Categories of information Starbucks may collect when you use its Services
When you visit and use the Starbucks Services, Starbucks says it may collect the categories of information listed in this section: identifiers, demographic information, financial information, commercial information, internet or device activity, general geolocation, audio/electronic/visual information, inferences and other information you provide. A separate group of categories "that may be considered sensitive under some privacy laws" is listed after them. The wording throughout is "may collect", so the list describes what Starbucks can collect, not what it collects from every person.
Supporting quotations
When you visit and use the Starbucks Services, we may collect the following categories of information
depending on how you use the Starbucks Services, we may collect the following categories of personal information from you that may be considered sensitive under some privacy laws
Qualifications & exceptions
Worded "may collect": categories Starbucks is able to collect, depending on how you use the Services
Not stated here
The Notice does not say which categories apply to which Service (website, app, store, voice ordering)
Data Access & Collection · Company practice
Identifiers: name, phone, address book, email, postal and IP address, and day and month of birthday
Starbucks may collect information that can identify you, including your first and last name, phone number, your address book, email address, postal address, IP address, and the day and month of your birthday. The list uses "such as", so it gives examples rather than a complete list. "Your address book" is among the examples.
Supporting quotations
We may collect information that can be used to identify you, such as your first and last name, phone number, your address book, email address, postal address, IP address, and the day and month of your birthday
Qualifications & exceptions
Examples introduced by "such as"; not a closed list
Only the day and month of birth are listed, not the year
Not stated here
The Notice does not explain when or how address book information is collected
Data Access & Collection · Company practice
Demographic information: age range and gender
Starbucks may collect certain demographic information, such as your age range and gender. The examples are introduced by "such as".
Supporting quotations
We may collect certain demographic information, such as your age range and gender.
Qualifications & exceptions
Examples only ("such as")
Data Access & Collection · Company practice
Commercial information: purchases, frequency, Rewards and your Wishlist or My Bag
Starbucks may collect information about your transactions in its stores, on its websites or through the Starbucks App. That includes what products you buy, how often you buy them, any Rewards or promotions tied to a purchase, and the products you have placed on your "Wishlist" or "My Bag" for future purchase.
Supporting quotations
We may collect information about your transactions in our stores, on our websites or via our Starbucks App, including what products you purchase, how frequently you purchase them, any Rewards or promotions associated with a purchase, and the products you have placed on your “Wishlist” or “My Bag” for future purchase
Qualifications & exceptions
Covers store, website and app transactions
Data Access & Collection · Company practice
Internet and device activity: browsing history, usage, device details and live help chat
Starbucks may collect information about your electronic network activity. This includes your browsing history while using Starbucks Services, how you use the Services, details about your device (device type, browser type and language, hardware model, operating system version, unique device identifiers and IP address), and information related to the "live help" chat feature on the Starbucks website.
Supporting quotations
We may collect information related to your electronic network activity, such as your browsing history when you use Starbucks Services, information about how you use the Starbucks Services, information about your device (e.g., device type, browser type and language, hardware model, operating system version, unique device identifiers, and IP address), and information related to Starbucks website’s “live help” chat feature
Qualifications & exceptions
Device details are introduced by "e.g.", so they are examples
Data Access & Collection · Company practice
General location: approximate device location and device presence in or near stores
Starbucks may collect the imprecise or approximate location of your device, for example from your browser or device IP address. It may also use location-based technology when you are in or around its retail locations to collect information about the presence of your device, if your Bluetooth is turned on and your device settings allow it. The Notice points to later text for precise geolocation.
Supporting quotations
We may collect information about the imprecise or approximate location of your device, such as information derived from your device (e.g., based on a browser or device’s IP address).
We may also use location-based technology when you are in or around our retail locations to collect information about the presence of your device, if your Bluetooth is turned on and your device settings allow for this.
Qualifications & exceptions
Store presence detection only "if your Bluetooth is turned on and your device settings allow for this"
Approximate location, for example derived from an IP address
Not stated here
The Notice does not say how long approximate location or store presence information is kept
Data Access & Collection · Company practice
Audio and visual information: store cameras, voice ordering and Customer Care calls
Starbucks may collect audio and visual information when you use its Services. Some retail locations may have cameras installed for security and operational purposes, which may collect audio, visual and similar information to prevent and detect crime or to improve store design. Depending on how you interact with Starbucks, it may also collect audio when you use voice ordering at a drive-thru or in the Starbucks App, or when you call Customer Care.
Supporting quotations
some of our retail locations may have cameras installed for security and operational purposes, which may collect audio, visual, and similar information to prevent and detect crime or improve store design to better serve our customers
we may collect audio information when you use voice ordering at a drive-thru location or in the Starbucks App, or call Customer Care
Qualifications & exceptions
Store cameras are described as present at "some" retail locations
Stated purposes for cameras: security and operational, crime prevention and detection, store design
Voice audio collection depends on using voice ordering or calling Customer Care
Not stated here
The Notice does not say whether recorded calls or voice ordering audio is retained or for how long
Data Access & Collection · Company practice
Precise location: GPS and other signals, used to facilitate services
Starbucks may collect the precise location of your device (for example GPS latitude and longitude), consistent with your device settings. It may also use location-based technology in or around its retail locations to detect your device if Bluetooth is on and your settings allow it. It may collect or derive this from GPS, WiFi, Bluetooth or other location technology for purposes of facilitating its services, such as showing stores near you, letting you order and pay remotely, or having products delivered to you by a third-party vendor. The Notice lists precise geolocation among categories that may be considered sensitive under some privacy laws.
Supporting quotations
We may collect information about the precise location of your device (e.g., GPS latitude and longitude), consistent with your device settings.
We may collect this location information or derive it from your GPS, WiFi, Bluetooth or other location-based technology for purposes of facilitating our services, such as to provide you with information about stores near you, to enable you to remotely order and pay for our products and services, or so that you may have certain Starbucks products delivered to you by a third-party vendor.
Qualifications & exceptions
Collection is "consistent with your device settings"
Store presence detection requires Bluetooth to be on and device settings to allow it
Purposes named: stores near you, remote order and pay, third-party delivery
Not stated here
Section 13(a) describes further uses of location sharing, such as customizing your experience and measuring marketing, which this section does not list
Cross-references
contrast (model-proposed): If you allow location sharing, Starbucks may use it to customize your experience, measure marketing and tailor messages — contrast: Section 2 ties collection of precise location to facilitating services such as nearby stores, remote ordering and delivery. Section 13(a) says that if you allow location sharing, Starbucks may also use it to customize your in-store experience, measure marketing effectiveness and tailor messages by time and location patterns. The two descriptions of what location is used for pull in different directions, and the Notice does not reconcile them.
Data Access & Collection · Company practice
Consumer health related data you provide when reporting a health event
Starbucks may collect information you provide when you report an event related to your health as a result of an experience at Starbucks. The Notice points to a separate Consumer Health Data Privacy Notice for Washington and Nevada for more on how it may process information that could be considered consumer health data.
Supporting quotations
We may collect information that you provide to us when reporting an event related to your health as a result of an experience at Starbucks.
Limited to information you provide when reporting a health-related event from a Starbucks experience
Further detail is in a separate notice for Washington and Nevada
Not stated here
The separate Consumer Health Data Privacy Notice was not supplied with this Notice, so its terms are not stated here
Data Access & Collection · Context
Without this information Starbucks may not be able to provide all requested services
Starbucks says that without the information described in this section it may not be able to provide you with all the services you request.
Supporting quotations
Without this information, we may not be able to provide you with all the requested services.
Qualifications & exceptions
Worded "may not be able to", not an absolute statement
Not stated here
The Notice does not say which services depend on which information
Data Access & Collection · Company practice
Starbucks and others use cookies, pixels and similar technologies to collect device and usage information automatically
Starbucks says that it and others may use a variety of technologies to automatically collect information about your device and your use of the Starbucks Services, and about how you interact with emails, advertisements or other electronic messages it sends you. The technologies include first- and third-party cookies, web beacons, pixels, JavaScript, entity tags, HTML local storage and similar technologies. Because the Notice says "we and others", third parties may also use these technologies.
Supporting quotations
We and others may use a variety of technologies to automatically collect information about your device and use of Starbucks Services or when you interact with emails, advertisements, or other electronic messages we send to you through the Services, our websites and mobile applications.
These technologies include first- and third-party cookies, web beacons, pixels, JavaScript, entity tags, HTML local storage, and similar technologies.
Qualifications & exceptions
Worded "may use"
"We and others": third parties as well as Starbucks may use these technologies
Covers websites, mobile applications and emails or messages Starbucks sends
Not stated here
The Notice does not name the third parties that use these technologies
Data Access & Collection · Company commitment
Not intended for children under 13 (or the local minimum age); Starbucks does not knowingly collect their information
Starbucks says it does not intend its websites or online services to be used by, and does not knowingly collect information from, anyone under 13 or under the relevant minimum age under applicable local law. If you are a parent or guardian and believe Starbucks may have collected your child's information, the Notice asks you to contact Starbucks immediately as described in "Contact Us". It also points to the Terms of Use for more.
Supporting quotations
We do not intend for our websites or online services to be used by, and do not knowingly collect information from, anyone under the age of 13, or the relevant minimum age under applicable local law.
If you are a parent or guardian and believe we may have collected information about your child, please contact us immediately as described in the “Contact Us” section of this Notice.
Qualifications & exceptions
Worded "do not knowingly collect": covers what Starbucks knows
The age threshold is 13, or the higher "relevant minimum age under applicable local law"
Not stated here
The Terms of Use are not supplied here, so this card cannot say what they add about children
Data Access & Collection · User right or choice
Location services must be enabled to use mobile order and pay and location-based features, and you can turn them off
To use certain Starbucks Services, such as mobile order and pay (MOP) and location-based services, you must enable "location services" in the Starbucks App and/or set your mobile device permissions to allow that information to be communicated. For most devices you can stop geolocation collection by turning off location services on your device, and you can turn it back on at any time. Starbucks says certain app features and some Services may not work properly without location information, and suggests contacting your device provider or manufacturer if you have questions about preventing collection.
Supporting quotations
In order to use certain Starbucks Services, such as mobile order and pay (“MOP”) and location-based services and technology, you must (a) enable “location services” in the Starbucks App; and/or (b) set the permissions in your mobile device to allow communication of this information.
For most mobile devices, you can disable the collection of geolocation information by turning off location services on your device.
Certain Starbucks App features and some Starbucks Services may not work properly without information about your location.
if your Bluetooth is turned on and your device settings allow for this
Qualifications & exceptions
Enabling location is a condition of using MOP and location-based features
Collection can be stopped in device settings; some features then may not work properly
Applies to "most mobile devices"
Data Access & Collection · User right or choice
Voice ordering requires microphone and speech recognition permissions
To use certain Starbucks Services such as voice ordering, when available, you must enable "microphone" and "speech recognition" in the Starbucks App and/or set your mobile device permissions to allow that information to be communicated.
Supporting quotations
In order to use certain Starbucks Services, such as voice ordering, when available, you must (a) enable “microphone” and “speech recognition” in the Starbucks App; and/or (b) set the permissions in your mobile device to allow communication of this information.
Qualifications & exceptions
Voice ordering is available only "when available"
Enabling the permissions is a condition of using voice ordering
Data Access & Collection · Company practice
Starbucks does not currently respond to browser Do Not Track signals
Some browsers send a "Do Not Track" header that says you do not want your activity tracked. Starbucks says it currently does not respond to those signals because there is no standard for how online services should respond, and says it may develop policies for responding as standards develop and describe them in the Notice. This is separate from the opt-out preference signals it says it will honor for sale or sharing.
Supporting quotations
We currently do not respond to browser “Do Not Track” signals, as there is no standard for how online services should respond to such signals.
As standards develop, we may develop policies for responding to do-not-track signals that we will describe in this Notice.
Qualifications & exceptions
Stated as "currently"; Starbucks may change this as standards develop
Separate from opt-out preference signals, which Starbucks says it will honor