Carl's Jr.®

"We may participate in behavioral-based advertising. This means that Carl's Jr. and/or one of our vendors may place a cookie on your browser, or use a web beacon, to collect information about your use of our Online Services so that Carl's Jr. and/or a third party can provide advertising about products and services tailored to your interest. We also partner with Microsoft Clarity and Microsoft Advertising to capture how you use and interact with our Website through behavioral metrics, heatmaps, and session replay."

Carl's Jr. uses cross-context behavioral advertising, session replay tools, heatmaps, and third-party cookies to track users across their website and other sites on the internet, building behavioral profiles for targeted advertising.

"The types of third parties to which Personal Information is sold or shared are third-party advertisers, some analytics vendors, companies that provide us with data-enrichment services, and third parties with which we partner to offer certain contests, sweepstakes, or other promotions. We may also get Personal Information from other companies. For example, service providers such as third-party delivery platforms, vendors who help us understand and use the information we collect, third parties that enrich the Personal Information we collect with data collected from other sources."

Personal information is shared with a wide range of third parties including advertisers, analytics vendors, and data-enrichment companies, and Carl's Jr. also receives enriched data about users from external sources.

"Precise geolocation data (location within 1,850 ft.) — Through our Application when you consent to sharing your location data with us. To facilitate locating the Carl's Jr. location nearest to you, for mobile order fulfillment and estimating mobile order pickup or delivery time. Rough geolocation data — Location information inferred using technologies on our Website."

Carl's Jr. collects both precise geolocation (within 1,850 ft) through their app and rough geolocation through website technologies, using it not only for service delivery but also for advertising personalization and analytics.

"We may change our Privacy Policy and practices over time. With most updates, your continued use of the Online Services after any update to this Privacy Policy will constitute your acceptance of the changes. If the changes materially alter how we use or treat your Personal Information, we will provide additional notification to you or obtain your consent when required by law."

Carl's Jr. can change its privacy policy at any time and treats continued use as acceptance of the new terms, with additional notice only promised for material changes and only when legally required.

"We keep the categories of Personal Information described above for as long as necessary for the purposes described in this Privacy Policy or otherwise authorized by law. This generally means holding the information for as long as one of the following apply: Your Personal Information is reasonably necessary to manage our operations, to manage your relationship with us, or to satisfy another purpose for which we collected the information; The Personal Information is reasonably required to protect or defend our rights or property."

There are no specific retention timelines. Data is kept indefinitely as long as Carl's Jr. deems it 'reasonably necessary' for broad purposes like managing operations or defending their rights.

"If you created an account through our mobile app, you may delete (cancel) that account and delete the Personal Information associated with it via the following steps: Submit a request titled "Mobile App Deletion Request" to [email protected]; You will receive an acknowledgement, via email, within five (5) business days; Our team will review the request and, as long as the account is active and information exists, delete the account and corresponding information within thirty (30) business days."

There is no self-service account deletion option in the app. Users must email support and then wait up to 30 business days for their account and data to be deleted.

"Internet or similar network activity — Browsing history, search history, information on a consumer's interactions with our Online Services, advertisements, and email communications. We have implemented certain Google Analytics advertising features for our Website, including Remarketing with Google Analytics, Google Display Network Impression Reporting, Google Analytics Demographics and Interest Reporting and Integrated services that require Google Analytics to collect data via advertising cookies and device identifiers."

Carl's Jr. collects browsing history, search history, and device identifiers through Google Analytics and other tracking technologies beyond what is needed for core restaurant ordering functionality.