If you live in California, you can request information about what personal data Starbucks has shared with third parties for direct marketing, including the categories of data and the names of those third parties.
This analysis describes what Starbucks's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision gives California residents a specific legal right to find out whether and how their personal data has been shared for marketing purposes, which can help them understand the scope of data sharing connected to their Starbucks account.
California residents can contact Starbucks to learn whether their personal information has been disclosed to third parties for direct marketing and, if so, the categories of data shared and the identities of those third parties.
How other platforms handle this
If you are a California resident, you may have certain rights under the California Consumer Privacy Act (CCPA). These rights may include: the right to know about personal information collected, disclosed, or sold; the right to delete personal information collected from you; the right to opt-out of t...
California law gives residents the right to know what personal information we collect, use, share or sell; to delete personal information under certain circumstances; to opt-out of the sale or sharing of their personal information; to correct inaccurate personal information; to limit the use and dis...
If you are a California resident, you have the right to know what personal information we collect, use, disclose, and sell about you. You have the right to request deletion of your personal information, subject to certain exceptions. You have the right to opt out of the sale or sharing of your perso...
Monitoring
Starbucks has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"California Civil Code Section 1798.83 permits California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes.— Excerpt from Starbucks's Starbucks Terms of Use
REGULATORY LANDSCAPE: This provision is required under California Civil Code Section 1798.83 (Shine the Light law) and applies specifically to California residents; it operates alongside but is distinct from CCPA rights, which provide broader opt-out and deletion rights. Enforcement authority lies with the California Attorney General and California Privacy Protection Agency. GOVERNANCE EXPOSURE: Low. Inclusion of this disclosure reflects standard compliance practice for companies with California customers; the operational exposure is primarily in ensuring that the designated contact mechanism is functional and that responses are provided within the statutory timeframe. JURISDICTION FLAGS: Applies exclusively to California residents; non-California users do not have rights under this specific provision, though CCPA provides parallel and broader protections for California residents. CONTRACT AND VENDOR IMPLICATIONS: Vendor agreements with third-party marketing partners should include contractual obligations confirming the nature of data sharing so that Starbucks can accurately respond to Shine the Light requests. COMPLIANCE CONSIDERATIONS: Compliance teams should maintain a current record of third-party marketing data sharing arrangements and confirm that the designated contact email or mailing address for Shine the Light requests is operational and staffed to respond within the one-year lookback period required by the statute.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This provision gives California residents a specific legal right to find out whether and how their personal data has been shared for marketing purposes, which can help them understand the scope of data sharing connected to their Starbucks account.
California residents can contact Starbucks to learn whether their personal information has been disclosed to third parties for direct marketing and, if so, the categories of data shared and the identities of those third parties.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Starbucks.