Franchisee Privacy Notice

JBM LLC FRANCHISEE PRIVACY NOTICE

Effective Date: July 31, 2026

Introduction

JBM LLC and its affiliates (collectively, “Jollibee,” “we,” or “our”) recognize and respect your privacy and are committed to protecting it. We have developed certain privacy practices to maintain these standards and comply with applicable laws, rules, and regulations.

This Franchisee Privacy Notice describes our privacy practices with respect to the personal information we may collect directly from our franchisees and/or their owners (collectively, “Franchise Operators” or “you”) in connection with the franchisor-franchisee relationship. This Privacy Notice also describes the purposes for which we collect such personal information and how we use or process such information.

Please review Jollibee’s general consumer Privacy Notice to learn more about our privacy practices applicable to your use of our Online Services (as defined in Jollibee’s Privacy Notice). Our Privacy Notice, which applies whenever you use our Online Services, is incorporated into this Franchisee Privacy Notice.

Please read this Franchisee Privacy Notice carefully. By submitting information to us in connection with your becoming a franchisee or operation of a franchise, you agree to the terms of this Franchisee Privacy Notice.

If you are a resident of a U.S. state that has enacted state-level data privacy laws, please review the state-specific section below, which applies to residents of such States. If you are a resident of Canada, please review The Rights of Canadian Residents section in our Privacy Notice.

Information We Collect From Franchisees

This Franchisee Privacy Notice applies to information we collect that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked to, directly or indirectly, a particular consumer or household (“Personal Information”) from Franchise Operators, in connection with, and for the purpose of maintaining and facilitating, the franchisor-franchisee relationship.

In connection with your operation of a franchised Jollibee restaurant, we may collect, and over the past 12 months may have collected, the following categories of personal information about you:

Category	Examples
Identifiers	First name, last name, alias, email address, postal address, unique personal identifier, telephone number, online identifier, IP address, account name, governmental information numbers (e.g., Social Security Number, driver’s license or state identification number, or passport number), or other similar identifiers.
Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)).	The examples listed above, signature, insurance policy information, education, bank account number, or other financial information.
Protected classification characteristics under California or federal law	Age, race/ethnicity, national origin, marital status, medical condition, gender, or veteran or military status voluntarily collected for lawful purposes
Commercial, Financial, and Business Ownership information	Financial statements, bank reference documents, other general financial information regarding the Franchise Operator’s assets, records of personal property, products or services purchased, or other purchasing or consuming histories or tendencies obtained from background or credit history checks, Franchise Operator’s ownership structure (which may include personal identifiers of other individual owners, operating partners, or managers of the ownership group)
Internet or other similar network activity	Information on your interaction with our online services
Sensory Data	Audio, visual, or similar information such as voicemails and recordings
Professional or employment-related information	Current or past job history or performance evaluations, including information on the Franchise Operator’s business experience operating restaurants, information on past business ventures, information on whether the applicant has ever filed for bankruptcy, and litigation history
Spousal Information	Spousal information (obtained in circumstances including when a Franchise Operator’s spouse is also a franchisee, has an ownership interest in the Franchise Operator, or has spousal rights in franchise property under applicable state law)
Inferences drawn from other personal information	Profile reflecting a person’s preferences and characteristics
Insurance Information	Insurance information including Commercial General Liability, Errors & Omissions, Health Insurance, Auto Liability, and Cyber
Sensitive personal information	Social Security Number, driver’s license number, state identification card number, or passport number, race/ethnicity. *Please note that we do not collect sensitive personal information for purposes of inferring characteristics about Franchise Operators.

In addition, we collect and retain the Personal Information that Franchise Operators disclose to us as part of the franchise application process. For more information on our privacy practices regarding the franchise application process, please review our Franchise Applicant Privacy Notice.

We will not collect additional categories of Personal Information beyond those listed above without first providing you notice. Personal Information does not include information that is excluded from the scope of “personal information” or “personal data” under applicable privacy laws.

How We Use Personal Information of Franchise Operators

We collect and use the above-referenced categories of Personal Information to facilitate the franchisor-franchisee relationship and for our legal and compliance purposes. For example, the purposes for which we use your Personal Information include to:

Provide Franchise Operators with trainings on brand standards and operational requirements
Manage our relationships with Franchise Operators
Facilitate the collection of franchise fees or other applicable charges from Franchise Operators
Support fundamental operational needs and business necessity
Perform research and analytics to support our business and the franchise system, including generating reports and measuring key performance indicators (KPIs)
Protect Jollibee, its customers, and Franchise Operators’ property, equipment, and confidential information
Monitor Franchise Operators’ business performance and compliance with its agreements
Enforce our policies, procedures, and agreements
Comply with applicable law or contractual obligations, exercise legal and contractual rights, initiate or respond to legal claims, or prevent fraud.
Help maintain the safety, security, and integrity of our Online Services, databases and other technology assets, our facilities and stores, and our business, to the extent the use of the Franchise Operators’ personal information is reasonably necessary and proportionate for these purposes
For other purposes permitted under applicable law, for example, when we are required to disclose information in connection with legal matters such as to respond to law enforcement or government requests

For all Personal Information we collect, we retain such information only for so long as necessary to fulfill a legitimate business need or purpose. We will use your personal information as reasonable and necessary to facilitate and maintain the franchisor-franchisee relationship.

Selling and Sharing of Personal Information

We do not “sell” or “share” (as those terms are defined under the California Consumer Privacy Act of 2018, as amended) Personal Information collected from Franchise Operators to any third parties, and have not sold such Personal Information in the past twelve (12) months.

We may disclose Personal Information to our trusted service providers, including FranConnect, LLC, for the limited and specified purpose of enabling them to fulfill their service function to us (including, but not limited to, facilitating the processing of franchise applications, franchise agreements and renewals, and enabling the storage and management of Franchise Operators’ information and documentation).

Our service providers may include our corporate affiliates. We may disclose your Personal Information to our affiliates located in the United States or internationally, such as our parent, subsidiary, and/or other affiliated entities, who are acting in the capacity as our service providers. Our affiliates may provide us with support services in relation to processing your Personal Information to fulfill the purposes for which your Personal Information was collected. This may include support services from affiliates in the United States or outside of the United States, relating to insurance, tax, accounting, information technology, marketing, and providing analytics services, data storage, or similar services on our behalf.

In addition, we may disclose deidentified or aggregated information (which does not identify you or any other individual) without restriction. We may also disclose your Personal Information to (1) comply with any court order, law, or legal process, including to respond to any government or regulatory request, and/or (2) if we believe disclosure is necessary or appropriate to protect the rights, property, or safety of Jollibee, users and visitors of our Website and mobile application, or others.

Data Security

The security, integrity, and confidentiality of your Personal Information are extremely important to us. Jollibee has implemented technical and administrative security measures that are designed to protect Personal Information from unauthorized or illegal access, destruction, disclosure, use, or modification. Please be aware that, despite our best efforts, no security measures are perfect or impenetrable.

Data Retention

We retain Personal Information only for the length of time as is reasonably necessary and proportionate to achieve the purposes described in this Franchisee Privacy Notice. We may also retain Personal Information for other necessary legal purposes such as complying with our legal obligations, resolving disputes, enforcing our agreements, preventing fraud, and other purposes permitted by law.

Children Under the Age of 13

Jollibee does not knowingly collect or solicit Personal Information from children under the age of 13. If we learn we have collected or received personal information from a child under the age of 13, we will delete that information. If you believe we might have any information from or about a child under the age of 13, please contact us at [email protected].

Contact Information

If you have any questions or comments about this notice, the ways in which Jollibee collects and uses your information, or wish to exercise your privacy rights under applicable law, please do not hesitate to contact us at [email protected].

State Privacy Rights

If you are a resident of a U.S. state that has enacted state-level data privacy laws, please review our general consumer Privacy Policy relating to the use of our Online Services to learn more about your state-specific privacy rights regarding your Personal Information, and how you can exercise those rights. Depending on which state you reside in, your rights may include the following:

Right to Know/Access. You may request to confirm whether we process your Personal Information and to access such personal data.
Right to Deletion. You may request that we delete Personal Information you provide. Please note we may deny your deletion request as permitted or required under applicable law.
Right to Correction of Inaccurate Data. You may request that we correct any inaccurate Personal Information about you, taking into account the nature of the Personal Information and the purposes of processing your Personal Information.
Right to Data Portability. You may request to obtain a copy of your Personal Information that you previously provided to us and to receive it in a portable and, to the extent technically feasible, readily usable format that would allow you to transmit the Personal Information to another controller without hindrance, where the processing is carried out by automated means.
Right to Opt Out of Sale, Profiling, and Processing for Targeted Advertising. You may have the right to opt out of the processing of your Personal Information for purposes of (i) targeted advertising, (ii) the sale of personal data, or (iii) profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer.
Right to Limit the Use and Disclosure of Sensitive Personal Information: You may have the right to request that we limit the use of your Sensitive Personal Information to only those uses that are necessary to perform the services that you reasonably expect from us.

You may also exercise your rights described above by:

Calling us toll free at 888.862.0312
Submitting a request on our privacy rights request form via this link
For opt out requests or requests to limit the use and disclosure of sensitive personal information, submitting a request via this link

Non-Discrimination

We will not discriminate or retaliate against you for exercising any of your privacy rights under applicable state law.

Changes to Our Franchisee Privacy Notice

Jollibee reserves the right to amend this Franchisee Privacy Notice at our discretion and at any time. We may change this Notice from time to time. When we make changes to this Franchisee Privacy Notice, we will post the updated notice on the Jollibee Franchise Hub made available to Franchise Operators and/or on our website and will update the notice’s effective date. Your continued engagement following the posting of changes is deemed to be acceptance of those changes, so please check the notice periodically for updates.