Effective May 13, 2020
This privacy statement explains how and why PayPal collects, stores, uses, and shares personal data when you visit our websites or use our services. Reading it will help you understand your privacy rights and choices.
“Personal data” in this statement means information about you, including your identity, finances, and online behavior.
“PayPal” in this statement means PayPal, Inc. This privacy statement only applies to the PayPal and Xoom services offered by PayPal. To learn about our privacy practices for our other products or services, like Venmo or Braintree, visit the website and review the privacy statement for that product or service.
When it comes to how your personal data is collected, stored, used, and shared, you have rights and choices.
You have the right to request a copy of the personal data we’ve collected about you in the past 12 months. You also have the right to ask us to delete your personal data we have collected about you. If you want to see or delete your personal data, contact us. We will not deny you services, charge you different prices, or provide you with a different level of service solely for exercising your privacy rights.
If you request to see or delete your personal data, we’ll first need to verify who you are before we can respond to your request. If we can’t verify your identity, we will not be able to fulfill your request.
If you want to delete your personal data, you have choices:
If you close your account or request that we delete personal data, we still need to keep some personal data so we can:
Depending on where you live and what type of account you use, you may have different rights and choices for managing your personal data. For example, certain State privacy laws do not apply to personal data collected, processed, or disclosed by a financial institution according to federal laws, such as the Gramm-Leach-Bliley Act. Consumers may read our Consumer Privacy Notice for more information about their rights under US federal law.
You can control how personal data is collected or shared, as well as how we communicate with you. Here are some of the ways you can customize your choices.
Choose how we collect personal data
You may choose to limit the personal data you provide when our apps or services request it. To help make choices that are right for you, it’s important to understand that personal data helps us provide a richer, more personalized experience for you. Also, some personal data is required for our services to function at all.
For example, sharing your contacts helps make it easier for you to find the people you want to send money to. If you choose not to share your contacts with us, you can still use our mobile apps, but some actions may not be as fast or easy as it would be if shared your contacts. Another example is creating an account with us. If you choose not to provide information that is required for an account to function, like your name and email address, we will not be able to create an account for you.
Choose how connected accounts collect and use personal data
If you connect your account to a third-party service, you may be able to manage how your personal data is collected, used, and shared by them. Read the third parties’ privacy policies to see the choices they offer you.
You can control which third-party services you connect to your account and what personal data they can collect about you. For example, to manage the permissions, go to the Security settings in your PayPal account.
Choose how we communicate with you
Your choices about how we communicate with you differ depending on the purpose of the message and how it is delivered. Some messages are considered optional and some are necessary for you to manage your accounts with us. We use email, text messages, push notifications on your mobile device, and even paper mail depending on the situation and your preferences.
You can click the unsubscribe link in a marketing email, opt out of a text message by replying “STOP,” or turn off notifications on your device. You can also change your account’s notification settings or the notification preferences on your device.
You won’t be able to opt out of messages that are considered necessary for you to manage your account, such as receipts and emails that alert you to changes in your account’s status that require your attention. You may be able to decide how we send those messages, such as by email, text message, or a notification on your mobile device.
We may collect your personal data when you register for or use our services, such as when you create an account, make a payment, or make a purchase on a merchant’s website.
If you use our services without creating or logging into an account, we’ll still collect personal data, which may include your payment information, device information, and location. When you use our services without creating or logging into an account, we will use this information to process transactions, prevent fraud and comply with the law. We may connect this information with your account, if you have one or if you create an account at a later date.
Here are the kinds of personal data that we may collect when you create an account or use our services:
1. Information that identifies you, for example:
2. Records and financial information, for example:
3. Personal characteristics, for example:
4. Commercial information, for example:
5. Internet or network activity, for example:
6. Geolocation data, for example:
7. Audio, electronic, visual, or similar information, for example:
8. Professional or employment information, for example:
9. Information we infer based on your personal data, for example:
We may collect personal information about you from various sources, for example from:
We do not knowingly collect personal information from people who are not allowed to use our sites and services, such as children under the age of 13. Contact us if you believe that we’ve mistakenly collected personal data from someone not allowed to use our services. We’ll delete it immediately, unless we’re legally required to keep it.
We or our authorized service providers may use cookies and similar tracking technologies to collect personal data whenever you use our services, visit our sites, or visit websites that offer our services. The information collected with these technologies helps us personalize your experience, measure the effect of our ads, prevent fraud and enhance the security of our sites and service.
You can disable or decline some cookies for our sites and services. But, since some parts of our service rely on cookies to work, those services could become difficult or impossible to use.
Some web browsers have an optional setting called “Do Not Track” (DNT) that lets you opt-out of being tracked by advertisers and some third parties. Because many of our services won’t function without tracking data, we do not respond to DNT settings.
If you want to know more about how we use cookies, read our Cookie Statement. To learn how to opt-out of this kind of tracking technology, visit About Ads.
We collect personal data for many reasons, including to improve your experience, and to run our business. Specific reasons why we collect your personal data include:
We do not sell your personal data. However, we may share personal data across our services and with other members of the PayPal corporate family. Sometimes we share the personal data we collect with third parties to help us provide services, protect our customers from risk and fraud, market our products, and comply with legal obligations.
You can review the personal data that we may share by reviewing The personal data we collect section.
We may share personal data with:
Helping to keep your personal data safe against loss, misuse, unauthorized access, disclosure, and alteration is our top priority.
To protect your personal data, we use technical, physical, and administrative security measures that include:
While we protect our systems and services, you’re responsible for keeping your password(s) and account information private. You are also responsible for making sure your personal information is accurate and up to date.
If your account is closed, we may keep your personal data and other information as required by law and according to our data retention policy. If we do, we’ll continue to handle it as we describe in this statement.
We’ll make changes to this privacy statement from time to time. This helps us stay up to date with changes to our business and the most current laws. After a new version is published, we’ll collect, store, use, and protect your personal data as we outline in that revised statement.
If the new version reduces your rights or increases your responsibilities, we’ll post it on the Policy Updates or Privacy Statement page of our website at least 21 days before it becomes effective.
We may notify you about these changes through email or other communications.
If you have questions about this privacy statement or your personal data, contact us so we can help.
To talk about your PayPal account:
To talk about your Xoom account:
Effective Date: March 12, 2020
This Consumer Privacy Notice applies to you if you are an individual who resides in the United States and uses PayPal sites or services for your own personal, family or household purposes.
FACTS | WHAT DOES PAYPAL DO WITH YOUR PERSONAL INFORMATION? |
Why? | Financial companies choose how they share your personal information. Federal law gives consumers the right to limit some but not all sharing. Federal law also requires us to tell you how we collect, share, and protect your personal information. Please read this notice carefully to understand what we do. |
What? | The types of personal information we collect and share depend on the product or service you have with us. This information can include:
When you are no longer our customer, we continue to share your information as described in this notice. |
How? | All financial companies need to share customers’ personal information to run their everyday business. In the section below, we list the reasons financial companies can share their customers’ personal information; the reasons PayPal chooses to share; and whether you can limit this sharing. |
Reasons we can share your personal information | Does PayPal share? | Can you limit this sharing? |
For our everyday business purposes – | Yes | No |
For our marketing purposes – | Yes | No |
For joint marketing with other financial companies | Yes | No |
For our affiliates’ everyday business purposes – | Yes | No |
For our affiliates’ everyday business purposes – | No | We don’t share |
For our affiliates to market to you | No | We don’t share |
For nonaffiliates to market to you | No | We don’t share |
Questions? | Call our customer service at 1-888-221-1161or visit us at https://www.paypal.com/us/smarthelp/contact-us?email=privacy. |
Who we are | |
Who is providing this Privacy Statement? | This privacy notice is provided by PayPal, Inc. and is applicable to your personal U.S. PayPal and/or Xoom accounts. |
What we do | |
How does PayPal protect my personal information? | To protect your personal information from unauthorized access and use, we use security measures that comply with federal law. These measures include computer safeguards and secured files and buildings. |
How does PayPal collect my personal information? | We collect your personal information, for example, when you
We also collect your personal information from others, such as credit bureaus, affiliates, or other companies. |
Why can’t I limit all sharing? | Federal law gives you the right to limit only
State laws and individual companies may give you additional rights to limit sharing. See below for more information on your rights under state law. |
Definitions | |
Affiliates | Companies related by common ownership or control. They can be financial and nonfinancial companies.
|
Nonaffiliates | Companies not related by common ownership or control. They can be financial and nonfinancial companies.
|
Joint Marketing | A formal agreement between nonaffiliated financial companies that together market financial products or services to you.
|
Other important information |
We may transfer personal information to other countries, for example, for customer service or to process transactions. California: Effective January 1, 2020, the California Consumer Act of 2018 (CCPA) permits consumers who are California residents to ask businesses covered under the act about personal data it has collected about the consumer, submit an access or deletion request, and opt-out of the sale of personal information, if applicable. These provisions do not apply to personal data collected, processed, shared, or disclosed by financial institutions pursuant to federal law such as the Gramm-Leach-Bliley Act. Contact us if you have questions about our privacy statement, this consumer notice, or your personal data. If your PayPal account has a California mailing address, we will not share personal information we collect about you except to the extent permitted under California law. To talk about your PayPal account, call PayPal Customer Service at 1-888-221-1161 or visit our Customer Service web portal. To talk about your Xoom account, call Xoom Customer Service at 1-877-815-1531 or visit our Help Center web portal. Vermont: If your PayPal account has a Vermont mailing address, we will not share personal information we collect about you with non-affiliates unless the law allows or you provide authorization. Nevada: If your PayPal account has a Nevada mailing address, we are providing this notice pursuant to Nevada law. If you prefer not to receive marketing calls from PayPal, you may be placed on our internal Do Not Call List by calling 1-888-221-1161 or going to https://www.paypal.com/selfhelp/home. For more information, you can contact PayPal at 12312 Port Grace Blvd, La Vista, NE 68128 or you can contact the Bureau of Consumer Protection, Office of the Nevada Attorney General, 555 E. Washington St., Suite 3900, Las Vegas, NV 89101; telephone number: 1-702-486-3132; email: Aginfo@ag.nv.gov |