Cracker Barrel Old Country Store, Inc.
Privacy Policy

Cracker Barrel Old Country Store, Inc. (“Cracker Barrel,” “we,” “us,” and “our”) offers you access to its interactive online websites, applications, and services; as well as services and products in our stores and restaurants. This Privacy Policy explains (1) what information may be collected when you access this website (www.CrackerBarrel.com) or any other property, either on-line or off-line, on which we place this Privacy Policy (“Property”) or use any of our mobile or other applications (“Applications”) and (2) how we and others use this information, under what circumstances we may disclose the information to third parties; and the instances in which we may allow third parties to collect information directly. Depending on your activities when using or accessing our Property or Applications (collectively, “Services”), you may from time to time be required to agree to additional terms and conditions. For clarity, our Services include the Cracker Barrel Rewards program and any promotion which refers to this Privacy Policy regarding the collection and use of your information.

Please note that this Privacy Policy applies regardless of whether you use our Services via a computer, mobile device, or other platform (collectively, your “Equipment”) or interact with us in a physical store or restaurant.

Modifications to this Privacy Policy

We generally keep this Privacy Policy posted on our Property and in our Applications. You should review this Privacy Policy frequently, as it may change from time to time without notice. Any changes will be effective immediately upon the posting of the revised Privacy Policy. Please note, however, that if we decide to use your Personal Information in a manner materially different than what is provided in this Privacy Policy or what we advised at the time it was collected, we will notify you of this change by e-mail to the last e-mail address provided to us or through our Applications. You will have a choice as to whether we use your information in this different manner. In such case, we will use your Personal Information in accordance with the terms in place when the information was collected.

A. INFORMATION WE COLLECT

We typically collect two kinds of information about you when you use our Services: (a) information that you provide that personally identifies you and (b) information that we automatically collect or that you provide us and may relate to you and your relationship with Cracker Barrel or other details that you elect to share with us.

We retain the categories of Personal Information described above for as long as is necessary for the purposes described in this Policy or otherwise required or permitted by law. This generally means holding the information for as long as one of the following apply:

Where information is used for more than one purpose, we will retain it until the purpose with the latest period expires. For more information about our retention policies, please contact us as at privacy@crackerbarrel.com

(1) Personal Information. Our definition of Personal Information includes any information that relates to or could be reasonably linked to a specific natural person, or as otherwise defined by applicable law. This may include information used to specifically identify or contact you, such as your name, mail or shipping address, email address, phone number, etc. (“Identifying Information”). As a general policy, we do not automatically collect such Identifying Information when you visit our Property except as necessary to carry out a transaction initiated by you or to enroll you in or administer your participation in Cracker Barrel Rewards. In certain circumstances, we may request, allow, or otherwise provide you an opportunity to submit your Identifying Information in connection with a feature, program, promotion, or some other aspect of our Services. When you reach out to us via telephone, email, text, or online chat, we collect Identifying Information and other personal information or other details that you voluntarily provide, including the content of the communication. Please note that we record and save online chats, messages and telephone calls to our Guest Services team. We may also give you the opportunity to provide broader categories of Personal Information, depending on the relationship Cracker Barrel has with you. For instance, you may: (a) provide your name, mail/shipping address, email address, Cracker Barrel ID number, credit card number, and/or phone number when registering for or in connection with a contest entry or Cracker Barrel Rewards; (b) provide certain demographic information about you (e.g., age, gender, date of birth, purchase preferences, usage frequency, etc.) when using our Services or participating in Cracker Barrel Rewards, a survey, or a poll; or (c) post a general comment and/or recommendation on our Properties or through our Applications. Whether or not you provide this information is your choice; however, in many instances this type of information is required to participate in the particular activity or program, realize a benefit we may offer, or gain access to certain content or features available through our Services.

(2) Transactional Information. As we are often interacting with you in a transactional way, we collect Personal Information related to your transactions with us. For example, we collect credit card information when you are making a purchase in our store or paying for a meal in a restaurant. We collect mailing information when we are shipping merchandise to you. We also collect and retain information related to your purchase history, participation in and use of Cracker Barrel Rewards and preferred store locations.

(3) Technical Information and Non-Personal Information. Technical Information is any information that relates to your interaction with us electronically. This may include Personal Information, but also may include information that does not relate to you personally (“Non-Personal Information”). Non-Personal Information can include certain Personal Information that has been rendered anonymous. We obtain Non-Personal Information about you from information that you provide us, either separately or together with your Personal Information. We also automatically collect certain Technical Information from you when you access our Services, including the online chat, through your Equipment. This information can include, among other things, your mobile device, other applications or software you are using, wireless carrier, IP addresses, the type of browser you are using (e.g., Internet Explorer, Firefox, Safari, Opera, etc.), the third-party website from which your visit originated, the operating system you are using (e.g., Vista, Windows XP, Mac OS, Android, iPhone, etc.), the domain name of your Internet service provider (e.g., CenturyLink, Google, Cox, etc.), the search terms you use; and how much you use our Services. Depending on our ability to relate Technical Information to you, we will consider such information Personal Information.

(4) Location Information. When you use our Services, particularly our Application(s), we may automatically collect certain Equipment (mobile device) specific information. This includes the general or specific location of your Equipment through GPS, Bluetooth, or WiFi signals. We consider Location Information to be Sensitive Personal Information. Before we collect or send location-specific information, we will ask for your consent. In some instances, your operating system may not allow you to install an Application without giving us consent. In all instances, you may withdraw your consent by disabling location features for your Equipment – the Application will still work though certain location features (e.g., Store Locator) may not function.

(5) Social Media Information: if you interact with us through a social media service or log in using social media credentials, depending on your social media settings, we may have access to your information from that social network such as your name, email address, age, gender, and location.

B. HOW WE USE & SHARE THE INFORMATION COLLECTED

We use Personal Information in our normal course of business for the following purposes:

(1) Personal Information. The Personal Information you submit to us is generally used to carry out your requests, respond to your inquiries, manage or facilitate your participation in Cracker Barrel Rewards, better serve you, or in other ways naturally associated with the circumstances in which you provided the information. We may also use this information to later contact you for a variety of reasons, such as customer service; providing you with promotional information for our products or those of our parent company, subsidiaries or other affiliated companies (“Affiliated Companies”); or to communicate with you about content or other information you have posted or shared with us via our Services. You may unsubscribe from receiving future promotional information from us or our Affiliated Companies or direct that we not share your information with any Affiliated Companies, as set forth below. For our employees whose Cracker Barrel Rewards Accounts are linked to their Cracker Barrel employee IDs, we may offer rewards from time to time.

In certain instances, we may also share your Personal Information with third parties performing functions on our behalf (or on behalf of our Affiliated Companies) or accessing the Service – e.g., vendors that operate our website store/shop, manage our loyalty program, process credit card orders, administer our promotions, provide us marketing or promotional assistance, analyze our data, assist us with customer service, including the online chat function, etc. These third parties agree to use this information, and we share information with them, only to carry out our requests or provide Services and for no other purposes. In addition, we may share your Personal Information with participating sponsors to a program or promotion (e.g., a sweepstakes or contest) you enter via our Services and with certain co-promotional partners and others with whom we have marketing or other relationships. Except as provided in this Privacy Policy or permitted by applicable law, your Personal Information will not be shared or sold to any third parties.

(2) Sensitive Personal Information. The Sensitive Personal Information you submit to us would include your driver's license number, state identification card, precise geolocation (if you permit us to obtain your precise geolocation), your ethnic origin, and biometric data; combination of email address, financial account, debit card, or credit card with security or access code, password, or other credentials allowing access to your account. This Sensitive Personal Information is used only for the following purposes:
i. To perform the services or provide the goods reasonably expected by an average consumer who requests those goods or services (e.g., geolocation for delivery.)
ii. To detect security incidents that compromise the availability, authenticity, integrity, and confidentiality of stored or transmitted personal information, provided that the use of the consumer’s personal information is reasonably necessary and proportionate for this purpose.
iii. To resist malicious, deceptive, fraudulent, or illegal actions directed at the business and to prosecute those responsible for those actions, provided that the use of the consumer’s personal information is reasonably necessary and proportionate for this purpose.
iv. To ensure the physical safety of natural persons, provided that the use of the consumer’s personal information is reasonably necessary and proportionate for this purpose.
v. For short-term, transient use, including, but not limited to, nonpersonalized advertising shown as part of a consumer’s current interaction with the business, provided that the personal information is not disclosed to another third party and is not used to build a profile about the consumer or otherwise alter the consumer’s experience outside the current interaction with the business.
vii. To verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured by, manufactured for, or controlled by the business

(3) Transactional Information and Technical Information: We use Transactional and Technical Information in a variety of ways. For example, we may use such information to evaluate use of and improve our Services (e.g., visits to our Property, use of our Applications, etc.), track purchases, gauge coupon redemption rates, monitor participation and engagement in our loyalty program, understand customer needs and trends, carry out targeted promotional activities, and improve our services. We may, among other things, share Transactional or Technical Information with our Affiliated Companies, allow trusted third parties to collect Personal Information directly from you, or sell Personal Information to third parties to achieve these and any other business objectives (e.g., generate revenue, form alliances, etc.).

C. COOKIES AND PREFERENCE BASED ADVERTISING

Along with Personal Information we collect directly from you, we also use various technologies for the specific purposes of enabling our on-line properties and developing a more targeted approach to advertising to you.

(1) Cookies and Web Beacons. We automatically receive and store certain types of information whenever you interact with us. For example, like many websites, we use "cookies" and "web beacons" (also called “clear gifs” or “pixel tags”) and embedded scripts to obtain certain types of information when you use or access our Services. "Cookies" are small files that we transfer to your Equipment’s hard drive, memory, or web browser to enable our systems to recognize your browser or Equipment and to provide convenience and other features to you. Some cookies contain Personal Information, some do not. "Web beacons" are tiny graphics with a unique identifier, similar in function to cookies, and may be used to track the online movements of users, when an email has been opened, and provide other Technical Information. Examples of the information we collect and analyze in this manner include the Internet Protocol (IP) address used to connect your Equipment to the Internet; computer and connection information such as browser type and version, operating system, and platform; your browsing or shopping activities on our Property, including the products or services you viewed or searched for, as well as the URL you come from and go to next (whether this URL is on our site or not); and cookie number. If you are concerned about the storage and use of cookies, you may block or limit the storage of cookies via browser controls or other software. We do not make any promise that our Services will recognize or be able to work with any such browser controls/software – e.g., see below for Do Not Track options. Our cookie technologies update periodically, and we take steps to keep our practices updated in a commercially reasonable manner. You may also be able to delete cookies manually from your Equipment through your internet browser, operating system, or other programs. Please note, however, that some portions of our Services will not function properly or be available if you are able to and do block and/or delete cookies.

(2) Preference-Based Advertising: We may share Personal Information with third parties, including advertising companies and website analysis firms, who use cookies and web beacons to collect Personal Information when you visit our Property and third-party sites. This Personal Information, collected through cookies and/or web beacons, is typically used by these companies (e.g., advertising networks) to serve you with advertisements while you are on third-party sites that are tailored to meet your preferences and needs. For more information on how this type of advertising works, go to www.aboutads.info.

(3) Opting Out. We may disclose personal information to digital analytics and advertising services providers, and to other third parties. Under certain state law(s), these disclosures may be considered sales of personal information or the sharing of personal information for targeted or cross-context behavioral advertising (“preference-based advertising”). If you wish to opt out of the preference-based advertising or sales of personal information that could occur from visiting our website, please click here , switch the “Targeting Cookies” toggle to the left, and select “Save Settings.” You may also opt -out of preference-based advertising via these third-party advertising networks, go to www.aboutads.info and follow the simple opt-out process. A couple of important notes about this opt-out tool: (1) it includes all the advertising networks that we may work with, but also many that we do not work with; and (2) it may rely on cookies to ensure that a given advertising network does not collect information about you (“Opt-out Cookies”) – an explanation of how Opt-out Cookies work can be found on www.aboutads.info. Therefore, if you use different Equipment, change web browser, or delete these Opt-out Cookies, you will need to perform the opt-out task again. We are working towards enabling Global Privacy Control (GPC) as an additional way for you to submit a request to opt out of the preference-based advertising and sales of your personal information through browsers and/or browser extensions that support such a signal. Until then, you can opt out of the use of third-party cookies as described above or on your browser. Note that if you are not logged in when you visit our site, we may not recognize the request to opt-out of the preference-based advertising and sales of information as being associated with your account because we would not be able to tie the request to your account. In that event, if you also want to opt-out of the preference-based advertising and sales of the information associated with your account, you would need to log in and then follow the opt-out process identified above. (For clarity, Cracker Barrel is not affiliated with, does not control, and is not responsible for, any of the third-party tools referenced in this section.)

(4) Do Not Track Features. Certain browsers may offer you the option of providing notice to websites that you do not wish for your online activities to be tracked for preference-based advertising purposes (“DNT Notice”). Some browsers are, by default, set to provide a DNT Notice, whether or not that reflects your preference. However, given how preference-based advertising works, DNT Notices may not be effective in communicating your preferences. For this and a variety of other reasons, with respect to our Property, we do not take any action based on browser-based DNT Notices. Rather, if you do not wish to participate in preference-based advertising, you would follow the opt-out process identified above. For information on Global Privacy Controls, please see section (3) above.

D. OTHER USES & DISCLOSURES

(1) Social Networks: We may offer you the ability to create or login to your account with us through accounts you may have with various social network platforms, such as Facebook or Twitter (each, a “Social Network Account”). To do so, you may be required to provide, or allow our Services to access, your Social Network Account login information. By granting us access to your Social Network Account, you understand and agree that we may access, make available, and store any content that you have provided to and stored in your Social Network Account (e.g., friends, mutual friends, contacts, etc.). We may make this information available on or through our Services and to our users. You may be able to restrict what information is shared and how it is used through privacy and other settings. Also, depending on the privacy settings you have set in your Social Network Account, Personal Information may be shared with us and made available through our Services and to our users.

(2) Email Communications. If you send us an email with questions or comments, we may use your Personal Information to respond to your questions or comments, and we may save your questions or comments for future reference. For security reasons, we do not recommend that you send non-public Personal Information, such as passwords, social security numbers, or bank account information, to us by email. We may send you emails for a variety of reasons – e.g., emails in response to your request for a particular service or your registration for a feature that involves email communications, emails that relate to purchases you have made with us (e.g., product updates, customer support, etc.), emails that relate to your participation in Cracker Barrel Rewards, informational emails about our other products, services or events, or when you consent to being contacted by email for a particular purpose. In certain instances, we may provide you with the option to set your preferences for receiving email communications from us; that is, agree to some communications but not to others. You may "opt out" of receiving future commercial email communications from us by clicking the "unsubscribe" link included at the bottom of most emails we send, or as provided below; provided, however, we reserve the right to send you transactional emails such as order confirmations and customer service communications.

(3) Transfer of Assets. As we continue to develop our business, we may sell or purchase assets. If another entity acquires us or all (or substantially all) of our assets, the Personal Information and Non-Personal Information we have about you will be transferred to and used by this acquiring entity, though we will take reasonable steps to ensure that your preferences are followed. Also, if any bankruptcy or reorganization proceeding is brought by or against us, all such information may be considered an asset of ours and as such may be sold or transferred to third parties.

(4) Other. Regardless of any other provision in this Privacy Policy, we reserve the right to disclose any personally identifiable or Non-Personal Information about you if we are required to do so by law, with respect to copyright and other intellectual property infringement claims, or if we believe that such action is necessary to: (a) fulfill a government request; (b) conform with the requirements of the law or legal process; (c) protect or defend our legal rights or property, our Services, or other users; or (d) in an emergency to protect the health and safety of our customers or the general public.

E. Your State Privacy Rights

In a number of states, the law provides residents with certain rights with respect to their Personal Information. If you are a resident of a state with a specific privacy law, you may have some, or all of, have the following rights:

(1) Right to Know. You may request us to provide you the specific pieces of Personal Information that we have about you, categories of Personal Information we have collected about you, categories of sources from which the Personal Information is collected, categories of Personal Information that we sold or disclosed for a business purpose about you, categories of third parties to whom the Personal Information was sold or disclosed for a business purpose, and the business or commercial purpose for collecting or selling Personal Information. Please note that much of the information for which you can make a request is already contained in this Privacy Policy. Should you wish to exercise this right, please contact us via one of the methods noted below under “Exercising Privacy Rights.” If you do not have an account with us, we may ask for some Personal Information in order to verify your identity and your rights to the data subject to your request.

(2) Right to Delete. You may request deletion of your Personal Information. However, this right is limited by a number of exceptions. Fundamentally, if we have a permissible need to retain Personal Information, we are not under an obligation to delete such information, even when requested. Generally, we retain Personal Information so we may complete the transaction for which the Personal Information was collected, provide a good or service requested by you, or reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform a contract between us and you; detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity; or prosecute those responsible for that activity; debug to identify and repair errors that impair existing intended functionality of our online properties; enable solely internal uses that are reasonably aligned with your expectations based on your relationship with us; comply with a legal obligation; or otherwise use your Personal Information, internally, in a lawful manner that is compatible with the context in which your provided the information. As such, we generally do not accept requests to delete Personal Information. However, we will respond to requests to remove Personal Information from some of our systems as a part of a request to close or otherwise disable a membership or Rewards account. If you would like to request deletion of Personal Information, please contact us via one of the methods noted below under “Exercising Privacy Rights.” If you do not have an account with us, we may ask for some Personal Information in order to verify your identity and your rights to the data subject to your request.

(3) Right to Opt-Out of Sale or Sharing. If you would like to opt-out of any sale or sharing of your Personal Information, please follow the processes described in Section C(3) above (titled “Opting Out”), or contact us via one of the methods noted below under “Exercising Privacy Rights.”

(4) Right to Correct. Some state law gives residents a right to request we correct inaccurate Personal Information about you, taking into account the nature of the Personal Information and the purposes of the processing of the Personal Information. If you would like to request correction of Personal Information, please contact us via one of the methods noted below under “Exercising Privacy Rights.” If you do not have an account with us, we may ask for some Personal Information in order to verify your identity and your rights to the data subject to your request.

(5) Right to Limit the Use of your Sensitive Personal Information. We do not use and disclose sensitive personal information, as defined in applicable laws, for any purposes other than those necessary to perform the services or provide the goods that you requested or for other permitted business purposes.

(6) Designating an Authorized Agent. You may designate an agent to manage your privacy rights. If you would like to designate an agent, you may do so using the mechanisms noted below under “Exercising Privacy Rights.” Note that if you do not have an account with us, we may ask for some Personal Information in order to verify your identity and your rights to the data subject to your request. We will also need sufficient Personal Information about your authorized agent to be able to identify them. As part of this process, you must have permission from your authorized agent to disclose their Personal Information to us for the purpose of acting as your agent.

(7) Non-discrimination. State consumer privacy laws do not permit us to discriminate against you because you exercised any of your privacy rights, including, but not limited to, by: denying you access to goods or services; charging different prices or rates for goods or services, including through the use of discounts or other benefits or imposing penalties; providing a different level or quality of goods or services; or suggesting that you will receive a different price or rate for goods or services or a different level or quality of goods or services.

(8) Appealing a decision we have made regarding your request. Some states allow you to appeal our decision to decline your request to exercise your rights. To appeal a decision we have made regarding your request, you may do so by contacting us as described below or via a webform at our Privacy Portal , or via toll-free number 1-800-333-9566. We will respond to appeals from Virginia and Connecticut residents within 60 days. We will respond to appeals from Colorado residents within 45 days.

(9) Exercising Privacy Rights. If you are a resident of a state which has specific privacy laws covering your Personal Information as described above and would like to exercise any of your applicable rights, you may do so by contacting us as described below or via a webform at our Privacy Portal , or via toll-free number 1-800-333-9566. Please be aware that we will need to have sufficient information to be able to verify your identity and the rights you have in the data subject to your request. You may also write to us at:

Cracker Barrel Old Country Store, Inc.
Attn: Legal Department
307 Hartmann Drive
Lebanon, Tennessee 37087
Fax: 615-235-4054

F. NOTICE OF FINANCIAL INCENTIVE

In connection with the Cracker Barrel Rewards program, we may offer financial incentives and/or price or service differences (“Incentives”) to program participants in exchange for our use of their Personal Information. If you participate in the program, we collect the Personal Information you provide when you sign up or engage in activities in connection with the program, such as your email address, referral activity, purchase history, and engagement with Cracker Barrel (“Cracker Barrel Rewards Data”). To offer you these Incentives, we must collect this information so that we can follow your participation in and your engagement with the program, as described in the Cracker Barrel Rewards Terms and Conditions  and this Privacy Policy. The value of Cracker Barrel Rewards Data is calculated by determining the approximate additional spending per program participant, per year compared to individuals who have not participated in Cracker Barrel Rewards. The value of Cracker Barrel Rewards Data is reasonably related to the costs associated with offering the Incentives. You can withdraw from or cancel your enrollment in the program at any time by contacting Guest Relations by completing an online Contact Us form or by using the online chat.
Additionally, we may offer our customers limited-time promotions and opportunities to participate in surveys. In exchange for participating in our promotions or surveys, and providing us with your Personal Information, we may offer you financial incentives and/or price or service differences such as a bonus card, discount, or coupon. You can terminate participation at any time as explained in the applicable promotion or survey terms. We estimate that the value of the Personal Information collected in connection with these promotions and surveys is the value of the benefit we offer to you, which is reasonably related to the costs associated with offering such benefit.

G. PUBLIC FORUMS

We may offer chat rooms, blogs, message boards, or similar public forums where you and other users of our Services can share information and communicate – e.g., places where you can post your resume and/or profile. The protections described in this Privacy Policy do not apply when you provide information (including Personal Information) in connection with your use of these public forums. We may use personally identifiable and Non-Personal Information about you to identify you with a posting in a public forum. Any information you share in a public forum is public information and may be seen or collected by anyone, including third parties that do not adhere to our Privacy Policy. We are not responsible for events arising from the distribution of any information you choose to publicly post or share through our Services.

H. CHILDREN

The features, programs, promotions, and other aspects of our Services requiring the submission of Personal Information are not intended for children. We do not knowingly collect Personal Information from children under the age of 13. If you are a parent or guardian of a child under the age of 13 and believe he or she has disclosed Personal Information to us, please contact us at privacy@crackerbarrel.com. A parent or guardian of a child under the age of 13 may review and request deletion of such child's Personal Information as well as prohibit the use of that information. We do not have actual knowledge about selling or sharing Personal Information of persons under the age of 16.

I. KEEPING YOUR INFORMATION SECURE

We have implemented security measures we consider reasonable and appropriate to protect against the loss, misuse, and alteration of the information under our control (e.g., where appropriate, implementing firewalls, encryption, etc.). Please be advised, however, that while we strive to protect your Personal Information and privacy, we cannot guarantee or warrant the security of any information you disclose or transmit to us online or through our Services, and are not responsible for the theft, destruction, or inadvertent disclosure of your Personal Information. From time to time, we evaluate new technology for protecting information, and when appropriate, we upgrade our information security systems.

J. OTHER SITES/LINKS

Our Services may link to or contain links to third-party websites that we do not control or maintain, such as in connection with purchasing products we may recommend or reference via our Services and/or advertisements you may see while using our Services. We are not responsible for the privacy practices employed by any third-party website. We encourage you to read the privacy statements of all third-party websites before submitting any Personal Information through these websites.

K. CONTACT & OPT-OUT INFORMATION

You may contact us as at privacy@crackerbarrel.com if: (a) you have questions or comments about our Privacy Policy; (b) wish to make corrections to any Personal Information you have provided; (c) want to opt-out from receiving future commercial correspondence, including emails, from us or our Affiliated Companies; (d) wish to withdraw your consent to sharing your Personal Information with others; or (e) you have other privacy related questions or concerns. We will respond to your request and, if applicable and appropriate, make the requested change in our active databases as soon as reasonably practicable. Please note that we may not be able to fulfill certain requests while allowing you access to certain benefits and features of our Property and/or Application.

L. SOLE STATEMENT

This Privacy Policy as posted on this Property/Application is the sole statement of our privacy policy with respect to this Property, and no summary, modification, restatement, or other version thereof, or other privacy statement or policy, in any form, is valid unless we post a new or revised policy to the Property/Application.