STARBUCKS PRIVACY NOTICE

Last Revised: September 15, 2025

At Starbucks, we approach data and privacy as we approach everything we do: we put people first.

As part of our effort to protect your privacy and to comply with applicable privacy and data protection laws, we strive to consider our data governance practices through the lens of the recognized principles of data minimization, limited collection, and limited use, among other key areas addressed below. We do so to respect and maintain your trust. In other words, we believe that taking care of you includes taking care of your data and privacy. Grab a cup of coffee and learn more below.

This Starbucks Privacy Notice (“Notice”) describes the types of personal information that Starbucks Corporation and its respective subsidiaries and affiliates (“Starbucks,” “we,” and “us”) collect, how we use it, how and when it may be shared, and the rights and choices you have with respect to your information. Specifically, this Notice applies to the personal information that we process in North America, including when you visit websites or applications owned and operated by Starbucks brands or products that direct you to this Notice (such as the Starbucks Rewards mobile application available at https://www.starbucks.com/coffeehouse/mobile-apps (“Starbucks App”)) and when you visit our stores (collectively, “Starbucks Services”). Our goal is to help you understand how we use your information to provide and improve our products, services, marketing, and interactions with you, as part of our commitment to maintaining your trust. Thank you for taking the time to read and understand our data and privacy related practices.

By continuing to use Starbucks Services you acknowledge this Privacy Notice and agree to our Terms of Use and other important policies available on our homepage.

Contents

You may skip to the specific sections of our Privacy Notice by selecting any of the sections listed below.

  1. Updates to this Privacy Notice
  2. Information We Collect
  3. Sources of Information
  4. How We Use Your Information
  5. How We Disclose Your Information
  6. Cookies and Similar Technologies
  7. How We Protect Your Information
  8. Retention
  9. Cross-Border Transfers
  10. Children’s Privacy
  11. Third-Party Sites
  12. Starbucks WiFi
  13. Your Privacy Choices & Rights
  14. Notice of Financial Incentive & Starbucks® Rewards
  15. Additional Disclosures for Data Subjects in the EEA, the U.K. and Switzerland
  16. Participation in the Data Privacy Framework
  17. Contact Us

1. Updates to this Privacy Notice

We may update this Notice from time to time. We will notify you of material changes to this Notice and will update the Last Revised date on this Notice. We encourage you to look for updates and changes to this Notice when you access our websites and mobile applications.

2. Information We Collect

When you visit and use the Starbucks Services, we may collect the following categories of information:

Additionally, depending on how you use the Starbucks Services, we may collect the following categories of personal information from you that may be considered sensitive under some privacy laws:

We may aggregate or de-identify the information described above. Aggregated or de-identified data that we do not attempt to reidentify is not subject to this Notice.

Without this information, we may not be able to provide you with all the requested services.

3. Sources of Information

We may obtain personal information from different sources, types of technology, and devices. This information may be collected from various places including in our stores, online, and from third parties, including from other users of Starbucks Services (such as when they purchase a gift for you), advertising partners, co-sponsors, internet service providers, data analytics providers, operating systems and platforms, social networks, and publicly available sources. For example, if you access any social media or similar services through the Starbucks Services to login or to share information about your experience on our Starbucks Services with others, we may collect information from these third-party services. We may also combine the information that you provide us or that we collect automatically with information that we receive from other sources. To learn more about the information that we collect online through automated means, please review the section of this Notice titled “Cookies, Web Beacons, and Similar Technologies.”

4. How We Use Your Information

We may use the information we collect about you for various business purposes, including to:

(a)   To Provide Our Services – We may process your information when you access or use the Starbucks Services, including to:

(b)   To Communicate With You – We may process certain information in order to communicate with you in relation to your accounts, our services, our marketing, and your requests, including to:

(c)   For Research, Development, and Improvement of Our Services – We want to ensure that our website, mobile applications, and services are continually improving and expanding so that we meet and exceed your needs and expectations. To do so, we may process certain personal information, including to:

(d)   For Legal Reasons – To maintain a safe, secure, and trusted environment for you when you use Starbucks Services, we may use your personal information, for example, in relation to obtaining legal advice or establishing, exercising, or defending legal claims; ensuring our terms, policies, and agreements with you or any third parties are enforced; and protecting the safety, rights, welfare, or property of Starbucks, you, or others. We may also be required to process certain information under certain laws and regulations, such as tax laws, as well as to maintain appropriate records for internal administrative purposes, to comply with applicable legal and regulatory obligations, and to respond to lawful governmental requests, as needed.

(f)   For Targeted Advertising – We may process your information to provide you with targeted advertising (also known as cross-contextual advertising and online behavioral advertising) and offers and promotions that you may be interested in. You may have certain privacy rights with respect to the processing of your information for targeted advertising purposes. You can learn more about these rights and how to exercise them in the “Your Privacy Choices & Rights” section below.

(g)  With Your Consent – We may process certain information in order to fulfill any other business or commercial purposes at your direction or with your consent.

5. How We Disclose Your Information

We may disclose your information to the categories of third parties below as needed to fulfill the purposes described in this Notice and as permitted by applicable law.

(a)  To Starbucks Affiliates and Subsidiaries – We may share information between and among Starbucks Corporation, its subsidiaries, and affiliates for purposes of management and analysis, decision making, and other business purposes. For example, we may share your information with our subsidiaries and affiliates to administer our loyalty programs, process orders and requests, and expand and promote our product and service offerings.

(b)   To Service Providers – We may share each of the categories of information described, in the “Information We Collect” section, for a variety of business purposes with our service providers who provide an array of services for us or on our behalf, such as payment processing, website and data hosting, location mapping, product and service delivery, customer service, advertising and marketing services, facilitating sweepstakes and Starbucks® Rewards loyalty program benefits and communication, ensuring compliance with industry standards, analytics services, security and performance monitoring, maintaining and servicing accounts, professional advisors (such as auditors and lawyers), processing or fulfilling orders and transactions, verifying customer information, research, auditing, and data processing. We may share your personal information with service providers who help to protect you and Starbucks from fraud. One such supplier is Ekata, Inc., which uses the information as a controller for the benefit of Starbucks and others in accordance with its privacy notice located at https://ekata.com/privacy-policy/.

(c)  To Business Partners – To make certain products available to you, we work closely with independent business partners, including, for example, co-branded loyalty and rewards partners, delivery partners, and partners who are authorized distributors of our products or licensees. When you obtain products provided by these independent business partners, we may share your information with them, or you may provide it to them directly. We may also share your information with independent business partners when we work with them to sponsor sweepstakes, contests, events, and other promotions. This Notice does not address, and we are not responsible for, the privacy, information, or other practices of these business partners. We encourage you to review the privacy notices of any third-party business partners whose services you obtain through Starbucks Services.

(d)   To Advertising and Analytics Providers – We may share each of the categories of information described above (in the “Information We Collect” section) with marketing, advertising and analytics providers to deliver advertising to you on behalf of Starbucks, including counting ad impressions, creating ad audiences, and conducting personalized advertising based on your interactions with our services as well as your activity on third-party services.

(e)  To Third Parties For Actual or Potential Corporate Transactions – If we become involved with a merger, corporate transaction or another situation involving the transfer of some or all of our business assets, we may share your information with business entities or people involved in the negotiation or transfer.

(f)   To Third Parties (including Government Authorities) as Legally Required or Permitted – We may disclose your information if we believe that the disclosure is required by law, if we believe that the disclosure is necessary to enforce our agreements or policies, or if we believe that the disclosure will help us protect the rights, property, safety of Starbucks or others, including our customers or partners.

(g)  To Third Parties or Persons When You Give Consent – We may share information about you with other persons or companies if you give us permission or direct us to share the information, including to individuals to whom you send a gift card.

(h)   Publicly When You Post on Our Websites – We display content and information that you share publicly or permit or authorize us to share publicly, such as reviews. If you post information on a blog or another part of our websites, the information that you post may be seen by other visitors to our websites. We are not responsible for the information you choose to submit in these public areas.

6. Cookies and Similar Technologies

We and others may use a variety of technologies to collect information about your device and use of our websites and mobile applications. These technologies include first- and third-party cookies, web beacons, pixels, JavaScript, entity tags, HTML local storage, and similar technologies. For example, cookies are small data files that are sent from a website’s server and are stored on your device’s hard drive either for only the duration of your visit (“session cookies”) or for a fixed period (“persistent cookies”). Cookies contain information that can later be read by a web server.

Cookies and similar technologies are used for the following purposes:

Taken together, these technologies help us learn which services and functionality you are using and how you are accessing information about us. We may use this information to personalize your visit to a website or use of a mobile application or to send you relevant promotions and advertisements.

Most web browsers can be programmed to accept or reject the use of some or all of these technologies, although you must take additional steps to disable or control these technologies. You may be able to reject some or all of these technologies by adjusting the appropriate settings in your browser. Each browser is different, but many browsers have preferences or options that may be adjusted to allow you to either accept or reject cookies and certain other technologies before they are set or installed, or allow you to remove or reject the use or installation of certain technologies altogether. If you want to learn the correct way to modify your browser settings, please use the Help menu in your browser or review the instructions provided by your browser.

On certain sites, you may also be able to opt out of certain cookies by clicking the “Do Not Sell or Share My Personal Information” link on our website or making a selection using the Cookie Preferences link. For more information on exercising your preferences in relation to cookies and similar technologies, including how we process opt-out preference signals, please see the section of this Notice titled “Your Privacy Choices & Rights.”

Many advertising companies that collect information from cookies and similar technologies for interest-based advertising are members of the Digital Advertising Alliance (DAA) or the Network Advertising Initiative (NAI), both of which maintain websites where people can opt out of interest-based advertising from their members. To opt-out of website interest-based advertising provided by each organization’s respective participating companies, visit the DAA’s opt-out portal available at http://optout.aboutads.info/, the DAA of Canada’s opt-out portal available at https://youradchoices.ca/en/tools, or visit the NAI’s opt-out portal available at http://optout.networkadvertising.org/?c=1.

Residents of the European Union may opt-out of online behavioral advertising served by the European Interactive Digital Advertising Alliance’s participating member organizations by visiting https://www.youronlinechoices.eu/.

To opt-out of data collection for interest-based advertising across mobile applications by participating companies, download the DAA’s App Choices mobile application opt-out offering at https://youradchoices.com/appchoices.

7. How We Protect Your Information

Starbucks uses reasonable technical, physical, and administrative security measures to reduce the risk of loss, misuse, unauthorized access, disclosure or modification of your information. However, no security system is perfect, and due to the inherent nature of the Internet, we cannot guarantee that data, including personal information, is absolutely safe from intrusion or other unauthorized access by others. You are responsible for protecting your password(s) and maintaining the security of your devices and accounts.

8. Retention

Starbucks stores information as reasonably necessary and proportionate to accomplish the purposes identified in this Notice based on criteria such as the length of time we need to provide the services to you, and to meet legal requirements, including record retention, resolving disputes, and enforcing our agreements. Our retention of your information is governed by applicable law.

9. Cross-Border Transfers

The personal information that you provide us is stored and processed on servers owned by Starbucks and other companies in the United States, Canada or elsewhere around the world, including locations outside of the country or jurisdiction where you are located. Regardless of the company or person who processes your information and where it is processed, we will take steps to transfer and protect your information through appropriate safeguards in accordance with applicable data protection laws and this Notice. If you are a resident of the EEA, the U.K., and Switzerland, please find more information in “Additional Disclosures for Data Subjects in the EEA, the U.K., and Switzerland” below.

10. Children’s Privacy

We do not intend for our websites or online services to be used by, and do not knowingly collect information from, anyone under the age of 13, or the relevant minimum age under applicable local law. Additionally, we do not knowingly sell or share information of our customers under the age of 18 for targeted advertising. If you are a parent or guardian and believe we may have collected information about your child, please contact us immediately as described in the “Contact Us” section of this Notice. For more information, please see our Terms of Use.

11. Third-Party Sites

Our websites and mobile applications may offer links to websites and/or other mobile applications that are operated by third parties and not by Starbucks. If you visit one of these linked websites, you should read the website’s privacy notice, terms and conditions, and other policies. We are not responsible for the policies and practices of third parties. Any information you give to those organizations is governed under their privacy notice, terms and conditions, and other policies.

12. Starbucks WiFi

Many Starbucks stores support providing you access to wireless internet (WiFi) at no charge. For any such WiFi access, please carefully review the terms of use listed on the activation page prior to accepting and connecting.

13. Your Privacy Choices & Rights

(a)  Your Choices

If you use the Starbucks App features described above, you consent to the transmission of your information to Starbucks and/or its agents, and authorize Starbucks and/or its agents, to record, process, and store such information as necessary for administering the Starbucks App features and for purposes described in this Notice.

(b)   Your Privacy Rights in the U.S. and Canada

You may submit a request to exercise the rights described below. We will respond to your request consistent with applicable law, including applicable exceptions.

Requests for U.S. residents should be submitted through this form HERE.

Request for Canadian residents should be submitted through this form HERE.

U.S. and Canadian residents may also submit a request by calling 1-800-STARBUC (782-7282).

Once we receive your request, we may verify it by requesting information sufficient to confirm your identity.

You may be entitled to submit a request through an authorized agent or to appeal a refusal to take action on your request. To designate an authorized agent to exercise your rights, we may require written proof that the authorized agent has been authorized to act on your behalf or a copy of the power-of-attorney document granting that right.

If you are an authorized agent or you are submitting a request on behalf of a customer, please submit your request through this form HERE or via email to privacy@starbucks.com.

We will not discriminate against you for exercising any of your applicable rights. We reserve the right to deny your request if we cannot verify your identity or if an exception applies under applicable law.

(c)   Additional California Rights

  • If you are a California resident, you can also request a notice disclosing the categories of personal information we have shared with third parties for the third parties’ direct marketing purposes. To request a notice, please submit your request by postal mail to: Starbucks, P.O. Box 20430, Augusta, GA 30916
  • Some web browsers have a “Do Not Track” preference that transmits a “Do Not Track” header to the websites you visit with information indicating that you do not want your activity to be tracked. We currently do not respond to browser “Do Not Track” signals, as there is no standard for how online services should respond to such signals. As standards develop, we may develop policies for responding to do-not-track signals that we will describe in this Notice.

(d)   Privacy Metrics

Applicable Period: January 1, 2024 – December 31, 2024

Scope: The below metrics reflect requests received from customers in the United States and Canada during the applicable period.

Right to Know

  • Requests Received – 1,237
  • Requests Completed – 463
  • Requests unable to be completed* – 760
  • Average completion time – 7 days

Right to Delete

  • Requests Received – 3,513
  • Requests Completed – 1,948
  • Requests unable to be completed* – 1,514
  • Average completion time – 11 days

Right to Opt-Out of Sales or Sharing of Personal Information

  • Requests Received – 1,140,500
  • Requests Completed – 1,140,500
  • Average completion time – 7 days

*Requests may be unable to be completed due to factors such as inability to verify the customer, duplicate requests, or no information is found.

14. Notice of Financial Incentive & Starbucks® Rewards

Starbucks® Rewards is one way in which Starbucks endeavors to reward and thank loyal customers for patronizing our business and purchasing Starbucks products. Starbucks® Rewards members opt in by signing up for Rewards online or through the Starbucks App and are able to earn certain benefits, such as rewards and exclusive offers through accumulated “Stars” or after you make a certain number of purchases, at participating Starbucks stores. If you would like to become a Starbucks® Rewards member, please see the Starbucks Rewards Terms of Use available at https://www.starbucks.com/rewards/terms.

Starbucks collects and uses the categories of personal information described in the “Information We Collect” section, including information you voluntarily provide us (such as your name and email), information we collect automatically, and information from other sources to operate the Starbucks® Rewards loyalty program, including to send you promotions, content, and special offers and the other uses described in this Notice. We work with many third parties to offer the benefits of our Starbucks® Rewards loyalty program. Those partners may fall into the following categories: Starbucks licensees, subsidiaries, and affiliates; service providers; and business partners. You can learn about the third parties with whom we share your information by referring to the “How We Disclose Your Information” section. Starbucks does not assign monetary value for the information we collect through the Starbucks® Rewards loyalty program when sending email communications. You may opt out of receiving promotional emails at any time by adjusting your Starbucks online account settings, or by clicking the “unsubscribe” link included within any promotional emails we send you. Participation in Starbucks® Rewards is voluntary, and you may withdraw from the Starbucks® Rewards loyalty program by visiting the Account section in the Starbucks App, by requesting deletion of your information by filling out this form HERE, or by calling Starbucks customer service. Please note that by withdrawing from Starbucks® Rewards, you will no longer have access to your Starbucks® Rewards account, but you can otherwise continue to use the Starbucks app. All points and rewards you have earned until the time of withdrawal will no longer be available. As previously shared, to communicate and provide services to you through the Starbucks® Rewards loyalty program, we need to use your personal information. Therefore, if you choose to delete your personal information from the Starbucks® Rewards loyalty program, we can no longer provide you with services through this loyalty program.

Based on our reasonable and good faith estimate, we receive value from Starbucks® Rewards in increased customer loyalty and patronage, though any value will vary by Starbucks® Rewards member depending on purchases made, which offers a member takes advantage of, and many other factors.

15. Additional Disclosures for Data Subjects in the EEA, the U.K., and Switzerland

This section provides general information about how Starbucks collects, stores, uses, transfers and otherwise processes personal data in or from certain countries in the European Economic Area, the United Kingdom, and Switzerland (together, for purposes of this section of this Notice, “EEA”), in accordance with the General Data Protection Regulation (GDPR) and its local implementations. This section does not supersede the applicability of any privacy policy found on the website of an EEA-based Starbucks affiliate with whom you have engaged, as that entity would be the data controller with respect to your personal data and the entity to which your data subject rights requests should be directed.

(a)   Lawful Bases of Processing – Where a Starbucks entity is acting as a data controller that determines the purposes and means of processing your personal data, such as when we collect, use, and share personal data as described in this Notice, we must have a lawful basis for processing for doing so. Our lawful bases for processing personal data include:

You can withdraw your consent at any time by modifying your promotional preferences in your Starbucks App account online, or by contacting us as described in the “Contact Us” section below.

(b)  Your EEA Data Subject Rights – Under certain circumstances, by law you have the right to:

To exercise any of these rights, please see the “Your Privacy Choices & Rights” section, or contact us as set forth in the “Contact Us” section below and specify which GDPR privacy right(s) you wish to exercise. We must verify your identity in order to honor your request, which we will respond to within 30 days of receipt.

(c)   Retention – As described in the “Retention” section, as a general rule, we keep your data for only as long as it is needed to complete the purpose for which it was collected or as required by law. We may need to keep your data for longer than our specified retention periods to honor your requests, including to continue keeping you opted out of marketing emails, or to comply with legal, regulatory, accounting or other obligations.

(d)   Transfers Outside the EEA – Your personal information may be transferred to, stored, and processed in a country other than the one in which it was collected, including the United States. It may also be processed by staff operating outside the EEA who work for Starbucks or for our third-party service providers. In such cases, we will take appropriate steps to ensure an adequate level of data protection of the recipient as required under the GDPR and as described in this Notice.

(e)   Complaints – If you have any issues with our compliance, you have the right to lodge a complaint with an EEA supervisory authority. We would, however, appreciate the opportunity to first address your concerns and would welcome you directing an inquiry first to us per the “Contact Us” section below, or to our U.S.-based third-party dispute resolution provider (free of charge) at https://feedback-form.truste.com/watchdog/request You may also contact our Data Protection Officer (“DPO”) at any time at privacy@starbucks.com.

16. Participation in the Data Privacy Framework

Starbucks complies with in the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. Starbucks has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) under the UK Extension to the EU-U.S. DPF. Starbucks has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this Privacy Notice and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit https://www.dataprivacyframework.gov/.

Starbucks is responsible for the processing of personal data it receives under the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and Swiss-U.S. DPF and subsequently transfers to a third party acting as an agent on its behalf.

Starbucks complies with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and Swiss-U.S. DPF Principles for all onward transfers of personal data from the EU, the UK, and Switzerland, including the onward transfer liability provisions.

The Federal Trade Commission has jurisdiction over Starbucks’ compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF. In certain situations, Starbucks may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

In compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF, Starbucks commits to refer unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF to TRUSTe, an alternative dispute resolution provider based in the United States. If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit https://feedback-form.truste.com/watchdog/request for more information or to file a complaint. These dispute resolution services are provided at no cost to you.

For complaints regarding EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and Swiss-U.S. DPF compliance not resolved by any of the other DPF mechanisms, you have the possibility, under certain conditions, to invoke binding arbitration. Further information can be found on the official DPF website https://www.dataprivacyframework.gov/framework-article/ANNEX-I-introduction.

17. Contact Us

We welcome your questions, comments and concerns about privacy. You can contact Starbucks Customer Service online at http://customerservice.starbucks.com (by phone at 800- (782-7282), or by postal mail at: Starbucks Customer Service, Starbucks, P.O. Box 549, Fort Smith, AR 72902.

You may reach our Global Privacy Department and our Data Protection Officer at privacy@starbucks.com.

Additional contact information may be found below for various Starbucks entities.

  • Country – Canada
    • Entity Name – Starbucks Corporation (Canada)
    • Entity Address – P.O. Box 20430, Augusta, GA 30916 USA
    • Additional Contact (If Any) –
      • Customer Service
        • 800-Starbuc (782-7282)
  • Country – U.S.
    • Entity Name – Starbucks Reserve; Princi
    • Entity Address – Starbucks, P.O. Box 20430, Augusta, GA 30916
    • Additional Contact (If Any) –
  • Country – U.K.
    • Entity Name – Starbucks Coffee Company (UK) Limited
    • Entity Address – Building 4 Chiswick Park, 566 Chiswick High Road, London, W4 5YE
    • Additional Contact (If Any) –
      • Customer Support
        • Please contact our U.K. Customer Care team HERE.
        • +443330050449 or +442088345050 (app)

    TRUSTe