Last Updated: November 29, 2019
When we use the term “personal information” in these CA Disclosures, we mean information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.
For the purposes of these Disclosures, personal information does not include:
- Publicly available information from government records.
- Deidentified, aggregated or anonymized information that is maintained in a form that is not capable of being associated with or linked to you.
- Information excluded from the CCPA's scope, such as health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the California Confidentiality of Medical Information Act (CMIA) or clinical trial data; or information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FRCA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA), and the Driver's Privacy Protection Act of 1994.
- Information relating to our employees, contractors and other personnel.
2. COLLECTION AND USE OF PERSONAL INFORMATION
We collect personal information from and about you for a variety of purposes. For example, we use personal information:
- To fulfill your requests, process your transactions and provide our Services to you.
- To communicate with you.
- For marketing and advertising purposes.
- To monitor, improve, and develop our products and Services.
- To protect the security and integrity of our business, comply with legal requirements and obligations, and as otherwise permitted or required by law.
In the last 12 months, we may have collected the following categories of personal information:
Personal Information Collected
Identifiers, such as your name, address, phone number, email address, date of birth or other similar identifiers.
California Customer Records (Cal. Civ. Code § 1798.80(e)), such as birthdate, contact information and payment information.
Protected Classification Characteristics, such as age and gender
Commercial Information, such as shopping and purchase history.
Biometric Information, such as face, eye or other biometric scans.
Internet/Network Information, such as device information, logs and analytics data.
Geolocation Data, such as precise location information from your device or generated based on IP address.
Sensory Information, such recordings of phone calls with us, where permitted by law.
Profession/Employment Information, such as your employment history (applicants only).
Non-Public Education Information (20 U.S.C. § 1232g, 34 C.F.R. Part 99), such as educational history, degree (for applicants)
Other Personal Information, including loyalty program data, information you post on our social media pages or otherwise provide to us.
3. DISCLOSURE OF PERSONAL INFORMATION
The categories of third parties to whom we may sell or disclose your personal information for a business purpose include:
- Other Brands and our affiliates, including Yum! Brands and our Franchises.
- Service providers and advisors that perform services for us, on our behalf, which may include providing marketing and advertising services, providing mailing or email services, tax and accounting services, data enhancement services, fraud prevention, web hosting, or similar services;
- Select marketing and strategic partners who use this information to market to you, to perform analytics and conduct research, or for other purposes;
- Promotional Partners with whom we partner to offer contests or other joint-promotional activities;
- Ad networks and advertising partners to deliver advertising and personalized content to you on our Service, on other sites and services you may use, and across other devices you may use, as well as provide advertising-related services such as reporting, attribution, analytics and market research;
- Analytics providers to better understand the demographics of our users and visitors, and to personalize, enhance and improve our Service;
- Social networks for advertising or personalization purposes, or to engage with you.
In the previous 12 months, we may have disclosed the following categories of personal information to third parties for a business purpose:
- All of the categories of personal information we collect, explained in the table above.
In the previous 12 months, we may have sold the following categories of personal information to third parties, subject to your settings and preferences and your Right to Opt Out:
- Commercial Information
- Internet / Network Information
In addition, please see Third-Party Tracking and Online Advertising below to learn how third party advertising networks, social media companies and other third party businesses collect and disclose your personal information directly from your browser or device through cookies or tracking technologies when you visit or interact with our websites, use our apps or otherwise engage with us.
4. YOUR CALIFORNIA CONSUMER RIGHTS
As a California resident, you may be able to exercise the following rights in relation to the Personal Information about you that we have collected (subject to certain limitations at law):
You have the right to request any or all of the following information relating to your personal information we have collected and disclosed in the last 12 months, upon verification of your identity:
You have the right to request the deletion of personal information we have collected from you, subject to certain exceptions.
You have the right to direct us not to sell personal information we have collected about you to third parties now or in the future. The right to opt out of personal information sales is separate from our direct communications with you for marketing and advertising purposes.
You have the right not to receive discriminatory treatment for exercising these rights.
However, please note that if the exercise of these rights limits our ability to process personal information (such as in the case of a deletion or do not sell request), we may no longer be able to provide you our products and services or engage with you in the same manner.
California residents that have an established business relationship with us have rights to know how their information is disclosed to third parties for their direct marketing purposes under California’s “Shine the Light” law (Civ. Code § 1798.83).
5. TO EXERCISE YOUR CALIFORNIA CONSUMER RIGHTS
To exercise your Right to Know or your Right to Request Deletion, effective January 1, 2020 please submit a request by:
- Filling out our California Consumer Rights Request Form, or
- Calling 1 (800) 822-6235
We will need to verify your identity before processing your request, which may require us to request additional personal information from you. We will only use personal information provided in connection with a Consumer Rights Request to review and comply with the request.
In certain circumstances, we may decline a request to exercise the rights described above, particularly where we are unable to verify your identity or locate your information in our systems. If we are unable to comply with all or a portion of your request, we will explain the reasons for declining to comply with the request.
To Exercise Your Right to Opt Out of Personal Information Sales
Unless you have exercised your Right to Opt Out of personal information sales, we may sell personal information to third parties for monetary or other valuable consideration. The third parties to whom we sell personal information may use such information for their own purposes in accordance with their own privacy statements, which may include reselling this information to additional third parties.
To exercise the Right to Opt Out of Personal Information Sales, you may submit a request by clicking the following link: Do Not Sell My Info
Third Party Tracking and Online Advertising
We utilize third-party partners to engage in online advertising. These ad networks, social media companies and other third-party businesses collect your personal information directly from your browser or device through cookies or similar tracking technology when you visit or interact with our website, use our apps or otherwise engage with us online. For example, they may collect Internet/Network information, such as a cookie or device ID, browsing history and website usage, Geolocation Data, and Inferences generated from your browsing history and interactions with our service as well as other sites and services. These third parties use your personal information to serve relevant ads on our site, on other websites or mobile apps, or on other devices you may use, or to personalize content and perform other advertising-related services such as reporting, attribution, analytics and market research. These third-party businesses may use such information for their own purposes in accordance with their own privacy statements, which may include reselling this information to additional third parties, including other advertising networks.
Minors Under Age 16
We do not sell the personal information of consumers we know to be less than 16 years of age, unless we receive affirmative authorization (the "Right to Opt In") from either the minor who is between 13 and 16 years of age, or the parent or guardian of a minor less than 13 years of age. Please contact us at Privacy Contact Us to inform us if you, or your minor child, are under the age of 16.
California’s “Shine the Light” Law
California's "Shine the Light" law (Civil Code Section §1798.83) provides certain rights to California residents that have an established business relationship with us with regard to the disclosure of certain types of personal information to third parties for their direct marketing purposes. To opt-out of having your personal information disclosed to third parties for their direct marketing purposes, please click Do Not Sell My Info and provide your contact information to be added to our suppression list.
6. ADDITIONAL INFORMATION
Updates to These CA Disclosures
We will update these CA Disclosures from time to time. When we make changes to these CA Disclosures, we will change the "Last Updated" date at the beginning of these Disclosures. All changes shall be effective from the date of publication unless otherwise provided in the notification.
If you have any questions or requests in connection with this Notice or other privacy-related matters, please send an email to Privacy Contact Us.