ARBY’S PRIVACY POLICY
Updated 12/23/2022
APPLICABILITY
This Policy describes ARBY’S online and offline information collection and use practices. This includes for our websites and apps. It applies to information we collect from you when you interact with us. You can print a copy of this policy by clicking here.
CATEGORIES OF INFORMATION WE COLLECT
Listed below are details about the categories of information we collect:
Contact information. We collect your name and phone number. We also collect your street address and email address.
Payment information. We collect payment information when you make a purchase. This might include credit card or debit card number.
Demographic information. We collect your gender or age. We collect your zip code. If you complete a survey we may collect your ethnic background and the number and ages of children in your household. We may also collect your household income. We collect location information from website visitors and app users. This may include precise location information.
Biometric information. We do not collect biometric information.
Employment information. We collect name, age, phone number, and address from job applicants and employees. We also collect background check results and drug screening results. We may also collect bank account information.
Site usage information. We collect logs and session data when you visit our website or use our applications. We collect browser and operating system information. We collect what site you came from or what site you visit when you leave us. We collect your IP address. We also collect device identifiers.
BUSINESS PURPOSES FOR INFORMATION USE
We use the categories of information for the business and commercial purposes outlined here:
We use information to respond to your requests. We use contact information to respond to you. We also use contact information to communicate with you about our policies and terms. We use employment information to process your application.
We use information for transactional communications. We use contact and payment information to process payments. We use contact information for order delivery. If you sign up, we use contact information to send you our newsletter. We use contact and demographic information for our loyalty programs.
We use information for marketing purposes. We use contact information to notify you about new products and special offers or new features. This may be by email or text. It may also be on social media platforms. This includes information about Arby’s and other Inspire Brand companies. It also includes information we think you would find interesting. We use contact information to notify you if you win a promotion or sweepstakes.
We use information to improve our products and services. We use site usage information to make our website and products better. We use your contact, demographic, and site usage information to customize your experience with us. We use your demographic information for market research.
We use information to protect our company and constituents. We use contact, demographic, and site usage information to protect our company and customers. We use this same information to identify fraud and secure our systems. This includes measures to detect potential fraudulent credit card purchases. We use all categories of information for other purposes as permitted by law.
HOW WE COLLECT INFORMATION
We collect categories of information in the following ways:
We collect information directly from you. We collect your contact, demographic, and payment information from you. This could be in person. It could also be on our website or one of our apps.
We collect information passively. We use tracking tools to collect site usage and demographic information. Tracking tools include browser cookies and web beacons. We do this on our websites and in emails that we send to you. We collect information about users over time when you use our websites or apps. We have third parties collect personal information this way.
We collect information about you from third parties. We collect contact, demographic, and site usage information from our business partners. Social media platforms give us information about you. We purchase demographic information from third parties. We may collect information about you from other Inspire Brands companies.
WE COMBINE INFORMATION
We combine information collected in-person with that we receive online. We may also combine information we get from a third party with information we already have. We also combine information we have with information we get from our related brands.
WHEN WE SHARE INFORMATION WITH OTHERS
We share categories of information as described here:
We share information with related companies. We share information with our affiliates and subsidiaries. These related entities include Sonic Drive-In, Dunkin, Baskin Robbins, Buffalo Wild Wings, and Jimmy John’s. It also includes new brands bought by us. We will share information with future related companies. Information we share includes contact and payment information. It also includes demographic and site usage information.
We share information with vendors who perform services on our behalf. We share contact, demographic, payment and site usage information.
We share information if we think we have to in order to comply with the law or to protect ourselves. We share information we collect about you to respond to a court order or subpoena. We share information in response to a government agency or investigatory body request. We share information we collect when we investigate potential fraud.
We share information with any successor to all or part of our business. If all or part of our business was sold, we may share your information as part of that transaction. If there is a merger or acquisition, we may also share your information. If there is a financing or bankruptcy, we may share your information.
We share information as permitted by law and for other reasons we may describe to you.
YOU HAVE CERTAIN CHOICES
We provide you with options on how we use your information, as described here:
You can opt out of receiving our marketing emails. To stop receiving our promotional emails, follow the “unsubscribe” instructions in any promotional message you get from us. Even if you opt out of getting marketing messages, we will still send you transactional messages. These include responses to your questions or other necessary information about your account.
You can control cookies and tracking tools. To learn how to manage how we and our vendors use cookies and other tracking tools, and to read our Do Not Track Policy, click here.
Additional Disclosures for California Residents
These additional disclosures apply only to individuals who reside in California and are provided pursuant to the California Consumer Privacy Act, as modified by the California Privacy Rights Act of 2020 (the “CCPA”). If you work for ARBY’S, please see our California Employee Privacy Notice for additional disclosures. California job applicants can find additional disclosures here.
NOTICE AT COLLECTION
In the past 12 months, we have collected the following categories of personal information, sensitive information listed in the CCPA which can be found here. Additionally, the link contains information about how we may share and/or sell your data as defined by the CCPA.
Submitting Requests Relating to Your Personal Information
If you are a resident of California, you have the right to submit certain requests relating to your personal information as described below. To exercise any of these rights, please submit a request through our webform here or call us at 1-800-599-2729. Please note that, if you submit a request to know, request to delete, or request to correct, you will be asked to log into your account or to provide 2-3 pieces of personal information that we will match against our records to verify your identity. You may designate an authorized agent to make a request on your behalf; however, you will still need to verify your identity directly with us before your request can be processed. An authorized agent may submit a request on your behalf using the webform or toll-free number listed above.
Right to Know. You have the right to know what personal information we have collected about you, which includes:
(1) The categories of personal information we have collected about you, including
a. The categories of sources from which the personal information was collected
b. Our business or commercial purposes for collecting, selling, or sharing personal information
c. The categories of recipients to which we disclose Personal Information
d. The categories of personal information that we sold, and for each category identified, the categories of third parties to which we sold that particular category of personal information
e. The categories of personal information that we disclosed for a business purpose, and for each category identified, the categories of recipients to which we disclosed that particular category of personal information
(2) The specific pieces of personal information we have collected about you
Right to Delete Your Personal Information. You have the right to request that we delete personal information we collected from you, subject to certain exceptions. Where we use deidentification to satisfy a deletion request, we commit to maintaining and using the information in deidentified form and will not to attempt to reidentify the information.
Right to Correct Inaccurate Information. If you believe that personal information we maintain about you is inaccurate, you have the right to request that we correct that information.
Right to Opt Out of Sales and Sharing of Personal Information. You have the right to opt out of the sale of your personal information, and to request that we do not share your personal information for cross-context behavioral advertising. To opt-out, please click here. If you choose to use the Global Privacy Control (GPC) browser signal, you will be opted out of cookie-based sales or sharing of personal information, and will need to turn it on for each browser you use.
Right to Limit Use and Disclosure of Sensitive Personal Information. To limit our use of your Sensitive personal information, if applicable, please click here.
Rights Related to Automated Decision-Making. You have the right to opt out of automated decision-making, including profiling, that we use to evaluate certain personal aspects relating to your performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location, or movements.
Right to Non-Discrimination for the Exercise of Your Privacy Rights. If you choose to exercise any of your privacy rights under the CCPA, you also have the right not to receive discriminatory treatment by us.
Notice of Financial Incentive
We may offer loyalty programs that provides benefits such as rewards points and discounts to those who choose to participate. From time to time, we also offer coupons, discount codes, or offers for free products that required a sign-up. Participation requires you to provide some personal information, such as Identifiers, Personal Records, Internet or other electronic network activity information, and Commercial Information. The incentives associated with our loyalty programs are designed to reward loyal customers for continuing to purchase our products.
We have made a good faith estimate that the value of consumers’ personal information provided in connection with our loyalty programs is roughly equivalent to the relevant expenses related to the collection and retention of that personal information. Any difference in price or benefits provided to customers who participate in our loyalty programs is reasonably related to the value of the personal information provided. By joining our loyalty program, you consent to any financial incentive associated with the program. You have the right to withdraw from the financial incentive at any time by cancelling your participation in the loyalty program.
Additional Disclosures for Virginia Residents
This Section supplements the other parts of our Privacy Policy, and provides additional information for Virginia consumers, including how to exercise their rights under the Virginia Consumer Data Protection Act (“VCDPA”).
A. Additional Information about Certain Data Uses
Targeted Advertising. We may process your personal information for targeted advertising (as the term is defined in the VCDPA). To opt out, please click here.
Sales of Personal Information. We do not sell personal information as defined under the VCDPA.
B. Making a Privacy Rights Request
If you are a resident of Virginia, you have the right to submit certain requests relating to your personal information as described below. To exercise any of these rights, please submit a request through our webform here. Please note that we will need to authenticate your identity before your request can be processed. For authentication, you will be asked to log into your account or to provide 2-3 pieces of personal information that we will match against our records.
Right to Access and Data Portability. You have the right to confirm whether we are processing your personal information, to access your personal information, and to obtain a copy of personal information you provided to us in a portable format.
Right to Correct. You have the right to request that we correct inaccuracies in your personal information, taking into account the nature of the personal information and our purposes for processing it.
Right to Delete. You have the right to request that we delete your personal information.
Right to Opt Out. Under the VCDPA, you have the right to opt out of the following uses of your personal information: (a) targeted advertising; (b) the sale of personal information; and (c) profiling in furtherance of decisions that produce legal or similarly significant effects. We do not use your personal information in ways that qualify as sales or profiling under the VCDPA. To opt out of targeted advertising, please submit a request as outlined above.
Right to Appeal. Sometimes we are unable to process requests relating to your personal information, in which case, your request will be denied. If you are a resident of Virginia whose privacy rights request has previously been denied by us and you believe we denied it in error, you may appeal for reconsideration of your request. The link to appeal is found in the email communication we send once your original request is completed.
Please note that if you make a privacy rights request, we will retain a record of your request for recordkeeping purposes.
To manage your preferences for advertising, cookies and other tools, read our Ad and Cookie policy.
We generally do not treat consumers differently if they exercise a privacy right under California law. However, you will need to set up a Web or App Account (and voluntarily provide the personal information requested through each program) in order to receive certain member discounts or benefits. In such circumstances, we offer a price difference that is reasonably related to the value of your data to us in connection with the program. The price difference reflected in the Digital Engagement Programs is provided based upon our reasonable determination of the estimated value of the data you provide to us, which takes into consideration a number of factors, including, among other things, our estimates regarding the anticipated revenue generated from such data and the actual and anticipated expenses that we incur in the collection, storage, and use of such data in connection with the Digital Engagement Programs. If you choose to withdraw from our Digital Engagement Programs or choose not to create a Web or App Account, you can still continue to use our websites and apps as a guest user.
Nevada resident rights. We also have disclosure obligations in Nevada. We do not exchange Nevada residents’ personal information for money with anyone so they may license or sell the personal information to additional parties. Nevada residents may opt out of the future sale of their information to a third party so that they may license or sell information by emailing us at [email protected]: You may contact us with questions or requests regarding the sale of your information as described below.
WE USE REASONABLE SECURITY MEASURES.
The Internet is not 100% secure. We cannot promise that your use of our sites or apps will be completely safe. We encourage you to use caution when using the Internet. This includes not sharing your passwords.
WE STORE INFORMATION IN THE UNITED STATES
If you live outside of the United States, you understand and agree that we may transfer your information to the United States. This site is subject to U.S. laws, which may not afford the same level of protection as those in your country.
THIRD PARTY SITES AND LINKS
If you click on a link to a third party site, you will be taken to websites we do not control. This includes our pages on social media sites. This policy does not apply to the privacy practices of these websites. Read the privacy policy of other websites carefully. We are not responsible for these third party practices.
INFORMATION COLLECTION FROM CHILDREN
Our sites and apps are meant for adults. We do not knowingly collect personally identifiable information from children under 13 without permission from a parent or guardian. If you are a parent or legal guardian and think your child under 13 has given us information, you can email us. You can also write to us at the address listed at the end of this policy. Please mark your inquiries “COPPA Information Request.” Parents, you can learn more about how to protect children’s privacy on-line here.
CONTACT US
If you have questions about this Policy, you can write to us at: Arby’s Restaurant Group, Inc., Attn: Legal Department, Privacy Counsel, 3 Glenlake Parkway NE, Atlanta, GA 30328. You can email us at [email protected]. You can call us at 1-800-599-2729.
POLICY UPDATES
We may make changes or updates to this Policy. We will notify you of at your email address we have on file of any material changes to this Policy as required by law. All changes will also be posted on our website. Please check our site periodically for updates.
