Taco Bell is a Mexican-inspired fast-food chain operated as one of four global operating divisions ("The Taco Bell Division") of publicly traded Yum! Brands, Inc. (NYSE: YUM), a North Carolina-incorporated corporation whose SEC filings individually name dozens of Taco Bell-specific subsidiary entities. Apple's App Store privacy label for the Taco Bell ordering/rewards app discloses that Purchases, Location, Contact Info, Identifiers, Usage Data, and Diagnostics are collected and linked to a user's identity, and that Contact Info, Identifiers, and Usage Data may be used to track users across apps and websites owned by other companies. Taco Bell's own terms-of-use page carries a footer link labeled "Do Not Sell or Share My Personal Information" pointing to a dedicated CCPA opt-out portal, a self-declared sale/share designation; the underlying privacy-policy text itself is served only through a client-side-rendered privacy portal that returns no static text, so it is not cited here. Yum! Brands self-disclosed via SEC Form 8-K a January 2023 ransomware attack that closed fewer than 300 UK restaurants for one day; a later 10-K risk-factor update states the data taken was limited to personal information of former and current employees, with no evidence customer databases were accessed, though the incident produced multiple employee class-action lawsuits.
TRACK RECORD
1 ENFORCEMENT ACTION
[2023-01-19]
Yum! Brands' SEC Form 8-K self-disclosed that on January 18, 2023 it announced a ransomware attack that impacted certain information technology systems, resulting in the temporary closure of fewer than 300 UK restaurants.
Apple's App Store privacy label for the Taco Bell app discloses that Purchases, Location, Contact Info, Identifiers, Usage Data, and Diagnostics may be collected and linked to a user's identity.
As assessed by PrivacySpy on 2020-06-24 (see PrivacySpy's rubric entry for this product for the per-claim citation): Does the service collect personal data from third parties? — Yes.
As assessed by PrivacySpy on 2020-06-24 (see PrivacySpy's rubric entry for this product for the per-claim citation): Does the policy outline the service's general security practices? — Somewhat.
Yum! Brands, Inc.'s SEC Exhibit 21.1 subsidiary filing individually names Taco Bell-specific corporate entities, including "Taco Bell Corp" (incorporated in California) and multiple Taco Bell Franchisor and Franchise Holder LLCs.
Yum! Brands, Inc.'s SEC Form 10-K cover page identifies it as a North Carolina corporation trading on the NYSE, and the filing describes "The Taco Bell Division" as one of the company's four disclosed operating segments alongside KFC, Pizza Hut, and Habit Burger & Grill.
Taco Bell's own terms-of-use page footer includes a link labeled "Do Not Sell or Share My Personal Information" that routes to a dedicated CCPA opt-out page, a self-declared sale/share designation under California law.
As assessed by PrivacySpy on 2020-06-24 (see PrivacySpy's rubric entry for this product for the per-claim citation): Does the policy allow personally-targeted or behavioral marketing? — Yes, but you may opt-out.
As assessed by PrivacySpy on 2020-06-24 (see PrivacySpy's rubric entry for this product for the per-claim citation): Does the policy require users to be notified in case of a data breach? — Yes, eventually.
Yum! Brands' SEC Form 8-K self-disclosed that on January 18, 2023 it announced a ransomware attack that impacted certain information technology systems, resulting in the temporary closure of fewer than 300 UK restaurants.
Yum! Brands' SEC Form 10-K states that the data taken in the January 2023 ransomware incident was limited to personal information of former and current employees, with no evidence customer databases were accessed, and that the incident produced multiple putative class-action lawsuits by employees alleging privacy violations.
Apple's App Store privacy label for the Taco Bell app discloses that Contact Info, Identifiers, and Usage Data may be used to track users across apps and websites owned by other companies.