Privacy Notice

This Privacy Notice is effective as of October 1, 2021.

Please carefully read this Privacy Notice.

CKE Restaurants Holdings, Inc., located at 6700 Tower Circle, Suite 1000, Franklin, TN 37067, United States of America, reachable at ("CKE") is very sensitive to the privacy concerns of the visitors to its website. This Privacy Notice (this "Privacy Notice") outlines the types of Personal Data that you may provide to us on this website ( and other related websites or mobile applications controlled by CKE which link to this Privacy Notice (referred to, individually and collectively, as the "Website"), and explains how CKE, as controller of your Personal Data, handles such Personal Data. This Privacy Notice does not apply to Personal Data collected from websites or mobile applications that do not link to this Privacy Notice or to third-party websites to which the Website may link.

Personal Data is defined as information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly with a particular visitor or consumer and which is submitted to and/or collected by the Website and maintained by CKE in an accessible form, and includes information actively submitted by you and passively-collected information, as described below.


  • What data do we collect?
  • How do we collect your data?
  • How will we use your data?
  • Transmission of your data to third parties.
  • How long do we store your data?
  • International Data Transfers
  • Marketing
  • What are your data protection rights?
  • Cookies
  • Privacy policies of other websites
  • Changes to our Privacy Notice
  • How to contact us
  • How to contact the appropriate authorities

What data do we collect?

CKE collects the following PersonalData from you:

When you contact us for information about franchise opportunities: Name, email, phone number, your company name and type (if applicable) and region of interest.

To verify your franchisee application form, we collect information about your professional experience, education background and other relevant information. 

As part of our verification process, we collect information about your credit and legal history from third-party vetting agencies, where available. Some of this information originates with publicly-available sources, such as sanctions lists.

How do we collect your data?

You directly provide CKE with most of the data (including Personal Data) we collect. We collect data and process data when:

  • You register online to receive more information about our franchise opportunities.
  • You complete a franchisee application form.
  • If we conduct follow up on your application.
  • You use or view our website via your browser’s cookies.

If you do not provide Personal Data when you register online, we will not be able to respond to your request to receive information from us. The Personal Data we request on our franchisee application form and in follow-up to that form is required for us to evaluate your eligibility to enter into a franchise agreement with CKE.

How will we use your data?

Personal Data will be used only for the purposes enunciated in this Notice, and only when we have a legal justification (“legal basis”) for doing so.  Specifically, your Personal Data may be used for the following purposes on the following legal bases:

Legal basis: To perform a contract with you or take steps to enter into a contract with you:

(1) to fulfill or meet the reason you provided the information (responding to a request for more information on franchise opportunities, to review and verify your franchisee application, evaluating your eligibility to enter into a franchisee agreement);

Legal basis: Processing is necessary for our legitimate interests to develop our products and services by improving their performance for our visitors and franchisees:

(2) to provide support and develop our Website and other products and services;

(3) to help CKE better understand visitors’ use of the Website;

(4) to provide support and respond to specific requests from visitors;

(5) to personalize your Website experience and deliver content and product and service offerings relevant to your interests;

Legal basis: Processing is necessary for our legitimate interests to protect our reputation by operating our business in compliance with the law, our contracts and our Code of Ethics:

(6) to protect the security or integrity of the Website;

(7) to comply with a non-UK or EEA law or a government investigation, to respond to law enforcement requests and as required by applicable law, court order, or governmental regulations;

(8) to enforce our rights, to prevent or investigate a possible crime; in connection with litigation or a dispute proceeding; or to protect our own rights or property, or the rights, property or safety or use by others;

Legal basis: Processing is necessary for our legitimate interests to operate our business efficiently and profitably:

(9) in connection with any proposed or actual corporate transaction, including reorganization, financing, sale, merger, bankruptcy or liquidation;

Legal basis: To comply with a UK or EEA legal obligation: 

(10) to comply with a UK or EEA law or a government investigation, to respond to law enforcement requests and as required by applicable law, court order, or governmental regulations;

Legal basis: Where you provide your consent: 

(11) Where required by law, we will market to you only with your prior consent, which you may withdraw at any time.

Transmission of Personal Data to Third Parties

CKE may share your Personal Data with CKE group companies and external entities that perform services on our behalf, such as vetting agencies, marketing service providers, technology support service providers, and cloud platform providers. In each case, such providers are required to use adequate privacy and security protections and may use the information only for the purpose of providing services to us. 

We may also share your personal information with CKE group companies and external entities that are controllers, such as our affiliates (including Carl’s Jr. Restaurants LLC), parent company and its and their respective franchisees, and our business partners, for purposes of evaluating your eligibility to enter into a franchise agreement with CKE.

How long do we store your data?

If you enter into a franchise agreement, we will keep your Personal Data for the term of that agreement and the applicable statute of limitations. If your application is not accepted, CKE will keep your Personal Data submitted in connection with a request for information or a franchise application for no more than three (3) years after we’ve informed you that your application is not accepted. Once the relevant time period has expired, we will delete your data.

International Data Transfers 

CKE is located in the United States. As part of the services offered to you through this Website, and during our ordinary business operations, the information you provide to us (including Personal Data) may be transferred to the United States and the UK. Our servers, databases, and service providers are located in the United States. The United States is not considered to provide adequate protection to Personal Data originating from your home country. The UK has received an adequacy decision from the European Commission.  

When we transfer Personal Data to the United States, we sign data protection agreements incorporating, where applicable, European Commission-approved standard contractual clauses, binding corporate rules or other instructions or measures as permitted by applicable law. You may obtain information about these agreements by contacting us at

What are your data protection rights?

CKE would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following, subject to specific conditions pursuant to applicable law:

  • Access:  You can obtain more information about the Personal Data we hold about you and request access to and a copy of such Personal Data. 
  • Rectification:  If any Personal Data we are holding about you is incorrect or incomplete, you can require that we correct or supplement such data. 
  • Erasure:  You can require that we erase some or all of your Personal Data from our systems under specific conditions set forth in applicable law, such as when processing is based solely on your consent and you withdraw it, or when data has been unlawfully processed, and provided that we do not have a UK or EEA legal obligation to continue processing the data. 
  • Restriction of Processing: Under specific conditions you can require us to restrict processing of your Personal Data so that we may only store it and not further process it, such as during the period when we verify the accuracy of your Personal Data if you claim the data is inaccurate. 
  • Portability:  Where we process your Personal Data based on your consent, or to perform a contract with you, you are entitled to receive a copy of your Personal Data in a machine-readable format. You can also request that we transmit the data to another controller. 

 Objection:  You can contact us to let us know that you object to the further use or disclosure of your Personal Data that we process in furtherance of our legitimate interests, on grounds relating to your particular situation.

You have the right object at any time to our processing of your Personal Data for direct marketing purposes.

  • Withdrawal of Consent:  If we are processing your Personal Data based on your consent, you have the right to withdraw your consent at any time.

For more information about these rights, or to submit a request, please email us at Please note that in some circumstances, we may not be able to fully comply with your request, such as if it is excessive or manifestly unfounded, if it jeopardizes the rights of others, or if it is not required by applicable law, but in those circumstances, we will still respond to notify you of such a decision. In some cases, we may also need you to provide us with additional information, which may include Personal Data, if necessary to verify your identity and the nature of your request.

  • Right to File a Complaint:  You also have the right to lodge a complaint about our practices with respect to your Personal Data with the supervisory authority of your country.


CKE uses cookies on the Website to ensure security, provide functionality, serve ads to you based on your online behavior, measure the effectiveness of those ads, and track how users interact with our site by collecting data (including Personal Data) from your device and placing information on your device. Some of these cookies are necessary to the secure functioning of our site and cannot be refused. For more information about cookies and how CKE uses cookies, read our Cookie Notice here.

Google Analytics

We use Google Analytics, which tracks interactions of Site users to systematically evaluate those interactions, using cookies. The following data will be processed in connection with the use of Google Analytics:

  • Your IP address
  • The Site you visited
  • The last website you were on before visiting our Site
  • The subpages that are visited
  • The length of stay on the Site
  • The frequency of visits to the Site

The legal ground for the processing of your personal data is your consent according to Art. 6(1)(a) of the EEA and UK GDPR.

The purpose of the processing of your personal data is to analyze and evaluate your behavior on our Site. This helps us to constantly improve our own Site and its user-friendliness.

If you want to opt-out of the use of Google Analytics please use the following link:

Privacy policies of other websites

The Website may contain links to other websites. Our Privacy Notice applies only to our Website, so if you click on a link to another website, you should read their Privacy Notice.

Changes to our Privacy Notice

CKE keeps its Privacy Notice under regular review and places any updates on this web page. This Privacy Notice was last updated on October 1, 2021.

How to contact us

If you have any questions about Our Company’s Privacy Notice, the data we hold on you, or you would like to exercise one of your data protection rights, please do not hesitate to contact us.

Email us at:

Call us: 1 (800) 227-5757

Or write to us at:  6700 Tower Circle, Suite 1000, Franklin, TN, USA 37067

How to contact the appropriate authority

The supervisory authority in the UK is the ICO Home | ICO.  A list of supervisory authorities in the EU is available here:

Please note, your browser is out of date.
For a good browsing experience we recommend using the latest version of Chrome, Firefox, Safari, Opera or Internet Explorer.