PRIVACY NOTICE (PANDA EXPRESS)

This Privacy Notice was last updated on September 5, 2024.

The Jollibee Group of Companies (“Jollibee Group”, “we”, “our”, “us”), through its parent and subsidiary companies identified in 9. Who the controllers are, is committed to protecting your privacy. This Privacy Notice applies to our consumer websites, applications, emails, or other online consumer platforms (“Consumer Platforms”) that link to this Privacy Notice and describes how we collect, use, and disclose your personal information when you use our Consumer Platforms to engage with us and avail of our services (“Services”).

Table of Contents

1. What we collect
   1. Personal information you provide us.
   2. Personal information we are required to collect.
   3. Personal Information generated automatically.
2. How and why we collect and use
   1. To fulfill your request to register your account.
   2. To fulfill your order using your account.
   3. To fulfill your order without using an account.
   4. To fulfill your request to save your credit card details.
   5. To fulfill your purchase of gift cards or certificates.
   6. To communicate with you.
   7. To send you marketing communications and newsletters.
   8. To conduct customer surveys or offers.
   9. To provide government-mandated discounts.
   10. To protect our vital interests, comply with legal obligations, and as otherwise permitted by law.
3. With whom we share
   1. Related Companies.
   2. Franchisees.
   3. Service Providers.
   4. Government and third parties for legal reasons.
   5. Transferees and third parties in connection with a corporate transaction.
4. Your choices and opting out
   1. Marketing Communications and newsletters.
5. Your data subject rights
   1. Access and rectification.
   2. Erasure, restriction, and objection.
   3. Portability.
   4. Withdrawal of consent.
   5. Exercising your rights.
6. Security, storage, and retention
   1. Security.
   2. Storage.
   3. Retention.
7. Other important information
   1. Terms and Conditions.
   2. Browsing.
   3. Link to other platforms.
   4. Changes to this Privacy Notice.
8. Cookie Policy
   1. Definition.
   2. Purposes.
   3. Disabling Cookies.
9. Who the controllers are
10. How to contact us

 

1. What we collect

1.1. Personal information you provide us

We collect personal information you provide us when you use our Consumer Platforms such as your name, address or location, contact number, email address, username, password (“Profile Information”). If applicable and necessary, we also collect personal information such as your recipient’s name, recipient’s address, recipient’s contact number, recipient’s email address (“Recipient Information”), vehicle model, vehicle license plate, vehicle color (“Vehicle Information”), order details, and other details disclosed as notes/special instructions (“Order Information”).

In relation to Recipient Information, should the recipient be a person other than yourself and you provide the recipient’s personal information when you use our Consumer Platforms, you warrant that you are allowed or have the permission to share with us the recipient’s personal data under your possession, and you agree to be solely responsible for ensuring that such person understands, agrees with, and accepts this Privacy Notice and for protecting the privacy of the recipient’s personal data under your possession. We shall not be liable for any privacy concern arising from your sharing of the Recipient’s Information with us.

1.2. Personal information we are required to collect

We collect personal information as required under any applicable laws, rules, or regulations, including compliance with our legal obligations, such as the name and identification number indicated in the relevant Senior Citizen or Persons with Disability identification card (“Government-Mandated Discount Information”) and a copy of such identification card.

1.3. Personal Information generated automatically

In addition to personal information you provide us, we also collect your personal information generated automatically when you use our Consumer Platforms such as your order history.

2. How and why we collect and use

2.1. To fulfill your request to register your account

If you choose to use certain features of our Consumer Platforms to avail of our Services, you will need to register an account. In such case, we collect and use your Profile Information to fulfill your request to register your account.

2.2. To fulfill your order using your account

When you make an order on our Consumer Platforms using your account, we use your Profile Information you provided when you created your account and we collect and use your Order Information to fulfill your order. For curbside pick-up orders, we also collect and use your Recipient Information and Vehicle Information to fulfill your curbside pick-up order.

2.3. To fulfill your order without using an account

When you make an order on our Consumer Platforms without using an account, we collect and use your Profile Information and Order Information to fulfill your order. For curbside pick-up orders, we also collect and use your Recipient Information and Vehicle Information to fulfill your curbside pick-up order.

2.4. To fulfill your request to save your credit card details

If you register an account on any of our Consumer Platforms, you have the option of saving your credit card details for seamless payment transactions. If you choose to do so, our service provider collects your name, credit card number, credit card expiration date, and credit card CVV (“Credit Card Details”). Credit Card Details are collected, stored, and processed by our service provider, not by us, and we are not responsible for securing and protecting said Credit Card Details.

2.5. To fulfill your purchase of gift cards or certificates

When you purchase a gift card or certificate on any of our Consumer Platforms, we collect and use your Profile Information, Recipient Information, and Order Information to fulfill your purchase. If you are the recipient, we collect and use the Recipient Information provided to us by the purchaser to fulfill the purchaser’s request to deliver the gift card or certificate to you.

2.6. To communicate with you

When you contact us through our Consumer Platforms, we collect and use your Profile Information and any additional personal information you provide to allow us to address your concerns or questions.

2.7. To send you marketing communications and newsletters

If you register an account on our Consumer Platforms, you have the option to agree to receive marketing communications from us through SMS, email, social media, messaging application, or other similar means, as well as to subscribe to our newsletters. If you choose to do so, we use your Profile Information you provided us during the registration process to fulfill your request to subscribe to our marketing communications and newsletters. With your consent, we use your Profile Information to send you our marketing communications and newsletters.

2.8. To conduct customer surveys or offers

If you register an account on our Consumer Platforms, you have the option to participate in customer surveys or offers. If you choose to participate, we use your Profile Information you provided us during the registration process to fulfill your request to participate in our customer surveys or offers. With your consent, we use your Profile Information and any additional personal information we request, which you voluntarily provide, to contact you for market research, provide you with relevant offers, understand your preferences, and improve our services.

2.9. To provide government-mandated discounts

In certain instances, you may be eligible to avail of government-mandated discounts. In such cases, when you make an order on any of our Consumer Platforms to avail of our Services, we collect and use your Government-Mandated Discount Information to comply with applicable laws, rules, or regulations and to fulfill your order with the discount applied.

2.10. To protect our vital interests, comply with legal obligations, and as otherwise permitted by law

We may use your personal information to prevent, detect, and fight fraud or other illegal or unauthorized activities, protect our company, customers, brands, and websites, assist in investigations, enforce and defend our rights and assets, comply with laws, regulations, court orders, or other legal obligations, or for any other reasons permitted by law.

3. With whom we share

3.1. Related Companies

We may share your personal information with our parent and/or subsidiary companies to provide you with relevant offers, understand your preferences, and improve our Services. For example, we may combine personal information we collected with personal information collected by our parent or subsidiary companies to understand your purchasing patterns and customer preferences, conduct market research to improve our services, and make business decisions.

3.2. Franchisees

We may share your personal information with our franchisees to fulfill your order and to offer local deals. For example, we may share your personal information to our franchisee nearest your location to fulfill your delivery request or to offer local promotions that may interest you. Our franchisees may also be authorized to use your personal information in the manner described in this Privacy Notice. However, our franchisees are independently owned and operated and have their own personal information collection and use practices that are not governed by this Privacy Notice. We encourage you to review the Privacy Notices of any of our franchisees with whom you interact.

3.3. Service Providers

We may share your personal information with our service providers to fulfill your order, analyze data, and improve our Services. For example, we may share your personal information with companies providing services on our behalf, such as delivery services, payment processing services, web hosting services, web analytics services, consent management services, customer support services, marketing communications services, and market research services. Our service providers are not authorized to use or disclose your personal information for any reason other than for the purposes for which they were engaged.

3.4. Government and third parties for legal purposes

We may share your personal information to law enforcement bodies, regulators, governmental agencies, or to authorized third parties, as may be required by law or subpoena, or if we reasonably believe that such action is necessary to comply with the law and the reasonable requests of law enforcement or to protect the rights, property, safety, or integrity of the Jollibee Group, our employees, our customers, or others who may have a legitimate right to establish or defend.

3.5. Transferees and third parties in connection with a corporate transaction

We may transfer your personal information to transferees and third parties in connection with a corporate transaction, such as a merger, acquisition, bankruptcy, sale of any or all of our company assets, or other change of ownership or control. Should we undergo bankruptcy proceedings, your personal information could be regarded as an asset and may be sold or transferred to third parties. If such a transfer occurs, we will make reasonable efforts to ensure that the transferee handles your personal information in accordance with this Privacy Policy.

4. Your choices and opting out

4.1. Marketing communications and newsletters

You can choose to stop receiving our marketing communications and newsletters by following the instructions contained in our marketing communications and newsletters or by contacting us. Please refer to 10. How to contact us for information on how to contact us.

5. Your data subject rights

Subject to the requirements of applicable laws and regulations, you have the following rights with respect to your personal information we have collected:

5.1. Access and rectification

You can ask us for a copy of the personal information we hold about you or inform us of any changes or corrections to your personal information.

5.2. Erasure, restriction, and objection

In some cases, you can ask us to erase, block, or restrict the processing of the personal information we hold about you or object to particular ways in which we are using your personal information.

5.3. Portability

In some cases, you can ask us to send the personal information you provided us to a third party.

5.4. Withdrawal of consent

Where we are processing your personal information on the basis of your consent, you are entitled to withdraw that consent subject to any applicable law.

5.5. Exercising your rights

Please refer to 10. How to contact us for information on how to exercise these rights.

6. Security, storage, and retention

6.1. Security

To prevent unauthorized access, processing, or disclosure of your personal information, and ensure security thereof, we have put in place suitable physical, electronic, and organizational procedures to safeguard and secure the personal information we collect, such as data encryption and access restrictions on our databases. However, no security system is impenetrable and we cannot guarantee the security of our systems at all times. In the event that any information under our control is compromised as a result of a breach of data security, we will take reasonable steps to investigate the situation and, where appropriate, notify those individuals whose information may have been compromised and take additional steps, in accordance with any applicable laws and regulations.

6.2. Storage

We store your personal information in a secured database, which may be accessed by our service providers, subsidiaries, affiliates, and franchisees only for purposes of providing the Services.

6.3. Retention

We retain your personal information for as long as your account is active or for as long as necessary for us to perform or provide the Services. If there is no activity in your account for thirteen (13) months, we will delete your personal information in accordance with applicable laws, rules, or regulations and with our internal guidelines. We may anonymize and/or aggregate personal information and store it to analyze aggregate metrics and trends.

7. Other important information

7.1. Terms and Conditions

Your use of our Consumer Platforms is subject to applicable Terms and Conditions linked within our Consumer Platforms.

7.2. Browsing

In certain cases, such as when you are simply browsing any of our marketing websites, we do not collect any personal information from you. However, we may collect cookies referred to in 8. Cookie Policy below.

7.3. Link to other platforms

Our Consumer Platforms may contain links to third-party websites and services that we do not operate and are outside of our control. These third-party websites and services have their own privacy practices and we do not accept any responsibility or liability for the security or privacy of any personal information collected by these third-party websites and services. We recommend you exercise caution and review the privacy notices or statements of the third-party websites and services you use.

7.4. Changes to this Privacy Notice

We may modify this Privacy Notice from time to time and we will place the date when we last updated this Privacy Notice at the top portion of this page. We will notify you of material changes by appropriate means.

8. Cookie Policy

8.1. Definition

Cookies are small files that are placed on your device when you visit a website or use an app. It typically contains information about the website or app itself and a unique identifier that allows the site website or app to recognize your browser or device when you return.

8.2. Purposes

We may use cookies to understand how you use our Consumer Platforms, remember your preferences, track your activity, and personalize your experience. This allows us to improve your experience in using our Consumer Platforms.

8.3. Disabling Cookies

You may disable cookies via your browser settings or by changing your cookie settings in your device. However, if you disable certain cookies, you may not be able to take advantage of the full features of the relevant Platform.

9. Who the controllers are

The Jollibee Group processes your personal information through its parent and subsidiary companies operating its individual brands. You can find the identity of the controllers below:

Jollibee Brand Jollibee Foods Corporation Controller	Greenwich Brand Fresh N’ Famous Food Inc. Controller
Mang Inasal Brand Mang Inasal Philippines Inc. Controller	Red Ribbon Brand Red Ribbon Bakeshop Inc. Controller
Chowking (including Milksha) Brand Fresh N’ Famous Food Inc. Controller	Burger King (Philippines Only) Brand PERF Restaurants, Inc. Controller
Panda Express (Philippines Only) Brand JBPX Foods Inc. Controller	Yoshinoya (Philippines Only) Brand Yoshinoya Jollibee Foods, Inc. Controller

10. How to contact us

If you have any questions regarding this Privacy Notice or our use of your personal information, please contact us through our Data Protection Officer via email at dpo@jfc.com.ph or via mail to 10th Floor, Jollibee Plaza, F. Ortigas Jr. Road, Ortigas Center, Pasig City, Metro Manila, Philippines 1605.

If you wish to exercise any of your rights or to opt out of our marketing communications and newsletters, you can also do so by emailing privacy@jfcgrp.com, submitting your request through our Data Subject Rights Request Form for Customers (Philippines). We may need to verify your identity and require additional supporting documents as may be necessary before fulfilling certain requests.