{{ $keys.text['global.paneraBread'] || 'Panera Bread' }}
LAST UPDATED: June 29, 2023.
California Notice at Collection
Collection of Personal Information
Third-Party Analytics and Interest-Based Advertising
Disclosure of Personal Information
Region/State/Use-Specific Notices
Updates to this Privacy Policy
If you are viewing on a kiosk in a cafe, certain links will not be available. To access these links, please view our Privacy Policy on a personal device or contact us at 1-855-3-PANERA for support.
Scope of this Privacy Policy
This Privacy Policy describes the information handling practices of Panera Bread ("Panera," "we," "us," or "our") in connection with the information that we collect online and offline from and about you, including through:
· our websites, including panerabread.com, catering.panerabread.com, and any other website where this Privacy Policy is posted or linked (each, a “Website” and collectively, the “Websites”);
· our mobile application (the “Mobile App”);
· our in-café kiosks, Wi-Fi service, and other online services, tools, or programs where this Privacy Policy appears;
· in connection with our Programs (defined below) (e.g., our MyPanera program); and
· other offline interactions you may have with us.
Collectively, we refer to our online and offline interactions with you as the "Services".
This Privacy Policy also describes your choices and legal rights (where applicable) with respect to the personal information that we collect, use, and disclose.
In this Privacy Policy, “personal information” refers to information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, to you.
This Privacy Policy is part of the Terms of Use (the "Terms") for the Services. Separate terms may apply instead of or in addition to the Terms in connection with certain programs and services offered by Panera (each, a “Program” and collectively, the "Programs"). By using the Services, you agree to this Privacy Policy, the Terms, and/or any applicable Program terms.
California Notice at Collection
We collect the categories of personal information (as defined in the California Consumer Privacy Act (CCPA)) listed in the table below.
Category of Personal Information Collected |
Sold or Shared |
Identifiers, including names, postal addresses, email addresses, online identifiers, IP addresses, account names, and other similar identifiers (e.g., social media identifiers). |
Yes |
Personal information categories listed in the California Customer Records statute, including names, postal addresses, telephone numbers, education information, employment information, and credit and debit card information. |
Yes |
Protected classification characteristics under California law or federal law, including age (over 40) and sex/gender expression. |
No |
Commercial information, including items purchased, obtained, or considered and other purchasing or consuming histories or tendencies. |
Yes |
Internet or other electronic network activity information, including internet browsing history, search history, and information about interactions with the Digital Properties (as defined below) and advertisements. |
Yes |
Geolocation data, such as IP location. |
Yes |
Audio, electronic, visual, or similar information, such as phone call recordings (where permitted by law). |
No |
Professional or employment-related information, including job roles/titles and employer names. |
No |
Inferences, meaning inferences drawn from any of the information in the above-listed categories of information. |
No |
Sensitive personal information, including log-in information for accounts in combination with passwords allowing access to the accounts and individuals’ precise geolocation. |
No |
As further described in the “Use of Personal Information” section below, we generally collect and use the above-listed categories of personal information to provide and manage the Services, to process and fulfill your orders, and as otherwise necessary to support and market our business and fulfill other legitimate business or commercial purposes.
As noted in the table above, we “sell” or “share” (as these terms are defined in the CCPA) certain categories of personal information, and you may exercise your right to opt out of such disclosures by clicking the “Do Not Sell or Share My Personal Information” link in the footer of the Websites, and following the instructions. Alternatively, where available, you may choose to enable an online tool that automatically communicates your opt-out preference to us, such as the Global Privacy Control (GPC). When detected, we will process such a signal as an opt-out request linked to that browser.
We retain each category of personal information that we collect for as long as necessary to fulfill the purposes described in this Privacy Policy, including to satisfy legal or reporting requirements.
More information about our information handling practices and a description of your legal rights can be found in the “California Privacy Notice,” which is available here.
Collection of Personal Information
Information you provide
We (and our service providers) collect a variety of information that you voluntarily provide to us when you use or otherwise engage with the Services, complete a survey administered by us or on our behalf, contact us through our Customer Care Center, provide us with feedback and/or submissions, make a press inquiry, or otherwise interact with us. The specific types of personal information that you may provide to us are described below.
- Contact information. When you use or engage with us and/or the Services, we collect or obtain relevant contact details from you. For example, when you place an order online or sign up for the MyPanera program, you provide us with your name, phone number, and email address.
- Demographic information. We collect certain demographic information, such as your date of birth, if you choose to provide it (e.g., when you sign up for the MyPanera program).
- Payment information. If you place an order, we will collect your financial payments details (e.g., your credit/debit card information).
- Commercial information. When you engage with us and the Services, we collect certain commercial information, including information regarding the items that you view and order.
- Information you make public. If you post in a public space on a Website or in the Mobile App or otherwise choose to make your personal information public on or through the Services, we will collect or obtain such information. If you choose to share personal information publicly through the Services, please understand that we cannot control the actions of third parties who may have access to or collect this information.
- Preferences. When you engage with us, we may collect information about your preferences, including your dietary preferences (if you choose to share them with us) and how frequently you wish to receive marketing and promotional communications from us.
- Other information you provide to us. We will collect any other information that you choose to provide during your interaction(s) with us. For example, we will collect any personal information that you provide when you submit questions/feedback, interact with our bakery-café personnel and customer service representatives, or participate in our surveys or research studies. We will also collect any information that you provide when you complete and submit to us any forms/applications (e.g., a Panera franchise application).
You may also voluntarily provide certain information to us when you interact with an automated assistance chatbot on the Websites or in the Mobile App, which our service provider enables on our behalf. Please note that your conversations with any chatbot present on the Websites or in the Mobile App may be monitored and recorded and any personal information you provide will be handled by us and our service provider in accordance with this Privacy Policy.
Information collected by automated means
When you visit and interact with the Websites or the Mobile App (collectively, the “Digital Properties”), we (and our service providers) automatically receive certain information about your device, your browser, and/or your activity.
For example, when you use the Digital Properties, our servers will record information about your usage and information that is sent by your browser or device. This information can include information like your device’s IP address, information about the browser or operating system you are using, unique device identifiers (including your mobile advertising ID), pages that you navigate to and links that you click, and other information about the ways you interact with the Digital Properties. If you are logged into the Digital Properties, we store this information with your account information.
Location information
When you access the Digital Properties, we (and our service providers) may collect the location (which may include specific longitude and latitude) of your mobile device based upon, for example, your device’s IP address, information about things near your device (e.g., Wi-Fi access points, cell towers, and Bluetooth-enabled devices), or GPS and other sensor data from your device. We may use and disclose your mobile device’s location, together with other personal information we have collected about you for the following reasons:
· to identify your local bakery-café;
· to calculate your ETA (if you place an online order for drive-thru pickup);
· to provide you with personalized messaging or content (e.g., a message that you have a MyPanera reward available);
· for analytics, marketing, and advertising purposes (as described in this Privacy Policy); and
· as otherwise described in this Privacy Policy.
You can choose whether or not your device’s location information is shared with us. However, please note that if you choose to opt out of location information collection, some of the Digital Properties’ functionality may not be available to you. Please review the “Your Choices and Legal Rights” section below for information on how to control our collection of your device’s location information.
Cookies and other similar technologies
“Cookies” are small text files that are placed on your computer or device when you visit certain websites. Like many other online service providers, we (and our service providers and partners) use cookies and other similar technologies (e.g., pixels, web beacons, software development kits (SDKs), etc.) (collectively, “Tracking Technologies”) for various purposes, including to collect and store information about your browser, device, and/or browsing activity and preferences; to enable certain functionality; and to enhance your user experience.
In particular, when you visit and interact with the Services, we (and our service providers and partners) may use Tracking Technologies to:
· remember that you are logged into the Digital Properties;
· collect information, such as the time you spend on the Digital Properties, the pages you visited, and your language preferences;
· track your actions (including whether you have opened an email sent by us), understand how you use the Digital Properties, and compile statistics about usage of the Digital Properties (e.g., the total number of visitors, the dates/times visitors accessed the Digital Properties, the webpages visitors viewed, etc.);
· personalize your experience and provide you with customized content;
· serve you advertisements based on your usage of the Digital Properties; and
· measure and manage advertisements served to you on the Digital Properties or on other services.
Our partners, advertisers, and third-party advertising networks may also use Tracking Technologies to collect information about your online activity over time and across different websites or online services.
You have choices with respect to Tracking Technologies. For example, by modifying your browser preferences, you have the choice to accept all cookies, to be notified when a cookie is set, or to reject all cookies. If you choose to reject all cookies, some of the Digital Properties’ features may not work properly. You can learn more about cookies, how they work, and how to manage them at www.allaboutcookies.org.
Information received from third parties
We may receive personal information about you from third parties that supplements the information we collect directly from you and/or through automated means. The personal information that we receive from third parties may include demographic information (e.g., your age, gender, zip code, marital status, education level, occupation, etc.) and information about your lifestyle, preferences and interests, and purchase history and tendencies.
Our sources of personal information may include:
· Social media networks. We may receive your personal information from social media networks (e.g., Facebook, Twitter, etc.). For example, if you connect your social media account(s) with your Panera account, we may receive your social media ID or username, name, email address, general location information, friends list, and demographic information (e.g., your gender or birthday/age). Please note that certain information we receive from social media networks will become part of your account(s) with Panera and handled by us in accordance with this Privacy Policy. Additionally, if you interact with us on any social media network or access our social media content, we may receive your personal information from the relevant network.
· Sweepstakes partners. If we partner with another business on a contest or sweepstakes, we will receive your personal information when our partner discloses it to us and use it as described in the applicable contest/sweepstakes rules.
· Other individuals. We may receive your personal information from other individuals (e.g., your family, friends, or other personal contacts) who provide your personal information to us because they think that you may be interested in the Services.
· Third-party data providers. We may receive your personal information from third-party data providers, including data aggregators and data brokers, that collect personal information about consumers from various sources and provide us with information relating to you to supplement the information that we already have.
· Publicly-available sources. We may receive your personal information from publicly-available sources, including publicly-available databases.
Combination of information
We may combine the personal information that we receive from and about you, including information you provide to us, information we collect through automated means through the Digital Properties, and information we receive from third-party sources. We may also associate information we collect about you with information we collect about other users' accounts if you/your employer has set up an account for multiple authorized users (e.g., a corporate catering account).
Inferences
We may use certain personal information that we collect from and about you (e.g., your demographic information or information about your interaction with the Digital Properties) to draw inferences about you, such as your characteristics, interests, or preferences. As with all other personal information, our processing of such inferences is governed by this Privacy Policy.
Third-Party Analytics and Interest-Based Advertising
Analytics
We use third-party analytics providers to analyze traffic to the Digital Properties and understand the usage of the Digital Properties as well as the performance of our advertisements. These third parties may deploy Tracking Technologies on the Digital Properties or automatically collect information through the Digital Properties.
For example, we use Google Analytics, a web analytics tool that may set cookies in your web browser, to help us understand how users engage with the Digital Properties. To learn more about Google Analytics’ data practices, please visit: https://support.google.com/analytics/answer/6004245?hl=en&ref_topic=2919631#zippy=%2Cgoogle-analytics-under-privacy-laws-in-the-united-states%2Cdata-privacy-and-security. To disable Google Analytics, please download and install the Google Analytics opt-out browser add-on, which is available here: https://tools.google.com/dlpage/gaoptout?hl=en.
You may also opt out of the use of cookies by Adobe Test & Target by visiting: http://panera.tt.omtrdc.net/optout and the use of cookies by Adobe Analytics by clicking the following link: http://stats.adobe.com/optout.html?optout=1.
Finally, you may opt out of the use of cookies by Marketo by clicking here (if a Panera catering page opens, you have been opted out).
Interest-Based Advertising
We may engage in interest-based advertising. This means that you may see advertisements that are targeted and personalized to you on the Digital Properties and/or you may see advertisements for Panera on third-party websites, mobile apps, or other online or offline services operated by third parties based on personal information that we have collected about you.
The interest-based advertisements that you see may be served to you based on personal information collected over time, such as through your participation in the Programs, your activity on the Digital Properties, your device’s location information (which may include specific longitude and latitude), your activity on unaffiliated third-party services, and/or information from third parties with whom we work.
We and our partners, including Facebook (privacy policy available here) and Microsoft (privacy statement available here) may use Tracking Technologies to collect information for such advertising purposes. For example, our partners may use the fact that you visited the Websites to deliver advertisements to you on non-Panera websites or they may use the fact that you used the Mobile App to deliver advertisements to you in other mobile apps. Additionally, we and our partners may target Panera advertisements to you on your TV or other online services if we have identified you as a Panera customer using information we disclose to them, such as your name, email address, or mailing address. Furthermore, we and our partners may identify whether our interest-based advertising activities resulted in you engaging in other activities on the Digital Properties, receiving and interacting with our advertisements, making purchases from us and/or our franchisees, visiting our bakery cafes, or otherwise engaging with us.
Depending on your U.S. state residency, our use and disclosure of your information for interest-based advertising purposes constitutes the processing of personal information for “targeted advertising” under applicable law. Details on how to exercise your legal right with respect to “targeted advertising” can be found in the “Your Choices and Legal Rights” section below.
Cross-Device Tracking
We and our partners may use information to establish connections among related web browsers and devices (such as smartphones, tablets, computers, and TVs) for analytics and interest-based advertising purposes. For example, we and/or our partners may match your browsers or devices if you log in to the same online service on multiple devices or if your devices share similar attributes that support an inference that they are used by the same person or household. This means that your online behavior (i.e., information about your activity on websites or mobile apps) on your current browser or device and your device’s location (which may include specific longitude and latitude) may be combined with information collected from your other browsers or devices. Upon making such an inference, our partners may use this information to deliver an advertisement on your tablet or smartphone, to limit the number of times you see an advertisement across your devices, and to help measure the effectiveness of advertising campaigns across devices.
Opt Out of Interest-Based Advertising
Some web browsers, websites/platforms, and mobile devices allow you to exercise certain choices with respect to interest-based advertising. Additional details can be found below.
- Web Browser Opt-Out. You may be able to opt out of receiving interest-based advertisements using the browser opt-out tools and consumer choice mechanisms provided by interest-based advertising self-regulatory groups by following the links below:
· Network Advertising Initiative (NAI): www.networkadvertising.org/choices
· Digital Advertising Alliance (DAA): https://optout.aboutads.info/?c=2&lang=EN
· Digital Advertising Alliance of Canada (DAAC): https://optout.aboutads.info/?c=3&lang=en
- Mobile Application Opt-Out. You have the ability to control whether you see interest-based advertisements on your mobile device(s) in the following ways:
· Device Settings: Your device operating system may provide mechanisms that allow you to opt in or opt out of the use of data about your usage of mobile apps to deliver interest-based advertising to your mobile device. For more information, consult your device settings.
· AppChoices Tool: The DAA offers a tool for opting out of the collection of cross-app data on a mobile device for interest-based advertising. To exercise your choices with respect to participating companies, please download the AppChoices tool at www.aboutads.info/appchoices.
Please note that you will need to opt out separately on all of your browsers and devices, as each opt-out will apply only to the specific browser or device from which you opt out. If you delete or reset your cookies or mobile identifiers, change browsers, or use a different device, any opt-out cookie or tool may no longer work and you will have to opt out again. Please also note that even if you choose to opt out of receiving interest-based advertising, you may still receive advertising, but the advertisements you see may be less relevant to you.
Some of our partners may provide you with additional choices with respect to interest-based advertising. For example, certain social media networks and TV providers may allow you to control your advertising preferences directly through their services. Please review the privacy policies of the third-party services you use for more information.
Use of Personal Information
The specific purposes for which we use the personal information we collect or otherwise obtain are described below.
- Provide and manage the Services. We use your personal information in connection with the provision, administration, and management of the Services, including to let you sign up for an account, provide you with Program benefits, determine your eligibility for and monitor your participation in our Programs, track your submissions to us, keep records of our interactions with you, and ensure your compliance with any applicable Program terms. Please note that third-party information you provide (e.g., information relating to your friend in a forward-to-a-friend program) may be maintained in connection with your submissions to us.
- Fulfill your order(s). If you place an order (either online or in one of our bakery-cafes), we use your personal information to process and fulfill your order.
- Communicate with you. We use your personal information to communicate with you about the Services, including regarding matters related to your account, your order(s), your qualification for and participation in our Programs (e.g., our Day-End Dough-Nation program), or your future catering needs. We will also use your personal information to respond to your submissions, requests, and inquiries; to request information or feedback from you regarding the Services; and to invite you to participate in surveys and research studies. Additionally, from time to time, we may use your personal information to send you important updates about the Services and communications about changes to this Privacy Policy and/or other applicable terms, conditions, and policies.
- Provide you with promotional and marketing materials. We use your personal information to send you newsletters and other promotional communications regarding new products or services, events in our bakery-cafes, events that Panera or our franchisees sponsor (including contests and sweepstakes), and special offers. The materials that we send you may include information about programs offered by our affiliated company(ies) or franchisees and/or information about third-party products, services, offers, or programs that we think may be of interest to you. Details on how to exercise your choices with respect to promotional and marketing materials and communications from us can be found in the “Your Choices and Legal Rights” section below.
- Conduct research and analytics. We use your personal information to help us (and our service providers and partners) conduct research and analytics and to otherwise measure the effectiveness of the Services and our online and offline marketing and advertising efforts. We also use your personal information to identify issues and test new features or changes in our features and the Services.
- Enhance and personalize the Services. We use your personal information to improve the Services, including to enhance your experience as a customer in our bakery-cafes and to personalize your experience as a user of the Services. We also use your personal information to enhance the sales efforts of Panera and/or our franchisees.
- For Collaboration with Third Parties. We use your personal information when we work with third parties to append data to our records or enable other parties to append data to their records.
- Engage in interest-based advertising. We (and our marketing and advertising partners and service providers) use your personal information to deliver tailored and personalized advertisements to you on the Digital Properties or on other online services across the devices you may use. Details on how to exercise your choices with respect to interest-based advertising can be found in the “Third-Party Analytics and Interest-Based Advertising” section above.
- Maintain security and prevent fraud. We use your personal information to help monitor and maintain the security and integrity of the Services as well as our systems and networks. Additionally, we use your personal information to detect, prevent, investigate, and protect you, our business, and others from fraud, unauthorized transactions, and other unlawful or unsafe activity.
- Satisfy our legal obligations. We use your personal information to comply with applicable law and respond to requests and communications from law enforcement authorities or other government officials.
- Carry out sales and business transactions. We may use your personal information in connection with the evaluation, negotiation, and/or completion of a business transaction (e.g., a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets), whether as a going concern or as part of any bankruptcy, liquidation, or similar proceeding, in which personal information held by us is among the assets transferred or is otherwise relevant to the evaluation, negotiation, or completion of the transaction.
- As otherwise necessary or appropriate. We use your personal information as otherwise described in this Privacy Policy, the Terms, and/or any applicable Program terms or as explained to you at the point of information collection. We will also use your personal information at your direction or with your consent. Finally, we may use your personal information as we believe necessary or appropriate to protect our rights, privacy, safety, property, and/or those of others.
Please note that we may combine personal information that we collect (as described above) with information from other sources and use the combined information for the purposes described in this Privacy Policy.
Disclosure of Personal Information
In connection with one or more of the purposes outlined above, we may disclose your personal information to the categories of recipients listed below.
- Our affiliates and franchisees. We disclose your personal information to our affiliates and franchisees for purposes consistent with this Privacy Policy and/or other business and operational purposes.
- Our service providers. We disclose your personal information to third parties that perform services for us, including companies that manage and host the Services or information systems on our behalf, deliver communications on our behalf, make gift card and e-gift card services available to you, or otherwise assist us with providing the Services to you. Our service providers are restricted in their use of the personal information that we disclose to them.
- Our business partners. We disclose your personal information to our business partners as necessary to provide and maintain the Services. For example, we may disclose your personal information to a payment processor in order for them to tell you about how their services work with the Services. Similarly, we may disclose your personal information to our business partners when you use their services together with the Services or when you share your personal information with one of our partners through the Services (e.g., through a social media plug-in embedded into the Digital Properties).
- Our research partners. We disclose your personal information to our research partners, including those that perform surveys or research projects in partnership with us or on our behalf.
- Our analytics partners. We disclose your personal information (including hashed identifiers) to our partners that assist us in performing analytics and help us measure the effectiveness of the Services and our online and offline marketing and advertising efforts.
- Our marketing and advertising partners. We disclose your personal information (including hashed identifiers) to our marketing and advertising partners, including social media networks, third-party advertising networks, and other parties that assist us in serving, measuring the performance of, and optimizing our advertising campaigns.
- Third-party data providers. We disclose your personal information to third-party data providers, including data aggregators and data brokers, that collect personal information about consumers from various sources to create consumer databases that help companies and brands understand consumer behavior, grow their customer relationships, and meet their marketing and advertising objectives.
- Third parties in connection with a sale or business transaction. We may sell or purchase assets during the normal course of business. If another entity acquires us or any of our assets, personal information that we have collected may be transferred to such entity and its advisors leading up to and/or following the transaction. In addition, if any bankruptcy or reorganization proceeding is brought by or against us, personal information that we hold may be considered an asset of ours and may be sold or transferred to third parties.
- Government and public authorities. We will disclose your personal information: (i) as necessary pursuant to judicial or governmental subpoenas, warrants, or other similar orders; (ii) to cooperate with other requests from the government or law enforcement; and (iii) in other ways necessary to comply with applicable law and/or to investigate, prevent, or take action regarding illegal activities, suspected fraud, violations of third-party rights, situations involving potential threats to the physical safety of any person or any other similar situation, or violations of the Terms, Program terms, and/or other terms that apply to your use of the Services (e.g., the WiFi Terms of Service).
- Other third parties. We will disclose your personal information to other parties at your direction or with your consent. We will also disclose your personal information to parties as we believe necessary or appropriate either: (i) under applicable law; (ii) to protect our operations and those of any of our affiliates; (iii) to protect our rights, privacy, safety, or property, and/or those of others; or (iv) to allow us to pursue available remedies or limit damages that we may sustain.
We may disclose your personal information for other reasons that we will describe at the time of information collection or prior to disclosing your information.
Depending on your U.S. state residency, some of the disclosures described above constitute “sales” of your personal information under applicable law. Details on how to exercise your legal right with respect to such “sales” can be found in the “Your Choices and Legal Rights” section below.
Please note that we may de-identify, anonymize, or aggregate information so that it will no longer be considered personal information and disclose such information to other parties for purposes consistent with those described in this Privacy Policy.
Children’s Privacy
The Services are not directed to children under the age of 13, and we do not knowingly collect any personal information from children under the age of 13. If a child under 13 has provided us with personal information, we ask that a parent or guardian contact us by either submitting a request through Customer Care Center at https://www.panerabread.com/customercare, calling us at 1-855-372-6372, or writing to us at Customer Resource Group, Panera Bread, 3630 S. Geyer Road St. Louis, MO 63127, so that we may promptly delete the child's information from our records.
If you are between the ages of 13 and 18, please ensure that you use the Services with the permission of a parent or guardian. You must be at least 18 years old to use some portions of the Services.
Information Security
Panera maintains reasonable physical, electronic, and procedural safeguards designed to protect your personal information. Unfortunately, we cannot guarantee that any safeguards or security measures will be sufficient to prevent a security problem.
If you believe your MyPanera account(s) have been compromised, please immediately contact us through our Customer Care Center at https://www.panerabread.com/customercare and take immediate action to remove the debit/credit card, Panera gift card, or other payment information associated with your account(s). Email submissions over the Internet may not be secure, so please do not include any sensitive or confidential information in your message(s) to us.
Cross-Border Transfers
We may transfer and/or store personal information under our control on computers and servers located in the United States and/or other countries where we have facilities or in which we engage service providers. As a result, your personal information may be transferred to countries or regions with data protection and privacy laws that differ from those in your country of residence.
When we transfer your personal information outside of your country of residence, we do so in accordance with applicable law and take appropriate steps to ensure your information is protected. However, please note that while outside of the jurisdiction in which you reside, your personal information will be subject to applicable local laws, which may permit government and national security authorities in those jurisdictions to access your personal information in certain circumstances.
By using the Services and/or sharing your personal information with Panera, you are acknowledging that your personal information may be transferred to countries outside of your country of residence. If you would like to learn more about the cross-border transfer of your personal information, please contact us using the contact details in the “Contact Us” section below.
Information Retention
We will retain your personal information as long as necessary to fulfill the purposes outlined in this Privacy Policy (including to satisfy our legal or reporting requirements), unless a longer retention period is required or allowed under law.
To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information; the potential risk of harm from unauthorized use or disclosure of the personal information; the purposes for which we use the personal information; whether we can achieve the purposes through other means; and the applicable legal requirements.
If we de-identify information, we will maintain and use the information in de-identified form and not attempt to re-identify the information except as required or permitted by law.
Your Choices and Legal Rights
Your Choices
We provide you with the ability to review and update your personal information (where applicable) and make certain choices about how we use and disclose your personal information. Additional details are below.
- Review and update your account information. If you have created an account through the Services, you may log in to your account and review your information, update certain information, or delete certain information at any time. If you need assistance, please contact us through our Customer Care Center at https://www.panerabread.com/customercare
- Adjust your location settings. To stop sharing your device’s location with us, you may adjust the location settings on your computer, browser, or mobile device. You can also stop our collection of location information from your mobile device by uninstalling the Mobile App.
- Adjust your push notification settings. If you use the Mobile App, we may use certain information that we have collected from or about you to send push notifications to your mobile device. You can manage your push notification preferences or deactivate these notifications at any time by turning off the notification settings in the Mobile App or in your mobile device’s settings. Please note that even if you choose not to receive push notifications, you will still receive in-app notifications when you use the Mobile App.
- Exercise your email marketing choices. As noted above, we may send you periodic marketing and promotional emails, and we will obtain your consent to do so, where required by law. If you no longer wish to receive marketing and promotional emails from us, you can unsubscribe from them by clicking the “unsubscribe” link found in any such email you receive from us or by following the opt-out instructions included in such emails. Please note that even if you opt out of receiving marketing and promotional emails from us, we may still send you administrative and transactional messages from which you cannot opt out.
- Exercise your text messaging choices. To unsubscribe from text message communications from us, you can text “STOP” in response to any text message you receive from us. Note that you will only be unsubscribed from the particular program about which the text was sent. If you have signed up for multiple text programs, you will need to opt out of each program separately. Please note that because your opt-out preference is tied to the mobile phone number you provide (not to any Panera account or you individually), if you share a phone number with someone else, the most recent preference for that mobile phone number will apply.
- Exercise your analytics and interest-based advertising choices. To exercise your choices with respect to the use of your personal information for analytics and/or interest-based advertising purposes, please review the “Third-Party Analytics and Interest-Based Advertising” section above.
Other choices may be available within your account page or presented to you in certain communications.
Your Legal Rights
Depending on your U.S. state residency, under applicable law, you may have certain rights in relation to your personal information, including the right to:
· request details about our handling of your personal information and to access, or receive a copy of, your personal information in a readily usable format that allows you to transmit the information to another entity;
· request that we correct inaccuracies in the personal information that we hold about you (taking into account the nature of the information and the purpose(s) for which we are processing it);
· withdraw the consent that you have given us to use your personal information (where applicable);
· request that we delete the personal information we hold about you (subject to certain exceptions prescribed by law); and
· opt out of: (i) the “sale” of your personal information; (ii) the processing of your personal information for “targeted advertising” purposes; and (iii) certain forms of “profiling” (as these terms are defined in the applicable law).
We will not discriminate against you if you decide to exercise your legal rights.
If you reside in Colorado, Connecticut, Utah, or Virginia and are interested in exercising one or more of the rights outlined above, you can do so by:
· completing and submitting the form available here; or
· calling us at 1-855-3-PANERA and asking to exercise your privacy rights.
If you reside in Colorado, Connecticut, Utah, or Virginia, you can also exercise your sale and targeted advertising opt-out rights by:
· clicking the “Do Not Sell or Share My Personal Information” link located in the footer of a Website or navigating to the “Security & Privacy” section of your settings in the Website and following the instructions (the opt-out request will only apply to your current browser and your MyPanera account (if you are logged into your account)); and/or
· navigating to the “Security & Privacy” section of your settings in the Mobile App and following the instructions (the opt-out request will only apply to your current mobile device and your MyPanera account (if you are logged into your account)).
Please note that if you interact with and use multiple Websites (either as a MyPanera member or as a guest), you will need to submit your opt-out request on each Website. Additionally, if you do not have a MyPanera account (or if you are not logged into your MyPanera account) and submit an opt-out request using one of the methods outlined above, please note that you will have to submit your opt-out request again if you delete or reset your browser’s cookies, change browsers, use a different device, or uninstall the Mobile App from your device.
Additionally, where available, you can use certain preference signals to exercise your opt-out rights. If you enable a browser-based opt-out preference signal that complies with applicable law, upon receipt or detection, we will process the signal as a request to opt out linked to that browser. Because such signals are browser-specific, if you choose to enable a preference signal to exercise your opt-out rights, please note that you will need to enable it on each supported browser or browser extension that you use.
You can also submit an opt-out request by completing and submitting the form available here. Please note that an opt-out request submitted via the form will apply to offline sales of your personal information and/or uses of your personal information for targeted advertising purposes only.
Exercising your rights does not require you to create an account with us. However, in order to protect your privacy, we may require you to provide certain information to verify that it is you making the request. Where applicable, we will use the requested information for verification purposes only. We may decline certain requests if we cannot verify your identity and confirm that the personal information we maintain relates to you.
Authorized agents. If you reside in Colorado or Connecticut, you may authorize a natural person or business entity to submit a request on your behalf (an “authorized agent”) using the submission methods outlined above. Where appropriate, we will request information or documentation to verify your identity and the agent’s authority to act on your behalf.
Appealing privacy rights decisions. If you reside in Colorado, Connecticut, or Virginia, in the event that we do not take action on your privacy rights request, you have the right to appeal the decision. To appeal our decision, please send an email to privacy@panerabread.com with the subject line “U.S. State Privacy Rights Request Appeal.” If you are unsatisfied with the way that we have handled your appeal, you have the right to complain to your state’s Attorney General.
Region/Use-Specific Notices
We may choose or be required by law to provide different or additional notices relating to the processing of personal information about residents of certain countries, regions, or U.S. states. Additional notices that may be applicable to you are below.
California Residents
If you are a California resident, see our supplemental California Privacy Notice at https://www.panerabread.com/en-us/company-information/privacy-rights.html for additional information regarding our handling of your personal information and your rights, including the Notice of Financial Incentive.
Nevada Residents
Under Nevada law, Nevada residents may opt out of the “sale” of their personal information, where the information is exchanged for monetary consideration. We do not engage in such activity; however, if you are a Nevada resident, you may submit a request to opt out of potential future sales under Nevada law by contacting us through our Customer Care Center at https://panerabread.force.com/custhelp/s/. Please note we will take reasonable steps to verify your identity and the authenticity of the request. Once verified, we will maintain your request in the event our practices change.
U.S. Job Applicants
If you are a resident of the United States and apply for employment with Panera, please review our U.S. Job Applicant Privacy Notice, available at https://www.panerabread.com/en-us/company-information/us-job-applicant-privacy-notice.html.
Third-Party Sites/Services
The Digital Properties may access or provide links to websites or online services not operated by Panera, including services offered through the Services (such as gift card purchases, voice assistant services, and other third-party assisted ordering services).
We may also provide you with access to third-party functionality that allows you to post certain content from the Digital Properties to your social media account(s).
This Privacy Policy does not address, and we are not responsible for, the privacy or other practices of any third parties. Any information that you provide to a third party or that you post to a third-party website or service is governed by the applicable third party's terms and privacy policy. We encourage you to be aware of this when you leave the Digital Properties and/or share information with third parties, and we recommend that you review the privacy policies of such third-party services.
Updates to this Privacy Policy
We may change or modify this Privacy Policy from time to time to reflect changes in our practices with respect to the collection, use, and disclosure of personal information and/or changes in applicable law.
The "Last Updated" date at the top of this page indicates when this Privacy Policy was last revised. If we make changes, we will revise the date at the top of this Privacy Policy and, in the case of material changes to this Privacy Policy, we will provide you with additional notice (in accordance with applicable law).
Unless otherwise stated, the current version of this Privacy Policy applies to all personal information under our control. We encourage you to review this Privacy Policy periodically to remain informed about our information handling and privacy practices.
Contact Us
If you have any questions regarding this Privacy Policy or our information handling practices, please contact us through our Customer Care Center at https://www.panerabread.com/customercare or writing to us at:
Panera, LLC
3630 S. Geyer Road, Suite 100,
St. Louis, Missouri 63127
Attn: Data Privacy Office