SONIC Drive-In - Order Online

"We may also collect the following categories of sensitive personal information: Precise location through our mobile applications to help you find a drive-in, deliver ordered food, or notify you of an offering."

SONIC collects precise geolocation data through its mobile app, classified as sensitive personal information, for purposes that include marketing notifications beyond core ordering functionality.

"We disclose identifiers, payment information, transaction history, demographic information, usage information, and inferences with the multi-brand restaurant company Inspire Brands and our fellow brands within the Inspire family (Arby's, Baskin-Robbins, Buffalo Wild Wings, Dunkin', and Jimmy John's), and any future fellow brands. We provide this information for processing your purchases of or requests for products and services, providing advertising and marketing services."

Personal data including payment info, transaction history, and inferences is shared across six restaurant brands and any future brands added to the Inspire family, plus franchisees, service providers, and various third parties.

"We may combine information that we receive in-person with information we receive online, from third parties, and from our fellow brands (Arby's, Baskin-Robbins, Buffalo Wild Wings, Dunkin', and Jimmy John's)."

SONIC combines data from in-person visits, online activity, third-party sources, and five sibling restaurant brands to build unified consumer profiles across the Inspire Brands ecosystem.

"We will store your information for as long as necessary to fulfill to purposes for which the information is collected and used or as otherwise allowed by law. This means maintaining your personal information for as long as one of the following apply: Your personal information is needed to manage our operations, the relationship between us, or to satisfy another stated purpose; Your personal information is reasonably required for us to protect or defend our rights or property; or We are otherwise required or permitted by law to keep your information."

No specific deletion timeline is provided. The retention criteria are broad enough — managing operations, defending rights, or as permitted by law — to justify keeping data indefinitely.

"Usage information such as logs, session data, browser and operating system, device identifiers, IP address, and the site you are coming from or going to. We collect usage information and demographic information through tracking technologies like cookies, web beacons, and pixel tags on our website or in emails we send. Third parties also collect usage information on our behalf when you use our website or apps."

SONIC collects device identifiers, browsing history (referrer/destination sites), session data, and allows third parties to collect usage data directly from users' devices via embedded tracking technologies.

"Last updated: July 2024. Sonic Industries Services, LLC. You can access, manage, or delete your data at our Privacy Center."

The privacy policy includes a last-updated date but contains no provision requiring notice to users before changes take effect, nor any mechanism for consent to updated terms — users must check the policy themselves.