Privacy Policy

Updated on 24 June 2026

The Starbucks name and reputation were built on a foundation of trust.  The Starbucks Privacy Policy (“Policy”) describes how Rustan Coffee Corporation, an authorized licensee of Starbucks Corporation (referred to as “Starbucks” below) collects, uses, discloses, and safeguard personal information of customers and applicants for employment through our websites and online services, including www.starbuckscard.ph, mobile applications, and other Starbucks owned or operated websites and online services that link to this Policy (collectively, the “Sites”), through our programs and in our physical Starbucks stores in the Philippines, (“Services”).  This Policy does not apply to websites and online services that display or link to different privacy statements.  Websites and services co-branded with other partners may display or link to a joint privacy statement or separate privacy statements of our partners in addition to our Policy. 

By assessing the Sites or utilizing the Services, you hereby consent to the use of your information, including your personal information, in the manner described in this Policy. Without limiting the generality of the foregoing, you authorize Starbucks to transmit your information outside of the Philippines in the manner and for the purposes described in this Policy.

What Types of Information Does Starbucks Collect?

Personal Information that may be collected by Starbucks may include:

• Name, Birthday, Gender, and Email Address.
• Financial Account information, such as Starbucks Card that have Starbucks Card Number.

 We may also collect information about you such as: 

• If you create an account - your username, password, city of birth.
• If you purchase goods at our stores or through our programs or otherwise - details of what you buy, where you buy, how frequently you buy, rewards you earn, and rewards you redeem.
• If you register any Starbucks Card - the card number, card transactions, including activating the Starbucks Card, loading value to the Starbucks Card, redeeming any value, balance transfer, balance inquiries. 
• If you use our mobile applications  - information such as your device ID, your location and stores near you and visited by you.
• If you conduct a survey or interact with us in various other ways -demographic information, comments, feedback, questions or suggestions, and information about subjects that may interest you.  
• If you apply as a Partner-Barista - your educational background, work history, and government identification numbers (TIN, SSS, Pag-Ibig, Philhealth.)

We may automatically collect online usage information when you visit our Sites.  This information may include details about your Internet service provider, operating system, browser type, domain name, Internet Protocol (IP) address, access times, the website that referred you to us, the Web pages you request, and the date and time of those requests.  Our collection of online usage information may involve the use of cookies and web beacons.

Cookies are small data files stored on your hard drive by a website.  Among other functions, cookies help us improve our Sites and enhance your experience.  We use cookies to identify popular areas and features, as well as to count visits to our Sites.

Web beacons are electronic images that may be used on our Sites or in our emails. We use Web beacons to deliver cookies, count visits, understand usage patterns and campaign effectiveness, and determine whether an email has been opened and acted upon.

Starbucks may also collect aggregated or anonymized data that does not directly identify you.  We may combine information collected about you with information received from third parties.

How Does Starbucks Use Information About You?

Starbucks may use information about you for purposes described in this Policy or disclosed to you on our Sites or with our Services. We may use your information to: 

• Process and manage your purchases and use of Starbucks products and services, including your accounts and program participation, and use of the Sites. 
• Respond to customer service inquiries, post your comments or statements on any blog or other online forum maintained on our Sites, or take other actions in response to your inquiries and Site activities.
• Create personalized promotions by combining your personal information with non-personal information, such as the amounts and types of purchases you make or benefits you received through our programs.
• Communicate with you by email, regarding your orders or purchases, services, accounts, program participation, contests or sweepstakes you have entered, and requests for information.
• Provide marketing communications by social media or email, about our brands, products, events, or other promotional purposes, including co-branded offers and affiliate or partner offers.      

Data Storage and Retention

For data and personal information collected and received at www.starbuckscard.ph - we store your information in secure, encrypted databases within a protected and secure environment.  Data is retained only while your account remains active and in accordance with the purposes stated above.  Data and personal information shall be stored in a database for two (2) years after inquiries and requests have been acted upon.  After which, records will be securely disposed of.  Customers’ personal information has the right to delete as requested. 

Other categories of data and personal information - may be retained for longer than two (2) years when required by applicable relevant laws and regulations.

Physical records or data shall be securely disposed of through shredding, while digital files shall be anonymized. In all instances, our manner of disposal shall ensure that the data and personal information shall no longer be retrieved, processed, or accessed by unauthorized persons.

 
Does Starbucks Share Personal Information with Third Parties?

 
Starbucks shares your personal information only in limited circumstances, as described below: 

• With your consent - we may share personal information about you with others when you have provided consent.
• Within the Starbucks group - we may share information with Starbucks Corporation, its subsidiaries, licensees, parent company, and other affiliated entities.
• With service providers and partners - we may share information with companies that provide support services to us (such as credit card processors, payment services providers, mailing houses, or website hosts) and with vendors that help us market our products and services (such as email vendors). These companies may use your information solely to perform their functions on our behalf.
• For legal and compliance purposes - we may disclose specific information (i) upon lawful request, in response to legal process, or when required to comply with applicable laws, (ii) to enforce our agreements, corporate policies, and terms of use, or (iii) to protect the rights, property, or safety of our company and affiliates, Starbucks Corporation and its subsidiaries and licensees, our employees, agents, customers, and others.
• In online forums - if you participate in any blog or other online forum on our Sites, any personal information you post may be shared with other forum participants and Site visitors.
• In business transactions - in the event of a merger, acquisition, financing, sale of assets, or any other situation involving the transfer of some or all of our business assets, Starbucks may disclose personal information to those involved in the negotiation or transfer.
• Aggregated or anonymized data -  we may also share aggregated or anonymized information that does not directly identify you.       

Starbucks provides you with options to update or change your personal information and to manage how we communicate with you.  You may request changes or raise concerns in the following ways: 

• Opt out of promotional emails - follow the instructions included in any promotional email we send.
• Manage your account preferences  - log in to your online account at www.starbucks.ph/card or   through our mobile application (if applicable) to update your personal information and manage your   contact preferences (e.g., SMS, email, and postal address).
• Contact us directly  -  using the information provided at the end of this Policy.   

If you choose to opt out of promotional communications, we may still send you non‑promotional messages such as emails regarding your accounts or our ongoing business relationship.

You may also manage cookies through your browser settings.  Most browsers allow you to set warnings when a cookie is being sent or to remove or reject cookies.  Please note that disabling cookies may affect certain features or services on our Sites.

Additionally, you may request a copy of your personal information by contacting us through the information provided at the end of this Policy.

What Are the Risks Involved and the Safeguards?

Risk refers to the potential of an incident resulting in harm or danger to a data subject or to the organization.  Such risks may lead to unauthorized collection, use, disclosure, or access to personal data.  They include threats to confidentiality, integrity, and availability of personal data, as well as the risk that processing may violate general data privacy principles and the rights of data subjects.

Rustan Coffee Corporation ensures that adequate physical, technical, and organizational security measures are implemented to protect the confidentiality, integrity, and availability of personal data.  These safeguards are designed to prevent loss, misuse, unauthorized access, disclosure, or modification of personal information.  However, while we take reasonable and appropriate steps to protect personal data, no system or transmission of data over the Internet or any other public network can be guaranteed to be completely secure.

Certain risks may still arise, such as exposure to targeted cyberattacks, malware, ransomware, computer viruses, or unauthorized access to manual records.  To address these risks, appropriate policies and procedures are in place to ensure effective security incident management, in line with existing National Privacy Commission (NPC) policies, circulars, advisories, and other issuances.

What are Your Rights under the Data Privacy Act?

Under the Data Privacy Act of 2012 (Republic Act No. 10173), you are entitled to the following rights in relation to the personal information we hold and process about you: 

• Right to be informed – you have the right to be notified regarding the collection and processing of your personal data.
• Right of access – you have the right to obtain confirmation on whether or not personal data relating to you are being processed, and to access such data.
• Right to rectification – you have the right to have your personal data corrected if it is inaccurate or incomplete.
• Right to erasure or blocking – you have the right to request the deletion or blocking of your personal data whenever warranted.
• Right to object – you may object to the processing of your personal data if it is based on consent or legitimate interest.
• Right to data portability – you have the right to obtain and electronically move, copy, or transfer your personal data securely for further use.
• Right to file a complaint – you may lodge a complaint before the National Privacy Commission (NPC) if you believe that your personal information has been misused, maliciously disclosed, improperly disposed of, or if your data privacy rights have otherwise been violated. 

Privacy Policy Updates

We may update this Privacy Policy from time to time.  When we do, we will post the revised version on this page and update the date at the top of the Policy.

We encourage you to check the date of the Privacy Policy whenever you visit this Site to stay informed of any updates or changes.  If modifications materially affect the way we use or disclose your personal information, we will provide appropriate notice to you.

Questions and Feedback

We welcome your questions, comments, and concerns regarding this Privacy Policy or the use of your personal information.  You may send them to us by writing or via email to the address provided below.

Attention: Data Protection Officer
Rustan Coffee Corporation
14 Jupiter St., corner Asteroid St.
Bel-Air 1, Makati City 1209
E-mail: dpo@rustancoffee.ph