Privacy Policy

Last updated: 30 March 2026

1. Introduction

McDonald's Restaurants (New Zealand) Limited and GAPbuster Worldwide Ltd ("we", "us", or "our") operate the My Macca's Review mobile application (the "App"), available on Apple App Store and Google Play Store. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the App.

The App is a customer feedback platform. Surveys conducted through the App are anonymous unless you voluntarily choose to provide identifying information. Your privacy is very important to us, and we are committed to protecting your personal information.

Personal information is gathered only when voluntarily submitted. We will only send marketing materials to you with your permission.

2. Information We Collect

2.1 Demographic Information (Survey-Specific)

Certain surveys may request additional demographic information such as date of birth, gender, marital status, education level, employment status, profession, income level, or ethnicity. This information is only collected when activated by the specific survey.

2.2 Survey Responses

When you complete surveys through the App, we collect your responses, which may include:

• Text answers and selections
• Photographs taken using your device camera
• Audio and video recordings
• QR code scan data
• File uploads
• Date and time of your visit

Survey responses are anonymous and are not linked to your personal identity unless you voluntarily provide identifying information within the survey.

2.3 Device Information

We automatically collect certain technical information from your device, including:

• Device identifier (a unique ID generated from your device)
• Device model and manufacturer
• Operating system and version
• App version
• IP address
• Timezone and language/locale settings

2.4 Location Data

With your permission, we collect your device's location using GPS and/or network-based methods. Location data is used to:

• Display nearby survey opportunities
• Verify survey completion at designated locations

You can disable location access at any time through your device settings, though this may limit certain features of the App.

2.5 Cookies and Similar Technologies

The App may use cookies and similar technologies to enhance your experience and collect usage data. You can manage cookie preferences through your device or browser settings. Disabling cookies may affect some functionality of the App.

2.6 Usage and Analytics Data

We collect anonymised usage data to improve the App, including screen views and feature usage. This data is processed using on-premise analytics infrastructure and is not shared with third-party analytics providers.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To deliver and manage survey opportunities
• To process and submit your survey responses
• To display nearby survey locations
• To administer rewards and incentives
• To improve the App and our services
• To communicate with you about surveys and rewards (only with your permission)
• To ensure the security and integrity of the App

4. Information Sharing

We do not sell your personal information to third parties for direct marketing purposes.

• McDonald's Corporate Family: Your information may be shared within the McDonald's corporate family of companies for the purposes of operating and improving the service. If you provide contact details for the purpose of being contacted, these details are shared with McDonald's. Information will not be sold to external third parties outside the McDonald's corporate family.
• GAPbuster Worldwide Ltd: As the technical service provider, GAPbuster Worldwide Ltd accesses your data solely for the purpose of operating and maintaining the App.
• Legal Requirements: We may disclose your information if required to do so by law, to protect the safety of any individual, or in response to valid requests by public authorities.

5. Data Security

We take reasonable security measures to protect your personal information from loss, theft, unauthorised access, disclosure, copying, use, or modification. Data transmitted between the App and our servers is encrypted. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as necessary to fulfil the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. When your information is no longer needed, we will securely delete or anonymise it.

7. Your Rights

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate personal information
• Request deletion of your personal information
• Withdraw consent for data collection at any time

To exercise any of these rights, please contact us at privacy@sonata-software.com.

8. Children's Privacy

The App is not intended for use by children under the age of 14. We do not knowingly collect personal information from children under 14 without parental consent. If we become aware that we have collected personal information from a child under 14 without appropriate consent, we will take steps to delete that information promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected by updating the "Last updated" date at the top of this page. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

10. Governing Law

This Privacy Policy shall be governed by the laws of the State of Victoria, Australia, without regard to its conflict of law provisions.

11. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

McDonald's Restaurants (New Zealand) Limited / GAPbuster Worldwide Ltd
Email: privacy@sonata-software.com