Privacy  Policy


Nando’s Canada

Privacy Policy

This Privacy Policy was last amended on September 30, 2021.

Nando’s is committed to protecting your, and your children's, Personal Data (as defined below) when you and they use our websites, our mobile applications and our other services. This Privacy Policy explains how Nando’s collects, uses and discloses information about you and the choices you can make about the way such information is collected, used and disclosed. The term “Nando’s” includes Nando’s Canada Inc., Nando’s Chickenland West Inc., Nando’s Chickenland Central Inc., Nando’s Peri Peri Canada Inc., and our other affiliates. By using our websites, our mobile applications or our other services, or by providing us with any Personal Data, you are consenting to this Privacy Policy (Our websites, our mobile applications and all our other services are herein collectively call the "Services").  

This Privacy Policy covers the following topics:

1. What is Personal Data?

2.A. What information will Nando’s collect about me?

2.B. How and when do you obtain my consent?

3. What is Nando’s cookies policy?

4. How will Nando’s use my Personal Data?

5. What about Personal Data that is publicly available?

6. Will my Personal Data be used for marketing purposes?

7. What security measures are in place to protect my Personal Data?

8. How will Nando’s store my Personal Data?

9. Will my Personal Data be shared with anyone else?

10. Links, advertisers, third party sponsors & ad-servers

11. Will my Personal Data be transferred out of the province I live in?

12. How can I find out what Personal Data Nando’s holds about me?

13. What if I am under the age of 14?

14. Other collection, use and disclosure of my Personal Data

15. Changes to this Privacy Policy

16. How can I contact Nando’s?

1. What is Personal Data? What we call “Personal Data” in this Privacy Policy is any information about an identifiable individual, such as first and last name, screen name, email address, postal address, telephone number, date of birth, details about your telephone device (e.g. mobile phone or PDA) and your telephone service provider and information related to an individual’s purchase and use of our products and services.

2.A. What Personal Data will Nando’s collect about me? When you use one of our electronic Services (for example, our mobile applications and our websites), our web server automatically records the name of your ISP (Internet Service Provider), your IP (internet protocol) address, the website from which you visit us, the pages on our electronic Services you visit and in what sequence, and the date and length of your visit. As well, if you use any WIFI or Internet service provided at any Nando’s restaurants in Canada we may collect information relating to the use of those services including information about your device, websites and webpages you visit and in what sequence, and the date and length of those visits.  

We also collect personal identifiable information when you provide it, for example if you make any purchases, engage in any online contests, registrations, competitions, message boards, surveys, polls, games, SMS, MMS and other mobile services. We may also collect other information, including your interests, preferences, purchasing behaviour, transactional information, geographical location and demographics (e.g., age, gender, and income information). We may combine Personal Data we receive with other records (such as those from telephone and direct purchases) to develop a customer profile relating to you.

2.B. How and when do you obtain my consent? Nando’s collects Personal Data about you only when you voluntarily provide it, such as when you provide your email address or use our electronic Services. Typically, we will seek consent for the use or disclosure of your Personal Data at the time of collection. The form of consent that we seek, including whether it is express or implied, will largely depend on the sensitivity of the Personal Data and the reasonable expectations of a person in the circumstances.  By using our Services your are consenting to the collection, use and disclosures as described in this Privacy Policy unless you inform us otherwise.

We will not, as a condition of the supply of a product or service, require you to consent to the collection, use or disclosure of information beyond that required to fulfill the explicitly specified and legitimate purposes for which the information is being provided.

You may withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice. To withdraw consent, please contact us as set out in Section 16 below.   We will inform you of the implications of withdrawing consent.

3. What is Nando's cookies policy? We, our third party service providers and our partners may send "cookies" to your computer or use similar technologies to enhance your online experience with our electronic Services and across the Internet. "Cookies" are files that can identify you as a unique customer and store your personal preferences as product preferences and to tell us which site pages you have visited and in what order. We use cookies and other technical information to personalize your use of our electronic Services, to analyze use of our electronic Services and to track user trends, patterns and selections for authorized download and for technical reasons connected with your use of our site. Cookies can either be permanent (i.e., they remain on your computer until you delete them) or temporary (i.e. they last only until you close your browser).

We may also use "web beacons" that monitor your use of our sites. Web beacons (or web bugs) are strings of code that provide a method for delivering a graphic image on a web page for the purpose of transferring data, such as the IP (Internet Protocol) address of the computer that downloaded the page on which the web beacon appears, the URL (Uniform Resource Locator) of the page on which the web beacons appears, the time the page containing the web beacon was viewed, the types of browser that fetched the web beacon and the identification number of any cookie on the computer previously placed by that server. When corresponding with you via HTML capable e-mail, web beacons let us know whether you received and opened our email. On their own, cookies or web beacons do not contain or reveal any Personal Data. However, if you choose to provide us with Personal Data, it can be linked to the anonymous data stored in the cookies and/or web beacons.

Most browsers are initially set to accept cookies. However, if you prefer, you may adjust your browser to reject cookies from us or from any other website. Additionally, by setting your web browser to display HTML emails as text only, you may be able to prevent the use of some web beacons. However, please note that certain areas of our sites can only be accessed in conjunction with cookies or similar devices and may not function as intended if you have adjusted your browser to reject cookies.

4. How will Nando’s use my Personal Data? We collect information so we are able to: provide services or products you request (e.g. send you by email or other electronic means our newsletters, or other products or services in which you express an interest); allow you to participate in interactive, social, and/or recreational activities on the site (e.g. participate in our message boards and discussion forums), to organize or carry out promotional activities, games or promotional events; inform you of changes made to our Services; inform you of products, services, promotions, offers and competitions which you may find interesting; respond to any queries you may have; develop a more direct relationship with you for the purposes described in this section; develop an online customer profile; and understand general customer trends and patterns so we can develop and support existing and ongoing marketing strategies for our products and services, to provide you with a customized experience and to improve our products and services. Where you choose to receive mobile services and content via SMS, MMS and other mobile services, we use this information to deliver such mobile services and content to you, to carry out market research, to track sales data and to plan other promotional activities which may be of interest to you.

5. What about Personal Data that is publicly available? If at any time our Services offer any chat rooms, message boards, blogs, newsgroups or forums, etc., we collect the information that you disclose. Such information will be used in accordance with this Privacy Policy. Please note that these forums, by their nature, are intended to be made available to other users. We cannot be responsible for other parties' use of the Personal Data which you make available on or through such chat rooms, message boards, blogs, newsgroups or forums, etc. on our Services.

6. Will my Personal Data be used for marketing purposes? If we obtain your consent, we also may use your Personal Data for the purposes of:

6.1. Direct marketing of our own products and services and on behalf of other companies within the Nando’s family of companies, including sending advertising to you that will be customized for you promoting certain products and/or services that we think that you would find most interesting based on what we know about you.

6.2. Direct marketing products and services on behalf of selected third parties; and if you have agreed to your details being passed onto 3rd parties.

7. What security measures are in place to protect my Personal Data? Although absolute security cannot be guaranteed on the Internet, please be assured that we have in place reasonable technical and organisational security measures that are designed to protect your Personal Data against unauthorized access, use, disclosure or loss.

8. How will Nando’s store my Personal Data? We store your Personal Data locally. We may also or alternatively store your Personal Data on and transfer your Personal Data to a central database located in the United Kingdom. Your information will not be stored for longer than is necessary for the purposes described in this Privacy Policy.

9. Will my Personal Data be shared with anyone else?

9.1. Nando’s entities: We may share your Personal Data with other entities within Nando’s. The entities within Nando’s that have agreed to be bound by this Privacy Policy have access to your data and can use it for the purposes mentioned in this Privacy Policy.  We may also disclose and/or transfer Personal Data to a third party in the event of a proposed or actual purchase, sale (including a liquidation, realization, foreclosure or repossession), lease, merger, amalgamation or any other type of acquisition, disposal, transfer, conveyance or financing of all or any portion of Nando’s or of any of the business or assets or shares of Nando’s, or a division thereof, in order for you to continue to receive the same products and services from the third party. 

9.2. Third parties: We may disclose Personal Data about you to other third parties to comply with applicable laws and regulations. We also reserve the right to disclose such Personal Data to third parties where a complaint arises concerning your use of our Services and where we believe, in our sole discretion, that your use of our Services is inconsistent with the Privacy Policy or our terms of service. We also share information about users of our Services in an anonymous or aggregate form with third parties including advertisers and business partners, to understand customer trends and patterns and manage and improve our business relationships. We share your Personal Data with third party service providers who provide services to us to help us accomplish the activities described in this Privacy Policy. We contractually require that these third party service providers comply with this Privacy Policy. We may also share Personal Data with third parties (such as auditors or legal advisors) to obtain professional advice, and we may also disclose Personal Data with a third party if a law, regulation, search warrant, subpoena or court order legally requires or authorizes us to do so.

10. Links, advertisers, third party sponsors & ad-servers: Some of our sites contain links to other sites that are not covered by this Privacy Policy and where information practices may be different from ours. Users should consult the other sites' privacy policies on such third party sites before submitting any Personal Data, as we are not responsible for and have no control over Personal Data that is submitted to, or collected by, these third-party sites. On this site, we sometimes offer content or programs that are sponsored by or co-branded with identified third parties (e.g., competitions or promotions). These third parties can obtain Personal Data that you voluntarily submit to them to make use of the offer. We are not responsible for the collection and use of your Personal Data by these third parties. However, you will be informed, at the point of collection of such personally identifiable information, if these third parties will obtain such information, how it will be processed and to whom it will be transferred. On some of our Services, third parties may present or serve advertisements, provide us with data collection, reporting and ad response measurement, as well as assist with delivery of relevant marketing messages and advertisements. These third parties may view, edit, or set their own cookies. The use of these technologies by such third parties is subject to their own privacy policies and is not covered by this Privacy Policy.  

We use certain third-party service providers that may also collect, use and disclose your personal information for their own business purposes.  In particular, we use Google Analytics, a web analytics service of Google.  Google collects information about how users use our electronic Services.  Google Analytics then provides us with information on the users of our electronic Services including details about the computer, mobile phone, or other device used to access our electronic Services and including other information on users such as browser type, operating system, IP address, referring URLs/system and information on actions taken or interaction with our electronic Services and how our electronic Services are being used as well as information on our visitors, including their demographics and interests.  We use this information to understand our visitors and to improve our electronic Services.  We cannot associate any of this information with any particular visitor, including demographic information and interests information.  We can only access this information on a general statistical basis. 

In providing this service to us, Google Analytics may collect information on your activities in connection with our electronic Services and they may then associate that information with other information that they may have collected about you and they may use all of this information for their own business purposes, including the delivery of targeted ads directed at you when you visit other websites on the Internet.  See for more information on Google’s privacy practices with respect to websites and mobile applications that use Google services.

11. Will my Personal Data be transferred out of the province where I live? For the purposes set out in this Privacy Policy, Nando’s or a third-party service provider may process and store your Personal Data outside of the province in which you reside and/or outside of Canada. In particular, your Personal Data may be transferred to and processed in the United Kingdom where the Nando’s central database is operated. The data protection and other laws of other countries may not be as comprehensive as those in Canada. Under the laws of those other jurisdictions, in certain circumstances, courts, law enforcement agencies, regulatory agencies or security authorities in those other provinces or foreign jurisdictions may be entitled to access your Personal Data. For more information about our policies and practices related to the use of foreign service providers, please contact our Privacy Officer as described below.

12. How can I find out what Personal Data Nando’s holds about me? To see the Personal Data we have collected that relates to you, and/or to correct or update this Personal Data, please email us at In addition, we will always give you the opportunity to update your preferences regarding our use and disclosure of your Personal Data. To protect your privacy and security we will take reasonable steps to verify your identity before granting access. If you have any additional questions about Personal Data we hold about you, please contact us as set out in Section 16 below.

13. What if I am under the age of 14? It is important to us that children can enjoy our Services in a responsible fashion. We therefore require children under fourteen (14) years old to consult with their parents before providing Personal Data. We also encourage parents to supervise their children's online activities by, for example, adopting parental control tools available from online services and software manufacturers that help provide a child-friendly online environment. These tools can also prevent children from disclosing online their name, address, and other Personal Data without parental permission. Your child's privacy is important to us. We are committed to safeguarding children's Personal Data collected online, and to helping parents and their children learn how to exercise control over Personal Data while exploring the Internet. To this end, we take additional measures to protect the privacy of our younger users. Users of our Services may participate in many activities without providing any Personal Data. However, if a user wants to participate in certain interactive features on our Services, we ask the user to provide us with certain information, such as the user's email address and age. When the user who registers indicates that he or she is under fourteen (14) years old, we will take one of four steps: (1) collect no information from that user; (2) require the user to provide a parent's verifiable consent; (3) collect only the user's email address to respond to the user's specific request; or (4) collect the email address of the user's parent in addition to the user's email address to seek the parent's verifiable consent or to notify them of their child's online activities. We also use the email addresses of parents to enable them to unsubscribe their child from a newsletter or other similar activity. We do not share Personal Data regarding users under the age of fourteen (14) with outside third parties not bound by this Privacy Policy without prior parental consent. Even with the parents' consent, if a user is under the age of fourteen (14), we will not condition his/her participation in an online activity on the disclosure of more information than is reasonably necessary to participate in the activity. While we want children to enjoy our electronic Services, please note that, unless stated otherwise on our Services, SMS, MMS and other mobile services are only available to users who are at least fourteen (14) years of age. We do not encourage users under the age of fourteen (14) to provide Personal Data to us (such as their mobile phone or PDA contact details) in order to subscribe to such services. However, if you are a parent and would like to review any Personal Data that we have collected online from your child, have this information deleted, and/or request that there be no further collection or use of your child's Personal Data or if you have any questions about our Privacy Policy or practices, you may contact us as set out in Section 16 below. 

14. Other collection, use and disclosure of my Personal Data: We may monitor your use of our Services to ensure their proper use and operation and your compliance with any related terms of services and other agreements.  As well, the law permits or requires the collection, use and disclosure of personal information without the knowledge or consent of the individual in a number of circumstances.  We reserve the right to collect, use and disclose your personal information in these circumstances without your knowledge or consent as the law may permit or require.

15. Changes to this Privacy Policy: From time to time, we may revise this Privacy Policy to reflect company initiatives, changes in the law or technology or changes in our practices regarding the collection and use of Personal Data. If we decide to change this Privacy Policy, the changes will be posted on this site so that you are always informed of the latest version. The date of the most recent revisions will appear at the top of this page. We will not use or disclose Personal Data provided to us pursuant to this Privacy Policy in ways other than the ones described above, without informing you and providing you with the opportunity to consent to such modified conditions concerning the use and disclosure of your Personal Data.

16. How can I contact Nando’s? If you have any questions or comments about this Privacy Policy please feel free to contact us by writing us at Nando’s Central Support (West), 5865 Kennedy Rd. Mississauga ON L4Z 2G3 or by email to If any provision of this Privacy Policy is judged to be illegal, void or unenforceable due to applicable law or by order of a court of competent jurisdiction it shall be deemed deleted and the continuation in full force and effect of the remainder of the provisions will not be prejudiced unless a court of competent jurisdiction determines that the substantive purpose of this Privacy Policy is then frustrated, in which case you may contact Nando’s at the above address in order to opt-out of the Privacy Policy.

Find your Nando's