Canada
McDonald’s Canada is part of a global company and our Global Customer Privacy Statement describes how we collect, use and disclose your personal information, subject to some changes that are specific to our operations in Canada, described below.
1. Collection and use of personal information
For the purposes of this privacy statement, “personal information” means any information about an identifiable individual including, without limitation, your name, address, telephone number, email address, birthday information, demographic information and account information. We may collect personal information about you when you visit our restaurants, use our websites or mobile apps (“online services”), and otherwise interact with us (collectively, “services”).
We collect and use your personal information when you:
- Visit our restaurants
- Use our websites
- Use our mobile apps
- Order through a third-party (i.e. food delivery platform)
- Join our loyalty program
- Plan an event at one of our restaurants
- Use our Wi-Fi
- Sign-up to receive our marketing communications
- Use the Pick a Location feature on our website
- Enter a contest or participate in a promotion
- Complete a survey
- Engage with us on social media platforms
- Apply for a job with us
- Apply for a franchise opportunity
- Contact us with a comment, question or complaint
Restaurant Purchases: You do not have to provide us with any personal information when you pay using cash at one of our restaurants. If you use a credit or debit card, we collect your debit or credit card-related information to process and administer your payment. We may also collect transaction information, including information about the products you buy, prices, method of payment and payment details if you scan your code in the McDonald’s App when making a purchase, place a mobile order, or redeem MyMcDonald’s Rewards points at one of our restaurants.
We may also use video surveillance in our restaurants for loss prevention and security purposes.
Using our Online Services: If you interact with us through our online services, you will be asked to create an account by entering your first name and last name, email address and postal code. When you place an order using our online services, we will collect further information from you, including your order details, location, address and payment information to complete your order. We may offer you the ability to order through a third-party food delivery partner, in which case we will obtain your information from the third-party in order to fulfil your order.
We may use automated technology to collect information from your computer system or mobile device when you visit our restaurants, use our online services, or in-restaurant technology. Automated technology may include: computer or mobile-device operating system (including its internal protocol (IP) address, browser type and settings); cookies; unique device identifier (UDID) or mobile equipment identifier (MEID) of your mobile device; advertising identifiers (for example, an identifier for advertising on Apple devices) or similar identifiers; referring webpage (a page that has led you to ours) or applications; online activity on other websites, applications or social media; visits to our restaurants, where recorded using digital technology (i.e. video recordings); activity related to how you use our online services or in-restaurant technology, such as the pages you visit on our websites or in our mobile apps; local shared objects; and web beacons.
Our online services and in-restaurant technology may collect information about the location of your mobile device or computer using geolocation and technology such as GPS, Wi-Fi, Bluetooth, or cell tower proximity. Some online services and in-restaurant technology may not work properly without information about your location.
MyMcDonald’s Rewards Loyalty Program: You can earn and redeem points with our loyalty program, MyMcDonald’s Rewards. If you choose to join, you must create an online account and provide your name, email address, postal code, username and a password you create. We use this to create your loyalty account, to manage our relationship with you, to personalize and improve your overall customer experience and to administer your participation in the loyalty program.
Reservations and Events: If you wish to make a reservation or book an event at a McDonald’s PlayPlace by phone or online (either through our website or app or through a third-party reservation platform), you will be asked to provide information such as your first and last name, phone number, email address, and any additional information required to make the reservation or other booking (e.g. the preferred date and time of dining, and number of guests in your party). We may send you email confirming your reservation once your reservation request is accepted.
In-Store Wi-Fi: Some of our restaurants may provide you with access to free public Wi-Fi. If you choose to connect, the McDonald’s Wi-Fi will receive personal information about you and your device, including your device ID (MAC address), Internet Protocol address (IP address), received signal strength indicator (RSSI) and technical details about your device such as its: operating system, device type (including make and model) and technical capabilities. If you have given your device a name or title, we may also receive the name of your device. When you connect to the Wi-Fi, we also receive information about how you use the Wi-Fi, including the store location where you connect to the network; the areas of the store you visit; the date, time, length and frequency of your visit(s); your bandwidth usage; the names and URLs of the websites you visit and/or the applications you use while connected to the Wi-Fi; and how long you interact with such sites or applications. We collect this information each time you connect to the Wi-Fi and combine such information for the purposes set out below. We and our service provider use this information to connect your device to the Wi-Fi and to enforce our Wi-Fi Terms. We also use the Wi-Fi usage data we collect on an aggregate basis in order to better understand and improve our restaurants and your dining experience. You should have no expectation of privacy with respect to use of the free Wi-Fi. If your mobile device Wi-Fi is turned on, we may also collect your device ID before you connect to the Wi-Fi, however, we only use this information for the purpose of sending a signal to your device indicating that the Wi-Fi is available.
Marketing Communications: If you subscribe to our email mailing list we collect your name and email address as well as other information on an optional basis to help us tailor our communications to you and send you a birthday message (such as your postal code and month/year of birth). If you no longer wish to receive these communications, you can unsubscribe at any time by clicking the “unsubscribe” link included at the bottom of the email. Alternatively, you can opt-out of receiving emails by contacting us at the contact information under “Contact Us” below. Please note that you may continue to receive certain transactional or account-related communications from us, such as your receipt or online order confirmation. With your consent, we may also send you push notifications on your mobile device. You can disable these push notifications at any time through your device settings.
Tailored Advertising: With your consent, we may use services provided by third-party platforms (such as social networking and other websites) to serve targeted advertisements to you or others on such platforms and other third-party websites and apps. When you visit our website, we will display a banner outlining our use of certain technologies to deliver relevant advertising. You can choose to accept or reject the use of these technologies. If you choose to reject the use of such technologies, you may still see ads from McDonald’s Canada but they will not be tailored based on your visit to our website.
Pick a Location: If you search for a restaurant on our website, we may collect your postal code or city and province in order to provide you with information on nearby restaurants. We do not use this information for other purposes. If you consent, we may also track collect your location automatically in order to provide you with tailored content and restaurant suggestions.
Contests and Promotions: When you enter a contest or participate in a promotion, we may collect your name, address, email address, phone number, and any additional information or content required for the contest or promotion (such as information you post on social media). We use this information to administer your participation in the contest or promotion, including prize fulfillment. As part of a contest or promotion, we may obtain your consent to share or otherwise publish the content you submit.
Surveys: From time to time, we may offer you the opportunity to participate in one of our surveys. The information obtained through our surveys is used in an aggregated, de-identified form. We use this information to help us understand our guests and to enhance our online services.
Social Media Platforms: We may offer you the opportunity to engage with us on or through third-party social networking websites, plug-ins and applications, such as by logging in to your MyMcDonald’s account using your social media account credentials. We may also offer employees of McDonald’s or its franchisees the opportunity to interact with us in secure areas on such platforms. In either case, engaging with us on these platforms may allow us to have access to certain information associated with your social media account (e.g., name, username, email address, profile picture) to deliver the content or as part of the operation of the website, plug-in or application. When you provide information from your social media account, we may use this information to personalize your experience on our website and on the third-party social networking websites, plug-ins and applications.
Careers: If you apply for a job with us, you may provide us with certain personal information about yourself, such as information contained in a resume, cover letter, or similar employment-related materials. We use this information for the purpose of processing and responding to your application for current and future career opportunities and assessing your suitability for employment.
Franchising Opportunities: If you submit an inquiry regarding franchising through the Franchising section of our website, we collect information such as your first and last name, year of birth, email address, phone number, province, city, postal code, language, gender, ethnicity, sexual orientation, employment experience, education, financial information and other information required to assess your qualifications. We use this information to determine the kinds of franchising opportunities that may be of interest to you and to contact you about your inquiry.
Contact Us: When you contact us with a comment, question or complaint through email, telephone, the contact us form on our website, you may be asked for information that identifies you, such as your name, email address, telephone number and postal code, along with additional information we need to help us promptly answer your question or respond to your comment. We may retain this information to assist you in the future and to improve our customer service and service offerings.
2. How we Share the Information we Collect
We do not sell your personal information and only share your information as described in this privacy statement or otherwise communicated to you at the time we collect your information.
Service Providers: Your personal information may be transferred (or otherwise made available) to members of the McDonald’s family, including affiliates, subsidiaries and franchisees and third parties that provide services on our behalf. We use service providers to provide services such as hosting the website, processing payments, delivering our products and services, providing IT services such as detecting and preventing fraud and providing advertising and marketing services. Our service providers are only provided with the information they need to perform their designated functions and are not authorized to use or disclose personal information for their own marketing or other purposes. Our service providers may be located in the U.S., Canada and other foreign jurisdictions.
Legal and Compliance: We and our Canadian, US and other foreign service providers may provide your personal information in response to a search warrant to other legally valid inquiry or order, or to another organization for the purposes of investigating a breach of an agreement or contravention of law or detecting, suppressing or preventing fraud, or as otherwise may be required or permitted by applicable Canadian, U.S. or other law or legal process, which may include lawful access by US or foreign courts, law enforcement or other government authorities. Your personal information may also be disclosed where necessary for the establishment, exercise or defence of legal claims and to investigate or prevent actual or suspected loss or harm to persons or property.
Sale of Business: We may transfer any information we have about you as an asset in connection with a proposed or completed merger, acquisition or sale (including transfers made as part of insolvency or bankruptcy proceedings) involving all or part of McDonald’s or as part of a corporate reorganization or other change in corporate control.
3. Your Choices and Rights
We work with third-parties such as ad networks and other advertising companies that use their own tracking technologies (including cookies and pixel tags) on our website in order to provide you with tailored advertisements across the Internet. These companies may collect information about your activity on our website and third-party websites (such as web pages you visit and your interaction with our advertising and other communications) and use this information to make predictions about your preferences, develop personalized content and deliver ads that are more relevant to you on third party websites. This information may also be used to evaluate the effectiveness of our online advertising campaigns.
Opting-out of Interest-Based Advertising: Our website displays a banner outlining our use of certain technologies to deliver relevant advertising to you on third-party websites and apps. You can choose to accept or reject the use of these technologies. If you choose to reject the use of such technologies, you may still see ads from McDonald’s Canada but they will not be tailored based on your visit to our website. To successfully opt out, you must have cookies enabled in your web browser (see your browser’s instructions for information on cookies and how to enable them). Your opt-out only applies to the web browser you use so you must opt-out of each web browser on each computer you use. Once you opt out, if you delete your browser’s saved cookies, you will need to opt-out again.
Opting-out of Marketing Communications: If you have agreed to receive marketing communications from us, you can later opt-out by following the opt-out instructions in the marketing communications we send you. You can also generally find your communication preferences with instructions on how to opt- out in the profile section of the online services that you use. You may also have the ability to change your communication preferences (e.g. push notifications) using your device settings. You can also opt-out by contacting us using the contact information provided below.
If you do opt-out of receiving marketing communications from us, we may still send communications to you about your transactions, any accounts you have with us, and any promotions, contests, competitions, prize draws or sweepstakes you have entered. Opting-out of one form of communication does not mean you have opted-out of other forms as well. For example, if you opt-out of receiving marketing emails, you may still receive marketing text messages if you have opted-in to receiving them. Please note that if you are receiving communications from a McDonald’s franchisee, then you will need to opt-out from them directly.
We do not share personal information with third parties for their own direct marketing purposes, unless you give us permission to do so. When we give you notice, and you consent, we will share your personal information as you direct us to.
Access to Information
Subject to applicable law, you have the right to access, update and correct inaccuracies in your personal information in our custody or control. You may request access, updating and corrections of inaccuracies in your personal information in our custody or control by emailing or writing to us at the contact information set out below. We may request certain personal information for the purpose of verifying the identity of the individual seeking access to his or her personal information records.
4. Use of our Online Services and Other Technologies
Analytics
We may use a third party such as Google Analytics to help us gather and analyze information about the areas visited on the website (such as the pages most read, time spent, search terms and other engagement data) in order to evaluate and improve the user experience and the Website. For more information or to opt-out using the Google Analytics opt-out browser add-on, see “How Google uses data when you use our partners’ sites or apps”.
5. International Data Transfers
The McDonald’s Family is global in nature with business processes, management structures and technical systems that cross borders. As such, we may share information about you within the McDonald’s Family and transfer it outside of Canada or your province (including, for residents of Quebec, outside Quebec) to countries in the world where our vendors or members of the McDonald’s Family are established. Any international data transfers will be in accordance with this privacy statement and in compliance with applicable laws.
6. Information about our Privacy Governance Policies and Practices
We are committed to protecting personal information and have implemented a comprehensive set of policies and practices that govern our treatment of personal information. These policies and procedures include, among other things, the following:
• We have implemented policies and procedures to protect personal information in our custody and control from unauthorized access, use or disclosure.
• We have implemented processes to respond to data subject requests and complaints in a timely and effective manner.
• As set out above, we have implemented a framework for the retention and destruction of personal information to ensure compliance with legal obligations, and to securely destroy personal information once no longer required.
• We have designated a Privacy Manager who is responsible for overseeing the company’s compliance with privacy legislation.
• We have implemented a privacy framework that defines the roles and responsibilities for our employees with respect to the treatment of personal information.
• We provide our employees with regular privacy training and awareness.
7. Contact us
If you have any questions or comments about this privacy statement or the manner in which we or our service providers (including our service providers outside Canada) treat your personal information, or to request access to our collection of your personal information, please contact us at:
Privacy Manager
1 (888) 424-4622
privacymanager@ca.mcd.com
