Arby's Fast Food Sandwiches

"We disclose identifiers, payment information, transaction history, demographic information, usage information, and inferences with the multi-brand restaurant company Inspire Brands and our fellow brands within the Inspire family (Baskin-Robbins, Buffalo Wild Wings, Dunkin', Jimmy John's, and SONIC Drive-In), and any future fellow brands. We provide your information to service providers. We share identifiers, payment information, transaction history, demographic information, usage information, location, precise location, and inferences with service providers."

Arby's shares extensive personal data across six sibling brands and an open-ended list of future brands, plus numerous service providers, franchisees, and third parties including data brokers and advertising networks.

"We may also collect the following categories of sensitive personal information: Precise location through our mobile applications to help you find a restaurant, deliver ordered food, or notify you of an offering. Location or precise location may be used when you have granted that permission on your device."

Arby's collects precise geolocation data through its mobile app, and shares location and precise location with service providers and franchisees for multiple purposes including marketing notifications.

"We may combine information that we receive in-person with information we receive online, from third parties, and from our fellow brands (Baskin-Robbins, Buffalo Wild Wings, Dunkin', Jimmy John's, and SONIC Drive-In). We collect identifiers, demographic information, professional information, usage information, and protected classifications from our fellow brands, service providers, social media platforms, and third parties."

Arby's merges in-person, online, and third-party data — including from sibling restaurant brands and data brokers — to build unified user profiles and create inferences about users.

"We will store your information for as long as necessary to fulfill to purposes for which the information is collected and used or as otherwise allowed by law. This means maintaining your personal information for as long as one of the following apply: Your personal information is needed to manage our operations, the relationship between us, or to satisfy another stated purpose; We are otherwise required or permitted by law to keep your information."

Arby's provides no specific retention timelines, using open-ended criteria like 'managing operations' or being 'permitted by law' that effectively allow indefinite data retention.

"Usage information such as logs, session data, browser and operating system, device identifiers, IP address, and the site you are coming from or going to. We collect usage information and demographic information through tracking technologies like cookies, web beacons, and pixel tags on our website or in emails we send. Third parties also collect usage information on our behalf when you use our website or apps."

Arby's collects extensive device data including device identifiers, browser info, session data, and referrer URLs, and allows third parties to collect usage information directly from users' devices.

"Last updated: July 2024. Arby's is committed to your privacy. Please read through this policy to understand how we gather, use, store, and disclose your personal information."

The policy contains no commitment to notify users of changes — it only shows a 'last updated' date with no mechanism for alerting users to material changes or requiring consent to new terms.