If you live in California, you can request information about what personal data Starbucks has shared with third parties for direct marketing, including the categories of data and the names of those third parties.
This analysis describes what Starbucks's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision gives California residents a specific legal right to find out whether and how their personal data has been shared for marketing purposes, which can help them understand the scope of data sharing connected to their Starbucks account.
California residents can contact Starbucks to learn whether their personal information has been disclosed to third parties for direct marketing and, if so, the categories of data shared and the identities of those third parties.
How other platforms handle this
If you are a California resident, you may have the right to: Know what personal information we collect, use, disclose, sell, or share. Correct inaccurate personal information. Delete your personal information. Opt out of the sale or sharing of your personal information. Limit the use and disclosure ...
If you are a California resident, you have the right to know what personal information we collect, use, and disclose about you; the right to request deletion of your personal information; the right to opt out of the sale or sharing of your personal information; the right to correct inaccurate person...
Depending on where you are located, you may have certain rights regarding your personal information, including the right to access, correct, delete, or restrict processing of your personal information, the right to data portability, and the right to object to or withdraw consent for certain processi...
Monitoring
Starbucks has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"California Civil Code Section 1798.83 permits California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes.— Excerpt from Starbucks's Starbucks Terms of Use
REGULATORY LANDSCAPE: This provision is required under California Civil Code Section 1798.83 (Shine the Light law) and applies specifically to California residents; it operates alongside but is distinct from CCPA rights, which provide broader opt-out and deletion rights. Enforcement authority lies with the California Attorney General and California Privacy Protection Agency. GOVERNANCE EXPOSURE: Low. Inclusion of this disclosure reflects standard compliance practice for companies with California customers; the operational exposure is primarily in ensuring that the designated contact mechanism is functional and that responses are provided within the statutory timeframe. JURISDICTION FLAGS: Applies exclusively to California residents; non-California users do not have rights under this specific provision, though CCPA provides parallel and broader protections for California residents. CONTRACT AND VENDOR IMPLICATIONS: Vendor agreements with third-party marketing partners should include contractual obligations confirming the nature of data sharing so that Starbucks can accurately respond to Shine the Light requests. COMPLIANCE CONSIDERATIONS: Compliance teams should maintain a current record of third-party marketing data sharing arrangements and confirm that the designated contact email or mailing address for Shine the Light requests is operational and staffed to respond within the one-year lookback period required by the statute.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This provision gives California residents a specific legal right to find out whether and how their personal data has been shared for marketing purposes, which can help them understand the scope of data sharing connected to their Starbucks account.
California residents can contact Starbucks to learn whether their personal information has been disclosed to third parties for direct marketing and, if so, the categories of data shared and the identities of those third parties.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Starbucks.