Cinnabon Australia
Privacy Policy

Last Updated: July 26, 2024

Cinnabon Franchisor SPV LLC and its affiliates (collectively, “Cinnabon,” “we,” “our,” “us”) value your privacy. In this Privacy Policy, we describe how we collect, use, and process the personal information we obtain about people who use our websites or mobile apps, browse or purchase our products, apply to become franchisees, or who otherwise interact with us online or offline (collectively, our “Services”). This Privacy Policy does not apply to any websites or mobile apps that are created, run, or controlled by independently owned or operated Cinnabon franchisees or any other third party.

This Privacy Policy describes our collection, use, and disclosure of personal information in Australia, in accordance with our obligations under the Privacy Act. By downloading, using, creating an account on, or registering for our Services, or by otherwise providing your personal information to us, you are agreeing to this Privacy Policy and our Terms and Conditions.

For any handling of Personal Information that is not related to Australia (including California residents, Colorado, Connecticut, Utah, and Virginia residents, European Economic Area and United Kingdom residents or Residents of Canada) see the Cinnabon Privacy Policy available here.

In this Privacy Policy:
The expressions “you” and “your” refer to each individual whose Personal Information we may handle from time to time, where we are required to comply with the Privacy Act in respect of such Personal Information.

Franchise means a Cinnabon store owned or operated by a franchisee.

Franchisee means the owner or operator of a franchised Cinnabon store.

Personal Information means information or an opinion about an identified individual, or an individual who is reasonably identifiable: (a) whether the information or opinion is true or not; and (b) whether the information or opinion is recorded in a material form or not.

Privacy Act means the Privacy Act 1988 (Cth).

Privacy Policy means this document as amended from time to time.

Related Bodies Corporate has the same meaning as under the Corporations Act 2001 (Cth).

Sensitive Information means information or an opinion about an individual’s: racial or ethnic origin; or political opinions; or membership of a political association; or religious beliefs or affiliations; or philosophical beliefs; or membership of a professional or trade association; or membership of a trade union; or sexual orientation or practices; or criminal record; that is also personal information; or health information about an individual; or genetic information about an individual that is not otherwise health information; or biometric information that is to be used for the purpose of automated biometric verification or biometric identification; or biometric templates.

We only collect Personal Information that is reasonably necessary for our business functions and activities and to provide you with our products and services. We may collect personal information directly from users of our Services. You can use some parts of our Services without registering or directly submitting your personal information to us, but we may automatically collect certain information about your use of our Services through cookies and other tracking technologies.

If you are a customer and you decide not to provide certain Personal Information to us, we may not be able to provide you with the product or service you are after.  If you are a job applicant and choose not to provide certain Personal Information, we may be unable to process your application.

We may collect personal information directly from users of our Services. You can use some parts of our Services without registering or directly submitting your personal information to us, but we may automatically collect certain information about your use of our Services through cookies and other tracking technologies.

To use some features of our Services (for example, to sign up for rewards programs, enter contests, make a purchase, or request a franchise kit from us), you must register with us or otherwise provide us with your personal information. We also may collect personal information that you enter through our Services or provide to us in other ways, such as through email or text message. The types of personal information that we collect from you will depend on your interactions with us and how you use our Services, but may include:

• personal details, such as full name, mailing address, email address, phone number, and other contact information;
• location data; and
• other personal information you choose to provide to us.

We, and the vendors we work with, may also collect other information about your use of our Services using automated tools. For example, cookies and other passive information collection technologies enable us to compile aggregate statistics concerning use of our Services, analyse trends, enhance the security of our Services, deliver content and advertisements (where permitted under applicable law), and otherwise administer and improve our Services. This information may include your browser type, language preference, operating system, device identifier, device type, access time, Internet Protocol (IP) address, the URLs of websites you visited before and after visiting our websites, the web search that landed you on our websites, the length of your visits to our websites, and the links you click and pages you visit within our websites. We do not have direct access to this information, but note that the information will be used by ad platforms that are managed by us. You can set your browser not to accept cookies, to remove cookies, or to notify you when you are sent a cookie, giving you the opportunity to decide whether or not to accept it. However, please note that if you disable the use of cookies on your computer, some functionality of our websites will not work.

Your web browser may have settings that allow you to transmit a “Do Not Track” signal when you visit various websites or use online services. Like many websites, our websites are not designed to respond to “Do Not Track” signals received from browsers.

We may use certain third-party web analytics services to help us understand and analyse how visitors use our Services and to serve advertisements on our behalf across the Internet. We have implemented Google Analytics Advertising features such as dynamic remarketing, interest-based advertising, audience targeting, behavioural reporting, demographics and interests reporting, user segment analysis, device reporting, display advertising, and video ads reporting. Where permitted under applicable law, we may use cookies and other identifiers to deliver advertisements, create a profile of you, measure your interests, personalise content, and detect your demographics, location, or device. For more information on how Google Analytics uses data, visit the terms and conditions marketingplatform.google.com/analytics/ and privacy policy policies.google.com/privacy. To opt out of Google Analytics and advertising cookies, visit myadcenter.google.com and tools.google.com/gaoptout/.

We use Hotjar, a service provider, to help us understand and analyse how visitors use our services, and to improve the services. Hotjar may collect the following types of information from users of our websites:

• device IP Address
• device screen size
• device type (unique device identifiers)
• browser information, geographic location (country only)
• preferred language used to display our website

Hotjar stores the above information in a pseudonymised format. Hotjar does not use this information to identify individual users, or match or link the information with other information about users. Hotjar is contractually forbidden to sell any of the data collected on our behalf. For more information regarding Hotjar’s collection and use of information, please visit Hotjar’s privacy policy here.

Our Services may access and collect your geolocation information to facilitate our provision of Services, such as to provide you with information about stores near you. We also may use information about the location of the device you are using to help us understand how our Services are being used and to deliver more relevant advertising. For most mobile devices and computer systems, you are able to withdraw your permission for us to collect this information through your device or web-browser settings.

We may collect personal information about customers, prospective franchisees, and current franchisees from our affiliated companies, franchisees, service providers, and third parties. We also may collect information about any comments or reviews you post about us on third-party websites.

When submitting information to a third party, you are subject to that third party’s terms of use and privacy policies, and we recommend you review the terms of use and privacy policies of that third party. Cinnabon may combine information about you that we already have with information we obtain from third parties. If you submit someone else’s personal information to us, you represent that you have been authorised to provide this information to us.

We may use your personal information to:

• communicate with you, including to respond to your questions and requests, provide you with documentation or communications you have requested, send you notices about our Services, offer customer support, or contact you for information or after-sales support;
• process your orders or purchases;
• where permitted under applicable law, market and advertise our products, or permit our partners or franchisees to market and advertise products, including to send you news, updates, special offers and promotions, and targeted advertising;
• personalise our content, including to make recommendations to you about our Services, to tailor the information we send or show you, and to offer location-based customisations and personalisation based on your purchase history or past interactions with our Services;
• monitor and analyse trends, usage, and the activities of users of our Services to better understand how our users access and use our Services in order to improve them, respond to user preferences, and for other research purposes;
• improve our Services and notify you about important updates;
• perform business analyses or for other business purposes, such as evaluating transactions and involving our Services;
• facilitate, manage, personalise, and improve our partnership and franchisee relationships;
• identify, prevent, investigate, and take other actions with respect to suspected or actual fraud or illegal activity or other activity that violates our policies;
• ensure the security and integrity of our personal information processing;
• protect our rights, property, or safety and that of our users and our confidential and proprietary information;
• allow us and our licensees to use your name or username, and, if provided in connection with the User Generated Content as defined in our , real name, image, likeness, caption, location information or other identifying information, in connection with any permitted use of the User Generated Content; and, real name, image, likeness, caption, location information or other identifying information, in connection with any permitted use of the User Generated Content; and
• if you are a job applicant or employee, your Personal Information may be collected to facilitate your job application, including for screening or compliance purposes, facilitate the management of your employment relationship, facilitate operations, maintain quality standards and ensure compliance with regulatory requirements;
• comply with applicable laws, rules, regulations, and legal processes as well as our company policies, including to respond to claims asserted against us and to enforce or administer terms and agreements; and
• achieve other purposes, with your consent (when required).

We may disclose your personal information within our company, with our affiliates, with our business partners and franchisees, and with our vendors. We also may disclose your personal information to:

• provide you with products or services, such as when we use a payment processor, delivery services provider, marketing agency or app developer;
• better respond to your inquiries;
• advertise or market our products and services;
• perform marketing research and for sales, support, and service-related purposes;
• protect rights, property, life, health, security, and safety;
• respond to legal process, including to disclose personal information to a court, legal authority, opposing party in litigation, our legal counsel, or other advisors in connection with a judicial proceeding, court order, subpoena, or other legal process;
• negotiate or complete any proposed or actual merger, purchase, sale, or any other type of acquisition or other transaction, including a transfer of all or a portion of our business to another organisation;
• if you are a job applicant or employee, for the purposes set out above, including where disclosure is required to facilitate your job application, including for screening or compliance purposes or facilitate the management of your employment relationship;
• disclose personal information with your consent or at your direction; and
• achieve any other purpose consistent with our statements in this Privacy Policy or otherwise allowed by applicable law.

We may disclose your personal information to comply with applicable law, such as in response to requests from law enforcement agencies, regulators, other public authorities, courts, and third-party litigants in connection with legal proceedings or investigations.

Any information, including personal information, that you post on any public areas of our Services, such as reviews, comments, and photos, may be available to, and searchable by, all other users. Reviews also may be publicly accessible.

Our Services may include links to other websites that we do not own or operate. This Privacy Policy does not apply to those websites, which may have their own privacy policies that you should review to understand how they may collect, use, or disclose your personal information. We are not responsible for the content or privacy practices of any linked websites that are not under our control.

Certain features of our Services may permit you to interact with social media networks operated by unaffiliated parties, for example, if you “like” or “follow” us on those platforms (“Social Features”). If you choose to “like” or share content or post information using Social Features, that information may be publicly displayed, and the party operating the social media platform may receive information about you and your use of our Services. Similarly, if you interact with us through Social Features, we may have access to information about you from the social media platform. In addition, we may track when you like us, follow us, or share our content through Facebook, Twitter, or other social media platforms. This will be facilitated alongside our overall tracking of users on our website. Both practices, in correlation with one another, will allow the linking of identities that use our Social Media sites in Australia to users that use our website.

Please note that if you mention Cinnabon, or comment about or in response to us, in your post on a social media platform, that platform may allow us to publish your post on our Services or public social media pages or otherwise use your post about us. You should review the terms, policies, and settings of these platforms to learn more about their data practices and adjust your settings accordingly.

We may store your Personal Information in hard copy or electronic form, whether at our own premises, or at facilities operated by our service providers (including those located overseas).

We maintain appropriate safeguards designed to protect personal information from loss, theft, misuse, and unauthorised access, disclosure, alteration, and destruction. Nevertheless, no data security measures can guarantee 100% security. Although we strive to protect such information, we do not warrant the security of any information that you provide us over the Internet, and you do so at your own risk. We encourage you to safeguard your passwords, ID numbers, and other information you use to access our Services.

In some cases, our service providers, including technology or data storage providers, are located in countries outside Australia. While it is not reasonably practicable to list all of the countries to which your Personal Information may be disclosed from time to time, please be aware that personal information we obtain about you may be transferred to and processed in the United States, Singapore or other jurisdictions outside Australia.

Where we share your Personal Information outside Australia, we will do so in compliance with the Privacy Act, and where applicable we will take reasonable steps to ensure that overseas recipients protect that information in accordance with the Privacy Act.

We retain personal information for as long as necessary or permitted for the purposes described in this Policy or otherwise to the extent authorised by law. This generally means holding the information for as long as one of the following apply:

• your personal information is reasonably necessary to manage our operations, to manage your relationship with us, or to satisfy another purpose for which we collected the information;
• your personal information is reasonably necessary to carry out a disclosed purpose that is reasonably compatible with the context in which the personal information was collected;
• the personal information is reasonably necessary to protect or defend our rights or property (which will generally relate to applicable laws that limit actions in a particular case); or
• we are otherwise required or permitted to keep your personal information by applicable laws or regulations.

Where personal information is used for more than one purpose, we will retain it until the purpose with the latest period expires. For more information about our retention practices, please contact us using the contact details below.  Once we no longer need Personal Information for any of the purposes set out above, we will take such steps as are reasonable in the circumstances to destroy or de-identify Personal Information in accordance with our obligations under the Privacy Act.

Updating Your Information. If you wish to update the personal information you have provided to us, you may do so by logging in to your account or by contacting us through our  form. Please note that outdated copies of information that you have updated may remain viewable in cached and archived pages for a period of time, and we may maintain records in our systems of this information as well.  Further details about the process for updating your information is set out under Access, Correction and Further Information below.

Marketing Emails. You may opt out of marketing email communications by following the opt-out instructions contained in any email you receive from us note that it may take up to ten (10) business days for us to process opt-out requests. If you opt out of marketing email communications, we may still send you administrative emails about your account or any product you have requested or received from us.

Text Messages. You have the choice to opt-in to receiving text messages and alerts on the mobile phone number(s) you disclose to us. Once you opt-in, we may send you text messages (i) regarding your account and your orders; (ii) about our products and promotions (including advertisements, sales, and special offers); (iii) to investigate or prevent fraud; and (iv) to alert you in the event of an issue with any of your purchases. You do not have to opt-in to text messages and alerts to use and enjoy our website or products. If you opt-in, standard text messaging charges may apply. You may choose to opt-out of our text messages and alerts at any time by sending us a text message from your mobile phone with the word STOP, STOP ALL, END, QUIT, CANCEL or UNSUBSCRIBE, and we will unsubscribe you from text communications.

Our Services are not intended for children, and we do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child, we will delete it in accordance with applicable law.

In accordance with the Privacy Act, this Privacy Policy does not apply to our acts and practices directly related to a current or former employment relationship between us and an employee, and an employee record held by us relating to the employee.

If you submit your personal information to request more information from us about our franchise opportunities, we may use that information to contact you to discuss our franchise opportunities. We may ask that you complete our franchise application, which requests the following additional types of personal information from you, including:

• franchise ownership details and history;
• financial information, including details of current assets and liabilities, annual income, investments, mortgages, insurance, ACH information, and any history of bankruptcy;
• driver’s license, state ID, social security, and passport numbers;
• criminal history (if any).

We may disclose the information provided in our franchise application with our affiliated brands and vendors as needed to process your franchise application, including to run background checks and to determine creditworthiness.

If you provide personal information related to other people, such as your spouse, investment partners, or personal references, as part of the franchise application process, you guarantee that you do so with the knowledge and permission of those people. We may use any information you provide to contact those people and disclose it, as necessary, with our affiliated brands and vendors during the franchise application process.

We will take such steps as are reasonable in the circumstances to ensure that the Personal Information which we collect remains accurate, up to date and complete.

We wish to ensure that any Personal Information we obtain and use is accurate.  You can request access to your Personal Information or advise us of any required correction to your Personal Information by sending a request by logging in to your account or by contacting us through our Contact Us form, or by email at Privacy.Au@cinnabon.com.

When making an access or correction request, please provide as much detail as possible to assist us.  There is no charge for requesting access to your Personal Information but we may require you to meet our reasonable costs in actually providing you with access.

If you make a request for access or correction of your Personal Information we will:

• take reasonable steps, consistent with our obligations under the Privacy Act, to provide access to that information and consider if the Personal Information requires correction; and
• respond to all requests for access and/or correction within a reasonable time.

Upon request for access to Personal Information, we will provide you with details of any of your Personal Information that we hold, subject to appropriate identity verification and except in the limited circumstances permitted by law (for example if granting access would interfere with the privacy of others or if it would result in a breach of confidentiality).

Upon request for correction of Personal Information, we will amend that Personal Information unless we consider that there is no grounds for amendment under the Privacy Act.  If we do not agree that there are grounds for amendment, then we may add a note to the Personal Information noting your request.

In the event that you are dissatisfied in any way with how we have collected or used your Personal Information, believe that there has been a breach of the Australian Privacy Principles, or have any complaints or concerns about this Privacy Policy, we invite you to contact us as soon as possible.

Our Privacy Office may be contacted by email at Privacy.Au@cinnabon.com.

We may discuss your complaint with our personnel and our service providers as appropriate. We will use reasonable efforts to deal promptly with complaints and inquiries and, in any event, acknowledge your complaint or inquiry within 30 days.

If you are not satisfied with the resolution of your complaint, please let us know and we will investigate the matter further. If you are still not satisfied with the manner in which we deal with your complaint, you may refer it to the Office of the Australian Information Commissioner (“OAIC“).

You can contact the OAIC by:
(a) visiting oaic.gov.au;
(b) forwarding an email to enquiries@oaic.gov.au;
(c) telephoning 1300 363 992; or
(d) writing to OAIC at GPO Box 5218, Sydney NSW 2001

With a view to improving our service to you and ensuring compliance with the Australian Privacy Principles, we may revise this Privacy Policy from time to time. It is your responsibility to remain aware of the content of the then-applicable policy. You may not be directly notified of such a change so please ensure that you regularly check this Privacy Policy so you are fully aware of any changes or updates.

You may obtain a copy of our current policy from our website at www.cinnabonaustralia.com/privacy or by contacting us via the details in the Complaints section above.