KRISPY KREME PRIVACY POLICY
Last Updated: November 5, 2023
[Print/Save]
This Privacy Policy describes the information privacy practices of Krispy Kreme Doughnut Corporation (referred to
herein as “Krispy Kreme”, “we”, “us”, or “our”). It explains
what information we collect about you, how we use and share your information, and your choices regarding our
collection and use.
If you have any questions or concerns regarding our Privacy Policy or practices, please contact us as provided at
the end of this Privacy Policy.
Notice of Collection of Personal Information: If you are a California resident, please see the California Residents’ Privacy Rights Section below for information provided pursuant to
the California Consumer Privacy Act, including how to request that we not “sell” or
“share” your personal information by clicking Your Privacy Choices ,
and how to exercise your other privacy rights under California law. For residents of Colorado, Connecticut And
Virginia , please see the Colorado, Connecticut and Virginia Consumers’ Privacy Rights
Section of the Privacy Policy.
SCOPE OF PRIVACY POLICY
This Privacy Policy applies to information collected about you by or on behalf of Krispy Kreme when you use our
website located at https://www.krispykreme.com or any other website or mobile application owned, operated or
controlled by us that posts a link to this Privacy Policy (our “Sites”), as well as any programs,
features, services, or transactions provided through our Sites (collectively, with our Sites, our “Online
Services”). This Privacy Policy also applies when you communicate with us via email or otherwise through
the Internet.
This Privacy Policy does not apply to the information privacy practices of franchised Krispy Kreme shops
(“Franchisees”), which Krispy Kreme does not own or operate, or to other independent third parties.
CHANGES TO OUR PRIVACY POLICY
Krispy Kreme may change this Privacy Policy from time to time to reflect changes in our practices or in
applicable law. Such changes will be effective upon posting the revised Privacy Policy, along with the date on
which it was most recently updated, on our Sites. You will be able to tell when this Privacy Policy was last
updated by the Last Updated date included at the bottom of this Privacy Policy. If a change materially affects
the use or disclosure of your personally identifiable information, we will provide you with additional notice
(such as adding a statement to the homepage on our Sites or sending you an email notification). By continuing to
use our Online Services or communicating electronically with us thereafter, you agree to accept such changes to
this Privacy Policy. Please contact us as provided at the end of this Privacy Policy if you would like
information regarding any changes.
INFORMATION COLLECTED
Krispy Kreme collects information about you from a variety of sources, including information you provide directly
to us when you sign-up for Krispy Kreme rewards or request information from us, and information we collect about
you when you access and use our Online Services. The information we collect includes both personally
identifiable information and other information that cannot be used to personally identify you.
Information You Provide Us. If you sign-up for Krispy Kreme rewards, submit a fundraising order form, place an
order, purchase gift cards or collectibles, request information or apply for a job through our Online Services,
or communicate with us electronically, we collect the information that you provide, which may include, for
example, your name, e-mail, phone number, payment card number, mailing address, billing address, birthdate, and
demographic information. You may choose whether or not to provide such information; however, the information may
be required to utilize certain features of our Online Services. We also collect your order history and what
products you have purchased or browsed through our website. We may also collect your product, shopping, and
flavor preferences. If you apply for a job online with Krispy Kreme, we also collect background check
information in processing your application though we will provide additional information and disclosures at that
time.
Information Collected Automatically. We collect information automatically from you when you visit our Sites, use
our Online Services, and in connection with our emails, online advertisements, and social media pages. We may
engage or otherwise permit other parties to also collect information in these ways. Such information includes
the following:
- Usage information. We collect and record information about how you interact with our Online Services. This
includes information such as the dates and times that you visit our Sites, the page you view, the content
you enter and interact with, referring / exit URLs, your browser type, mouse movements, and the number of
clicks on our Sites. In some cases, we collect this information through cookies, web beacons, pixels, and
similar technologies. To learn more about these technologies, please see the Cookies and Other Technologies
Section below.
- Device Information. We collect information about the devices you use to access our Online Services,
including, for example, your device model, Internet Protocol (IP) address, operating system, unique device
identifiers, and mobile network operator information.
- Transaction Information. We collect transaction details related to your use of certain Online Services such
as the rewards program, advanced ordering, delivery, and purchase of gift cards and collectables.
- Location Information. We may collect location information including the real-time geographic location of
your device through data such as your GPS coordinates, IP address, and WiFi.
- Disclaimer Regarding Video Content. The Sites may contain pixels which provide us and third parties with
analytics regarding how website visitors interact with video content, audiovisual content, or content of a
like nature (collectively, “Video Content”). Video Content is provided for the purpose of
enhancing the user experience on the sites and by continuing to use the sites and interacting with Video
Content, you understand that your personal information, including your video viewing history, may be
processed according to this Privacy Policy and our Cookie Policy. You may also visit the Cookie Settings to
review specific cookies in use and to update your settings.
Information We Receive From Third Parties. We may receive information about you from third parties such as our
business partners and service providers, including payment processors, marketing service providers, social media
networks, and Franchisees.
We may combine information that we have collected offline with information we collect online. Or we may combine
information we get from another party with information we already have. We may also combine information to
understand preferences and trends over time.
Using pieces of information collected you, we may draw inferences about, reflecting what we believe to be your
preferences, characteristics, predispositions, and attitudes.
HOW WE USE YOUR INFORMATION
Krispy Kreme uses your information, including personally identifiable information, for a variety of business
purposes, including:
- providing our Online Services;
- processing your transactions and responding to your requests;
- creating and managing your account;
- communicating with you;
- processing your applications for fundraising and employment;
- responding to your inquiries and communications;
- customer service and technical support, which may include responding to your requests, resolving issues,
and/or troubleshooting problems;
- improving and customizing our Online Services, communications, and advertisements;
- developing and improving our products and services;
- for internal operations such as enhancing our offerings and to conduct research and analysis;
- for marketing purposes;
- administering contests, sweepstakes, or other promotions;
- conducting market research, customer satisfaction and quality assurance surveys;
- to evaluate, analyze, and improve the functionality of our Sites;
- to assist in loss prevention and anti-fraud measures;
- to enforce our Terms of Use, and any other applicable terms and conditions and agreements;
- to comply with applicable laws, regulations, and legal processes; and/or
- to protect the security and integrity of our business, Online Services, products, services, brands, users,
customers, and third party business partners and service providers.
HOW WE SHARE YOUR INFORMATION
Krispy Kreme shares and discloses your information, including personally identifiable information, under the
following circumstances:
- with third parties that provide a variety of services on our behalf, including the development, hosting,
maintenance, and support of our Sites and Online Services; processing your transactions and payments; data
management, storage, and analysis; communications; and marketing;
- with social media platforms to the extent you elect to utilize a feature that requires Personal Information
to be shared with those entities, including without limitation, e.g., Video Content;
- with Franchisees in order to provide our products, services, and promotions to you, and for marketing
purposes;
- to comply with law, a court order, or other legal process, or in connection with a legal investigation;
- as may be necessary to protect the rights and interests of Krispy Kreme, its third party business partners
and service providers, and our and their respective employees, customers, visitors, users, or any other
person or entity;
- to enforce our Terms of Use, and any other applicable terms and conditions and other agreements;
- in the event of a corporate transaction, including a merger, acquisition, financing, dissolution,
transaction or proceeding involving the sale, transfer, divestiture, or disclosure of all or a portion of
Krispy Kreme’s business or assets. In the event of an insolvency, bankruptcy, or receivership, your
personally identifiable information may also be transferred as a business asset of Krispy Kreme. If another
third party acquires Krispy Kreme or any of its business operations, whether through stock or asset
purchase, such third party will possess the information, including personally identifiable information,
collected by us and will assume the rights and obligations with respect thereto as described in this Privacy
Policy;
- in aggregated or other non-personally identifiable form; and/or
- in accordance with your consent.
COOKIES AND OTHER TECHNOLOGIES
We and our business partners and third party providers use cookies and other technologies such as log files, web
beacons, and analytic tools and services on our Sites and other Online Services and in our email communications
and online advertisements to collect information automatically from you. Such information includes your IP
address, device type, any unique device identification numbers, type of browser (e.g., Google Chrome or Internet
Explorer), operating system (e.g., Windows, Vista, Mac, OS, Android, etc.), your browsing activities (e.g.,
pages viewed and referring / exit URLs), location information, and other interaction and usage information. We
collect this information for a number of reasons, including optimization of our Sites, improving our Online
Services, to enhance your user experience, remembering user preferences and settings, marketing and advertising
purposes, security purposes, and analyzing Site traffic and trends.
Please see below for more information regarding the technologies that we may use.
Cookies. A cookie is a small piece of data stored by your web browser on your computer or mobile device. We use
cookies to collect information from you regarding your usage of our Online Services in order to remember user
preferences and settings, personalize your experience with our Online Services, and for security purposes.
Log File Information. Log file information is automatically reported by your browser or mobile device each time
you access our Online Services. The information collected from log files may include your web request, IP
address, browser type, referring / exit pages and URLs, number of clicks, landing pages, and pages viewed.
Web Beacons. We may also use web beacons (also known as a “pixel tag” or “clear gif”)
which are small blocks of code installed on or utilized with our Online Services, emails, and online
advertisements which can retrieve certain information about your device and browser, and other usage
information.
Social Media Features. Our Sites contain social media features such as the Facebook and Twitter buttons. These
features may collect information such as your IP address and the pages you are visiting on our Sites, and may
set a cookie to enable the feature to function properly. Social media features are either hosted by a third
party or hosted directly on our Sites. Your interactions with these features are governed by the privacy
statement of the company providing the applicable feature.
Online Analytics. We may use third party analytics tools, such as Google Analytics, to help us measure traffic
and usage trends for our Online Services. These tools collect information sent by your browser or mobile device,
including the pages you visit and other usage information. You can learn more about Google Analytics and how it
collects and processes data (including how to control the information sent to Google) by visiting:
www.google.com/policies/privacy/partners/ and https://support.google.com/analytics/answer/6004245 . You may
exercise choices regarding the use of cookies from Google Analytics by going to
https://tools.google.com/dlpage/gaoptout/ or downloading the Google Analytics Opt-out Browser Add-on (located at
https://support.google.com/analytics/answer/181881?hl=en)..
For more information about our use of cookies and other technologies, please visit our Cookie Policy.
YOUR RIGHTS AND CHOICES
Krispy Kreme provides you with the opportunity to update and/or delete certain personal information and to
opt-out of having information collected for certain purposes. For example, you may
- update your account information;
- delete your account;
- choose whether to receive certain promotions and offers from us;
- change your preferences for certain communications; and
- request access to your personally identifiable information.
You may exercise your choices by contacting us via the Contact Us information provided below or following the
instructions provided in the electronic communications sent to you.
Because we plan our communications in advance, it may take several weeks for your request to become effective. If
you continue to receive our communications after expressing an opt-out preference, please let us know so that we
can investigate the situation. We will, however, continue to send transaction-based emails if you engage in a
transaction, request customer support, or make similar requests.
In some cases, if you choose not to provide us with the requested information, you may not be able to utilize
certain features of our Online Services.
Location Information. You may opt-out from allowing us to have access to your location data by adjusting the
permissions in your web browser and/or mobile device. However, some features of our Online Services may not
function properly if use or availability of location data is impaired or disabled.
Cookies and Other Technologies. You may opt-out of the automatic collection of some information by referring to
your web browser’s or mobile device’s options or settings menu. However, doing so may disable many
of the portions, features, or functionality of our Online Services. For example, most web browsers automatically
accept cookies, but you have the choice to set your browser to accept or reject cookies. Each browser is
different, so check the “Help” menu of your browser to learn how to change your cookie preferences
or visit http://www.allaboutcookies.org for more information.
Google Analytics. Google provides users choice on how their data is collected by Google Analytics by developing
an Opt-out Browser Add-on which can be located at: http://tools.google.com/dlpage/gaoptout?hl=en
.
USER GENERATED CONTENT
Krispy Kreme’s Online Services and social media pages may allow you to post messages and submit content
(e.g., comments, blogs, photos, postings, etc.), which may include your personally identifiable information. You
are responsible for all actions resulting from any information, including personally identifiable information,
which you post on our Online Services or social media pages. Please remember that any information you post
becomes public information, is not subject to this Privacy Policy, and Krispy Kreme is not responsible for the
results of such postings.
LINKS, THIRD PARTY WEBSITES, AND SOCIAL MEDIA PLATFORMS
Krispy Kreme’s Online Services and electronic communications may contain links to third party websites and
social media platforms such as Facebook or Twitter (including, without limitation, franchisee websites or social
media pages), and our products and services may be advertised and/or offered on third party websites
(“Linked Sites”). We are not responsible for the privacy practices, policies, or content of any
Linked Sites, even if you link to them from our Online Services or communications. This Privacy Policy does not
apply to any Linked Sites. We have no control over the collection or use of your information on any Linked Site.
We encourage you to read and understand the privacy practices of any Linked Sites that you visit.
CALIFORNIA RESIDENTS’ PRIVACY RIGHTS
If you are a California resident, please note the following regarding how we collect, use, and disclose your
personal information as described in this Privacy Policy, including in the previous 12 months:
- We may collect, disclose, and use for our business and commercial purposes categories of personal
information as set forth in applicable California law, including: identifiers; payment and customer records
information; characteristics of protected classifications under California or federal law (such as
demographic information like gender and age); commercial, product, and preference information; Internet or
other electronic network activity information; geolocation data; audio, electronic or visual information;
professional or employment information; education information; and inferences. See the Information Collected Section of this Privacy Policy for additional detail.
- We may collect the following categories of sensitive personal information: precise geolocation data.
- We collect and use these categories of personal information for the business and commercial purposes
described in the How We Use Your Information Section of this Privacy Policy.
- We collect each of the foregoing categories of personal information from the sources described in the Information Collected Section of this Privacy Policy.
- We may disclose categories of personal information for our business and commercial purposes to the extent
permitted by applicable law to the categories of parties as described in the How We
Share Your Information Section of this Privacy Policy.
- We may “sell” or “share” the following categories of personal information:
identifiers; payment and customer records information; characteristics of protected classifications under
California or federal law; commercial, product, and preference information; Internet or other electronic
network activity; geolocation data; audio, electronic or visual information; and inferences. We may
“sell” or “share” these categories of personal information to or with the categories
of third parties described in the How We Share Your Information Section of this
Privacy Policy. We do so for the commercial or business purposes described in the How We
Use Your Information Section of this Privacy Policy.
We retain personal information for as long as is necessary to fulfill the purposes for which it is being
processed. We also retain information for related business and compliance purposes, security, and dispute
handling to the extent permitted or required by applicable law.
From time to time, we may collect personal information, such as email addresses, in connection with a promotion,
offer or discount. Our offers and incentives generally reflect the value of the relationships that we have with
the individuals who participate in these programs. Participation in these programs is voluntary and you may
withdraw at any time by emailing us at accessibility@krispykreme.com.
California residents can make the following requests with respect to their personal information in accordance
with applicable law and subject to exceptions set forth in such applicable law:
- Access – You can request that we disclose to you the categories of personal information we collected
about you, the categories of sources from which we collected the personal information, the categories of
personal information we sold or disclosed, our business or commercial purpose for collecting, selling or
sharing the personal information, the categories of third parties to whom we disclosed the personal
information, and the specific pieces of personal information we collected about you.
- Deletion – You can request that we delete the personal information that we collected from you, subject
to certain exceptions.
- Correction – You can request that we correct inaccurate personal information that we maintain about
you, subject to certain exceptions.
- Do Not Sell or Share My Personal Information – You can request that we not sell or share your personal
information to or with a third party by clicking the Your Privacy Choices
link or contact details provided below. For purposes of this Section of the Privacy Policy,
“sell” means the sale, rental, release, disclosure, dissemination, availability, transfer, or
other oral, written, or electronic communication of your personal information to an outside party for
monetary or other valuable consideration, subject to certain exceptions in applicable law. For purposes of
this Section of the Privacy Policy, “share” means transferring, making available or otherwise
disclosing your personal information to a third party for cross-context behavioral advertising purposes,
subject to certain exceptions in applicable law. Note that if you make a request to opt-out of the sale or
sharing of your personal information, if you would like to request to opt-out of certain cookie-based
tracking for targeted advertising purposes, you will need to separately set your cookie preferences by
clicking on the Cookie Settings link in the footer of our site or broadcast an opt-out preference signal
recognized by Krispy Kreme, such as a Global Privacy Control signal, on the browser or browser extensions
that support such a signal. You can also visit www.aboutads.info/choices and
https://optout.privacyrights.info to opt out of certain uses of cookies for advertising purposes. Your
selections are specific to the device, website and browser you are using. Your selections are also deleted
whenever you clear your cookies or your browser’s cache. We do not knowingly sell or share the
personal information of minors under 16 years of age.
We will not discriminate against you because you exercised any of these rights.
A California resident can exercise the rights described above by submitting a request through the Your Privacy Choices link, emailing us at accessibility@krispykreme.com or
contacting us at 1-800-457-4779. If you choose to email us, you must put the statement “Your California
Privacy Rights” in the subject field. We will take reasonable steps to verify your identity prior to
responding to certain of your requests. The verification steps will vary depending on the sensitivity of the
personal information and whether you have an account with us.
We may deny certain requests, or fulfill a request only in part, based on our legal rights and obligations. For
example, we may retain personal information as permitted by law, such as for tax or other record keeping
purposes, to maintain an active account, and to process transactions and facilitate customer requests.
You may designate an authorized agent to make a request on your behalf. When submitting the request, please
ensure the authorized agent is identified as an authorized agent.
Residents of the State of California may also request a list of all third parties to which we have disclosed
certain personal information (as defined by California’s Shine the Light law) during the preceding year
for those third parties’ direct marketing purposes. If you are a California resident and want such a list,
please contact us via the Contact Us information provided below. For all requests, you must put the statement
“Your California Privacy Rights – Shine the Light” in the body of your request, as well as
your name, street address, city, state, and zip code. Please note that we will not accept these requests via the
telephone, and we are not responsible for requests that are not labeled or sent properly, or that do not have
complete information. Please allow 30 days for a response.
COLORADO, CONNECTICUT AND VIRGINIA CONSUMERS’ PRIVACY RIGHTS
If you are a resident of Colorado, Connecticut, or Virginia, you may make the following requests with respect to
your personal information in accordance with applicable law and subject to exceptions set forth in such
applicable laws:
- Access: You can request to confirm whether we process your personal information. Subject to certain
exceptions, you can also request a copy of your personal information.
- Deletion: You can request that we delete personal information we have from or about you, subject to certain
exceptions.
- Correction: You can request that we correct inaccurate personal data we maintain about you, subject to
certain exceptions.
- Opt-Out of Sale: You can request to opt out of the “sale” (as defined in applicable state law)
of your personal information to a third party.
- Opt-Out of Targeted Advertising: We may use personal information obtained from or in connection with your
activities across unaffiliated sites to send more relevant advertising to you. You can request that we stop
using your personal information for such targeted advertising.
To exercise your Colorado, Connecticut or Virginia privacy rights, please submit a request by submitting a
request through the Your Privacy Choices link here, emailing us at
accessibility@krispykreme.com or contacting us at 1-800-457-4779. We will take reasonable steps to verify your
identity prior to responding to certain of your requests. The verification steps will vary depending on the
sensitivity of the personal information and whether you have an account with us.
We may “sell” or process for targeted advertising purposes, certain of the categories of personal
information described in the “Information Collected ” Section of this
Privacy Policy. We may “sell” these categories of personal information to or with the categories of
third parties described in the “How We Share Your Information” Section of
this Privacy Policy. For purposes of this paragraph, “sell” means the sale of your personal
information to a third party for monetary or other valuable consideration, subject to certain exceptions set
forth in applicable Colorado or Connecticut law. Note that if you make a request to opt-out of sales or targeted
advertising, if you would like to request to opt-out of certain cookie-based tracking for targeted advertising
purposes, you will need to separately set your cookie preferences by clicking on the Cookie Settings link in the
footer of our site or broadcast an opt-out preference signal recognized by Krispy Kreme, such as a Global
Privacy Control signal, on the browser or browser extensions that support such a signal. Please keep in mind
that your settings are specific to the Site you were on when you set your preferences. You can also visit
www.aboutads.info/choices and https://optout.privacyrights.info to opt out of certain uses of cookies for
advertising purposes. Your cookie-related selections are specific to the device, website, and browser you are
using. Your selections are deleted whenever you clear your cookies or browser’s cache.
If you are a resident of Colorado or Connecticut, you may designate an agent to submit an opt-out of sale and
opt-out of targeted advertising request on your behalf. Proof to verify your identity and the authorized
agent’s authority to submit requests on your behalf is required, or we may deny the request. We use
commercially reasonable efforts to authenticate your identity and the authorized agent’s authority through
the written documentation provided in connection with the opt-out request in accordance with this Privacy
Policy.
We may deny certain requests and will explain why your request was denied and how to appeal our decision, to the
extent required by applicable law. After receiving our explanation, if you would like to appeal our decision,
you may do so as further detailed in our communication back to you. For questions, you may also contact us by
calling or emailing us at the contact information provided in this Privacy Policy.
Note that for purposes of these requests under this Section, personal information does not include information
about job applicants, employees and other of our personnel; information about employees and other
representatives of third-party entities we may interact with; or information we have collected as a service
provider.
From time to time, we or our vendors on our behalf may collect personal information in connection with a
promotion, offer, program, discount or other benefits. We or our vendors may disclose such personal information
to the categories of third parties described in the “How We Share Your
Information” Section of this Privacy Policy. For information about our loyalty program, please see
our Terms of Use .
NEVADA RESIDENTS’ RIGHTS
Residents of the State of Nevada have the right to opt out of the sale of certain pieces of their information to
third parties. Currently, we do not engage in such sales. If you are a Nevada resident and would like more
information about our data sharing practices, please contact us.
DO NOT TRACK NOTICE
At this time, there is no worldwide uniform or consistent industry standard or definition for responding to,
processing, or communicating Do Not Track signals. Thus, like many other websites and online services, our
Online Services are currently unable to respond to all Do Not Track Signals. To find out more about “Do
Not Track”, you may wish to visit http://www.allaboutdnt.com . That said, we do recognize
the GPC and provide more information on how to opt-out of some tracking and utilize the GPC in our Cookie Policy
NOTICE OF FINANCIAL INCENTIVES
We may offer you certain financial incentives permitted by applicable law that can result in different prices,
rates, or quality levels. Any permitted financial incentive we offer will reasonably relate to your personal
information's value and contain written terms that describe the program's material aspects. When we
offer financial incentives, we request identifiers and contact information, though we may also request
additional personal information such as your date of birth, first name, last name, email, phone number and zip
code. We share this information with third parties helping us to administer our financial incentive programs,
service providers, and as described in the How We Share Your Information Section above. Participation in a
financial incentive program requires your prior opt in consent, which you may revoke at any time. We calculate
the value of the financial incentive by using the expense related to the offer, and the value of your personal
information is the value of the offer presented to you. We currently provide the following financial incentives:
Rewards Program. The following financial incentives require the sale of personal information or use of personal
information for targeted advertising purposes: emails, push notifications, SMS.
USERS OUTSIDE THE UNITED STATES
Our Online Services and electronic communications are provided from within the United States and are subject to
the applicable state and federal laws of the United States. If you use our Online Services from outside the
United States, please be aware that your information may be transferred to, stored, or processed in the United
States where our servers are located and our database is operated. The data protection and other laws of the
United States may not be as comprehensive as those in your country. We will rely on legally-provided mechanisms
to lawfully transfer personally identifiable information across borders.
CHILDREN’S PRIVACY
We do not knowingly solicit or collect personally identifiable information online from children under the age of
16 without verified parental or guardian consent. Please contact us as provided below in the Contact Us Section
if you believe we may have collected such information without parental or guardian consent.
RETENTION & SECURITY
We maintain the information we collect for as long as necessary to provide the Online Services, for so as long as
reasonably required to satisfy the purpose for which you submitted the information or our business purposes, or
as required by law.
We take administrative, technical and organizational measures to protect your information against accidental or
unlawful destruction or accidental loss, alteration, unauthorized disclosure, or access. However, no method of
transmission over the internet, and no means of electronic or physical storage, is absolutely secure. As such,
you acknowledge and accept that we cannot guarantee the security of your information transmitted to or through
our Online Services or the Internet. All such transmissions are at your own risk..
If you have any questions about this Privacy Policy or Krispy Kreme’s information privacy practices, please
contact us at:
accessibility@krispykreme.com
Mail: Krispy Kreme Doughnut Corporation
P.O. Box 83
Winston-Salem, NC 27102
Attn: Legal Department