What the Notice covers: personal information processed in North America
The Notice describes what personal information Starbucks Corporation and its subsidiaries and affiliates collect, how they use it, how and when it may be shared, and the rights and choices you have. It applies to personal information Starbucks processes in North America, including when you visit websites or applications owned and operated by Starbucks brands or products that direct you to this Notice (the Starbucks Rewards mobile app is the named example) and when you visit its stores. Together these are called the "Starbucks Services".
Supporting quotations
this Notice applies to the personal information that we process in North America
including when you visit websites or applications owned and operated by Starbucks brands or products that direct you to this Notice
and when you visit our stores
Qualifications & exceptions
Applies to websites and applications that direct you to this Notice, and to store visits
Stated scope is personal information processed in North America
Not stated here
The Notice does not list which Starbucks brands or products direct people to it
Sections 15 and 16 address people in the EEA, the U.K. and Switzerland even though the scope sentence says North America; the Notice does not explain how the two fit together
Cross-references
contrast (model-proposed): EEA, U.K. and Switzerland section: GDPR-based disclosures that do not replace an EEA affiliate's own policy — contrast: The introduction says the Notice applies to personal information processed in North America, while section 15 (and section 16) give additional disclosures for people in the EEA, the U.K. and Switzerland. The Notice does not explain how the North America scope statement relates to those sections.
Legal Rights & Agreement Rules · Context
The Notice states it was last revised January 22, 2026
The version analyzed states "Last Revised: January 22, 2026". The Notice does not announce a later effective date or a future version.
Supporting quotations
Last Revised: January 22, 2026
Qualifications & exceptions
Date is the publisher's own statement of the last revision
Not stated here
The Notice does not say when the January 22, 2026 version took effect separately from its revision date
Legal Rights & Agreement Rules · Company practice
Continuing to use Starbucks Services means you acknowledge the Notice and agree to the Terms of Use
The Notice says that by continuing to use Starbucks Services you acknowledge this Privacy Notice and agree to Starbucks' Terms of Use and other important policies available on its homepage. Use of the Services is therefore treated as acknowledgement of the Notice and agreement to those other documents.
Supporting quotations
By continuing to use Starbucks Services you acknowledge this Privacy Notice and agree to our Terms of Use and other important policies available on our homepage.
Qualifications & exceptions
Triggered by continuing to use Starbucks Services
The Terms of Use and "other important policies" are separate documents and were not supplied with this Notice
Not stated here
Which "other important policies" are meant is not specified
Legal Rights & Agreement Rules · Company commitment
Starbucks may update the Notice and says it will notify you of material changes
Starbucks may update the Notice from time to time. It says it will notify you of material changes and will update the Last Revised date, and it encourages you to look for updates and changes when you access its websites and mobile applications. The Notice does not say how a material change will be notified.
Supporting quotations
We may update this Notice from time to time.
We will notify you of material changes to this Notice and will update the Last Revised date on this Notice.
We encourage you to look for updates and changes to this Notice when you access our websites and mobile applications.
Qualifications & exceptions
Notification is promised for "material changes" only
The Last Revised date is updated with changes
Not stated here
The Notice does not say how or how far in advance you will be notified
Legal Rights & Agreement Rules · Company practice
Uses for legal reasons: legal claims, enforcing terms, safety, records and compliance
Starbucks may use your personal information to maintain a safe, secure and trusted environment. Examples given are obtaining legal advice or establishing, exercising or defending legal claims; enforcing its terms, policies and agreements with you or third parties; and protecting the safety, rights, welfare or property of Starbucks, you or others. It may also be required to process information under laws such as tax laws, to keep appropriate records for internal administrative purposes, to comply with legal and regulatory obligations and to respond to lawful governmental requests, as needed.
Supporting quotations
we may use your personal information, for example, in relation to obtaining legal advice or establishing, exercising, or defending legal claims; ensuring our terms, policies, and agreements with you or any third parties are enforced; and protecting the safety, rights, welfare, or property of Starbucks, you, or others
We may also be required to process certain information under certain laws and regulations, such as tax laws, as well as to maintain appropriate records for internal administrative purposes, to comply with applicable legal and regulatory obligations, and to respond to lawful governmental requests, as needed.
Qualifications & exceptions
Worded "may" and "for example"; the legal uses are examples
Required processing is limited to what laws and regulations require, "as needed"
Legal Rights & Agreement Rules · Company practice
Disclosure to authorities and others if required by law, to enforce agreements, or to protect rights and safety
Starbucks may disclose your information to third parties, including government authorities, if it believes disclosure is required by law, necessary to enforce its agreements or policies, or will help protect the rights, property or safety of Starbucks or others, including customers and partners. Each trigger turns on what Starbucks believes.
Supporting quotations
We may disclose your information if we believe that the disclosure is required by law, if we believe that the disclosure is necessary to enforce our agreements or policies, or if we believe that the disclosure will help us protect the rights, property, safety of Starbucks or others, including our customers or partners.
Qualifications & exceptions
Worded "may disclose"
Triggers turn on what Starbucks "believes": required by law, necessary to enforce agreements or policies, or helpful to protect rights, property or safety
Not stated here
The Notice does not say whether you would be told of such a disclosure
Legal Rights & Agreement Rules · Procedure
Starbucks WiFi: read the terms of use on the activation page before connecting
Many Starbucks stores offer WiFi at no charge. For that access, the Notice asks you to review carefully the terms of use on the activation page before accepting and connecting. The WiFi terms are separate from this Notice.
Supporting quotations
Many Starbucks stores support providing you access to wireless internet (WiFi) at no charge.
For any such WiFi access, please carefully review the terms of use listed on the activation page prior to accepting and connecting.
Qualifications & exceptions
Applies to stores that support WiFi
The terms are on the activation page, not in this Notice
Not stated here
The WiFi terms of use are not supplied here, so this card cannot say what data practices they describe
Legal Rights & Agreement Rules · Context
Privacy metrics: U.S. and Canadian requests received from January 1 to December 31, 2025
The Notice reports metrics on rights requests received from customers in the United States and Canada during the applicable period, January 1, 2025 to December 31, 2025. The figures are for that period only and combine the two countries.
Supporting quotations
(d) Privacy Metrics
Applicable Period: January 1, 2025 – December 31, 2025
Scope: The below metrics reflect requests received from customers in the United States and Canada during the applicable period.
Qualifications & exceptions
Period: January 1, 2025 to December 31, 2025
Scope: customers in the United States and Canada combined
Not stated here
The metrics are not broken out by country or by law
Legal Rights & Agreement Rules · Context
EEA, U.K. and Switzerland section: GDPR-based disclosures that do not replace an EEA affiliate's own policy
Section 15 gives general information about how Starbucks collects, stores, uses, transfers and otherwise processes personal data in or from certain countries in the European Economic Area, the United Kingdom and Switzerland (together called "EEA" in this section), in accordance with the GDPR and its local implementations. It says the section does not supersede the privacy policy on the website of an EEA-based Starbucks affiliate you have engaged with, because that entity would be the data controller for your data and the one to which your data subject rights requests should be directed. The Notice's scope statement in the introduction refers to personal information processed in North America.
Supporting quotations
15. Additional Disclosures for Data Subjects in the EEA, the U.K., and Switzerland
This section provides general information about how Starbucks collects, stores, uses, transfers and otherwise processes personal data in or from certain countries in the European Economic Area, the United Kingdom, and Switzerland (together, for purposes of this section of this Notice, “EEA”), in accordance with the General Data Protection Regulation (GDPR) and its local implementations.
This section does not supersede the applicability of any privacy policy found on the website of an EEA-based Starbucks affiliate with whom you have engaged, as that entity would be the data controller with respect to your personal data and the entity to which your data subject rights requests should be directed.
Qualifications & exceptions
Applies to personal data in or from "certain countries" in the EEA, U.K. and Switzerland, not all countries
Does not supersede an EEA-based affiliate's own privacy policy
An EEA-based affiliate you engaged with is described as the data controller and the recipient of rights requests
Not stated here
The Notice does not say which countries or which Starbucks affiliates are covered
The introduction says the Notice applies to information processed in North America; this section covers EEA, U.K. and Swiss data, and the Notice does not explain how the two fit together
Legal Rights & Agreement Rules · Company practice
EEA basis: complying with legal obligations, including records and product safety notices
Another lawful basis is to comply with Starbucks' legal obligations, for example to maintain appropriate records for internal administrative purposes and as required by applicable law, and to provide important product safety information and notice of product recalls.
Supporting quotations
to comply with our legal obligations, for example to maintain appropriate records for internal administrative purposes and as required by applicable law, and provide important product safety information and notice of product recalls
Qualifications & exceptions
Examples are introduced by "for example"
Not stated here
The text of any product safety or recall notices Starbucks sends is not supplied here, so this card cannot say what they contain
Legal Rights & Agreement Rules · User right or choice
EEA complaints: a supervisory authority, a dispute resolution provider, or the Data Protection Officer
If you have issues with Starbucks' compliance, you have the right to lodge a complaint with an EEA supervisory authority. Starbucks says it would appreciate the chance to address your concerns first, and welcomes an inquiry to it under "Contact Us" or to its U.S.-based third-party dispute resolution provider, free of charge. You may also contact its Data Protection Officer at any time at the privacy@starbucks.com address given.
Supporting quotations
you have the right to lodge a complaint with an EEA supervisory authority
We would, however, appreciate the opportunity to first address your concerns and would welcome you directing an inquiry first to us per the “Contact Us” section below, or to our U.S.-based third-party dispute resolution provider (free of charge)
You may also contact our Data Protection Officer (“DPO”) at any time
Qualifications & exceptions
The right to complain to an EEA supervisory authority is stated without condition
Contacting Starbucks first is requested, not required
Not stated here
The dispute resolution provider's procedures are not supplied here
Legal Rights & Agreement Rules · Company commitment
Data Privacy Framework: Starbucks Corporation states it complies; the Principles govern in a conflict
Starbucks Corporation says it complies with the EU-U.S. Data Privacy Framework, the UK Extension to it and the Swiss-U.S. Data Privacy Framework, as set by the U.S. Department of Commerce. It says it has certified to the Department of Commerce that it adheres to the Principles for personal data received from the European Union and the United Kingdom (and Gibraltar), and from Switzerland, in reliance on those frameworks. If there is any conflict between the Notice and the Principles, the Principles govern. The Notice points to the official Data Privacy Framework website to learn more and view the certification.
Supporting quotations
Starbucks Corporation complies with in the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce.
Starbucks Corporation has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) under the UK Extension to the EU-U.S. DPF.
Starbucks Corporation has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF.
If there is any conflict between the terms in this Privacy Notice and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern.
Qualifications & exceptions
Statements are made by Starbucks Corporation, not every Starbucks entity
Applies to personal data received from the EU, the U.K. (and Gibraltar) and Switzerland in reliance on the frameworks
The Principles prevail over the Notice in a conflict
Not stated here
The Data Privacy Framework website and certification are not supplied here, so this card cannot say what the Principles require or what the certification covers
Legal Rights & Agreement Rules · Context
Data Privacy Framework: FTC oversight, and disclosure to public authorities for national security or law enforcement
Starbucks says the Federal Trade Commission has jurisdiction over Starbucks Corporation for compliance with the Data Privacy Framework programs. It also says that in certain situations Starbucks Corporation may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
Supporting quotations
The Federal Trade Commission has jurisdiction over Starbucks Corporation for’ compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF.
In certain situations, Starbucks Corporation may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
Qualifications & exceptions
Disclosure applies "in certain situations" and to "lawful requests by public authorities"
National security and law enforcement requirements are named examples
Legal Rights & Agreement Rules · User right or choice
Data Privacy Framework complaints: contact Starbucks first, then other mechanisms, and possibly binding arbitration
Starbucks Corporation commits to resolve complaints about its collection and use of your personal information under the Data Privacy Framework Principles. EU, U.K. and Swiss individuals with inquiries or complaints about personal data received in reliance on the frameworks should first contact Starbucks Corporation at privacy@starbucks.com. For complaints not resolved by any other framework mechanism, you have the possibility, under certain conditions, to invoke binding arbitration, and the Notice points to the official framework website for further information.
Supporting quotations
Starbucks Corporation commits to resolve DPF Principles-related complaints about our collection and use of your personal information.
EU and UK and Swiss individuals with inquiries or complaints regarding our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF should first contact Starbucks Corporation at
For complaints regarding EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and Swiss-U.S. DPF compliance not resolved by any of the other DPF mechanisms, you have the possibility, under certain conditions, to invoke binding arbitration.
Qualifications & exceptions
The first step is to contact Starbucks Corporation
Binding arbitration is available only "under certain conditions" and for complaints not resolved by other mechanisms
Not stated here
The official Data Privacy Framework website is not supplied here, so this card cannot say what the arbitration conditions are
Legal Rights & Agreement Rules · Procedure
Contact: Customer Service online, phone or post; Global Privacy Department and Data Protection Officer by email
For questions, comments and concerns about privacy, you can contact Starbucks Customer Service online, by phone at 800-782-7282, or by postal mail at Starbucks Customer Service, Starbucks, P.O. Box 549, Fort Smith, AR 72902. You may reach the Global Privacy Department and the Data Protection Officer by email at privacy@starbucks.com. Additional contact information for various Starbucks entities is listed afterwards.
Supporting quotations
We welcome your questions, comments and concerns about privacy.
You can contact Starbucks Customer Service online at
by postal mail at: Starbucks Customer Service, Starbucks, P.O. Box 549, Fort Smith, AR 72902
You may reach our Global Privacy Department and our Data Protection Officer at
Additional contact information may be found below for various Starbucks entities.
Qualifications & exceptions
The same email address reaches the Global Privacy Department and the Data Protection Officer
For Canada, the Notice lists the entity Starbucks Corporation (Canada) at P.O. Box 20430, Augusta, GA 30916 USA, with Customer Service at 800-STARBUC (782-7282) as additional contact.
Supporting quotations
Country – Canada
Entity Name – Starbucks Corporation (Canada)
Entity Address – P.O. Box 20430, Augusta, GA 30916 USA
Additional Contact (If Any) –
Customer Service
800-Starbuc (782-7282)
Qualifications & exceptions
Region: Canada
The listed entity address is in the United States
Legal Rights & Agreement Rules · Procedure
U.S. entity contact: Starbucks Reserve and Princi, P.O. Box 20430, Augusta, GA, customer service online or 800-STARBUC
For the U.S., the Notice lists the entities Starbucks Reserve and Princi at Starbucks, P.O. Box 20430, Augusta, GA 30916, with Customer Service available at the customer service website or at 800-STARBUC (782-7282).
Supporting quotations
Country – U.S.
Entity Name – Starbucks Reserve; Princi
Entity Address – Starbucks, P.O. Box 20430, Augusta, GA 30916
U.K. contact: Starbucks Coffee Company (UK) Limited, Chiswick Park, London, with Customer Care online or by phone
For the U.K., the Notice lists the entity Starbucks Coffee Company (UK) Limited at Building 4 Chiswick Park, 566 Chiswick High Road, London, W4 5YE. Additional contact is Customer Support through the U.K. Customer Care team online, or by phone at +443330050449 or +442088345050 (app).
Supporting quotations
Country – U.K.
Entity Name – Starbucks Coffee Company (UK) Limited
Entity Address – Building 4 Chiswick Park, 566 Chiswick High Road, London, W4 5YE