Privacy policy

This Privacy Policy (“Privacy Policy”) describes how information obtained from visitors to the www.carlsjr.ca website (“Website”) is collected, used, and disclosed by Carl’s Jr. Restaurants LLC (“Carl’s Jr.,” “we,” “us,” or “our”). This Privacy Policy also explains how you can exercise certain privacy rights, including those under Canadian privacy and data protection laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA), the Personal Information Protection Act (Alberta), and the Personal Information Protection Act (British Columbia) for persons located or resident in Canada. By accessing or using our Website or services, you indicate that you understand, accept, and consent to the collection, use, and disclosure of your Personal Information as described in this Privacy Policy. You may withdraw your consent to our collection, use, or disclosure of your Personal Information at any time by contacting our Privacy Officer as directed below; however, if you choose to withdraw your consent, we may not be able to provide you with certain services or communications.

1. Definition of Personal Information

“Personal Information” means information about an individual or that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with an identifiable individual, and which is submitted to and/or collected by the Website and maintained by Carl’s Jr. in an accessible form, and includes information actively submitted by you and passively collected information, as described below.

2. Categories of Personal Information Collected

We collect a variety of types of Personal Information. We will not collect additional types of Personal Information or use the Personal Information we collect for materially different, unrelated, or incompatible purposes without providing advance notice and obtaining your consent, as required by applicable law. We use the Personal Information that we collect to support our business operations and provide us with the services and communications that you request, as described in more detail in the chart below.

Context for Collection	Types of Personal Information Collected	Purpose for Collection/Use
Account Registration	We collect your name and contact information when you create an account.	We use this information to provide account related functionalities to our users. Accounts can be used for easy checkout and to save your preferences and transaction history.
Distance Information	If you provide us with access to location services on your device, we and our third-party providers may collect, use, store and share location data, including real-time geographic location of your device to provide services such as identifying nearby restaurants, online order fulfillment and estimating online order pickup or delivery time.	We use this information to understand our users and provide tailored services, including our food delivery services.
Employment	If you apply for a job posting on our Website, we collect information necessary for our franchisees to consider your application. This may include, among other things, your name, address, and contact information. Providing this information is required for employment.	We share your information provided for potential employment with our franchisees. We do not keep or store your information in this process. .
Feedback/Support	If you provide us feedback or contact us for support, we will collect your name and email address, as well as any other Personal Information that you send to us as part of your feedback, in order to reply.	We use this information to receive, and act upon, your feedback or issues.
Mailing List	When you sign up for one of our mailing lists, we collect your email address or postal address.	We also use this information to share information about our products or services with individuals that consent to receive such information.
Order Placement	We collect your name, billing address, shipping address, email address, and phone number when you place an order. When you provide your payment information (e.g., credit card or debit card number) in connection with an order you have placed, that payment information is collected directly by our third party payment processor. We do not collect or retain your credit card or debit card number.	We use your information to perform our contract to provide you with products or services.
Partner Promotion	We may collect information that you provide as part of a co-branded promotion with another company.	We use this information to fulfill our promotions.
Sweepstakes or contests	When you participate in a sweepstakes or contest, we collect information about you which includes contact information to notify you if you are selected.	We use this information to operate the sweepstakes. In some contexts, we are also required by law to collect information about those who enter into our sweepstakes.
Website interactions	We use technology to monitor how you interact with our Website. This may include which links you click on, or information that you type into our online forms. This may also include information about your device or browser.	We use this information to understand how you interact with our Website to better improve it, and to understand your preferences and interests in order to select offerings that you might find most useful. We also use this information to detect and prevent fraud.
Web logs	We collect information, including your Internet Protocol (IP) address (a number that is automatically assigned to a computer when the Internet is used).	We use this information to monitor our networks and the visitors to our websites. Among other things, it helps us understand which of our services is the most popular.

We have obtained the Personal Information listed above from the following sources:

3. Cookies and other Tracking Technology

To provide you with a more relevant and interesting experience, we may participate in behavioral-based advertising. This means that Carl’s Jr. and/or one of our vendors may place a cookie on your browser, or use a web beacon, to collect information about your use of our Website so that Carl’s Jr. and/or a third party can provide advertising about products and services tailored to your interest (including, without limitation, products and services offered by Carl’s Jr. and its affiliates). These ad servers or ad networks use technology to the advertisements and links that appear on the Website sent directly to your browser. They automatically receive your IP address when this occurs. Other technologies (such as cookies, JavaScript, or web beacons) may also be used by the third-party ad networks to measure the effectiveness of their advertisements and/or to personalize the advertising content that you see. Carl’s Jr. has no access to or control over these cookies that are used by third-party advertisers. You should consult the respective privacy policies of these third-party ad servers for more detailed information on their practices as well as for instructions about how to opt-out of certain practices. This Privacy Policy does not apply to, and Carl’s Jr. cannot control the activities of, such other advertisers or websites.

When you view this site, Carl’s Jr. may temporarily store some information on your computer. This information may be in the form of “cookies” or other web beacons to store information about visitors’ preferences, to record user-specific information on which pages a visitor accesses or visits, and customize web page content based on visitors’ browser types or other information that a visitor sends via their browser or other means. Passive information collection technologies such as cookies can make your use of the Website easier by allowing Carl’s Jr. to provide better service, customize web pages based on consumer preferences, compile statistics, analyze trends, and otherwise administer and improve the Website. By continuing to use our Website, you consent to the use of cookies and online tracking technologies as described in our Privacy Policy. You have the right to opt-out of these cookies, and can do so by visiting our cookie settings here.

If you receive email from us, we use certain tools to capture data related to when you open our message, click on any links or banners it contains, and make purchases. We use this information to understand how you interact with our communications to you.

4. Google Analytics

Carl’s Jr. has implemented certain features of Google Analytics advertising features for the Website, including Remarketing with Google Analytics, Google Display Network Impression Reporting, Google Analytics Demographics and Interest Reporting and Integrated services that require Google Analytics to collect data via advertising cookies and anonymous identifiers. As a part of these programs, Google, as a third party vendor, makes use of certain cookies and anonymous identifiers to serve ads on the Website and to provide certain behavioral, demographic, and interest data with third parties. Google’s use of these cookies enables it to serve ads to users based on their visit to the Website and other sites on the Internet.

Users may opt out of the use of the Google Analytics advertising features through Google Ads Settings (see https://www.google.com/settings/ads/plugin), Google Ad Settings for mobile apps, the Google Analytics Opt-out Browser Add-on (available at https://tools.google.com/dlpage/gaoptout/).

5. Your Rights

Under PIPEDA, you have certain rights regarding your Personal Information. Only you, or someone you legally authorize to act on your behalf, may make a request related to your Personal Information. We will only use the Personal Information provided in your request to process your request, including to verify your identity or that of your authorized agent. We cannot provide any Personal Information in response to a request if we cannot verify your or your authorized agent’s identity, or your authorized agent’s authority to make the request on your behalf, and/or if we cannot confirm that the collected Personal Information relates to you. See the “Methods for Submitting Requests to Carl’s Jr.” section below for information on how you can exercise your rights related to your Personal Information.

The right to know what types of Personal Information are being collected, used, or disclosed.

You have the right to know what types of Personal Information we collect, use, sell, share, or disclose about you, our business or commercial purposes for collecting, using, or disclosing Personal information, the categories of recipients to which we sell or share Personal Information, the types of Personal Information that we disclosed for each category identified, the categories of recipients to which we disclosed that particular category of Personal Information, and the categories of sources of that Personal Information. These categories are described below in the “Categories of Personal Information Collected” and “How We Disclose Personal Information” sections below.

The right to access collected Personal Information

An individual may request access to the Personal Information that we hold about themselves at any time. We will respond to requests for access promptly and within the legally mandated time frame subject to any refusals permitted or required by law. Any refusals to grant access will be accompanied by associated reasons and information regarding available recourse. See the “Methods for Submitting Requests to Carl’s Jr.” section below for information on how you can exercise your right to access collected Personal Information.

The right to correct inaccurate Personal Information

If you believe that the Personal Information we maintain about you is inaccurate, you have the right to request that we correct that information. See the “Methods for Submitting Requests to Carl’s Jr.” section below for information on how you can exercise your right to corrected Personal Information.

The right to request deletion of Personal Information

Subject to certain exceptions, you have the right to request that we delete Personal Information we have collected or maintained. Once we receive and verify your request, we will delete and instruct any applicable service providers to delete your Personal Information from our records, unless an exception applies or we are required or permitted by applicable law to maintain your Personal Information.

See the “Methods for Submitting Requests to Carl’s Jr.” section below for information on how you can exercise your right to delete collected Personal Information.

The rights of consumers who are less than 16 years of age

We do not knowingly collect, use, or disclose the Personal Information of consumers who are less than 16 years of age. In the event that we become aware that we have collected the Personal Information of a consumer that is under the age of 16 other than as permitted or required by law, we will dispose of that Personal Information, or otherwise treat it, in accordance with applicable laws. If you are a parent or legal guardian and believe that your child under the age of 16 has provided us with their Personal Information without the required consents under applicable law, please contact our Privacy Officer.

The right to object to certain processing

You may object to or withdraw your consent to our collection, use, or disclosure of your Personal Information by contacting our Privacy Officer at the address provided herein.

The right to appeal

Sometimes we are unable to process requests relating to your Personal Information, in which case, your request will be denied. If your privacy rights request has previously been denied by us and you believe we denied it in error, you may appeal for reconsideration of your request by emailing us at [email protected].

6. Methods for Submitting Requests to Carl’s Jr. regarding this Privacy Policy

You have the right to submit a verifiable request to us using the following methods:

7. Verification Process

Please note that, if you submit a request to know, request to delete, or request to correct, you will be asked to log into your account or to provide 2-3 pieces of Personal Information that we will match against our records to verify your identity. We may use the following information for verification purposes:

Depending on the request that you may, we may require you to provide a signed declaration affirming your identity (or your authorized agent’s identity, if applicable).

8. How Long We Keep Your Personal Information

We keep the categories of Personal Information described above for as long as is necessary for the purposes described in this Privacy Policy or otherwise authorized or required by law. This generally means holding the information for as long as one of the following apply:

Your Personal Information is reasonably necessary to manage our operations, to manage your relationship with us, or to satisfy another purpose for which we collected the information;
Your Personal Information is reasonably necessary to carry out a disclosed purpose that is reasonably compatible with the context in which the Personal Information was collected;
The Personal Information is reasonably required to protect or defend our rights or property (which will generally relate to applicable laws that limit actions in a particular case); or
We are otherwise required or permitted to keep your Personal Information by applicable laws or regulations.

Where Personal Information is used for more than one purpose, we will retain it until the purpose with the latest period expires. For more information about our retention policies, please contact our Privacy Officer using the contact details below.

9. How We Disclose Personal Information

We may disclose Personal Information to our service providers and contractors for business or commercial purposes as described below.

Affiliates. We may disclose information with our corporate affiliates (e.g., parent company, sister companies, subsidiaries, joint ventures, or other companies under common control).

Acquisitions. If another company acquires, or plans to acquire, our company, business, or our assets, we will also share information with that company, including at the negotiation stage.

Franchisees. We may disclose information to our franchisees to help us or our franchisees provide services to you, including with respect to the fulfillment of orders and response to inquiries. In addition, if you apply for a job, we will share the application information that you submit with the relevant franchisees.

Other Disclosures without Your Consent. We may disclose information in response to subpoenas, warrants, or court orders, or in connection with any legal process, or to comply with relevant laws. We may also share your information in order to establish or exercise our rights, to defend against a legal claim, to investigate, prevent, or take action regarding possible illegal activities, suspected fraud, safety of person or property, or a violation of our policies, or to comply with your request for the shipment of products to or the provision of services by a third-party intermediary.

Partner Promotion. We may offer contests, sweepstakes, or other promotions with third party partners. If you decide to enter a contest, sweepstakes, or promotion that is sponsored by a third party partner, the information that you provide will be shared with us and with them. Their use of your information may not be governed by this Privacy Policy and may be governed by their privacy policy as disclosed to you at the time your Personal Information is collected in connection with the contest, sweepstakes, or other promotion.

Service Providers. We may share your information with service providers. Among other things, service providers may provide online ordering and delivery services, payment processing, and customer relationship management solutions that help us to administer our Website, conduct surveys, provide technical support, process payments, and assist in the fulfillment of orders.

Other Disclosures with Your Consent. We may disclose your information to other third parties when we have your consent or direction to do so.

Note that any third party with whom we share Personal Information will provide the same or equal protection of user data as stated in this Privacy Policy.

We disclose the following types of Personal Information to the recipients described above for the following business purposes:

Processing your purchases of or requests for products or services
Performing services (including processing, maintaining, or collecting Personal Information) on our behalf (e.g., processing payments, supporting our promotions, customer relationship management services, ordering and delivery services, contests, gift cards or loyalty programs, and providing communications, technical, analytical, web hosting, cloud hosting and mobile application support, or other services on our behalf)
Auditing related to ad impressions
Ensuring security and integrity of Personal Information
Debugging to identify and repair errors that impair existing intended functionality
Short-term, transient use, including, but not limited to, non-personalized advertising
Providing advertising and marketing services relating to our products and services (except for cross-context behavioral advertising)
Undertaking internal research for technological development and demonstration
Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by us
Detecting or protecting against malicious, deceptive, fraudulent, or illegal activity

Since we may share your Personal Information with third parties, as described in this Privacy Policy, your Personal Information may be collected, used, and disclosed outside of your jurisdiction of residence, including in Canada and the United States. As such, your Personal Information may potentially be accessible to law enforcement and national security authorities of another jurisdiction in where local laws provide for a different level of protection for Personal Information. In certain circumstances, courts, law enforcement agencies, regulatory agencies, or security agencies in those other countries may be entitled to access your personal information.

If you would like further information about our policies and practices regarding third parties (including our service providers) with whom we disclose your Personal Information and how these third parties collect, use, and disclose Personal Information, please contact on our Privacy Officer using the contact details below.

10. Accessibility

You may be able to enable accessibility features on our Website to make this Privacy Policy more accessible to you. You may also contact us using the information herein to request an alternate format of this Privacy Policy.

11. Security of Personal Information

We consider the protection of all Personal Information we collect and receive from or about you to be critical to our corporate mission. Please be assured that we have security measures in place to protect against the loss, misuse, and alteration of any information we collect or receive from or about you in accordance with applicable law.

11.1 Procedural Safeguards: We maintain physical, technological, electrical, and procedural safeguards in connection with the collection, disclosure, storage, use, and deletion of Personal Information. Proof of your identity may be required upon request to disclose Personal Information in our possession to you.
11.2 Technological Safeguards: As with any transmission over the Internet, there is always some element of risk involved in sending Personal Information. To try and minimize this risk, we make commercially reasonable efforts to protect your Personal Information.
11.3 Organizational and Personnel Safeguards: Our employees who have access to Personal Information receive privacy training and are required to respect the confidentiality of such information pursuant to their employment agreement with us. Restrictions on access to Personal Information at the personnel level include restricted access to physical locations in which Personal Information is held, as well as technological protections (e.g., passwords). Disclosure and access to Personal information by personnel is limited to the extent required to reasonably fulfill the specific purposes for which it was provided.

Carl’s Jr. makes commercially reasonable efforts to ensure that Personal Information is protected while you are on the Website. However, the confidentiality of Personal Information transmitted over the Internet cannot be guaranteed. We urge you to exercise caution when transmitting Personal Information over the Internet. In the event that a security breach of the above-mentioned safeguards involving Personal Information in our control presents a real risk of significant harm, a notice of the breach will be provided without undue delay to the affected individual(s).

12. Changes to This Privacy Policy

We may change our Privacy Policy and practices over time. To the extent that our policy changes in a material way, the policy that was in place at the time that you submitted personal information to us will generally govern that information unless we receive your consent to the new policy. Our Privacy Policy includes an “effective” and “last updated” date. The effective date refers to the date that the current version took effect. The last updated date refers to the date that the current version was last substantively modified.

13. Contact Us for More Information

Consumers who have questions or concerns about our privacy policies and practices may contact the Privacy Officer through one of the following methods:

TEL: 1-800-227-5757
EMAIL: [email protected]
MAIL: 6700 Tower Circle, Suite 1000, Franklin, TN 37067