Yum! Brands
Consumer Discretionary
57
out of 100. Number 157 of 512, counting from the worst.
Where Yum! Brands does well
- Renewals 4 of 20. Few problems found.
- Universal deletion right: 'Regardless of where you live, you have the right to request the deletion of your personal information' — broader than many peers that gate rights by state of residence.
- Arbitration hearings happen in the county where you reside (not a corporate-chosen venue), Taco Bell pays the mediator's fee in mass-arbitration mediations, and it will consider reimbursing AAA filing fees for non-frivolous claims.
- Explicit biometric boundary: 'We do not use your voice information to create voiceprints or other biometric identifiers to identify you,' and data obtained from connected Google/Gmail accounts is never used for advertising.
- They respond to Global Privacy Control browser signals where required by law, and small-claims court disputes are carved out of arbitration.
If you have any dispute with Taco Bell, you cannot sue them in court or join a class action — you must go through private individual arbitration, and you also waive your right to a jury trial.
The fine print
6 clauses and findings from the draft archive, dated 1 October 2026. The plain English comes first; the small print is the company's own words. None of these has been checked yet.
-
If you have any dispute with Taco Bell, you cannot sue them in court or join a class action — you must go through private individual arbitration, and you also waive your right to a jury trial. No opt-out is offered; the only carve-out is a 30-day window to reject future changes to the arbitration clause itself, which is not an opt-out of arbitration.
You and we agree that subject to the limited exceptions set forth in this Agreement, the sole and exclusive forum for any and all Disputes between you and Taco Bell shall be final and binding individual arbitration. ... YOU AND WE AGREE THAT EACH MAY BRING CLAIMS AGAINST THE OTHER ONLY IN YOUR OR ITS INDIVIDUAL CAPACITY AND NOT AS A PLAINTIFF OR CLASS MEMBER IN ANY PURPORTED CLASS, REPRESENTATIVE, COLLECTIVE, OR PRIVATE ATTORNEY GENERAL PROCEEDING IN ARBITRATION OR IN LITIGATION.
-
Yum! Brands openly states it may 'share, sell or disclose' your personal data, including selling it to marketing business partners and ad-tech companies who then use it under their own policies — meaning once sold, Yum's rules no longer protect your data. Opt-out is on you, per-device, per-browser.
We may share, sell or disclose your information in the instances described below... Business partners: We may sell or share limited data with certain business partners, such as our preferred marketing and strategic business partners who may provide you with information and marketing messages about products or services that may interest you. These parties may use your information in accordance with their own privacy policies. Advertising partners: We may sell or share information with third-party online advertising partners or permit these partners to collect information from you directly on our Sites to facilitate online advertising.
-
Your drive-thru voice orders, customer-service calls, and chatbot chats can be recorded and fed into AI training systems — you are effectively doing unpaid data labor for their AI every time you order food or ask for help. Separately, they use FullStory/Splunk 'session replay' that records your mouse movements and keystrokes on their sites.
We may record or otherwise capture your interactions with our drive thru service or customer service lines in order to take and transcribe your verbal orders and for quality assurance and service improvement purposes, including AI training... We may use your interactions with our Services as the basis for developing new customer service capabilities; for example, by using records of your website chats with our chatbot or drive-thru voice orders or phone call recordings with our customer service team... to train artificial intelligence.
-
Your loyalty points are not yours — Taco Bell can devalue, cancel, or wipe them at any time, they die after about 6 months, and they are under no obligation to even tell you before they expire. Deleting your account also wipes your accumulated rewards.
Points accrued in your Loyalty Account do not constitute your property and do not entitle a participant to a vested right or interest. Points may be revoked, canceled, limited, or modified at any time, even though such action may affect your right to use previously accumulated Points... All Points will expire six (6) months after the calendar month during which the Points were earned... You may not be provided with notice of expiration or forfeiture of Points.
-
Taco Bell can rewrite the terms whenever it wants just by posting an update — your continued use counts as agreement, no notice required. It can also kill or devalue the entire rewards program at will, including points you already earned.
Your continued access or use of this Platform or your participation in any Services after Taco Bell posts changes to this Agreement constitutes your agreement to those changes effective immediately... THE PROGRAM IS VOID WHERE PROHIBITED. TACO BELL RESERVES THE RIGHT TO MODIFY OR TERMINATE THE LOYALTY PROGRAM IN ANY MANNER, IN WHOLE OR PART, EVEN THOUGH SUCH CHANGES MAY AFFECT THE REDEMPTION VALUE OF THE POINTS AND/OR REWARDS ALREADY ACCUMULATED.
-
There is no fixed deletion timeline — your data is kept 'as long as reasonably necessary,' a vague standard they define themselves, and anonymized versions of your data can be used forever without telling you. Meanwhile, data given to their many independent franchisees is outside this policy's control entirely.
We will retain your personal information as long as reasonably necessary to maintain the Service, to meet legal and accounting obligations, and for the other purposes described in this Policy, or as otherwise required or permitted by law... If we anonymize your personal information (so that it can no longer be associated with you), we may use this information indefinitely without further notice to you.
How these were found
Documents read via browser on Oct 1, 2026: Taco Bell Terms of Use at https://www.tacobell.com/legal/terms-of-use and the Yum! Brands group Privacy Policy at https://privacy.tacobell.com/policies (the privacy policy opens by identifying itself as covering Yum! Brands, Inc. and its global subsidiaries and Brands including KFC Corporation, Taco Bell Corp., The Habit Restaurants, Habit Burger & Grill, Saucy Restaurants, Yum Connect, and Yum! Restaurant Services Group). Neither page displayed a 'last modified' version date in the fetched text. Corporate yum.com public terms were not found (only employee-portal terms), so the most prominent US brand's docs were used, per methodology. KFC and Pizza Hut operate under the same Yum! Brands privacy policy but were not separately reviewed; independent franchisees have their own privacy policies not covered here.
These notes come from the original draft and are not independent verification.