McDonald's

"Our online services and in-restaurant technology may collect information about the location of your mobile device or computer using geolocation and technology such as GPS, Wi-Fi, Bluetooth, or cell tower proximity. For most mobile devices and computer systems, you can disable the collection of this information by using the device or web-browser settings."

McDonald's collects precise geolocation data through multiple technologies including GPS, Wi-Fi, Bluetooth, and cell tower proximity, both through its apps and in-restaurant technology.

"We may collect information about your: advertising identifiers (for example, an Identifier for Advertising (IDFA) on Apple devices) or similar identifiers; online activity on other websites, applications or social media... We and selected third parties (such as our advertising networks) may use these technologies to collect information about your online activities, over time and across third-party websites and devices."

McDonald's tracks users across websites, apps, and devices using advertising identifiers, cookies, and ad network technologies to build behavioral profiles for targeted advertising.

"We may share all or substantially all categories of your personal information with: members of The McDonald's Family; vendors who help us operate our business (including information technology service providers and marketing agencies that we use as well as those who use the information to detect or prevent fraud for us, and who may use the information to provide fraud detection and prevention services to others); ... business partners if they are involved in your customer experience."

McDonald's shares substantially all categories of personal information with a broad network of affiliates, vendors, marketing agencies, and business partners, and notably allows fraud-detection vendors to reuse the data for their own services to other clients.

"We may collect information about your: internet protocol (IP) address; computer or mobile-device operating system and browser type; type of mobile device and its settings; unique device identifier (UDID) or mobile equipment identifier (MEID) of your mobile device; device and component serial numbers; advertising identifiers (for example, an Identifier for Advertising (IDFA) on Apple devices) or similar identifiers."

McDonald's collects detailed device information including hardware serial numbers, unique device identifiers, mobile equipment identifiers, and advertising IDs — well beyond what is needed for ordering food.

"Unless a specific retention period is mandated or permitted under applicable law, McDonald's will only retain personal information for the duration of time necessary to fulfill the purposes described in this Statement, including the applicable country-specific addendum. We will retain and use your information to the extent necessary to manage your relationship with us, personalize and improve your overall customer experience, and to comply with our legal obligations."

McDonald's provides no concrete retention timelines, using broad justifications like 'personalizing your experience' and 'managing the relationship' that could justify indefinite retention of personal data.

"From time to time we may change, modify, or amend this Statement in order to comply with the evolving regulatory environment or reflect the way we operate our business or use technologies. Subject to any applicable legal requirements to provide additional notice and/or obtain consent, any changes to this Statement will be communicated to you through existing McDonald's communication channels and resources."

McDonald's reserves the right to change the privacy statement at any time, with notification only through existing channels and no explicit consent mechanism beyond what is legally required.