We collect information that you provide to us, when you manage or update your account with us, depending on how you interact with us. For example, you may provide information to us when you:
(a) Sign up for our loyalty programs, events, or communications, manage your account with us
During the sign-up or registration process or when you communicate with us, when you manage or update your account with us, you may provide information such as your name, email address, physical address, phone number, mobile phone number, date of birth and/or age.
(b) Participate in promotions and events, respond to surveys and market research, or provide feedback to us
You may provide information to us about you, your household and/or other personal attributes through promotions, events, surveys, market research and feedback. This information may include your name, your contact information, name and age of your family members (including your children), and demographic and other information (e.g., household income, gender, age group, race or ethnicity, etc.) if you choose to share this information with us. We may use this information to administer your participation in the promotion, event or survey and to respond to your feedback as well as market research and marketing analysis purposes, either on an aggregate or identifiable basis.
(c) Order or purchase our products or services
You may provide your payment information to us (or we may process your payment information on behalf of another CFA Group entity or Franchised Operators and Licensees), such as credit and debit card numbers, expiration date, and CVV as well as mailing address through orders, purchases, or other payment or subscription services. You may also provide additional information such as the type and color of your vehicle and delivery addresses to help us serve you better.
(d) Share stories, content or suggestions, or submit requests for information
We collect information when you share stories, content, experiences, suggestions, preferences or other input (e.g., expressing your preferences, comments, complaints, etc.), or submit requests for information from us. This includes information you share when you access or interact with Chick-fil-A pages or accounts on any third-party social media platforms such as Facebook, Twitter, Instagram, or LinkedIn or contact us by email or phone or in-person. This may also include recordings of telephone conversations you may have with our CARES customer support personnel.
We may obtain some information automatically, for example, when you:
(a) Access or use the Online Services
Traffic Data. Our Online Services automatically track and collect your IP address, domain server, type of computer or device, and type of web browser. This helps us customize your online experience and assists with our marketing. We use this information to make our online experience better and more relevant for you. For example, we can show you menu items for the correct time of day in your location.
Web Beacons. Certain pages on the Online Services and social media pages may contain web beacons (also known as Internet tags, pixel tags, and clear GIFs), which are small bits of code embedded in pages or images on the Online Services and social media pages (“Web Beacons”). The Web Beacons may be used with Cookies to understand how you interact with us, so we can manage and improve those interactions. We may also include Web Beacons in e-mails we send to you to learn if messages have been opened, acted on, or forwarded. This helps us improve future messages and makes them more meaningful to you.
Other Technologies. We also utilize other tracking technologies. For example, if permitted by applicable law, we may collect “referrers”. A “referrer” is information your web browser passes along to web servers that refers to the URL from which you accessed the Online Services.
Information collected automatically may be combined with other personal information we have about you so that we can improve and customize the Online Services and our communications and promotions. When we know how you interact with our Online Services, we can serve you better.
In a nutshell, the following are examples of information we collect with these automated technologies:
(b) Use location-enabled devices like a mobile phone to access the location-based services
If you utilize any of the location-based services such as “Find a Restaurant” on our Online Services or from location-enabled devices like your mobile phone or tablet, with your consent where required, we may collect, use, store, and disclose location data, including the real-time geographic location of your device (e.g., when you permit our access to GPS location on your device). We use the location data to provide Services such as mobile order fulfillment, and to improve location-based services, to enhance your experience and our operations, and for marketing and promotions. We may disclose your location data to third-party service providers who help us provide the Services such as identifying nearby restaurants, surfacing available market offers, and estimating mobile order pickup or delivery timing. You may limit access to your location data by adjusting the permissions in your device. If you grant us permission, we may collect location information when the app is running in the foreground or background.
(c) Order or purchase our products or services
We also collect information, through our business partners, relating to your purchases from us and our Franchised Operators and Licensees to process your transactions and to perform research and marketing analytics, such as the authorization code of the transaction, payment method, the date and time of the transaction, items purchased, the purchase price, and other order or purchase related information.
(d) Use social media platforms or other connected third-party services
We may obtain information about you from Linked Sites. For example, when you link your account or engage with the Online Services through Linked Sites such as third-party social media sites, you may be allowing us to have ongoing access to certain information stored on those Linked Sites as described to you by those Linked Sites (e.g., your public profile, profile photo, friends list). We may receive certain information about you which is stored on Linked Sites if other users of those sites give us access to their profiles and you are one of their friends or connections, depending upon your settings on those Linked Sites. The information we have access to from Linked Sites varies and is controlled by your privacy settings on each Linked Site and by your consent.
We also obtain some personal information from others, for example:
Your Friends and Family. We may obtain additional information about you when someone, like your friend or family member, provides your information to us as part of their transaction with us (e.g., facilitating an order pick-up) or a referral or promotional program (e.g., refer-a-friend program).
If we offer you the ability to share information with a friend or family member through email or other means, we rely on you to ensure that you only share information with individuals with whom you have a personal or family relationship and who would want to receive the communication. We will use the contact information you provide to communicate with your friend or family member on your behalf.
Franchised Operators and Licensees. We process information about you from our Franchised Operators and Licensees when we provide certain services for them. We may access and process personal information to provide these services, for example, to process your payment and manage mobile orders and other services like third-party delivery service order fulfilment on behalf of Franchised Operators and Licensees or at your direction. For more information, please see the “Franchised Operator and Licensee Online Services” Section.
CFA Group Entities and Other Third Parties. We may also collect personal information from CFA Group entities, third-party providers and business partners, including delivery partners, public databases, social media platforms, or third parties such as analytics or advertising and marketing providers, where permitted under applicable law.
We use substantially all categories of the information we collect, on its own and combined with other information we collect about you, for the following purposes:
(a) Providing our products or services to you
We use your information to process your orders and payments, including on behalf of another CFA Group entity and Franchised Operators and Licensees, and for operation of our business.
(b) Communicating with you
We use your information to communicate with you regarding our restaurants, products, services, events, promotions and other offers and respond to your inquiries, comments, feedback, stories, or postings. We may also provide information on our employment opportunities and job openings. You can unsubscribe from our email marketing communications at any time. See the “Communication Preferences” Section for more information.
(c) Customizing and improving your experience
We use your information to tailor our products, services, promotions, communications and the Services so that they are more useful and relevant to you, such as through targeted advertising and messaging personalization.
(d) Creating and managing your accounts with us
We use your information to create and manage your accounts (e.g., Chick-fil-A One accounts, registration for events, online ordering, mobile payments, contests, promotions, etc.) and administer your participation in our programs, events and other offerings. More information on the information we collect as part of the CFA One® Program is available in the Notice of Financial Incentives Section.
(e) Getting to know our customers
Your information helps us understand your preferences and provide and improve support related to our product and service offerings and marketing efforts. For example, we may use your information to:
(f) Marketing and advertising
We promote our products and services and aim to provide tailored ads to you and others. We may advertise our products and services using third-party websites or online services. Please see our Cookie and Interest-Based Advertising Policy to learn more about our advertising and marketing partners. You may opt out of targeted advertising by accessing our Cookie Preference Center located in the footer of each website we operate through which we disclose your information for targeted advertising.
(g) Fraud detection, security, legal enforcement and compliance
We use each category of your information to protect the security and integrity of our business and the Services, for enforcement of our agreement with you, for example, Terms and Conditions of Use, Chick-fil-A One Terms & Conditions, and Canadian Terms & Conditions of Use, as applicable, and our compliance with applicable law.
When we process information as de-identified information, we will not re-identify such de-identified information, except as permitted under applicable law.
Unless we notify you separately, we do not process your personal information for profiling in furtherance of decisions that produce legal or similarly significant effects as such term is defined under applicable law.
To perform our Services, we may disclose substantially all categories of your information within Chick-fil-A and to third parties as necessary to complete your order, to provide our products and services, for purposes described in the “How We Use Your Information” Section, or with your consent. However, we do not sell your personal information to third parties for their marketing purposes.
We may disclose your information to the following types of third parties:
(a) Within Chick-fil-A, with CFA Group Entities and Franchised Operators and Licensees
We disclose personal information within Chick-fil-A, Inc. and to CFA Group entities and Franchised Operators and Licensees to provide our products, services, promotions and other Services to you and for our marketing purposes, in accordance with applicable law. We may also disclose personal information to CFA Group entities and Franchised Operators and Licensees at your direction or request.
(b) Service providers
We may also disclose the personal information we collect to our analytics vendors and partners to develop aggregate analysis and business intelligence for our advertising and marketing purposes. For example, we use personal information to create custom audiences and measure the success of promotions.
When you watch videos on the Online Services, you agree that we may disclose your video viewing to or obtain information about your video viewing from analytics service providers, advertising partners and social media platforms.
(c) Other entities
We may also share personal information as may be necessary to detect security incidents and fraudulent or illegal actions or to protect the safety, property, or other rights of Chick-fil-A, Inc. and CFA Group entities, Franchised Operators and Licensees, and their respective employees, customers, visitors, users, service providers, or any other person or entity; to comply with law, a court order, or other legal process (which may include access by courts, law enforcement or governmental authorities in the US or other jurisdictions), or in connection with a legal investigation; to enforce any applicable terms and conditions and other agreements; as otherwise may be required or permitted by applicable law; or in accordance with your consent.
We provide you with the opportunity to access, update or delete certain information and to unsubscribe or opt-out from certain communications. For example, you may exercise your choices as described below. Please be aware that, if you do not allow us to collect and use your personal information, we may not be able to deliver certain products, services, promotions, or offerings to you.
(a) Opportunity to access, update and delete your information
(b) Communication preferences
You may choose how and whether to receive promotional or marketing communications from us. You may exercise your choices by following instructions available on the Online Services or in communications sent to you. For example, to unsubscribe from our email communications, follow the unsubscribe instructions contained in each of our email messages. Please note that we may continue to send transactional or account-related messages to you.
You may also receive communications from our Franchised Operators and Licensees. To opt out of these communications, please refer to the unsubscribe instructions contained in those communications.
Because we plan our communications in advance, it may take up to 3-5 business days for your “unsubscribe” request to become effective. If you continue to receive our communications after submitting an “unsubscribe” request, please let us know by contacting us using one of the methods listed in the “Contact Us” Section so that we can investigate the situation.
(c) Account deactivation
You may close your account by accessing your profile online. If a resident of the United States, you may also close your Chick-fil-A One account via your profile within the Chick-fil-A App or by calling Chick-fil-A CARES at 1-866-232-2040. Please note, you may not be able to close your account when you have a remaining balance on your Chick-fil-A One account or associated gift cards. Please contact us at the toll-free number as listed in the "Contact Us" Section. When you close your account, we may keep some of your information for legal or our internal business purposes.
We seek to keep your personal information secure by implementing reasonable technical, administrative, and physical safeguards to help us protect such information from unauthorized access, use, and disclosure. When we collect or transmit sensitive information such as a credit card number, we endeavor to use industry standard methods to protect that information. We also ask our third-party service providers to use reasonable security measures to protect your information from unauthorized access, use and disclosure. However, please be aware that no method of electronically transmitting or storing information is ever completely secure.
E-mail Security & How You Can Help
“Phishing” is a scam designed to steal your personal information. If you receive an e-mail that looks like it is from us asking you for your personal information which you suspect may be a scam, please notify us as provided in the “Contact Us” Section.
This Notice of Financial Incentives is provided by Chick-fil-A and applies to the Chick-fil-A One® loyalty program (the “Program”). We are providing this Notice of Financial Incentives because applicable law may require us to provide certain information about the Program and obtain your opt-in consent prior to entering you into the Program.
We reserve the right to add financial incentives to this Notice of Financial Incentives and to terminate the Program at any time at our sole discretion.
Summary of the Incentives
Your account receives points on qualifying purchases at eligible restaurants. Points are accumulated to get rewards that may be redeemed for discounts on future purchases. You may also be granted rewards for being a member, such as for your birthday, and receive access to insider content or personalized experiences.
Consumers can view the Program’s full Terms and Conditions. The categories of personal information collected include:
We may share this personal information with the categories of third parties listed in “How We Disclose Your Information.” We do not disclose personal information collected in connection with the Program to data brokers. We may disclose substantially all categories of personal information above to our social media, advertising, and analytics partners. We may process and share this information for targeted advertising.
How to Opt In to the Program
Register for an account online at Chick-fil-A.com or on the Chick-fil-A App.
Value of Consumer Data
In our good faith calculation, we consider the value of consumer data collected through the Program as the equivalent of relevant expenses related to the collection and retention of consumers’ personal information as part of the Program. The financial incentive we offer to consumers through the Program is reasonably related to the value of the consumer’s data.
Withdrawal from the Program
You have the right to withdraw from the Program at any time. Please note, withdrawing from the Program will result in the loss of earned points, unredeemed rewards, and eligibility to participate in events and promotions, and will also limit your ability to utilize the full suite of features available in the Chick-fil-A One® program because we will no longer be able to associate you with any points, rewards, or other events or promotions. You may withdraw by closing your Chick-fil-A One® account via your profile within the Chick-fil-A App or website or calling Chick-fil-A CARES (1-866-232-2040). Please call Chick-fil-A CARES (1-866-232-2040) if you have a remaining balance on your Chick-fil-A One® account or associated gift cards as you may not be able to close your account within the Chick-fil-A One® program.
We have collected the following categories of California Personal Information within the last 12 months from the sources listed below:
(a) Identifiers, such as a real name, physical address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, or other similar identifiers. This category of information is collected from you, your devices, and third parties such as Linked Sites, your family and friends, Franchised Operators and Licensees, and public databases.
(b) Personal information described in subdivision (e) of Section 1798.80 (California customer records statute), such as a name, address, telephone number, credit card number, debit card number, or other payment information. This category of information is collected from you, your devices, other CFA Group entities, Franchised Operators and Licensees or other third parties such as our business partners.
(c) Characteristics of protected classifications under California or federal law such as age, gender, race, ethnicity or national origin. This category of information is collected from you when you choose to provide it to us directly or indirectly through our service providers and business partners as part of our surveys and market research.
(d) Commercial information, including products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. This category of information is collected from you, your devices, other CFA Group entities, Franchised Operators and Licensees or other third parties such as our business partners.
(e) Internet or other similar network activity, including, but not limited to, browsing history, search history, browser settings like language preference, and information regarding a consumer’s interaction with a website, application, or advertisement. This category of information is collected from you and your devices.
(f) Geolocation data, including physical location or movements. This category of information is collected from you and your devices.
(g) Sensory data, including electronic, visual, or similar information. This category of information, such as photos, is collected from you and third parties such as Linked Sites, CFA Group entities, our service providers, or Franchised Operators and Licensees.
(h) Inferences, such as a profile about a consumer’s preferences, characteristics, and behavior, drawn from information we collect and insights we receive from third parties such as our marketing and advertising partners and data analytics providers.
(i) Sensitive personal information, such as account login information allowing access to an account, precise geolocation data, race, and ethnicity, in each case as further described above in the relevant categories. If you win a promotional prize or sweepstakes, we may also collect your W9 information, including FEIN or SSN for legal compliance. Please note we do not collect sensitive personal information for the purpose of inferring characteristics about you.
For each of the above categories, we use the California Personal Information for a variety of purposes such as:
We may also use the information we collect for operational purposes, purposes for which we provide you additional notice, provided that such additional purposes are compatible with the context in which the California Personal Information was collected, or with your consent.
Within the last 12 months, we have disclosed California Personal Information for our business purposes. To learn more about the categories of third parties with whom we share such information, please see the “How We Disclose Your Information” Section.
If you are a California consumer, you have certain rights related to your California Personal Information, including:
The Right to know what California Personal Information we have collected about you, including the categories of personal information, the categories of California Personal Information, the categories of sources from which the California Personal Information is collected, the business or commercial purpose for collecting, selling, or sharing California Personal Information, the categories of third parties to whom we disclose California Personal Information, and the specific pieces of California Personal Information we have collected about you.
You may request to exercise these rights by:
As required under applicable law, we will take steps to verify your identity before granting you access to information or acting on your request to exercise your rights. We may require you to provide your first name, last name, email address, the amount of your last transaction and the date of your last transaction to verify your identity in response to exercising requests of the above type. We may limit our response to your exercise of the above rights as permitted under applicable law. When you submit a request to exercise your rights above, we will use the information you provide to process your request and to maintain a record of your request and our response, as permitted under applicable law.
Under California law, you may designate an authorized agent to make a request on your behalf. You may make such a designation by providing the agent with written permission to act on your behalf. We will require the agent to provide proof of that written permission. To the extent permitted by law, we may require you to verify your own identity in response to a request, even if you choose to use an agent.
If you are an authorized agent submitting a request on behalf of a California consumer, please complete our privacy rights request form available here.
We publish metrics regarding the number of requests we have received, complied with (in whole or in part) or denied, and also the median number of days in which we responded to such requests, in the previous year, as applicable to the time period in which the CCPA was in effect.
The following details the metrics regarding consumer rights requests we received from all individuals, regardless of their state of residence, from January 1, 2022 to December 32, 2021.
Total Requests Received in 2022: 459
|Request Type||Received||Granted (in whole or in part)||Denied||Median Days to Respond|
|Request to Know||293||211||
|Request to Delete||166||105||
California Business & Professions Code Section 22575(b) (as amended effective January 1, 2014) provides that California residents are entitled to know how we respond to “Do Not Track” browser settings. We do not currently take actions to respond to Do Not Track signals because a uniform technological standard has not yet been developed. However, we respond to the GPC signals as the opt out preference signal as described in the “Cookies” Section above.
This California-specific addendum was last reviewed and updated as of June 19, 2023.If you are a resident of a state in which state-level privacy law is enacted (e.g., Colorado, Connecticut, Utah or Virginia), additional rights described in this Section may apply to you as applicable law comes into effect. Please note, at Chick-fil-A, we endeavor to respond to your privacy requests even if you are not a resident of a state in which state-level privacy law applies.
Your Privacy Rights
You may request to exercise these rights by:
If your rights request is denied, you may lodge an appeal with us. The response to your rights request will inform you of any appeal rights you may have and how you may exercise them.
We do not sell personal information, but if you wish to opt out of our targeted advertising as defined under applicable law, please visit our Cookie Preference Center, located in the footer of each website we operate through which we disclose your information for targeted advertising.
As required under applicable law, we will take steps to verify your identity before granting you access to information or acting on your request to exercise your rights. We may require you to provide your first name, last name, email address, the amount of your last transaction and the date of your last transaction to verify your identity in response to exercising requests of the above type. We may limit our response to your exercise of the above rights as permitted under applicable law. When you submit a request to exercise your rights described above, we will use the information you provide to process your request and to maintain a record of your request and our response, as permitted under applicable law.
Under applicable law, you may designate an authorized agent to make a request on your behalf. You may make such a designation by providing the agent with written permission to act on your behalf. We will require the agent to provide proof of that written permission. To the extent permitted by law, we may require you to verify your own identity in response to a request, even if you choose to use an agent.
If you are an authorized agent submitting a request on behalf of a consumer, please complete our rights request form available here.
The Online Services are not intended for children under the age of 13, without parental or legal guardian consent. We do not knowingly collect personal information from users in this age group. We may, from time to time, provide special features such as games, animations, stories and downloadable books that children may use in a designated area of the Online Services. When we do so, we do not collect personal information from children on such designated areas other than personal information used for the support of the internal operations of such designated area of the Online Services. If you believe your child has provided personal information to us, please contact us via the email listed in the “Contact Us” Section and we will work to delete it.
While your personal information is outside of your jurisdiction, it is subject to the laws of the country in which it is located, which may have different data protection laws than in your jurisdiction. Those laws may require disclosure of your personal information to authorities in that country.
For Canadian residents: For more information about our policies and practices regarding service providers outside of Canada, contact us using the contact information listed in the “Contact Us” Section.
We may allow a Franchised Operator or Licensee to link to the Online Services. Chick-fil-A, however, is not responsible or liable for any Franchised Operator or Licensee Online Services, even if it is linked to our Online Services, or for any Franchised Operator's or Licensee's online conduct and privacy practices.
Was this answer helpful?