McDonald's Employee Privacy Statement New Zealand

Last Updated: December 2025

1.   Introduction

McDonald's Restaurants (New Zealand) Limited ("McDonald's", "we", "us", "our") is committed to protecting the privacy and security of the information that we collect and use for employment-related purposes and for the administration of our human resources function.

This statement outlines how we collect, use, store, and share your personal information in accordance with our recruitment processes.

  

2.   Scope

This Statement applies to all personal information (i.e., any information relating to an identified or identifiable natural person) of our current or former employees (referred to as “Employees”) as well as applicants whether such information has been provided in writing, electronically, or verbally.

This Statement does not cover the information of individuals that are employed by our franchisees or developmental licensees, which are independently owned and operated. Our franchisees and developmental licensees maintain separate employment policies and practices. If you are an employee of a franchisee/developmental licensee, that franchisee/developmental licensee uses your personal information pursuant to its own privacy policies. Please contact your employer to learn more about its privacy practices.

  

3.   Information We Collect

We collect and process personal information for the administration and management of our human resources function. The actual personal information collected and processed will vary depending on your status as a current or former Employee as well as the nature of your position and role.

In the normal course of human resources activities, we may collect and process the following type of personal information on the basis of the necessity for compliance with a legal obligation to which McDonald’s is subject, and McDonald’s prevailing legitimate interest to effectively manage its human resources and achieve the purposes set out below in Section 5:

  • Contact information such as your name, home address, telephone numbers (home and mobile), email address and emergency contact information;
  • Your gender, date of birth, marital status, birthplace, birth or marriage certificates, nationality;
  • Your date of hire, description of current and past title/positions, grade or level, unit/department, work-related contact details, date(s) of promotion, work history, technical skills and training courses attended, location, supervisor(s) and subordinate(s), employee identification number, employment status and type, length of service, promotions;
  • Usernames and other unique identifiers, whether assigned by McDonald’s or selected by you;
  • Date of resignation or termination;
  • Acknowledgements regarding McDonald’s policies, such as our Standards of Business Conduct;
  • Photographs/videos;
  • Details on stock options, stock grants and other awards, incentive plan participation details and eligibility for the same;

We may collect and process the following type of personal information for Employees who perform global roles or otherwise directly report to McDonald’s rather than one of our subsidiaries as well as in exceptional cases to the extent necessary for the purposes set out in the next section below:

  • passport or other national identification number, citizenship, tax reference number;
  • Bank account information;
  • Residency and work permit status; dependents, personal details of dependents; children’s birth certificates, children’s school records;
  • Terms of employment;
  • Employment history and talent management information such as educational background, military service, professional certifications, language capabilities and other relevant skills, references, letters of recommendation and interview notes; retirement eligibility; details on performance management ratings, training records, development plan and willingness to relocate; evaluations of job performance and qualifications for succession planning and advancement purposes;
  • Salary, bonus, benefits, long-term incentives and award history, salary reviews, beneficiary information, leave or workers compensation information, and severance information;
  • Working time records and records of work absences (including vacation and other absence records including maternity and paternity leave, leave status, hours worked and department standard hours), sick pay, leave entitlement and requests, performance appraisals, disciplinary and grievance procedures;
  • Electronic content produced or received by you using McDonald’s IT systems, including documents, information, and emails and other electronic communications transmitted or received using McDonald’s IT systems;
  • Pensions, investment accounts, insurance and other related benefits information (which may include information about your spouse, children and other eligible dependents and beneficiaries);
  • Information needed to comply with legislation, court requests or law enforcement authorities;
  • Reason for resignation or termination, other information relating to termination of employment;
  • Records regarding compliance with McDonald’s policies such as food safety compliance, employee monitoring information as appropriate under local laws, including information captured on security systems, including key card entry systems and CCTV systems and information from use of computer systems, software, communications systems and devices, and other resources owned, operated or controlled by us or provided on our behalf;
  • Voicemails, emails and other work product correspondence and communications created, stored or transmitted using McDonald’s computer or communications equipment;
  • Driving license number, vehicle registration and plate information and driving history; and
  • Where permitted by law and proportionate in view of the function to be carried out by an Employee, the results of credit and criminal background checks, drug and alcohol testing and other screening procedures.

In addition, we may process certain special categories of personal information for the following reasons:

  • if that information is needed for carrying out obligations and exercising McDonalds’s or your rights in the field of employment;
  • if that information is needed for the establishment, exercise or defence of legal claims; or
  • with your consent (for example to ensure diversity, equity, and inclusion within the McDonald’s work environment).

Such special categories of personal information may include:

  • Race and ethnicity;
  • Religious or philosophical beliefs;
  • Sexual orientation;
  • Disability status;
  • Health information as appropriate under legislation in connection with compensation and leave;
  • Information on physical limitations, special needs and other medical or health-related workplace accommodations as well as health-related information relevant for the health and safety of other Employees, visitors, customers, or business partners (e.g., vaccination status with respect to communicable diseases); and
  • Biometric identifiers and information, such as fingerprint and fingerprint templates.

 

4.   How We Collect Personal Information

McDonald's collects your personal information from several sources for the purpose of managing our relationship with you. This information may be provided directly from you, generated internally, or received from your employer or other third parties. In certain cases, this may also include the information of other individuals, such as family members, dependents, or beneficiaries, whose data we collect as a result of their relationship with an Employee.

 

5.   Purposes for Which Your Personal Information is Processed

We collect and use personal information for a number of employment-related purposes:

  • Staffing and workforce management purposes;
  • Training and development, including secondments;
  • Strategic planning, succession planning and ensuring business continuity;
  • Processing of personal information for job applicants including applications, recruitment and selection purpose;
  • Processing of personal information for job applicants, including promotion and transfer purposes;
  • Aggregated benchmarking, statistical reporting and analytics to (i) manage our workforce and carry out our business operations, (ii) gather demographic information about our Employees, (iii) determine how we may better allocate resources and improve our services, and (iv) inform and develop our diversity, equity and inclusion strategies;
  • Enabling electronic communications as well as facilitating communication in general, including via video;
  • Operating and managing the IT systems, including providing access to our IT equipment and services, including our computer systems and networks, communication tools and the Internet, and hosting business software systems, as well as third party-provided technology resources and systems (including identity management and authentication services);
  • Increasing productivity and/or efficiency, e.g. by training and using appropriate AI tools, including large language models;
  • Managing product and service development, improving products and services;
  • Managing company assets, including authorisation and allowance of access to IT and communication systems;
  • Ensuring the security of our IT equipment and services as well as of our office equipment and other property;
  • Fulfilling recording, information and reporting obligations and otherwise complying with applicable legal requirements;
  • Conducting employee surveys and other similar human resources initiatives for measuring Employee engagement;
  • Monitoring and protecting the security and use of our networks, communications and systems, offices and facilities, reports, property and infrastructure;
  • The administration of Employee participation in various programmes and services offered to eligible Employees;
  • Maintaining records relating to food sourcing, food safety and other business activities; and
  • Compliance with our Diversity Equity and Inclusion initiatives.

For Employees who perform global roles or otherwise directly report to McDonald’s (rather than one of our subsidiaries), we collect and use personal information for the following employment-related purposes as well as in exceptional cases:

  • Compensation, payroll, tax, insurance, pension, savings plans as well as benefit and reward planning, administration and review (including stock options, stock grants and bonuses);
  • Administration and maintenance of our occupational health plans, including work-related injury and illness recording obligations;
  • Budgeting, financial management and reporting, communications, managing mergers, acquisitions and re- organisations, including vendor due diligence standards;
  • Travel and relocation management;
  • Time and attendance management;
  • With your help, recruiting new Employees;
  • Performance evaluation and management, including promotions, awards, competitions and employee recognition programmes as well as disciplinary matters and terminations;
  • Conducting audits, including through independent third party-auditors, to ensure and verify the integrity of our financial records as well as the compliance with internal policies;
  • Ensuring the security, health and safety of Employees, visitors, customers, and business partners as well as our property and premises;
  • With your help, informing interested parties (e.g., customers) about your role, responsibilities and professional activities;
  • Performing background checks as appropriate under local laws;
  • Operating a compliance hotline, ensuring compliance with internal policies and procedures, managing any internal complaints; ethics issues;
  • Dispute and complaint resolution, internal investigations and reviews, auditing, compliance, and risk management;
  • Compliance with judicial or administrative orders (including inspections and other requests from government or other public authorities) as well as compliance with legal and other requirements, such as income tax, record-keeping and reporting obligations; and
  • Establishing, exercising or defending against legal claims.

To the extent any envisioned use is inconsistent with or outside of the above contemplated uses in this Statement, we will communicate it to you at the point of collection of your personal information.

 

6.   How we Disclose and Share Your Information

In order to achieve the purposes set out further above, your information may be shared with other affiliates and subsidiaries of McDonald’s (the “McDonald’s Group”).

Your information may also be shared with various third parties outside of the McDonald’s Group for the purposes set out further above. These third parties may include:

  • Third party service providers, including suppliers, subcontractors and consultants that provide services to
  • McDonald’s or a McDonald’s Group company;
  • Government authorities, including regulatory authorities, law enforcement, or public entities such as local tax authorities; and
  • for Employees who perform global roles or otherwise directly report to  McDonald’s rather than one of our subsidiaries as well as in exceptional cases
  • Benefits providers, such as our health and insurance providers.

We may also share information with the third parties above or other third parties when:

  • We believe in good faith that the disclosure is required to comply with a judicial proceeding, court order, subpoena, warrant or legal process and such disclosure is in compliance with local law;
  • In the event of a merger or acquisition, divestiture, asset sale, a transfer of some or all of McDonald’s business, or other related transaction; and
  • When we believe in good faith that disclosure is required by law or to protect the safety of our Employees, the public or McDonald’s property.

 

7.    International Data Transfers

Like many global businesses, we have both centralised and outsourced various aspects of our business to improve how we manage and administer our human resources programme. In order to provide you with the services in this Statement, it may be necessary to transfer your information outside of the country where it was originally collected or outside of your country of residence. These transfers may be to any McDonald’s Group company around the world (as required) as well as to third party service providers around the world that help McDonald’s manage and administer its human resources programmes.

Before your personal information is disclosed to an overseas recipient, we will take steps that are reasonable in the circumstances to ensure that the overseas recipient does not breach New Zealand Privacy Laws in relation to your personal information.

 

8.   Security

We have in place appropriate technical, physical and organisational security measures that are designed to protect against unauthorised access, disclosure, damage or loss of personal information. The collection, transmission and storage of information can never be guaranteed to be completely secure. However, we take steps to ensure that appropriate security safeguards are in place to protect your information.

 

9.   Retention

McDonald’s will only retain your personal information for the duration of time necessary to fulfil the purposes described in this Statement and to adhere to our policies on maintaining records (unless a longer period is needed by law). This means that, in some cases, we may retain your personal information for a period of time following the termination of your employment, particularly where we need to keep records for legal compliance or to respond to potential legal claims.

 

10.   Choice, Access, and Other Rights

We want to ensure that you have the necessary tools at your disposal to control the information that you provide to us. It is also important that you contact us to keep your information accurate and up to date.

Under applicable law, you may have the rights (under the conditions and to the extent set out in applicable law): (i) to check whether and what kind of personal information we hold about you and to access or to request copies of such data; (ii) to request correction, supplementation, anonymisation, blocking or deletion of information about you that is inaccurate, incomplete, outdated, unnecessary, excessive or processed in non-compliance with applicable requirements; (iii) to request the restriction of the collection, processing or use of information about you; (iv) in certain circumstances, to object for legitimate reasons to the processing of your information or to revoke consent previously granted for the processing while the latter does not affect the lawfulness of processing before the revocation; (v) to request data portability; and (iv) to lodge a complaint with the competent authority.

For further details about our privacy practices, please refer to the McDonald's New Zealand Privacy Statement available at https://mcdonalds.co.nz/privacy-statement. 

11.   How to Contact Us

If you have any questions or concerns in relation to the collection and management of your personal information by McDonald’s under this Statement, you can reach us at:

McDonald's Restaurants (New Zealand) Limited
Attention: McDonald's Privacy Officer
PO Box 6644
Victoria Street West
Auckland 1142

Customer Services Phone: 0800 622 227
Email: privacy@nz.mcd.com

 

12.   Changes to this Statement

From time to time we may change, modify or amend this Statement to comply with the evolving regulatory environment or the way we operate our business. Subject to any applicable legal requirements to provide additional notice and/or obtain consent, any changes to this Statement will be communicated to you through existing McDonald’s communication channels and resources.