McDonald's Privacy Policy

This document explains how McDonald's collects your personal information — including your location, your activity on other websites, and data from outside sources — and uses it to send you targeted marketing and to train its AI systems, sharing broadly within the McDonald's corporate family. You have the right to opt out of McDonald's selling or sharing your data for behavioral advertising, and you can do this automatically using a Global Privacy Control signal in your browser. If you leave the McDonald's Rewards program, you permanently lose all points and rewards you have earned.

McDonald's Privacy Policy establishes the company's practices for collecting, using, and sharing personal information across its online services and in-restaurant technology. The policy authorizes collection of geolocation data via GPS, Wi-Fi, Bluetooth, and cell tower proximity, as well as off-platform behavioral data from other websites, applications, and social media, with the option to combine these with directly provided and third-party sourced information. McDonald's uses this personal information for personalized direct marketing and targeted advertising on behalf of both McDonald's and its business partners, and to train the algorithms and AI models used in its service delivery. The policy also permits sharing of all or substantially all categories of personal information with members of The McDonald's Family, grants users the right to opt out of sale-equivalent disclosure and cross-context behavioral advertising data sharing, and processes Global Privacy Control signals as opt-out requests. Withdrawal from the Rewards program results in permanent forfeiture of all accumulated points and rewards.

As an individual user, your personal information — including precise device location and off-platform browsing and social media activity — is collected, combined, and used to deliver personalized marketing for McDonald's and its business partners, and to train McDonald's AI models. Automated profiling for personalization occurs without requiring separate notice, though automated decisions with legal effects require McDonald's to notify you separately. You may opt out of the disclosure of your personal information for consideration and the sharing of it for cross-context behavioral advertising; one concrete action you can take is to enable a Global Privacy Control signal in your browser, which McDonald's treats as an opt-out of sale and sharing.