Depending on your jurisdiction, use rests on consent, contract, legitimate interests or legal duty
Capital One Shopping says the reasons it collects and uses personal information vary with how you use the services and, depending on your jurisdiction, include your consent, necessity to perform a contract with you, its own or a third party's legitimate business interests where your interests and fundamental rights do not override them, and compliance with a legal or regulatory obligation.
Supporting quotations
Depending on your jurisdiction, these reasons include when you consent to it
where it is necessary for us to perform the contract we are about to enter into or have entered into with you; where it is necessary for our legitimate business interests (or those of a third party) and your interests and fundamental rights do not override those interests; and where we need to comply with a legal or regulatory obligation.
Qualifications & exceptions
Which basis applies depends on your jurisdiction; the policy does not map bases to countries.
Legitimate interests apply only where your interests and fundamental rights do not override them.
Not stated here
The consent cross-reference names a section titled "Revoke Your Consent"; the saved text's matching heading reads "Revoking Your Consent".
Use & Processing · Company practice
Data is used to run your account, verify shopping accounts and issue tax forms where required
Capital One Shopping may use personal information to let you sign up for and use its products and services (including the browser extensions, mobile app and Capital One Offers), to verify that your email addresses and shopping accounts are active and valid, to service and manage your accounts, to issue tax forms in limited circumstances where required, and to provide customer support, communicate with you and provide online tools. The information used depends on the services you agreed to. It relies on contractual need and/or its legitimate interest in providing the agreed services.
Supporting quotations
The information that we use will depend on the Services to which you have agreed.
to enable you to sign up for and use Capital One Shopping products or Services (including our browser extensions, mobile application, and Capital One Offers) and verify that your email address(es) and shopping account(s) are active and valid; to service and manage your accounts; to issue tax forms in limited circumstances where it is required; to provide customer service or support, to communicate with you, and to provide online tools and features.
We will engage in these activities when we have a contractual need to do so and/or based on our legitimate interest in providing the agreed-upon services to our customers.
We may collect and use personal information for:
Qualifications & exceptions
Tax forms are issued only in limited circumstances where required.
Use & Processing · Company practice
Data is used to personalize and improve the services, including training models
Capital One Shopping may use personal information to improve, personalize and optimize your website and app experience by examining which parts you visit or find most useful, to improve the services or develop new products and features, including by developing and training models used with its products and services, to fix errors, and to analyze users' usage trends and preferences. It relies on contractual need and/or legitimate interest.
Supporting quotations
To improve, personalize, and optimize your website browsing and mobile application experiences by examining which parts of our website you visit or which aspect of our mobile applications you find most useful
to improve the Services or develop new products, services, features, or functionality, including by developing and training models to be used in connection with our products and services
We will engage in these activities when we have a contractual need to do so and/or based on our legitimate interest in providing the agreed-upon services to our customers.
Not stated here
The policy does not describe what kinds of models are trained or which categories of personal information are used for training.
Use & Processing · Company practice
Data is used for marketing, including customized ads and promotions for third parties' products
Capital One Shopping may use personal information to send communications, including promotion and event updates, about products and services offered by it and by third parties it works with; to provide customized advertisements, content and information, including through automated means; and to track your entries and status in promotions. The policy lists contractual need and/or legitimate interest as the basis for these activities.
Supporting quotations
To send communications, including updates on promotions and events, relating to products and services offered by us and by third parties we work with; to provide customized advertisements, content, and information, including through automated means
to track your entries, submissions, status in any promotions or other activities on or through Capital One Shopping
We will engage in these activities when we have a contractual need to do so and/or based on our legitimate interest in providing the agreed-upon services to our customers.
In some cases we may request your consent for optional uses of your information, such as when we send you promotional emails.
Qualifications & exceptions
The rights section says consent may be requested in some cases for optional uses such as promotional emails, so the listed contract/legitimate-interest basis is not the only basis the policy mentions for marketing.
Use & Processing · Company practice
Data is used for research and to measure Capital One Shopping's and third parties' marketing
Capital One Shopping may use personal information for research and development, to monitor and analyze the effectiveness of its own and third-party marketing activities, and to compile aggregated statistics on trends and feature use, including processing aggregated and de-identified information that does not allow it to reasonably identify you. It relies on contractual need and/or legitimate interest.
Supporting quotations
To conduct research and development on technology, products, or services; to monitor and analyze the effectiveness of Capital One Shopping and third-party marketing activities
including processing done with aggregated and de-identified information that does not allow us to reasonably identify you
We will engage in these activities when we have a contractual need to do so and/or based on our legitimate interest in providing the agreed-upon services to our customers.
Use & Processing · Company practice
Your data may be stored abroad, including in the U.S., and exposed to foreign law enforcement
Your personal information may be stored or processed outside your home country, including in the United States, where Capital One Shopping stores and processes it, and in other countries where its service providers operate. As a result it may be subject to law enforcement access under those countries' laws.
Supporting quotations
Your personal information may also be stored or processed in countries other than your home country, including (for example) the United States, where we store and process your personal information, and also in other countries where our service providers operate.
This means that your personal information may be subject to law enforcement access under the laws of those countries.
Not stated here
The other countries where service providers operate are not listed.
Use & Processing · Company commitment
Transfers out of your country get safeguards where law requires; UK transfers use adequacy or SCCs
As required by applicable law, Capital One Shopping implements safeguards when it transfers your personal information outside your country of residence. For example, for transfers out of the UK it ensures at least one safeguard applies: the destination is recognized by the UK as adequate (such as EEA member states and certain other countries), or, for countries not considered adequate, it uses adequate measures such as standard contractual clauses adopted by the relevant authority.
Supporting quotations
As required by applicable law, we implement safeguards to protect your personal information when we transfer it outside your country of residence.
For example, for transfers from within the UK to outside the UK, we ensure a similar degree of protection is afforded to it by ensuring that at least one of the following safeguards is implemented:
The UK recognizes the EEA member states, and certain other countries, as providing an adequate level of data protection according to UK standards
For transfers from the UK to countries not considered adequate by the UK government, we have put in place adequate measures as applicable, such as
Qualifications & exceptions
Safeguards are tied to what applicable law requires.
Only UK transfers are described in detail; safeguards for other countries are not specified.
Not stated here
The UK adequacy list and the standard contractual clauses are linked external materials and are not supplied.