The notice discloses that Ekata, Inc., a fraud prevention supplier, receives Starbucks customer information and processes it as an independent data controller, meaning Ekata's own privacy notice governs how that data is used rather than this Starbucks notice.
This analysis describes what Starbucks's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes that a named third party receives customer personal information and operates as a controller rather than a processor, meaning Starbucks' contractual data processing obligations do not govern Ekata's downstream use of that data, and customers must consult a separate privacy notice to understand how their information is used by Ekata.
Under this clause, personal information shared with Ekata, Inc. for fraud prevention is governed by Ekata's own privacy policy rather than the Starbucks Privacy Notice, and Ekata may use that data for its own purposes including for the benefit of other clients beyond Starbucks.
Cross-platform context
See how other platforms handle Ekata, Inc. as Independent Data Controller and similar clauses.
Compare across platforms →"One such supplier is Ekata, Inc., which uses the information as a controller for the benefit of Starbucks and others in accordance with its privacy notice located at https://ekata.com/privacy-policy/Excerpt from Starbucks's Privacy Policy
1.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision establishes that a named third party receives customer personal information and operates as a controller rather than a processor, meaning Starbucks' contractual data processing obligations do not govern Ekata's downstream use of that data, and customers must consult a separate privacy notice to understand how their information is used by Ekata.
Under this clause, personal information shared with Ekata, Inc. for fraud prevention is governed by Ekata's own privacy policy rather than the Starbucks Privacy Notice, and Ekata may use that data for its own purposes including for the benefit of other clients beyond Starbucks.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Starbucks.