PRIVACY POLICY

This Privacy Policy is effective as of January 1, 2023.

Please carefully read this Privacy Policy applicable to the Carl's Jr.® Website and any website controlled by Carl's Jr. which link to this Privacy Policy (referred to, individually and collectively, as the "Website").

Notice to California Residents: Please visit our SPECIAL PRIVACY POLICY FOR CALIFORNIA RESIDENTS for more information on our data collection practices.

BY USING THIS WEBSITE, YOU AGREE TO BE BOUND BY THIS ONLINE PRIVACY POLICY. IF YOU DO NOT AGREE TO THIS ONLINE PRIVACY POLICY, DO NOT USE THE WEBSITE OR SUBMIT PERSONAL INFORMATION TO US IN ANY MANNER.

Carl's Jr. Restaurants LLC and its parents, subsidiaries, franchisees and affiliates, and their respective stockholders, directors, officers, employees, agents, successors and assigns (collectively, "Carl's Jr.") is very sensitive to the privacy concerns of the visitors to its site on the Internet. This Privacy Policy (this "Privacy Policy") outlines the types of Personal Information that you may provide to us on any website controlled by Carl's Jr. which link to this Privacy Policy (referred to, individually and collectively, as the "Website") and explains how Carl's Jr. handles such Personal Information. This Privacy Policy does not apply to personal information collected from you offline, to websites that do not link to this Privacy Policy or to third-party websites to which the Website may link. Your use of the Website is subject to this Privacy Policy and the applicable Website terms and conditions (capitalized terms set forth but not otherwise defined herein have the meanings ascribed thereto in the Website terms and conditions).

Definition of "Personal Information"

"Personal Information" means information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly with a particular visitor or consumer and which is submitted to and/or collected by the Website and maintained by Carl's Jr. in an accessible form, and includes information actively submitted by you and passively-collected information, as described below.

Collection of Personal Information Online

E-mail addresses and other Personal Information of visitors, such as a first and last name, home or other physical address or telephone number, are known to Carl's Jr. only when voluntarily submitted, for example, via online orders, registration for sweepstakes or contests, content submissions, suggestions or participation in online interactive activities. For example, you may submit your name, postal address, e-mail address, and/or other information in order to receive information about various subjects, register for programs, contact customer service, or respond to surveys. Certain non-personal information of visitors is recorded by the standard operation of Internet servers of Carl's Jr. Information tracked includes the visitor's type of operating system (e.g., iOS, Android, Windows) and the type of browser (e.g., Internet Explorer, Chrome, Firefox, Safari). Like many other websites, Carl's Jr. makes use of log files. The information inside the log files includes internet protocol (IP) addresses, type of browser, Internet Service Provider (ISP), date/time stamp, referring/exit pages, and number of clicks to analyze trends, administer the site, track user's movement around the site, and gather demographic information, IP addresses, and other such information. In addition, certain Personal Information may be collected using various technologies, such as cookies, Internet tags, and web beacons. As detailed more particularly below, the Website does use cookies to track visitor preferences. Collectively, this information is primarily used to provide an enhanced online experience for the visitor. Other uses of this information include internal review of the number of visitors to the site, but only in an aggregate and non-personally identifiable form.

Use of Personal Information

Personal Information may be shared by Carl's Jr. with its affiliates (including Carl's Jr. Restaurants LLC) and its and their respective franchisees, and with vendors that help access and manage the information (all of the foregoing are hereinafter referred to collectively as "authorized recipients"), but in all instances the information will be used only for the purposes described in this Policy. Specifically, this information may be used: (1) to help Carl's Jr. better understand visitors' use of the Website and its products and services; (2) to respond to specific requests from visitors; (3) to provide notices to visitors, such as marketing information, discount coupons and new product offerings; and (4) to protect the security or integrity of the site. In addition, certain Personal Information may be submitted through online forms on the Website necessary to provide services offered by the Website. After you have entered Personal Information into a form or data field on the Website, Carl's Jr. may use certain identifying technologies to allow the Website to "remember" your personal preferences, such as sections of the Website that you use frequently. Carl's Jr. may also use this Personal Information for other business purposes, such as to offer you the opportunity to receive notices regarding Carl's Jr. products or services, to invite you to participate in surveys about our products, or to notify you about special promotions.

Limitations on Collection of Personal Information

You may always limit the amount and type of actively-transmitted Personal Information that Carl's Jr. receives about you by choosing not to enter any Personal Information into forms or data fields on the Website. However, some online services can only be provided to you if you provide appropriate Personal Information. Other parts of the Website may ask whether you wish to opt out or opt in to contact lists for offers, promotions and additional services that may be of interest to you. You may also be provided with preference questions or preference boxes allowing you to indicate that you do not want the Website to use tracking technologies, such as cookies, to "remember" your Personal Information, such as user IDs or mailing addresses, on return visits. Some Internet browsers allow you to limit or disable the use of tracking technologies that collect passively-transmitted information. More detailed information about cookie management or other passive transmissions by specific web browsers can be found at the browser's respective websites.

Transmission of Personal Information

If Carl's Jr. sells one of its product lines or divisions, Personal Information may be transferred to the buyer so that the buyer can continue to provide you with information and services. Carl's Jr. reserves the right to disclose Personal Information to respond to authorized information requests from government authorities, to address national security situations, or when otherwise required by law, in Carl's Jr.'s sole discretion.

Google Analytics

Carl's Jr. has implemented certain features of Google Analytics advertising features for the Website, including Remarketing with Google Analytics, Google Display Network Impression Reporting, Google Analytics Demographics and Interest Reporting and Integrated services that require Google Analytics to collect data via advertising cookies and anonymous identifiers. As a part of these programs, Google, as a third party vendor, makes use of certain cookies and anonymous identifiers to serve ads on the Website and to provide certain behavioral, demographic and interest data with third parties. Google's use of these cookies enables it to serve ads to users based on their visit to the Website and other sites on the Internet.

Users may opt out of the use of the Google Analytics advertising features through Google Ads Settings (see https://www.google.com/settings/ads/plugin), Google Ad Settings for mobile apps, the Google Analytics Opt-out Browser Add-on (available at https://tools.google.com/dlpage/gaoptout/), or other available means, such as the Network Advertising Initiative Opt Out Tool (available at http://www.networkadvertising.org/choices/).

Use of Cookies and Other Technologies

To provide you with a more relevant and interesting experience, we may participate in behavioral-based advertising. This means that Carl's Jr. and/or one of our vendors may place a cookie on your browser, or use a web beacon, to collect information about your use of our website so that Carl's Jr. and/or a third party can provide advertising about products and services tailored to your interest (including, without limitation, products and services offered by Carl's Jr. and its affiliates). These ad servers or ad networks use technology to the advertisements and links that appear on the Website sent directly to your browser. They automatically receive your IP address when this occurs. Other technologies (such as cookies, JavaScript, or web beacons) may also be used by the third-party ad networks to measure the effectiveness of their advertisements and/or to personalize the advertising content that you see. Carl's Jr. has no access to or control over these cookies that are used by third-party advertisers. You should consult the respective privacy policies of these third-party ad servers for more detailed information on their practices as well as for instructions about how to opt-out of certain practices. This Privacy Policy does not apply to, and Carl's Jr. cannot control the activities of, such other advertisers or websites.

Some of these ad server or ad network companies may be participants in the Digital Advertising Alliance ("DAA"). The DAA offers a choice mechanism with respect to certain types of data collection and use. We adhere to the DAA's Self-Regulatory Principles for Online Behavioral Advertising. Visit www.aboutads.info to exercise choice with respect to participants of the DAA. If you would like to opt-out from having the behavioral-based advertising companies with whom we have a relationship use your Personal Information for advertising purposes you can do so by visiting the Network Advertising Initiative or Digital Advertising Alliance. If you change computers, devices, or browsers, use multiple computers, devices, or browsers, or delete your cookies, you may need to repeat this process for each computer, device, or browser.

When you view this site, Carl's Jr. may temporarily store some information on your computer. This information may be in the form of "cookies" or other web beacons to store information about visitors' preferences, to record user-specific information on which pages a visitor accesses or visits, and customize web page content based on visitors' browser types or other information that a visitor sends via their browser or other means. Passive information collection technologies such as cookies can make your use of the Website easier by allowing Carl's Jr. to provide better service, customize web pages based on consumer preferences, compile statistics, analyze trends, and otherwise administer and improve the Website. With most Internet browsers, you can erase cookies from your computer hard drive, block all cookies, or receive a warning before cookies are stored. Please refer to your browser instructions or help screen to learn more about these functions. Please note certain features of the Website may not work if you disable or erase these cookies.

Website Cookie Options

Do-Not-Track

Currently, our servers do not respond to browser ‘do-not-track' signals. If you are in California, you can view our Special Privacy Policy for California Residents to learn more about our recognition about other signals.

Security of Personal Information

Carl's Jr. makes an effort to ensure that Personal Information is protected while you are on the Website. However, the confidentiality of Personal Information transmitted over the Internet cannot be guaranteed. We urge you to exercise caution when transmitting Personal Information over the Internet

Links to Other Sites

The Website may contain links to sites operated by others, who maintain their own policies about the collection, use and security of Personal Information. Carl's Jr. is not responsible for the manner in which others use your Personal Information. Before providing Personal Information to any other site, you should read its privacy policy and terms of use. Notwithstanding any content on the Website indicative of the contrary, Carl's Jr. makes no endorsement of or representation about any such websites, or any information, software, or other products or materials found there, or any results that may be obtained from using them.

If you decide to access any site linked to in this Website, you do so entirely at your own risk. Carl's Jr. does not guarantee that you will receive an alert when you leave the Website, and it is your responsibility to determine when you have left the Website. Carl's Jr. assumes no responsibility for and shall not be liable for the privacy, terms of use, or other policies of any third party website, any damage to, or viruses that may infect your computer equipment or other property, or for any loss or corruption of data resulting from any third party site navigated to or accessed from links hosted on or available on the Website.

Personal Information Related to Children

Carl's Jr. does not intend to, or knowingly, collect, use, or disclose Personal Information (including online contact information) of children under the age of 13. If Carl's Jr. becomes aware of a child under the age of 13 providing Personal Information, we will attempt to delete that information. If you believe your child has provided us with Personal Information, please contact us so it can be deleted.

Acceptance of Privacy Terms and Conditions

Your access to and use of the Website is subject to this Privacy Policy and all applicable laws. By accessing and browsing this Website, you consent, without limitation or qualification, to the collection of your Personal Information pursuant to this Privacy Policy. Carl's Jr. may revise this Privacy Policy at any time. If Carl's Jr. changes its privacy practices, a new Privacy Policy will reflect those changes and the effective date of the revised Privacy Policy will be set forth in this Privacy Policy. You are bound by any such revisions and should therefore periodically visit this page to review the then-current privacy terms and conditions to which you are bound.

Your Choices

If you would like to delete or amend your Personal Information and are contacting us by e-mail, please put "Deletion Request" or "Amendment Request", as applicable, in the subject line of the e-mail. We will do our best to respond to all reasonable requests in a timely manner.

Notice to Nevada Residents

Nevada law allows consumers to direct certain businesses not to sell their personally identifiable information to third parties to license or sell that information to additional third parties. If you are a Nevada resident, you may submit such opt-out request through our webform at http://privacy.ckr.com To be effective, your request must include your full name, address, phone number, and email address. Carl's Jr. will endeavor to respond to your verified request within 60 days of receiving the request. However, due to unforeseen circumstances, Carl's Jr. may need to extend this period by up to 30 days. If an extension is reasonably necessary, Carl's Jr. will notify you of this during the initial 60-day period.

Notice to Virginia Residents

This Section supplements the other parts of our Privacy Policy, and provides additional information for Virginia consumers, including how to exercise their rights under the Virginia Consumer Data Protection Act ("VCDPA"). Terms defined in the VCDPA that are used in this section shall have the same meaning as in the VCDPA.

Additional Information about Certain Data Uses

• Targeted Advertising. We may process your Personal Information for targeted advertising. To opt out, please submit a request through our webform at http://privacy.ckr.com
• Sales of Personal Data. We do not sell (exchange for monetary consideration) your Personal Information under VCDPA.

Making a Privacy Rights Request

If you are a resident of Virginia, you have the right to submit certain requests relating to your Personal Information as described below. To exercise any of these rights, please submit a request through our webform at http://privacy.ckr.com. Please note that we will need to authenticate your identity before your request can be processed. For authentication, you will be asked to log into your account or to provide 2-3 pieces of Personal Information that we will match against our records.

Right to Access and Data Portability. You have the right to confirm whether we are processing your Personal Data, to access your Personal Data, and to obtain a copy of Personal Data you provided to us in a portable format.

Right to Correct. You have the right to request that we correct inaccuracies in your Personal Data, taking into account the nature of the Personal Data and our purposes for processing it.

Right to Delete. You have the right to request that we delete your Personal Data.

Right to Opt Out. You have the right to opt out of the following uses of your Personal Data: (a) targeted advertising; (b) the sale of Personal Data; and (c) profiling in furtherance of decisions that produce legal or similarly significant effects. We do not engage in practices that are considered profiling under the VCDPA.

Right to Appeal. Sometimes we are unable to process requests relating to your Personal Data, in which case, your request will be denied. If you are a resident of Virginia whose privacy rights request has previously been denied by us and you believe we denied it in error, you may appeal for reconsideration of your request using our webform.

Please note that if you make a privacy rights request, we will retain the Personal Information submitted in connection with your request for recordkeeping purposes

Contact Us

If you have questions or concerns with respect to our Privacy Policy, please contact us via email at [email protected] or by mail at:

6700 Tower Circle, Suite 1000
Franklin, TN 37067