PRIVACY POLICY
Effective Date: June 1,2026
Your privacy is important to Alimentation Couche-Tard Inc., Couche-Tard Inc., Circle K Stores Inc., Mac’s Convenience Stores Inc., Mac’s Convenience Stores LLC, Holiday Stationstores, LLC, TMC Franchise Corporation and their subsidiaries and affiliates in Canada and the United States (collectively, “Circle K”, “we”, “us” or “our”). In the United States and Canada, our stores are primarily operated under the Couche-Tard, Circle K, Holiday, Mac’s, Corner Store, Kangaroo Express and On the Run banners (for more information about our banners, please visit: https://corpo.couche-tard.com/en/our-company/our-brands/). This Privacy Policy applies to our activities in Canada and the United States and describes our practices with respect to the collection, use and disclosure of personal information (“PI”), as well as any rights you may have with respect to your personal information (as defined in the Definition of “Personal Information” section below).
Depending on where you reside, we may provide you with additional disclosures that supplement this Privacy Policy; you may also have additional privacy rights not mentioned in this Privacy Policy under the applicable privacy laws of your jurisdiction. Residents of Canada and the following U.S. States, please refer to the Additional Information for Certain Jurisdictions section below: California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia. This section includes our U.S. State Privacy Notice.
Table of Content
1. Scope and Application 2. Definition of “Personal Information” 3. What Personal Information do we Collect? 4. How we Collect Personal Information 5. How we Use Personal Information 6. How we Share Personal Information 7. How we Manage Consent 8. How Can You Change Your Privacy Choices 9. How we Store and Safeguard Personal Information 10. Children Privacy 11. Additional Information for Certain Jurisdictions 12. Changes To Our Privacy Policy 13. Who Can You Contact With Privacy Questions?
1. Scope and Application
This Privacy Policy relates to the personal information collected by Circle K. This Privacy Policy applies whenever you interact with us, including when you visit our stores, visit or use one of our digital properties, such as our websites or mobile applications, sign up to be a part of any of our programs (for example, we may offer loyalty programs in certain jurisdictions), enroll into one of our subscription services (for example, our Car Wash or Sip&Save subscription services) promotions, contests or events, purchase our products or products from our stores, apply to become a franchisee, or otherwise receive our services, in each case where this Privacy Policy is posted. If you are a job candidate, please review our Privacy Notice for Candidates.
2. Definition of “Personal Information”
“Personal information” means any information about, relating to, identifying or could reasonably be associated or linked with an identifiable individual or their household (collectively, “individual” or “you”). This may include, for example, your name, contact information, email address, and information relating to your account with us (as the case may be). It may also include other types of more technical information, but only when this information can identify you as an individual. Information that is aggregated and/or anonymized and no longer allows an individual to be identified is not considered to be personal information. Please note that the definition of personal information may differ in various jurisdictions and include similar but differing terms such as “personal data.” Where required by applicable law, we will apply such different definitions and treat information that qualifies as personal information under those laws accordingly.
3. What Personal Information do we Collect?
Generally, we limit the collection of personal information to what is reasonably required to fulfill the purposes for which it was collected. We collect personal information in a variety of ways, as detailed in the How we Collect Personal Information section below.
Personal information we collect may include:
- Identifiers and contact information, such as your name, email and postal addresses, telephone number, Internet Protocol (IP) address (if it can identify you as an individual), device identifier or account information (for example, if you have downloaded one of our apps or you have created an account upon signing up for our services, such as our car wash services);
- Demographic data, such as date of birth or gender, as applicable;
- Transactional information, such as history of purchases made using a payment or credit card provided by Circle K (for instance, the Easy Pay card) and information generated by your participation in our loyalty program, as applicable (e.g. the number and amount of transactions by type, location/store of purchase, product code information, brand, quantity purchased, date, time, payment method used, promotional offers used in connection with the transaction, etc.);
- Browsing and service usage activity. This includes information collected by Tracking Technologies (defined below), which includes information such as:
- your device functionality (browser, operating system, hardware, mobile network information);
- the URL that referred you to our digital property;
- the areas within our Service that you visit and your activities there (including emails, such as whether you open them or click on links within), including information that you enter into search bars;
- your device location (if you have enabled such features on your device);
- your device characteristics; and
- device data and the time of day.
- Payment information, such as credit or debit card number when you make purchases, as applicable;
- Geolocation information may be collected when you use our websites and apps;
- Information collected through technologies in our stores, including CCTV, anonymous video analytics technologies, or other types of video cameras and sensors (as further detailed in the How we Collect Personal Information section); and
- Other information you provide to us, such as information included in forms, requests, feedback, survey responses, contest entries, customer service communications, franchise applications, social media interactions, or other communications with us, as further detailed in the How we Collect Personal Information section.
Inferences drawn from the personal information we collect, for example, non‑sensitive insights about your product preferences or how you typically interact with our websites or apps. These inferences are used only to improve your experience and our services and are not used to infer sensitive characteristics or to make automated decisions about you.
4. How we Collect Personal Information
We collect personal information in a variety of ways, including: directly from you, from business partners, from technologies used at our locations, through online technologies (such as when you are interacting with us through our websites and apps), from third-party social networks and other third parties.
Where third parties use their own technologies or collect information for their own purposes, their processing is governed by their own privacy policies.
More specifically, we collect personal information in the following ways:
A. DIRECTLY FROM YOU
We may collect personal information directly from you in our stores (including through our point-of-sales systems and other in-store interactive tools such as the LIFT screens), by mail, by email, over the telephone, through our websites and apps, or in any other direct manner. For instance, we may collect personal information when you make a purchase, give us feedback on our stores and the products for sale in our stores, participate in a contest or survey, complete a franchise application, or make a request to our customer service.
For example:
Circle K offers many programs and services through which we may collect personal information directly from you, for instance: our brands’ main websites (e.g., https://www.circlek.com/, https://www.couche-tard.com/, and http://www.holidaystationstores.com/), gamification websites on which you may participate into a contest, our brands’ main apps (the Circle K, Couche Tard and Holiday apps), the Circle K Inner Circle loyalty program, the Circle K Easy Pay program, the Circle K EV chargers, our subscription services (such as the Car Wash and Sip&Save programs), our interactive LIFT screens at the point-of-sale, contests and sweepstakes or our newsletters.
B. FROM BUSINESS PARTNERS
Occasionally, we may receive personal information from business partners with whom we offer certain products at our stores or to provide certain programs. We may also receive your personal information from other sources with your consent or where permitted or required by law.
For example:
- We may participate in the loyalty programs of our business partners, such as fuel companies and grocers, to allow participating customers to earn points and redeem rewards at our locations. In such case, your participation is subject to the privacy policy of our business partner and we collect from you and receive from our partners the information necessary to allow you to participate in the program.
- We may receive your personal information from business partners with whom we organize contests, such as television stations, in order to allow you to redeem your prize at our stores.
C. AUTOMATICALLY FROM TECHNOLOGIES USED AT OUR LOCATIONS
We may collect personal information through various types of technologies used in our stores. These can include video surveillance, sensors or other similar types of systems that we may use from time to time.
For example:
- We use video surveillance in and around our premises for security purposes, including to help protect against theft, property damage, fraud, and other misuse of our locations.
- We may also use video analytics technologies to understand store traffic and improve customer experience. Where these technologies are configured so that individuals are not identified or identifiable, the resulting information is treated as anonymous or aggregate information.
- In certain selected and clearly identified stores, where we offer a frictionless experience, we may use video cameras and sensors to allow our customers who have signed up for frictionless check-out services to make purchases without having to go through the cashier.
- In certain selected and clearly identified stores where we conduct research projects, we may use video cameras and sensors (using Wi-Fi tracking, Bluetooth, RFID and similar technologies) to map individuals’ movements in the store and identify items selected by customers. This allows us to better understand in-store customer experience and to allow our customers who have signed up for frictionless check-out services to make purchases without having to go through the cashier.
D. THROUGH ONLINE TECHNOLOGIES
With your consent or as permitted under applicable law, we may collect certain types of information automatically when you interact with our websites and apps, emails, social media accounts, online advertising, or through the use of our or a third party’s technologies, which include cookies, web beacons, single pixel gifs, analytics tools, advertising identifiers, or other tracking technologies (“Tracking Technologies”). This information helps us understand what actions you take on our websites and apps and allows them to work correctly.
We may combine this information with other general non-sensitive type of information collected in-store or online such as your transaction history. We do this to support our customer understanding using website and mobile analytics and to provide you with more tailored advertising and marketing campaigns. This includes serving interest-based advertising to you, subject to your privacy choices. To learn more about the privacy choices available to you, please visit How Can You Change Your Privacy Choices section below.
For example:
- We may use your location or language preference to auto-select features when you visit our websites or download our apps.
- We may use your personal transaction information to provide you with interest-based advertisements on products that we believe may interest you (e.g. products that you purchase frequently).
- We may collect, combine and categorize your personal information on an aggregated basis to identify purchasing patterns to help us analyze our businesses to better serve our customers.
The Tracking Technologies we use include:
- Cookies are small data files that are stored on your device (such as your computer, smartphone, or tablet) when you visit a website. Cookies allow a website to recognize your device between visits and remember certain information about your browsing activities. Depending on the type of cookie, this may include details such as your language preferences, login information, browsing behavior, or the items you have placed in your shopping cart. Cookies serve several purposes, including enabling core website functions, improving performance, helping us understand how visitors use our websites and apps, and supporting tailored advertising based on your interests—subject to your privacy choices and applicable law.
- Web beacons and single pixel gifs are small image files or code snippets that help us understand interactions with websites, apps, emails, and advertisements, such as whether an email was opened or a link was clicked. These technologies may collect information such as IP address, device information, browser information, and interaction data.These tools also allow our third-party tracking tools to gather information and provide this back to us in an anonymized, aggregate form (i.e., in a manner that prevents us from identifying you). Aggregate information refers to personal information compiled and expressed in a summary form where no personal identifiers are included.
- Web analytics tools such as Google Analytics, which uses cookies to analyze your use of our websites and apps, to create reports about visitor and user activities for us and to provide further services associated with the use of our websites and apps.
- Analytics engines, which pull usage data from multiple sources such as Hotjar, AppsFlyer and Qualtrics and help manage and collect this data to use for personalization, interest-based advertising, customizing content and other methods to gain insights into our customers’ needs and preferences.
- With respect to our mobile applications, we use Identifier for Advertising for iOS and Google Advertising ID for Android.
- Tools that help protect against inappropriate uses, such as Google Invisible reCAPTCHA, which collects hardware and software information, such as device and application data, and the results of integrity checks, as well as unique online identifications such as IP address, and sends that data to Google for analysis.
Interest-Based Advertising
We may engage and work with service providers and third-party services to serve advertisements on our digital properties and/or on other online services. Some of these ads may be tailored to your interest based on your browsing across time on the Service and elsewhere online (such as other websites and services), which may include use of precise location and/or cross-device data, sometimes referred to as “Interest-Based Advertising” (“Interest-based Advertising”). See How Can You Change Your Privacy Choices section below for information on exercising choice as to Interest-based Advertising and our U.S. State Privacy Notice for information on your choices with respect to Interest-Based Advertising that qualifies as “Targeted Advertising” and/or “Cross-Context Behavioral Advertising”.
You may delete or disable certain of these technologies via your browser or device settings. However, if you do so, you may not be able to use some of the features on our websites. To learn more about the privacy choices available to you, please visit How Can You Change Your Privacy Choices section below.
E. THIRD-PARTY SOCIAL NETWORKS
We may collect your personal information if you interact with us through our social media pages and accounts (e.g. Facebook, Twitter, Instagram). For instance, we collect the personal information these social media platforms allow us to collect from our followers. We may also collect any content you upload to our social media pages and accounts (including photos or videos).
F. FROM OTHER THIRD PARTIES
In certain cases, we may collect personal information from other categories of third parties, but only with your consent or as permitted or required by applicable law. Third parties may include credit report agencies or background check providers.
5. How we Use Personal Information
We may use all categories of personal information detailed in the What Personal Information do we Collect? section above to provide you with our programs, products, and services, to manage our business operations and make hiring decisions, to communicate offers and information we think might interest you, to generally enhance your customer experience with us, and as otherwise permitted or required by law.
Learn more in our sections below about how we use your personal information for: PROVIDING OUR PROGRAMS, PRODUCTS, AND SERVICES, MANAGING OUR BUSINESSES, MARKETING AND ADVERTISING, and CONDUCTING MARKET RESEARCH AND DATA ANALYTICS .
A. PROVIDING OUR PROGRAMS, PRODUCTS AND SERVICES
We use your personal information to provide and administer our programs, products, services, accounts, subscriptions, digital features, promotions, and applications. This includes:
- Processing purchases, payments, transactions, and returns;
- Verifying your identity;
- Determining your eligibility for a program, product, service, promotion, contest, or offer;
- Responding to your inquiries, requests, complaints, feedback, or customer service communications;
- Allowing you to earn loyalty points and redeem rewards;
- Responding to your requests or taking, confirming, or verifying instructions from you;
- Enabling your participation in contests, promotions, surveys, customer service chats, or other interactive features;
- Reviewing, assessing, and processing applications, including franchise applications;
- Creating, administering, and maintaining your accounts;
- Administering subscription services, EV (electric vehicle) charging services, loyalty programs, payment programs, and other Circle K services;
- Allowing you to make purchases at selected stores without checking out at the cashier, if you have subscribed to this service;
- Where permitted by law and, where required, with your consent, verifying your credit when necessary for certain products, services, programs, or applications.
We use your personal information to operate, administer, protect, and improve our business, programs, products, services, websites, and apps. This includes, without limitation:
- Notifying you of changes to your account or our websites and apps’ services, terms, conditions, or policies and to provide you administrative messages, updates, legal notices, technical notices, or security alerts;
- Deploying, maintaining, securing, and managing our information technology applications and systems, including our websites and apps;
- Managing and facilitating the use of our websites and apps, which may include using cookies and similar technologies used for functionality, security, and service performance(as further detailed in the How we Collect Personal Information section);
- Maintaining the security and safety of our customers, employees, the public, our locations, systems, and property, including through video surveillance and other in-store technologies, as further detailed in the How we Collect Personal Information section;
- Using aggregated, de-identified, or otherwise non-identifiable information, where possible, to support business decisions such as product assortment, store operations, and pricing strategy;
- Protecting Circle K, our customers, business partners, and third parties from errors, misuse, fraud, theft, security incidents, and other unlawful or harmful activity;
- Monitoring, investigating, documenting, and responding to incidents, complaints, disputes, and claims;
- Maintaining, testing, improving, and troubleshooting our programs, products, services, websites, apps, accounts, and other business operations;
- Meeting our contractual, legal, regulatory, tax, accounting, recordkeeping, reporting, and compliance obligations.
C. MARKETING AND ADVERTISING
We use your personal information to deliver marketing communications to you about our stores, brands (including Circle K, Couche-Tard, Holiday, Sloche, Provi-Soir, Froster, K Freeze, Polar Pop, etc.), programs, products, services, special offers, promotions, contests, or events. This may also include products or services offered by business partners or other third parties where they are available through our stores, websites, apps, programs, or promotions. We may do this in a variety of ways, including:
- By communicating with you by email, telephone, SMS, direct mail, push notification, and social media;
- By delivering online advertisements that may be relevant to you, including through cookies, advertising identifiers, and similar technologies, as further detailed in the How we Collect Personal Information section;
- By customizing the content you see on our websites and apps; and
- By customizing product recommendations through interactive in-store screens, where available, based on your interaction with the screen, the relevant service, or other information permitted for this purpose.
If you no longer wish to receive commercial electronic messages (e.g., promotional emails or SMS), please let us know by following the unsubscribe directions provided in every commercial electronic message. For more information on managing your marketing preferences and other privacy choices, see the How Can You Change Your Privacy Choices section below.
D. CONDUCTING MARKET RESEARCH AND DATA ANALYTICS
We may use your personal information in order to conduct market research and data analytics by tracking and analyzing your information for the following purposes:
- Improving, testing, or developing new products, services (e.g. improving our websites and apps), programs, promotions, contests, or events;
- Understanding customer needs, preferences, purchasing patterns, service usage, and interactions with our stores and digital services;
- Managing, evaluating, and developing our business, store operations, products, services, and customer experience;
- Understanding customer needs and preferences and customizing how we tailor and market products and services to our customers based on their interests;
- Measuring the effectiveness of our marketing, advertising, promotions, communications, and customer engagement; and
- Understanding how visitors interact with our websites and apps and ensure they work correctly.
Where individual identification is not necessary for these purposes, we use aggregated, de-identified, or otherwise non-identifiable information where possible.
6. How we Share Personal Information
We may share your personal information within Circle K and companies within our corporate group or with our third party business partners (companies with which we provide programs, products, or services) and service providers (companies operating on our behalf) for the purposes described in this Privacy Policy and in accordance with applicable law. We may also share your personal information with third parties for statistical or scholarly research purposes, always in compliance with applicable law. We will not share your personal information with any non-affiliated third party without your prior consent, other than as provided in this Privacy Policy or as otherwise authorized by applicable law. We do not sell your personal information to any organization or person; the only exception to this would be if we sell or transfer any part of our business. Depending on where you reside, you may have additional rights regarding how we share your personal information. Please refer to the Additional Information for Certain Jurisdictions section below for more information on our practices specific to the law applicable to you.
Learn more in our sections below about how we may share personal information: WITHIN THE CIRCLE K GROUP, with third party BUSINESS PARTNERS, with third party SERVICE PROVIDERS, with academic institutions and research partners for specific RESEARCH projects (such as the Connect Store at McGill Retail Innovation Lab), in the course of a SALE OR TRANSFER OF BUSINESS OR OTHER TRANSACTION, for OTHER PERMITTED REASONS, and WITH YOUR CONSENT.
A. WITHIN THE CIRCLE K GROUP
Circle K affiliates and subsidiaries in Canada, the United States, and internationally may share personal information with each other and use it for the purposes described in this Privacy Policy. This allows Circle K and each entity within the group to comply with applicable laws, regulations, and requirements and ensures that your information is consistent, accurate, and up-to-date. In addition, it increases the quality and relevance of the services you receive and improves your interactions with Circle K through easier access to your information within the group.
We may share your personal information with third party business partners with whom we associate to provide certain products or services. These partners may include fuel companies, retail partners, or other organizations involved in joint programs or offerings.
We share personal information with business partners only as necessary to enable these offerings, such as to allow you to participate in a program, earn or redeem rewards, access services, or receive benefits associated with the relevant program or promotion.
For example:
We may participate in loyalty programs offered by our business partners, such as fuel companies or grocers, and we may need to share personal information about our participating customers to allow them to earn points and redeem rewards at our locations.
C. SERVICE PROVIDERS
In the course of providing our programs, products, services, promotions, contests, and events we may share all categories of personal information detailed in the section What Personal Information do we Collect? with third party service providers who perform services on our behalf. These service providers help us operate our business, technology systems and applications, internal procedures, infrastructure, advertising, and marketing. They provide services to us, such as fulfilling purchases, processing credit card payments, performing credit checks, sending emails and postal mail, call centres, customer relationship management, customer identity and access management, data hosting, contest administration, providing advertisements, and analytics services (e.g. tracking effectiveness of our marketing campaigns and analyzing usage of our websites and apps).
For example:
- Personal information collected from contest participants may be shared with our contest administrator to contact selected winners.
- We use payment card providers, credit card providers, and loyalty program providers that will have access to subscribers’ personal information as required to provide their services to Circle K.
D. SALE OR TRANSFER OF BUSINESS OR OTHER TRANSACTION
We may disclose personal information to a third party in connection with a sale or transfer of business or assets, an amalgamation, reorganization, or financing of parts of our business (including the proceedings of insolvency or bankruptcy) to the extent permitted under applicable law.
E. RESEARCH
We may disclose information collected in certain selected and clearly identified stores where we conduct research projects with academic institutions and research partners for statistical or scholarly research purposes in compliance by applicable laws. When possible, we will share information for such purposes in aggregated and/or de-identified format.
For example:
We may disclose to researchers working at the McGill Retail Innovation Laboratory the information collected through video cameras and other sensors deployed in the Connect Store located on the campus of McGill University that provide a frictionless check-out experience or are used to test experimental retail systems and methods, who may use this information, on an aggregated and/or de-identified basis, for research purposes.
F. OTHER PERMITTED REASONS
Applicable laws may permit or require the use, sharing, or disclosure of personal information without consent in specific circumstances (e.g., when investigating and preventing suspected or actual illegal activities, including fraud, or to assist government and law enforcement agencies). These circumstances include situations when permitted or required by law or when necessary to protect our group of companies, our employees, our customers, or others. If this happens, we will not share more personal information than is reasonably required to fulfill that particular purpose.
G. WITH YOUR CONSENT
Other than the purposes listed above, we may, with your implied or express consent, share or disclose your personal information outside of our group of companies, in accordance with applicable laws.
7. How we Manage Consent
By subscribing to our programs, products, and services and/or submitting information to us in connection with using our programs, products, and services, you are providing your consent to the collection, use, and disclosure of personal information as set out in this Privacy Policy. In some cases, your consent may be “implied” i.e. your permission is assumed based on your action or inaction at the point of collection, use or sharing of your personal information.
We will generally obtain consent when we want to use personal information for a new purpose or for a purpose other than those stated at the time of collection in this Privacy Policy or in the terms and conditions of a specific program, product, service, contest, promotion, or event you signed up for, participated in, or purchased. You may be entitled under applicable law to withdraw your consent (except in limited circumstances, including legal or regulatory requirements or as a result of your contractual obligations with us). For information on how to manage your privacy preferences, please see the How Can You Change Your Privacy Choices section below.
If you choose not to provide us with certain personal information or if you withdraw your consent, where such withdrawal is available, we may not be able to offer you the programs, products, services, contests, promotions, events, or information that you requested or that could be offered to you.
8. How Can You Change Your Privacy Choices
We want you to clearly understand your choices and make informed decisions about your privacy options. There are several options available for you to manage your privacy preferences, including, for example: managing your preferences within your account when applicable, contacting us directly, changing your browser settings on your device, and/or, where available, using third-party unsubscribe functionality.
Learn more in our sections below about how to change your privacy choices WITHIN YOUR ACCOUNT, WHEN YOU REGISTER OR BY CONTACTING US DIRECTLY and USING THIRD PARTY UNSUBSCRIBE FUNCTIONALITY.
A. WITHIN YOUR ACCOUNT
If you have an account with us, you can update your preferences where customer preference options are available through the relevant program, product, or service. Users of the Couche-Tard mobile application may request to have their application profile data deleted within the mobile application. To do so, navigate to the “more” section of the mobile application, and press “delete my account”. To exercise any privacy rights you may have, please follow the instructions set forth in Section 13 below.
B. WHEN YOU REGISTER OR BY CONTACTING US DIRECTLY
You may opt in to receiving email or SMS marketing communications at the time that you register for our programs, products, or services, enter our contests or promotions, or any time thereafter through your online account(s). We may also have your implied consent to send you such marketing electronic communications under applicable laws.
You may also withdraw your consent to other forms of marketing and advertising or to the use of your personal information for market research by communicating with the applicable Privacy Office as indicated in the section Who Can You Contact With Privacy Questions? below.
Please note the following regarding withdrawal of consent or changes in your privacy preferences:
- Even if you have opted out of receiving marketing communications from us, we may still contact you for transactional purposes, in compliance with applicable laws (e.g., for customer service, product information, service or reminder notices, or recalls). We may also need to contact you with questions or information regarding your customer service inquiries; and
- It may take some time for all our records to reflect changes in your preferences (e.g., if you request that you not receive personalized marketing communications from Circle K, your preference may not be captured for a promotion already in progress).
C. USING THIRD PARTY OPT-OUT FUNCTIONALITY
With your consent or as permitted under applicable law, we may use third parties (e.g., web companies or social media platforms) that use certain technologies to analyze your browsing behavior as you visit our websites and apps. You can manage your privacy preferences with respect to certain third parties, such as Google and Facebook, by using the opt-out functionality within their platforms. Please note that disabling, blocking, or deleting some of these technologies, such as cookies, may cause you to lose the functionality of certain features on our websites and apps.
For example, Google Analytics uses cookies to analyze your browsing behavior on our websites. This information is not provided to us in a personally identifiable format and is collected through your ad settings on your device or browser. If you would like to opt out of Google’s ad settings, please go to www.google.com/settings/ads or use the Google opt-out browser add-on located at https://tools.google.com/dlpage/gaoptout.
For more information about Interest-Based Advertising, or to opt out of having your web browsing information used for behavioral advertising purposes, please visit http://www.aboutads.info/choices/ and https://optout.networkadvertising.org/. Your web browser or device may also include features or settings that allow you to opt out of having certain information collected through apps used for behavioral advertising purposes; for more information, consult the settings of your browser or device.
We may also embed links to other websites, including social media websites, on our websites and apps. For more information about social media plug-in protocols, such as “Like” buttons on Twitter, Facebook or Instagram and their impact on your privacy rights, please visit the appropriate social media help centre.
9. How we Store and Safeguard Personal Information
We take the security of your personal information very seriously and are committed to protecting your privacy by using a combination of administrative, physical, and technical safeguards. Your personal information may be stored in foreign jurisdictions, in which case it will be subject to foreign laws. We will store your personal information in accordance with our retention policies or as otherwise required or permitted by law.
Learn more in our sections below about HOW WE PROTECT PERSONAL INFORMATION, WHERE WE KEEP PERSONAL INFORMATION AND CROSS-BORDER TRANSFERS, and HOW LONG WE KEEP PERSONAL INFORMATION.
A. HOW WE PROTECT PERSONAL INFORMATION
We employ organizational, physical, and technological measures to protect the confidentiality of personal information and to safeguard personal information against loss, theft, unauthorized access, disclosure, copying, use, or modification, in light of, among other things, the sensitivity of the information and the purposes for which it is to be used. These safeguards also apply when we dispose of or destroy your personal information. We use reasonable safeguards to ensure that our service providers protect your personal information wherever it is used or stored. A list of safeguards include:
- A designated Privacy Officer tasked to monitor our compliance with applicable privacy laws;
- Internal policies and procedures that define the roles and responsibilities of our employees throughout the life cycle of an item of information and limit their access to that information on a “need-to-know” basis and the retention of destruction of personal information;
- Procedures for responding to complaints or inquiries related to privacy, including related any confidentiality incident involving personal information;
- If the information is collected or stored electronically, technical safeguards such as encryption, firewalls, passwords, anti-virus software, or similar measures;
- Contractual protections and other measures to ensure that service providers with whom we share personal information maintain adequate protections and security standards. For example, we generally require our service providers to limit their use and retention of personal information to that which is necessary to perform their services and to notify us in the event of an actual or suspected confidentiality incident. We also attempt to monitor and verify their compliance with these requirements in a variety of ways (e.g., on-site inspections (where possible), surveys and interviews, proof of certification).
- Employee training in privacy and information security.
Our objective is to prevent any unauthorize access, data loss, misuse, and unauthorized sharing of modification to personal information in our control. We also use these protection measures when we delete or destroy your personal information.
B. WHERE WE KEEP PERSONAL INFORMATION AND CROSS-BORDER TRANSFERS
We may share personal information within the Circle K group of companies, including in Canada, the United States and the European Union. Some of our service providers may also access, process, or store your personal information outside of the country, the province or state where we are located and where you reside. As a result, when your personal information is accessed, processed or stored in a jurisdiction other than where you are residing, it may be subject to the law of this foreign jurisdiction, including any law permitting or requiring disclosure of the information to the government, government agencies, courts, and law enforcement in that jurisdiction.
C. HOW LONG WE KEEP PERSONAL INFORMATION
We will store your personal information in accordance with our retention policies or as otherwise required or permitted by law, after which your personal information will be securely destroyed or anonymized (so the information no longer identifies you) in compliance with applicable laws.
10. Children’s Privacy
We do not knowingly request or collect personal information from children under 14 years of age without prior verifiable consent of their parent or legal guardian, and comply with any other legal requirements. If we become aware that we have unknowingly collected personal information about a child without verifiable parental or legal guardian consent, we will delete this information from our records.
11. Additional Information for Certain Jurisdictions
Last Updated: June 01,2026
11.1. U.S. State-Specific Privacy Notice (“U.S. State Privacy Notice”)
This U.S. State Privacy Notice applies to “Consumers” as defined under state consumer privacy laws in effect in California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island*, Tennessee, Texas, Utah, and Virginia (“State Privacy Laws”).
*Rhode Island’s privacy law refers to “Customers”; references to “Consumers” throughout shall include “Customers” as defined in such law.
This U.S. State Privacy Notice is a supplement to this Privacy Policy. In the event of a conflict between any other Circle K policy, statement, or notice and this U.S. State Privacy Notice, this U.S. State Privacy Notice will prevail as to Consumers and their rights under the State Privacy Laws. If you are an employee, former employee, independent contractor, or job applicant, please refer to the California HR Data Privacy Policy.
Section 11.1.1 covers Circle K’s Collection, Use, and Sharing of Personal Information as defined under the State Privacy Laws. Section 11.2.1 describes your Rights under State Privacy Laws and explains how to exercise those rights.
11.1.1. Collection, Use, and Sharing of Personal Information
This U.S. State Privacy Notice is designed to provide you with notice of (a) our recent, historical data practices over the prior 12 months (from the Last Update date listed at the top of this State Privacy Notice) and (b) our current data practices such that it is also meant to comply with requirements under California’s law, referred to as “notice at collection,” by providing you with notice of personal information we collect and the purposes for which we process personal information, among other things that are required.
(a) Use of Personal Information.
Generally, we collect, retain, use, and disclose your personal information to provide you services and as otherwise related to the operation of our business, the whole as further described above. The business and commercial purposes for which we collect, retain, use, and disclose your personal information are the following:
- the business and operational purposes described in sections 4 (How we Collect Personal Information), 5 (How we Use Personal Information), and 6 (How we Share Personal Information) above;
- the CCPA’s listed business purposes (below);
- the purposes that we otherwise notify you of at the time of collection; and
- other purposes that are related to or compatible with the context in which we collected your personal information.
The CCPA’s listed business purposes include:
- Performing services, such as fulfilling your orders
- Providing advertising or marketing services
- Research and development
- Improving our products and services
- Quality assurance
- Security and fraud prevention
- Debugging and fixing errors
- Processing interactions and transactions (e.g., short-term, transient use of personal information)
- Managing interactions and transactions (e.g., auditing related to a current interaction with the consumer and concurrent transactions)
Our third-party service providers may also use your personal information for some or all of the business purposes. Our third-party service providers may themselves engage services providers or subcontractors to enable them to perform services for us, which sub-processing is, for purposes of certainty, an additional business purpose for which we are providing you notice.
(b) Categories of Personal Information Collected and Shared with Third Parties.
The first column of the table below describes the categories of personal information we collect about you. The third column of the table describes, as to each category of personal information, the third parties with whom we shared your personal information for business purposes.
We have sold or shared the following categories of personal information: Identifiers and Internet Usage information, and the recipients of each category of personal information would be Cookie Operators. Please see the Do Not Sell/Share/Target section within the Rights under State Privacy Laws section below for information on how to exercise opt-out rights with respect to personal information collected by Cookie Operators.
|
Examples within category |
Categories of Recipients |
|
|
1. Identifiers and Contact Information |
Real name, alias, postal address, unique personal identifiers, online identifier (such as mobile advertising ID, cookie ID), Internet Protocol address, e-mail address, and account name. |
|
|
2. Personal Records |
Name, signature, description, address, telephone number, and financial information (e.g., payment card information). Some personal information included in this category may overlap with other categories. |
|
|
3. Personal Characteristics or Traits |
In some circumstances, we may collect personal information that is considered protected under U.S. law, such as age, gender, nationality, race or information related to medical conditions, but only when that information is relevant for our Business Purposes. |
|
|
4. Customer Account Details / Commercial Information (such as your purchase history) |
Records of products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. |
|
|
5. Internet Usage Information (such as search or browsing history or service usage information) |
When you browse our sites or otherwise interact with us online, we may collect browsing history, search history, and other information regarding your interaction with our sites, applications, or advertisements. |
|
|
6. Location Data (such as where you enable location-based features on your device) |
If you interact with us online we may gain access to the approximate, and sometimes precise, location of the device or equipment you are using. |
|
|
7. Audiovisual and Similar Information (such as security camera footage, customer service call recordings) |
We may collect audio, electronic, or similar information when you visit our stores or contact us. |
|
|
8. Inferences from Personal Information Collected |
Inferences drawn from personal information to create a profile about a Consumer reflecting, without limitation, preferences, characteristics, predispositions and/or behavior. |
|
|
Sensitive PI |
||
|
Government IDs |
We may collect various government IDs if you apply to be a franchisee. |
|
|
Account Information and Password |
We may store your account log-in in combination with a password in our systems. |
|
|
Precise Geolocation Data |
We may collect this data where you enable location-based features on your device. |
|
We also may disclose each category of PI in the table to the following categories of recipients in a manner that does not constitute Sale or Sharing:
- Individuals or companies at your direction or through your intentional action
- The government or private parties to comply with law or legal process; and
- Assignees as part of an acquisition, merger, asset sale, or other transaction where another party assumes control over all or part of our business.
(c) Sources of Personal Information.
See section How we Collect Personal Information above.
11.1.2. Rights under State Privacy Laws.
(a) Making a Request and Scope of Requests.
We provide Consumers (which are residents of the states listed above in Section 11.1) the privacy rights under the State Privacy Laws as described in this section. For residents of states without a State Privacy Law, we will consider requests but will apply our discretion in how we process such requests.
You have the right to exercise these rights on your own behalf or, for certain types of requests, via an authorized agent who meets the requirements of the State Privacy Laws. Certain requests that you or an authorized agent submits to us are subject to a legally required identity verification process as described in the Verifying Your Request section below. We will not fulfill your request unless you have provided sufficient information for us to reasonably verify you are the consumer about whom we collected personal information (“Verifiable Consumer Request”).
To make a request to know/access, correct, or delete, please submit your request to us by either:
- Calling us at our toll-free number: 1-833-662-0510
- Visiting our request portal: Individual Rights Request Form
To make a request to opt-out of sale, sharing, or processing for purposes of targeted advertising, please see the Do Not Sell/Share/Target section below.
Sometimes, the personal information we maintain about you is not sufficiently associated with enough personal information about you for us to be able to verify that it is your personal information (e.g., clickstream data tied only to a pseudonymous browser ID). We do not include that unverified personal information in response to those requests. If we cannot comply with a request, we will explain the reasons in our response. You are not required to create a password-protected account with us to make a Verifiable Consumer Request. We will use personal information provided in a Verifiable Consumer Request only to verify your identity or authority to make the request and to track and document request responses, unless you also gave it to us for another purpose.
We will make commercially reasonable efforts to identify personal information that we collect, process, store, disclose and otherwise use and to respond to your privacy rights requests. We will typically not charge a fee to fully respond to your requests; provided, however, that we may charge a reasonable fee, or refuse to act upon a request, if your request is excessive, repetitive, unfounded, or overly burdensome. If we determine that the request warrants a fee, or that we may refuse it, we will give you notice explaining why we made that decision. You will be provided a cost estimate and the opportunity to accept such fees before we will charge you for responding to your request.
(b) Verifying Your Request.
In order for us to look into your request, we first need to verify your identity, meaning that we need to make sure that you are the Consumer we may have collected personal information about or a person who has been duly authorized to make the request on behalf of the consumer (see our “Authorizing an Agent” section below in (c)). The verification standards we are required to apply for each type of request vary.
To verify your identity, we ask that you to provide us with, at a minimum, your full name and phone number or email, and the nature in which you have transacted or interacted with us (e.g., in store or online, or both). Depending on the nature of the request and whether we have the phone number or email address you have provided in our systems, we will request further information from you in order to verify that you are the consumer about whom we have collected information.
For requests with regards to obtaining data or a specific pieces request to know and a request to delete important data, we are required to verify a consumer’s identity to high degree of certainty, which may include matching at least three data points provided by the Consumer with data points maintained by us (and which we have determined to be reliable for the purpose of verifying the consumer), together with a signed declaration under penalty of perjury that the requestor is the consumer whose personal information is the subject of the request. If we cannot verify you to that standard, we will treat the request as a categories request or a standard deletion request, for which we require a reasonable degree of certainty based on matched data. If we are unable to verify you to that standard, we will refer you to this U.S. State Privacy Notice.
(c) Authorizing an Agent.
Depending on your state of residence and the type of request you make, you may designate an authorized agent to submit your consumer request on your behalf by submitting a request in the manners described above. If you are an authorized agent who would like to make a request, we are required to ensure that a right to know or deletion request made by an agent is a Verifiable Consumer Request. This may require us to request further information to ensure that the Consumer has authorized the agent to make the request on their behalf. Generally, we will request that an agent provide proof that the Consumer gave the agent signed permission to submit the request. We also may require the Consumer to either verify their own identity or directly confirm with us that they provided the agent permission to submit the request.
(d) Consumers have the following privacy rights under the State Privacy Laws:
(1) Appeal Rights
Residents of Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, Nebraska, New Jersey, New Hampshire, Oregon, Rhode Island, Tennessee, Texas, and Virginia have the right to appeal our decision regarding a request by following the instructions in our response to your request.
(2) Right to Limit Sensitive PI Processing
Certain personal information qualifies as sensitive data or Sensitive PI under the State Privacy Laws, which we refer to in this State Privacy Notice as “Sensitive PI”. Certain State Privacy Laws require us to state that you have the right to direct businesses to limit their use and disclosure of Sensitive PI if we use or disclose it beyond certain internal business purposes. However, we do not process Sensitive PI in a way that would make that limitation right applicable.
(3) Right to Know/Access
Right to Know Categories
If you are a California resident, you have the right to request that we share with you certain information to you about our collection, use and disclosure of your PI over the 12-month period prior to the request date, related to categories of PI. You can request that we disclose to you: (1) the categories of PI we collected about you; (2) the categories of sources for the PI; (3) our business or commercial purpose for collecting or selling that PI ; (4) a list of the categories of PI disclosed for a business purpose in the prior 12 months and, for each category of PI, the categories of recipients; and (5) a list of the categories of PI sold or shared about you in the prior 12 months and, for each, the categories of recipients.
Indiana residents also have the right to obtain a representative summary of the PI we have collected about you. You can make this request by making a “right to know categories” request.
Delaware and Maryland residents have the right to request categories of third parties to which we have disclosed PI. You can make this request by making a “right to know categories” request.
Right to Know Specific Pieces
You have the right to request a transportable copy of the specific pieces of PI we collected about you. In some states, such as California, this includes the right to PI collected in the 12-month period preceding your request. Please note that PI is retained by us for various time periods, so there may be certain information that we have collected about you that we do not even retain for 12 months (and thus, it would not be able to be included in our response to you). Based on your state of residence, we may apply a limit on the number of “right to know” requests you make over a particular time period, as permitted in the applicable State Privacy Law.
(4) Right to Confirm Processing
You have the right to confirm if we are processing your PI, which you can request pursuant to a know/access request described above, and to access your personal information as just stated above.
(5) Right to Delete
You have the right to request that we delete your PI that we have collected and retained, subject to certain exceptions which we will explain (if they apply). In some states, this right is limited to PI that we collected directly from you. After we confirm that your deletion request is a Verifiable Consumer Request, subject to permitted retention exceptions, we will carry out one or more of the following: (i) permanently erase your PI on our existing systems with the exception of archived or back-up systems, (ii) deidentify your PI, or (iii) aggregate your PI with other information. In our response to your request to delete, we will tell you the method for deleting your PI. Where legal exceptions will apply to your request for deletion, we will tell you which one(s) and will limit retention to the permitted purpose(s).
(6) Right to Correct
You have the right to request that we correct inaccuracies that you find in your personal information maintained by us. Your request to correct is subject to our verification (discussed above) and the response standards in the applicable State Privacy Laws.
(7) Select State Residents: Third Parties List Right
Minnesota, Oregon, Connecticut, and Rhode Island residents have the right to request a list of third parties (non-service providers/processors) to which we have disclosed personal information. This is subject to various exceptions, such as information that would fall under trade secret protection or confidentiality obligations.
(8) Do Not Sell/Share/Target
Under the various State Privacy Laws, Consumers have the right to opt-out of certain processing activities. California and certain other states have opt-outs specific to what some states define as “Targeted Advertising,” which involves the use of PI from different businesses or services to target advertisements to you. California’s law refers to these activities as “cross-context behavioral advertising.” California provides Consumers the right to opt-out of Sharing, which includes providing or making available PI to third parties for such activities, while other states provide Consumers the right to opt-out from processing PI for more broadly. There are broad and differing concepts of the Sale of PI under the various U.S. State Privacy Laws, all of which at a minimum require providing or otherwise making available PI to a third party.
Cookie Operators, including social media platforms and other tech companies that offer digital advertising services, may associate Tracking Technologies on our digital properties that collect PI when you use or access them, or otherwise collect and process PI that we make available about you, including some of the categories of PI in the table above. Giving access to PI to Cookie Operators could be deemed a Sale and/or Sharing and could implicate Targeted Advertising under some state laws. Therefore, we will treat such PI collected by Cookie Operators as such, and subject to the opt-out requests described above. In some instances, the PI we make available about you is collected directly by such Cookie Operators using Tracking Technologies on our Service or our advertisements that are served on third-party sites (which we refer to as “cookie PI”). However, certain PI which we make available to Cookie Operators is information that we have previously collected directly from you or otherwise about you, such as your email address (which we refer to below as “non-cookie PI”).
When you opt-out pursuant to the instructions below, it will have the effect of opting you out of Sale, Sharing, and Targeted Advertising, such that our opt-out process is intended to combine all these state opt-outs into a single opt-out. Instructions for opting out are below. Please note that there are distinct instructions for opting out of cookie PI and non-cookie PI, which we explain further, below. This is because we have to use different technologies to apply your opt-out of cookie PI and to non-cookie PI.
Opt-out for non-cookie PI: If you would like to submit a request to opt-out of our processing of your non-cookie PI for Targeted Advertising, or opt-out of the Sale or Sharing of such data, make an opt-out request here.
Opt-out for cookie PI: If you would like to opt-out of our processing of your cookie-related PI for Targeted Advertising, or opt-out of the sale/sharing of such PI, your browser enables you to review and manage the use of cookies. You may withdraw or modify your consent at any time through your browser settings. However, these settings could have an impact on your user experience with our online services.
To find out how to manage cookies on popular browsers, you can visit the following support pages:
oSome of the State Privacy Laws also require us to state that we do not knowingly Sell or Share the PI of Consumers under 16.
For more information on how to limit Interest-based Advertising using your browser settings, mobile device settings, or ad industry tools, please see Section 6(c) in our Privacy Policy above. Please note, clearing cookies or changing settings may affect your choices and you have to opt-out separately via each browser and other device you use. Cookie-enabled opt-out signals may no longer be effective if you delete, block or clear cookies. We are not responsible for the completeness, accuracy or effectiveness of any third-party notices, tools, or choices.
GLOBAL PRIVACY CONTROL
Some of the State Privacy Laws require businesses to process opt-out requests made through opt-out preference signals or universal opt-out mechanisms. Currently, such signals/mechanisms that we look for and process where required are Global Privacy Control (or GPC) signals on your internet browser. GPC signals are signals sent by a platform, technology, or mechanism, enabled by individuals on their devices or browsers, that communicate the individual’s choice to opt-out of Sale, Sharing and/or Targeted Advertising or limit the use and disclosure of their Sensitive PI, such that the GPC signal effectively automatically communicates such requests. To use GPC, you can download an internet browser or a plugin to use on your current internet browser and follow the settings to enable GPC.
Please note that when we receive and process a GPC signal, we will apply such signal as an opt-out of Sale and Sharing as to cookie PI. To make a Do Not Sell/Share/Target request as to non-cookie PI, please visit the Do Not Sell/Share/Target Section above.
As required by certain State Privacy Laws, we are required to state that we do not: (1) charge a fee for use of our websites if you have enabled GPC; (2) change your experience with our websites if you use GPC; or (3) display a notification, pop-up, text, graphic, animation, sound, video, or any interstitial in response to the GPC.
AUTOMATED DECISION MAKING AND PROFILING
We may engage in processing that constitutes automated decision-making or profiling under California’s privacy law, the California Consumer Privacy Act (CCPA). The CCPA regulations that regulate these concepts were finalized but are not yet in force. We are assessing the applicability of the updated regulations and will amend this section as necessary to comply with such regulations when required to do so.
RIGHT TO NON-DISCRIMINATION; INCENTIVE/LOYALTY PROGRAMS
You have the right t not receive discriminatory treatment, in a manner prohibited by the State Privacy Laws, for the exercise of your privacy rights. However, it is not considered discriminatory if businesses charge a different price or rate or offer a different level or quality of good or service, to the extent that doing so is reasonably related to the value of the applicable PI. Accordingly, we may offer you incentive programs, loyalty programs, or price or service differences for or related to the collection, sale, retention, and use of your PI (“Incentive/Loyalty Program(s)”), as permitted by the State Privacy Laws, that can result in reasonably different prices, rates, or quality levels. The material aspects of any Incentive/Loyalty Program will be explained and described in its program terms. Please note that participating in Incentive/Loyalty Programs is entirely optional, you will have to affirmatively opt-in to the program and you can opt-out of each program (i.e., terminate participation and forgo the ongoing incentives) prospectively by following the instructions in the applicable program description and terms. We may add or change Incentive/Loyalty programs and/or their terms by posting notice on the program descriptions and terms linked to above, so check them regularly.
For CCPA purposes, we treat the value of your personal information collected through our Incentive/Loyalty Programs as equivalent to our total program expenses (excluding the value of benefits). The value of each program is the value of the program benefits, including free products, discounts, and coupons, the value of which will depend on individual customer participation. By participating in our Incentive/Loyalty Programs, you agree that the benefits are reasonably related to the value of the personal information collected and retained.
Participation in our Incentive/Loyalty Programs is always optional, and you can terminate program participation at any time as explained in applicable program terms. Please visit https://www.circlek.com/inner-circle for more information on our Inner Circle program including how to participate and to withdraw.
Please note, you will no longer be able to participate in our Incentive/Loyalty Programs if you make a request to delete personal information. This is because we need the personal information collected in relation to the Incentive/Loyalty Programs, including certain information that falls within identifiers and contact information, personal records, commercial information, service usage information, location data, and inferences categories mentioned above, in order to administer the Incentive/Loyalty Programs. Therefore, if you request that we delete your personal information, we will do so, subject to legal exceptions, however without that information it will not be possible to provide you with our Incentive/Loyalty Programs (e.g., to communicate with you regarding your rewards, collect and retain your information which rewards are based on, etc.).
(e) California “Shine the Light” Notice.
We comply with California Civil Code Section 1798.83 (the “Shine the Light” law) by not sharing your personal information with third parties for their direct marketing purposes (as those terms are defined by that law) without your consent. If you are a California resident, you may request information about our compliance with the Shine the Light law by contacting us in the following ways:
- Postal Mail : Legal Department c/o Privacy Office, Circle K Stores Inc., 1130 West Warner Road, Building B, Tempe, Arizona 85824
Please note that the CCPA and Shine the Light are different laws offering different rights and requests must be made separately.
(f) Other California Notices.
We disclose our tracking and “do not track” practices in the section (b) Categories of Personal Information Collected and Shared with Third Parties. California minors have the right to have removal of their public posts on our online properties (if applicable). by sending us a request through the mail or request portal.
If you have any questions about the Privacy Policy or practices described in it, you should contact us in the following ways:
- Postal Mail: Legal Department c/o Privacy Office, Circle K Stores Inc., 2550 W Tyvola Rd #200, Charlotte, NC 28217, United States
- Visiting our request portal: Individual Rights Request Form
11.2. Nevada Residents
We do not believe we “sell” “covered information” of Nevada “consumers” as those terms are defined by Chapter 603A of the Nevada Revised Statutes. Though we do not believe we sell covered information, Nevada’s law requires us to provide a method for Nevada consumers to make requests to opt out of sale, which you can do by visiting our request portal: Individual Rights Request Form.
11.3. Canada Residents
If you wish to request information regarding your personal information, or access to or correction of your personal information in our custody or control, you may contact the applicable Privacy Office as described in the Who Can You Contact With Privacy Questions? section. In addition, as part of your right to access, depending on the laws applicable in the jurisdiction in which you reside, you may have the right to ask us to communicate to you the personal information you have provided us in a structured, commonly used technological format, as well as to a third party upon your requestYour right to access or correct your personal information is subject to applicable legal restrictions Upon request, we will provide you with access to your personal information within a reasonable timeframe, in compliance with applicable laws. We may take reasonable steps to verify your identity before granting access or making corrections.
12. Changes To Our Privacy Policy
We may make changes to this Privacy Policy from time to time. Any changes we make will become effective when we post a modified version of the policy on our websites and apps. If the changes we make are significant, we will take reasonable steps to notify you of those changes, including, for example, by providing a more prominent notice when required by applicable laws. By continuing to participate in our programs, and/or use our services or purchase our products after the modified version of the Privacy Policy has been posted or you have been informed of such update, you are accepting the changes to the Privacy Policy. If you do not agree to the changes in our Privacy Policy, it is your responsibility to stop participating in our programs, and/or using our services or purchasing our products. It is your obligation to ensure that you read, understand and agree to the latest version of the Privacy Policy. The “Effective Date” at the top of the Privacy Policy indicates when it was last updated.
13. Who Can You Contact With Privacy Questions?
If you have any questions about how we handle your personal information, please contact us as indicated below. If you have a program, product, service, or are participating in a promotion, contest or event that is offered by us with a third party, the third party may hold your personal information. If you have any questions or concerns, we will direct you to the appropriate party so that you may make inquiries as to that party’s privacy policies and practices.
By mail:
If you are in the U.S.
Legal Department c/o Privacy Officer Circle K Stores Inc. 2550 W Tyvola Rd #200
Charlotte, NC 28217 United States
If you are in Canada
Legal Department c/o Privacy Officer Alimentation Couche-Tard Inc. 4204 Industriel Boulevard Laval, QC H7L 0E3 Canada
Toll-free number: 1-833-662-0510
Request Form: Individual Rights Request Form