Last modified: December 31, 2022
To learn more about the privacy practices of specific Yum! Brands affiliate companies (the “Brands”), please visit:
1. WHAT PERSONAL INFORMATION DO WE COLLECT ABOUT YOU?
We collect personal information in a variety of ways. For example, you may provide us your personal information when you place an order, register for an account or loyalty membership, make an online purchase, post a review, send us messages, subscribe to our mailing lists, newsletters or other forms of marketing communications, submit a job application, participate in a survey, contest or sweepstakes, redeem a promotion, or use some other feature of our Service.
We may link or combine your activities and information collected from you on our websites and mobile apps with information we have collected from you offline (e.g., in-store), information we receive from third parties, as well as information we collect automatically through tracking technologies (defined below). In some countries, we may also utilize session-replay technologies, which are software code to log your interactions with the Sites in a manner that allows us to reproduce your click mouse movements, scrolls, and keystrokes/key touches during sessions. This information allows us to provide you with a personalized experience regardless of how you interact with us, and helps us diagnose any usability problems to improve our Service. These third party partners may include FullStory, Google Analytics, Microsoft, and Splunk whose privacy choice procedures may be available on their websites.
The categories of personal information we collect may include:
Information you provide:
Contact and profile information. We may collect personal information, such as your name, phone number, address, payment card information, business information, gender, age, postal/zip code, and e-mail address, when you register for our Service, place an order for delivery, sign up for our mailing list, participate in an offer or loyalty program, redeem or participate in a promotion, enter a contest or sweepstakes, purchase or redeem a gift card, or otherwise communicate or interact with us. We use this information to create, verify and personalize your account, to fulfill your request or transaction, to communicate with you directly, and to send you marketing communications in accordance with your preferences.
Payment and transaction information. We may collect information such as items purchased, date and time of your transaction, amount purchased, whether you used a particular coupon or deal, and payment information, such as your credit/debit card or gift card or loyalty program details, when you make an in-store or online purchase. We use this information to fulfill your order and complete your transaction, update your rewards, detect and prevent fraud, and to inform our advertising and marketing.
Comments, chat and opinions. When you contact us directly (e.g., by email, phone, mail or by completing an online form or participating in online chat), we may transcribe your comments and opinions. We may also store comments and opinions you express when responding to surveys, entering a contest or sweepstakes or taking part in a promotion. We use this information to respond to your question or comment, to evaluate and improve our products and services and to inform our marketing and advertising activities. When you contact us directly to submit a concern, complaint or question, we may transcribe your comments and collect the personal information contained in your communications (e.g., contact information, health or medical information, photos, etc.). We use this information to respond to your questions or concerns, and to evaluate and improve our products and services.
Information we collect when you use our Sites and our Service:
Information you may post or submit to our Sites. We may collect information about how you use and interact with our Sites and our Service, including any content you post to the Service. If you share photos and video from a mobile device, we will access your device camera roll and camera with your permission as needed to post your content. If you need to update your permissions, you can do so in the “Settings” app of your device.
Address Book information. With your permission, we may access your contact list available on your mobile device or your email accounts, or you may choose to provide your friends’ contact information manually, so that you can send invitations or special content to your friends. When communicating with your friends, we may include your name and photo in order to let them know that you are the person extending the invitation or sending the message. With your permission, we may also send reminder emails to your friends on your behalf, which may also include your name and photo, and enable you to send invitations to your friends via email or SMS/text. We may retain your friends’ email addresses to let you know when the recipient received a gift card or other communication from us.
In-store data we collect:
In-store location information. In some locations, we may work with third party partners that collect location and movement data from your mobile device when you’re using a mobile app configured for this purpose. We receive aggregated information about visitors to our stores and may use this data to analyze foot traffic patterns and measure the effectiveness of our marketing and promotional campaigns. See “Your Choices and Control Over Your Information” below to learn how you may adjust location data collection through your mobile device.
In-store Wi-Fi. In some locations, we may offer free Wi-Fi services to our guests. Our Wi-Fi network providers may capture certain data from devices you connect to it, such as a unique device identifier. We may also enable Bluetooth or other technologies in our stores which enable us to detect the presence of your device in our stores or provide operational insights.
We may collect information about your in-store transaction such as items purchased, date and time of your transaction, amount purchased, and payment information, such as your credit/debit card or gift card details, when you make an in-store purchase. In-store video or images. In some locations, we use CCTV cameras in our stores for security, fraud, incident reporting and loss-prevention purposes, or to collect analytics, improve operations and other purposes.
Information provided by others:
Information provided by social networks. When you interact with our Service through various social media networks, such as when you “Like” us on Facebook or when you follow us or share our content on Facebook, Twitter, Snapchat, LinkedIn, Instagram or other social networks, we may receive some information about you that you permit the social network to share with third parties. We use this information to complete your profile, to better understand the demographics of our customers and to inform our advertising and marketing activities. The data we receive is dependent upon your privacy settings with the social network. You should always review and, if necessary, adjust your privacy settings on third party websites and social media networks and services before linking or connecting them to our Sites or Service.
Information we receive from authentication services you connect to our Service. Some parts of our Service may allow you to login through a third party social network or authentication service such as Facebook. These services will authenticate your identity and provide you the option to share certain personal information with us, which could include your name, email address, address book and contacts, or other information. The data we receive is dependent on that third party’s policies and your privacy settings on that third-party site. If you choose to connect a Google or Gmail account to our Sites, we will ask you to grant us application permissions to access your Gmail account. These permissions are necessary to sustain the functionality of our Sites. We will store your authentication token and account email address. This data will be securely stored to be used by us to provide you with the Service (including but not limited to logging into your account and sending emails). This data will not be voluntarily shared with any third parties, but we may provide this information to legal authorities upon their lawful request. Should you choose to disconnect your Gmail account or decide to close your account, any information from Google that is stored on our servers will be removed permanently. We do not use data obtained from our customers (from their Google accounts) for advertising purposes. We may need access to the user data to resolve a support issue, provide advice on service usage or provide any other help requested by the user, or as such access may be necessary for a security investigation or to comply with applicable laws.
We may offer Face ID, Touch ID or fingerprint authentication as a log-in method if you access the Service through an Apple or Android device equipped with authentication technology. We are only notified as to whether the authentication was successful and cannot access the data associated with the enrolled fingerprint. For more details, please refer to the fingerprint security guides offered by your device provider.
Information provided by others. From time to time, we may receive information about you from third parties and other users. For example, we may obtain information from our marketing partners or from third parties to enhance or supplement our existing user information. We may also collect information about you that is publicly available. We may combine this information with the information we collect from you directly.
Information provided by Yum! Brands entities and Franchisees. We may receive information about you from other Yum! Brands companies, affiliates and other Brands, or our franchisees, or the franchisees of other Brands, so that information you provide to one Brand may be used by another Brand to provide you services, develop more complete customer profiles to develop new products, understand our customers, and to communicate with you or provide you advertisements or other personalized content, in accordance with your permissions and applicable laws.
Information collected from applicants for employment:
If you apply for a job through our Sites, we collect the information you include in your application, which could include your name, address, phone number, email address as well as sensitive personal information including your work or education background and history and other such information. We may also obtain information about you from your references. We may also receive this information if you submit an application through a third party site or service, or if we receive your information through a recruiter or employment agency. We collect and use the personal information of applicants for employment to evaluate the application and the suitability of employment, and use sensitive personal information collected according to relevant applicable law.
This information will be retained for a period defined by our retention policies, which is tailored to the legal requirements of the location for which you are applying. We may retain an applicant’s personal information for a reasonable time period after the date of application for the purpose of assessing an individual's suitability for other employment opportunities within our organization, though we have no obligation to do so and the applicant may wish to submit another application to be considered for another job opening of interest.
If you are a resident of California, please follow this link for more information about our applicant data collection and use practices.
Please note that if you apply for a restaurant position, you may be submitting your application information to a Brand franchisee organization. Our Brands’ franchisees may have their own data collection and use practices that are not governed by this Policy.
2. HOW DO WE USE PERSONAL INFORMATION?
To fulfill your requests and provide our Services to you. For example, we or our franchisees may use your information to complete your order or other online and in-store transactions, deliver orders you place online, or respond to your customer service requests or feedback. We may also use your information to personalize your experience with us and facilitate our rewards or loyalty programs. We also use this information to provide the Service to you across our operations, including by supporting your in-store experience when you engage with our franchisee-owned locations.
For marketing and analytics purposes. We may send you communications about new features, updates, products and special offers. We may also use your information to serve you ads about products and special offers about our products or other products or services we think you might find interesting. We may also use individual and aggregate information about you to develop more complete customer profiles to develop new products, understand our customers, and to inform our marketing and advertising campaigns. For more information on your choices about marketing communications, see “Your Choices and Control Over Your Information” below and our Cookie and Ads Policy, available on our Site.
To communicate with you. For example, we may communicate with you about your account activities, such as by providing you transaction confirmations, alerting you when a gift card you sent has been received by the recipient, or updating you about employment opportunities for which you've applied. If you register with us, we may enroll you in our email newsletter or other periodic electronic communications and may also send you user surveys and promotional communications. We may communicate with you by email, postal mail, telephone, text message, or other means. We may use push notifications on our mobile apps to your mobile device. For more information on how to adjust your communications preferences, see “Your Choices and Control Over Your Information” below.
To monitor, improve and develop our products and services. We may use your information to understand our visitors and customers and tailor our product offerings accordingly. We may use your interactions with our Services as the basis for developing new customer service capabilities; for example, by using records of your website chats with our chatbot or phone call recordings with our customer service team to train artificial intelligence customer service. Your personal information may be used in combination with Yum! Brands, its subsidiaries and affiliates, and Brands personal information and transactions in order to understand our visitors, customers, and product responses. From time to time, we analyze statistics and trends to make our Sites and Services better and to develop new services or features.
3. WHAT INFORMATION MAY BE COLLECTED AUTOMATICALLY?
When you visit our Sites and Service, read our emails, or otherwise engage with us through a computer or mobile device, we and our third party partners may automatically collect information about how you access and use the Service and information about the device you use to access the Service.
This information allows us to improve your customer experience. For example, we may use this information to enhance and personalize your user experience, to monitor and improve our Sites and Services, and for other internal purposes. We typically collect this information through a variety of tracking technologies, including cookies, software code or software development kits, Flash objects, web beacons, embedded scripts, location-identifying technologies, and similar technology (collectively, “tracking technologies”). We may also collect this information if you connect to our in-store Wi-Fi, or if your mobile device is configured to search for available Wi-Fi networks, we may receive information about your device even if you don’t connect to our Wi-Fi services. Information we collect automatically about you may be combined with other personal information we collect directly.
Specifically, we and our third party partners may use tracking technologies to automatically collect usage and device information, such as:
Information about how you access the Service, such as the site from which you came and the site to which you are going when you leave our Sites, how frequently you access the Service, when and whether you open emails or click the links contained in emails, whether you access the Service from multiple devices, and other actions you take on the Service. Information about how you use the Service, such as the pages you visit, the links you click, the ads you view and click on, purchase information and your checkout process, your location when you access or interact with our Service, and other similar actions.
Information about the computer, tablet, smartphone or other device you use, such as your IP address, browser type, Internet service provider, platform type, device type/model/manufacturer, operating system, date and time stamp, a unique ID that allows us to uniquely identify your browser, mobile device or your account (including, e.g., a persistent device identifier or an Ad ID), and other such information.
Analytics information. We may collect analytics data, or use third party analytics tools, to help us measure traffic and usage trends for the Service and to understand more about the demographics and behaviors of our users. We, or our third party partners, may use the data collected through tracking technologies to: (a) remember information so that you will not have to re-enter it during your visit or the next time you visit the Sites; (b) provide custom, personalized content and information, including targeted content and advertising; (c) identify and contact you across multiple devices; (d) provide and monitor the effectiveness of our Service; (e) perform analytics and detect usage patterns on our Service; (f) diagnose or fix technology problems; (g) detect or prevent fraud or other harmful activities, and (h) otherwise to plan for and enhance our Service.
We and our third party partners may collect information through tracking technologies for personalized advertising purposes. See our Cookie and Ads Policy available on our Site to learn more. We may collect information about you whether you are logged into an account or not, and may associate this tracking data with your registration information; in which case, we will treat your tracking data as personal information.
Your choices to control tracking technologies. To understand your control over online tracking technologies, such as cookies, Flash cookies, and web beacons, please see “Your Choices and Control Over Your Information” below and our Cookie and Ads Policy, available on our Site. Service providers acting on our behalf may offer you the choice not to be tracked online, on their own service websites.
Do Not Track. There is currently no universally accepted standard for signaling Do Not Track, so we do not respond to “Do Not Track” signals from your browser at this time. Rather, we adhere to the standards established in this Policy.
4. HOW WE SHARE YOUR INFORMATION
We may share, sell or disclose your information in the instances described below. For further information on your choices regarding your information, see “Your Choices and Control Over Your Information” below.
Other Brands: We may disclose, sell or share personal information with Yum! Brands or other Brands and our affiliates, who may similarly use your information in the manner described in their Policies.
Our franchisees: Many of our restaurants are independently owned and operated by franchisees. We may disclose information with our franchisees, particularly when we collaborate in providing the Service to you. For example, we may need to disclose certain personal information with a franchisee in order to provide delivery and carry-out services that you may request through the Service. We also may disclose information with our franchisees in order to provide local offers and promotions that might interest you. These franchisees may also be authorized to use your personal information in the manner described in this Policy. Please note: our franchisees independently may have their own data collection and use practices that are not governed by this Policy.
Third parties at your request: You may choose to share your activities on the Service with your friends through email, text or on various social media networks. Other third party business partners involved in your customer experience may also receive your information, such as food delivery platforms.
Promotional partners: We may sell or share limited information with third parties with whom we partner to provide contests and sweepstakes, or other joint promotional activities. These partners will usually be clearly identified in the contest rules or promotional materials.
Select marketing and strategic business partners: We may sell or share limited data with our preferred marketing and strategic business partners so that they can provide you with information and marketing messages about products or services that may interest you. These parties may use your information in accordance with their own privacy policies. Online advertising partners: We may sell or share information with third party online advertising partners or permit these partners to collect information from you directly on our Sites to facilitate online advertising. To learn more, see our Cookie and Ads Policy, available on our Site.
Website function vendors: We may sell or share information with third party vendors and other service providers who provide us with website usage, statistics, and online tracking technologies. The sale or sharing of your information with these vendors depends on the location from where you access our services.
The public: When you provide feedback or post user content on our Service (e.g., if you post a product review on our Sites or comment on our social media sites), your information (e.g., your first name, last initial, state of residence, and your comments) may be displayed on our Sites or on our social media pages. When you engage with us on social media, we may tag your social media account or the social media account of others (e.g., to give photo credit to another user).
With your consent or at your direction: In addition to the sale, sharing and disclosure described in this Policy, we may share information about you with third parties whenever you consent to or direct such sharing.
Other instances in which we may disclose your personal information:
Service providers and advisors: Personal information may be disclosed with third party vendors and other service providers who perform services for us or on our behalf. This may include vendors and providers who engage in marketing or advertising activities or provide mailing or email services, tax and accounting services, product fulfillment, delivery services, payments processing, data enhancement services, fraud prevention, web hosting, or analytic services.
Purchasers and third parties in connection with a business transaction: Personal information may be disclosed to third parties in connection with a corporate transaction, such as a merger, sale of any or all of our company assets or shares, reorganization, financing, change of control or acquisition of all or a portion of our business by an affiliate or third party, or in the event of a bankruptcy or related or similar proceedings.
In connection with any of the above, we may share information with others in an aggregated or otherwise anonymized form that does not reasonably identify you.
5. YOUR CHOICES AND CONTROL OVER YOUR INFORMATION
Profile and settings: You may update some aspects of your account information and adjust your account settings by logging into your account. You may not be able to change your account information that is tied to aspects of active Services provided to you (such as your email address), and deleting your account may result in loss of accumulated rewards or promotions. Some changes may not be made in certain platforms, or take some time to take effect.
How to control your email preferences: You can stop receiving promotional email communications from us by clicking on the “unsubscribe link” provided in such communications. We make every effort to promptly process all unsubscribe requests. You may not opt out of service-related communications (e.g., account verification, transactional communications, changes/updates to features of the Service, technical and security notices). You may also be able to adjust certain communications preferences by logging into your account.
Geolocation and device Information: You may control the Service’s access to your device information through your “Settings” app on your device. For instance, you can withdraw permission for the Service to access your address book, location, photo stream, and camera. You may also control precise location tracking by adjusting your location services settings on your mobile device. We may continue to approximate your location based on your IP address or through other means when you access the Service through a computer or device.
Online advertising and tracking. Please refer to our Cookie and Ads Policy, available on our Site, to learn more about how we work with third party partners to collect data through tracking technologies for various purposes, including analytics and advertising, and to understand your choices.
6. HOW WE STORE AND PROTECT YOUR INFORMATION
Data storage and transfer: Your information collected through our Service may be stored and processed in the United States or any other country in which Yum! Brands, its affiliates or service providers maintain facilities. If you are located in regions with laws governing data collection and use that may differ from U.S. law, please note that we may transfer information, including personal information, to a country and jurisdiction that have data protection laws that may be more or less restrictive than those required under U.S. law.
Data retention: We will retain your personal information as long as reasonably necessary to maintain the Service, to meet legal and accounting obligations, and for the other purposes described in this Policy, or as otherwise required or permitted by law. We may anonymize and/or aggregate personal information and store it in order to analyze aggregate metrics and trends.
Keeping your information safe: Security of your information is very important to us, and we have put in place safeguards to preserve the integrity and security of information we collect and share with our service providers. However, no security system is impenetrable and we cannot guarantee the security of our systems at all times. In the event that any information under our control is compromised as a result of a breach of data security, we will take reasonable steps to investigate the situation and, where appropriate, notify those individuals whose information may have been compromised and take additional steps, in accordance with any applicable laws and regulations.
Anonymized Data: We will not attempt to re-identify your information that has been deidentified, in the course of providing services to other organizations.
7. JURISDICTIONAL DISCLOSURES
We may choose or be required by law to provide different or additional disclosures about our data privacy practices depending on your state or country of residence. Please review this section or applicable regional addenda to understand how our practices or policies may differ in your jurisdiction:
California. If you are a California resident, please click here for additional California-specific privacy disclosures. Colorado. If you are a resident of Colorado, please click here to exercise your privacy options. Connecticut. If you are a resident of Connecticut, please click here to exercise your privacy options. You may appeal any decision to decline to take action on your request by contacting us at the email address listed in Section 10 (“How to Contact Us”), below.
Nevada. Chapter 603A of the Nevada Revised Statutes permits a Nevada resident to opt out of future sales of certain covered information that a website operator has collected or will collect about the resident. To exercise your right to opt-out of sales subject to the Nevada Revised Statues please submit your request by clicking here: Do Not Sell My Info. Utah. If you are a resident of Utah, please click here to exercise your privacy options. Virginia. If you are a resident of Virginia, please click here to exercise your privacy options. You may appeal any decision to decline to take action on your request by contacting us at the email address listed in Section 10 (“How to Contact Us”), below.
If you are a South African resident, please click here for additional information about our data privacy practices.
If you are a Brazilian resident, please click here for additional information about our data privacy practices.
If you are a Canadian resident, please click here for additional information about our data privacy practices.
Where we have an establishment in the European Economic Area ("EEA"), the United Kingdom or Switzerland or we are processing personal data relating to individuals located in the EEA, the UK, or Switzerland, please click here for additional information about our data privacy practices.
8. CHILDREN’S PRIVACY
Because we understand how important it is to protect the privacy of children, we do not knowingly collect or solicit any information from children under the age of 13 on the Service, and we request that individuals under the age of 16 not provide us with personal information. In the event we learn that we have inadvertently collected personal information from a child under age 13, we will delete that information as quickly as possible. We urge parents to regularly monitor and supervise the online activity of their children, including visiting websites or using mobile apps. If you believe that we may have collected information from a child under 13, please contact us using the contact information below. For more information on specific country protections relating to the information of children, please review the specific country addendum below.
9. LINKS TO OTHER WEB SITES AND SERVICES
The Service may contain links to and from third party websites of our business partners, advertisers, and social media sites and our users may post links to third party websites. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability resulting from you following a link these websites. Additionally, other privacy policies may apply when you engage with us through a co-branded or co-sponsored promotional or marketing activity. We strongly recommend that you read the privacy policies and terms and conditions of use of any third party website or service to understand how your information will be collected, used and shared. We are not responsible for the privacy practices or the content on the websites of third-party sites.
10. HOW TO CONTACT US
Where appropriate, we provide you with choices as to how we use your personal information. You may also have certain rights under applicable data protection laws, which you may exercise free of charge. For more information regarding these rights, and the countries where these rights are available, please refer to the local contact information provided in the Jurisdictional Disclosures listed in Section 7. The contact details of our data protection officer, if one is appointed, can be found in the country-specific addendum. If you have questions or feedback about our collection and processing of personal data that is specific to the particular region in which you live, you may also reach us at: