable technical, administrative, and physical safeguards to help us protect such information from unauthorized access, use, and disclosure. When we collect or transmit sensitive information such as a credit card number, we endeavor to use industry standard methods to protect that information. We also ask our third-party service providers to use reasonable security measures to protect your information from unauthorized access, use and disclosure. However, please be aware that no method of electronically transmitting or storing information is ever completely secure.
E-mail Security & How You Can Help
“Phishing” is a scam designed to steal your personal information. If you receive an e-mail that looks like it is from us asking you for your personal information which you suspect may be a scam, please notify us as provided in the “Contact Us” Section.
Retention
We retain personal information for as long as necessary to fulfill the purposes for which it is collected or processed. We also retain information for related business purposes, security, legal compliance, and disputes and claims handling as permitted by applicable law.
When you watch videos on the Online Services, you agree that we may share your video viewing with or obtain information about your video viewing from analytics service providers, advertising partners and social media platforms for two years or until you withdraw your consent. Where required by applicable law, we will obtain your consent prior to obtaining or sharing your video viewing data.
Notice to California Consumers
If you are a California consumer, the following provisions apply to our processing of information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with you or your household (“California Personal Information”). For California consumers, the provisions of this California Addendum prevail over any conflicting provisions in other sections of this Privacy Policy.
We have collected the following categories of California Personal Information within the last 12 months from the sources listed below:
(a) Identifiers, such as a real name, physical address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, or other similar identifiers. This category of information is collected from you, your devices, and third parties such as Linked Sites, your family and friends, Franchised Operators and Licensees, and public databases.
(b) Personal information described in subdivision (e) of Section 1798.80 (California customer records statute), such as a name, address, telephone number, credit card number, debit card number, or other payment information. This category of information is collected from you, your devices, other CFA Group entities, Franchised Operators and Licensees or other third parties such as our business partners.
(c) Commercial information, including products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. This category of information is collected from you, your devices, other CFA Group entities, Franchised Operators and Licensees or other third parties such as our business partners.
(d) Internet or other similar network activity, including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with a website, application, or advertisement. This category of information is collected from you and your devices.
(e) Geolocation data, including physical location or movements. This category of information is collected from you and your devices.
(f) Sensory data, including electronic, visual, or similar information. This category of information, such as photos, is collected from you and third parties such as Linked Sites, CFA Group entities, our service providers, or Franchised Operators and Licensees.
(g) Inferences, such as a profile about a consumer’s preferences, characteristics, and behavior, drawn from information we collect and insights we receive from third parties such as our marketing and advertising partners and data analytics providers.
Please see the “Information You Provide to Us" and "Information We Collect Automatically or from Others”Section to learn more about the types of information we collect and how we collect them.
For each of the above categories, we use the California Personal Information for a variety of business purposes such as:
We may also use the information we collect for our own or our service providers’ other operational purposes, purposes for which we provide you additional notice, or for purposes compatible with the context in which the California Personal Information was collected.
Within the last 12 months, we have disclosed California Personal Information for our business purposes. To learn more about the categories of third parties with whom we share such information, please see the “How We Share Your Information” Section.
We do not sell and, within the last 12 months, we have not sold, California Personal Information.
Your California Privacy Rights
If you are a California consumer, you have certain rights related to your California Personal Information, including:
You may request to exercise these rights by:
As required under applicable law, please note that we will take steps to verify your identity before granting you access to information or acting on your request to exercise your rights. We may require you to provide your email address to verify your identity in response to exercising requests of the above type. You will, therefore, need access to your email account to receive our communications necessary to process your request. Please make sure to check your spam inbox to ensure these important communications are not missed. We may limit our response to your exercise of the above rights as permitted under applicable law. When you submit a request to exercise your rights above, we will use the information you provide to process your request and to maintain a record of your request and our response, as permitted under applicable law.
We may not discriminate against you because of your exercise of any of the above rights or any other rights, subject to the rights and the obligations under the California Consumer Privacy Act, including by:
However, we may offer you certain financial incentives permitted by law that can result in different prices, rates, or quality levels. Any permitted financial incentive we offer will reasonably relate to your personal information’s value and contain written terms that describe the program’s material aspects. Participation in a financial incentive program requires your prior opt-in consent, which you may revoke at any time.
Under California law, you may designate an authorized agent to make a request on your behalf. You may make such a designation by providing the agent with written permission to act on your behalf. We will require the agent to provide proof of that written permission. As permitted by law, we may require you to verify your own identity in response to a request, even if you choose to use an agent.
Statistical Information
We publish metrics regarding the number of requests we have received, complied with (in whole or in part) or denied, and also the median number of days in which we responded to such requests, in the previous year, as applicable to the time period in which the CCPA was in effect.
The following details the metrics regarding consumer rights requests we received from all individuals, regardless of their state of residence, from January 1, 2020 to December 31, 2020.
Total Requests Received in 2020: 922
|
Request Type |
Received |
Granted (in whole or in part) |
Denied |
Median Days to Respond |
|
Request to Know |
589 |
100 |
489 *All 489 requests were denied because we were unable to verify the identity of the requestor |
Median:21 |
|
Request to Delete |
315 |
67 |
248 *218 requests were denied because we were unable to verify *30 requests were denied because they called for information exempt from disclosure. |
Median:24 |
|
Requests to Opt-Out of Personal Information Sales |
18 |
N/A |
N/A |
N/A |
* N/A – We do not sell California Personal Information.
California Job Applicants
In the context of job applications, we also collect information from you and third parties, including business contact information such as company name, physical address and email address, education information, and past work experience. Please see more information in the “Collection and Use of Personal Information of Chick-fil-A, Inc. Employment Applicants” Section.
If you complete an application for employment with Chick-fil-A, Inc. or request information regarding such opportunities, California Personal Information you provide to us (such as information contained in a resume or cover letter) in connection with your request for information and/or to evaluate your application for employment will be processed in accordance with the California Job Applicants Privacy Policy.
You may contact us with questions and concerns about our privacy policies or practices by contacting us using any of the methods listed in the "Contact Us" Section.
California Do Not Track
California Business & Professions Code Section 22575(b) (as amended effective January 1, 2014) provides that California residents are entitled to know how we respond to “Do Not Track” browser settings. We do not currently take actions to respond to Do Not Track signals because a uniform technological standard has not yet been developed.
This California-specific addendum was last reviewed and updated as of June 30, 2021.
Children's Privacy
The Online Services are not intended for children under the age of 13, without parental or legal guardian consent. We do not knowingly collect personal information from users in this age group. If you believe your child has provided personal information to us, please contact us via the email listed in the “Contact Us” Section and we will work to delete it.
Transfers of Personal Information Outside Your Jurisdiction
Please be aware that your personal information will be transferred to, stored or processed by us or our service providers in the United States, where our servers are located and our central database is operated, or other jurisdictions where our service providers are located for the purposes set out in this Privacy Policy.
Contact Us
If you have any questions or complaints about this Privacy Policy or how we or our Service Providers collect, use or disclose your personal information, please contact us using any of the methods below:
Please see below for important additional information:
The Chick-fil-A Franchise System
The Chick-fil-A franchise system is a restaurant network made up of company-operated, franchised, and licensed Chick-fil-A restaurant businesses. This means that Chick-fil-A franchisees (“Franchised Operators” or “Operators”) own and operate their own individual franchised businesses and may do certain things differently than us. Franchised Operators and Chick-fil-A licensees (“Licensees”) are independent third parties, and this Privacy Policy does not apply to the privacy practices of any Franchised Operator or Licensee. Please see the “Franchised Operator and Licensee Online Services” Section for more information.
Franchised Operator and Licensee Online Services
Chick-fil-A Franchised Operators and Licensees are independent third parties and may own, operate, and maintain their own website, social media page or other online service or communication channels (“Franchised Operator or Licensee Online Services”). This Privacy Policy does not apply to the privacy practices of any Franchised Operator or Licensee. Questions or concerns regarding any Franchised Operator or Licensee Online Services should be directed to the applicable Franchised Operator or Licensee.
We may allow a Franchised Operator or Licensee to link to the Online Services. Chick-fil-A, however, is not responsible or liable for any Franchised Operator or Licensee Online Services, even if it is linked to our Online Services, or for any Franchised Operator's or Licensee's online conduct and privacy practices.
Collection and Use of Personal Information of Prospective Chick-fil-A Franchised Operators
If you complete an application for a franchise opportunity with Chick-fil-A, Inc., Chick-fil-A (PR) LLC, or Chick-fil-A Canada ULC, or express interest or otherwise request information about franchise opportunities, we collect personal information that you provide in connection with your request for information and/or to evaluate your application for a franchise restaurant business opportunity. We may also collect personal information about you from third parties to supplement, update, or verify your information, and/or to process your application for consideration as a Franchised Operator. Applicable law may require that you authorize a third party to share your personal information with us before we can acquire it. Failure to provide any requested information may negatively impact consideration of your application to become a Franchised Operator. By expressing interest in becoming and/or applying to become a Franchised Operator, you consent to our collection, use, and disclosure of your personal information in this manner, to the extent permitted by applicable law.
Collection and Use of Personal Information of Chick-fil-A, Inc. Employment Applicants
If you complete an application for employment with Chick-fil-A, Inc., or request information regarding such opportunities, we may collect personal information that you provide (such as information contained in a resume or cover letter) in connection with your request for information and/or to evaluate your application for employment with Chick-fil-A, Inc. We may also collect personal information about you from third parties to supplement, update, or verify your information, and/or to process your application for consideration as a Chick-fil-A, Inc. employee. Applicable law may require that you authorize a third party to share your personal information with us before we can acquire it. Failure to provide any requested information may negatively impact consideration of your employment application. By applying to become an employee of Chick-fil-A, Inc., you consent to our collection, use, and disclosure of your personal information as described above, to the extent permitted by applicable law.
Click this link to download the English version of Chick-fil-A's privacy policy.
Click this link to download the Spanish version of Chick-fil-A's privacy policy.