California Notice of Collection of Personal Information: If you are a California resident, please see the California Residents’ Privacy Rights Section below for information provided pursuant to the California Consumer Privacy Act, including how to request that we not “sell” or “share” your personal information by clicking Your Privacy Choices , and how to exercise your other privacy rights under California law.
Krispy Kreme collects information about you from a variety of sources, including information you provide directly to us when you sign-up for Krispy Kreme rewards or request information from us, and information we collect about you when you access and use our Online Services. The information we collect includes both personally identifiable information and other information that cannot be used to personally identify you.
Information You Provide Us. If you sign-up for Krispy Kreme rewards, submit a fundraising order form, place an order, purchase gift cards or collectibles, request information or apply for a job through our Online Services, or communicate with us electronically, we collect the information that you provide, which may include, for example, your name, e-mail, phone number, payment card number, mailing address, billing address, birthdate, and demographic information. You may choose whether or not to provide such information; however, the information may be required to utilize certain features of our Online Services. We also collect your order history and what products you have purchased or browsed through our website. We may also collect your product, shopping, and flavor preferences. If you apply for a job online with Krispy Kreme, we also collect background check information in processing your application.
Information Collected Automatically. We collect information automatically from you when you visit our Sites, use our Online Services, and in connection with our emails, online advertisements, and social media pages. We may engage or otherwise permit other parties to also collect information in these ways. Such information includes the following:
Usage information. We collect and record information about how you interact with our Online Services. This includes information such as the dates and times that you visit our Sites, the page you view, the content you enter and interact with, referring / exit URLs, your browser type, mouse movements, and the number of clicks on our Sites. In some cases, we collect this information through cookies, web beacons, pixels, and similar technologies. To learn more about these technologies, please see the Cookies and Other Technologies Section below.
Device Information. We collect information about the devices you use to access our Online Services, including, for example, your device model, Internet Protocol (IP) address, operating system, unique device identifiers, and mobile network operator information.
Transaction Information. We collect transaction details related to your use of certain Online Services such as the rewards program, advanced ordering, delivery, and purchase of gift cards and collectables.
Location Information. We may collect location information including the real-time geographic location of your device through data such as your GPS coordinates, IP address, and WiFi.
Information We Receive From Third Parties. We may receive information about you from third parties such as our business partners and service providers, including payment processors, marketing service providers, social media networks, and Franchisees.
We may combine information that we have collected offline with information we collect online. Or we may combine information we get from another party with information we already have. We may also combine information to understand preferences and trends over time.
Using pieces of information collected you, we may draw inferences about, reflecting what we believe to be your preferences, characteristics, predispositions, and attitudes.
HOW WE USE YOUR INFORMATION
Krispy Kreme uses your information, including personally identifiable information, for a variety of business purposes, including:
- providing our Online Services;
- processing your transactions;
- creating and managing your account;
- communicating with you;
- processing your applications for fundraising and employment;
- responding to your inquiries and communications;
- customer service and technical support, which may include responding to your requests, resolving issues, and/or troubleshooting problems;
- improving and customizing our Online Services, communications, and advertisements;
- developing and improving our products and services;
- for internal operations such as enhancing our offerings and to conduct research and analysis;
- for marketing purposes;
- administering contests, sweepstakes, or other promotions;
- conducting market research, customer satisfaction and quality assurance surveys;
- to evaluate, analyze, and improve the functionality of our Sites;
- to assist in loss prevention and anti-fraud measures;
- to comply with applicable laws, regulations, and legal processes; and/or
- to protect the security and integrity of our business, Online Services, products, services, brands, users, customers, and third party business partners and service providers.
HOW WE SHARE YOUR INFORMATION
Krispy Kreme shares and discloses your information, including personally identifiable information, under the following circumstances:
- with third parties that provide a variety of services on our behalf, including the development, hosting, maintenance, and support of our Sites and Online Services; processing your transactions and payments; data management, storage, and analysis; communications; and marketing;
- with social media platforms to the extent you elect to utilize a feature that requires Personal Information to be shared with those entities;
- with Franchisees in order to provide our products, services, and promotions to you, and for marketing purposes;
- to comply with law, a court order, or other legal process, or in connection with a legal investigation;
- as may be necessary to protect the rights and interests of Krispy Kreme, its third party business partners and service providers, and our and their respective employees, customers, visitors, users, or any other person or entity;
- in aggregated or other non-personally identifiable form; and/or
- in accordance with your consent.
COOKIES AND OTHER TECHNOLOGIES
Please see below for more information regarding the technologies that we may use.
Log File Information. Log file information is automatically reported by your browser or mobile device each time you access our Online Services. The information collected from log files may include your web request, IP address, browser type, referring / exit pages and URLs, number of clicks, landing pages, and pages viewed.
Web Beacons. We may also use web beacons (also known as a “pixel tag” or “clear gif”) which are small blocks of code installed on or utilized with our Online Services, emails, and online advertisements which can retrieve certain information about your device and browser, and other usage information.
Social Media Features. Our Sites contain social media features such as the Facebook and Twitter buttons. These features may collect information such as your IP address and the pages you are visiting on our Sites, and may set a cookie to enable the feature to function properly. Social media features are either hosted by a third party or hosted directly on our Sites. Your interactions with these features are governed by the privacy statement of the company providing the applicable feature.
Online Analytics. We may use third party analytics tools, such as Google Analytics, to help us measure traffic and usage trends for our Online Services. These tools collect information sent by your browser or mobile device, including the pages you visit and other usage information. For more information regarding how Google collects, uses, and shares your information please visit http://www.google.com/policies/privacy/partners/.
YOUR RIGHTS AND CHOICES
Krispy Kreme provides you with the opportunity to update and/or delete certain personally identifiable information and to opt-out of having information collected for certain purposes. For example, you may
- update your account information;
- delete your account;
- choose whether to receive certain promotions and offers from us;
- change your preferences for certain communications; and
- request access to your personally identifiable information.
You may exercise your choices by contacting us via the Contact Us information provided below or following the instructions provided in the electronic communications sent to you.
Because we plan our communications in advance, it may take several weeks for your request to become effective. If you continue to receive our communications after expressing an opt-out preference, please let us know so that we can investigate the situation. We will, however, continue to send transaction-based emails if you engage in a transaction, request customer support, or make similar requests.
In some cases, if you choose not to provide us with the requested information, you may not be able to utilize certain features of our Online Services.
Location Information. You may opt-out from allowing us to have access to your location data by adjusting the permissions in your web browser and mobile device. However, some features of our Online Services may not function properly if use or availability of location data is impaired or disabled.
Cookies and Other Technologies. You may opt-out of the automatic collection of some information by referring to your web browser’s or mobile device’s options or settings menu. However, doing so may disable many of the portions, features, or functionality of our Online Services. For example, most web browsers automatically accept cookies, but you have the choice to set your browser to accept or reject cookies. Each browser is different, so check the “Help” menu of your browser to learn how to change your cookie preferences or visit http://www.allaboutcookies.org for more information.
Google Analytics. Google provides users choice on how their data is collected by Google Analytics by developing an Opt-out Browser Add-on which can be located at: http://tools.google.com/dlpage/gaoptout?hl=en.
USER GENERATED CONTENT
LINKS, THIRD PARTY WEBSITES, AND SOCIAL MEDIA PLATFORMS
CALIFORNIA RESIDENTS’ PRIVACY RIGHTS
We may collect the following categories of sensitive personal information: precise geolocation data.
We retain personal information for as long as is necessary to fulfill the purposes for which it is being processed. We also retain information for related business and compliance purposes, security, and dispute handling to the extent permitted or required by applicable law.
From time to time, we may collect personal information, such as email addresses, in connection with a promotion, offer or discount. Our offers and incentives generally reflect the value of the relationships that we have with the individuals who participate in these programs. Participation in these programs is voluntary and you may withdraw at any time by emailing us at email@example.com.
California residents can make the following requests with respect to their personal information in accordance with applicable law and subject to exceptions set forth in such applicable law:
Access – You can request that we disclose to you the categories of personal information we collected about you, the categories of sources from which we collected the personal information, the categories of personal information we sold or disclosed, our business or commercial purpose for collecting, selling or sharing the personal information, the categories of third parties to whom we disclosed the personal information, and the specific pieces of personal information we collected about you.
Deletion – You can request that we delete the personal information that we collected from you, subject to certain exceptions.
Correction – You can request that we correct inaccurate personal information that we maintain about you, subject to certain exceptions.
We will not discriminate against you because you exercised any of these rights.
A California resident can exercise the rights described above by submitting a request through our web form available here, emailing us at firstname.lastname@example.org or contacting us at 1-800-457-4779. If you choose to email us, you must put the statement “Your California Privacy Rights” in the subject field. We will take reasonable steps to verify your identity prior to responding to certain of your requests. The verification steps will vary depending on the sensitivity of the personal information and whether you have an account with us.
We may deny certain requests, or fulfill a request only in part, based on our legal rights and obligations. For example, we may retain personal information as permitted by law, such as for tax or other record keeping purposes, to maintain an active account, and to process transactions and facilitate customer requests.
You may designate an authorized agent to make a request on your behalf. When submitting the request, please ensure the authorized agent is identified as an authorized agent.
Residents of the State of California may also request a list of all third parties to which we have disclosed certain personal information (as defined by California’s Shine the Light law) during the preceding year for those third parties’ direct marketing purposes. If you are a California resident and want such a list, please contact us via the Contact Us information provided below. For all requests, you must put the statement “Your California Privacy Rights – Shine the Light” in the body of your request, as well as your name, street address, city, state, and zip code. Please note that we will not accept these requests via the telephone, and we are not responsible for requests that are not labeled or sent properly, or that do not have complete information. Please allow 30 days for a response.
COLORADO, CONNECTICUT AND VIRGINIA CONSUMERS’ PRIVACY RIGHTS
If you are a resident of Colorado, Connecticut, or Virginia, you may make the following requests with respect to your personal information in accordance with applicable law and subject to exceptions set forth in such applicable laws:
Access: You can request to confirm whether we process your personal information. Subject to certain exceptions, you can also request a copy of your personal information.
Deletion: You can request that we delete personal information we have from or about you, subject to certain exceptions.
Correction: You can request that we correct inaccurate personal data we maintain about you, subject to certain exceptions.
Opt-Out of Sale: You can request to opt out of the “sale” (as defined in applicable state law) of your personal information to a third party.
Opt-Out of Targeted Advertising: We may use personal information obtained from or in connection with your activities across unaffiliated sites to send more relevant advertising to you. You can request that we stop using your personal information for such targeted advertising.
To exercise your Colorado, Connecticut or Virginia privacy rights, please submit a request by submitting a request through our web form available here, emailing us at email@example.com or contacting us at 1-800-457-4779. We will take reasonable steps to verify your identity prior to responding to certain of your requests. The verification steps will vary depending on the sensitivity of the personal information and whether you have an account with us.
Note that for purposes of these requests under this Section, personal information does not include information about job applicants, employees and other of our personnel; information about employees and other representatives of third-party entities we may interact with; or information we have collected as a service provider.
DO NOT TRACK NOTICE
At this time, there is no worldwide uniform or consistent industry standard or definition for responding to, processing, or communicating Do Not Track signals. Thus, like many other websites and online services, our Online Services are currently unable to respond to Do Not Track Signals. To find out more about “Do Not Track”, you may wish to visit http://www.allaboutdnt.com.
USERS OUTSIDE THE UNITED STATES
Our Online Services and electronic communications are provided from within the United States and are subject to the applicable state and federal laws of the United States. If you use our Online Services from outside the United States, please be aware that your information may be transferred to, stored, or processed in the United States where our servers are located and our database is operated. The data protection and other laws of the United States may not be as comprehensive as those in your country. We will rely on legally-provided mechanisms to lawfully transfer personally identifiable information across borders.
We do not knowingly solicit or collect personally identifiable information online from children under the age of 16 without verified parental or guardian consent. Please contact us as provided below in the Contact Us Section if you believe we may have collected such information without parental or guardian consent.
“Phishing” is a scam designed to steal your personally identifiable information. If you receive an e-mail that looks like it is from Krispy Kreme asking you for your personally identifiable information, including account information, please notify us as provided below.
Mail: Krispy Kreme Doughnut Corporation
P.O. Box 83
Winston-Salem, NC 27102
Attn: Legal Department
Last Updated: July 1, 2023