KRISPY KREME PRIVACY POLICY
This Privacy Policy describes the information privacy practices of Krispy Kreme Doughnut Corporation (referred to herein as “Krispy Kreme”, “we”, “us”, or “our”). It explains what information we collect about you, how we use and share your information, and your choices regarding our collection and use.
If you have any questions or concerns regarding our Privacy Policy or practices, please contact us as provided at the end of this Privacy Policy.
California Notice of Collection of Personal Information: If you are a California resident, please see the California Residents’ Privacy Rights Section below for information provided pursuant to the California Consumer Privacy Act, including how to request that we not “sell” or “share” your personal information by clicking Your Privacy Choices , and how to exercise your other privacy rights under California law.
SCOPE OF PRIVACY POLICY
This Privacy Policy applies to information collected about you by or on behalf of Krispy Kreme when you use our website located at https://www.krispykreme.com or any other website or mobile application owned, operated or controlled by us that posts a link to this Privacy Policy (our “Sites”), as well as any programs, features, services, or transactions provided through our Sites (collectively, with our Sites, our “Online Services”). This Privacy Policy also applies when you communicate with us via email or otherwise through the Internet.
This Privacy Policy does not apply to the information privacy practices of franchised Krispy Kreme shops (“Franchisees”), which Krispy Kreme does not own or operate, or to other independent third parties.
CHANGES TO OUR PRIVACY POLICY
Krispy Kreme may change this Privacy Policy from time to time to reflect changes in our practices or in applicable law. Such changes will be effective upon posting the revised Privacy Policy, along with the date on which it was most recently updated, on our Sites. You will be able to tell when this Privacy Policy was last updated by the Last Updated date included at the bottom of this Privacy Policy. If a change materially affects the use or disclosure of your personally identifiable information, we will provide you with additional notice (such as adding a statement to the homepage on our Sites or sending you an email notification). By continuing to use our Online Services or communicating electronically with us thereafter, you agree to accept such changes to this Privacy Policy. Please contact us as provided at the end of this Privacy Policy if you would like information regarding any changes.
INFORMATION COLLECTED
Krispy Kreme collects information about you from a variety of sources, including information you provide directly to us when you sign-up for Krispy Kreme rewards or request information from us, and information we collect about you when you access and use our Online Services. The information we collect includes both personally identifiable information and other information that cannot be used to personally identify you.
Information You Provide Us. If you sign-up for Krispy Kreme rewards, submit a fundraising order form, place an order, purchase gift cards or collectibles, request information or apply for a job through our Online Services, or communicate with us electronically, we collect the information that you provide, which may include, for example, your name, e-mail, phone number, payment card number, mailing address, billing address, birthdate, and demographic information. You may choose whether or not to provide such information; however, the information may be required to utilize certain features of our Online Services. We also collect your order history and what products you have purchased or browsed through our website. We may also collect your product, shopping, and flavor preferences. If you apply for a job online with Krispy Kreme, we also collect background check information in processing your application.
Information Collected Automatically. We collect information automatically from you when you visit our Sites, use our Online Services, and in connection with our emails, online advertisements, and social media pages. We may engage or otherwise permit other parties to also collect information in these ways. Such information includes the following:
Usage information. We collect and record information about how you interact with our Online Services. This includes information such as the dates and times that you visit our Sites, the page you view, the content you enter and interact with, referring / exit URLs, your browser type, mouse movements, and the number of clicks on our Sites. In some cases, we collect this information through cookies, web beacons, pixels, and similar technologies. To learn more about these technologies, please see the Cookies and Other Technologies Section below.
Device Information. We collect information about the devices you use to access our Online Services, including, for example, your device model, Internet Protocol (IP) address, operating system, unique device identifiers, and mobile network operator information.
Transaction Information. We collect transaction details related to your use of certain Online Services such as the rewards program, advanced ordering, delivery, and purchase of gift cards and collectables.
Location Information. We may collect location information including the real-time geographic location of your device through data such as your GPS coordinates, IP address, and WiFi.
Information We Receive From Third Parties. We may receive information about you from third parties such as our business partners and service providers, including payment processors, marketing service providers, social media networks, and Franchisees.
We may combine information that we have collected offline with information we collect online. Or we may combine information we get from another party with information we already have. We may also combine information to understand preferences and trends over time.
Using pieces of information collected you, we may draw inferences about, reflecting what we believe to be your preferences, characteristics, predispositions, and attitudes.
HOW WE USE YOUR INFORMATION
Krispy Kreme uses your information, including personally identifiable information, for a variety of business purposes, including:
- providing our Online Services;
- processing your transactions;
- creating and managing your account;
- communicating with you;
- processing your applications for fundraising and employment;
- responding to your inquiries and communications;
- customer service and technical support, which may include responding to your requests, resolving issues, and/or troubleshooting problems;
- improving and customizing our Online Services, communications, and advertisements;
- developing and improving our products and services;
- for internal operations such as enhancing our offerings and to conduct research and analysis;
- for marketing purposes;
- administering contests, sweepstakes, or other promotions;
- conducting market research, customer satisfaction and quality assurance surveys;
- to evaluate, analyze, and improve the functionality of our Sites;
- to assist in loss prevention and anti-fraud measures;
- to enforce our Terms of Use, and any other applicable terms and conditions and agreements;
- to comply with applicable laws, regulations, and legal processes; and/or
- to protect the security and integrity of our business, Online Services, products, services, brands, users, customers, and third party business partners and service providers.
HOW WE SHARE YOUR INFORMATION
Krispy Kreme shares and discloses your information, including personally identifiable information, under the following circumstances:
- with third parties that provide a variety of services on our behalf, including the development, hosting, maintenance, and support of our Sites and Online Services; processing your transactions and payments; data management, storage, and analysis; communications; and marketing;
- with social media platforms to the extent you elect to utilize a feature that requires Personal Information to be shared with those entities;
- with Franchisees in order to provide our products, services, and promotions to you, and for marketing purposes;
- to comply with law, a court order, or other legal process, or in connection with a legal investigation;
- as may be necessary to protect the rights and interests of Krispy Kreme, its third party business partners and service providers, and our and their respective employees, customers, visitors, users, or any other person or entity;
- to enforce our Terms of Use, and any other applicable terms and conditions and other agreements;
- in the event of a corporate transaction, including a merger, acquisition, financing, dissolution, transaction or proceeding involving the sale, transfer, divestiture, or disclosure of all or a portion of Krispy Kreme’s business or assets. In the event of an insolvency, bankruptcy, or receivership, your personally identifiable information may also be transferred as a business asset of Krispy Kreme. If another third party acquires Krispy Kreme or any of its business operations, whether through stock or asset purchase, such third party will possess the information, including personally identifiable information, collected by us and will assume the rights and obligations with respect thereto as described in this Privacy Policy;
- in aggregated or other non-personally identifiable form; and/or
- in accordance with your consent.
COOKIES AND OTHER TECHNOLOGIES
We and our business partners and third party providers use cookies and other technologies such as log files, web beacons, and analytic tools and services on our Sites and other Online Services and in our email communications and online advertisements to collect information automatically from you. Such information includes your IP address, device type, any unique device identification numbers, type of browser (e.g., Google Chrome or Internet Explorer), operating system (e.g., Windows, Vista, Mac, OS, Android, etc.), your browsing activities (e.g., pages viewed and referring / exit URLs), location information, and other interaction and usage information. We collect this information for a number of reasons, including optimization of our Sites, improving our Online Services, to enhance your user experience, remembering user preferences and settings, marketing and advertising purposes, security purposes, and analyzing Site traffic and trends.
Please see below for more information regarding the technologies that we may use.
Cookies. A cookie is a small piece of data stored by your web browser on your computer or mobile device. We use cookies to collect information from you regarding your usage of our Online Services in order to remember user preferences and settings, personalize your experience with our Online Services, and for security purposes.
Log File Information. Log file information is automatically reported by your browser or mobile device each time you access our Online Services. The information collected from log files may include your web request, IP address, browser type, referring / exit pages and URLs, number of clicks, landing pages, and pages viewed.
Web Beacons. We may also use web beacons (also known as a “pixel tag” or “clear gif”) which are small blocks of code installed on or utilized with our Online Services, emails, and online advertisements which can retrieve certain information about your device and browser, and other usage information.
Social Media Features. Our Sites contain social media features such as the Facebook and Twitter buttons. These features may collect information such as your IP address and the pages you are visiting on our Sites, and may set a cookie to enable the feature to function properly. Social media features are either hosted by a third party or hosted directly on our Sites. Your interactions with these features are governed by the privacy statement of the company providing the applicable feature.
Online Analytics. We may use third party analytics tools, such as Google Analytics, to help us measure traffic and usage trends for our Online Services. These tools collect information sent by your browser or mobile device, including the pages you visit and other usage information. For more information regarding how Google collects, uses, and shares your information please visit http://www.google.com/policies/privacy/partners/.
YOUR RIGHTS AND CHOICES
Krispy Kreme provides you with the opportunity to update and/or delete certain personally identifiable information and to opt-out of having information collected for certain purposes. For example, you may
- update your account information;
- delete your account;
- choose whether to receive certain promotions and offers from us;
- change your preferences for certain communications; and
- request access to your personally identifiable information.
You may exercise your choices by contacting us via the Contact Us information provided below or following the instructions provided in the electronic communications sent to you.
Because we plan our communications in advance, it may take several weeks for your request to become effective. If you continue to receive our communications after expressing an opt-out preference, please let us know so that we can investigate the situation. We will, however, continue to send transaction-based emails if you engage in a transaction, request customer support, or make similar requests.
In some cases, if you choose not to provide us with the requested information, you may not be able to utilize certain features of our Online Services.
Location Information. You may opt-out from allowing us to have access to your location data by adjusting the permissions in your web browser and mobile device. However, some features of our Online Services may not function properly if use or availability of location data is impaired or disabled.
Cookies and Other Technologies. You may opt-out of the automatic collection of some information by referring to your web browser’s or mobile device’s options or settings menu. However, doing so may disable many of the portions, features, or functionality of our Online Services. For example, most web browsers automatically accept cookies, but you have the choice to set your browser to accept or reject cookies. Each browser is different, so check the “Help” menu of your browser to learn how to change your cookie preferences or visit http://www.allaboutcookies.org for more information.
Google Analytics. Google provides users choice on how their data is collected by Google Analytics by developing an Opt-out Browser Add-on which can be located at: http://tools.google.com/dlpage/gaoptout?hl=en.
INFORMATION SECURITY
Krispy Kreme implements reasonable physical, electronic, and administrative safeguards to help us protect your personally identifiable information from unauthorized access, use, and disclosure. However, no method of electronically transmitting or storing data is ever completely secure, and therefore, we cannot guarantee that your personally identifiable information will never be accessed, used, or disclosed in a manner that is inconsistent with this Privacy Policy.
USER GENERATED CONTENT
Krispy Kreme’s Online Services and social media pages may allow you to post messages and submit content (e.g., comments, blogs, photos, postings, etc.), which may include your personally identifiable information. You are responsible for all actions resulting from any information, including personally identifiable information, which you post on our Online Services or social media pages. Please remember that any information you post becomes public information, is not subject to this Privacy Policy, and Krispy Kreme is not responsible for the results of such postings.
LINKS, THIRD PARTY WEBSITES, AND SOCIAL MEDIA PLATFORMS
Krispy Kreme’s Online Services and electronic communications may contain links to third party websites and social media platforms such as Facebook or Twitter (including, without limitation, franchisee websites or social media pages), and our products and services may be advertised and/or offered on third party websites (“Linked Sites”). We are not responsible for the privacy practices, policies, or content of any Linked Sites, even if you link to them from our Online Services or communications. This Privacy Policy does not apply to any Linked Sites. We have no control over the collection or use of your information on any Linked Site. We encourage you to read and understand the privacy practices of any Linked Sites that you visit.
CALIFORNIA RESIDENTS’ PRIVACY RIGHTS
If you are a California resident, please note the following regarding how we collect, use, and disclose your personal information as described in this Privacy Policy, including in the previous 12 months:
We may collect, disclose, and use for our business and commercial purposes categories of personal information as set forth in applicable California law, including: identifiers; payment and customer records information; characteristics of protected classifications under California or federal law (such as demographic information like gender and age); commercial, product, and preference information; Internet or other electronic network activity information; geolocation data; audio, electronic or visual information; professional or employment information; education information; and inferences. See the Information Collected Section of this Privacy Policy for additional detail.
We may collect the following categories of sensitive personal information: precise geolocation data.
We collect and use these categories of personal information for the business and commercial purposes described in the How We Use Your Information Section of this Privacy Policy.
We collect each of the foregoing categories of personal information from the sources described in the Information Collected Section of this Privacy Policy.
We may disclose categories of personal information for our business and commercial purposes to the extent permitted by applicable law to the categories of parties as described in the How We Share Your Information Section of this Privacy Policy.
We may “sell” or “share” the following categories of personal information: identifiers; payment and customer records information; characteristics of protected classifications under California or federal law; commercial, product, and preference information; Internet or other electronic network activity; geolocation data; audio, electronic or visual information; and inferences. We may “sell” or “share” these categories of personal information to or with the categories of third parties described in the How We Share Your Information Section of this Privacy Policy. We do so for the commercial or business purposes described in the How We Use Your Information Section of this Privacy Policy.
We retain personal information for as long as is necessary to fulfill the purposes for which it is being processed. We also retain information for related business and compliance purposes, security, and dispute handling to the extent permitted or required by applicable law.
From time to time, we may collect personal information, such as email addresses, in connection with a promotion, offer or discount. Our offers and incentives generally reflect the value of the relationships that we have with the individuals who participate in these programs. Participation in these programs is voluntary and you may withdraw at any time by emailing us at accessibility@krispykreme.com.
California residents can make the following requests with respect to their personal information in accordance with applicable law and subject to exceptions set forth in such applicable law:
Access – You can request that we disclose to you the categories of personal information we collected about you, the categories of sources from which we collected the personal information, the categories of personal information we sold or disclosed, our business or commercial purpose for collecting, selling or sharing the personal information, the categories of third parties to whom we disclosed the personal information, and the specific pieces of personal information we collected about you.
Deletion – You can request that we delete the personal information that we collected from you, subject to certain exceptions.
Correction – You can request that we correct inaccurate personal information that we maintain about you, subject to certain exceptions.
Do Not Sell or Share My Personal Information – You can request that we not sell or share your personal information to or with a third party by clicking the Your Privacy Choices link, or contacting us using our web form or contact details provided below. For purposes of this Section of the Privacy Policy, “sell” means the sale, rental, release, disclosure, dissemination, availability, transfer, or other oral, written, or electronic communication of your personal information to an outside party for monetary or other valuable consideration, subject to certain exceptions in applicable law. For purposes of this Section of the Privacy Policy, “share” means transferring, making available or otherwise disclosing your personal information to a third party for cross-context behavioral advertising purposes, subject to certain exceptions in applicable law. Note that if you make a request to opt-out of the sale or sharing of your personal information, if you would like to request to opt-out of certain cookie-based tracking for targeted advertising purposes, you will need to separately set your cookie preferences by clicking on the Cookie Settings link in the footer of our site or broadcast an opt-out preference signal recognized by Krispy Kreme, such as a Global Privacy Control signal, on the browser or browser extensions that support such a signal. You can also visit www.aboutads.info/choices and https://optout.privacyrights.info to opt out of certain uses of cookies for advertising purposes. Your selections are specific to the device, website and browser you are using. Your selections are also deleted whenever you clear your cookies or your browser’s cache. We do not knowingly sell or share the personal information of minors under 16 years of age.
We will not discriminate against you because you exercised any of these rights.
A California resident can exercise the rights described above by submitting a request through our web form available here, emailing us at accessibility@krispykreme.com or contacting us at 1-800-457-4779. If you choose to email us, you must put the statement “Your California Privacy Rights” in the subject field. We will take reasonable steps to verify your identity prior to responding to certain of your requests. The verification steps will vary depending on the sensitivity of the personal information and whether you have an account with us.
We may deny certain requests, or fulfill a request only in part, based on our legal rights and obligations. For example, we may retain personal information as permitted by law, such as for tax or other record keeping purposes, to maintain an active account, and to process transactions and facilitate customer requests.
You may designate an authorized agent to make a request on your behalf. When submitting the request, please ensure the authorized agent is identified as an authorized agent.
Residents of the State of California may also request a list of all third parties to which we have disclosed certain personal information (as defined by California’s Shine the Light law) during the preceding year for those third parties’ direct marketing purposes. If you are a California resident and want such a list, please contact us via the Contact Us information provided below. For all requests, you must put the statement “Your California Privacy Rights – Shine the Light” in the body of your request, as well as your name, street address, city, state, and zip code. Please note that we will not accept these requests via the telephone, and we are not responsible for requests that are not labeled or sent properly, or that do not have complete information. Please allow 30 days for a response.
COLORADO, CONNECTICUT AND VIRGINIA CONSUMERS’ PRIVACY RIGHTS
If you are a resident of Colorado, Connecticut, or Virginia, you may make the following requests with respect to your personal information in accordance with applicable law and subject to exceptions set forth in such applicable laws:
Access: You can request to confirm whether we process your personal information. Subject to certain exceptions, you can also request a copy of your personal information.
Deletion: You can request that we delete personal information we have from or about you, subject to certain exceptions.
Correction: You can request that we correct inaccurate personal data we maintain about you, subject to certain exceptions.
Opt-Out of Sale: You can request to opt out of the “sale” (as defined in applicable state law) of your personal information to a third party.
Opt-Out of Targeted Advertising: We may use personal information obtained from or in connection with your activities across unaffiliated sites to send more relevant advertising to you. You can request that we stop using your personal information for such targeted advertising.
To exercise your Colorado, Connecticut or Virginia privacy rights, please submit a request by submitting a request through our web form available here, emailing us at accessibility@krispykreme.com or contacting us at 1-800-457-4779. We will take reasonable steps to verify your identity prior to responding to certain of your requests. The verification steps will vary depending on the sensitivity of the personal information and whether you have an account with us.
We may “sell” or process for targeted advertising purposes, certain of the categories of personal information described in the “Information Collected ” Section of this Privacy Policy. We may “sell” these categories of personal information to or with the categories of third parties described in the “How We Share Your Information” Section of this Privacy Policy. For purposes of this paragraph, “sell” means the sale of your personal information to a third party for monetary or other valuable consideration, subject to certain exceptions set forth in applicable Colorado or Connecticut law. Note that if you make a request to opt-out of sales or targeted advertising, if you would like to request to opt-out of certain cookie-based tracking for targeted advertising purposes, you will need to separately set your cookie preferences by clicking on the Cookie Settings link in the footer of our site or broadcast an opt-out preference signal recognized by Krispy Kreme, such as a Global Privacy Control signal, on the browser or browser extensions that support such a signal. Please keep in mind that your settings are specific to the Site you were on when you set your preferences. You can also visit www.aboutads.info/choices and https://optout.privacyrights.info to opt out of certain uses of cookies for advertising purposes. Your cookie-related selections are specific to the device, website, and browser you are using. Your selections are deleted whenever you clear your cookies or browser’s cache.
If you are a resident of Colorado or Connecticut, you may designate an agent to submit an opt-out of sale and opt-out of targeted advertising request on your behalf. Proof to verify your identity and the authorized agent’s authority to submit requests on your behalf is required, or we may deny the request. We use commercially reasonable efforts to authenticate your identity and the authorized agent’s authority through the written documentation provided in connection with the opt-out request in accordance with this Privacy Policy.
We may deny certain requests and will explain why your request was denied and how to appeal our decision, to the extent required by applicable law. After receiving our explanation, if you would like to appeal our decision, you may do so as further detailed in our communication back to you. For questions, you may also contact us by calling or emailing us at the contact information provided in this Privacy Policy.
Note that for purposes of these requests under this Section, personal information does not include information about job applicants, employees and other of our personnel; information about employees and other representatives of third-party entities we may interact with; or information we have collected as a service provider.
From time to time, we or our vendors on our behalf may collect personal information in connection with a promotion, offer, program, discount or other benefits. We or our vendors may disclose such personal information to the categories of third parties described in the “How We Share Your Information” Section of this Privacy Policy. For information about our loyalty program, please see our Terms of Use .
DO NOT TRACK NOTICE
At this time, there is no worldwide uniform or consistent industry standard or definition for responding to, processing, or communicating Do Not Track signals. Thus, like many other websites and online services, our Online Services are currently unable to respond to Do Not Track Signals. To find out more about “Do Not Track”, you may wish to visit http://www.allaboutdnt.com.
USERS OUTSIDE THE UNITED STATES
Our Online Services and electronic communications are provided from within the United States and are subject to the applicable state and federal laws of the United States. If you use our Online Services from outside the United States, please be aware that your information may be transferred to, stored, or processed in the United States where our servers are located and our database is operated. The data protection and other laws of the United States may not be as comprehensive as those in your country. We will rely on legally-provided mechanisms to lawfully transfer personally identifiable information across borders.
CHILDREN’S PRIVACY
We do not knowingly solicit or collect personally identifiable information online from children under the age of 16 without verified parental or guardian consent. Please contact us as provided below in the Contact Us Section if you believe we may have collected such information without parental or guardian consent.
EMAIL SECURITY
“Phishing” is a scam designed to steal your personally identifiable information. If you receive an e-mail that looks like it is from Krispy Kreme asking you for your personally identifiable information, including account information, please notify us as provided below.
CONTACT US
If you have any questions about this Privacy Policy or Krispy Kreme’s information privacy practices, please contact us at:
accessibility@krispykreme.com
Mail: Krispy Kreme Doughnut Corporation
P.O. Box 83
Winston-Salem, NC 27102
Attn: Legal Department
Last Updated: July 1, 2023