GDPR & Data Protection
Last Updated: August 2026
At KFC Menu Australia (kfcmenuaus.com), we respect the privacy of our visitors and are committed to handling personal information responsibly.
This GDPR & Data Protection page explains the rights that may be available to individuals whose personal information is protected by the General Data Protection Regulation (GDPR) or other applicable data protection laws.
KFC Menu Australia is an independent informational website and is not owned, operated, sponsored, endorsed, or officially affiliated with KFC or Yum! Brands.
This page should be read together with our Privacy Policy, which provides additional information about how we collect, use, protect, and retain information.
1. When GDPR May Apply
The GDPR primarily applies to the processing of personal data of individuals in the European Economic Area (EEA) and certain other circumstances covered by the regulation.
Whether the GDPR applies to a particular individual or processing activity depends on the circumstances.
If GDPR or another applicable data protection law applies to your personal information, you may have additional rights as described below.
2. Personal Information We May Collect
Depending on how you interact with our website, we may collect limited information such as:
- Name
- Email address
- Messages or enquiries submitted through contact forms
- IP address
- Browser and device information
- Pages visited
- Website usage information
- Other technical information collected through cookies, analytics, or similar technologies
We do not intentionally request sensitive personal information through our website.
Please avoid submitting sensitive personal information through our contact forms or email unless it is necessary for your enquiry.
3. How We Use Personal Information
We may process personal information for purposes including:
- Responding to enquiries and communications
- Operating and maintaining the website
- Improving website content and functionality
- Understanding website traffic and usage
- Maintaining website security
- Detecting and preventing misuse
- Supporting analytics and website performance
- Complying with applicable legal obligations
We do not sell or rent personal information to third parties.
4. Legal Bases for Processing
Where the GDPR applies, personal information may be processed on one or more lawful bases permitted by the GDPR.
Depending on the circumstances, these may include:
Consent
Where required, we may ask for your consent before processing certain information, particularly where cookies or similar technologies require consent.
You may withdraw consent at any time where processing is based on consent.
Legitimate Interests
We may process information where it is reasonably necessary for legitimate interests, such as maintaining website security, improving our website, understanding website performance, or preventing misuse, provided those interests do not override applicable privacy rights.
Legal Obligations
We may process or retain information where necessary to comply with applicable laws, regulations, legal proceedings, or lawful requests from authorities.
Other Lawful Bases
Where applicable, information may also be processed when necessary to perform a contract or take steps requested by an individual before entering into a contract.
5. Cookies and Tracking Technologies
Our website may use cookies and similar technologies for purposes such as:
- Website functionality
- Remembering preferences
- Analytics
- Understanding website usage
- Measuring website performance
- Advertising and marketing, where applicable
Where consent is legally required for particular cookies or tracking technologies, we aim to provide an appropriate consent mechanism.
You can also manage or disable cookies through your browser settings.
Disabling certain cookies may affect the functionality of some parts of the website.
6. Third-Party Services
We may use third-party service providers to help operate and improve our website.
These may include providers of:
- Website hosting
- Analytics
- Website security
- Advertising
- Email or communication services
- Affiliate or referral services
Third-party providers may process certain information in accordance with their own privacy policies and terms.
Where applicable, third parties may use cookies, pixels, or similar technologies to collect information about website usage.
We encourage you to review the privacy policies of third-party services that you use through links or services available on our website.
7. International Data Transfers
Some third-party service providers we use may process or store information outside Australia or outside the country where you are located.
Where the GDPR applies and personal information is transferred internationally, we aim to use appropriate safeguards where required by applicable data protection law.
These safeguards may include recognised contractual or other lawful transfer mechanisms.
8. Your GDPR Rights
Where the GDPR applies, you may have the following rights, subject to applicable legal conditions and exceptions:
Right of Access
You may request confirmation of whether we process your personal data and, where applicable, request access to that information.
Right to Rectification
You may request correction of inaccurate or incomplete personal information.
Right to Erasure
In certain circumstances, you may request that your personal information be deleted.
Right to Restriction of Processing
You may request that the processing of your personal information be restricted in certain circumstances.
Right to Object
You may have the right to object to certain types of processing, including processing based on legitimate interests or direct marketing where applicable.
Right to Data Portability
Where applicable, you may request certain personal information in a structured, commonly used, and machine-readable format and request its transmission to another organisation.
Right to Withdraw Consent
Where processing is based on your consent, you may withdraw that consent at any time.
Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
Rights Relating to Automated Decision-Making
Where applicable, you may have rights concerning certain automated decision-making or profiling that produces legal or similarly significant effects.
We do not intend to use personal information collected through ordinary website contact forms to make decisions of this nature.
9. How to Exercise Your Rights
If you would like to exercise a privacy or GDPR right, please contact us through our Contact Us page or by email:
When submitting a request, please provide enough information for us to understand and process your request.
We may need to request additional information to verify your identity before providing access to personal information or making certain changes.
We will review and respond to valid requests within the timeframes required by applicable law.
10. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including responding to enquiries, maintaining appropriate records, complying with legal obligations, resolving disputes, and protecting our legal rights.
The retention period may vary depending on the type of information and the reason it was collected.
11. Data Security
We take reasonable technical and organisational measures to protect personal information against unauthorised access, misuse, loss, alteration, or disclosure.
However, no internet transmission or electronic storage system can be guaranteed to be completely secure.
If we become aware of a personal data breach that is subject to a legal notification requirement, we will take the steps required under applicable law.
12. Children’s Privacy
Our website is intended for a general audience and is not specifically directed toward children.
We do not knowingly collect personal information from children without appropriate consent where such consent is required by applicable law.
If you believe that a child has provided personal information to us, please contact us so that we can review the matter and take appropriate action.
13. Complaints
If you believe that your personal information has been handled in a way that does not comply with applicable data protection law, we encourage you to contact us first so that we can investigate and attempt to resolve your concern.
Where applicable, you may also have the right to lodge a complaint with the relevant data protection or supervisory authority in your country or region.
14. External Links
Our website may contain links to external websites.
Once you leave KFC Menu Australia and visit another website, that website’s own privacy policy and data protection practices will apply.
We are not responsible for the privacy practices, security, or content of third-party websites.
15. Changes to This Policy
We may update this GDPR & Data Protection page from time to time to reflect changes to our website, services, technology, legal requirements, or data protection practices.
When we make changes, we will update the “Last Updated” date at the top of this page.
16. Contact Us
If you have questions about this GDPR & Data Protection Policy or would like to exercise an applicable privacy right, please contact us:
KFC Menu Australia
Website: kfcmenuaus.com
Email: info@kfcmenuaus.com
We take privacy and data protection enquiries seriously and will make reasonable efforts to review and respond to requests as soon as possible.
This website is an independent informational resource and is not affiliated with, endorsed by, or officially connected with KFC or Yum! Brands.