McDonald's Australia Limited ABN 43 008 496 928 (McDonald’s) and each of its independently owned franchisees ('McDonald’s Franchisees”) (collectively referred to as “McDonald’s”, “we”, “us” or “our”) are committed to respecting your personal information. Our privacy policy sets out how we collect, use, store and disclose your personal information. When you use our Websites, Apps, or provide your personal information to us, you consent to your personal information being collected, held, used and disclosed as set out in our privacy policy.
Information we collect and hold
McDonald’s collects personal information about you in a number of ways, including when you:
- use our websites (including mcdonalds.com.au), social media pages, and internal websites or intranet (“Website”);
- use our mobile and tablet apps, including the MyMacca’s app (“Apps”); and
- interact with us and provide personal information by any other means, including either physically or electronically; and
- are present at or outside our restaurants, including images, video and audio from CCTV, other cameras (including body cameras), and other security and recording systems,
(collectively referred to as “Collection Channels”).
Personal information that McDonald’s collects and holds may include your name, email address, delivery address, date of birth, phone number, payment method, social media handles, images, audio and video of you, and other identifying information you choose to provide via a particular Collection Channel.
When you use one of our Websites or Apps, we may also collect personal information about you in the following general categories:
- Location information: If you permit an App to access location services in your settings, then we collect your device location to deliver your order or to send you alerts.
- Transaction information: We collect your transaction details when you place an order via a Website or App, including the products you have ordered, the date and time of your order, the amount charged and your loyalty entitlements.
- Usage and preferences: We collect information about how you interact with our Websites or Apps, including the pages you visit, your preferences and the settings that you choose. We do this through cookies and other similar technology.
- Device information: We collect information about your device, such as the hardware model, operating system, preferred language, unique device identifier and mobile network.
- Employee information: If you are a job applicant, an employee in one of our restaurants or our corporate offices, or a former employee, and use a Website or App, we collect information about the training modules you have completed, the forms you have submitted, personal information you have provided, the approvals you have given or received, and other similar information related to your job.
- Other information: We also collect and log information such as your IP address, access dates and times, browser type and pages visited when you interact with a Website or App.
We also collect personal information about you from third parties, including when:
- you choose to create an account or register for a product or service via a Website or App using a social media platform (e.g. Facebook, Instagram);
- you have consented to a third party disclosing your personal information to us (e.g. when you enter a competition or promotion run by a third party for us); and
- it is otherwise lawful for a third party to disclose your personal information to us.
We also collect personal or anonymous information about you from other sources and sometimes combine that information with other information collected from you or from third parties for the purposes disclosed in this privacy policy.
McDonald’s collects and holds personal information
McDonald’s will only collect or monitor any personal information about you as provided in this privacy policy.
Active information collection
McDonald’s may collect your personal information via our Collection Channels when you:
- purchase a product or make a booking through a Website or App;
- participate in any offers, marketing activities (including competitions), loyalty or rewards program or promotional activities;
- contact us or provide us with personal information directly via any medium including a Website or App, SMS or other message service and email, social media platforms, mail, telephone or in person;
- interact with a Website or App for a specific purpose;
- browse a Website or App generally;
- sign-up to, or register an account via any Collection Channel;
- are present at or outside a McDonald’s restaurant and are captured via our security and recording systems (including in car parks, drive thru areas, restaurant entrances or exits and publicly accessible areas); or
- apply for employment with McDonald’s.
Platform permissions
Mobile platforms such as iOS and Android may define certain types of information or data that our Apps cannot access without your consent. Each platform has its own permissions system for obtaining your consent. For example, the iOS platform may alert you the first time an App wants your permission to access certain types of data (e.g. location services) and will provide you the option to consent to that request. Android devices may notify you of the permissions that an App seeks before you first use the App and your subsequent use of the App constitutes your consent. You can manage your platform level permissions via the Settings section on your device. For more information, please contact your device provider or refer to the user manual for your device.
Queries
You may contact McDonald’s with any queries via email: privacy@au.mcd.com or at McDonald's Australia Limited (Attention: McDonald's Privacy Officer), PO Box 392 Pennant Hills NSW 2120 Australia.
Cookies and passive information collection
We may use tracking technologies to collect personal information about you when you use and access a Website or App, including cookies, internet tags or web beacons, and navigational data collection (e.g. log files, server logs, and clickstream data). For example, we may collect information about the date, time and duration of visits and which pages of a Website or App are most commonly accessed. This browsing information is generally not linked to your identity, except where you access a Website or App via links in a message we have sent or where we are able to identify the device or user accessing a Website or App.
We may combine your anonymous information, browsing information or other information collected through tracking technologies with your personal information collected via our Collection Channels in order to understand and remember your preferences and interests. By accessing a Website or App via links and/or by accessing a Website or App where you have identified yourself, you consent to the collection of this information.
Purposes for which McDonald’s collects, holds, uses and discloses personal information
We collect, hold, use and disclose your personal information for our primary purposes, including:
- for the purposes stated on a particular Collection Channel or Privacy Collection Statement;
- to maintain and improve the functionality of a Website or App;
- to fulfil obligations in respect of any sale and purchase contract and/or any other contract between you and McDonald’s;
- to manage your orders or facilitate payment, for example, when you use our App the drive thru screen and kiosk will display your name and crew members will greet you by name;
- in the case of images and video/audio from our security and recording systems used in and around our restaurants, for security, safety, compliance, and operational purposes;
- to send you any technical, administrative or legal notices important to our Websites and Apps;
- to provide you with information about your transactions and loyalty entitlements;
- to provide marketing materials and information about our products and services, events, special offers, competitions and/or promotions, or to request your feedback for promotional purposes;
- to respond to customer enquiries or complaints;
- to manage your employment or process your application for employment with McDonald’s (including McDonald’s franchisees), to provide employee assistance programs and facilitate effective employment practices;
- to obtain opinions or comments about products and/or services and to conduct other market research and development (including to record statistical data for marketing analysis);
- to enter you into and administer promotions/competitions;
- to provide, maintain and improve our products and services;
- to customise a Website or App based on your preferences;
- to allow you to use a Website or App;
- to share with trusted third parties including professional service providers, our related bodies corporate, our franchisees, our suppliers and our promotional partners and other trusted third parties (and their directors, servants and agents) and agencies (McDonald’s Family); and
- to share with your social media communities, to the extent allowed by you.
Not providing information
You don’t have to provide any personal information to us. However, if you do not do so, this may affect or completely restrict your ability to use our products and services, including our Websites or App, our ability to provide you with relevant content, prizes, products and services, or our ability to process your queries and employment applications.
Sharing your personal information
McDonald's shares personal information with the global McDonald’s Family and our service providers for the purposes described in this privacy policy.
McDonald’s recognises the trust with which you provide personal information, and except as stated in this privacy policy or any particular Privacy Collection Statement, your information will not be used or disclosed for any other purposes without your consent. However, McDonald's reserves the right to use or disclose any information, including personal information, as needed to satisfy any law, regulation or legal request, to protect the rights or property of McDonald's, any member of the McDonald's Family, or any member of the public, to protect the integrity of a Website or App, to fulfil your requests, or to cooperate in any law enforcement investigation or an investigation on a matter of public safety.
Contact by McDonald’s and third parties
If you would like to opt out of receiving advertising communications from us, the McDonald’s Family and our trusted third parties, you can unsubscribe.
We may still send you transaction and administrative information.
If you no longer wish to receive any communications from McDonald’s via an App, you can delete the App from your device.
Ability of others to view information
McDonald’s provides areas on Websites, Apps and various social media platforms where you can upload user-generated content, post or provide information about yourself, communicate with other users, provide reviews for content, products and/or services or interact with or vote on particular content. This information may be publicly posted on a Website, App or social media platforms and/or shared with others, including social media platforms and other public forums in which you choose to participate. This information may become publicly available and may be read, collected and used by others outside of a McDonald’s Website or App. McDonald’s is not responsible for the conduct of others who may read, collect and use this information.
Children
McDonald's is very sensitive to privacy issues. We are proud of our long-time commitment to our customers. McDonald’s does not intend to collect personal information from any person under the age of 18 years without the consent of a parent or legal guardian. We urge parents to regularly monitor and supervise their children's online activities.
Security of personal information
McDonald’s will endeavour to take all reasonable technical, organisation and physical steps to protect your personal information. This includes utilisation of online systems with password protection, secure servers using encryption technology and secure servers that are protected in controlled facilities.
All McDonald's employees and service providers are obliged to respect the confidentiality and security of any personal information held by McDonald's. However, McDonald’s cannot guarantee the security of your personal information and will not be held responsible for events arising from unauthorised access to personal information beyond McDonald's reasonable control.
Disclosure of personal information to overseas recipients
In some cases, McDonald’s may disclose your personal information to overseas recipients, including but not limited to recipients in the United States of America, Japan, Malaysia and Singapore.
Access to personal information
You are in control of any personal information you provide to us. If, at any time, you would like to access, review, correct and/or delete the personal information we have about you, or if you would like to change your contact preferences, you can let us know via the contact details listed below. Please allow 30 days for this request to be processed.
Your personal information may be stored in different locations depending upon the reason for which you originally submitted the information. If you make an inquiry in relation to your personal information, the more information you can provide us about when you originally submitted your personal information, the quicker McDonald's will be able to retrieve your personal information. McDonald’s may require you to verify your identity by asking you to provide certain information about yourself and provide us with a declaration witnessed and signed by a Justice of Peace. Once your identity is verified, we will work to provide you with your requested information.
If you request, we will take all reasonable steps to delete your personal information, except where it is required for legal and compliance reasons. Deletion of information may result in McDonald's being unable to facilitate or provide you with information about certain transactions (including the uploading of, access to, and receipt of, content on a Website or App, and purchase transactions undertaken on a Website or App), other content, services or product information, upcoming promotions, competitions or event information, and/or provide certain content, products or services.
We are not responsible for removing your personal information from the lists of any third party who has previously been provided your information in accordance with this privacy policy.
Links to other sites
Our Websites or Apps contain links to sites operated by third parties. We are not responsible for the privacy practices of, or any content on, those sites linked to our Websites and Apps. If you visit one of these linked websites, we encourage you to review their privacy and other policies.
We may use third party advertisements on our Websites and Apps. All third party advertising, if paid for, is paid for by the relevant third party advertisers. Third party advertisements are not recommendations or endorsements by McDonald’s or any of its affiliates. To the extent permitted by law, McDonald’s is not responsible for the content (including representations) of any third party advertisement on a Website or App. Cookies may be associated with these advertisements to enable the advertiser to track the number of anonymous users responding to the campaign.
Related McDonald's Websites or Apps
All Websites and Apps operated by McDonald's in Australia will adhere to this privacy policy. The policies on the Websites and Apps of some other members of the McDonald's Family may vary because of local customs, practices or laws.
Franchisee privacy policies
Many McDonald's restaurants are owned and operated by independent franchisees. Some franchisees also operate websites and are required to follow this privacy policy.
McDonald’s do not control the use or disclosure of personal information and may not have access to the personal information held by McDonald’s franchisees. McDonald’s franchisees are each independently responsible for ensuring that your personal information collected by them is handled in accordance with this Privacy Policy and the Australian Privacy Principles
If you are concerned that there may have been a breach of this privacy policy by a franchisee, please contact the relevant franchisee entity or McDonald’s restaurant directly.
Changes to our privacy policy
From time to time, it may be necessary for McDonald's to change this privacy policy without notice. We will post any changes to this privacy policy on our Websites and Apps. Rest assured, however, that any changes will not be retroactively applied and will not alter how we handle previously collected personal information.
Sale of the Company
If McDonald’s merges with, is acquired by another company, or sells all or a portion of its assets, your personal information may be disclosed to our advisers and any prospective purchaser’s adviser and may be among the assets transferred. However, your personal information will always remain subject to this privacy policy.
Contact Us
If you have any questions about our privacy policy, or any problems or complaints about how we have collected, used, stored, handled and/or disclosed your personal information, please contact us at:
Mail: McDonald's Privacy Officer
McDonald's Australia Limited
PO Box 392
Pennant Hills NSW 2120
Australia
Email: privacy@au.mcd.com
Telephone: (02) 9875 6666
Fax: (02) 98756568
Please allow 14 days for this request to be processed. If you do not receive a satisfactory response from McDonald’s to your query, problem or complaint within 30 calendar days, you may refer your query, problem or complaint to the Office of the Australian Information Commissioner via the contact details listed at https://www.oaic.gov.au/about-us/contact-us/.
