At Starbucks, our commitment to you extends beyond crafting the perfect beverage. We believe in putting people first, and that includes how we handle your data and privacy. Just as we strive to provide exceptional customer service in every interaction, we approach data protection with the same dedication and care.
In accordance with privacy and data protection laws, we are committed to data minimization, limited collection, and responsible use. We understand that your trust is paramount, and safeguarding your personal information is a crucial part of serving you better. So, grab your favorite Starbucks drink and let’s explore how we prioritize your privacy.
For detailed information regarding the processing of personal information that may be considered consumer health data, please refer to the Consumer Health Data Privacy Notice for Washington and Nevada.
STARBUCKS PRIVACY NOTICE: An Overview of Our Commitment to You
Last Revised: January 17, 2025
Understanding Starbucks’ Approach to Privacy
This Privacy Notice is designed to clearly explain how Starbucks Corporation, along with its subsidiaries and affiliates (“Starbucks,” “we,” “us”), collects, utilizes, and protects your personal information. We want you to understand your rights and choices regarding your data and how we ensure its security. Our goal is to be transparent about our practices, fostering a relationship built on trust as we continuously improve our products, services, and your overall Starbucks Experience. We appreciate you taking the time to understand our data and privacy practices.
By continuing to engage with Starbucks Services, you acknowledge this Privacy Notice and agree to our Terms of Use and other important policies, all readily available on our Online Policies page.
Navigating This Notice
For your convenience, you can easily navigate directly to specific sections of this Privacy Notice by selecting from the Contents below:
Contents
1. Scope and Applicability of This Privacy Notice
This Privacy Notice (“Notice”) applies to all Starbucks digital platforms, including websites like starbucks.com, starbucksreserve.com, princi.com, starbucks.ca, the Starbucks mobile applications available at https://www.starbucks.com/coffeehouse/mobile-apps (“Starbucks App”), as well as your in-store experiences and any other Starbucks websites or applications that link to this Notice (“Starbucks Services”).
It’s important to note that our platforms may contain links to third-party websites or applications not operated by Starbucks. We encourage you to review the privacy policies of these external sites as we are not responsible for their practices. Information you provide to these third parties is governed by their respective privacy notices, terms, and policies.
2. Keeping You Informed: Updates to Our Privacy Notice
Starbucks may update this Privacy Notice periodically to reflect changes in our practices or legal requirements. When we make significant changes, we will notify you and update the “Last Revised” date at the top of this Notice. We encourage you to regularly check for updates whenever you access our websites and mobile applications to stay informed about our current privacy practices.
3. Information Collection: Understanding What We Gather
When you interact with Starbucks Services, we may collect various categories of information to enhance your experience and provide you with the best possible service. These categories include:
- Identifiers: Information that can identify you personally, such as your name, phone number, address book contacts, username, password, email address, postal address, IP address, birthday (day and month), and demographic information (e.g., gender).
- Financial Information: Data related to transactions, such as credit and debit card details, phone number, and name associated with payments.
- Commercial Information: Details about your interactions with Starbucks, including purchase history in stores, online, or via the Starbucks App. This includes products purchased, purchase frequency, rewards and promotions used, and items saved in your “Wishlist” or “My Bag” for future purchases.
- Electronic Network Activity Information: Data related to your online activity, such as browsing history, website and app usage, device information, and interactions with our website’s “live help” chat feature.
- Geolocation Information: Information about your device’s location, derived from your IP address or device settings. We may also utilize location-based technology in our stores to detect the presence of your device if Bluetooth is enabled and device settings permit.
- Audio and Visual Information: We may collect audio and visual data through services like CCTV cameras in retail locations for security, crime prevention, and safety purposes. These cameras may capture audio, visual, and similar information. Voice ordering may also involve audio information collection, depending on your settings.
- Inferences: We may draw inferences based on the information we collect to better understand your preferences and offer personalized experiences.
- Other Information: Any other information you voluntarily provide when communicating with us directly.
Depending on your usage of Starbucks Services, we may also collect sensitive personal information, specifically:
- Precise Geolocation Information: Detailed location data from your device (e.g., GPS coordinates), consistent with your device settings. This may be collected via GPS, WiFi, Bluetooth, or other location-based technologies to facilitate services like finding nearby stores, mobile ordering and payment, and delivery through third-party vendors.
We may aggregate or de-identify collected information. Data that is aggregated or de-identified and cannot be re-identified is not subject to this Privacy Notice.
Please note that some information is essential for us to provide requested services. Without it, we may not be able to fulfill all service requests.
4. Information Sources: Where We Get Your Data
In addition to information you directly provide, we may also receive data from other sources, including:
- Other Starbucks Services users (e.g., when someone sends you a gift).
- Advertising partners.
- Co-sponsors.
- Internet service providers.
- Data analytics providers.
- Operating systems and platforms.
- Social networks (if you connect through social media).
- Publicly available sources.
For example, if you log in to Starbucks Services through social media or share your Starbucks experience on social platforms, we may collect information from these third-party services, always in accordance with your privacy settings on those platforms.
5. Utilizing Your Information: How We Use Your Data to Serve You Better
Starbucks uses your information for various business purposes aimed at enhancing your experience and providing excellent customer service. These include:
(a) Providing and Enhancing Our Services: We process your information to deliver the Starbucks Services you use, including:
- Order and transaction processing.
- Account maintenance and servicing.
- Enhancement of loyalty programs like Starbucks® Rewards.
- Delivery of gift cards and e-gifts, including personalized messages.
- Debugging and error repair to improve functionality.
- Website and mobile application functionality.
- Payment processing.
- Personalized experiences in and around our stores (with location sharing permission).
(b) Communication and Customer Support: We use your information to communicate with you effectively, providing customer service and support:
- Responding to customer service inquiries, including interactions through our website’s “live help” chat.
- Communicating about orders, purchases, returns, services, accounts, programs, contests, and sweepstakes.
- Sending personalized promotions, content, and special offers.
- Keeping you informed about our brands, products, events, and other promotions.
- Implementing your communication preferences, including sharing information with Starbucks business partners for their promotions.
- Providing important product safety information and recall notices.
(c) Research, Development, and Service Improvement: We continuously strive to improve and expand our services to meet and exceed your expectations. Your information helps us:
- Maintain, improve, and analyze our websites, mobile applications, advertisements, products, and services.
- Ensure the security and integrity of Starbucks Services, including fraud detection and prevention.
(d) Enforcing Terms and Policies: To maintain a safe and trusted environment, we use your information to ensure compliance with our terms, policies, and agreements.
(e) Legal Compliance: We process information to comply with applicable laws and regulations, including:
- Maintaining records for internal administrative purposes.
- Responding to lawful governmental requests and fulfilling legal obligations.
(f) Targeted Advertising: We may use your information to provide targeted advertising and offers that may be of interest to you, enhancing your discovery of relevant products and promotions.
(g) Consent-Based Processing: With your consent, we may process your information for other business or commercial purposes as directed by you.
6. Information Disclosure: When and Why We Share Your Data
Starbucks may disclose your information as necessary to fulfill the purposes outlined in this Notice and as permitted by law.
(a) Intra-Company Sharing: We may share information within Starbucks Corporation, its subsidiaries, and affiliates for management, analysis, decision-making, and other business purposes. This includes administering loyalty programs, processing orders, and promoting our product and service offerings.
(b) Sharing with Service Providers and Business Partners: We share information with trusted service providers and business partners who assist us in various business operations, such as:
- Payment processing.
- Website and data hosting.
- Location mapping.
- Product and service delivery.
- Customer service operations.
- Advertising and marketing (including ad impression counting and audience creation).
- Sweepstakes and Starbucks® Rewards program administration.
- Industry standard compliance.
- Personalization and analytics services.
- Security and performance monitoring.
- Account maintenance and servicing.
- Order and transaction fulfillment.
- Customer information verification.
- Research, auditing, and data processing.
We contractually obligate these partners to protect your information and use it only for agreed-upon services for Starbucks.
(c) Business Transactions: In the event of a merger, corporate transaction, or asset transfer, your information may be shared with involved business entities or individuals during the negotiation or transfer process.
(d) Protecting Safety and Lawful Interests: We may disclose information if legally required, to enforce our agreements or policies, or to protect the rights, property, or safety of Starbucks, our customers, or partners.
(e) Consent-Based Sharing: We may share information with other companies if you grant us permission or direct us to do so.
(f) Public Website Postings: Information you post in public areas of our websites, such as blogs, may be visible to other website visitors. We are not responsible for information you choose to share in these public spaces.
7. Cookies and Similar Technologies: Enhancing Your Digital Experience
Starbucks and our partners utilize various technologies like cookies, web beacons, and similar tools to collect information about your device and website/app usage. These technologies help us improve website functionality, analyze usage, and personalize your experience.
- Cookies: Small data files stored on your device to track session information or persistent preferences.
You can manage cookies and similar technologies through your browser settings. Most browsers allow you to accept or reject cookies, and you can also remove existing cookies. Refer to your browser’s help menu for instructions on modifying cookie settings for browsers like Internet Explorer, Google Chrome, Mozilla Firefox, Safari Desktop, Safari Mobile, and Android browser.
-
Interest-Based Ads: You can opt out of interest-based advertising from participating companies through the Digital Advertising Alliance (DAA) and Network Advertising Initiative (NAI) websites: http://optout.aboutads.info/, https://youradchoices.ca/en/tools, or http://optout.networkadvertising.org/?c=1. European Union residents can opt out via the European Interactive Digital Advertising Alliance: https://www.youronlinechoices.eu/. Mobile app opt-out is available through the DAA’s App Choices app: https://youradchoices.com/appchoices.
-
Web Beacons: Transparent images embedded in web pages, applications, and emails to track page visits, marketing effectiveness, and email opens.
-
JavaScript: Code snippets enabling various website and application operations, including faster refresh speeds and usage monitoring.
-
Entity Tags: HTTP code mechanisms for caching website portions in your browser to improve website performance.
-
HTML5 Local Storage: Allows data caching within your browser for faster retrieval on revisits.
These technologies serve various purposes:
- Services and Functionality: Essential for website and app access and functionality.
- Performance Monitoring: Analyzing traffic, usage volume, errors, and performance of digital properties without collecting directly identifiable information.
- User Convenience: Enhancing ease of use by accelerating load times and remembering user preferences.
- Marketing: Tailoring your experience with relevant promotions and advertisements.
These technologies help us understand service usage and personalize your website or app visits with relevant promotions and advertisements.
8. Data Security: Protecting Your Information
Starbucks implements reasonable technical, physical, and administrative security measures to protect your information from loss, misuse, unauthorized access, disclosure, or modification. While we strive for robust security, no system is impenetrable. We cannot guarantee absolute security due to the inherent nature of the Internet. You play a vital role in protecting your data by safeguarding your passwords and device security.
9. Data Retention: How Long We Keep Your Information
Starbucks retains information only as long as reasonably necessary to fulfill the purposes outlined in this Notice, considering factors like service provision duration, legal requirements, dispute resolution, and agreement enforcement. Data retention is governed by applicable law.
Your personal information may be stored and processed on servers owned by Starbucks and other companies in the United States, Canada, or globally, including locations outside your jurisdiction. Regardless of processing location, we take steps to protect your information through appropriate safeguards in compliance with data protection laws and this Notice.
10. Children’s Privacy: Protecting Young Users
Starbucks websites and online services are not intended for use by individuals under 13 years of age. We do not knowingly collect, sell, or share information of consumers between 13 and 16 years old. If you believe we may have collected information from your child, please contact us immediately as described in the “Contact Us” section. Refer to our Terms of Use for more information.
11. Starbucks Wi-Fi: Internet Access in Our Stores
Many Starbucks stores offer complimentary wireless internet (WiFi). Please review the terms of use on the activation page before accepting and connecting to our WiFi service.
12. Your Rights and Choices: Control Over Your Information
(a) Your Choices
-
Location Services: Certain Starbucks Services like mobile order and pay (MOP) and location-based features require location services to be enabled in the Starbucks App and/or device settings. Location sharing allows us to personalize your in-store experience, monitor marketing effectiveness, tailor messages, and manage promotional offer frequency. Precise geolocation may be used for service and application functionality you choose. You can manage location sharing permissions in your device settings at any time. Disabling location services may limit certain Starbucks App features and Services. You can re-enable location services at any time through your device settings.
-
Voice Ordering: Voice ordering features require microphone and speech recognition to be enabled in the Starbucks App and/or device permissions. You can manage these permissions in your device settings.
-
Email Communications, Push Notifications, and In-App Messages: The Starbucks App allows you to manage preferences for promotional emails, push notifications, and in-app messages. You can opt out of promotional emails via your Starbucks online account settings or the “unsubscribe” link in emails. Opting out of promotional emails does not prevent order and account-related communications. Note that opting out of promotional emails does not automatically opt you out of marketing text messages if you have opted in to those separately.
-
Text Messages: You may consent to receive automated marketing text messages for certain Starbucks Services. You can opt out at any time by replying STOP, END, CANCEL, UNSUBSCRIBE, or QUIT to any received text message. Opting out of text messages does not prevent promotional emails if you have opted in to those separately.
By using Starbucks App features described above, you consent to the transmission of your user information to Starbucks and its agents, and authorize Starbucks and its agents to record, process, and store such user information for feature administration and purposes described in this Notice.
(b) Your Rights, Including State-Specific Rights
Depending on your location (including California, Colorado, Connecticut, Nevada, Utah, Virginia, and Washington), you may have specific rights regarding your personal information:
- Right to Know: You can request to know what personal information we have collected about you, including categories, sources, purposes, and third-party disclosures.
- Access and Data Portability: Subject to exceptions, you can request a copy of your personal information collected in the past 12 months.
- Deletion: You can request deletion of your personal information, subject to certain exceptions.
- Correct Inaccurate Information: You can request correction of inaccuracies in your personal information. You can also correct Starbucks Rewards information within the Starbucks App.
- Targeted Advertising Opt-Out: You can opt out of sharing your personal information for targeted advertising. Click this “Do Not Share My Personal Information” link to opt-out. We do not sell your information for monetary consideration.
- Sensitive Information Limitation: As Starbucks only collects, uses, and discloses sensitive personal information to provide services to you, we are not required to provide a “Limit the Use and Disclosure of My Sensitive Personal Information” link.
- Opt-Out Preference Signals: We honor opt-out preference signals from web browsers that automatically signal your opt-out preference.
- Appeals: You can appeal our decision regarding your request by contacting us as described in the “Contact Us” section.
- Consumer Health Data Rights (Washington and Nevada): You may have additional rights related to consumer health data. Refer to the Consumer Health Data Privacy Notice for Washington and Nevada for details.
Requests for U.S. residents should be submitted via this form HERE.
Requests for Canadian residents should be submitted via this form HERE.
U.S. and Canadian residents can also call 1-800-STARBUC (782-7282) for requests. We will verify your identity before processing requests. You can authorize an agent to submit requests on your behalf with written proof of authorization.
Authorized agents or those submitting requests on behalf of customers should use this form HERE or email [email protected].
(c) Other California Rights
- California residents can request a notice disclosing categories of personal information shared with third parties for direct marketing purposes by mail to: Starbucks, P.O. Box 20430, Augusta, GA 30916.
- We do not currently respond to browser “Do Not Track” signals due to the lack of industry standards. We may develop policies in the future as standards evolve.
(d) Privacy Metrics
Privacy Rights Metrics (January 2024 – December 2024) – Includes requests from the United States and Canada:
Right to Know • Requests Received – 1,237 • Requests Complete – 463 • Requests unable to be completed* – 760 • Average completion time – 7 days
Right to Delete • Requests Received – 3,513 • Requests Complete – 1,948 • Requests unable to be completed* – 1,514 • Average completion time – 11 days
*Requests may be unable to be completed due to reasons like inability to verify customer identity, duplicate requests, or no information found.
13. Notice of Financial Incentive & Starbucks® Rewards
Starbucks® Rewards program is our way of thanking loyal customers. Members earn “Stars” for purchases, redeemable for benefits at participating stores. See the Starbucks Rewards Terms of Use: https://www.starbucks.com/rewards/terms.
We collect and use information described in the “Information We Collect” section to operate Starbucks® Rewards, send promotions, and personalize offers. We work with service providers and business partners (delivery partners, global licensees, subsidiaries, affiliates) to offer program benefits. See the “How We Disclose Your Information” section for partner categories. We do not assign monetary value to Rewards program data in email communications. You can opt out of promotional emails via your online account or the “unsubscribe” link in emails.
Participation in Starbucks® Rewards is voluntary. You can withdraw by visiting the Account section in the Starbucks App, requesting data deletion via this form HERE, or calling customer service. Withdrawal removes account access and earned rewards. To provide Rewards services, we need your personal information. Deleting your information from the program means we can no longer provide loyalty program services.
We estimate that Starbucks® Rewards provides value through increased customer loyalty and patronage, though individual value varies based on purchase behavior and offer utilization.
14. Additional Disclosures for Data Subjects in the EEA, the U.K., and Switzerland
This section provides information for individuals in the European Economic Area, the United Kingdom, and Switzerland (EEA) regarding GDPR compliance. This section supplements, and does not supersede, specific EEA-based Starbucks affiliate privacy policies.
(a) Lawful Bases of Processing: Where Starbucks acts as a data controller, we process personal data based on lawful bases, including:
- Contract Performance: To fulfill contracts, process purchases, deliver gift cards, and communicate about orders and services.
- Legitimate Business Interests: To respond to customer service inquiries, improve websites and services, detect fraud, and facilitate website/app functionality.
- Legal Obligations: To comply with laws, maintain records, and provide product safety information.
- Consent: To send personalized promotions and information about brands, products, and events.
You can withdraw consent at any time by modifying your promotional preferences in your Starbucks account or contacting us.
(b) Your EEA Data Subject Rights: Under GDPR, you have rights to:
- Access: Request access to your personal information.
- Correction: Request correction of inaccurate information.
- Erasure: Request deletion of your personal information.
- Objection to Processing: Object to processing based on legitimate interest or direct marketing.
- Restriction of Processing: Request suspension of processing.
- Data Portability: Request data transfer to another party.
- Automated Decision-Making: Not be subject to automated decision-making (which we do not engage in).
To exercise these rights, see the “Your Choices & Rights” section or contact us, specifying your GDPR rights request. We will verify your identity and respond within 30 days.
(c) Retention: We retain data only as long as needed for collection purposes or as legally required. Retention may be extended to honor requests, maintain opt-out preferences, or comply with legal obligations.
(d) Transfers Outside the EEA: Your data may be transferred to and processed in countries outside the EEA, including the United States, by Starbucks or third-party service providers. We ensure adequate data protection in these transfers as required by GDPR and this Notice.
(e) Complaints: You have the right to lodge complaints with an EEA supervisory authority. We encourage you to first contact us with concerns or utilize our U.S.-based third-party dispute resolution provider (TRUSTe): https://feedback-form.truste.com/watchdog/request. You can also contact our Data Protection Officer at [email protected].
15. Data Privacy Framework Participation
Starbucks complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce regarding personal data received from the EU, UK, and Switzerland. Our certification is viewable at https://www.dataprivacyframework.gov/.
Starbucks is responsible for processing data received under these frameworks and onward transfers to third-party agents. We comply with the DPF Principles for all onward transfers, including liability provisions.
The Federal Trade Commission (FTC) has jurisdiction over Starbucks’ DPF compliance. Data disclosure may be required for lawful requests by public authorities.
For unresolved DPF complaints, Starbucks commits to referring them to TRUSTe, a U.S.-based alternative dispute resolution provider. For DPF complaints, visit https://feedback-form.truste.com/watchdog/request. These services are free to you. Binding arbitration is available under certain conditions for unresolved DPF complaints. See the DPF website for more information: https://www.dataprivacyframework.gov/framework-article/ANNEX-I-introduction.
16. Contact Us: We’re Here to Help
For privacy questions, comments, or concerns, please contact Starbucks Customer Service:
- Online: http://customerservice.starbucks.com
- Phone: 800- (782-7282)
- Postal Mail: Starbucks Customer Service, Starbucks, P.O. Box 549, Fort Smith, AR 72902.
Reach our Global Privacy Department and Data Protection Officer at [email protected].
Additional contact information for various Starbucks entities may be available.
