Skip to main content

Privacy Policy

This Privacy Policy describes the types of Personal Information we collect from and about you, how we may use and disclose such Personal Information, and your choices and legal rights with respect to such Personal Information and applies to any Personal Information collected about you by Restaurant Brands International Inc., or any of its companies, including without limitation the FIREHOUSE SUBS®, BURGER KING®, TIM HORTONS®, and POPEYES® restaurant brands (collectively, “RBI”), including when you do any of the following (collectively, the “Services”): (i) visit a BURGER KING®, TIM HORTONS®, POPEYES®, or FIREHOUSE SUBS® branded restaurant in the United States or in Canada, or (ii) use in the United States or in Canada any website, mobile or tablet application, digital in-restaurant kiosk, or other online service or platform of the BURGER KING® brand, the TIM HORTONS® brand, the POPEYES® brand, the FIREHOUSE SUBS® brand, or any other RBI company that links or refers to this Privacy Policy.

By using the Services, you agree to the collection, use, and disclosure of your information as described in this Privacy Policy, and agree to our Terms of Service which are incorporated by reference. If you do not agree, please do not access or use our Services.

1. Notice at Collection of Personal Information

For purposes of this Privacy Policy, when information identifies or is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with you or your household, we refer to it as “Personal Information.”

We collect the categories of Personal Information identified below. As indicated in the chart, we engage in “sales,” “sharing,” and “targeted advertising” with respect to certain categories of Personal Information (as such terms are defined in applicable law) for marketing and analytics purposes when we disclose Personal Information to business partners and third parties, such as data analytics providers, advertising technology vendors, and social media platforms, as described in this Privacy Policy.

To opt out of sales, sharing, and targeted advertising, please click on the Do Not Sell or Share My Personal Information link in our website footer. Please follow applicable instructions to turn off sales, sharing, or targeted advertising linked to your device and browser, including cookie identifiers. You may also choose to enable online, where available, a universal tool that automatically communicates your opt-out preferences, such as the Global Privacy Control (“GPC”). We will process the GPC signal as a request to opt out.

Categories of Personal Information Collected

Category of Personal Information Collected Have we engaged in “sales,” “sharing,” or “targeted advertising” for this category of Personal Information?
Identifiers, including names, phone numbers, physical addresses, email addresses, online identifiers, IP addresses, username, account number, and other similar identifiers. Yes
Personal Information categories listed in the California Customer Records statute, including telephone numbers and credit and debit information. No
Protected classification characteristics under California or federal law, including date of birth and sex/gender expression. No
Commercial information, including your purchase and usage history, goods and service preferences, and payment and billing information. Yes
Internet or other electronic network activity information, including internet browsing history, search history, and interactions with the Services and advertisements. Yes
Professional or Employment-related information, for job applicants. No
Sensory information, including audio, electronic, visual, or similar information. No
Inferences, meaning inferences drawn from any of the information in the above-listed categories of information. Yes
Sensitive Personal Information, including account log-in information in combination with passwords and individuals’ precise geolocation information. No
Other information you provide to us, such as any other materials, information, and content that you choose to submit to the Site. No
Demographic information, including age, language, occupation, estimated income, education level, marital status, household composition, type of residence, homeowner status, neighborhood characteristics, interests and hobbies. No

We also work with various types of data that are de-identified or aggregated, and not reasonably capable of being associated with, or reasonably be linked, directly or indirectly, with you or your household. This data is not considered Personal Information subject to this Privacy Policy.

B. The Business and Commercial Purposes for Which We Collect and Use Your Personal Information

We use the above listed categories of Personal Information for the following purposes:

  • To register and create your account;
  • To operate and manage our stored-value card program (e.g., gift cards to our affiliated restaurants);
  • To provide and manage the products and Services you request, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing services, providing analytics services, providing storage or providing similar services;
  • To monitor, protect, and maintain the security and integrity of our Services and our business, such as protecting against and preventing fraud, unauthorized transactions, claims and other liabilities;
  • To undertake internal research for technological development and demonstration;
  • To communicate with you about our products, services, and promotions;
  • To debug, identify, and repair errors that impair existing intended functionality;
  • To deliver, measure, or audit targeted advertising, promotions, and offers and use other advertising and marketing services, such as for counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance;
  • For other short-term, transient uses permitted by applicable law;
  • To comply with applicable laws and regulations and respond to lawful requests and communications from law enforcement and other government officials;
  • To carry out sales and business transactions in which information held by us is among the assets transferred or is otherwise relevant to the evaluation, negotiation, or completion of the transaction;
  • To protect our rights, privacy, safety, property and/or those of others;
  • To fulfill any other purpose for which you provide your Personal Information or as explained to you at the point of information collection;
  • To provide you with customized content or targeted offers;
  • When you use “Share with a Friend” or similar feature on the Services;
  • To understand our customers so that we can develop and improve our customer service, promotions, products, and Services; and
  • To send you information, newsletters, and marketing/promotional material from us and, or on behalf of, our marketing partners and affiliates.

We may otherwise use your information with your consent or at your direction.

C. Data Security; Data Retention

We have in place certain procedures to protect your Personal Information in our custody and control. However, as no transmission of information over the internet is absolutely secure, we cannot guarantee the security of our Services or our control over your Personal Information.

Our policy is to retain Personal Information only for as long as is necessary to fulfill the reason for which the Personal Information was collected and as necessary to process such Personal Information. In addition to the above, we will retain your Personal Information for the purposes of satisfying any professional, legal, accounting or reporting requirements to which we are subject and to resolve disputes and enforce our agreements. To determine the appropriate retention period for Personal Information, we consider the scope, nature and sensitivity of the Personal Information, the potential risk of harm from unauthorized use or disclosure of the Personal Information, the purposes for which we collected and processed your Personal Information and whether we can reasonably achieve those purposes through other means, as well as any applicable legal and professional requirements.

2. Our Collection of Personal Information

There are several ways we obtain your Personal Information:

Personal Information You Provide to Us. We collect Personal Information you give us when you use the Services. For example, we may ask for your name, e-mail address, year of birth, gender, street address, or mobile phone number when you: visit one of our restaurants, visit one of our websites or use one of our Services, contact us by telephone or through our website or chatbot about a question or concern, create an account with us, buy a stored-value card in-restaurant or online, participate in a survey or promotion, or take advantage of our in-restaurant Wi-Fi service. We may collect payment information, such as your credit card number, security code and expiration date, to process a financial transaction you have requested. We also may collect information about the products you buy, including where and how frequently you buy them, your use of coupons and stored-value cards, and the rewards you earn through our loyalty programs so that we can learn more about your interests and better serve you.

Personal Information Collected Automatically. In addition to the Personal Information you provide to us directly, we may automatically collect Personal Information about your use of the Services. For example, we may collect:

  • Device information - such as your hardware model, IP address, other unique device identifiers, operating system version, and settings of the device you use to access the Services.
  • Usage information - such as information about the Services you use, the time and duration of your use of the Services and other information about your interaction with content offered through a Service, and any information stored in cookies and similar technologies that we have set on your device.
  • Location information - such as your computer’s IP address, your mobile device’s GPS signal or information about nearby WiFi access points and cell towers that may be transmitted to us when you use the Services.

Personal Information Collected from Other Sources. We may receive Personal Information from other sources, including:

  • Affiliates and Franchisees: We may collect Personal Information about you from within our family of affiliated companies. We may also collect and receive Personal Information about you from local owners of BURGER KING®, TIM HORTONS®, POPEYES®, and FIREHOUSE SUBS® restaurants, particularly when they work with us in delivering Services to you.
  • Service Providers. We may collect Personal Information about you from companies providing services on our behalf, such as delivery services, customer support, our chatbot or information technology services, hosting vendors, advertising service providers, data analytics companies, marketing service companies, and list managers.
  • Third Parties. We may acquire or receive Personal Information about you from commercially available sources, as permitted by law, including social networks, data brokers, business and joint marketing partners, online advertising services and advertising networks, data analytics providers, internet service providers, and operating systems and platforms. For example, we may receive information about you from a social media platform if you connect to the Services through that site. We also may obtain demographic information about you from third-party data providers.
  • Publicly available data. We may collect or receive publicly available data about you from government or other public sources.
  • Information from Your Friends. We may receive Personal Information from your friends, such as when they use a “Share with a Friend” or similar feature on the Services.
  • Other Personal Information We Collect. We also may collect other information about you, your device, or your use of the Services in ways that we describe to you at the point of data collection or otherwise with your consent.

Combination of Information. We may combine the Personal Information we receive from and about you, including information collected online and offline, and from third parties. We may also de-identify or aggregate information so that it is no longer Personal Information. We use, disclose, and protect combined Personal Information as described in this Privacy Policy.

3. Our Disclosure of Personal Information

We may disclose your Personal Information with the following, and as further described below:

  • Affiliates, including the BURGER KING®, TIM HORTONS®, POPEYES® and FIREHOUSE SUBS® brands;
  • Franchisees, including local owners of BURGER KING®, TIM HORTONS®, POPEYES® and FIREHOUSE SUBS® restaurants;
  • Service providers that provide business, professional, analytics, or technical support services to us, help us operate our business and the Services, or administer activities on our behalf.
  • Third-party companies, including business partners, social media platforms, data analytics providers, and advertising technology companies. As disclosed in our “Notice at Collection” above, these disclosures may constitute a “sale,” “sharing,” or “targeted advertising” under applicable U.S. state privacy laws.

In certain circumstances, we may disclose each category of your Personal Information to:

  • Competent Governmental, Regulatory, and Public Authorities. We may disclose your Personal Information to government and law enforcement authorities, in each case to comply with legal or regulatory obligations or requests.
  • Relevant Third Parties as Part of a Corporate Transaction. In the event of a reorganization, merger, sale, joint venture, assignment, transfer, or other disposition of all or any portion of our business, assets, or stock (including in connection with a bankruptcy or similar proceeding), we may disclose or transfer your Personal Information to certain third parties, such as the acquiring entity and its advisers.
  • Other Third Parties. We will disclose your Personal Information to other third parties at your direction or with your consent. Additionally, we will disclose your Personal Information as we believe necessary or appropriate to: (a) comply with applicable law; (b) enforce our terms and conditions; (c) protect our operations; (d) protect our rights, privacy, safety, or property, and/or those of others; and (e) allow us to pursue available remedies or limit damages that we may sustain.

We may disclose your Personal Information for other reasons that we will describe at the time of information collection or prior to disclosing your information.

We may also provide deidentified or aggregated information to third parties to describe how our customers are using the Services. This information is not considered Personal Information.

4. Your Privacy Rights and Choices

A. US Privacy Rights and Requests

As a U.S. resident, you have the following rights regarding your Personal Information:

  • Right to Know. You have the right to know what Personal Information we have collected about you, including the categories of sources from which the Personal Information is collected, the business or commercial purpose for collecting, selling, or sharing Personal Information, the categories of third parties to whom we disclose Personal Information, the categories of Personal Information disclosed to third parties, and the specific pieces of Personal Information we have collected about you.
  • Right to Know a List of Categories of Third Parties. You have the right to request a list of the categories of third parties to which we have disclosed Personal Information.
  • Right to Know a Specific List of Third Parties. If you are a resident of Oregon, Minnesota, or Connecticut, you have the right to request a list of the specific third parties with whom we have disclosed Personal Information.
  • Right to Data Portability: You have the right to access your information in a portable format.
  • Right to Delete: You have the right to request that we delete Personal Information that we have collected from or about you, subject to certain exceptions. Please be aware that in fulfilling your deletion request we will delete your loyalty account and you will lose your all of the data and content in that account, including your points and rewards, order history, stored payment methods, favorites and other settings, and any personalized offers you may have received. Once your deletion is completed you cannot regain access to your account.
  • Right to Correct: You have the right to correct inaccurate Personal Information that we may maintain about you, subject to appropriate verification.
  • Right to Opt-Out. You may opt out of the processing of your Personal Information for purposes of “targeted advertising,” and the “sale” or “sharing” of your Personal Information (as defined by applicable law).

How to exercise your privacy rights.

Know, Portability, Correction and Deletion Requests. If you are interested in exercising one or more of your rights to know, correct, delete, know a list of third parties or categories of third parties, or receive your data in a portable format, please contact us at 1-888-289-6185 (United States) or by clicking on this link. Whichever way you elect to contact us, we may ask that you confirm and verify your identity.

Opt-Out Requests. To opt out of sales, sharing, and targeted advertising, please click on the Do Not Sell or Share My Personal Information link in our website footer. Please follow applicable instructions to turn off sales, sharing, or targeted advertising linked to your device and browser, including cookie identifiers.

Alternatively, where available, you can use certain preference signals to exercise your sale/share and targeted advertising opt-out right automatically with all businesses that you interact with online. If you enable a browser-based opt-out preference signal that complies with applicable law, such as Global Privacy Control (GPC), upon receipt or detection, we will treat the signal as a valid request to opt out of sales, sharing, and targeted advertising linked to that browser and any consumer profile we have associated with that browser. Please note that if you use different browsers or browser profiles, you will have to enable the signal on each one that you use.

Agent Requests. You may authorize someone to make a privacy rights request on your behalf (an authorized agent). Requests made by authorized agents must be submitted through this link. Authorized agents will need to demonstrate that you’ve authorized them to act on your behalf. We retain the right to request confirmation directly from you confirming that the agent is authorized to make such a request.

Sensitive Personal Information. We collect certain “Sensitive Personal Information” (as defined under applicable law). However, we do not use or disclose such information for any purpose outside of the limited permissible purposes set forth in the regulations implementing applicable law. Such purposes include providing the Services and verifying, maintaining the quality of, and improving the Services.

Appeal Requests. You may appeal our decision with respect to a request you have submitted by contacting us at privacy@rbi.com or by calling 1-888-289-6185 (United States).

If you exercise any of the foregoing rights, we will not discriminate against you, including by denying access to our products or services or restricting your access to products or services of a certain quality or price level.

Please note that, where permitted under applicable law, we may decline a request if we are unable to verify your identity (or an agent’s authority to make the request) and confirm the Personal Information we maintain relates to you.

B. Interest-Based Advertisements.

We may use third parties to serve advertisements on our Services and on other websites and digital platforms. We may also use services provided by vendors to serve targeted ads to you and others on such platforms. Even if you opt out of interest-based advertising, tracking technologies may still collect data for other purposes including analytics, personalization, and improving the Services, and you will still see ads from us, but the ads will not be interest-based ads.

C. Third-Party Opt Outs

To opt-out of online behavioral advertising by the Digital Advertising Alliance participating companies in the United States, please visit: http://www.aboutads.info/choices and http://www.aboutads.info/appchoices/.

To opt-out of such collection and use for online behavioral advertising by the Digital Advertising Alliance of Canada participating companies in Canada, please visit: https://youradchoices.ca/en/tools.

To opt-out from the use of information about your online activities for online behavioral advertising by NAI member companies, visit: https://www.networkadvertising.org/choices/.

You may block digital technologies in your browser or device settings, as and if permitted by such device, but in some circumstances, disabling these features may interfere with your ability to access our products or services, your choices with respect to interest-based advertising, and some of the privacy and access choices available to you.

D. Cookies and Beacons.

We and other companies that provide advertising and other services on our Services may use cookies and beacons to facilitate administration and navigation, to better understand and improve our Services, to determine and improve the advertising shown to you here or elsewhere, and to provide you with a customized online experience.

“Cookies” are small files that are placed on your computer when you visit a website. Cookies may be used to store a unique identification number tied to your computer or device so that you can be recognized as the same user across one or more browsing sessions, and across one or more sites. If you wish to disable cookies, refer to your browser help menu to learn how to disable cookies. If you disable cookies, it may interfere with the functioning of the Services.

“Beacons” (or “pixels”) are technologies that communicate information from your device to a server. Beacons can be embedded in online content, videos, and emails, and can allow a server to read certain types of information from your device, know when you have viewed particular content or a particular email message, determine the time and date on which you viewed the beacon, and the IP address of your device.

We and our third party partners may use beacons, including to analyze the use of our Services and (in conjunction with cookies) to provide content and ads that are more relevant to you both on and off the Service.

To opt out of the usage of certain cookies, web beacons, or other technologies linked to your browser, please click on the Do Not Sell or Share My Personal Information link on our website footer. In addition, you may connect using an incognito browser window, as well as remove traces of your visit by clearing your browser history.

Our use of Google Analytics and Advertising technologies: Our website uses technology provided by Google to facilitate advertising and reporting. We implement Google Analytics cookies to collect Personal Information about you when you visit our website for purposes of remarketing, impression reporting, and demographic and interest reporting. This information includes Personal Information disclosed in this Privacy Policy and can be combined with other data related to you collected through Google’s advertising cookie or other third-party technology. You can opt-out of the use of this technology through the Google Analytics opt-out browser add on.

E. Unsubscribing from our Marketing and Promotional Communications.

From time to time, we may send you marketing and promotional communications, including special offers from us or our partners. If you no longer wish to receive promotional and marketing emails from us, you may opt out of such communications at any time by following the opt-out instructions included in any promotional or marketing email you receive from us.

5. Notice of Financial Incentive

The Firehouse Rewards Program (the “Program”) provides certain rewards, including Points for Eligible Menu Items (as defined here), personalized offers, and additional benefits and rewards. Membership is free of charge. Click here to read the Terms and Conditions and learn more about the Program, including enrollment. When you sign up for the Program, we may ask you to provide information, including the following Personal Information: identifiers and characteristics of protected classifications under California and federal law. Because we collect Personal Information, this may be interpreted as a “financial incentive” program under California law or “bona fide loyalty program” under Colorado law. We use this information for the purposes described above under the section titled “Notice at Collection of Personal Information,” including for targeted advertising. We may share your Personal Information with third parties as described in our “Notice at Collection of Personal Information,” including data analytics providers, advertising technology vendors, and social media platforms.

The value of your Personal Information that we collect is reasonably related to the value of the perks, benefits, and discounts that may be made available to you via the Program. We estimate the value of your Personal Information by considering, without limitation, the expenses we incur from collecting your Personal Information and/or providing the financial incentive to you, the revenue generated by your use of the financial incentive, and any improvements we can make to our products and services based on aggregating information obtained through the financial incentive program.

Participation in any financial incentive is optional. You may un-enroll from the Program at any time by clicking here to request deletion of your account and data. You may also submit your request by contacting us at 1-888-289-6185. If you ask us to delete your Personal Information, we will not be able to provide you with access to the Program.

6. Other Important Information

Children’s Privacy. Our Services are intended for a general audience. We do not direct our Services to children or minors under thirteen (13), nor do we knowingly solicit or collect any Personal Information from children or minors under the age of thirteen (13). We do not knowingly engage in “sales,” “sharing,” or “targeted advertising” (as such terms are defined in applicable law) with respect to Personal Information of individuals under the age of eighteen (18). If you are a parent or legal guardian and think that your child has given us data, you can contact us in writing or by email as provided below under the sub-section titled “Questions.” Please mark your inquiries “Children’s Privacy Information Request.” If we learn that a child or minor has provided Personal Information through our Services, we will use reasonable efforts to remove such information from our files.

Links to Third-Party Sites. Our Services may link to third-party websites and services that we do not operate and are outside of our control. We are not responsible for the security or privacy of any information collected by other websites or other services. Please exercise caution and review the privacy statements applicable to the third-party websites and services you use.

International Transfers. The Services are headquartered in the United States. Please be aware that information you provide to us or that we obtain as a result of your use of the Services may be collected in your country and subsequently transferred to, maintained and processed in the United States or another country by us or our service providers for the purposes mentioned above in accordance with applicable law. The privacy laws of these countries may not always offer the same level of protection as in your country. By using the Services, you consent to the collection, international transfer, storage, and processing of your Personal Information in the United States.

Changes to Our Privacy Policy. We may modify this Privacy Policy from time to time. Such changes will be posted to this page. We will notify you of material changes by appropriate means. Any changes to the Privacy Policy will become effective and will supersede all previous terms as of the Effective Date. Your continued use of the Services following such a change indicates your acceptance of the revised Privacy Policy.

Questions. Please contact our Privacy Officer at privacy@rbi.com with any questions or concerns about this Privacy Policy or the manner in which we treat your Personal Information. In addition, you may contact us at 1-888-289-6185 (United States) or by clicking on this link. Whichever way you elect to contact us, we may ask that you confirm and verify your identity.