Privacy Policy

McDonald’s Global Customer Privacy Statement  

Last updated: July 1, 2025

I. Introduction

Your privacy is very important to us. This Privacy Statement (“the Statement”) describes how McDonald’s Corporation, McDonald’s USA, LLC, and their subsidiaries in the countries listed below – collect, use, protect, store, share, and otherwise process the personal information of our customers. Customers include those who visit our restaurants, use our websites and mobile apps, and otherwise interact with us.

Some of the countries in which we operate have laws that require us to share specific privacy information with our customers in those countries. As such, this Privacy Statement is comprised of two sections – a globally applicable notice and country-specific addenda for the following countries:

II. Your Privacy Globally

The data controller of your personal information is the McDonald’s entity in the jurisdiction where your personal information is collected (“McDonald’s”,“we”, “us”, “our”, or “ours”). Please refer to the applicable country specific addendum for more information.

If you are a customer in a country not listed above, please visit the country’s McDonald’s website for the applicable Privacy Statement.

Many of our restaurants are owned and operated by franchisees, who are independent business owners. This Privacy Statement does not apply to our franchisees or to websites or mobile apps that they operate. Please reference our franchisees’ privacy practices for information on how they collect and use customer information.

1. Information We Collect

2. How We Use The Information We Collect 

3. How We Share Your Information 

4. Children's Privacy Statement 

5. Your Choices and Rights

6. Use Of Cookies and Other Technology 

7. Links To Other Websites and Social Media 

8. Security 

9. Retention

10. International Data Transfers

11. How to Contact Us

12. Changes to Our Privacy Statement https://www.mcdonalds.com/us/en-us/privacy.html

 1. Information We Collect & Process

We may collect personal information about you when you visit our restaurants, use our websites or mobile apps (“online services”), and otherwise interact with us (collectively, “services”). The information we collect falls into three categories: (a) information you provide to us; (b) information we collect through automated methods when you use our services; and (c) information we collect from other sources (see below).  

Generally, you are under no obligation to provide your personal information to us. However, in certain cases, we may be unable to provide you with our services unless you provide your personal information.

We may combine the information you provide to us with information that we collect through automated methods, and with information we receive from other sources. For example, when you add a method of payment to your profile in our mobile app, we may combine your profile with information we receive from our payment processors or other providers regarding transactions made with the same payment credentials in our restaurants.

We collect information you provide to us

You may provide the following information to us, depending on how you interact with us:

• personal details, such as your name, postal and email addresses, phone number, birthday information and other contact information, when you register with our online services, log-in to Wi-Fi, enter one of our promotions or competitions, or contact us by phone or through our online services;
• demographic information such as age or gender;
• transaction information, including information about the products you buy, prices, method of payment and payment details;
• account information, such as your username or password (or anything else that identifies you) used to access our online services or to buy or use our products and services;
• profile information, including products and services you like, or times you prefer to visit us; and
• other personal information you choose to provide us when you interact with us (including through social media and call centers).

We collect information through automated methods

We may use automated technology to collect information from your computer system or mobile device when you visit our restaurants, use our online services, or in-restaurant technology. Automated technology may include cookies, local shared objects, and web beacons. There is more information below about cookies and other technologies in Section 6.

We may collect information about your:

• internet protocol (IP) address;
• computer or mobile-device operating system and browser type;
• type of mobile device and its settings;
• unique device identifier (UDID) or mobile equipment identifier (MEID) of your mobile device;
• device and component serial numbers;
• advertising identifiers (for example, an Identifier for Advertising (IDFA) on Apple devices) or similar identifiers;
• referring webpage (a page that has led you to ours) or application;
• online activity on other websites, applications or social media;
• visits to our restaurants, where recorded using digital technology (e.g. video recordings); and
• activity related to how you use our online services or in-restaurant technology, such as the pages you visit on our online services.

Our online services and in-restaurant technology may collect information about the location of your mobile device or computer using geolocation and technology such as GPS, Wi-Fi, Bluetooth, or cell tower proximity.  For most mobile devices and computer systems, you can disable the collection of this information by using the device or web-browser settings.  If you have any questions about how to prevent us from collecting information about your location at a device level, we recommend you contact your mobile-device service provider, the device manufacturer, or your web-browser provider.  Some online services and in-restaurant technology may not work properly without information about your location. 

We collect information from other sources

We may collect information about you from the McDonald’s Family. The McDonald’s Family consists of McDonald’s Corporation and McDonald’s Global Markets LLC, and their affiliates, and subsidiaries (“McDonald’s Entities”), and franchisees of McDonald’s Entities, business partners and vendors (e.g., food delivery platforms, data providers, or payment processors) or from public sources (e.g., your public social media posts).

 2. How We Use the Information We Collect

We use each category of the information we collect for the following purposes:

• to provide our products and services and contract with you, including payment processing and customer support;
• to manage our relationship with you, including feedback management and for customer surveys;
• to train algorithms and AI models that we use in the context of providing you with products and services;
• to personalize and improve our products and services and your overall customer experience, in particular by improving our existing technologies and developing new products and services and employing profiling technology (unless we notify you separately thereof, this will not include automated individual decisions that have legal effects for you or similarly significantly affect you);

• to provide you with general and personalized electronic and non-electronic direct marketing information and support our targeted advertising initiatives concerning our products and services as well as our business partners’ products and services (including promotions, contests, prize draws, competitions and sweepstakes);
• to protect against, identify and prevent fraud and other crime, claims and other liabilities;

• business analytics, including consumer and operations research, to assess the effectiveness of our sales, online service, marketing, and advertising, and to analyze market trends and (future) customer demand;
• to ensure the security of our online services and in-restaurant technology including the detection, prevention, and investigation of attacks;

• to protect the rights, safety, health, and security of our customers, our employees, our franchisees, and the general public, and to protect our property;
• to anonymize your information for further internal and external use in a manner that does not identify you;
• to comply with legal obligations, our policies, or our Standards of Business Conduct; and
• to establish, exercise or defend a legal claim.

We may use the information we collect about you in other ways, which we will tell you about at the time we collect it or before we begin using it for those other purposes.

If we are established in the EU or the European Economic Area (“EEA”) or are otherwise subject to the General Data Protection Regulation (“GDPR”), we process your personal information on the basis of

• the necessity to perform a contract we have concluded with you or the necessity to take steps at your request prior to entering into such a contract (Article 6(1)(b) GDPR);
• our prevailing legitimate interest to personalize and improve your overall customer experience and achieve the purposes set out above (Article 6(1)(f) GDPR);
• the necessity to comply with legal obligations to which we are subject (Article 6(1)(c) GDPR); or in some cases,

your consent for which we may ask you in a separate process (Article 6(1)(a) GDPR).

3. How We Share Your Information

We may share all or substantially all categories of your personal information with

• members of The McDonald's Family;
• vendors who help us operate our business (including information technology service providers and marketing agencies that we use as well as those who use the information to detect or prevent fraud for us, and who may use the information to provide fraud detection and prevention services to others);
• public authorities and courts;
• buyers or other parties involved in a corporate transaction if we decide to sell or transfer all or part of our business;
• our professional advisers such as our legal representatives, auditors and insurance brokers; and
• business partners if they are involved in your customer experience, including product or service delivery (e.g., food delivery platforms).

We do not sell your personal information for monetary consideration and only share your information as described in this Privacy Statement or as otherwise communicated to you at the time we collect your information. Please note that some US state statutes may define a “sale” to include sharing of personal information with third parties for valuable consideration.  Many companies have common arrangements with online advertising networks and analytics companies that may be considered sales under these definitions.  Please reference our US Country Specific Addendum (below) for more information.

5. Your Choices and Rights

Marketing Communications

If you are subscribed to our marketing communications, you can later opt out by following the opt-out instructions in the marketing communications we send you. You can also generally find your communication preferences with instructions on how to opt out in the profile section of the online services that you use. You may also have the ability to change your communication preferences using your device settings. You can also opt out by contacting us at our Global or Local Data Protection Office using the contact information provided below. If you are contacting a Local Data Protection Office, please choose the office in the country in which you are a customer.

If you do opt out of receiving marketing communications from us, we may still send communications to you about your transactions, any accounts you have with us, and any contests, competitions, prize draws or sweepstakes you have entered. Opting out of one form of communication does not mean you have opted out of other forms as well. For example, if you opt out of receiving marketing emails, you may still receive marketing text messages if you have opted in to receiving them. Please note that if you are receiving communications from a McDonald’s franchisee, then you will need to opt out from them directly.

We do not share personal information with third parties for their own direct marketing purposes, unless you give us permission to do so. When we give you notice, and you consent, we will share your personal information as you direct us to.

Your Personal Information Rights

Under applicable law, you may have certain rights (subject to the conditions and extent specified in the law):

• Right to access: You may have the right to check whether we hold any personal information about you and request access to or copies of such data.
• Right to correction or deletion: You may have the right to request the correction or deletion of inaccurate, incomplete, outdated, unnecessary, excessive, or other applicable personal information about you.
• Right to restriction: You may have the right to request the restriction of the collection, processing or use of your personal information.
• Right to object and withdraw consent: In specific situations, you may have the right to object to the processing of your personal information for legitimate reasons or withdraw previously granted consent without affecting the lawfulness of processing prior to the withdrawal.
• Right to data portability: You may have the right to request your personal information in a portable format to facilitate a transfer of personal information to another service provider.
• Right to file a complaint: You may have the right to lodge a complaint with the relevant authority. You can find information regarding the relevant authority in the country-specific addendum.

For more detailed information about these rights and their availability in specific countries, please refer to the country-specific addendum.

6. Use of Cookies and Other Technology

We and our vendors may use cookies, web beacons and other similar technologies on our online services and in other areas related to our business, such as online advertising, to collect information and provide you with the services or products that you have requested.

Information on the use of cookies, pixels, and other tracking technologies

We use cookies, pixels, and other tracking technologies on our online services to operate our online services, provide functionality of our online services, remember your preferences and settings, personalize your online experience and our marketing and other communications to you, strengthen security and integrity of our online services, combat fraud, analyze and improve the performance of our online services, and to fulfill other purposes described in this Statement.

A “cookie” is a small text file that is placed onto an Internet user’s web browser or device and is used to remember and/or obtain information about the user.  A cookie will typically contain the name of the domain from which the cookie has come, the “lifetime” of the cookie, and a randomly generated unique number or other value. You may adjust your web browser settings if you do not wish to receive a cookie or if you would like to be notified when you receive a cookie. If you decide to disable certain cookies, you may not be able to take advantage of all the features available through our online services.

Certain pages on our online services and social media pages, as well as some of our email communications, may contain “web beacons,” “pixels,” or other similar technologies. A “web beacon” is a small object or image that is embedded into a web page, application, or email and is used to track activity. They are also sometimes referred to as “pixels” and “tags.” Web beacons, pixels and tags may be used with cookies to understand how users interact with us and to help manage and improve those interactions. Please note the following:

• You might be assigned a cookie when using our online services.
• We offer certain features that are available only through the use of cookies and other similar technologies.
• We may use both session (for the duration of your visit) and persistent (for the duration of a fixed period of time) cookies and other tracking technologies unless you delete them.
• We may also adopt new technologies to perform functionality as described in this Statement.
• Our online services and other areas related to our business may have web beacons.

Cookies served through our online services

We may use the following categories of cookies. These cookies may be set by us or by third-party providers whose services we have added to our online services.

Strictly Necessary Cookies: These cookies are necessary for our online services to function and cannot be switched off at your request. For example, these cookies are used for system administration, fraud detection, security measures, and other basic operation and functionality of our online services.  Depending on your browser functionality, you may be able to set your browser to block or alert you about these cookies, although some functionality of our online services may be lost. 

Performance Cookies: These cookies allow us to track visits and traffic sources so we can measure and improve the performance of our online services. For example, they help us to know which pages are the most and least popular and understand how visitors move around our online services. If you set your preferences to decline these cookies, we will not know when you have used our online services and how we can improve our online services based on your online experience. 

Functional Cookies: These cookies enable us to provide enhanced functionality and personalization. They may be set by us or by third party providers whose services we have added to our pages. If you decline these cookies, some of our online services may not function properly.

Targeting Cookies: These cookies may be set through our online services by us or our advertising partners. They may be used to build a profile of your interests and show you relevant advertisements on other sites. These advertisements may also place cookies that can view, edit, or set other third-party cookies in your web browser. If you decline these cookies, you will experience advertising that may not be tailored to you.

Social Media Cookies: These cookies may be set by social media services that we have added to our online services to enable you to share our content with your friends and networks. These cookies can track your browser across other sites and building up a profile of your interests.

YouTube Cookies: YouTube cookies are used to load external content from YouTube that is embedded on our online services. If you decline these cookies, you may not be able to play YouTube videos as part of your browsing experience.

We and selected third parties (such as our advertising networks) may use these technologies to collect information about your online activities, over time and across third-party websites and devices, and when using our online services to further personalize your experience with us.

How to control and delete cookies

You have options to control and/or delete cookies as described below.  Please be aware that restricting cookies may have an impact on online services’ functionality. Disabling these cookies may limit your experience, including your ability to find pricing and availability of products and services in your area. 

McDonald’s Cookie Settings Tool:  You may accept or reject cookies, except strictly necessary cookies, by using the cookie preference section of the online service. 

Browser Controls: Use the options in your web browser if you do not wish to receive a cookie or if you wish to set your browser to notify you when you receive a cookie. Select the “Help” section of your browser to learn how to change your cookie preferences. If you disable all cookies, you may not be able to take advantage of all the features available on a website.

Some newer web browsers may have a "Do Not Track" preference that transmits a "Do Not Track" header to the websites you visit with information indicating that you do not want your activity to be tracked. McDonald’s does not currently take actions to respond to Do Not Track signals because a uniform technological standard has not yet been developed. We continue to review new technologies and may adopt a standard once one is created.

In our mobile applications (e.g., Global Mobile Application), we use “software development kits” (SDKs). Like cookies, SDKs enable information to be stored on your end device or access to such information.  More information regarding how cookies and related technologies are used in a country in which you are a customer may be available in the country-specific addendum or a cookie preferences section of the online service.

Targeted advertising

When you use our online services, we (and our vendors) may collect information about your activities so that we can provide you with advertising tailored to your interests.

Ad Networks’ Controls: We work with ad networks that may be members of the Digital Advertising Alliance or the Network Advertising Initiative.  Because we utilize advertising (“ad”) networks, you may notice certain ads on other websites. Ad networks allow us to target the information we send you based on your interests, other information related to you, and contextual means. These ad networks track your online activities over time by collecting information through use of cookies, web beacons, and other technologies. The ad networks use this information to show you advertisements that may be of particular interest to you. The ad networks we utilize may collect information about your visits to websites that also take part in the relevant ad network, such as the pages or advertisements you were displayed and how you use the websites. We use this information, both on our online services and on third-party websites that take part in the ad networks, to provide you with advertising tailored to you, and to help us assess how effective our marketing is.

You can learn more about targeted advertising and opt out of targeted advertising supported by these ad networks by visiting the Digital Advertising Alliance website or the Network Advertising Initiative website . If you choose to opt out, you will continue to receive advertisements, but they may not be tailored to your interests. Please refer to the country-specific addendum or a cookie preferences section of the online service for further information on your choices concerning targeted advertising. Moreover, depending on the type and version of the operating system of your mobile device, you may also be asked whether to enable targeted advertising.

Mobile Advertising:  You can opt-out of having your mobile advertising identifiers used for certain types of targeted or personalized advertising by accessing the settings in your mobile device.

Global Privacy Opt-Out Preference Signal: We process opt-out requests submitted using an opt-out preference signal as required by applicable law.  For example, when we detect the Global Privacy Control (“GPC”) signal from a browser, we treat the signal as a request to opt out of sale and sharing of personal information associated with that browser.  If we receive the GPC signal from a user who we identify as a specific individual with a McDonald’s account, we treat the signal as a request to opt out of sale and sharing applicable to that account.

7. Links to Other Websites and Social Media

Our online services may offer links to websites that are not operated by us but by third parties. If you visit one of these linked websites, you should read the linked website’s privacy policy, terms and conditions, and other applicable policies. We are not responsible for the policies and practices of third parties. Any information you give to those organizations is dealt with under their privacy policy, terms and conditions, and other policies.

We may also make our business partners’ apps, tools, widgets and plug-ins available to you on our online services, such as Facebook “Like” buttons, which may also use automated methods to collect information about how you use these features. These organizations may use your information in line with their own policies.

8. Security

We use technical, physical, and organizational security measures designed to protect against unauthorized access, disclosure, damage, or loss of personal information and adopt applicable commercially reasonable security safeguards internally and with our third-party service providers to protect personal information.  However, the collection, transmission and storage of information can never be guaranteed to be completely secure. Please take steps to secure your access credentials such as login name and password, and do not share them with anyone.

9. Retention

Unless a specific retention period is mandated or permitted under applicable law, McDonald’s will only retain personal information for the duration of time necessary to fulfill the purposes described in this Statement, including the applicable country-specific addendum. Our records policies reflect applicable laws. We will retain and use your information to the extent necessary to manage your relationship with us, personalize and improve your overall customer experience, and to comply with our legal obligations (for example, if we are required to retain your information to comply with applicable tax/revenue laws), resolve disputes, enforce our agreements, and as otherwise described in this Statement.

10. International Data Transfers

The McDonald’s Family is global in nature with business processes, management structures and technical systems that cross borders. As such, we may share information about you within the McDonald’s Family and transfer it to countries in the world where our vendors or members of the McDonald’s Family are established. Any international data transfers will be in accordance with this Privacy Statement and in compliance with applicable laws.

If we are established in EU/EEA, the UK, or Switzerland, or are otherwise subject to the GDPR or similar laws, we only transfer your personal information to countries that are considered by those laws to provide an adequate level of protection or otherwise where we have established or confirmed that all data recipients will provide an adequate level of data protection, in particular by way of entering into appropriate data transfer agreements based on Standard Contractual Clauses (e.g., Commission Implementing Decision (EU) 2021/914) and other suitable measures, which are accessible from us upon request.

McDonald’s Corporation and McDonald’s Global Markets LLC’s participation in the EU-U.S., the UK Extension, and Swiss-U.S. Data Privacy Frameworks

McDonald’s Corporation and McDonald’s Global Markets LLC, a wholly-owned subsidiary, participate in and comply with the EU-U.S. Data Privacy Framework (“EU-U.S. DPF”), the UK Extension of the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (“Swiss-U.S. DPF”) (collectively, “DPF”) as set forth by the U.S. Department of Commerce regarding the collection, use and retention of personal information from European Union member countries, the United Kingdom, and Switzerland. For purposes of this DPF section only, McDonald’s Corporation and McDonald’s Global Markets LLC are each individually and collectively referred as “McDonald’s Global.” McDonald’s Global’s participation in the DPF subjects it to the investigatory and enforcement power of the Federal Trade Commission.

As a DPF participant, McDonald’s Global is committed to and has certified to the U.S. Department of Commerce that it adheres to: (i) the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal information received from the European Union; (ii) the UK Extension to the EU-US DPF with regard to the processing of personal information received from the United Kingdom; and (iii) the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal information received from Switzerland.  If there is any conflict between the terms in this Privacy Statement and the EU-U.S. DPF Principles, the UK Extension, and/or the Swiss-U.S. DPF Principles, the Principles shall govern.  To learn more about the DPF program, and to refer to our certification, please visit the DPF website.

Please note the following:

• McDonald’s Global may share personal information that is subject to the DPF Principles with vendors acting as agents to provide services to it, as described above in Section 3. McDonald’s Global may be liable under the DPF if these vendors process such personal information in a manner inconsistent with the DPF, unless McDonald’s Global proves that it is not responsible for the event giving rise to the damage.
• McDonald’s Global may disclose personal information received in reliance on the DPF in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
• You have the right to request access to personal information received by McDonald’s Global in reliance on the DPF, and to exercise choice in limiting McDonald’s Global use and disclosure of such information, including with respect to disclosures of such information to third parties and using the information for a purpose that is materially different from the purpose(s) for which it was originally collected or subsequently authorized by the individuals. If you are interested in exercising your rights and choices, please contact McDonald’s Global at the address, phone number or email address below or update your preferences via the cookie banner on our website. Privacy Centre Privacy Web Form

McDonald’s Global privacy practices are provided in this Privacy Statement. McDonald’s Global encourages you to contact it at any time as specified in the Contact Us section below with questions, concerns or complaints about its privacy practices and participation in the DPF. You may also refer a complaint to your local data protection authority and McDonald’s Global will work with them to resolve your concern.

If McDonald’s Global is unable to resolve your concern regarding your personal information received by McDonald’s Global under the DPF, you have the right to direct your unresolved concern to JAMS, an independent dispute resolution service based in the United States, to provide recourse at no charge to you. To seek recourse for an unresolved concern, visit JAMS' DPF Dispute Resolution page. If JAMS is unable to resolve your concern, you may have the right to invoke binding arbitration under certain conditions. To learn more about this option, visit the  DPF’s "How to Submit a Complaint" page.

Please note that the foregoing processes apply only to the resolution of disputes regarding personal information received by McDonald’s Global under the DPF. All other disputes that you may have with McDonald’s Global or any other members of the McDonald’s Family, or any agents, representatives, agencies, officers, directors, or employees, must be resolved in accordance with the terms and conditions of any applicable websites, mobile apps, email newsletters, email subscriptions or other digital properties owned or controlled by a member of the McDonald’s Family.

For more information about the DPF program, and to view McDonald’s Global certification, please visit the DPF website.

11. How To Contact Us

In line with our Standards of Business Conduct, we hold ourselves to ethical standards when it comes to data privacy and protection and we welcome any feedback or questions you may have concerning the collection and processing of your personal information. Our contact details and those of our Local Data Protection Offices as well as the contact details of our data protection officer, if appointed, can be found in the country-specific addendum.

The McDonald’s Global Data Protection Office can be reached at

Attention: Global Data Protection Office
Privacy at McDonald's, Dept. 282
110 North Carpenter Street
Chicago, IL 60607-2101, USA
contact.privacy@us.mcd.com

McDonald’s Corporation has appointed a data protection officer who can be reached at:

Attention: Data Protection Officer
Privacy at McDonald's, Dept. 282
110 North Carpenter Street
Chicago, IL 60607-2101, USA
contact.privacy@us.mcd.com

12. Changes To This Privacy Statement

From time to time we may change, modify, or amend this Statement in order to comply with the evolving regulatory environment or reflect the way we operate our business or use technologies. Subject to any applicable legal requirements to provide additional notice and/or obtain consent, any changes to this Statement will be communicated to you through existing McDonald’s communication channels and resources.

McDonald’s Australia Privacy Policy

Last updated: 7 January 2026

McDonald's Australia Limited ABN 43 008 496 928 (McDonald’s) and each of its independently owned franchisees ('McDonald’s Franchisees”) (collectively referred to as “McDonald’s”, “we”, “us” or “our”) are committed to respecting your personal information. Our privacy policy sets out how we collect, use, store and disclose your personal information. When you use our Websites, Apps, or provide your personal information to us, you consent to your personal information being collected, held, used and disclosed as set out in our privacy policy.

Information we collect and hold

McDonald’s collects personal information about you in a number of ways, including when you:

• use our websites (including mcdonalds.com.au), social media pages, and internal websites or intranet (“Website”);
• use our mobile and tablet apps, including the MyMacca’s app (“Apps”); and
• interact with us and provide personal information by any other means, including either physically or electronically; and
• are present at or outside our restaurants, including images, video and audio from CCTV, other cameras (including body cameras), and other security and recording systems,

(collectively referred to as “Collection Channels”). 

Personal information that McDonald’s collects and holds may include your name, email address, delivery address, date of birth, phone number, payment method, social media handles, images, audio and video of you, and other identifying information you choose to provide via a particular Collection Channel.

When you use one of our Websites or Apps, we may also collect personal information about you in the following general categories:

• Location information: If you permit an App to access location services in your settings, then we collect your device location to deliver your order or to send you alerts.
• Transaction information: We collect your transaction details when you place an order via a Website or App, including the products you have ordered, the date and time of your order, the amount charged and your loyalty entitlements.
• Usage and preferences: We collect information about how you interact with our Websites or Apps, including the pages you visit, your preferences and the settings that you choose. We do this through cookies and other similar technology.
• Device information: We collect information about your device, such as the hardware model, operating system, preferred language, unique device identifier and mobile network.
• Employee information: If you are a job applicant, an employee in one of our restaurants or our corporate offices, or a former employee, and use a Website or App, we collect information about the training modules you have completed, the forms you have submitted, personal information you have provided, the approvals you have given or received, and other similar information related to your job.
• Other information: We also collect and log information such as your IP address, access dates and times, browser type and pages visited when you interact with a Website or App.

We also collect personal information about you from third parties, including when:

• you choose to create an account or register for a product or service via a Website or App using a social media platform (e.g. Facebook, Instagram);
• you have consented to a third party disclosing your personal information to us (e.g. when you enter a competition or promotion run by a third party for us); and
• it is otherwise lawful for a third party to disclose your personal information to us.

We also collect personal or anonymous information about you from other sources and sometimes combine that information with other information collected from you or from third parties for the purposes disclosed in this privacy policy.

McDonald’s collects and holds personal information

McDonald’s will only collect or monitor any personal information about you as provided in this privacy policy.

Active information collection

McDonald’s may collect your personal information via our Collection Channels when you:

• purchase a product or make a booking through a Website or App;
• participate in any offers, marketing activities (including competitions), loyalty or rewards program or promotional activities;
• contact us or provide us with personal information directly via any medium including a Website or App, SMS or other message service and email, social media platforms, mail, telephone or in person;
• interact with a Website or App for a specific purpose;
• browse a Website or App generally;
• sign-up to, or register an account via any Collection Channel;
• are present at or outside a McDonald’s restaurant and are captured via our security and recording systems (including in car parks, drive thru areas, restaurant entrances or exits and publicly accessible areas); or
• apply for employment with McDonald’s.

Platform permissions

Mobile platforms such as iOS and Android may define certain types of information or data that our Apps cannot access without your consent. Each platform has its own permissions system for obtaining your consent. For example, the iOS platform may alert you the first time an App wants your permission to access certain types of data (e.g. location services) and will provide you the option to consent to that request. Android devices may notify you of the permissions that an App seeks before you first use the App and your subsequent use of the App constitutes your consent. You can manage your platform level permissions via the Settings section on your device. For more information, please contact your device provider or refer to the user manual for your device.

Queries

You may contact McDonald’s with any queries via email: privacy@au.mcd.com or at McDonald's Australia Limited (Attention: McDonald's Privacy Officer), PO Box 392 Pennant Hills NSW 2120 Australia.

Cookies and passive information collection

We may use tracking technologies to collect personal information about you when you use and access a Website or App, including cookies, internet tags or web beacons, and navigational data collection (e.g. log files, server logs, and clickstream data). For example, we may collect information about the date, time and duration of visits and which pages of a Website or App are most commonly accessed. This browsing information is generally not linked to your identity, except where you access a Website or App via links in a message we have sent or where we are able to identify the device or user accessing a Website or App.

We may combine your anonymous information, browsing information or other information collected through tracking technologies with your personal information collected via our Collection Channels in order to understand and remember your preferences and interests. By accessing a Website or App via links and/or by accessing a Website or App where you have identified yourself, you consent to the collection of this information.

Purposes for which McDonald’s collects, holds, uses and discloses personal information

We collect, hold, use and disclose your personal information for our primary purposes, including:

• for the purposes stated on a particular Collection Channel or Privacy Collection Statement;
• to maintain and improve the functionality of a Website or App;
• to fulfil obligations in respect of any sale and purchase contract and/or any other contract between you and McDonald’s;
• to manage your orders or facilitate payment, for example, when you use our App the drive thru screen and kiosk will display your name and crew members will greet you by name;
• in the case of images and video/audio from our security and recording systems used in and around our restaurants, for security, safety, compliance, and operational purposes;
• to send you any technical, administrative or legal notices important to our Websites and Apps;
• to provide you with information about your transactions and loyalty entitlements;
• to provide marketing materials and information about our products and services, events, special offers, competitions and/or promotions, or to request your feedback for promotional purposes;
• to respond to customer enquiries or complaints;
• to manage your employment or process your application for employment with McDonald’s (including McDonald’s franchisees), to provide employee assistance programs and facilitate effective employment practices;
• to obtain opinions or comments about products and/or services and to conduct other market research and development (including to record statistical data for marketing analysis);
• to enter you into and administer promotions/competitions;
• to provide, maintain and improve our products and services;
• to customise a Website or App based on your preferences;
• to allow you to use a Website or App;
• to share with trusted third parties including professional service providers, our related bodies corporate, our franchisees, our suppliers and our promotional partners and other trusted third parties (and their directors, servants and agents) and agencies (McDonald’s Family); and
• to share with your social media communities, to the extent allowed by you.

Not providing information

You don’t have to provide any personal information to us. However, if you do not do so, this may affect or completely restrict your ability to use our products and services, including our Websites or App, our ability to provide you with relevant content, prizes, products and services, or our ability to process your queries and employment applications.

Sharing your personal information

McDonald's shares personal information with the global McDonald’s Family and our service providers for the purposes described in this privacy policy.

McDonald’s recognises the trust with which you provide personal information, and except as stated in this privacy policy or any particular Privacy Collection Statement, your information will not be used or disclosed for any other purposes without your consent. However, McDonald's reserves the right to use or disclose any information, including personal information, as needed to satisfy any law, regulation or legal request, to protect the rights or property of McDonald's, any member of the McDonald's Family, or any member of the public, to protect the integrity of a Website or App, to fulfil your requests, or to cooperate in any law enforcement investigation or an investigation on a matter of public safety.

Contact by McDonald’s and third parties

If you would like to opt out of receiving email communications from us and the McDonald’s Family, you can unsubscribe via the email communication we send you.

If you would like to opt out of receiving push notifications from us, you can do so via your phones notification settings.

If you would like to opt out of us sharing data with partners, you can unsubscribe via the app: Go to the Menu, Click ‘Profile’, then click ‘Personalisation’ to toggle off sharing.

We may still send you transaction and administrative information.

If you no longer wish to receive any communications from McDonald’s via an App, you can delete the App from your device.

Ability of others to view information

McDonald’s provides areas on Websites, Apps and various social media platforms where you can upload user-generated content, post or provide information about yourself, communicate with other users, provide reviews for content, products and/or services or interact with or vote on particular content. This information may be publicly posted on a Website, App or social media platforms and/or shared with others, including social media platforms and other public forums in which you choose to participate. This information may become publicly available and may be read, collected and used by others outside of a McDonald’s Website or App. McDonald’s is not responsible for the conduct of others who may read, collect and use this information.

Children

McDonald's is very sensitive to privacy issues. We are proud of our long-time commitment to our customers. McDonald’s does not intend to collect personal information from any person under the age of 18 years without the consent of a parent or legal guardian. We urge parents to regularly monitor and supervise their children's online activities.

Security of personal information

McDonald’s will endeavour to take all reasonable technical, organisation and physical steps to protect your personal information. This includes utilisation of online systems with password protection, secure servers using encryption technology and secure servers that are protected in controlled facilities.

All McDonald's employees and service providers are obliged to respect the confidentiality and security of any personal information held by McDonald's. However, McDonald’s cannot guarantee the security of your personal information and will not be held responsible for events arising from unauthorised access to personal information beyond McDonald's reasonable control.

Disclosure of personal information to overseas recipients

In some cases, McDonald’s may disclose your personal information to overseas recipients, including but not limited to recipients in the United States of America, Japan, Malaysia and Singapore.

Access to personal information

You are in control of any personal information you provide to us. If, at any time, you would like to access, review, correct and/or delete the personal information we have about you, or if you would like to change your contact preferences, you can let us know via the contact details listed below. Please allow 30 days for this request to be processed.

Your personal information may be stored in different locations depending upon the reason for which you originally submitted the information. If you make an inquiry in relation to your personal information, the more information you can provide us about when you originally submitted your personal information, the quicker McDonald's will be able to retrieve your personal information. McDonald’s may require you to verify your identity by asking you to provide certain information about yourself and provide us with a declaration witnessed and signed by a Justice of Peace. Once your identity is verified, we will work to provide you with your requested information.

If you request, we will take all reasonable steps to delete your personal information, except where it is required for legal and compliance reasons. Deletion of information may result in McDonald's being unable to facilitate or provide you with information about certain transactions (including the uploading of, access to, and receipt of, content on a Website or App, and purchase transactions undertaken on a Website or App), other content, services or product information, upcoming promotions, competitions or event information, and/or provide certain content, products or services.

We are not responsible for removing your personal information from the lists of any third party who has previously been provided your information in accordance with this privacy policy.

Links to other sites

Our Websites or Apps contain links to sites operated by third parties. We are not responsible for the privacy practices of, or any content on, those sites linked to our Websites and Apps. If you visit one of these linked websites, we encourage you to review their privacy and other policies.

We may use third party advertisements on our Websites and Apps. All third party advertising, if paid for, is paid for by the relevant third party advertisers. Third party advertisements are not recommendations or endorsements by McDonald’s or any of its affiliates. To the extent permitted by law, McDonald’s is not responsible for the content (including representations) of any third party advertisement on a Website or App. Cookies may be associated with these advertisements to enable the advertiser to track the number of anonymous users responding to the campaign.

Related McDonald's Websites or Apps

All Websites and Apps operated by McDonald's in Australia will adhere to this privacy policy. The policies on the Websites and Apps of some other members of the McDonald's Family may vary because of local customs, practices or laws.

Franchisee privacy policies

Many McDonald's restaurants are owned and operated by independent franchisees. Some franchisees also operate websites and are required to follow this privacy policy.

McDonald’s do not control the use or disclosure of personal information and may not have access to the personal information held by McDonald’s franchisees. McDonald’s franchisees are each independently responsible for ensuring that your personal information collected by them is handled in accordance with this Privacy Policy and the Australian Privacy Principles

If you are concerned that there may have been a breach of this privacy policy by a franchisee, please contact the relevant franchisee entity or McDonald’s restaurant directly.

Changes to our privacy policy

From time to time, it may be necessary for McDonald's to change this privacy policy without notice. We will post any changes to this privacy policy on our Websites and Apps. Rest assured, however, that any changes will not be retroactively applied and will not alter how we handle previously collected personal information.

Sale of the Company

If McDonald’s merges with, is acquired by another company, or sells all or a portion of its assets, your personal information may be disclosed to our advisers and any prospective purchaser’s adviser and may be among the assets transferred. However, your personal information will always remain subject to this privacy policy.

Contact Us

If you have any questions about our privacy policy, or any problems or complaints about how we have collected, used, stored, handled and/or disclosed your personal information, please contact us at:

Mail:     McDonald's Privacy Officer

McDonald's Australia Limited

PO Box 392

Pennant Hills NSW 2120

Australia

Email: privacy@au.mcd.com

Telephone: (02) 9875 6666

Fax: (02) 98756568

Please allow 14 days for this request to be processed. If you do not receive a satisfactory response from McDonald’s to your query, problem or complaint within 30 calendar days, you may refer your query, problem or complaint to the Office of the Australian Information Commissioner via the contact details listed at https://www.oaic.gov.au/about-us/contact-us/.