Skip to content
Starbucks
SHOPPING & RETAIL
LAST UPDATED 1 SEP 2026

WHAT THE POLICIES SAY

Starbucks Corporation is a Nasdaq-listed (SBUX), Washington-incorporated coffee retailer whose Starbucks App and Rewards loyalty/stored-value program are central to its business. Starbucks' own privacy notice discloses Bluetooth-based in-store proximity detection, in-store camera/CCTV collection, and sharing of customer data with 'marketing, advertising and analytics providers' for personalized advertising, and a separate CCPA disclosure page states that this advertising-partner sharing 'may be deemed a "sale" or "sharing"' under applicable privacy law even though Starbucks says it does not sell data for money. Apple's App Store privacy label confirms Identifiers are used to track users across apps and websites owned by other companies, and that Financial Info, Precise Location, and other data are collected and linked to identity for advertising and personalization. Corporate ownership is traceable through routine SEC 10-K and EDGAR filings naming Starbucks Corporation as a Washington corporation. No specific data-breach, FTC action, or state-AG settlement was identified from a primary source as of this review; Starbucks' 10-K discloses only a general cybersecurity-incident-response governance process, not an admitted incident.

TIMELINE

NO ENTRIES ON FILE YET.

TOOLS WE RECOMMEND

PLUS

RECEIPTS

9 ON FILE
COLLECTION
Apple's App Store privacy label for the Starbucks app discloses that Financial Info (Payment Info) and Precise Location are collected and linked to a user's identity for purposes including advertising, analytics, and product personalization.
apps.apple.com ↗
COLLECTION
Starbucks' privacy notice discloses using Bluetooth-based location technology to detect the presence of customer devices in and around its retail stores, independent of whether the customer is actively using the app.
starbucks.com ↗
OWNERSHIP TRANSPARENCY
SEC EDGAR's company filing index independently confirms Starbucks Corporation's registrant name and state of incorporation as Washington, corroborating the 10-K cover-page disclosure via a separate mandatory public filing system.
sec.gov ↗
[2025-11-14] · OWNERSHIP TRANSPARENCY
Starbucks Corporation's SEC Form 10-K cover page identifies it as a Washington-incorporated company with a listed IRS Employer Identification Number, filed as part of its mandatory annual regulatory disclosures.
sec.gov ↗
SHARING
Starbucks' privacy notice discloses sharing customer information with marketing, advertising, and analytics providers to deliver personalized advertising, including counting ad impressions and creating ad audiences based on customer activity both on Starbucks services and on third-party services.
starbucks.com ↗
SHARING
Starbucks' CCPA disclosure page states that although it does not sell personal information for money, its sharing of personal information with some advertising partners may itself be deemed a legal 'sale' or 'sharing' for targeted-advertising purposes under applicable privacy laws.
starbucks.com ↗
[2025-11-14] · TRACK RECORD
Starbucks' 10-K discloses that it maintains a formal cybersecurity incident response plan and a dedicated cross-functional incident response team, general governance disclosure rather than an admission of any specific past data-privacy incident, breach, or regulatory action.
sec.gov ↗
TRACKING TECH
Apple's App Store privacy label for the Starbucks app confirms that Identifiers may be used to track users across apps and websites owned by other companies.
apps.apple.com ↗
TRACKING TECH
Starbucks' privacy notice discloses using a broad set of first- and third-party tracking technologies across its website and app, including cookies, web beacons, pixels, JavaScript, entity tags, and HTML local storage.
starbucks.com ↗
LAST REVIEWED 2026-09-01 · METHODOLOGY v1.7