McDonald's states it retains personal information for the duration necessary to fulfill stated purposes, comply with legal obligations, resolve disputes, and enforce agreements, without specifying defined retention periods for particular data categories.
This analysis describes what McDonald's's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes a purpose-based retention standard without specifying retention periods for individual data categories, which may present compliance considerations under GDPR's storage limitation principle and US state privacy laws that require defined retention schedules.
Interpretive note: The provision does not specify retention periods for individual data categories; compliance with GDPR and CPRA disclosure requirements depends on whether country-specific addenda provide sufficient supplementary specificity.
Under this clause, McDonald's retains personal information for as long as necessary for the purposes described in the policy, including personalization, relationship management, legal compliance, and dispute resolution. No specific retention timelines are defined for particular data categories in the global section.
How other platforms handle this
Affirm will retain your information in accordance with our Privacy Policy and any applicable state or federal law, rule or regulation.
We collect and keep personal data only as needed or allowed for the purposes set out in this Statement, based on the reason we collected the personal data in the first instance and what is permitted under the laws that apply to the processing.
Mistral AI shall retain the Customer Exportable Data and Assets for a period of thirty (30) days from the earlier between (a) the expiration of the Transitional Period or (b) Customer's notification under Section 2.2.2 (b) of these Additional Terms.
"Unless a specific retention period is mandated or permitted under applicable law, McDonald's will only retain personal information for the duration of time necessary to fulfill the purposes described in this Statement, including the applicable country-specific addendum. Our records policies reflect applicable laws. We will retain and use your information to the extent necessary to manage your relationship with us, personalize and improve your overall customer experience, and to comply with our legal obligations (for example, if we are required to retain your information to comply with applicable tax/revenue laws), resolve disputes, enforce our agreements, and as otherwise described in this Statement.Excerpt from McDonald's's Privacy Policy
1.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision establishes a purpose-based retention standard without specifying retention periods for individual data categories, which may present compliance considerations under GDPR's storage limitation principle and US state privacy laws that require defined retention schedules.
Under this clause, McDonald's retains personal information for as long as necessary for the purposes described in the policy, including personalization, relationship management, legal compliance, and dispute resolution. No specific retention timelines are defined for particular data categories in the global section.
ConductAtlas has identified this type of provision across 274 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by McDonald's.