Last Updated: March 19, 2024
This Privacy Policy describes the information privacy practices of Krispy Kreme Doughnut Corporation (referred to herein as “Krispy Kreme”, “we”, “us”, or “our”). It explains what information we collect about you, how we use and share your information, and your choices regarding our collection and use.
If you have any questions or concerns regarding our Privacy Policy or practices, please contact us as provided at the end of this Privacy Policy.
Notice of Collection of Personal Information: If you are a California resident, please see the California Residents’ Privacy Rights Section below for information provided pursuant to the California Consumer Privacy Act, including how to request that we not “sell” or “share” your personal information by clicking Your Privacy Choices , and how to exercise your other privacy rights under California law. For residents of Colorado, Connecticut And Virginia , please see the Colorado, Connecticut and Virginia Consumers’ Privacy Rights Section of the Privacy Policy.
This Privacy Policy applies to information collected about you by or on behalf of Krispy Kreme when you use our website located at https://www.krispykreme.com or any other website or mobile application owned, operated or controlled by us that posts a link to this Privacy Policy (our “Sites”), as well as any programs, features, services, or transactions provided through our Sites (collectively, with our Sites, our “Online Services”). This Privacy Policy also applies when you communicate with us via email or otherwise through the Internet.
This Privacy Policy does not apply to the information privacy practices of franchised Krispy Kreme shops (“Franchisees”), which Krispy Kreme does not own or operate, or to other independent third parties.
Krispy Kreme may change this Privacy Policy from time to time to reflect changes in our practices or in applicable law. Such changes will be effective upon posting the revised Privacy Policy, along with the date on which it was most recently updated, on our Sites. You will be able to tell when this Privacy Policy was last updated by the Last Updated date included at the bottom of this Privacy Policy. If a change materially affects the use or disclosure of your personally identifiable information, we will provide you with additional notice (such as adding a statement to the homepage on our Sites or sending you an email notification). By continuing to use our Online Services or communicating electronically with us thereafter, you agree to accept such changes to this Privacy Policy. Please contact us as provided at the end of this Privacy Policy if you would like information regarding any changes.
Krispy Kreme collects information about you from a variety of sources, including information you provide directly to us when you sign-up for Krispy Kreme rewards or request information from us, and information we collect about you when you access and use our Online Services. The information we collect includes both personally identifiable information and other information that cannot be used to personally identify you.
Information You Provide Us. If you sign-up for Krispy Kreme rewards, submit a fundraising order form, place an order, purchase gift cards or collectibles, request information or apply for a job through our Online Services, or communicate with us electronically, we collect the information that you provide, which may include, for example, your name, e-mail, phone number, payment card number, mailing address, billing address, birthdate, and demographic information. You may choose whether or not to provide such information; however, the information may be required to utilize certain features of our Online Services. We also collect your order history and what products you have purchased or browsed through our website. We may also collect your product, shopping, and flavor preferences. If you apply for a job online with Krispy Kreme, we also collect background check information in processing your application though we will provide additional information and disclosures at that time.
Information Collected Automatically. We collect information automatically from you when you visit our Sites, use our Online Services, and in connection with our emails, online advertisements, and social media pages. We may engage or otherwise permit other parties to also collect information in these ways. Such information includes the following:
Information We Receive From Third Parties. We may receive information about you from third parties such as our business partners and service providers, including payment processors, marketing service providers, social media networks, and Franchisees.
We may combine information that we have collected offline with information we collect online. Or we may combine information we get from another party with information we already have. We may also combine information to understand preferences and trends over time.
Using pieces of information collected you, we may draw inferences about, reflecting what we believe to be your preferences, characteristics, predispositions, and attitudes.
Krispy Kreme uses your information, including personally identifiable information, for a variety of business purposes, including:
Krispy Kreme shares and discloses your information, including personally identifiable information, under the following circumstances:
We and our business partners and third party providers use cookies and other technologies such as log files, web beacons, and analytic tools and services on our Sites and other Online Services and in our email communications and online advertisements to collect information automatically from you. Such information includes your IP address, device type, any unique device identification numbers, type of browser (e.g., Google Chrome or Internet Explorer), operating system (e.g., Windows, Vista, Mac, OS, Android, etc.), your browsing activities (e.g., pages viewed and referring / exit URLs), location information, and other interaction and usage information. We collect this information for a number of reasons, including optimization of our Sites, improving our Online Services, to enhance your user experience, remembering user preferences and settings, marketing and advertising purposes, security purposes, and analyzing Site traffic and trends.
Please see below for more information regarding the technologies that we may use.
Cookies. A cookie is a small piece of data stored by your web browser on your computer or mobile device. We use cookies to collect information from you regarding your usage of our Online Services in order to remember user preferences and settings, personalize your experience with our Online Services, and for security purposes.
Log File Information. Log file information is automatically reported by your browser or mobile device each time you access our Online Services. The information collected from log files may include your web request, IP address, browser type, referring / exit pages and URLs, number of clicks, landing pages, and pages viewed.
Web Beacons. We may also use web beacons (also known as a “pixel tag” or “clear gif”) which are small blocks of code installed on or utilized with our Online Services, emails, and online advertisements which can retrieve certain information about your device and browser, and other usage information.
Social Media Features. Our Sites contain social media features such as the Facebook and Twitter buttons. These features may collect information such as your IP address and the pages you are visiting on our Sites, and may set a cookie to enable the feature to function properly. Social media features are either hosted by a third party or hosted directly on our Sites. Your interactions with these features are governed by the privacy statement of the company providing the applicable feature.
Online Analytics. We may use third party analytics tools, such as Google Analytics, to help us measure traffic and usage trends for our Online Services. These tools collect information sent by your browser or mobile device, including the pages you visit and other usage information. You can learn more about Google Analytics and how it collects and processes data (including how to control the information sent to Google) by visiting: www.google.com/policies/privacy/partners/ and https://support.google.com/analytics/answer/6004245 . You may exercise choices regarding the use of cookies from Google Analytics by going to https://tools.google.com/dlpage/gaoptout/ or downloading the Google Analytics Opt-out Browser Add-on (located at https://support.google.com/analytics/answer/181881?hl=en)..
For more information about our use of cookies and other technologies, please visit our Cookie Policy.
Krispy Kreme provides you with the opportunity to update and/or delete certain personal information and to opt-out of having information collected for certain purposes. For example, you may
You may exercise your choices by contacting us via the Contact Us information provided below or following the instructions provided in the electronic communications sent to you.
Because we plan our communications in advance, it may take several weeks for your request to become effective. If you continue to receive our communications after expressing an opt-out preference, please let us know so that we can investigate the situation. We will, however, continue to send transaction-based emails if you engage in a transaction, request customer support, or make similar requests.
In some cases, if you choose not to provide us with the requested information, you may not be able to utilize certain features of our Online Services.
Location Information. You may opt-out from allowing us to have access to your location data by adjusting the permissions in your web browser and/or mobile device. However, some features of our Online Services may not function properly if use or availability of location data is impaired or disabled.
Cookies and Other Technologies. You may opt-out of the automatic collection of some information by referring to your web browser’s or mobile device’s options or settings menu. However, doing so may disable many of the portions, features, or functionality of our Online Services. For example, most web browsers automatically accept cookies, but you have the choice to set your browser to accept or reject cookies. Each browser is different, so check the “Help” menu of your browser to learn how to change your cookie preferences or visit http://www.allaboutcookies.org for more information.
Google Analytics. Google provides users choice on how their data is collected by Google Analytics by developing an Opt-out Browser Add-on which can be located at: http://tools.google.com/dlpage/gaoptout?hl=en .
Krispy Kreme’s Online Services and social media pages may allow you to post messages and submit content (e.g., comments, blogs, photos, postings, etc.), which may include your personally identifiable information. You are responsible for all actions resulting from any information, including personally identifiable information, which you post on our Online Services or social media pages. Please remember that any information you post becomes public information, is not subject to this Privacy Policy, and Krispy Kreme is not responsible for the results of such postings.
Krispy Kreme’s Online Services and electronic communications may contain links to third party websites and social media platforms such as Facebook or Twitter (including, without limitation, franchisee websites or social media pages), and our products and services may be advertised and/or offered on third party websites (“Linked Sites”). We are not responsible for the privacy practices, policies, or content of any Linked Sites, even if you link to them from our Online Services or communications. This Privacy Policy does not apply to any Linked Sites. We have no control over the collection or use of your information on any Linked Site. We encourage you to read and understand the privacy practices of any Linked Sites that you visit.
If you are a California resident, please note the following regarding how we collect, use, and disclose your personal information as described in this Privacy Policy, including in the previous 12 months:
We retain personal information for as long as is necessary to fulfill the purposes for which it is being processed. We also retain information for related business and compliance purposes, security, and dispute handling to the extent permitted or required by applicable law.
From time to time, we may collect personal information, such as email addresses, in connection with a promotion, offer or discount. Our offers and incentives generally reflect the value of the relationships that we have with the individuals who participate in these programs. Participation in these programs is voluntary and you may withdraw at any time by emailing us at ITCompliance@krispykreme.com.
California residents can make the following requests with respect to their personal information in accordance with applicable law and subject to exceptions set forth in such applicable law:
We will not discriminate against you because you exercised any of these rights.
A California resident can exercise the rights described above by submitting a request through the Your Privacy Choices link, emailing us at ITCompliance@krispykreme.com or contacting us at 1-800-457-4779. If you choose to email us, you must put the statement “Your California Privacy Rights” in the subject field. We will take reasonable steps to verify your identity prior to responding to certain of your requests. The verification steps will vary depending on the sensitivity of the personal information and whether you have an account with us.
We may deny certain requests, or fulfill a request only in part, based on our legal rights and obligations. For example, we may retain personal information as permitted by law, such as for tax or other record keeping purposes, to maintain an active account, and to process transactions and facilitate customer requests.
You may designate an authorized agent to make a request on your behalf. When submitting the request, please ensure the authorized agent is identified as an authorized agent.
Residents of the State of California may also request a list of all third parties to which we have disclosed certain personal information (as defined by California’s Shine the Light law) during the preceding year for those third parties’ direct marketing purposes. If you are a California resident and want such a list, please contact us via the Contact Us information provided below. For all requests, you must put the statement “Your California Privacy Rights – Shine the Light” in the body of your request, as well as your name, street address, city, state, and zip code. Please note that we will not accept these requests via the telephone, and we are not responsible for requests that are not labeled or sent properly, or that do not have complete information. Please allow 30 days for a response.
If you are a resident of Colorado, Connecticut, or Virginia, you may make the following requests with respect to your personal information in accordance with applicable law and subject to exceptions set forth in such applicable laws:
To exercise your Colorado, Connecticut or Virginia privacy rights, please submit a request by submitting a request through the Your Privacy Choices link here, emailing us at ITCompliance@krispykreme.com or contacting us at 1-800-457-4779. We will take reasonable steps to verify your identity prior to responding to certain of your requests. The verification steps will vary depending on the sensitivity of the personal information and whether you have an account with us.
We may “sell” or process for targeted advertising purposes, certain of the categories of personal information described in the “Information Collected ” Section of this Privacy Policy. We may “sell” these categories of personal information to or with the categories of third parties described in the “How We Share Your Information” Section of this Privacy Policy. For purposes of this paragraph, “sell” means the sale of your personal information to a third party for monetary or other valuable consideration, subject to certain exceptions set forth in applicable Colorado or Connecticut law. Note that if you make a request to opt-out of sales or targeted advertising, if you would like to request to opt-out of certain cookie-based tracking for targeted advertising purposes, you will need to separately set your cookie preferences by clicking on the Cookie Settings link in the footer of our site or broadcast an opt-out preference signal recognized by Krispy Kreme, such as a Global Privacy Control signal, on the browser or browser extensions that support such a signal. Please keep in mind that your settings are specific to the Site you were on when you set your preferences. You can also visit www.aboutads.info/choices and https://optout.privacyrights.info to opt out of certain uses of cookies for advertising purposes. Your cookie-related selections are specific to the device, website, and browser you are using. Your selections are deleted whenever you clear your cookies or browser’s cache.
If you are a resident of Colorado or Connecticut, you may designate an agent to submit an opt-out of sale and opt-out of targeted advertising request on your behalf. Proof to verify your identity and the authorized agent’s authority to submit requests on your behalf is required, or we may deny the request. We use commercially reasonable efforts to authenticate your identity and the authorized agent’s authority through the written documentation provided in connection with the opt-out request in accordance with this Privacy Policy.
We may deny certain requests and will explain why your request was denied and how to appeal our decision, to the extent required by applicable law. After receiving our explanation, if you would like to appeal our decision, you may do so as further detailed in our communication back to you. For questions, you may also contact us by calling or emailing us at the contact information provided in this Privacy Policy.
Note that for purposes of these requests under this Section, personal information does not include information about job applicants, employees and other of our personnel; information about employees and other representatives of third-party entities we may interact with; or information we have collected as a service provider.
From time to time, we or our vendors on our behalf may collect personal information in connection with a promotion, offer, program, discount or other benefits. We or our vendors may disclose such personal information to the categories of third parties described in the “How We Share Your Information” Section of this Privacy Policy. For information about our loyalty program, please see our Terms of Use .
Residents of the State of Nevada have the right to opt out of the sale of certain pieces of their information to third parties. Currently, we do not engage in such sales. If you are a Nevada resident and would like more information about our data sharing practices, please contact us.
At this time, there is no worldwide uniform or consistent industry standard or definition for responding to, processing, or communicating Do Not Track signals. Thus, like many other websites and online services, our Online Services are currently unable to respond to all Do Not Track Signals. To find out more about “Do Not Track”, you may wish to visit http://www.allaboutdnt.com . That said, we do recognize the GPC and provide more information on how to opt-out of some tracking and utilize the GPC in our Cookie Policy
We may offer you certain financial incentives permitted by applicable law that can result in different prices, rates, or quality levels. Any permitted financial incentive we offer will reasonably relate to your personal information's value and contain written terms that describe the program's material aspects. When we offer financial incentives, we request identifiers and contact information, though we may also request additional personal information such as your date of birth, first name, last name, email, phone number and zip code. We share this information with third parties helping us to administer our financial incentive programs, service providers, and as described in the How We Share Your Information Section above. Participation in a financial incentive program requires your prior opt in consent, which you may revoke at any time. We calculate the value of the financial incentive by using the expense related to the offer, and the value of your personal information is the value of the offer presented to you. We currently provide the following financial incentives: Rewards Program. The following financial incentives require the sale of personal information or use of personal information for targeted advertising purposes: emails, push notifications, SMS.
Our Online Services and electronic communications are provided from within the United States and are subject to the applicable state and federal laws of the United States. If you use our Online Services from outside the United States, please be aware that your information may be transferred to, stored, or processed in the United States where our servers are located and our database is operated. The data protection and other laws of the United States may not be as comprehensive as those in your country. We will rely on legally-provided mechanisms to lawfully transfer personally identifiable information across borders.
We do not knowingly solicit or collect personally identifiable information online from children under the age of 16 without verified parental or guardian consent. Please contact us as provided below in the Contact Us Section if you believe we may have collected such information without parental or guardian consent.
We maintain the information we collect for as long as necessary to provide the Online Services, for so as long as reasonably required to satisfy the purpose for which you submitted the information or our business purposes, or as required by law.
We take administrative, technical and organizational measures to protect your information against accidental or unlawful destruction or accidental loss, alteration, unauthorized disclosure, or access. However, no method of transmission over the internet, and no means of electronic or physical storage, is absolutely secure. As such, you acknowledge and accept that we cannot guarantee the security of your information transmitted to or through our Online Services or the Internet. All such transmissions are at your own risk..
If you have any questions about this Privacy Policy or Krispy Kreme’s information privacy practices, please contact us at:
ITCompliance@krispykreme.com
Attn: Legal Department
2116 Hawkins Street, Suite 101
Charlotte, NC 28203