PAPA JOHNS PRIVACY NOTICE

Effective Date January 1, 2012 (Last updated August 1, 2024)

APPLICABILITY

This Notice describes how we treat personal information. It applies to the practices on the websites and apps where it appears. It does not apply in other situations. This includes your relationship with us as an employee.

NOTICE AT COLLECTION

Information We Collect

We collect the information listed below.

• Contact information. We collect names and addresses. We also collect phone numbers and email addresses. We may share this information for cross-contextual advertising.
• Account information. When you create an account, you provide us with a password. You can also provide your month and day of birth.
• Payment information. We or our vendors collect payment information if you make a purchase. This includes credit or debit card numbers and security codes.
• Transaction data. We collect information about purchases. This includes amount purchased and the time and day of your purchase. We also keep track of whether you used a discount or promotion code. We also collect information about your favorite orders and food preferences. We also collect loyalty participation information.
• Information you submit or post. We collect information that you post on our site. This includes public comments. We may also collect survey response information.
• Location information. We approximate location based on your IP address. We may also collect app geo-location data.
• Site and device information. We collect log and session data. We also collect browser and operating system information. We may collect IP addresses or device identifiers. This may include precise location information if those settings are turned on in your phone. We also collect what site you came from or what site you visit when you leave us. We may also collect information about your interactions with our emails and advertisements.
• Employment and professional information. We collect information about education and work history from job applicants and potential franchisees. We may also ask them about their skills and qualifications. We may ask about ability to perform a position. If you are interested in becoming a franchisee, we also ask information about the companies you own and the locations where you would like to develop a franchise.
• Social media activity. We may collect information about you from social media. This includes when you follow us or share our content. The information we collect depends on your privacy settings with the social network.
• Audio and visual information: We may collect information from in-store security videos. We may collect information from customer service audio calls.
• Inferences drawn from above categories: We may generate inferences based on your preferences or behaviors. We may also generate inferences based on your purchasing activity.

Business Purposes for Information Use

We use information as disclosed and described here.

• Delivering products and providing services to you. We use your information to complete and deliver your orders. We also use your information to process payments. We may also use your information to maintain your account and run our loyalty program. We may also use your location information to help you find a store near you.
• Communicating with and responding to you. We use information to answer questions or respond to feedback. This includes questions about franchise operations or job opportunities. It also includes providing you with customer service. We will also contact you about this policy or our terms. We will also contact you about your orders or rewards. We may provide you with technical notices or security alerts.
• Improving products and platforms. We use your information to improve our platforms and products or your experience with us. This may include customizing our platforms for you. We also use your information to maintain accounts or perform services.
• Marketing and promotions. We may provide you with new products and offers. This may be about our products or others in which we think you may be interested. We might also tell you about new platform features. We may communicate by email or text. We may also provide this information on social media platforms. We may also send you push notifications. We may use inferred interests in order to deliver advertising content to you. This might include reviewing your order purchase history.
• Protecting our company and constituents. We use information to protect our company and customers. We also use information to identify fraud and secure our systems. We will also use information to comply with the law. This includes responding to law enforcement or regulatory requests.
• We use all categories of information for other purposes as permitted by law or as we may notify you.

Sensitive Information

We do not use or disclose sensitive information, as that term is defined by California law, for inferring characteristics or for reasons other than those permitted by law. These legal purposes include using the information to prevent security incidents or stopping fraudulent acts. It also includes using the information to protect someone.

How Long We Keep Information

We keep information for as long as necessary or relevant. We also keep information as required by law.

More Information

For more information about our privacy practices, read the rest of our Privacy Notice, below.

HOW WE COLLECT INFORMATION

We collect information directly from you. We collect personal information when you contact us. This includes when you create an account or place an order. This also includes when you visit our store locations. It includes when you communicate with us or participate in our loyalty program. It also includes when you call us, where we may record calls as permitted by law.

We collect information passively.  We collect information through tracking tools over time and across different websites and apps. These tools include cookies and pixels. To learn more about cookies visit the FTC's Online Tracking page. We may do this on our websites and in emails that we send to you. We may have third parties collect personal information this way.

We collect information about you from others. Social media platforms may give us information about you. We may also collect information from data sellers to enhance or supplement information you give us. We may also get information about you from our franchisees or other business partners. This includes delivery services. We may also get information about you from digital advertising networks.

WE COMBINE INFORMATION

We combine information that we have collected offline with information we collect online. We also combine information collected across devices. This might include information collected from computers with that collected on mobile devices. We also combine information that we get from others with information we already have.

SECURITY MEASURES

We use reasonable security measures as required by law. The Internet is not 100% secure. We cannot promise that your use of our sites or apps will be completely safe. We encourage you to use caution when using the Internet. This includes not sharing your passwords.

INFORMATION STORAGE

Information we collect may be stored in the United States. Our platforms are intended for people who are in the United States. If you live outside of the United States and choose to use our platforms, you understand that it is at your own risk. You also understand that your information will be sent to the United States. The United States may not afford the same level of protection as laws in your own country.

WHEN WE DISCLOSE INFORMATION

Below are times when we may disclose your information. We have also indicated the categories of entities to whom we may disclose information.

• We disclose information to our affiliates and to our franchisees. We disclose all categories of information to manage daily operations and pursue our business interests. This includes to complete your orders and process your payments. We may also disclose information to them so you can receive local offers and promotions that might interest you. The entities we disclose to include all entities within the Papa John’s family of companies.
• We share information for cross-contextual behavioral advertising. This includes online ads targeted to your interests. The Notice at Collection (above) outlines which categories of information we share for this reason.
• We disclose information to vendors who perform services on our behalf. We may disclose all categories of information with trusted service providers. This includes IT vendors like site hosting and maintenance companies. This also includes vendors who help us send email communications or deliver products. It also includes payment processors or fraud prevention companies. We may also disclose information to data analytics companies or marketing agencies.
• We disclose information to our promotional partners. We may provide contact information to third parties who co-sponsor a promotion. These partners may send you information about events and products.
• We disclose information to comply with the law or to protect ourselves. We disclose all categories of information to respond to a court order or subpoena. We also disclose this information in response to a government agency or investigatory body request. We may also disclose this information to investigate potential fraud or to enforce our policies and terms. We may make these disclosures where we have a good faith belief that we are required to make a disclosure.
• We will transfer information with successors to all or part of our business. If all or part of our business is sold, we may transfer all categories of information as part of that transaction. If there is a merger or acquisition, we will do this as well.
• We may disclose information for other reasons we may describe to you. We will also disclose information as otherwise permitted by law.

Additional information for residents of certain states: California and Nevada law require that we tell you if we sell personal information with a third party for monetary or (in California) other valuable consideration. We do not do this. We also do not sell personal information of minors under the age of 16 for monetary or other valuable consideration.

YOUR RIGHTS AND CHOICES

Marketing Choices

You may opt out of receiving marketing emails you receive from us. To do so follow the instructions in the message you receive. You will still receive our transactional communications.

Cookies and Tracking Tools

We collect personal information about users over time and across different websites. We also serve content on our platform or third-party platforms based on your behaviors and interests. We also have vendors that do this. To do this, we use common tracking tools. These may include browser cookies or web beacons. We may also use flash cookies and similar technologies.

• You can control cookies and tracking tools. Your browser may give you the ability to control cookies or other tracking tools. How you do so depends on the type of tool. Certain browsers can be set to reject browser cookies. If you block cookies, certain features on our Sites may not work. If you block or reject cookies, not all the tracking described here will stop. To learn more about these please read our Papa Johns Cookies and Ads Notice.
• Our Do Not Track Policy. Some browsers have “do not track” features that allow you to tell a website not to track you. These features are not all uniform. Included in our Cookies and Ads Notice is our Do Not Track Policy.
• Cross-contextual behavioral advertising. These ads include ones based on your digital activities. To opt out, read our Notice of Right to Opt-out of Sharing below. You can also manage preferences with tools from the Self-Regulatory Program for Online Behavioral Advertising. To manage online preferences here. To manage mobile choices, go here. 
• Notice of Right to Opt-out of Sharing. You can opt out of the sharing of your personal information for cross-contextual behavioral advertising by visiting here and following the instructions there. You can also configure certain browsers to tell websites not to share your information for these reasons through the “global privacy control” signal. We will respond to this signal in a frictionless manner. If you configure this setting on your browser, certain features may not work. To learn how to configure this setting, view here.

Specific Rights in Certain Jurisdictions

If you are a consumer who lives in the EU, the UK, California, Virginia, Colorado, Connecticut, and Utah or jurisdictions with similar laws, you may have additional rights. These include the right to access what information we have about you and to get a copy of your information. It also includes the right to ask us to correct or delete your information.

Your rights depend on our relationship. The rights are subject to certain limitations and are not absolute. This might include if a legal exception applies. If that is the case, we will not be able to process your request.

Nevada residents. You may opt out of the future sale of your information to a third party so that they may license or sell that information. To do this, email us at the contact information listed at the end of this notice.

How it Works

You can exercise your rights by visiting the online Consumer Rights Privacy Request Form. You can also contact our Privacy Hotline at 833-727-2596 (833-PAPA-596) or email us at privacy@papajohns.com. We will take steps to verify your identity. This includes matching your information with that we already have.

These rights are not absolute. In some situations, we may not be able to process your request. This may include if a legal exception applies. We will let you know when or if a right does not apply to you. If you disagree with our decision, you can contact us as described at the end of this notice. We will not discriminate against you because you exercised your rights.

Third Party Agents

If you are submitting a request on someone else’s behalf, we may ask for additional verification. This may include a signed letter verifying your right to make this request. This may also include providing proof that you are registered with the Secretary of State to act on someone’s behalf or proof of a power of attorney.

NOTICE OF FINANCIAL INCENTIVES

California and Colorado require that we provide you with information about financial incentives. You can read this at our Notice of Financial Incentives.

INFORMATION COLLECTION FROM CHILDREN

Our sites and apps are meant for adults. We do not knowingly collect personal information from children. If you are a parent or legal guardian and think your child has given us information without your permission, you can email us and request that your child’s information be corrected or deleted. You can also write to us at the address listed at the end of this Notice. Please mark your inquiries "COPPA Information Request." Parents, you can learn more about how to protect children's privacy on-line here.

THIRD-PARTY SITES AND LINKS

Our platforms may have links to third party sites or apps. If you click on a third-party link, you will be taken to platforms we do not control. This Privacy Notice does not apply to the privacy practices of those platforms. Read the other companies’ privacy policies carefully. We cannot be and are not responsible for these third parties.

UPDATES TO THIS PRIVACY NOTICE

We may make update this notice from time to time. We will notify as required by law and will post the updated version on the sites where this appears. Please check back periodically for updates.

How to Contact Us

You can contact privacy@papajohns.com with any questions about this notice or our data practices. Or write to us at:
Papa John's International, Inc.
P.O. Box 99900
Louisville, Kentucky 40269-0900