Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
This page describes what the document states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability may vary by jurisdiction. Methodology
“We may collect information that you provide to us when reporting an event related to your health as a result of an experience at Starbucks.”
“We may collect information about the precise location of your device (e.g., GPS latitude and longitude), consistent with your device settings.”
“For complaints regarding EU-U.S. DPF...compliance not resolved by any of the other DPF mechanisms, you have the possibility, under certain conditions, to invoke binding arbitration.”
“All points and rewards you have earned until the time of withdrawal will no longer be available.”
“no security system is perfect, and due to the inherent nature of the Internet, we cannot guarantee that data, including personal information, is absolutely safe from intrusion or other unauthorized access by others.”
“we do not knowingly sell or share information of our customers under the age of 18 for targeted advertising.”
Starbucks's privacy policy describes what personal data Starbucks collects about you — including your location, health information you report, and personal identifiers — and explains that it may use and share that data broadly for advertising purposes. You may have rights to see what data Starbucks holds about you and to opt out of having your information sold or shared for targeted advertising. If you leave the Starbucks Rewards program, you permanently lose all points and rewards you have earned.
This privacy policy establishes the categories of personal information Starbucks may collect — including precise device location, health-related information, and a broad set of personal identifiers such as address book contents and IP address — along with the purposes for which that information may be used and shared. Starbucks may process personal information for targeted, cross-contextual, and online behavioral advertising, and may share every category of information it collects with marketing, advertising, and analytics providers. The policy sets out conditional privacy rights, including the right to know what personal information is processed, receive a copy of it, and opt out of its sale or sharing for targeted advertising. Starbucks acknowledges it cannot guarantee absolute protection of personal information from unauthorized access, and retains liability under EU-U.S. DPF Principles for agent mishandling unless it proves non-responsibility. Withdrawal from Starbucks Rewards results in immediate and permanent forfeiture of all accumulated points and rewards.
Starbucks may collect sensitive information about you, including your precise device location and any health information you voluntarily report, as well as a wide range of personal identifiers including your address book contacts. Every category of information Starbucks collects may be shared with marketing, advertising, and analytics providers for targeted advertising. Starbucks cannot guarantee your personal information is fully protected from unauthorized access. You may have the right to know what personal information Starbucks processes about you, receive a copy of it, and opt out of the sale or sharing of your personal information for targeted advertising — to exercise that opt-out, you can contact Starbucks through the mechanism provided in the policy.
Which mapped governance frameworks each document engages, tied to the specific provisions that engage them.
We withheld clauses we had published from this document. Each withholding is recorded in our correction log:
“We may collect information that you provide to us when reporting an event related to your health as a result of an experience at Starbucks.”
“We may collect information about the precise location of your device (e.g., GPS latitude and longitude), consistent with your device settings.”
“For complaints regarding EU-U.S. DPF...compliance not resolved by any of the other DPF mechanisms, you have the possibility, under certain conditions, to invoke binding arbitration.”
“All points and rewards you have earned until the time of withdrawal will no longer be available.”
“no security system is perfect, and due to the inherent nature of the Internet, we cannot guarantee that data, including personal information, is absolutely safe from intrusion or other unauthorized access by others.”
“we do not knowingly sell or share information of our customers under the age of 18 for targeted advertising.”
“You may have the right to (1) know what personal information Starbucks processes about you...and (2) receive a copy of the specific personal information we have processed or are processing about you.”
“You may have the right to opt-out of your personal information being sold or shared for purposes of targeted advertising.”
“We may share each of the categories of information described above...with marketing, advertising and analytics providers to deliver advertising to you on behalf of Starbucks, including counting ad impressions...”
“Starbucks Corporation remains liable under the EU-U.S. DPF Principles...if an agent of Starbucks Corporation processes personal information in a manner inconsistent with the EU-U.S. DPF Principles...unless Starbucks Corporation proves that it is not responsible...”
“We may process your information to provide you with targeted advertising (also known as cross-contextual advertising and online behavioral advertising) and offers and promotions that you may be interested in.”
“We may collect information that can be used to identify you, such as your first and last name, phone number, your address book, email address, postal address, IP address, and the day and month of your birthday.”
Every distinct legal provision identified in this document. Featured provisions appear above with analysis.
We have not recorded a change to this document since we began capturing it. Monitor includes alerts from a daily check, structured change summaries, and monitoring for up to 20 platforms.
Need provision-level monitoring and regulatory mapping? Insight includes governance timelines, drift analysis, and full provision tracking.
Cross-platform context
See how other platforms handle Collection of Account Login Credentials and similar clauses.
Compare across platforms →Governance Monitoring
Structured alerts for policy changes, governance events, and provision updates across 343 platforms.