Hardee’s®

"Precise geolocation data (location within 1,850 ft.) — Through our Application when you consent to sharing your location data with us. To facilitate locating the Hardee's location nearest to you, for mobile order fulfillment and estimating mobile order pickup or delivery time. ... Rough geolocation data — Location information inferred using technologies on our Website."

Hardee's collects both rough geolocation via website technologies and precise GPS-level location through its app, and geolocation data is among the categories sold/shared with third-party advertisers.

"We partner with Microsoft Clarity and Microsoft Advertising to capture how you use and interact with our Website through behavioral metrics, heatmaps, and session replay to improve and market our products/services. ... We may participate in behavioral-based advertising. This means that Hardee's and/or one of our vendors may place a cookie on your browser, or use a web beacon, to collect information about your use of our Online Services so that Hardee's and/or a third party can provide advertising about products and services tailored to your interest."

Hardee's uses session replay tools, behavioral tracking cookies, and third-party advertising pixels to track users across their website and other sites on the internet, building profiles for cross-context behavioral advertising.

"The types of third parties to which Personal Information is sold or shared are third-party advertisers, some analytics vendors, companies that provide us with data-enrichment services, and third parties with which we partner to offer certain contests, sweepstakes, or other promotions. ... We may share information with our corporate affiliates (e.g., parent company, sister companies, subsidiaries, joint ventures, or other companies under common control)."

Personal information is shared with a wide range of third parties including corporate affiliates, franchisees, advertisers, analytics vendors, and data-enrichment companies that append third-party data to what Hardee's collects directly.

"We may change our Privacy Policy and practices over time. ... With most updates, your continued use of the Online Services after any update to this Privacy Policy will constitute your acceptance of the changes. If the changes materially alter how we use or treat your Personal Information, we will provide additional notification to you or obtain your consent when required by law."

Hardee's can change the privacy policy at any time, and for non-material changes, continued use of the service is treated as acceptance with no explicit consent required.

"We keep the categories of Personal Information described above for as long as necessary for the purposes described in this Privacy Policy or otherwise authorized by law. This generally means holding the information for as long as one of the following apply: Your Personal Information is reasonably necessary to manage our operations, to manage your relationship with us, or to satisfy another purpose for which we collected the information; ... We are otherwise required or permitted to keep your Personal Information by applicable laws or regulations."

Retention periods are undefined and based on vague criteria like 'as long as necessary,' with multiple overlapping justifications that could extend retention indefinitely.

"If you created an account through our mobile app, you may delete (cancel) that account and delete the Personal Information associated with it via the following steps: Submit a request titled "Mobile App Deletion Request" to [email protected]; You will receive an acknowledgement, via email, within five (5) business days; Our team will review the request and, as long as the account is active and information exists, delete the account and corresponding information within thirty (30) business days."

There is no self-service account deletion option for the mobile app—users must email support and wait up to 30 business days for deletion, creating unnecessary friction.