Privacy Policy

01Who We Are

Panera Bread Menu (“we”, “us”, “our”) is an independent, unofficial website providing information about Panera Bread menu prices, sizes, calories, hours and catering. We are not affiliated with Panera Bread. For the purposes of data protection law, the operator of this website is the data controller responsible for personal data processed through the site.

You can contact us about any privacy matter at contact@panera-breadmenue.com.

02Information We Collect

We do not offer registration, logins, comments or online ordering, so we collect far less information than many websites. The information processed falls into these categories:

• Technical and usage data: IP address, browser type and version, device type, operating system, referring page, pages viewed, date and time of visits and approximate location derived from your IP address.
• Cookie and similar identifiers: online identifiers stored by cookies, local storage or similar technologies, including those used by advertising and analytics partners.
• Correspondence: if you email us, your email address, name (if provided) and message content.
• Consent records: your cookie and privacy choices, so we can respect them on later visits.

We do not knowingly collect sensitive data such as health, financial or biometric information.

03Server Logs and Hosting

Like almost every website, our hosting servers automatically record basic request information in log files. These logs typically include IP address, requested URL, timestamp, user agent and HTTP status code. We use them to keep the site secure, diagnose errors, prevent abuse and understand overall load. Logs are retained for a limited period, normally no longer than 90 days, unless needed to investigate a security incident.

04Cookies, Google AdSense and Third-Party Vendors

We use cookies and similar technologies as described in our Cookie Policy. This website displays advertising served by Google AdSense. Please note:

• Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website or other websites.
• Google's use of advertising cookies, including the DART cookie, enables it and its partners to serve ads to you based on your visits to this site and/or other sites on the Internet.
• You may opt out of personalised advertising by visiting Google Ads Settings. You can also opt out of some third-party vendors' use of cookies for personalised advertising at www.aboutads.info/choices.
• To learn how Google uses information from sites that use its services, see How Google uses information from sites or apps that use our services.

If you do not consent to personalised advertising, Google may still show non-personalised ads, which rely on contextual information and may still use cookies for frequency capping, fraud prevention and aggregated reporting.

05Analytics

We may use privacy-conscious analytics tools, such as Google Analytics, to understand how visitors use the site, which pages are popular and where improvements are needed. Analytics data is used in aggregated form, and where required by law, analytics cookies are only set after you give consent through Google's certified consent management message. We do not use analytics to identify individual visitors.

06How We Use Information and Legal Bases

We use information only for clear purposes and, where the GDPR or UK GDPR applies, rely on the following legal bases:

• Operating and securing the site (server logs, essential cookies) – legitimate interests.
• Personalised advertising and analytics cookies – your consent, requested where required (EEA, UK and Switzerland) through Google's certified consent management message. You can withdraw consent at any time by clearing your cookies, adjusting your browser settings or turning off ad personalisation in Google Ads Settings.
• Non-personalised advertising needed to fund a free service – legitimate interests, and consent where required for cookie storage.
• Responding to emails and corrections – legitimate interests, or steps taken at your request.
• Complying with legal obligations – legal obligation.

We do not use your data for automated decision-making that produces legal or similarly significant effects.

07Sharing and International Transfers

We do not sell personal information for money. We share data only with service providers who help us run the site, such as our hosting provider, Google (for advertising and analytics) and its certified advertising partners, and with authorities where required by law.

Some of these providers process data outside your country, including in the United States. Where personal data from the European Economic Area, United Kingdom or Switzerland is transferred, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or a provider's certification under the EU-U.S. Data Privacy Framework and its UK and Swiss extensions.

08Data Retention and Security

We keep personal data only as long as needed: server logs for up to 90 days, email correspondence for up to 24 months unless a longer record is needed for a correction or legal claim, and consent records for as long as needed to demonstrate your choice, typically up to 13 months before we ask again. Cookie lifetimes are described in our Cookie Policy.

We use HTTPS encryption, reputable hosting, restricted access and up-to-date software to protect data. No method of transmission or storage is completely secure, but we take reasonable steps to protect the information we handle.

09Children's Privacy

This website is intended for a general audience and is not directed at children under 13. We do not knowingly collect personal information from children under 13, in line with the U.S. Children's Online Privacy Protection Act (COPPA), or from children under the age of digital consent in their country. If you believe a child has sent us personal information, contact contact@panera-breadmenue.com and we will delete it promptly.

10Your Rights: GDPR, UK GDPR and CCPA/CPRA

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal data, to restrict or object to processing, and to withdraw consent at any time. Residents of the EEA and UK may also complain to their data protection authority. More detail is on our GDPR & Your Data Rights page.

California residents have rights under the CCPA as amended by the CPRA, including the right to know, delete and correct personal information, and to opt out of the “sale” or “sharing” of personal information for cross-context behavioural advertising. Although we do not sell data for money, the use of advertising cookies may be considered “sharing”. You can opt out by turning off ad personalisation in Google Ads Settings, using the opt-out tools above, enabling Global Privacy Control in your browser, clearing your cookies or emailing contact@panera-breadmenue.com. We will not discriminate against you for exercising any right.

11Do Not Track and Global Privacy Control

There is no agreed industry standard for responding to browser “Do Not Track” signals, so our site does not currently change its behaviour in response to them. Where required by law, we treat a valid Global Privacy Control (GPC) signal as a request to opt out of the sale or sharing of personal information for the browser sending it.

12Changes and Contact

We may update this Privacy Policy when our practices, partners or legal requirements change. The latest version will always be published on this page, and significant changes may also be highlighted on the site. Please check back periodically.

For questions or to exercise your rights, email contact@panera-breadmenue.com. See also our Terms & Conditions.