WiFi Privacy Notice

Wifi Customer Privacy Notice

Transparency is important to us. It's why our chicken is traceable and responsibly produced, and why we want you to understand how we use personal data to run our website and Colonel's Club app, show you relevant ads and serve you in our stores. It's also why we want you to know the rights you have over your personal data – to opt-out of marketing, to ask us for a copy of your data, to object to our use of it, and, occasionally, to ask us to delete it.

SCOPE OF THIS NOTICE?

Us. We're Kentucky Fried Chicken (Great Britain) Limited – but in this Notice we call ourselves "we", "us" or "KFC". This Notice describes how we use your data collected through our in-store Wi-Fi.

This notice sets out what we do with the data collected via the in-store Wi-Fi that you may use.

Not our franchisees. Other stores are run by franchisees, who are independent business owners and therefore independent data controllers (yep, technical terms again). As a result, each franchisee is responsible for its own data protection compliance. If you would like to talk to any of our franchisees about their privacy practices, please contact that them directly.

WHAT DATA DO WE COLLECT AND HOW DO WE USE IT?

If you use our Wi-Fi, we obtain information you use to sign up for the services and connection information, such as your contact details, address, date of birth and gender together with the date, time and location that you accessed the Wi-Fi. We use this limited information for our legitimate interests of better understanding patterns in the traffic to our stores and the preferences of our customers.

We only use this information to understand broader trends, for business planning and marketing purposes, and we do not receive any information about the websites you browse, the apps you use or any of your communications. For this reason, our interests are not outweighed by your data protection rights. If you give us your express consent by checking the tick-box when you sign up, we will receive your email address to send you promotional material.

WHO DOES KFC SHARE MY INFORMATION WITH?

Your personal data will be shared with Salesforce, a company providing services under contract to us for marketing and digital advertising across social media, if you consent to such marketing.

Your personal data will be processed in or accessed from the United States by Salesforce whom we share your personal data with. When we transfer your data to organisations outside the KFC group we use European Commission-approved standard contractual clauses to safeguard the transfer. Where we transfer personal data to a third party that has implemented Binding Corporate Rules, we may rely on them to safeguard the transfer. For further information, including to obtain a copy of the documents used to protect your information, please contact us as described in the Contact Us section below.

HOW CAN I STOP RECEIVING NOTICES ABOUT FUTURE OFFERS?

If you no longer want to receive details of our fantastic products and offers, please let us know by completing a form available at www.kfc.co.uk/contact or write to us at the address given at the bottom of this Notice. Please make sure that you tell us your full name and address or email address.

Alternatively, you can click on the unsubscribe link at the bottom of any of the email or SMS messages we have sent to you.

WHAT OTHER RIGHTS DO I HAVE?

You have the right to ask us for a copy of your personal data; to correct, delete or restrict processing of your personal data; and to obtain the personal data you provide in a structured, machine readable format. In addition, you can object to the processing of your personal data in some circumstances (in particular, where we don’t have to process the data to meet a contractual or other legal requirement or compelling interest). Where we have asked for your consent, you may withdraw consent at any time. If you ask to withdraw your consent to us processing your data, this will not affect any processing which has already taken place at that time.

These rights may be limited, for example if fulfilling your request would reveal personal data about another person, or if you ask us to delete information which we are required by law or have compelling legitimate interests to keep. If you have unresolved concerns, you have the right to complain to the data protection authority in the country you reside, where you work, where you think the alleged breach is located.

HOW LONG DO YOU KEEP MY DATA FOR?

We will retain your personal data only for as long as we need it for our legitimate interest in accordance with applicable law, after such time, we will either delete or anonymize your information or, if this is not possible (for example, because the information has been stored in backup archives), then we will securely store your information and isolate it from any further use until deletion is possible. If you have elected to receive marketing from us, we will retain information about your marketing preferences for three years from the date that you last express interest in our products and services, such as when you last open an email from us. We will retain information related to your connection to the Wi-Fi service for six years from the date when you last connect to the services.

HOW DO I CONTACT KFC?

If you have any questions about our Notice or the use of your personal data, please contact by (i) post: KFC Customer Services Freepost RRKA-HCAS-YSJC Unit 4, Mount Hill Farm Wicken Milton Keynes MK19 6DG or (ii) complete a form at www.kfc.co.uk/contact.