- Information We Collect
- How We Use the Information We Collect
- How We Share the Information We Collect
- Children's Privacy Notice
- Your Choices
- Use of Our Online Services and Other Technology
- Links to Other Websites and Social Media
- Information Security
- Retention
- International Data Transfers
- Changes To Our Privacy Statement
- How to Contact Us
1. Information We Collect
We may collect personal information about you when you visit our restaurants, use our websites or mobile apps (“online services”), and otherwise interact with us (collectively, “services”). The information we collect falls into three categories: (a) information you provide us; (b) information we collect through automated methods, and (c) information we collect from other sources.
Generally, your providing of your personal information is voluntary. However, there may be situations where your providing of personal information is necessary to provide a service or is required by law. Please note that in certain cases, we may be unable to provide you with our services unless you provide the information. We will let you know when the providing of your personal information is necessary.
We may combine the information you provide us, with information that is collected through automated methods, and with information we receive from other sources.
We collect information you provide us
You may provide the following information to us, depending on how you interact with us:
- personal details, such as your name, postal and email addresses, phone number, birthday information and other contact information, when you register with our online services, log-in to Wi-Fi, enter one of our competitions, or contact us by phone or through our online services;
- transaction information, including information about the products you buy, prices, method of payment and payment details;
- account information, such as your username or password (or anything else that identifies you) used to access our online services or to buy or use our products and services;
- profile information, including products and services you like, or times you prefer to visit us; and
- other personal information you choose to provide us when you interact with us.
We collect information through automated methods
We may use automated technology to collect information from your computer system or mobile device when you visit our restaurants, use our online services, or in-restaurant technology. Automated technology may include cookies, local shared objects, and web beacons. There is more information below about cookies and other technologies in Section 6.
We may collect information about your:
- internet protocol (IP) address;
- date and time of access of our online services or in-restaurant technology;
- name and URL of the file retrieved when you use our online services;
- computer or mobile-device operating system and browser type;
- type of mobile device and its settings;
- unique device identifier (UDID) or mobile equipment identifier (MEID) for your mobile device;
- device and component serial numbers;
- advertising identifiers (for example, IDFAs and IFAs) or similar identifiers;
- referring website (a site that has led you to ours) or application; and
- activity related to how you use our online services, such as the pages you visit on our sites or in our mobile apps.
Our online services and in-restaurant technology may collect information about the exact location of your mobile device or computer using geolocation and technology such as GPS, Wi-Fi, Bluetooth, or cell tower proximity. For most mobile devices and computer systems, you will be requested to give your permission for McDonald’s to process this information. You are able to withdraw your permission for us to collect this information by using the device or web-browser settings. If you have any questions about how to prevent us from collecting exact information about your location, we recommend you contact your mobile-device service provider, the device manufacturer, or your web-browser provider. Some online services and in-restaurant technology may not work properly without information about your location. If you would like us to delete information we have collected which could identify your location, please contact us at our Global or Local Data Protection Office using the contact information provided below. By law, we may need to keep certain information.
We collect information from other sources
We may collect information about you from other companies and organizations, including public databases, social media platforms, or third party partners such as analytics or marketing providers. We may also collect information that is publicly available. For example, we may collect public profile information about you when you interact with us through social media. We may also collect communications to us or regarding us on social media.
We may combine the information you provide us, with information that is collected through automated methods, and with information we receive from other sources.
Back to Top
2. How We Use the Information We Collect
We may use the information we collect in the following ways.
To provide our services and contract with you:
- carry out your requests, fulfill orders, and process payments for our products and services;
- communicate with you about your orders, purchases or accounts with us, requests, questions, and comments;
- provide online services to you, which includes our websites or mobile apps; and
- provide customer support, including to process any concerns about our services.
To market to you, improve our services, and the following additional legitimate business interests:
- tell you about our products and services, competitions, offers, promotions or special events that we believe may interest you;
- tell you about the products and services of our business partners;
- personalize your experience in our restaurants and on our online services;
- manage our business, including developing new products and services, conducting consumer and operations research, and assessing the effectiveness of our sales, marketing, and advertising;
- use analytics and profiling technology to personalize your experience, deliver content (including advertising) tailored to your interests and how you use our online services or in-store technologies, manage our business, help diagnose technical and service issues, administer our online services and in-store technologies, identify users of our online services, identify a device for fraud prevention purposes, gather demographic information about our customers, and determine usage patterns of our services;
- maintain, manage, and improve our products, offers, promotions, and online services and other technology;
- ensure the security of our networks and systems.
To comply with applicable law:
- protect against, identify and prevent fraud and other crime, claims and other liabilities;
- comply with legal obligations and our policies;
- establish, exercise or defend a legal claim; and
- monitor and report compliance issues.
With your consent (where required by applicable law), we may use the information we collect for the following purposes:
- to send you e-mails or text messages about our products and services, competitions, offers, promotions or special events that we believe may interest you;
- to send you e-mails or text messages about the products and services of our business partners;
- provide location-based services;
- provide online services to children (if parental consent is provided);
- deploy cookies and similar technologies; and
- provide online services to you, which includes our websites or mobile apps.
We may use the information we collect about you in other ways, which we will tell you about at the time we collect it or for which we will seek your consent.
Back to Top
3. How We Share the Information We Collect
We do not sell your personal information and only share your information as described in this privacy statement.
We may share your personal information within the McDonald's Family. The McDonald's Family includes McDonald’s Corporation, our affiliates, our subsidiaries, and our franchisees. A list of these entities, or where you can find more information, is available here. Members of the McDonald’s Family who receive this information from us are not authorized to use or share the information, except as set out in this privacy statement.
We may share your personal information with vendors who provide services to us, such as fulfilling orders, providing data processing and other information technology services, managing promotions, contests, prize draws and sweepstakes, carrying out research and analysis, and personalizing individual McDonald’s customer experiences. We do not allow these vendors to use this information or to share it for any purpose other than to provide services on our behalf.
We may, for strategic or other business reasons, decide to sell or transfer all or part of our business. As part of that sale or transfer, we may pass information we have collected and stored, including personal information, to anyone involved in the sale or transfer.
There may be times where we may share information when it does not directly identify you. For example, we may share anonymous, aggregated statistics about your use of our online services. Or we may combine information about you with other customers and share the information in a way that does not link to a specific customer.
We have the right to use or share personal information as necessary to keep to any law, regulation or legal request, to protect our online services and in-restaurant technology, to bring or defend legal claims, to protect the rights, interests, safety and security of our organization, our employees or franchisees, or members of the public, or in connection with investigating fraud or other crime, or violations of our policies.
Back to Top
4. Children's Privacy Notice
We understand how important it is to protect your privacy when you use our online services. We are especially committed to protecting the privacy of children who visit or use our online services. For more information on how a specific country protects children’s privacy, please see the country specific addenda below.
We urge parents to regularly monitor and supervise their children's online activities. If you have any questions about our children’s privacy practices, please contact us at our Global or Local Data Protection Office using the contact information provided below. If you are contacting a Local Data Protection Office, please choose the office in the country in which you are a customer.
Back to Top
5. Your Choices
Marketing Communications
If you have agreed to receive marketing communications from us, you can later opt out by following the opt-out instructions in the marketing communications we send you. You can also generally find your communication preferences with instructions on how to opt out in the profile section of the online services that you use. You may also have the ability to change your communication preferences using your device settings. You can also opt out by contacting us at our Global or Local Data Protection Office using the contact information provided below. If you are contacting a Local Data Protection Office, please choose the office in the country in which you are a customer.
If you do opt out of receiving marketing communications from us, we may still send communications to you about your transactions, any accounts you have with us, and any contests, competitions, prize draws or sweepstakes you have entered. Opting out of one form of communication does not mean you have opted out of other forms as well. For example, if you opt out of receiving marketing emails, you may still receive marketing text messages if you have opted in to receiving them. Please note that if you are receiving communications from a McDonald’s franchise, then you will need to opt out from them directly.
We do not share personal information with third parties for their own direct marketing purposes, unless you give us permission to do so. When we give you notice, and you consent, we will share your personal information as you direct us to.
Your Personal Information Rights
In certain countries, individuals are entitled to the right to access, correct, transmit, restrict, delete and object to processing of the personal information we have collected. In these certain countries, individuals are also entitled to withdraw consent to processing of personal information. For more information regarding these rights, and the countries where these rights are available, please see the country specific addenda below.
Back to Top
6. Use of Our Online Services and Other Technology
We, and our vendors who provide services to us, may use cookies, web beacons and other similar technologies on our online services and in other areas related to our business, such as online advertising, to collect information and provide you with the services or products that you have requested.
Cookies and other technologies
A “cookie” is a small text file that is placed onto an Internet user’s web browser or device and is used to remember and/or obtain information about the user. Some countries in which we operate may have a cookies policy. That specific information, by country, is provided below.
A “web beacon” is a small object or image that is embedded into a web page, application, or email and is used to track activity. They are also sometimes referred to as pixels and tags.
Please note the following:
- You might be assigned a cookie when using our online services.
- We offer certain features that are available only through the use of cookies and other similar technologies.
- We may use both session (for the duration of your visit) and persistent (for the duration of a fixed period of time) cookies and other tracking technologies.
- Our online services and other areas related to our business may have web beacons.
We use cookies, web beacons and other similar technology, to collect information for the purposes described in this privacy statement. We may also combine the information collected by these technologies with information we have collected about you by other means that are described in this privacy statement.
We may use these technologies to:
- uniquely identify you or your device;
- allow you to access and use our online services, where without them, our online services may not work properly;
- further system security where appropriate;
- statistical purposes, in order to measure use of our websites and mobile apps;
- improve our products and services;
- help us monitor the performance (e.g., traffic, errors, page load time, popular sections, etc.) of our online services;
- remember you, for your convenience, when you visit our online services
- help customize your experience;
- to market to you through targeted advertising; and
- for other purposes described in the section of this privacy statement titled, “How we use the information we collect.”
For example, we may use certain technologies to determine whether you have opened an e-mail or clicked on a link contained in an e-mail, how you use the pages and content in our mobile apps, or whether you have clicked on a McDonald’s online advertisement.
Both we and others (such as our advertising networks) may use these technologies to collect information about your online activities, over time and across third-party websites and devices, and when using our online services to further personalize your experience with us.
Use the options in your web browser if you do not wish to receive a cookie or if you wish to set your browser to notify you when you receive a cookie. Click on the “Help” section of your browser to learn how to change your cookie preferences. If you disable all cookies, you may not be able to take advantage of all the features available on a website.
Some newer web browsers may have a "Do Not Track" preference that transmits a "Do Not Track" header to the websites you visit with information indicating that you do not want your activity to be tracked. McDonald’s does not currently take actions to respond to Do Not Track signals because a uniform technological standard has not yet been developed. We continue to review new technologies and may adopt a standard once one is created.
Where video is available on our online services, we may target and track the videos you view. You consent to our tracking of your video viewing through online services or third-party social media for up to two years, or as otherwise permitted by applicable law, or until you withdraw your consent.
More information regarding how cookies and technology are used in a country in which you are a customer may be available in the country specific addenda.
Targeted advertising
When you use our online services, we (and our vendors who provide services to us) may collect information about your activities so that we can provide you with advertising tailored to your interests.
Because we take part in advertising (“ad”) networks, you may see certain ads on other websites. Ad networks allow us to target the information we send you based on your interests, other information related to you, and contextual means. These ad networks track your online activities over time by collecting information through use of cookies, web beacons, and web-server logs. The ad networks use this information to show you advertisements that may be of particular interest to you. The ad networks we take part in may collect information about your visits to websites that also take part in the relevant ad network, such as the pages or advertisements you view and how you use the websites. We use this information, both on our online services and on third-party websites that take part in the ad networks, to provide you with advertising tailored to you, and to help us assess how effective our marketing is.
You can opt out of targeted advertising by visiting www.aboutads.info/choices or www.networkadvertising.org/managing/opt_out.asp . If you choose to opt out, you will continue to receive advertisements but they will not be tailored to your interests.
Back to Top
7. Links to Other Websites and Social Media
Our online services may offer links to websites that are not run by us but by third parties. If you visit one of these linked websites, you should read the website’s privacy policy, terms and conditions, and their other policies. We are not responsible for the policies and practices of third parties. Any information you give to those organizations is dealt with under their privacy policy, terms and conditions, and other policies.
We may also have providers of other apps, tools, widgets and plug-ins on our online services, such as Facebook “Like” buttons, which may also use automated methods to collect information about how you use these features. These organizations may use your information in line with their own policies.
Back to Top
8. Information Security
We are committed to taking appropriate measures designed to keep your personal information secure. Our technical, organizational and physical procedures are designed to protect personal information from accidental, unlawful or unauthorized loss, access, disclosure, use, alteration, or destruction. While we make efforts to protect our information systems, no website, mobile application, computer system, or transmission of information over the internet or any other public network can be guaranteed to be 100% secure.
Back to Top
9. Retention
We keep your information for the length of time needed to carry out the purposes outlined in this privacy statement and to adhere to our policies on keeping records (unless a longer period is needed by law). Our records policies reflect applicable laws. We will retain and use your information to the extent necessary to comply with our legal obligations (for example, if we are required to retain your information to comply with applicable tax/revenue laws), resolve disputes, enforce our agreements, and as otherwise described in this statement.
Back to Top
10. International Data Transfers
McDonald’s is a global organization with business processes, management structures and technical systems that cross borders. As such, we may share information about you within the McDonald’s Family and transfer it to countries in the world where we do business in connection with the uses identified above. Any international data transfers will be in accordance with this Privacy Statement and in compliance with applicable laws. Some countries in which we operate may have requirements pertaining to international data transfers. That specific information, by country, is provided below in the country specific addenda.
McDonald’s Corporation participation in the EU-U.S. and Swiss-U.S. Privacy Shield Frameworks
McDonald’s Corporation participates in the EU-U.S. and Swiss-U.S. Privacy Shield Frameworks (“Privacy Shield”) administered by the U.S. Department of Commerce regarding the collection, use and retention of personal information from European Union member countries and Switzerland. McDonald’s Corporation’s participation in the Privacy Shield subjects it to the investigatory and enforcement power of the Federal Trade Commission. You can view a complete list of all Privacy Shield participants, including McDonald’s Corporation, at https://www.privacyshield.gov/list.
As a Privacy Shield participant, McDonald’s Corporation is committed to and has certified that it adheres to the Privacy Shield Principles for all personal information received from the European Union and Switzerland in reliance on the Privacy Shield. Please note the following:
- McDonald’s Corporation may share personal information that is subject to the Privacy Shield Principles with vendors who provide services to it, as described above in Section 3. McDonald’s Corporation may be liable under the Privacy Shield if these vendors process such personal information in a manner inconsistent with the Privacy Shield and McDonald’s Corporation is responsible for the event giving rise to the damage.
- McDonald’s Corporation may disclose personal information received in reliance on the Privacy Shield in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
- You have the right to request access to personal information received by McDonald’s Corporation in reliance on the Privacy Shield, and to exercise choice in limiting McDonald’s Corporation use and disclosure of such information. If you are interested in exercising your right and choice, please contact McDonald’s Corporation at the address, phone number or email address below.
McDonald’s Corporation’s privacy practices are provided in this Privacy Statement. McDonald’s Corporation encourages you to contact it at any time with questions, concerns or complaints about its privacy practices and participation in the Privacy Shield; simply use the address, phone number or email address provided below. You may also refer a complaint to your local data protection authority and McDonald’s Corporation will work with them to resolve your concern.
If McDonald’s Corporation is unable to resolve your concern regarding your personal information received by McDonald’s Corporation under the Privacy Shield, you have the right to direct your unresolved concern to JAMS , an independent dispute resolution service based in the United States, to provide recourse at no charge to you. To seek recourse for an unresolved concern, please click here. If JAMS is unable to resolve your concern, you may have the right to invoke binding arbitration under certain conditions. To learn more about this option, click here.
Please note that the foregoing processes apply only to the resolution of disputes regarding personal information received by McDonald’s Corporation under the Privacy Shield. All other disputes that you may have with McDonald’s Corporation or any other members of the McDonald’s Family, or any agents, representatives, agencies, officers, directors, or employees, must be resolved in accordance with the terms and conditions of any applicable websites, mobile apps, email newsletters, email subscriptions or other digital properties owned or controlled by a member of the McDonald’s Family.
For more information about the Privacy Shield program, and to view McDonald’s Corporation’s certification, please visit the Privacy Shield website.
Back to Top
11. Changes To Our Privacy Statement
This privacy statement is in effect as of the date noted at the top of the statement. We may change this privacy statement from time to time. If we do, we will post the revised version here and change the “last updated date” (the date it applies from) at the top of the statement. You should check here regularly for the most up-to-date version of the statement.
Back to Top
12. How To Contact Us
You can contact us at any time about McDonald’s privacy practices at our Global or Local Data Protection Offices. Our Local Data Protection Offices can assist with country-specific queries or information. Contact information for our Local Data Protection Offices can be found in the country specific addenda.
Global Data Protection Office
Attention: Global Data Protection Office
Privacy at McDonald's, Dept. 282
110 North Carpenter Street
Chicago, IL 60607-2101, USA
contact.privacy@us.mcd.com
Back to Top
United Kingdom
Last updated: 23rd October 2020
Data Controller
McDonald’s Restaurants Limited is the data controller for the processing of your personal information.
Your Personal Information Rights
In connection with your personal information rights, you may request the following:
- Where processing your personal information is based on your consent you may withdraw this consent at any time; the withdrawal of the consent shall not affect the lawfulness of processing based on consent before its withdrawal;
- Request access to your personal information and obtain a copy of it;
- Obtain your personal information in a structured, commonly used and machine-readable format and request us to transmit it directly to another company in case your personal information is processed based on your prior consent, or required for the performance of a contract;
- Have your personal information corrected when it is inaccurate or incomplete;
- Object on grounds relating to your particular situation to our processing of your personal information based on our legitimate business interest, including profiling, and to the sending of marketing communications;
- Have your personal information erased, including any links to, copy or replication of such information, as permitted under applicable law; for instance, when your information is outdated, not necessary or unlawful or when you withdraw your consent to our processing based on such consent, or when you successfully object to our processing;
- Obtain the restriction of the processing while we are processing your request or challenge pertaining to the accuracy of your personal information or the lawfulness of the processing of your personal information and our legitimate interests to process this information, or if you need the personal information for litigation purposes.
You may exercise these rights free of charge by contacting us via https://customerservices.mcdonalds.co.uk/hc/en-gb/requests/new. However, subject to the applicable law, McDonald’s may charge a reasonable fee or refuse to act on a request if it is manifestly unfounded or excessive, in particular because of its repetitive character. In some situations, McDonald’s may refuse to act or impose limitations on the information disclosed if, for instance, the disclosure is likely to adversely affect the rights and freedoms of others, prejudice the execution or enforcement of the law, or interfere with pending or future litigation.
You also have the right to lodge a complaint about our processing of your personal information with the Information Commissioner's Office, which is the Supervisory Authority in the UK. Contact details are as follows: https://ico.org.uk/concerns/ or 0303 123 1113 or casework@ico.org.uk
Children’s Privacy Notice
Our policy is not to collect personal information from any child under 13 unless for a specific activity where the child's parent or guardian has first provided us with written consent to that specific activity.
Cookies and Other Technologies
A copy of McDonald’s UK cookies policy can be found here.
Purposes for which we process your personal information
- Customer Match Advertising on Third Party Platforms
We may share your email address and other identifiers such as your device ID with third party platforms (such as Facebook, Snap, Twitter and Google). These platforms will try to ‘match’ your data with the data of their registered users and, if there is a match, our advertising will be displayed to you when you use the services of the third party platform. Sometimes we may also share your personal information with third party platforms in order to exclude you from seeing our advertising (because we are trying to reach people that are not yet our customers). We will only do this activity where we have appropriate permission (for example where you have given us permission to track you through your app settings).
- Lookalike Advertising on Third Party Platforms
Where we share your personal information with third party platforms as described above, we may also ask the third party platform to find other users of their services who share similar interests and behaviours to you, and to show our advertising to those users. This is based on personal information that you have provided to the third party platform or that the third party platform has collected through your use of their services (such as demographic, interest and behavioural data). The third party platforms do not share this personal information with us, and their collection and use of your personal information is subject to their privacy policies. This activity is sometimes known as ‘lookalike’ or ‘similar’ audience advertising, because we are trying to reach people that are similar to our customers.
CCTV is used in McDonald’s restaurants for the following legitimate business interest.
(i) To prevent and detect crime and disorder;
(ii) To assist in the apprehension of offenders;
(iii) To provide evidence in the event of legal proceedings by or against McDonald’s;
(iv) To ensure restaurants are being run in a safe manner;
(v) To ensure operational effectiveness.
McDonald’s also captures your image if you are using our drive thru, at the time you place an order. This is not permanently saved onto any device. Instead, it is displayed on the cashier’s till in the drive thru window, and is then automatically deleted within 30 minutes of the sale being completed. The image captured will generally include only the head and shoulders of the individual making the order, and is captured for McDonald’s legitimate business interests to ensure that the completed food and beverage order is passed to the same person who placed the order.
We may monitor, record, store and use any telephone, email or other communication with you in order to check any instructions given to us, for training purposes and to improve the quality of our customer service. It is in our legitimate interests to use your personal information for this purpose.
- Bringing and defending legal claims – sharing with our insurer
We may share your personal information with our insurance brokers, Artex Risk Solutions (UK) Limited (trading as Amber Insurance and Risk Management, “Amber”), where necessary to bring or defend legal claims and/or to protect the rights, interests, safety and security of our organisation, our employees or franchisees, or members of the public. Amber uses the information in accordance with its privacy notice located at https://www.artexrisk.com/privacy-notice/. To exercise your rights in relation to Amber’s processing of your personal data, please contact Amber directly as set out in section 9 of Amber’s (Contact us) of Amber’s privacy notice.
It is in our legitimate interest bring and defend legal claims and to use your personal information for this purpose.
- Fraud Detection and Prevention
We may share your personal information with suppliers who help to protect you and McDonald’s from fraud. One such supplier is Sift Science, Inc. (“Sift”) who uses the information as a controller for the benefit of McDonald’s and others in accordance with its privacy notice located at https://sift.com/service-privacy. To exercise your rights in relation to Sift’s processing of your personal data, please contact Sift directly as set out in Part VI (How to contact us) of Sift’s privacy notice.
It is in our legitimate interest to ensure that we and you are not subject to fraud and for us to use your information for this purpose.
If you are signed up to receive promotional e-mail newsletters from McDonald’s, we will monitor whether or not you are playing McDonald’s Monopoly game, and may send you personalised communications by e-mail relating to the game and how you play it, which may include free game codes.
We will only send you promotional e-mails about Monopoly where you have consented to us sending you these emails. However, it is in our legitimate interests to monitor whether you play Monopoly and to persoanlise email communications to you. You can object to such personalisation in the e-mail newsletter preference centre, a link to which is included on every e-mail newsletter you receive from McDonald’s.
- Prize promotions (including competitions, draws and instant win offers)
If you win a major prize through our prize promotions we may be required, by self-regulatory codes that we are subject to, to publish or make available personal information to demonstrate that a valid award took place. Such information will typically include your surname and the county where you live, but may include other personal information relating to the prize promotion. You are entitled to object to us sharing your personal information for this purpose (see ‘How to Contact McDonald’s UK’ below), but we may still provide this to self-regulatory bodies (the Advertising Standards Authority) on request.
It is in our legitimate interests to use your personal information in this way to ensure that our prize promotion is administered fairly and effectively and to ensure that we comply with self-regulatory codes.
In line with government guidance and our legal obligations, we support official contact tracing initiatives by asking customers who eat in our restaurants to complete an online form with certain contact details and information about their visit. Contact tracing allows people who may have been close to someone who has tested positive for COVID-19 to be made aware of that fact so that they can self-isolate. It’s a key part of the ongoing COVID-19 response and can help break infection chains.
Government guidance and regulation is subject to change based on the current state of the pandemic, and requirements may vary depending on where the restaurant that you are visiting is located. In some cases you may be required to provide this information and you may not be allowed to enter or eat-in a restaurant if you do not provide it.
Where available, you may be able to check-in to our restaurants using official contact tracing apps. However, please be aware that, in some areas where you are required to provide your information for contact tracing, these apps may not be considered a replacement and we may still ask you to complete our online form.
Set out below are details of what information we collect for contact tracing and how we use it.
Information we collect
When you eat in our restaurants, we ask you to complete our COVID-19 Store Registration Form with your name, phone number, restaurant number (details provided at your table), time you arrived at our restaurant, how long you plan to stay and the number of people in your group. When completing this form, we also automatically capture the date and time that you accessed the form (which will be used as the date and time that you visited our restaurant).
If you are in a group of two or more people: Only one of you needs to provide your details, but that person should also tell us how many people were with them. If you are the person completing the form, please keep a note of the name and contact details of those who accompany you. We will not ask for the details of the other person(s) but, if you are contacted by public health authorities, they will ask you to provide this information so that they can contact everyone who was with you.
If you are under the age of 13: If you are in a group please ask someone in your group who is over the age of 13 to complete the registration form on their phone. If you are on your own or if all of the people in your group are under the age of 13, you should enter your or your group leader's name into the form, but include the phone number of that person's parent or guardian into the relevant field of the form, not your own number. That is the phone number that we will pass to public health authorities (and which they will call) if the contact tracing process is initiated.
Using, storing and sharing this information
We only use the information that we collect for contact tracing purposes. Here is how contact tracing works.
If a person who has been in a restaurant at the same time as you later tests positive for COVID-19, the relevant national health authority may contact us to ask us to share with them the record of our customers who also ate in the same restaurant at the same time as the COVID-19 positive person. We will supply that authority with the information that you gave us via our COVID-19 Store Registration Form, so that it can notify you and other customers as it deems appropriate.
If you are contacted by a public health authority and/or contact tracing scheme, and you are asked to provide any personal information, you should ensure that the caller is genuine. You should be cautious that fraudsters or scammers could seek to obtain information from you by pretending to be a contact tracing agency, and you should not be required to provide your bank or other financial details to a genuine caller.
We will not share your information with anyone else and we will not use it for any other purpose. We will only hold the information for a short period - 21 days - after which it will be securely deleted.
The public authorities which administer COVID-19 contact tracing in the UK are as follows:
- England: Public Health England, see here for further information
https://contact- tracing.phe.gov.uk/help/privacy-notice
- Scotland: Public Health Scotland, NHS National Services Scotland,
Scottish Government, territorial Health Boards. See here for further information
https://www.informationgovernance.scot.nhs.uk/use-of-your-data-for-track-trace-isolate-tti/
- Wales: Public Health Wales, see here for further information:
https://phw.nhs.wales/topics/latest-information-on-novel-coronavirus-covid-19/guidance-accordion/test-trace-protect-coronavirus/
- Northern Ireland: Public Health Agency, see here for further information:
https://www.publichealth.hscni.net/covid-19-coronavirus/testing-and-tracing-covid-19
It is in our, our customer’s and the public health authorities’ legitimate interests that we participate in contact tracing schemes, in particular to contribute to efforts to break COVID-19 infection chains and protect our communities. Depending on your location and the current restrictions that are in force, we may also be legally required to participate in contact tracing schemes and/or obtain your contact details for contact tracing purposes.
International Data Transfers
We may transfer your personal information to countries that do not have laws which adequately protect your personal information. In such cases, we take measures (such as standard data protection clauses) to ensure that your personal information receives adequate protection. If you have any questions about these measures or if you want to obtain a copy of the standard contractual clauses we use to safeguard personal information we transfer, please contact us using the contact information provided below.
How to Contact McDonald’s UK
If you have data protection questions specific to McDonald’s UK, you can reach us via our website at https://customerservices.mcdonalds.co.uk/hc/en-gb/requests/new or by writing to us at:
Attention: Data Protection Office
McDonald's Restaurants Limited
Customer Services
11-59 High Road
East Finchley
London N2 8AW
UK
