Starbucks uses your purchase history and behavioral data to build a detailed profile about your preferences and characteristics, which is then used to target you with personalized marketing.
This analysis describes what Starbucks's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The explicit acknowledgment of profiling that infers psychological trends, predispositions, and aptitudes from retail purchase data is notably broad and represents one of the more expansive profiling disclosures in consumer retail privacy notices.
Your Starbucks purchase history, app behavior, and other data points are used to build an inferred profile that can include psychological and behavioral characteristics, which then drives the personalized offers and ads you receive. California residents can request access to these inferred categories and request deletion of this profile data.
How other platforms handle this
We may also collect your personal data from other people or companies.
At Ledger, earning and maintaining our users' trust is a top priority. That's why we are deeply committed not only to protecting your privacy and securing your personal data, but also to being fully transparent about how we handle it.
If you are located in the European Economic Area, Switzerland, or the United Kingdom, you have the right to access, correct, or erase your personal data; the right to restrict or object to our processing of your personal data; the right to data portability; and, where our processing is based on your...
Monitoring
Starbucks has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"We draw inferences from the information we collect about you to create a profile reflecting your preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. These inferences are used to personalize your experience and provide you with targeted marketing and offers.— Excerpt from Starbucks's Starbucks Privacy Policy
(1) REGULATORY LANDSCAPE: The CPRA expressly defines inferences drawn to create a consumer profile as a category of personal information subject to access, deletion, and correction rights. The California Privacy Protection Agency has signaled that profiling activities, particularly those involving sensitive inferences, are a regulatory priority. Emerging state privacy laws in Colorado, Texas, and Connecticut also address automated profiling and may require disclosure of logic and opt-out rights for significant decisions. (2) GOVERNANCE EXPOSURE: Medium. Profiling for marketing personalization is common in retail loyalty programs. However, the explicit characterization of inferred attributes as including psychological trends and aptitudes represents a notably broad disclosure that may draw regulatory scrutiny regarding the accuracy and proportionality of such inferences in a retail coffee context. (3) JURISDICTION FLAGS: California CPRA gives consumers the right to access and request correction of inferences held about them. Colorado's privacy law requires opt-out rights for profiling used in decisions that produce legal or similarly significant effects. The breadth of the profiling disclosure creates multi-state compliance obligations as additional state laws come into force. (4) CONTRACT AND VENDOR IMPLICATIONS: Third-party analytics vendors involved in building or processing consumer profiles should be assessed for compliance with permissible use restrictions. If profiling models are built using third-party data enrichment, the data sourcing and consent chain should be audited. (5) COMPLIANCE CONSIDERATIONS: Legal teams should assess whether the categories of inferences described in the notice are proportionate to the underlying retail data collected and whether the stated purposes are consistent with consumer expectations. Access request workflows should be configured to include inference data in responsive disclosures. Deletion request handling should address whether inferred profile data is purged alongside source data.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
The explicit acknowledgment of profiling that infers psychological trends, predispositions, and aptitudes from retail purchase data is notably broad and represents one of the more expansive profiling disclosures in consumer retail privacy notices.
Your Starbucks purchase history, app behavior, and other data points are used to build an inferred profile that can include psychological and behavioral characteristics, which then drives the personalized offers and ads you receive. California residents can request access to these inferred categories and request deletion of this profile data.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Starbucks.