PRIVACY POLICY
Riyadh International Catering Corporation (RICC), an entity registered under the Ministry of Commerce with commercial registration number 1010112916, is the franchisee of McDonald's in the Kingdom of Saudi Arabia, overseeing operations in the Central, Eastern, and Northern regions.
At McDonald's, we respect your concerns about privacy. This Privacy Statement ("Statement") describes the personal information practices of McDonald's with respect to information about our customers and others who visit our restaurants, websites, and mobile apps, including the types of personal information we collect, how we may use this information, and with whom we may share it.
1. Information We Collect
We may collect personal information about you when you visit one of our restaurants, use McDonald’s Web sites ("Sites"), or use our web or mobile device applications ("Mobile Apps"). We refer to our Sites and Apps collectively as "Online Services".
The data McDonald’s collects varies depending on the purpose of its use. Some of this data is mandatory to provide services or fulfill legal obligations, such as your full name, contact details, and ID numbers. Other data, such as your preferences or feedback, is optional and is used to improve your experience or provide personalized services
You may provide the following information to us, depending on how you interact with us:
- personal details, such as your name, postal and email addresses, phone number, birthday information, and other contact information, when you register with our online services, log-in to Wi-Fi, enter one of our competitions, or contact us by phone or through our online services;
- demographic information such as age or gender;
- transaction information, including information about the products you buy, prices, method of payment, and payment details;
- account information, such as your username or password (or anything else that identifies you) used to access our online services or to buy or use our products and services;
- profile information, including products and services you like, or times you prefer to visit us; and
- other personal information you choose to provide us when you interact with us (including through social media).
Information Collected Through Automated Means
We may collect information from your computer system or mobile device through automated technologies when you visit our restaurants or use our Online Services or in-restaurant technologies. These automated technologies may include cookies, local shared objects, and web beacons.
Additional information regarding the use of cookies and other automated technologies is provided in this Statement below. The information collected may include:
· your Internet Protocol (IP) address;
- computer/mobile device operating system and browser type;
- type of mobile device;
- mobile device settings;
- the unique device identifier (UDID) or mobile equipment identifier (MEID) for your mobile device;
- device and component serial numbers;
- advertising identifier (e.g., IDFAs and IFAs) or similar identifier;
- the referring website or application;
- the linked sites, third-party websites, applications, or social media where you share Online Services content; and
- activities related to your use of our Online Services, such as the pages you visit on our Sites or in our Mobile Apps.
The providers of third-party apps, tools, widgets, and plug-ins on our Online Services, such as Facebook "Like" buttons, also may use automated means to collect information regarding your interactions with these features. This information is subject to the privacy policies or notices of these providers.
Location Information
McDonald's Online Services and in-restaurant technologies may collect information about the location of your mobile device or computer using geolocation and location presence awareness technologies such as GPS, Wi-Fi, Bluetooth, or cell tower proximity. For most mobile devices and computer systems, you can withdraw your permission for McDonald's to acquire this information through the device or web browser settings.
If you have questions about how to disable the collection of precise location information, we recommend you contact your mobile device service provider, the device manufacturer, or your web browser provider.
Please note that certain Online Services and in-restaurant technologies may not function properly without precise location information. If you would like us to delete location information, we have collected that is identifiable to you, please exercise your privacy rights as per the procedure mentioned under “Section 6. Your Rights and Choices” below. Please note that we may be required by law to retain certain information.
Providing personal data is essential for McDonald’s to offer certain services and meet our legal obligations. Choosing not to provide the required personal data for specific purposes may result in limited access to services or reduced functionality.
2. How We Use the Information We Collect
McDonald's may use the personal information we collect to:
We use the information we collect for the following purposes:
- to provide our products and services, including payment processing and customer support;
- to manage our relationship with you, including feedback management and customer surveys;
- to personalize and improve our products and services and your overall customer experience, in particular by improving our existing technologies and developing new products;
- and services, and employing profiling technology (unless we notify you separately thereof, this will not include automated individual decisions that have legal effects for you or similarly significantly affect you);
- to provide you with general and personalized electronic and non-electronic direct marketing information and support our targeted advertising initiatives concerning our products and services as well as our business partner's products and services (including promotions, contests, prize draws, competitions, and sweepstakes);
- business analytics, including consumer and operations research, to assess the effectiveness of our sales, online service, marketing, and advertising, and to analyze market trends and (future) customer demand;
- to ensure the security of our online services and in-restaurant technology, including the detection, prevention, and investigation of attacks;
- to protect against, identify, and prevent fraud and other crimes, claims, and other liabilities;
- to protect the rights, safety, health, and security of our customers, our employees, our franchisees, and the general public, and to protect our property;
- to anonymize your information for further internal and external use in a manner that does not identify you;
- to comply with legal obligations and our Standards of Business Conduct; and
- to establish, exercise or defend a legal claim.
We also use this information to help diagnose technical and service problems; administer our Online Services; identify users of our Online Services; identify a device for fraud prevention purposes;
Targeting Advertising
On our Online Services, we may collect information about your online activities for use in providing you with advertising tailored to your individual interests. This section of our Privacy Statement provides details and explains how to exercise your choices.
You may see certain ads on other websites because we participate in advertising networks. Ad networks allow us to target our messaging to users through demographic, interest-based and contextual means. These networks track your online activities over time by collecting information through automated means, including through the use of cookies, web server logs, web beacons, and other technologies. The networks use this information to show you advertisements that may be tailored to your individual interests. The information our ad networks may collect includes information about your visits to websites that participate in the relevant advertising networks, such as the pages or advertisements you view and the actions you take on the websites. This data collection takes place both on our Online Services and on third-party websites that participate in the ad networks. This process also helps us evaluate our marketing efforts.
We will take necessary measures to stop such advertising messages upon receiving your request to opt-out, ensuring your data is no longer used for targeted advertising purposes.
Please note that Opting out will stop us from alerting you about the promotions and loyalty related messages as both our programs are interlinked.
We may use your personal information collected for other purposes for which we provide specific notice before the start of such processing.
3. How We Share the Personal Information We Collect
McDonald's does not sell or otherwise share personal information about you, except as described in this Privacy Statement.
McDonald's may share personal information within the McDonald's Family. The McDonald's Family includes McDonald's Corporation, its affiliates, subsidiaries, suppliers, vendors, and franchisees. Members of the McDonald's Family that receive this information from McDonald's are not authorized to use or disclose the information except as provided in this Privacy Statement.
McDonald's may share personal information with vendors that provide services to McDonald's, such as fulfilling orders, providing data processing and other information technology services, administering promotions, contests, prize draws and sweepstakes, conducting research and performing analytics, and personalizing individual McDonald's experiences. We do not authorize these vendors to use the personal information or to disclose it for any purpose other than to perform services on our behalf.
Circumstances may arise where, whether for strategic or other business reasons, McDonald's decides to sell or transfer all or a portion of our business. We may transfer information we have collected and stored, including personal information, to the party or parties involved in the transaction as part of that transaction.
McDonald's reserves the right to use or disclose personal information as needed to satisfy any law, regulation or legal request, to protect the integrity of our Online Services and in-restaurant technologies, to bring or defend against legal claims, to protect the rights, and interests, safety and security of McDonald's, McDonald's employees or franchisees, or members of the public, or in connection with the investigation of fraud, illegal activity or violation of McDonald's policy.
4. Where Personal Data Is Stored
The information that you provide us with is stored in a multi-cloud environment. We will take all steps reasonably necessary to ensure that your data is treated securely.
5. Children's Privacy Notice
McDonald's understands the importance of the privacy of users of our Online Services. We are especially committed to protecting the privacy of children who visit or use our Online Services. This Children's Privacy Notice is designed to answer your questions regarding our practices with respect to personal information we collect through our Online Services from children under the age of [13].
We offer many features on our Sites, like games and coloring books, which do not require a child to provide any personal information. On occasion, however, we may collect personal information, such as email addresses from children as part of an activity. For example:
We will not collect other personal information from a child under the age of [13], such as a [postal address] or telephone number, without the consent of a parent or guardian. If parent or guardian consent is required, we will collect the email address of the parent or guardian so we can provide notice of our information practices and/or seek the parent's or guardian's consent.
McDonald's will not condition a child's participation in any online activity on the child's disclosure of more personal information than is reasonably necessary to participate in that activity.
We use email addresses submitted by a child in order to respond to the child's request or to notify the child if he or she has won or lost a contest, competition, prize draw, or sweepstakes they entered. We use the email address of a parent or guardian in order to provide the parent notice of our information practices or to seek the parent's or guardian's consent.
We may share a child's personal information with third parties to the extent reasonably necessary to protect the security or integrity of our Online Services, take precautions against liability, or respond to judicial process or requests from other governmental authorities, or when we believe disclosure is necessary or appropriate to prevent physical harm or financial loss, or in connection with an investigation of suspected or actual illegal activity.
We also may share personal information collected from children with vendors that perform services for McDonald's. These services may include hosting our Sites, providing technical services to McDonald's, fulfilling requests or administering a contest, competition, prize draw, or sweepstakes. We do not authorize such vendors to disclose the personal information we share with them other than as necessary to perform the relevant service for McDonald's.
Parents may review the personal information we have collected from their child that has not been deleted and can request that the personal information be deleted from our records if it has not been already. Parents also may refuse to permit further collection or use of their child's personal information, when the parent has previously provided consent. To do so, please contact us at the address, telephone number, or email address provided below with your request.
We urge parents to regularly monitor and supervise their children's online activities. If you have any questions about our children's privacy practices, please contact us at:
Privacy at McDonald's Riyadh
Riyadh International Catering Corporation, P.O. Box 63346, Riyadh 11516, Kingdom of Saudi Arabia
Email: dpo@mcdonalds.com.sa
6. Your Rights and Choices
You have a number of rights under the data protection regulations in relation to the way we process your personal data:
- Right to be Informed: You have the right to be informed about the legal basis and the purpose of the collection of your personal data.
- Right to Access: The right to access the Personal Data held by McDonald's.
- Right to Obtain Data in Readable Format: You have the right to request Personal Data held by McDonald's in a readable and clear format.
- Right to Data Deletion: You have the right to request the destruction of the Personal Data held by McDonald's when such Personal Data is no longer needed.
- Right to Timely Responses: McDonald's is obliged to respond to employee requests pertaining to their rights within specified timeframes and using specified methods.
- Right to Rectify Data: You have the right to request the correction, completion, or updating of the Personal Data held by McDonald's.
- Right to Withdraw Consent: You have the right to withdraw your consent to process your Personal Data at any time, given that it shouldn’t affect processing on a legal basis.
- Right to Complaint: On becoming aware of any privacy incident, you may also complain to the competent authority within a period of 90 days from the date of such an incident, providing the following information:
- Place and time of the violation;
- Name, identification, address, and telephone number of the complainant;
- Information about the complained entity;
- Clear and specific description of the violation.
If you have opted-in to marketing communications, you can elect not to receive marketing communications from McDonald's by following the opt-out instructions in the marketing communications we send you; or Click Here or contact us at the address, or email address provided below. Please note that if you opt out of receiving marketing communications from us, we may still send communications to you concerning your transactions, accounts with McDonald's, and any contests, competitions, prize draws, or sweepstakes in which you have enrolled.
7. Complaint or Objection Filing Method
If you have any concerns, or if we do not comply with the Personal Data Protection Law, you can file a complaint to the Data Protection Officer at the contact details given above. If you are dissatisfied with how we process your complaint, or if we fail to respond within thirty (30) days, you can file a complaint to the Competent Authority, SDAIA at the address below:
Kingdom of Saudi Arabia,
Riyadh.
Website: Saudi Data & AI Authority (sdaia.gov.sa)
National Data Governance Platform “DGP” (dgp.sdaia.gov.sa).
8. Cookies and Similar Technologies
McDonald's uses cookies and other similar technologies to collect information for the purposes described in this Privacy Statement under “How We Use the Information We Collect.”
Cookies
A "cookie" is a text file that websites send to a visitor's computer or other Internet-connected device to uniquely identify the visitor's browser or to store information or settings in the browser. Like most websites, McDonald’s uses cookies for a variety of purposes in order to improve your online experience. For example, we track the total number of visitors to our Sites on an anonymous aggregate basis. We may also employ cookies so that we remember you when you return to the Site, to keep track of the items in your shopping cart if you purchase merchandise online, to administer certain contests and sweepstakes, and to help customize your McDonald’s web experience.
We may associate personal information with a cookie file in those instances. Both we and others (such as our advertising networks) may collect personal information about our visitors' online activities, overtime and across third-party websites, when using our Online Services.
Use the options in your web browser if you do not wish to receive a cookie or if you wish to set your browser to notify you when you receive a cookie. Click on the "Help" section of your browser to learn how to change your cookie preferences. If you disable all cookies, you may not be able to take advantage of all the features of this Site.
Other Technologies
We may use other technologies, including web beacons and JavaScript, which sometimes work together with cookies and other means with our Sites and Mobile Apps to uniquely identify your device. These other technologies help enable features on our Sites and within our Mobile Apps.
We may also use certain technologies to determine whether you have opened an e-mail or clicked on a link contained in an e-mail.
Please note the following:
9. Links to Other Websites and Social Media
Our Online Services may offer links to third-party websites that are not operated by McDonald’s. If you visit one of these linked websites, you should review the website’s privacy policy, terms, and conditions, and other policies. We are not responsible for the policies and practices of third parties. Any information you submit to those third parties is subject to their privacy policy, terms, and conditions, and other policies.
10. Information Security
McDonald’s is committed to taking appropriate measures designed to keep personal information secure. We have in place technical, administrative, and physical procedures designed to protect personal information from accidental, unlawful or unauthorized loss, access, disclosure, use, alteration, or destruction. While we take efforts to safeguard our information systems, no website, mobile application, computer system, or transmission of data over the Internet or any other public network can be guaranteed to be 100% secure.
11. Retention of Personal Information
We retain personal information for the period of time necessary to fulfill the purposes outlined in this Privacy Statement and per McDonald’s records retention policies unless a longer retention period is required or permitted by law. Once the retention period has ended, your personal data will be either destroyed or anonymized in compliance with applicable laws, regulations, and industry best practices. This process ensures that your data cannot be identified, accessed, or used without authorization after the retention period has expired.
12. International Data Transfers
McDonald’s is a franchisee in the McDonald’s Family, a global organization with business processes, management structures and technical systems that cross borders. As such, we may share information about you within the McDonald’s Family and transfer it to countries in the world where the McDonald’s Family carries on business in connection with the uses identified above and in accordance with this Privacy Statement. These countries may not have the same level of legal data protection as the country in which you initially provided the information.
13. Changes to our Privacy Statement
We may change this Privacy Statement from time to time. If we change the Privacy Statement, we will post the revised version here and change the "Effective Date" listed at the top of this Statement. We encourage you to check here periodically for the most up-to-date version of our Statement.
14. How to Contact Us
Privacy at McDonald's Riyadh
Riyadh International Catering Corporation, P.O. Box 63346, Riyadh 11516, Kingdom of Saudi Arabia