Privacy Notice

Starbucks · Official agreement

Read the agreement

19 of 100 cards in Account & Service Control

Account & Service Control · Company practice

Account login information together with passwords

Starbucks may collect login information for accounts in combination with the passwords that allow access to those accounts. The Notice lists this among categories that may be considered sensitive under some privacy laws.

Supporting quotations

We may collect login information for accounts in combination with passwords allowing access to the accounts.

Qualifications & exceptions

  • Login information is collected "in combination with passwords"

Not stated here

  • The Notice does not say how passwords are stored or protected in this section

Account & Service Control · Procedure

U.S. and Canada: you may submit rights requests, answered consistent with applicable law and its exceptions

Under the heading "Your Privacy Rights in the U.S. and Canada", Starbucks says you may submit a request to exercise the rights described. It will respond consistent with applicable law, including applicable exceptions. The rights are described with "may have", so which rights you have depends on the law that applies to you.

Supporting quotations

(b) Your Privacy Rights in the U.S. and Canada
You may submit a request to exercise the rights described below. We will respond to your request consistent with applicable law, including applicable exceptions.

Qualifications & exceptions

  • Section heading limits the rights to the U.S. and Canada
  • Response is "consistent with applicable law, including applicable exceptions"

Account & Service Control · User right or choice

Right to know and to receive a copy of your personal information, including a list of third parties

You may have the right to (1) know what personal information Starbucks processes about you, including the categories of information, the categories of sources, the business or commercial purposes for collecting, selling or sharing it, and the categories of third parties it may disclose it to, including a specific list of the third parties to whom Starbucks has disclosed its customers' personal information, and (2) receive a copy of the specific personal information Starbucks has processed or is processing about you.

Supporting quotations

You may have the right to (1) know what personal information Starbucks processes about you, including the categories of personal information, the categories of sources from which it is collected, the business or commercial purposes for collecting, selling, or sharing it, the categories of third parties to whom we may disclose it, including a specific list of third parties to whom we have disclosed our customers’ personal information; and (2) receive a copy of the specific personal information we have processed or are processing about you.

Qualifications & exceptions

  • Worded "may have the right"; depends on applicable law
  • Includes a "specific list of third parties" to whom customers' personal information has been disclosed

Account & Service Control · User right or choice

Right to request correction, and self-service correction of some Rewards account information

You may have the right to ask Starbucks to correct inaccuracies in the personal information it maintains about you. You may also correct certain personal information associated with your Starbucks Rewards account yourself in the Starbucks App or by signing in at Starbucks.com.

Supporting quotations

You may have the right to request that we correct inaccuracies in the personal information we maintain about you.
You may also correct certain personal information associated with your Starbucks Rewards account yourself in the Starbucks App or by signing in at Starbucks.com.

Qualifications & exceptions

  • Worded "may have the right"
  • Self-service correction is limited to "certain personal information" tied to a Starbucks Rewards account

Account & Service Control · Procedure

You may appeal a decision on your request by contacting Starbucks

You may appeal Starbucks' decision about a request you submitted by contacting Starbucks as described in the "Contact Us" section.

Supporting quotations

You may appeal our decision with respect to a request you have submitted by contacting us as described in the “Contact Us” section below.

Qualifications & exceptions

  • Appeals go through the contact methods in section 17

Account & Service Control · User right or choice

Additional consumer health data rights in Washington and Nevada are described in a separate notice

You may have additional rights relating to consumer health data. The Notice refers you to a separate Consumer Health Data Privacy Notice for Washington and Nevada for more.

Supporting quotations

You may have additional rights relating to consumer health data.
Consumer Health Data Rights in Washington and Nevada

Qualifications & exceptions

  • Worded "may have additional rights"
  • Region: Washington and Nevada

Not stated here

  • The Consumer Health Data Privacy Notice for Washington and Nevada is not supplied here, so this card cannot say what those rights are

Account & Service Control · Procedure

How to submit a rights request: separate U.S. and Canadian web forms, or phone 1-800-STARBUC

Requests for U.S. residents are submitted through a web form, and requests for Canadian residents through a separate web form. U.S. and Canadian residents may also submit a request by calling 1-800-STARBUC (782-7282).

Supporting quotations

Requests for U.S. residents should be submitted through this form
Request for Canadian residents should be submitted through this form
U.S. and Canadian residents may also submit a request by calling 1-800-STARBUC (782-7282).

Qualifications & exceptions

  • Different forms for U.S. and Canadian residents
  • Phone requests are open to both U.S. and Canadian residents

Account & Service Control · Procedure

Starbucks may verify your identity, and authorized agents may be asked for written proof

Once Starbucks receives a request it may verify it by asking for information sufficient to confirm your identity. You may be entitled to submit a request through an authorized agent, or to appeal a refusal to act on your request. To designate an authorized agent, Starbucks may require written proof that the agent is authorized to act for you or a copy of the power-of-attorney document granting that right. Agents submit requests on behalf of a customer through a separate web form.

Supporting quotations

Once we receive your request, we may verify it by requesting information sufficient to confirm your identity.
You may be entitled to submit a request through an authorized agent or to appeal a refusal to take action on your request.
we may require written proof that the authorized agent has been authorized to act on your behalf or a copy of the power-of-attorney document granting that right
If you are an authorized agent or you are submitting a request on behalf of a customer, please submit your request through this form

Qualifications & exceptions

  • Verification is something Starbucks "may" require
  • Written proof or a power-of-attorney copy "may" be required for an authorized agent
  • Agents use a separate form

Account & Service Control · Company commitment

No discrimination for exercising rights; a request may be denied if identity is unverified or an exception applies

Starbucks says it will not discriminate against you for exercising any of your applicable rights. It reserves the right to deny your request if it cannot verify your identity or if an exception applies under applicable law.

Supporting quotations

We will not discriminate against you for exercising any of your applicable rights.
We reserve the right to deny your request if we cannot verify your identity or if an exception applies under applicable law.

Qualifications & exceptions

  • Non-discrimination applies to "applicable rights"
  • Starbucks reserves the right to deny a request if it cannot verify identity or an exception applies

Not stated here

  • The Notice does not list which exceptions may apply

Account & Service Control · Context

Right to Know requests: 718 received, 295 completed, 419 unable to be completed, 7 days on average

For the Right to Know, Starbucks reports 718 requests received, 295 completed and 419 unable to be completed, with an average completion time of 7 days. The "unable to be completed" row carries an asterisk that refers to a footnote after the metrics.

Supporting quotations

Right to Know
Requests Received – 718
Requests Completed – 295
Requests unable to be completed* – 419
Average completion time – 7 days

Qualifications & exceptions

  • Asterisk on "unable to be completed" refers to the footnote after the metrics list
  • Same period and U.S. and Canada scope as the other metrics

Not stated here

  • The completed and unable-to-complete figures add up to 714, four fewer than the 718 received; the Notice does not explain the difference

Account & Service Control · Context

Right to Delete requests: 4,180 received, 1,437 completed, 2,730 unable to be completed, 11 days on average

For the Right to Delete, Starbucks reports 4,180 requests received, 1,437 completed and 2,730 unable to be completed, with an average completion time of 11 days. The "unable to be completed" row carries an asterisk that refers to a footnote after the metrics.

Supporting quotations

Right to Delete
Requests Received – 4,180
Requests Completed – 1,437
Requests unable to be completed* – 2,730
Average completion time – 11 days

Qualifications & exceptions

  • Asterisk on "unable to be completed" refers to the footnote after the metrics list
  • Same period and U.S. and Canada scope as the other metrics

Not stated here

  • The completed and unable-to-complete figures add up to 4,167, thirteen fewer than the 4,180 received; the Notice does not explain the difference

Account & Service Control · Context

Right to Correct requests: 104 received, 72 completed, 32 unable to be completed, 7 days on average

For the Right to Correct, Starbucks reports 104 requests received, 72 completed and 32 unable to be completed, with an average completion time of 7 days. The "unable to be completed" row carries an asterisk that refers to a footnote after the metrics.

Supporting quotations

Right to Correct
Requests Received – 104
Requests Completed – 72
Requests unable to be completed* - 32
Average completion time – 7 days

Qualifications & exceptions

  • Asterisk on "unable to be completed" refers to the footnote after the metrics list
  • Same period and U.S. and Canada scope as the other metrics

Account & Service Control · Context

Opt-out of sale or sharing requests: 1,230,955 received and 1,230,955 completed

For the Right to Opt-Out of Sales or Sharing of Personal Information, Starbucks reports 1,230,955 requests received and 1,230,955 completed. The list under this heading shows no "unable to be completed" row. Its average completion time is listed in the next block.

Supporting quotations

Right to Opt-Out of Sales or Sharing of Personal Information
Requests Received – 1,230,955
Requests Completed – 1,230,955

Qualifications & exceptions

  • Same period and U.S. and Canada scope as the other metrics

Account & Service Control · Context

Opt-out of sale or sharing requests: average completion time 7 days

Under the Right to Opt-Out of Sales or Sharing of Personal Information, Starbucks lists an average completion time of 7 days. The figure is for requests received in the same January 1 to December 31, 2025 period from customers in the United States and Canada.

Supporting quotations

Requests Completed – 1,230,955
Average completion time – 7 days

Qualifications & exceptions

  • Same period and U.S. and Canada scope as the other metrics

Account & Service Control · Context

Metrics footnote: requests may be unable to be completed for reasons such as unverified identity, duplicates or no data

The asterisk on the "unable to be completed" rows refers to a footnote saying requests may be unable to be completed due to factors such as inability to verify the customer, duplicate requests, or no information being found. The reasons are examples ("such as"), not a complete list, and the Notice gives no counts by reason.

Supporting quotations

*Requests may be unable to be completed due to factors such as inability to verify the customer, duplicate requests, or no information is found.

Qualifications & exceptions

  • Reasons are introduced by "such as"; the list is not complete
  • Applies to the rows marked with an asterisk

Not stated here

  • The Notice does not say how many requests fall under each reason

Account & Service Control · Context

Starbucks Rewards is voluntary: members opt in and earn benefits through Stars or a number of purchases

Starbucks says Starbucks Rewards members opt in by signing up online or through the Starbucks App, and can earn benefits such as rewards and exclusive offers through accumulated "Stars" or after a certain number of purchases at participating stores. If you want to become a member, the Notice points to the Starbucks Rewards Terms of Use.

Supporting quotations

Starbucks® Rewards members opt in by signing up for Rewards online or through the Starbucks App and are able to earn certain benefits, such as rewards and exclusive offers through accumulated “Stars” or after you make a certain number of purchases, at participating Starbucks stores.

Qualifications & exceptions

  • Membership is by opt-in sign-up
  • Benefits are earned at participating Starbucks stores

Not stated here

  • The Starbucks Rewards Terms of Use are not supplied here, so this card cannot say what the program terms provide

Account & Service Control · User right or choice

Rewards is voluntary: you can opt out of promotional emails or withdraw, but withdrawing loses points and rewards

You may opt out of promotional emails at any time through your Starbucks online account settings or the unsubscribe link. Participation in Starbucks Rewards is voluntary and you may withdraw by visiting the Account section in the Starbucks App, by requesting deletion of your information through the deletion form, or by calling Starbucks customer service. If you withdraw, you no longer have access to your Rewards account but can otherwise keep using the app, and all points and rewards you earned up to withdrawal are no longer available. Starbucks says it needs your personal information to provide Rewards services, so if you delete your personal information from the program it can no longer provide services through it.

Supporting quotations

You may opt out of receiving promotional emails at any time by adjusting your Starbucks online account settings, or by clicking the “unsubscribe” link included within any promotional emails we send you.
Participation in Starbucks® Rewards is voluntary, and you may withdraw from the Starbucks® Rewards loyalty program by visiting the Account section in the Starbucks App, by requesting deletion of your information by filling out this form
Please note that by withdrawing from Starbucks® Rewards, you will no longer have access to your Starbucks® Rewards account, but you can otherwise continue to use the Starbucks app. All points and rewards you have earned until the time of withdrawal will no longer be available.
if you choose to delete your personal information from the Starbucks® Rewards loyalty program, we can no longer provide you with services through this loyalty program

Qualifications & exceptions

  • Withdrawal ends access to the Rewards account
  • Earned points and rewards are not available after withdrawal
  • Deleting your information from the program ends services through it

Account & Service Control · User right or choice

EEA data subject rights: access, correction, erasure, objection, restriction and transfer

Under certain circumstances, and by law, the Notice says you have the right to request access to your personal information (a data subject access request, which gives you a copy), request correction, request erasure where there is no good reason for Starbucks to keep processing it, object to processing based on a legitimate interest or for direct marketing, request restriction of processing, and request transfer of your information to another party when possible.

Supporting quotations

(b) Your EEA Data Subject Rights – Under certain circumstances, by law you have the right to:
Request access to your personal information
Request correction of the personal information that we hold about you.
Request erasure of your personal information. This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it.
Object to processing of your personal information where we are relying on a legitimate interest (or those of a third party), or where we are processing your personal information for direct marketing purposes.
Request the restriction of processing of your personal information.
Request the transfer of your personal information to another party, when possible.

Qualifications & exceptions

  • Rights apply "under certain circumstances"
  • Objection applies where Starbucks relies on legitimate interest or processes for direct marketing
  • Transfer is available "when possible"

Account & Service Control · Procedure

EEA rights requests: identity verified, answer within 30 days of receipt

To exercise these rights, the Notice points you to the "Your Privacy Choices & Rights" section or to the "Contact Us" section, and asks you to say which GDPR right or rights you want to exercise. Starbucks says it must verify your identity to honor a request, and that it will respond within 30 days of receipt.

Supporting quotations

To exercise any of these rights, please see the “Your Privacy Choices & Rights” section, or contact us as set forth in the “Contact Us” section below and specify which GDPR privacy right(s) you wish to exercise.
We must verify your identity in order to honor your request, which we will respond to within 30 days of receipt.

Qualifications & exceptions

  • Starbucks must verify identity before honoring a request
  • Response is promised within 30 days of receipt

Not stated here

  • Section 13 forms and contact details are written for U.S. and Canadian requests; the Notice does not say which route EEA requests use beyond "Contact Us"