Chick-fil-A is a privately held, family-owned fast-food chain (legal IP holder CFA Properties, Inc.) with founder S. Truett Cathy's grandson Andrew Cathy now serving as CEO; the company's own 'Family-Owned Restaurant Business' page states the Cathy family has run the business together for over 70 years. Chick-fil-A's website hosts its privacy policy, California privacy policy, and cookie policy text through a OneTrust consent-management widget that renders client-side, so the underlying policy body text could not be fetched or quoted live in this research despite repeated attempts (direct fetch, Wayback, and OneTrust API guesses all returned the same unrendered shell or errors); the legal footer itself is server-rendered and confirms a 'Do Not Sell or Share My Personal Information' control (a OneTrust toggle, not a standalone page) alongside the other privacy links. The source gap on policy body text is flagged for the human reviewer rather than treated as an absence of a policy. The Chick-fil-A iOS App Store privacy label, fetched directly from Apple, discloses that Purchase History, Contact Info, Identifiers, Usage Data and Product Interaction data are collected and linked to identity and used for the developer's own advertising/marketing and analytics, without declaring an App Store 'Data Used to Track You' (cross-app tracking) category. No breach, regulator action, or independent audit was found in this research.
TIMELINE
NO ENTRIES ON FILE YET.
TOOLS WE RECOMMEND
PLUS
RECEIPTS
5 ON FILE
COLLECTION
The Chick-fil-A iOS App Store privacy label states that data linked to the user's identity may be collected, including Purchase History, Contact Info (Physical Address, Email Address, Name, Phone Number), Precise and Coarse Location, Financial Info (Payment Info), Identifiers, User ID, Usage Data and Product Interaction, used for the developer's own advertising/marketing, analytics, customer support and app-functionality purposes.
Chick-fil-A's own 'Family-Owned Restaurant Business' company page states the business is still a family business, with founder S. Truett Cathy's grandson Andrew serving as CEO, and that the Cathy family has been working together in the company for over 70 years, with several second- and third-generation family members carrying on the tradition; the same page's copyright footer names the legal entity operating the site as CFA Properties, Inc., distinct from the consumer-facing 'Chick-fil-A' brand name.
Chick-fil-A's website legal footer, present across its privacy pages, includes a 'Do Not Sell or Share My Personal Information' control (a OneTrust preference-center toggle) alongside a California privacy policy and cookie preference center; under CCPA regulations this specific opt-out mechanism is required only of businesses that self-classify as selling or sharing personal information for cross-context behavioral advertising.
Chick-fil-A's website legal footer confirms the operator maintains a structured privacy-rights program, including a California privacy policy, a cookie preference center, a cookie and interest-based-advertising policy, and a do-not-sell/share opt-out control; no independent security audit, transparency report, breach disclosure, or regulator action was found in this research.
The same App Store privacy label lists Identifiers, User ID, Usage Data and Product Interaction as used for the developer's own Advertising or Marketing and for Analytics purposes when linked to identity; the label does not disclose a 'Data Used to Track You' category, the App Store designation for cross-app/cross-website tracking via third-party ad networks.