Raising Cane's Chicken Fingers® Privacy Policy

Effective Date: September 26, 2025

TABLE OF CONTENTS:

1. INTRODUCTION

This Privacy Policy describes how Raising Cane's Restaurants, LLC and its affiliated entities, (collectively, “the Company”, “Raising Cane’s”, “we”, “us,” or “our”) collect, use, and share information about you, both offline and online.

2. SCOPE

This Privacy Policy applies to all websites, mobile applications, and other digital services on which this Privacy Policy is posted, or offline services where a link to this Privacy Policy is provided (collectively and individually, “Services”). By accessing or otherwise using the Services, you consent to Raising Cane’s data collection, use, and disclosure practices, and other activities described in this Privacy Policy, and any additional privacy statements that are posted on an applicable part of the Services. If you do not consent, please discontinue use of the Services, and uninstall Company websites, downloads, and applications. This Privacy Policy and the Services are intended for use by natural persons located in the United States only.

This Privacy Policy does not apply to websites, applications, or other digital services on which it is not posted even when a website links to a Company website. Please read the privacy policy posted on each Company website, application, or other digital platform that you visit to understand the applicable information collection, use, and sharing practices. Services also contain links to other websites that are not owned or operated by the Company. The Company cannot control nor is it responsible for the privacy practices or content of such other websites. The Company encourages you to read the privacy statements of each and every website that collects personal information. Some of our pages utilize framing techniques to serve content from our partners while preserving the look and feel of our website. Please be aware that you are providing your personal information to these third parties and not to one of our websites.

We maintain separate privacy policies and notices for our Crewmembers and job Candidates in the United States and for Customers, Crewmembers and job Candidates in the United Kingdom. Personal information does not include publicly available information from government records or deidentified or aggregated consumer information.

A printer friendly version of this policy can be found here.

3. HOW WE COLLECT INFORMATION

The Company collects information from the following sources:

Directly from you through your interactions with us or others who provide information about you, including information voluntarily provided in-person (for example, at our restaurants when you participate in an in-store promotion, interact with us at an event, or use a self-service kiosk) or online, which include: user registration, online orders, sweepstakes, contests, giveaway promotions registration and claims, contact requests, guest comments, online surveys, and other online activities.
From your device and/or browser, including through automated technologies and online tools (e.g., cookies and other tracking technologies).
From third-party sources, including our affiliated entities, service providers, commercial partners, and other third parties.

From time to time, we may use or augment the information we have about you with information obtained from other sources, such as public databases, social media platforms, and other third parties.

4. INFORMATION WE COLLECT

Depending on how you interact with us, we may collect categories of information about you as summarized in the table below. The following table also describes how we use and disclose such categories of personal information with third parties.

Identifiers (name, email, phone, postal address, account name, IP address, device ID, social media handle)

Purpose for collection and processing:

· Provide products and services.

· Customer service.

· Loyalty program.

· Sweepstakes/ contests.

· Security/ fraud prevention.

· Legal/ compliance.

· Service improvement.

· Marketing, personalization, and advertising, including interest based advertising and cross-context advertising.

Categories of recipients and if they are shared for Targeted Advertising:

Service Providers - No

Third-party Services (payment, IT, marketing, analytics) - Yes

Affiliates/ franchisees - No

Commercial partners - Yes

Government authorities (legal compliance) - No

Sensitive Personal information (signature, SSN for prize winners, driver’s license for verification, payment/financial info)

Purpose for collection and processing:

· Identity verification.

· Transaction processing.

· Legal compliance (e.g., tax reporting).

Categories of recipients and if they are shared for Targeted Advertising:

Service Providers - No

Government agencies (legal/tax reporting) - No

Protected classification characteristics (age, date of birth, gender)

Purpose for collection and processing:

· Sweepstakes eligibility.

· Demographic data for personalization.

Categories of recipients and if they are shared for Targeted Advertising:

Service providers (marketing/analytics) - No

Affiliates/franchisees - No

Commercial information (transaction history, purchase history, product preferences, loyalty participation)

Purpose for collection and processing:

· Provide products and services.

· Order fulfillment.

· Financial incentive programs (Caniac Club).

· Service improvement.

Marketing, personalization, and advertising, including interest based advertising and cross-context advertising.

Categories of recipients and if they are shared for Targeted Advertising:

Service Providers - No

Third-party Services - Yes

Affiliates/franchisees - No

Commercial partners - Yes

Internet or other electronic network activity information (browsing history, interactions with site/app, emails opened/clicked, cookies, session replay, device usage)

Purpose for collection and processing:

· Analytics.

· Service improvement.

· Security monitoring.

· Customer service.

· Marketing, personalization, and advertising, including interest based advertising and cross-context advertising.

Categories of recipients and if they are shared for Targeted Advertising:

Service Providers - No

Third-party Services (e.g., Google Analytics) - Yes

Government Agencies (if necessary to meet legal obligations) - No

Precise geolocation data (GPS, Wi-Fi, Bluetooth signals)

Purpose for collection and processing:

· Provide location-based services reasonably expected (nearest restaurant, order ready on arrival).

Categories of recipients and if they are shared for Targeted Advertising:

Service Providers (Location services, IT) - No

Affiliates / franchisees - No

General location data (IP-based location, region/city-level device location)

Purpose for collection and processing:

· Customer service.

· Service improvement.

· Marketing, personalization, and advertising, including interest based advertising and cross-context advertising.

Categories of recipients and if they are shared for Targeted Advertising:

Service providers - No

Third-party Services - Yes

Affiliates / franchisees - No

Commercial partners - Yes

Government Agencies (if necessary to meet legal obligations) - No

Audio, electronic, visual, thermal, olfactory, or similar information (customer service call recordings, CCTV, photos/videos)

Purpose for collection and processing:

· Quality assurance and training.

· Security and asset protection.

· Customer service.

· Service improvement.

Categories of recipients and if they are shared for Targeted Advertising:

Service Providers - No

Affiliates / franchisees - No

Government agencies (security/legal) - No

Inferences drawn from other personal information (preferences, characteristics, behaviors, interests)

Purpose for collection and processing:

· Analytics.

· Product/service development.

· Customer service

· Marketing, personalization, and advertising, including interest based advertising and cross-context advertising.

Categories of recipients and if they are shared for Targeted Advertising:

Service Providers - No

Third-party Services - Yes

Affiliates / franchisees - No

Information You Provide to Us: We collect information you provide to us directly, and through third parties or service providers acting on our behalf, in connection with making purchases or using our services. This includes contact information, payment information, product preferences, among other information. We use this information to provide you with products and services, customer service, market to you, administer our brands, and secure our services. If you choose not to provide certain information, it may limit your ability to take advantage of some features, promotions, or other Services. This includes the following categories of personal information:

Identification and Contact information such as name, email address, physical address, and phone number.
Account and Profile information such as your Caniac Club Account Number, password, saved card information, signature, account username, two-step verification information, and social media handle.
Transaction Information such as products purchased, and dates of transactions.
Purchase and Financial Information such as credit/debit card number, expiration date, CVV code, billing address, and/or any communications we have received about your order or purchase.
Demographic Information such as age, date of birth, and gender.
Information You Provide About Others such as name, address and contact details of a recipient for delivery of goods or services (if different from yours). If you choose to submit any personal information relating to other people, you represent that you have the authority to do so and permit us to use the information in accordance with this Privacy Policy.
Sweepstakes, Surveys, or Contest Information you provide when participating in competitions, surveys, or contests.
Sensitive Personal Information. We use precise geolocation information (your device’s physical location), to provide you with products and services reasonably expected (e.g., to provide you with the nearest restaurant location and to have your order ready when you arrive). For certain prize winners we collect Social Security Number and/or Driver’s License number as required by law, such as IRS tax reporting, and will obtain your consent for such processing where required by applicable privacy.

In addition to the above categories, you may provide us with additional pieces of information when you interact with us using messaging services or filling in a form. The information we collect about you may be combined with other personal information provided to us. We may also generate inferences reflecting your preferences, characteristics, and behaviors.

Information We Collect Through Your Interaction with Us: We and our affiliates, service providers, business partners, and select businesses with whom we have marketing relationships, use technologies such as cookies, beacons, tags, and scripts, to analyze trends, administer our business, improve functionality of our digital properties, and to gather information about our user base. This includes the following categories of personal information:

Device and Usage Information such as browser type, operating system type, mobile device model, viewed webpages, links that are clicked, the keystrokes typed, movement of the mouse or pointer, IP address, mobile device identifier or other unique identifier, sites or apps visited before coming to the Services, the amount of time you spend viewing or using the Services and the pages visited, the number of times you return, or other click-stream or site usage data, and emails we send that you open, forward, or click through to the Services, general usage patterns. Identifiers, device and usage information can be used to recognize you or a device over time and across different services.
Audio and audiovisual information such as customer service call recordings, photographs or videos, and security camera footage (such as CCTV). We record and summarize phone calls for quality assurance, training, improving our services, or other purposes.
Social media information such as usernames, preferences, and content of messages which are collected from you, if you interact with us on social media sites.
Location Information such your location data in our mobile apps, or your location at our restaurants through mobile devices that utilize technologies such as Wi-Fi and Bluetooth (for example, detecting your device when you connect to our restaurant’s Wi-Fi network).

Information from Other Sources: We may receive information from other sources to help us correct or supplement our records, improve the quality of our services to you, and prevent or detect fraud. We combine information we receive about you from other sources with your account information or other information related to you. This includes the following categories of personal information:

Legal, Security, and Fraud information such as from publicly available sources, identity verification services, Anti Money Laundering (AML) and sanctions screening services, and data providers. This information can be used for fraud checks or flags raised about your transactions, payment card refusals, suspected crimes, complaints and/or claims.
Social media information if you interact with us through a social media service or log in using social media credentials, depending on your social media settings, we may have access to your information from that social network such as your name, email address, age, gender, and location.
Other Sources such as data marketing or advertising service providers, event coordinators, analytics providers, service providers, or publicly available sources. We also create information based on our analysis of the information we have collected from you.

5. HOW WE USE PERSONAL INFORMATION

We use personal information to fulfill the purpose for which you provided it, for other purposes disclosed at the time the information was collected, including through the use of artificial intelligence, and as otherwise described in this Privacy Policy. We also use information for legal, compliance, or security purposes. Ways we use personal information:

To provide products and services: Fulfil requests related to products and services such as physical orders, online orders, or digital gift cards. Communicate with you regarding transactional information. Manage loyalty programs, and other digital services. Managing your participation in sweepstakes, events, promotions, national and in-store competitions. Administering surveys or questionnaires and to provide rewards or gifts. Preparing your mobile order as you approach the restaurant, if you have requested us to do so, through the use of your location data in our mobile apps.
To provide customer services: Provide customer service and/or to improve and optimize your experience, including using machine learning and artificial intelligence technologies. Supporting any accounts you have with us. Communicate with you through various channels to advise or provide status updates on your order, requests, inquiries, and applications. We also use technology to analyze phone call data and recordings. We use call recordings to help train our staff, improve our services, provide quality assurance, and investigate complaints or queries related to calls.
To market and advertise: Communicate with you through various channels about our products, services, sweepstakes, newsletters, promotions, and surveys. Provide relevant and personalized recommendations for products, Services, and promotional offers based on your engagement with us. Send follow-up communications to transactions or interactions with surveys. Communicate with you, such as push notifications through our App, regarding eligible events and promotions, including those tailored to your location. Identifiers, device and usage information can be used to recognize you or a device over time and across different services.
To administer and enhance our brands: Administer our products and services. Improve the effectiveness of our product and services, including websites, applications, and marketing. Analyze our marketing strategies and trends regarding your use of our website, digital properties, and social media channels. Publish customer testimonials or photos. Utilize session replay technology to track the efficacy of our websites and applications, to help us learn more about our visitors’ and customers’ behavior. Improve our website experience, including troubleshooting and maintenance purposes. Customize customer experiences on our digital properties, which may include advertisements or promotions. Conduct research and internal analytics, develop new products and services, perform market research and data analytics, and analyze our products, services, websites, and applications.
To secure our services, compliance, fraud prevention, and safety, including AML and sanctions: Send you important information, such as changes to our terms, conditions, and policies and/or other administrative information. Because this information is required to maintain our services to you, you cannot opt-out of receiving such communications. Protect against unauthorized transactions, fraud, claims, and other liabilities. Detecting and preventing fraud and malicious activities. Assist law enforcement and respond to regulatory enquiries. Comply with applicable legal mandates, our policies, or industry standards. Protect our, your or others’ rights, privacy, safety, or property, including by making and defending legal claims. Enforce the terms and conditions that govern our Services. Protect, investigate, and deter against money laundering (AML), sanctioned countries, entities, or individuals, and other fraudulent, harmful, unauthorized, unethical, or illegal activity. For security and asset protection purposes across our locations. Notify you by email, mail, or telephone in the event of a data security incident, and where permitted by law. Obtain parental or guardian consent for minors, when necessary.
For any other purpose not listed here, with consent.

We may aggregate or de-identify any personal information that we collect, such that the information is no longer personally identifiable or attributable to you. We use such aggregated or de-identified information and other information that does not personally identify you without restriction. When we process information as de-identified information, we will not re-identify such de-identified information.

6. WITH WHOM DO WE SHARE INFORMATION

Affiliated Entities. We may share your personal information with our corporate affiliates and franchisees, including those that currently exist and ones that arise in the future. These companies use your information consistent with this Privacy Policy.
Service Providers. We may disclose personal information with Service Providers who provide us with services, such as data analysis, advertising, order fulfilment, infrastructure provision, IT services, customer service, email delivery services, and other similar services. We grant our Service Providers access to personal information only to the extent needed for them to perform their functions and require them to protect the confidentiality and security of such personal information.
Third-party Services. When you use third-party services linked through our website, e.g. third-party payment and credit card processing services, your personal information will be collected by the provider of such services. Please note that when you use third-party services, their own terms and privacy policies will govern your use of their services.
Co-marketing and Commercial Partners. We may disclose personal information with co-marketing partners, and other third parties, including select partners and affiliates that facilitate offers that may be of interest to you. Your personal information will only be disclosed at your direction or with your prior consent.
Business Transfers or Assignments. In the event of any reorganization, merger, sale, joint venture, assignment, transfer, or other disposition of all or any portion of our business, assets, or stock (including without limitation in connection with any bankruptcy or similar proceedings), we may transfer any and all personal information that we process to a third party.
Law Enforcement; Emergencies; Compliance. We may disclose personal information about you to others as we believe to be appropriate: (i) under applicable law including laws outside your country of residence; (ii) to comply with legal process; (iii) to respond to requests from public and government authorities including public and government authorities outside your country of residence; (iv) to enforce our Terms of Use; (v) to protect our operations and property interest; (vi) to protect the rights, privacy, safety or property of Raising Cane’s, our Crewmembers, users of our services, you or others; and (vii) to permit us to pursue available remedies or limit the damages that we may sustain. Disclosures may be made without your consent. We have no obligation to notify you of such disclosures, except as required by applicable law.
At Your Direction. We use and disclose your personal information as you otherwise consent. For example, if you enter a sweepstakes or other promotion and the official rules include provisions related to the sharing of your personal information.
Public posting / social media sharing. If you choose to post content or information on public areas of our Services or on social media platforms, that information will be visible to others. We are not responsible for how others may use personal information that you make publicly available. Please use caution when deciding to disclose any personal information in public forums or on our Services.

7. CHILDREN AND MINORS

The Services are not directed to individuals under the age of 13, and we do not knowingly collect personal information from any children under age 13. If you are under age 13, please do not submit any personal information to us. If you are a parent or legal guardian and think your child has given us information, you can contact us to remove the information.

We do not have actual knowledge that we sell or share personal information of persons under the age of 18.

8. COOKIES AND SIMILAR TECHNOLOGIES

Cookies and similar technologies, including web beacons, pixels, tags, local storage, and device identifiers, are used to enhance your experience, personalize content and advertising, analyze website traffic, and ensure security and fraud prevention. Some parts of our Services may be more difficult or impossible to use if you choose to block certain cookies and similar technologies.

Opt-out Controls You have control over these technologies and have the choice whether to disclose personal information through cookies and similar technologies. Visit our Cookie Preferences Center, or the ‘Do Not Sell or Share My Personal Information’ or ‘Your Privacy Choices ’ links in the footer of one of our sites to manage your preferences, or opt-out of specific types of tracking, such as analytics or personalized advertising. We have enabled Global Privacy Control (GPC) as an additional way for you to submit a request to opt-out of the sale and sharing of your personal information. This can be through browsers and/or browser extensions that support such a signal. To learn more about the GPC, visit the Global Privacy Control website. For comprehensive guidance on managing cookies and similar technologies across different browsers, devices, and websites, please visit allaboutcookies.org.

Many advertisers and service providers that perform advertising-related services for us and third parties participate in voluntary programs that provide tools to opt-out of such interest-based advertising such as the Digital Advertising Alliance’s (“DAA”) Self-Regulatory Program for Online Behavioral Advertising. To learn more about how you can exercise certain choices regarding interest-based advertising for DAA members, visit http://www.aboutads.info/choices/, and http://www.aboutads.info/appchoices for information on the DAA’s opt-out program for mobile apps. Some of these companies also are members of the Network Advertising Initiative (“NAI”). To learn more about the NAI and your opt-out options for their members, see http://www.networkadvertising.org/choices/.

We utilize third-party analytics providers, such as Google Analytics, to gain insights into how visitors interact with our services. These tools help us analyze usage patterns and support features like remarketing, interest-based advertising, demographic and interest reporting, user segmentation, and ad impression tracking. Third-party tracking technologies can be used to recognize you or a device over time and across different services. To learn more about how Google Analytics collects and processes data, please refer to Google’s Privacy Notice. You can manage your preferences or opt out of certain Google Analytics features by visiting Google’s My Ad Center or by installing the Google Analytics Opt-Out Browser Add-On.

Please be aware that, even if you opt out of certain kinds of interest-based advertising, you may continue to receive ads not based on your personal information. If your browser is configured to reject cookies when you visit webpages, or you subsequently erase your cookies, use a different device or web browser or use a non-browser-based method of access (e.g., mobile app), your browser-based opt-out will no longer be effective.

We do not currently recognize the “Do Not Track” signal.

9. YOUR PRIVACY RIGHTS

A. JURISDICTIONAL SPECIFIC RIGHTS

Residents of certain U.S. states (including California, Colorado, Connecticut, Delaware, Iowa, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, and Virginia) have additional rights under applicable privacy laws, which may include, subject to certain limitations:

Right to Know / Access: You also have the right to confirm whether we are processing your personal information and obtain access to and/or a copy of certain personal information we hold about you. This includes the categories of personal information, the categories of sources from which the personal information is collected, the business or commercial purpose for collecting, selling, or sharing personal information, the categories of third parties to whom Raising Cane’s discloses personal information, including a specific list of third parties to whom we have disclosed our customers’ personal information, and the specific pieces of personal information Raising Cane’s has collected about you. In certain cases you may also have the right to obtain a copy of the personal information you provided to us in a portable and, to the extent technically feasible, machine-readable format.
Right to Correct: The right to correct inaccuracies in your personal information.
Right to Delete: The right to delete any personal information we have collected about you. In some situations we must keep your personal information to comply with legal obligations, resolve disputes, enforce agreements, or for other business purposes.
Right to Opt-Out of Sale/Sharing for Targeted Advertising: The right to opt out of the selling or sharing of your personal information for targeted advertising purposes.

· Online Info: You can exercise your right to opt out through the Cookie Preferences Center, or the ‘Do Not Sell or Share My Personal Information’ or ‘Your Privacy Choices ’ links in our website footer, or by using browser privacy preference signals (e.g. Global Privacy Control) that signal your preference to opt out. Note: If you clear your cookies or disable the GPC signal, it may reset your opt-out preferences.

· Offline Info: You can opt out of sales and sharing of Offline Info by submitting a request by using our Do Not Sell Request Form, (available on our website).

Right to Appeal: The right to appeal our decision if we deny your privacy rights request.
Right to Opt-Out of Automated Decision Making/Profiling: We do not engage in automated decision making or profiling that results in legal decisions or has a similarly significant impact on you. Therefore, we do not offer a specific right to opt out of profiling at this time.
Right to Limit the Use of Sensitive Personal Information: We only use sensitive personal information for legally permitted purposes that are exempt from any right to limit such use under applicable privacy law.

Exercising your Rights: To submit any of the above privacy rights requests, you can fill out our Privacy Rights Request Form (available on our website) or contact us using the details provided in the “Contact Us” section of this policy. If we decline to fulfill your request, you can appeal our decision by contacting us through one of the methods listed in the Contact Us section below.

Authorized Agents: In some jurisdictions, you have the right to designate an authorized agent to make a privacy rights request on your behalf. We require the agent to provide written proof of their authorization, and in some cases, we may also ask you to verify your identity directly or confirm that you granted the agent permission to submit the request on your behalf. Agents must submit requests through the submission options provided in the “Contact Us” section.

Verification and Response: When you exercise these rights and submit a request, we will need to verify your identity. This could include asking you to log in to your account (if you have one with us), verify your access to the contact information you provide us, or provide additional information such as recent transaction history, or the last four digits of a card used for a purchase. In certain situations, we will also use a third-party verification provider. We will endeavor to honor verifiable requests unless an exemption applies.

Exceptions: Please note that we may not be able to fulfill your request if we cannot reasonably verify your identity or authority. We have the right to deny requests that are manifestly unfounded or excessive (for example, repetitive requests). Additionally, if you request deletion of your personal information, certain data will be retained as necessary to: (i) complete transactions or fulfill services you requested (including handling returns or exchanges); (ii) comply with legal, regulatory, or accounting obligations; (iii) maintain records for our own compliance with law or internal governance; or (iv) protect our rights, property, or operations (or those of others). We also reserve the right to retain information if, in our good faith judgment, it is necessary to establish, exercise, or defend legal claims, or to cooperate with law enforcement or regulatory inquiries.

Non-Discrimination: We will not discriminate against you (in violation of applicable laws) for exercising any of your privacy rights. In other words, we will not deny you goods or services, charge you different prices, or provide a different quality of service just because you exercised your rights under privacy laws.

Sale and Sharing of Personal Information for Targeted Advertising: We do not disclose or provide your personal information to third parties in exchange for monetary compensation. We may, however, disclose certain identifiers (contact information or online identifiers), internet/activity information (e.g. browsing history), commercial information (transaction data) and inferences (interests) to third parties – for example, via cookies and pixels on our sites, in our online content, and in our emails – with data analytics providers and advertising networks to help reach you with targeted advertising and for other analytics and marketing purposes. Such disclosures may be considered a “sale” or “sharing” of personal information under laws like the CCPA. We do not sell or share for cross-context behavioral advertising your sensitive personal information.

B. OTHER OPT-OUTS AND PRIVACY CHOICES

Device Location Sharing: If you have granted one of our services permission to access your device’s location data, you can revoke that permission by turning off location sharing in your device or browser settings.
Email Marketing: You can opt out of marketing or promotional emails from us by clicking the “unsubscribe” link in those emails. Even if you opt out of marketing emails, you will still receive transactional or account-related communications.
Push Notifications: If you have granted our app or services permission to send push notifications to your device, you can review and update your push notification preferences via your device or browser settings.
Co-Branded, Co-Sponsored, or Cross-Promotional Offerings: If you participate in a co-branded, co-sponsored, or cross-promotional offering, the relevant brand, sponsor, or other third party may use your information for their own purposes (including advertising and marketing). You must contact that third party directly to exercise any opt-out choices with respect to the third party’s use of your information.

Nevada Residents: Although we do not currently sell personal information as defined under Nevada law, you can submit a request directing us not to sell your personal information by using our Privacy Rights Request Form.

C. GLOBAL PRIVACY CONTROL (GPC)

You can opt out of the sharing of certain personal information by using an opt-out preference signal (such as GPC) in your browser. To process your request via an opt-out preference signal, you must use a browser that supports the signal. Note: The GPC signal will apply only to the device and browser you use. If you use multiple browsers or devices, you’ll need to enable the opt-out signal on each one. To learn more about the GPC, visit the Global Privacy Control website. Where a GPC signal is detected, it will be displayed within the Cookie Preference Center. The GPC signals do not apply to offline sales and are not linked to your user account. You can opt out of sales and sharing of Offline Info by submitting a request by using our Do Not Sell Request Form.

D. CALIFORNIA’S SHINE THE LIGHT

This Privacy Policy describes how we may share your information for marketing purposes, as described above. If you are a California resident, the Shine the Light law permits you to request and obtain from us once per calendar year information about any of your personal information shared with third parties for their own direct marketing purposes, including the categories of personal information and the names and addresses of those businesses with which we have shared such personal information. To request this information and for any other questions about our privacy practices and compliance with California law, please contact us as described below.

10. NOTICE OF FINANCIAL INCENTIVE

In connection with our Caniac® Club, we may offer financial incentives or service differences (“Incentives”) to members in exchange for our use of your personal information.

To offer these Incentives, we must track the personal information you provide when you sign up or engage in activities in connection with the Caniac Club, such as your email address, purchase history, and engagement with Raising Cane’s (“Caniac Club Data”), as described in the Caniac Club Terms and Conditions of Participation.

The value of Caniac Club Data is calculated by determining the approximate additional spending per member, per year compared to individuals who have not participated in the Caniac Club. The value of Caniac Club Data is reasonably related to the costs associated with offering the Incentives. You can register for the Club here, and you can withdraw from or cancel your registration at any time by contacting us at https://www.raisingcanes.com/contact-us/.

11. SECURITY, PROTECTION, AND RETENTION OF PERSONAL INFORMATION

We have implemented measures designed to secure your personal information from accidental loss and from unauthorized access, use, alteration, and disclosure. However, the transmission of information via online and mobile platforms is not completely secure, and we cannot guarantee the security of your personal information. Any transmission of personal information is at your own risk. We urge you to be careful online (for example, do not share your usernames or passwords with others).

We will retain your personal information for as long as needed or permitted in light of the purposes for which it was obtained. In deciding how long to retain personal information that we collect, we consider many criteria, including: (a) the length of time we have an ongoing relationship with you as our customer and provide services; (b) whether there is a legal obligation that applies to us (for example, certain laws require us to keep records for a certain period); and (c) whether retention is advisable in light of our legal position (such as with respect to applicable statutes of limitations, litigation, or regulatory investigations).

When you register as a user and create an online account on our website, you will be prompted to select a personal password. To maximize protection, you should choose a strong and unique password. You are solely responsible for maintaining the secrecy of your password and any account information.

12. CALIFORNIA NOTICE AT COLLECTION

This section provides additional information required by the California Consumer Privacy Act (“CCPA”) (as amended by the CPRA) and applies to the personal information we collect about California consumers and the employees of businesses interacting with us.

Personal Information We Collect: A list of the categories of personal information we collect can be found in the “Information We Collect” section above. For details regarding the sources from which we obtain personal information, see the “How We Collect Information” section above. We collect and use personal information for the business or commercial purposes described in the “How We May Use Information We Collect” section above.

Personal Information Disclosed: A list of the categories of personal information we have disclosed and the categories of recipients can be found in the “Information We Collect” and “With Whom Do We Share Your Information” sections above (which provides more detail on our business partners, service providers, and third parties). As noted in the “Your Privacy Rights” section, we typically retain personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. We do not use sensitive personal information for any purposes that are not identified within the CCPA.

California Minors: We do not sell or share personal information about consumers we know are under 18 years old, nor do we use or disclose sensitive personal information about consumers (including those we know are under 18) beyond the purposes authorized by the CCPA. If you are under 18 years of age, reside in California, and have a registered account with Raising Cane’s, you have the right to request removal of unwanted content or information that you have publicly posted on our Services. To request removal of such information, you can contact us using the methods outlined in the “Contact Us” section below. Please note that your request does not ensure complete or comprehensive removal of the content or information (for example, content that was reposted by other users may remain visible).

Privacy Rights: California residents have several privacy rights under the CCPA. Information about these rights – including how to exercise them and how we handle such requests – can be found in the ‘Your Privacy Rights’ section of this Privacy Policy (above).

13. CHANGES

We update our Privacy Policy from time to time, and the updated Privacy Policy applies to you after the “Updated Date” stated in the revised Privacy Policy. We encourage you to review this Privacy Policy each time you use the Services to see if it has been revised since your last visit. By using any Service after we post changes, you agree to the terms of the Privacy Policy as updated. If we change the policy in a material way, we will provide appropriate notice to you such as posting a notice on our website or emailing you if you provided your email to us. Privacy Policy was last updated on 09/26/2025.

14. CONTACT US

If you have questions about how we collect, store, and use personal information, or to submit a privacy rights request, please contact us at the following:

Privacy Rights Request Form.
Do Not Sell Request Form.
Phone: 833.Hi.Canes (833.442.2637).