LAST UPDATED AND EFFECTIVE AS OF JANUARY 1, 2023
We collect, and within the past 12 months have collected, the following categories of personal information directly from Franchised Operators, through their access to our online solutions, and from Customers and CFA Employees. In connection with your operation of a Chick-fil-A restaurant, we may collect the following categories of personal information about you:
|A. Identifiers.||A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security Number, driver's license number, or other similar identifiers||Yes|
|B. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)).||A name, signature, Social Security Number, address, telephone number, passport number, driver's license or state identification card number, education, employment, employment history, bank account number, or any other financial information. Some personal information included in this category may overlap with other categories||Yes|
|C. Protected classification characteristics under California or federal law.||Age, race/ethnicity, national origin, marital status, medical condition, gender, or veteran or military status collected voluntarily||Yes|
|D. Commercial information.||Records of personal property, products or services purchased, or other purchasing or consuming histories or tendencies obtained from background or credit history checks||Yes|
|E. Biometric information.||N/A||No|
|F. Internet or other similar network activity.||Information on your interaction with a CFA website, CFA application, or CFA advertisement||Yes|
|G. Geolocation data.||N/A||No|
|H. Sensory data.||Audio, visual, or similar information such as voice mail messages and audio recordings||Yes|
|I. Professional or employment-related information.||Current or past job history or performance evaluations||Yes|
|J. Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)).||N/A||No|
|K. Inferences drawn from other personal information.||Profile reflecting a person’s preferences and characteristics||Yes|
|L. Sensitive Personal Information|| Social Security Number, driver’s license number, state identification card number, or passport number; precise geolocation; or race/ethnicity
* Please note we do not collect sensitive personal information for the purpose of inferring characteristics about Franchised Operators.
To the extent we or our third-party service providers collect additional categories of information beyond those discussed above, additional notice will be provided, and we or our third-party service providers will ask for your consent before collecting such additional categories of personal information, as required by law.
Personal information does not include information: (a) excluded from the scope of personal information under applicable law, (b) that is publicly available information or (c) that is deidentified or aggregate information.
While relatively uncommon, there may be occasions when we use personal information of Franchised Operators for other purposes permitted under applicable law, for example, when we are required to disclose information in connection with contractual or legal matters such as information necessary to respond to law enforcement and governmental agency requests (i.e., subpoenas); comply with legal and contractual obligations; exercise legal and contractual rights; and initiate or respond to legal claims.
In certain instances, we may maintain and use information in a deidentified form. If we do so, we do not attempt to reidentify the information, except for the sole purpose of determining whether our deidentification processes satisfy the requirement under applicable law.
Some personal information, such as Franchised Operators’ contact information, may be disclosed to Employees, independent contractors, or agents of CFA and our affiliates with access to @CFA. Franchised Operators’ personal information may also be collected by or disclosed to Customers, CFA Employees, data analytics providers, or other service providers. We disclose, and in the past 12 months have disclosed, all categories of personal information we collect about Franchised Operators, which may include your information, to our IT service providers, data analytics providers, travel agencies, and other third-party service providers so they can perform services on our behalf. In addition, we also disclose Franchised Operators’ business contact information such as work email addresses, work phone numbers, and street addresses to our Employees, independent contractors, agents, Customers, suppliers and business partners so they can contact you and/or perform services for CFA.
California residents have certain rights related to personal information, including:
You may request to exercise these rights by:
Please note that we will take steps to verify your identity before granting you access to information or acting on your request to exercise your rights as required by applicable law. We may require you to provide your name, work email address, mobile phone number, and last 4 digits of your Social Security Number to verify your identity in response to requests of the above type. We may limit our response to your exercise of the above rights as permitted under applicable law. When you submit a request to exercise your rights above, we will use the information you provide to process your request and to maintain a record of your request and our response, as permitted under applicable law.
You may designate an authorized agent to make a request on your behalf here. You may make such a designation by providing the agent with written permission to act on your behalf. We will require the agent to provide proof of that written permission. We may require you to verify your own identity in response to a request, even if you choose to use an agent, to the extent permitted by law.
We may not discriminate against you because of your exercise of any of the above rights or any other rights, subject to the rights and the obligations under the California Consumer Privacy Act. For example, we may not retaliate against you for exercising your rights under applicable law.
Was this answer helpful?