At Starbucks, we approach data and privacy as we approach everything we do: we put people first. Understanding how your information is handled is crucial, and Starbucks is committed to protecting your privacy with the same dedication they use to craft your perfect latte. This Privacy Notice is designed to clearly explain how Starbucks collects, uses, and safeguards your personal information. For any questions or concerns regarding this policy, or to exercise your privacy rights, remember that reaching out to Starbucks Customer Service Number is a direct and helpful option.
As part of Starbucks’ ongoing commitment to privacy and data protection, they adhere to principles of data minimization, limited collection, and limited use. This approach ensures your trust is maintained and respected. Just as they carefully source their coffee beans, Starbucks carefully considers your data and privacy. So, grab your favorite Starbucks beverage and take a moment to understand how they are taking care of your data.
Please see the Consumer Health Data Privacy Notice for Washington and Nevada for detailed information on the processing of personal information considered consumer health data.
STARBUCKS PRIVACY NOTICE
Last Revised: January 17, 2025
Overview
This Starbucks Privacy Notice outlines the personal information collected by Starbucks Corporation and its subsidiaries and affiliates (“Starbucks,” “we,” and “us”), how this information is used, when and how it may be shared, and your rights and choices regarding your data. It also details communication methods and how to submit requests or inquiries about your information. Starbucks aims to be transparent in its data practices, ensuring you understand how your information enhances products, services, marketing, and overall interactions with you, all while upholding your trust. Thank you for reviewing Starbucks’ data and privacy practices.
By continuing to use Starbucks Services, you acknowledge and agree to this Privacy Notice, the Terms of Use, and other important policies available on the Online Policies page.
Contents
Navigate directly to specific sections of this Privacy Notice using the links below:
1. Applicability and Scope
This Privacy Notice (“Notice”) is applicable to websites such as starbucks.com, starbucksreserve.com, princi.com, starbucks.ca, the Starbucks mobile applications (accessible at https://www.starbucks.com/coffeehouse/mobile-apps – “Starbucks App”), when visiting Starbucks stores, and through any other Starbucks-owned websites or applications that link to this Notice (“Starbucks Services”). Starbucks Services may contain links to third-party websites and mobile applications not operated by Starbucks. Visiting these linked sites requires reviewing their respective privacy notices, terms, and policies as Starbucks is not responsible for third-party practices. Information provided to these third parties is governed by their own policies.
2. Updates to this Privacy Notice
Starbucks may update this Notice periodically. Material changes will be communicated, and the “Last Revised” date will be updated accordingly. Users are encouraged to check for updates upon accessing Starbucks websites and mobile applications.
3. Information We Collect
When you interact with Starbucks Services, the following categories of information may be collected:
- Identifiers: Information that can identify you, including your first and last name, phone number, address book contacts, username and password, email address, postal address, IP address, birthday (day and month), and demographic information (e.g., gender).
- Financial Information: Details such as credit card and debit card information, telephone number, and name may be collected for transaction purposes.
- Commercial Information: Data regarding your transactions in Starbucks stores, websites, or via the Starbucks App, including purchased products, purchase frequency, associated Rewards or promotions, and items in your “Wishlist” or “My Bag”.
- Electronic Network Activity Information: Information related to your online activity, such as browsing history, Starbucks Services usage, device information, and interactions with the Starbucks website’s “live help” chat feature.
- Geolocation Information: Location data from your device, derived from IP address or device-based information. Location-based technology in retail locations may also collect device presence information if Bluetooth is enabled and device settings permit.
- Audio and Visual Information: Audio and visual data may be collected when using Starbucks Services. CCTV in retail locations may monitor building security, prevent crime, and ensure staff and visitor safety, potentially capturing audio, visual, and similar information. Voice ordering may also collect audio information based on your choices.
- Inferences: Inferences drawn from the information categories listed above.
- Other: Information voluntarily provided during communication with Starbucks.
Sensitive personal information that may be collected, depending on your use of Starbucks Services, includes:
- Precise Geolocation Information: Detailed location data from your device (e.g., GPS coordinates) based on device settings. Retail location technology may also collect precise device location via Bluetooth if enabled and permitted by device settings. This information may be used to provide location-based services such as nearby store information, mobile ordering and payment, and delivery services through third-party vendors.
Aggregated or de-identified data, which Starbucks does not attempt to re-identify, is not subject to this Notice.
Providing certain information may be necessary to access and utilize all Starbucks Services.
4. Sources of Information
Starbucks collects information from you directly and from other sources, including: other Starbucks Services users (e.g., when a gift is purchased for you), advertising partners, co-sponsors, internet service providers, data analytics providers, operating systems and platforms, social networks, and publicly available sources. For example, if you use social media to log in to Starbucks Services or share your experience, Starbucks may collect information from these third-party services.
5. How We Use Your Information
Starbucks may use your information for various business purposes, such as providing requested products and services, customer service, security and fraud prevention, marketing and promotions, and website and mobile application analytics. Specifically, your information may be used to:
(a) Provide Our Services:
- Process orders and transactions.
- Maintain and service accounts.
- Support and improve loyalty programs like Starbucks® Rewards.
- Deliver gift cards and e-gifts with personalized messages.
- Debug and repair errors in functionality.
- Facilitate website and mobile application functionality.
- Process payments.
- Customize in-store experiences with location sharing permission.
(b) Communicate With You:
- Provide customer service, including through the website’s “live help” chat feature and responding to information requests. For immediate assistance, you can always use the Starbucks customer service number for phone support.
- Communicate about orders, purchases, returns, services, accounts, programs, contests, and sweepstakes.
- Send personalized promotions, content, and special offers.
- Inform you about Starbucks brands, products, events, and other promotional activities.
- Implement communication preferences, such as sharing information with business partners for their promotions.
- Provide crucial product safety information and recall notices.
(c) For Research, Development, and Improvement of Our Services:
- Continuously improve and analyze websites, mobile applications, ads, products, and services to meet and exceed customer expectations.
- Ensure the security and integrity of Starbucks Services, including fraud and suspicious activity detection and prevention.
(d) To Enforce our Terms, Agreements, or Policies:
- Maintain a secure environment by enforcing terms, policies, and agreements with users and third parties.
(e) To Comply with Applicable Laws:
- Fulfill legal and regulatory obligations, such as tax laws.
- Maintain internal administrative records.
- Respond to lawful governmental requests.
(f) Targeted Advertising:
- Provide targeted advertising, also known as cross-contextual and online behavioral advertising, and offers that may interest you.
(g) With Your Consent:
- Process information for any other business or commercial purposes with your direction or consent.
6. How We Disclose Your Information
Starbucks may disclose your information as necessary to fulfill the purposes outlined in this Notice and as permitted by law.
(a) When We Work Together:
- Information may be shared between Starbucks Corporation, its subsidiaries, and affiliates for management, analysis, decision-making, and other business operations, such as loyalty program administration, order processing, and service promotion.
(b) When We Work with Service Providers & Business Partners:
- Various categories of information may be shared with service providers and business partners for services like payment processing, website and data hosting, location mapping, product delivery, customer service, advertising and marketing, sweepstakes administration, Starbucks® Rewards program benefits, industry standard compliance, personalization, analytics, security monitoring, account maintenance, order fulfillment, customer verification, research, auditing, and data processing. Starbucks contractually restricts these providers from using your information for any purpose beyond the agreed services.
(c) When We Work on Business Transactions:
- In case of mergers, corporate transactions, or business asset transfers, information may be shared with involved entities.
(d) When Sharing Helps Us Protect Safety and Lawful Interests:
- Disclosure may occur if legally required, to enforce agreements or policies, or to protect the rights, property, or safety of Starbucks, its customers, or partners.
(e) When You Give Consent:
- Information may be shared with other companies with your permission or at your direction.
(f) When You Post on Our Websites:
- Information posted publicly on blogs or website sections may be visible to other website visitors. Starbucks is not responsible for information shared in public areas.
7. Cookies, Web Beacons, and Similar Technologies
Starbucks and others utilize various technologies like cookies, web beacons, JavaScript, entity tags, and HTML local storage to collect information about your device and usage of websites and mobile applications. Most web browsers allow control over these technologies, although disabling some may require additional steps.
- Cookies: Small data files stored on your device, either temporarily (session cookies) or permanently (persistent cookies), containing information readable by a web server.
You can typically manage cookies, web beacons, entity tags, and HTML5 local storage through your browser settings. Refer to your browser’s Help menu or instructions for specific guidance (e.g., Internet Explorer, Google Chrome, Mozilla Firefox, Safari Desktop, Safari Mobile, and Android browser).
- Interest-Based Ads: Many advertising companies use collected information for interest-based advertising and are members of the Digital Advertising Alliance (DAA) or the Network Advertising Initiative (NAI). These organizations offer opt-out options for interest-based advertising on their websites: http://optout.aboutads.info/, https://youradchoices.ca/en/tools, or http://optout.networkadvertising.org/?c=1.
European Union residents can opt-out via the European Interactive Digital Advertising Alliance: https://www.youronlinechoices.eu/.
To opt-out of mobile app interest-based advertising, use the DAA’s App Choices mobile application: https://youradchoices.com/appchoices.
- Web Beacons: Transparent images in web pages, applications, and emails (also called “clear gifs,” “single pixel gifs”, “page tags” or “web bugs”) used to track visited pages, marketing effectiveness, and email engagement.
- JavaScript: Code snippets in websites and applications facilitating operations like faster refresh speeds or usage monitoring.
- Entity Tags: HTTP code mechanisms caching website portions in your browser to accelerate website performance.
- HTML5 Local Storage: Allows data caching within your browser for HTML5 pages for faster retrieval on revisits.
These technologies serve several purposes:
- Services and Functionality: Essential for website and mobile application access and functionality.
- Performance Monitoring: Help analyze traffic, usage volume, and user interaction, identifying errors and assessing performance without collecting directly identifiable information.
- User Convenience: Enhance ease of use by improving load times and remembering user preferences.
- Marketing: Tailor user experience with promotions and advertisements across digital properties.
Collectively, these technologies provide insights into service and functionality usage, helping personalize website and mobile application experiences and deliver relevant marketing.
8. How We Protect Your Information
Starbucks employs reasonable technical, physical, and administrative security measures to minimize the risks of data loss, misuse, unauthorized access, disclosure, or modification. However, no system is entirely impenetrable due to the nature of the Internet. Starbucks cannot guarantee absolute data security against intrusion or unauthorized access. Users are responsible for protecting passwords and device security.
9. Retention
Starbucks retains information as long as reasonably necessary to fulfill the purposes in this Notice, considering service provision duration, legal requirements, record retention, dispute resolution, and agreement enforcement. Data retention is subject to applicable law.
Personal information may be stored and processed on servers in the United States, Canada, or globally, including locations outside your jurisdiction. Starbucks takes appropriate safeguards to protect your information during transfer and processing, regardless of location, in accordance with data protection laws and this Notice.
10. Children’s Privacy
Starbucks websites and online services are not intended for individuals under 13. Starbucks does not knowingly collect, sell, or share information of consumers aged 13-16. Parents or guardians believing Starbucks has collected child’s information should contact Starbucks immediately as described in the “Contact Us” section. Refer to the Terms of Use for more details.
11. Starbucks Wi-Fi
Many Starbucks stores offer complimentary Wi-Fi access. Users should carefully review the terms of use on the activation page before accepting and connecting to the Wi-Fi service.
12. Your Choices & Rights, including State-Specific Rights
(a) Your Choices
- Location Services: Certain Starbucks Services like mobile order and pay (MOP) and location-based features require enabling “location services” in the Starbucks App and/or device permissions. Location sharing allows Starbucks to customize in-store experiences, monitor marketing effectiveness, tailor messages based on location and time, and manage promotional message frequency. Precise geolocation enhances service and application functionality. Location information usage can be managed in device settings.
Disabling location services on your device usually prevents geolocation collection. For queries about preventing geolocation collection by Starbucks, contact your device provider or manufacturer. Disabling location services may limit certain Starbucks App features and Services. Geolocation collection can be re-enabled at any time in device settings.
- Voice Ordering: Voice ordering features require enabling “microphone” and “speech recognition” in the Starbucks App and/or device permissions.
- Email Communications, Push Notifications, and In-App Messages: The Starbucks App allows users to manage preferences for promotional emails, push notifications, and in-app messages. Promotional email opt-out is available in account settings or via the “unsubscribe” link in emails. Opting out of promotional emails does not prevent communications about orders, transactions, and accounts. Note that opting out of promotional emails does not automatically opt you out of marketing text messages if you have opted-in to those.
- Text Messages: Consent may be given to receive automated marketing text messages for certain Starbucks Services. Opt-out is possible by replying STOP, END, CANCEL, UNSUBSCRIBE, or QUIT to any received text message. Opting out of text messages does not affect promotional email subscriptions.
Using Starbucks App features implies consent to user information transmission to Starbucks and its agents, and authorization for Starbucks and agents to record, process, and store user information for feature administration and purposes described in this Notice.
(b) Your Rights, including State-Specific Rights
Depending on your residence (including California, Colorado, Connecticut, Nevada, Utah, Virginia, and Washington), you may have specific rights regarding your personal information:
- Right to Know: Right to know what personal information has been collected, including categories, sources, business purposes, and third-party disclosure categories.
- Access and Data Portability: Right to request a copy of personal information collected in the 12 months prior to your request, subject to exceptions.
- Deletion: Right to request deletion of collected and retained information, subject to certain exceptions.
- Correct Inaccurate Information: Right to request correction of inaccuracies in your personal information. Starbucks Rewards information can be corrected within the Starbucks App.
- Targeted Advertising: Right to opt-out of personal information sharing for targeted advertising. Use the “Do Not Share My Personal Information” link to opt-out. Starbucks does not sell your information for monetary or valuable consideration.
- Sensitive Information: Starbucks only uses sensitive personal information to provide services, thus a “Limit the Use and Disclosure of My Sensitive Personal Information” link is not required.
- Opt-Out Preference Signals: Starbucks honors opt-out preference signals from browsers, allowing automatic exercise of opt-out rights.
- Appeals: Right to appeal decisions regarding submitted requests by contacting Starbucks as described in the “Contact Us” section. For any concerns or to initiate an appeal, you can also utilize the Starbucks customer service number for direct assistance.
- Consumer Health Data Rights in Washington and Nevada: Additional rights may apply to consumer health data. See the Consumer Health Data Privacy Notice for Washington and Nevada for more information.
Requests for U.S. residents should be submitted via this form: HERE.
Requests for Canadian residents: HERE.
U.S. and Canadian residents can also call 1-800-STARBUC (782-7282) for requests. Identity verification may be required. Authorized agents can submit requests with written proof of authorization or power of attorney.
Authorized agents or individuals submitting requests on behalf of customers should use this form: HERE or email [email protected].
(c) Other California Rights
- California residents can request notice of personal information categories shared with third parties for direct marketing purposes by mailing requests to: Starbucks, P.O. Box 20430, Augusta, GA 30916.
- Starbucks does not currently respond to browser “Do Not Track” signals due to the lack of a standardized response protocol. Policies may be developed as standards evolve.
(d) Privacy Metrics
Privacy Rights Metrics (January 2024 – December 2024) – Includes requests from the United States and Canada:
Right to Know • Requests Received – 1,237 • Requests Complete – 463 • Requests unable to be completed* – 760 • Average completion time – 7 days
Right to Delete • Requests Received – 3,513 • Requests Complete – 1,948 • Requests unable to be completed* – 1,514 • Average completion time – 11 days
*Requests may be uncompletable due to factors like inability to verify customer identity, duplicate requests, or absence of information.
13. Notice of Financial Incentive & Starbucks® Rewards
Starbucks® Rewards is designed to reward loyal customers for their patronage. Members opt-in online or through the Starbucks App, earning “Stars” redeemable for benefits at participating stores. For program details, see the Starbucks Rewards Terms of Use: https://www.starbucks.com/rewards/terms.
Starbucks collects and uses personal information as described in the “Information We Collect” section to operate Starbucks® Rewards, including sending promotions, content, and special offers. Partners involved in delivering Starbucks® Rewards benefits include delivery partners, global licensees, subsidiaries, affiliates, and service providers. See the “How We Disclose Your Information” section for partner details. Starbucks does not assign monetary value to information collected via Starbucks® Rewards for email communications. Promotional email opt-out is available in account settings or via the “unsubscribe” link. Starbucks Rewards participation is voluntary. Withdrawal is possible in the Starbucks App Account section, via a deletion request form HERE, or by contacting Starbucks customer service number. Withdrawal removes Starbucks® Rewards account access and forfeits earned rewards. Personal information is necessary for Starbucks® Rewards program services; deleting personal information means program service termination.
Starbucks estimates value from Starbucks® Rewards through increased customer loyalty and patronage, varying per member based on purchases and offer utilization.
14. Additional Disclosures for Data Subjects in the EEA, the U.K., and Switzerland
This section applies to personal data processing within the European Economic Area, the United Kingdom, and Switzerland (EEA), according to the General Data Protection Regulation (GDPR). This section does not override privacy policies of EEA-based Starbucks affiliates, who act as data controllers.
(a) Lawful Bases of Processing: Starbucks acts as a data controller when determining the purpose and means of processing personal data. Lawful bases for processing include:
- Contract Performance: To fulfill contracts, process purchases, deliver gift cards, and communicate about orders, services, and accounts.
- Legitimate Business Purposes: To respond to customer service inquiries, improve services, analyze websites, prevent fraud, and facilitate website functionality.
- Legal Compliance: To meet legal obligations, maintain records, and provide product safety information.
- Consent: To send personalized promotions and information about brands and products via email and electronic means.
Consent withdrawal is possible by modifying promotional preferences in your Starbucks account or by contacting Starbucks (see “Contact Us” section).
(b) Your EEA Data Subject Rights: EEA residents have rights under GDPR:
- Request Access: To receive a copy of your personal information.
- Request Correction: To correct inaccurate personal information.
- Request Erasure: To delete personal information when there is no valid reason for continued processing.
- Object to Processing: To object to processing based on legitimate interest or direct marketing.
- Request Restriction of Processing: To suspend personal information processing.
- Request Data Transfer: To transfer personal information to another party.
- Not be subject to automated decision-making: Starbucks does not engage in automated decision-making with legal effects.
To exercise these rights, see the “Your Choices & Rights” section or contact Starbucks (see “Contact Us” section), specifying GDPR rights. Identity verification is required, and responses will be provided within 30 days. For immediate assistance and clarification regarding these rights, consider using the Starbucks customer service number.
(c) Retention: Data is retained as long as necessary for collection purposes or as legally required, as described in the “Retention” section. Extended retention may be needed for opt-out requests or legal compliance.
(d) Transfers Outside the EEA: Personal information may be transferred to and processed in countries outside the EEA, including the United States, by Starbucks or third-party service providers. Starbucks ensures adequate data protection in compliance with GDPR and this Notice.
(e) Complaints: EEA residents have the right to lodge complaints with a supervisory authority. Starbucks encourages addressing concerns first through the “Contact Us” section or via the U.S.-based dispute resolution provider TRUSTe (https://feedback-form.truste.com/watchdog/request). Contact the Data Protection Officer (DPO) at [email protected].
15. Participation in the Data Privacy Framework
Starbucks complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set by the U.S. Department of Commerce regarding personal data from the EU, UK, and Switzerland. Starbucks has certified adherence to the EU-U.S. DPF Principles and Swiss-U.S. DPF Principles. DPF Principles govern in case of conflicts with this Privacy Notice. More information on the DPF program and Starbucks’ certification is at https://www.dataprivacyframework.gov/.
Starbucks is responsible for processing personal data received under DPF and onward transfers to third-party agents, adhering to DPF Principles for all onward transfers, including liability provisions.
The Federal Trade Commission (FTC) has jurisdiction over Starbucks’ DPF compliance. Data disclosure may be required for lawful requests by public authorities.
For unresolved complaints regarding DPF handling, Starbucks commits to referring them to TRUSTe. Contact TRUSTe at https://feedback-form.truste.com/watchdog/request if your DPF Principles-related complaint is not addressed satisfactorily. These dispute resolution services are free.
Binding arbitration is possible under certain conditions for unresolved DPF complaints. See the official DPF website for details: https://www.dataprivacyframework.gov/framework-article/ANNEX-I-introduction.
16. Contact Us
For privacy questions, comments, or concerns, contact Starbucks Customer Service online at http://customerservice.starbucks.com, by phone at 800-STARBUC (782-7282), or by mail: Starbucks Customer Service, Starbucks, P.O. Box 549, Fort Smith, AR 72902. For immediate assistance regarding privacy matters, do not hesitate to use the Starbucks customer service number.
Reach the Global Privacy Department and Data Protection Officer at [email protected].
Additional contact information for various Starbucks entities may be available below.
This revised privacy notice aims to provide comprehensive information while highlighting the accessibility of Starbucks customer service number for any privacy-related inquiries.
