Privacy Policy

(Last updated: 5 November 2024)

Our Privacy Values.

At Golden Arches Development Corporation ("McDonald's Philippines", "we", or "us"), we strive to do everything we can to respect the trust customers have in our brand and our commitment to your privacy is no exception. We are committed to protecting and safeguarding your privacy when you visit our restaurants or our websites, including our mobile websites ("Sites"),use our mobile device applications ("Mobile Apps"), call our customer hotlines, use any other phone or in-restaurant technology that we use or develop, subscribe to our email newsletters and other digital properties, and in any event where you provide Personal Data to avail our services (collectively, the "Services").

Your privacy matters to McDonald's Philippines. Thus, PLEASE READ AND UNDERSTAND THE FOLLOWING CAREFULLY.

Our Privacy Policy explains:

  • The types of data that we collect
  • Purposes for which we collect and use data
  • How we share data to our McDonald's Family, trusted companies, businesses, and vendors, including international data transfers
  • The protection and security measures we have in place
  • How long we retain information
  • Our privacy policy relating to your child's Personal Data
  • Your access and control to your own Personal Data
  • Links to external websites and social media
  • Management of any changes to this Privacy Policy
  • How to contact us

Further to your voluntary sharing of Personal Data, there may be situations where your Personal Data will be requested when such is necessary to provide a Service or is required by law. By providing your Personal Data to avail of our products and Services or in any business interaction with us where your Personal Data is required, you are consenting to the collection, use, access, transfer, storage, and processing of your Personal Data as described in this Privacy Policy.

We are committed to protecting the privacy of your children. Our online Services should not be used by minors under twelve (12) years of age. Children between twelve (12) and eighteen (18) years of age must review this Privacy Policy with their parent/s or guardian/s where said parent/s or guardian/s shall understand and agree to this Privacy Policy in order for children between twelve (12) and eighteen (18) years of age to use our online Services.

Parent/s or guardian/s who do not agree to this Privacy Policy, must immediately stop using our online Services and request McDonald's Philippines to close any online Services account that have been created by minors. You may direct all requests for account/information deletion through the Contact information provided below.

The creation of a service account assumes that parent/s or guardian/s have understood and accepted the terms and conditions of this Privacy Policy, and have given their consent and permission as a person aged 18 years old and above for such continued access and/or use, and are deemed to have agreed to the Privacy Policy. McDonald's Philippines shall not, under any circumstances, be liable for any consequences, legal or otherwise, arising from any misrepresentation and/or false information provided to it regarding the age of the creator/user of any service account/s.

This Privacy Policy applies to the McDonald's Family. All McDonald's franchisees will be accountable for any of their actions and/or omissions that are contrary to any law and/or this policy.

1. Types of Information We Collect and How It Is Used

The information we collect fall into three categories (collectively, the "Personal Data"):

(a) Those you give us

(b) Those we collect through automated means, and

(c) Those we collect from other sources.

Please note that we may combine all of these sources of information.

Information You Give Us

McDonald's Philippines gathers the following personal information:

  • First and last names,
  • Age,
  • Postal/billing/delivery addresses and/or email addresses,
  • Mobile and/or landline telephone numbers,
  • Gender,
  • Marital status,
  • Supporting details of your identification ("ID") such as senior citizen/persons with disability/student IDs,
  • Online Services account access information e.g. username and password, transaction information e.g., products you buy and payment preferences, and
  • Other details provided in your public profiles, if applicable, as well as other metadata e.g., frequency of usage, product preferences, preferred delivery times, and other log-in data (Wi-Fi log-in information) when voluntarily submitted by you

Information from Automated Means

When you visit, use or interact with our Sites or Mobile Apps, we may collect certain information by automated or passive means using a variety of technologies which may be downloaded to your device and may set or modify settings on your device. The "Usage Information" we collect may include your Internet Protocol ("IP") address, computer/mobile device operating system and browser type, type of mobile device, the characteristics of the mobile device, the unique device identifier ("UDID") or mobile equipment identifier ("MEID") for your mobile device, the address of a referring web site (if any), and the pages you visit on our Sites and Mobile Apps, and the times of visit. We may use this information for any and all lawful purposes, including to operate, maintain, and manage our Services and to provide other services such as technical support. We provide additional information regarding our use of "cookies" in this Privacy Policy below.

McDonald's Philippines may use various new and hereafter developed technologies to collect Usage Information and demographic information about you ("Tracking Technologies") which technologies may be downloaded to your device and may set or modify settings on your device. A few of the methods that may be used to collect Usage Information include, without limitation, the following (and subsequent technology and methods hereafter developed):

  • Embedded Scripts. An embedded script is a programming code that is designed to collect information about your interactions with Mobile Apps, such as the links you click on. The code is temporarily downloaded onto your device from our web server or a third party service provider, is active only while you are connected to the Mobile App, and is deactivated or deleted thereafter.
  • ETag (or entity tag). A feature of the cache in browsers. It is an opaque identifier assigned by a web server to a specific version of a resource found at a URL. If the resource content at that URL ever changes, a new and different ETag is assigned. Used in this manner, ETags are a form of device identifier. ETag tracking may generate unique tracking values even where the consumer blocks HTTP, Flash, and HTML5 cookies.

Mobile Apps may collect precise information about the location of your mobile device using technologies such as GPS, Wi-Fi, or cell tower proximity. McDonald's Philippines uses this information for location based services that you request, such as locating nearby McDonald's restaurants or identifying special offers that may be of interest to you or to deliver relevant content to you based on your location or to allow you to share your location to other users as part of the Services under our Mobile Apps. For most mobile devices, you are able to withdraw your permission for McDonald's Philippines to acquire this information on your location through the device settings.

If you have any questions about how to prevent us from collecting exact information about your location, we recommend you contact your mobile-device service provider, the device manufacturer, or your web-browser provider. Some online Services may not work properly without information about your location. If you would like us to delete information we have collected which could identify your location, please contact us through the Contact information provided below. By law, please note that we may need to keep certain information.

Information from Other Sources

We may collect public profile information when customers interact with us through social media to the minimum extent necessary to achieve the specific business purposes, functions, or activities.

The protection and security measures that we have designed

To ensure the security of the Personal Data you submit, McDonald's Philippines always uses industry-standard encryption software and technologies when transferring and receiving customer data. We have appropriate organizational, physical, and technical security measures that protect against the loss, misuse, or alteration of Personal Data that you have submitted. Notwithstanding the foregoing, you understand that there may be circumstances beyond McDonald's Philippines' reasonable control that may result in the instability or insufficiency of said measures. You agree that, under such circumstances, McDonald's Philippines shall not be liable or responsible for any unauthorized use, sharing, transfer, alteration, loss, or damage to any information that McDonald's Philippines may have gathered.

How long we retain various data

McDonald's Philippines only retains Personal Data for as long as the retention is required for the purposes for which we collected the Personal Data, the purposes described in this Privacy Policy and for our business and legal purposes. Generally, we retain Personal Data on a five-year calendar year period from the original purpose when the customer signed up for the Service or from a customer's last transaction with us ("Retention Period"), unless otherwise required by law or other mandatory directions by court or government authorities or for purposes of legal proceedings or other similar proceedings or investigations. The Retention Period shall commence on the first day of the calendar year immediately following the calendar year from the date when the customer signed up for the Service or from a customer's last transaction. McDonald's Philippines shall comply with all applicable laws, regulations, and best practices related to the retention, maintenance, and protection of the customer's records throughout the Retention Period.

2. Use and Sharing of Personal Information

When you use our Services, McDonald's Philippines may collect, process, use and/or store your Personal Data for the following purposes:

  • For carrying out your requests, fulfilling orders, processing payments, and providing delivery services;
  • Allow you access and use our online Services, where without them, our online Services may not work properly;
  • Provide you with information or Services that you have requested or agreed to receive, including to send you electronic newsletters, or to provide you with special offers or promotional materials on behalf of McDonald's Philippines or our McDonald's Family during any promotions. By opting in to receive promotional email, and marketing materials, you hereby give permission to McDonald's Philippines to send you direct and indirect marketing materials and advertising information to you, such as discount coupons and information about new product offerings based on your customer profile and behavior. Information you shared will also be used for processing in our Customer Relationship Management. If you wish to change your preference in this regard, you can contact us through the Contact information provided below;
  • Inform you about the products and services of our business partners. If you elect not to receive direct or indirect marketing materials from McDonald's Philippines' business partners, McDonald's Philippines will send a mailing or e-mail messages on behalf of the partners. You can contact us through the Contact information provided below should you opt not to receive such marketing materials from McDonald's Philippines' business partners, whether from them directly or through McDonald's Philippines;
  • Process your registration with the Services, including verifying if your information is active and valid;
  • Enable you to participate in a variety of the online Services' features such as promotions;
  • Improve our Services, to customize your experience on the Services, or to serve you specific content that is most relevant to you;
  • Contact you with regard to your use of the Services or any of your requests, questions, complaints, and comments and, in our discretion, make changes to any of our privacy policies;
  • Remember you, for your convenience, when you visit our online Services;
  • Market to you through targeted advertising;
  • Maintain, manage, and improve our offers, promotions, and Services and for the development of other technology;
  • Protect against, identify, and prevent fraud and other crime, claims, and other liabilities;
  • Provide, transfer and/or store any data that it collects from you to McDonald's parent, subsidiary, associated and affiliated companies, or to any agent, contractor or third party service provider located in or outside of Philippines which provides administrative, data processing, computer or other services to McDonald's Philippines, to enable us to carry out the purposes permitted under this Policy. The third parties to whom your customer data may be shared include: CRIF D-B Philippines, Inc. (Dun & Bradstreet), Market-I, Yondu, Inc., MDS Call Solutions, Inc., Wunderman Thompson, Fourth, Capgemini, among others;
  • Disclose Personal Data to those involved in the negotiation or transfer of McDonald's Philippines in the event of a merger, acquisition, financing, or sale of assets or any other situation involving the transfer of some or all of McDonald's business assets;
  • Internal analysis purposes, such as for research and development of products and services (including research on trends or analytics);
  • Any other purposes for which you have consented, such as those that may be set out in this Policy, and other purposes as permitted or required by any applicable law; and
  • Comply with any applicable laws or rules and regulations or investigative proceedings.

We will seek your consent in any event where we may use the information that we collect about you in other ways at the time that we collect the information. If you no longer want to receive any further communications from McDonald's, please contact us via our Contact information set out below.

We do not sell your Personal Data and only share your information as described in this Privacy Policy.

McDonald's Philippines may share Personal Data within the McDonald's Family. For this purpose the McDonald's Family includes McDonald's Corporation (USA), McDonald's franchisees, subsidiaries, and affiliates, which may or may not be situated outside of the Philippines, on a need-to-know basis. Any use of this information by any member of the McDonald's Family will comply with this Privacy Policy.

We may also share your Personal Data and other information to trusted companies, businesses, and vendors engaged by McDonald's Philippines to perform a variety of functions, such as but not limited to, fulfilling orders, assisting with promotions, providing technical services for the online Services, social media accounts, and/or websites, and the like. These companies may have access to Personal Data if needed to perform such functions. However, these companies may only use such Personal Data for the purpose of performing that function and may not use it for any other purpose. While we always strive to require third parties with whom we have agreements to comply to appropriate privacy policies, you agree that we are not responsible for any violations of this Privacy Policy, nor for actions, omissions or negligence of any such companies. Aside from these third-party vendors and contractors, McDonald's Philippines does not transfer or disclose Personal Data to third parties outside the McDonald's Family or such companies with which McDonald's Philippines has legitimate business with.

We will, on occasion, send marketing information on behalf of one of our business partners about products or services they provide that may be of interest to you. You may be asked if you wish to receive marketing materials from McDonald's business partners. If you elect to receive such materials, McDonald's will not share your Personal Data with such partners but rather will send a mailing or e-mail on behalf of the partners.

McDonald's Philippines reserves the right to use or disclose any information as needed to satisfy any law, regulation or legal request, to protect the integrity of the online Services, to fulfil your requests, or to cooperate in any law enforcement investigation or an investigation on a matter of public safety.

3. Children's Privacy Notice

We are especially committed to protecting the privacy of children who visit our Sites and Mobile Apps or use our Services. This Children's Privacy Notice is designed to answer your questions regarding our practices with respect to Personal Data we collect through our Services from children under the age of eighteen (18) (subject always to applicable law).

What Personal Information Does McDonald's Collect?

Generally, Personal Data will not be collected from any person who is known by McDonald's Philippines to be under the age of 18 ("Child") without the consent of a parent or legal guardian.

In the event that the Child is allowed to access information through the online Services, rest assured that we collect only limited Personal Data from the Child e.g. email addresses, postal address, contact number upon the consent provided by a parent or guardian in accordance with this Privacy Policy.

We may offer many features on our Sites, like games and colouring books, which do not require a Child to provide any Personal Data.

We will not collect more detailed information from a Child without the consent of a parent or guardian. If parent or guardian consent is required, we will collect the email address of the parent or guardian so we can provide notice of our data practices and/or seek the parent's or guardian's consent. McDonald's Philippines will not condition a Child's participation in any child-appropriate online activity on the Child's disclosure of more Personal Data than is reasonably necessary to participate in that activity.

How Does McDonald's Use the Personal Data It Collects?

We use email addresses submitted by a Child in order to respond to the Child's request or to notify the Child if he or she has won or lost a contest or promotion they entered or participated in. We use the email address of a parent or guardian, in order to provide the parent notice of our information practices or to seek the parent's or guardian's consent.

Personal Data collected from the Child is used solely by McDonald's Philippines, the McDonald's Family, and its service providers.

How Does McDonald's Share Personal Information?

We may share the Child's Personal Data with third parties to the extent reasonably necessary to protect the security or integrity of our Services, take precautions against liability, or respond to judicial process or requests from other governmental authorities; or when we believe disclosure is necessary or appropriate to prevent physical harm or financial loss, or in connection with an investigation of suspected or actual illegal activity.

We may also share Personal Data collected from the Child with vendors that perform services for McDonald's Philippines and the McDonald's Family. These services may include hosting our online Services, providing technical, marketing, advertising fulfilment or other services to GADC or the McDonald's system. Such vendors are obligated to protect the confidentiality of the Personal Data that we share with them.

Requests from Parents / Guardians Regarding Our Children's Privacy Practices

Parents and Guardians may review the Personal Data we have collected from their Child that has not been deleted, and can request that the Personal Data be deleted from our records if it has not been already. Parents and Guardians also may refuse to permit further collection or use of their Child's Personal Data, when the parent or guardian has previously provided consent. To do so, please contact us through the Contact information provided below.

Who Should I Contact with Questions?

We urge parents and guardians to regularly monitor and supervise their Child's on-line activities. If you have any questions about our Children's Privacy Notice, please contact us through the Contact information provided below.

4. Your Data Privacy Rights

You are in control of any Personal Data you submit and provide to us through our Services. We acknowledge your Data Privacy Rights which are protected under the Data Privacy Act of 2012 or R.A. No. 10173. If at any time, you would like to exercise your right to access, object, erase, block, edit, rectify, or update the Personal Data we have about you including your right to data portability, change your preferences for communications from us or on behalf of our business partners, or if you would like to withdraw or have the Personal Data that you had given or provided us deleted, you can let us know by contacting us through the Contact Information provided below or via email to dpo@ph.mcd.com.

5. Cookies

"Cookies" are pieces of information that a website transfers to an individual's hard drive for record keeping purposes. Cookies allow the website to remember important information that will make your use of the site more convenient. "Web beacon" is a small object or image that is embedded into a web page, application, or email and is used to track activity. They are also sometimes referred to as pixels and tags. Like most websites, McDonald's Philippines uses cookies or web beacons and other similar technologies for a variety of purposes in order to improve your online experience.

For example, we track the total number of users of our online Services on an anonymous aggregate basis. We may also employ cookies so that we remember you when you make a repeat use of our online Services, to keep track of transactions or items in your shopping cart if you purchase merchandise online, or your preferred items or store locations, or to administer certain contests and promotions and to help customize your experience. We may associate Personal Data with a cookie file in those instances. Your browser and other choices may impact your experiences with the online Services.

We may also collect the following information:

  • IP address;
  • Computer or mobile-device operating system and browser type;
  • Type of mobile device and settings;
  • UDID or MDID for your mobile device;
  • Advertising identifiers (for example, IDFAs and IPAs) or similar identifiers;
  • Referring website (a site that has led you to ours) or application;
  • Online activity on other websites, applications, or social media;
  • Communications to us or regarding us on social media; and
  • Activity related to how you use our online Services, such as the pages you visit on our sites or in our mobile apps.

Our online Services (and other services that we may later on develop) may collect information about the exact location of your mobile device or computer using geolocation and technology such as GPS, Wi-Fi, Bluetooth, or cell tower proximity. We may also collect information about you from other companies and organizations. We may also collect information that is publicly available.

Use the options in your web browser if you do not wish to receive a cookie or if you wish to set your browser to notify you when you receive a cookie. Click on the "Help" section of your browser to learn how to change your cookie preferences. If you disable all cookies, you may not be able to take advantage of all the features of relevant Services.

6. Links to Other Sites

We may offer links to sites that are not operated by McDonald's Philippines and/or its affiliates. If you visit one of these linked sites, you should review their privacy and other policies. We are not responsible for the policies and practices of other companies, and any information you submit to those companies is subject to their privacy policies.

We may also have providers of other apps, tools, widgets, and plug-ins on our online Services, such as Facebook "Like" buttons, which may also use automated methods to collect information about how you use these features. These organizations may use your information in line with their own policies.

7. International Data Transfers

All McDonald's Services operated by McDonald's Philippines will adhere to this Privacy Policy. However, McDonald's is a global organization with business processes, management, structures, and technical systems that cross borders. Any international data transfers will be in accordance with McDonald's Global Privacy Statement and in compliance with all applicable laws, local customs, or practices.

8. CCTV Privacy Notice

Closed-circuit television camera ("CCTV") systems are installed in all restaurants and offices (collectively, the "Premises") of McDonald's Philippines for purposes of enhancing safety and security, including:

1. preventing crime and protecting buildings and assets from damage, disruption, vandalism and other unlawful or irregular activities;

2. managing complaints from individuals and incidents at the Premises; and

3. assisting in the defense of possible litigation.

The above is not an exhaustive list and other purposes may become relevant to McDonald's Philippines' legitimate interest of safeguarding and securing our Premises.

In order to effectively monitor activities in our Premises, our CCTV systems are equipped with the following capabilities:

1. High-Resolution Cameras - ensures high visibility activities within the Premises

2. Night Vision / Infrared - allows the cameras to capture footage in low-light conditions

3. Motion Detection - triggers recording or alerts when movement is detected in designated zones.

CCTV cameras are located in the restaurants' lobby and cash registers areas, Play Places, kitchen, crew and managers' rooms (office area), and our offices' lobby/reception, corridors, and common other areas, if necessary for safety and security purposes. The camera locations are chosen to minimize viewing of spaces not relevant to legitimate purpose of the monitoring and are not focused on any areas where there is a reasonable expectation of privacy, e.g., rest rooms. In the event that we open a new restaurant of office, the CCTV systems to be installed shall be in line with this Policy.

We only retain CCTV camera footages for thirty (30) days. The recorded images are stored digitally for this period on a computer hard drive located in the managers' room, then automatically deleted by the CCTV system, unless there is a reason to retain the recorded information. The recordings as well as live feedback from CCTV cameras are only accessible by authorized McDonald's personnel and may be (a) shared or disclosed when legally required pursuant to the provisions of the Data Privacy Act of 2012 and rules and regulations issued by the National Privacy Commission, upon instructions of law enforcement authorities or a court order, or when necessary to protect the interests of McDonald's Philippines or its data subjects; and (b) retained for a longer duration if material to an on-going investigation. We will make every reasonable effort to minimize the amount of personal data contained within these incident recordings.

Pursuant to NPC Circular 2024-02, data subjects may request for reasonable access to their CCTV images, subject to reasonable Policy of the private establishment. In order to locate the relevant footage, requests for copies of recorded CCTV images must include the location, date, and time of the recording, and, if necessary, information identifying the individual subject of the request. McDonald's Philippines reserves the right to obscure images of third parties when disclosing CCTV data as part of a data subject's access request.

This Privacy Notice covers all employees, contractors, interns, workers, guests, and other visiting members of the public. By entering our premises, you consent to the recording, processing, and legitimate sharing of your information captured by our CCTV systems. The CCTV system may capture and record video footages and photographic images of you, including times and dates, while you are within and around our Premises. These footages are personal information and will be handled at all times in accordance with McDonald's Philippines' Privacy Policies.

9. Changes to our Privacy Policy

This Privacy Policy is effective as of 5 November 2024. We are committed to complying with all our legal obligations and aim to comply with all relevant laws, rules, and regulations. Thus, this Privacy Notice is subject to regular review to ensure compliance with the latest legal requirements. Changes will not be retroactively applied and will not alter how we handle previously collected information.

10. How to Contact Us

Should you wish to exercise your privacy rights or have inquiries about our privacy practices, please contact our Data Protection Officer at:

GOLDEN ARCHES DEVELOPMENT CORPORATION
17th Floor, BDO Towers Paseo
8741 Paseo de Roxas Avenue
Makati City, Philippines
Attention: Data Protection Officer
Or send an email to: dpo@ph.mcd.com