35 of 129 cards in Legal Rights & Agreement Rules
Legal Rights & Agreement Rules · Context
This stored statement identifies March 9, 2026 as its last update; it does not establish that linked earlier versions or later changes have been reviewed.
Details not recorded for this card
Last Updated: March 9, 2026
Legal Rights & Agreement Rules · Context
The statement covers Intuit Inc. and its group companies across their Services, including websites, apps, social media, marketing and data provided by other businesses. Product supplements may also apply. Customer-controlled processor work and the specified education processing are excluded, so “global” does not mean every Intuit processing activity is governed here.
Details not recorded for this card
These services include, as applicable, our websites, mobile applications, social media pages, marketing activities, and other activities described in this Privacy Statement, or when other businesses provide us your personal information (collectively, the “Services”). This Privacy Statement is global, meaning it applies to all Intuit Services. We may provide additional or supplemental privacy statements for certain products or services.
This Privacy Statement does not apply to certain processing activities where we are not the controller
This Privacy Statement also does not apply to Intuit’s processing of education records subject to state or federal laws or children’s data in our education curriculum products.
Legal Rights & Agreement Rules · Restriction or exception
An employer or financial partner may independently control processing alongside Intuit. Intuit determines its own activities and disclaims responsibility for those other controllers; questions and rights requests about their activities should go directly to them.
Details not recorded for this card
Intuit is not responsible for other data controllers’ processing activities, and you should contact them directly for questions about how they process your personal information and about how to exercise your privacy rights in relation to such processing.
Legal Rights & Agreement Rules · Restriction or exception
When Intuit processes data on a customer’s behalf, including professional tax software customers, that customer’s privacy statement and Intuit’s agreement with the customer govern. Contact the customer about that processing or to exercise related rights.
Details not recorded for this card
When we act as a processor or service provider, the privacy statement of the customer who uses our Services applies, instead of this Privacy Statement, and our processing of such personal information is governed by our agreements with such customers. If you have concerns about personal information that we process on behalf of a customer, or wish to exercise your privacy rights regarding such personal information, please contact the customer directly.
Legal Rights & Agreement Rules · Procedure
The statement directs questions about Intuit’s processing to the contact details given later in the document. This does not replace the instruction to contact a customer or independent controller about its own processing.
Details not recorded for this card
If you have any questions about how Intuit processes your personal information, please see How to contact us below.
Legal Rights & Agreement Rules · Company commitment
The statement describes adequacy decisions or regulations for some destinations. For specified non-DPF-certified group-company transfers and third-party providers or partners in destinations lacking adequacy, it identifies the June 4, 2021 EU Standard Contractual Clauses, modules 1–4, with the UK Addendum or Swiss modifications for relevant origins. DPF-certified entities have a separately described route; this card reports the statement’s mechanisms, not an independent legal adequacy finding.
Details not recorded for this card
The safeguards we use to transfer your personal information depend on the Intuit group company that transfers your information and the recipient of such information.
Some of these recipients of your personal information are located in countries for which the European Commission, the UK (and Gibraltar) Government, and the Swiss Government (as and where applicable) have issued “adequacy decisions” or “adequacy regulations” (data bridges)
Other recipients of your personal information are located in countries outside the EEA, Switzerland, and/or the UK that are not the subject of an adequacy decision.
as issued on 4 June 2021 under Article 46(2) using module 1 (controller to controller), module 2 (controller to processor), module 3 (processor to processor) and module 4 (processor to controller) transfers, including the UK Addendum permitted under Article 46(2) of the UK GDPR for the transfer of data originating in the UK and the Swiss Modifications provided for under the Swiss Federal Data Protection Act for the transfer of data originating from Switzerland.
Legal Rights & Agreement Rules · Company commitment
The statement says Intuit Inc. and Mailchimp comply with the EU-U.S., UK-extension and Swiss-U.S. frameworks. Its certification sentences name both for EU/UK data, but name Mailchimp specifically for Swiss data. It says the applicable DPF Principles govern conflicts with this policy. These entity-specific statements do not establish Credit Karma’s certification or independently verify certification status.
Details not recorded for this card
Intuit Inc. and The Rocket Science Group LLC d/b/a Mailchimp complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce.
The Rocket Science Group LLC d/b/a Mailchimp has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF.
If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern.
Legal Rights & Agreement Rules · Procedure
For EU, UK and Swiss data received under the DPF routes, Mailchimp commits to resolve Principles-related complaints and asks individuals to contact it first. Unresolved or inadequately acknowledged complaints can go to U.S.-based TRUSTe at no cost. If other DPF mechanisms do not resolve a compliance complaint, binding arbitration may be available under conditions identified on the linked DPF site. These are DPF complaint routes, not general mandatory arbitration terms for Credit Karma.
Details not recorded for this card
The Rocket Science Group LLC d/b/a Mailchimp commits to resolve DPF Principles-related complaints about our collection and use of your personal information.
should first contact The Rocket Science Group LLC d/b/a Mailchimp by using the details in the “How to contact us” section below.
If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit https://feedback-form.trustarc.com/watchdog/request for more information or to file a complaint. These dispute resolution services are provided at no cost to you.
For complaints regarding EU-U.S. DPF, the UK Extension to the EU-U.S DPF, and Swiss-U.S. DPF compliance not resolved by any of the other DPF mechanisms, you have the possibility, under certain conditions, to invoke binding arbitration.
Legal Rights & Agreement Rules · Company commitment
Mailchimp may have to disclose data in response to lawful public-authority requests, including security and law enforcement. For DPF data passed to agents, it remains responsible under the Principles for inconsistent agent processing unless it proves it is not responsible for the event causing damage. These provisions name Mailchimp.
Details not recorded for this card
In certain situations, The Rocket Science Group LLC d/b/a Mailchimp may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
The Rocket Science Group LLC d/b/a Mailchimp remains liable under the EU-U.S. DPF Principles, and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF Principles if the The Rocket Science Group LLC d/b/a Mailchimp’s agent processes personal information in a manner inconsistent with the EU-U.S. DPF Principles, and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF Principles, unless the The Rocket Science Group LLC d/b/a Mailchimp proves that it is not responsible for the event giving rise to damage.
Legal Rights & Agreement Rules · Procedure
Intuit reserves the right to update the statement at any time. Material changes to processing will be notified through a platform or community notice, a notification, or other legally consistent means; direct individual notice is not the only method. The last-updated date identifies revisions, and readers are asked to check periodically.
Details not recorded for this card
From time to time we may change or update our Privacy Statement. We reserve the right to make changes or updates at any time. If we make material changes to the way we process your personal information, we will notify you by posting a notice in the Intuit Platform or on a community post; by sending you a notification; or by other means consistent with applicable law.
You can see when this Privacy Statement was last updated by checking the “last updated” date at the top of this Privacy Statement. Please review this Privacy Statement periodically to stay informed about how Intuit protects your privacy.
Legal Rights & Agreement Rules · Restriction or exception
Educators, administrators, students and parents or guardians involved with school districts using Intuit’s free financial-literacy curriculum are directed to the separate Intuit for Education Privacy Statement. This statement does not govern their use of those services.
Details not recorded for this card
Children
this privacy statement does not apply to your use of those services.
describes our practices and your rights related to the use of Intuit for Education.
Legal Rights & Agreement Rules · Procedure
Intuit invites questions and comments through its privacy question form, Credit Karma’s support-case form or Mailchimp’s privacy-rights page. If a privacy or information-use complaint remains unsatisfactorily addressed, it directs users to its U.S.-based third-party dispute-resolution provider free of charge.
Details not recorded for this card
If you have questions or comments about this Privacy Statement or our practices, please contact us.
You can submit Intuit privacy questions.
You can submit Credit Karma privacy questions.
You can submit Mailchimp privacy questions.
If you have an unresolved privacy or information use concern or complaint that we have not addressed satisfactorily, please contact our U.S.-based third party dispute resolution provider (free of charge)
Legal Rights & Agreement Rules · Context
Additional rights and terms may apply based on your country of residence or the products you use. The U.S. provisions are introduced for U.S. residents; this does not extend each regional rule to every platform user.
Details not recorded for this card
Additional terms may apply to you based upon the country you reside in or the products you use.
If you are a resident of the United States, you may have the following rights and choices:
Legal Rights & Agreement Rules · Permission or license
The U.S. section identifies Intuit as a financial institution subject to GLBA and says using, accessing or interacting with the platform consents to electronic financial-privacy notices. It links a separate GLBA Notice; its detailed terms are not supplied here.
Details not recorded for this card
Intuit is a financial institution subject to the Gramm-Leach-Bliley Act (GLBA).
By using, accessing, or interacting with the Intuit Platform, you are consenting to receive notices about your financial privacy electronically.
Please find our GLBA Notice
Legal Rights & Agreement Rules · Restriction or exception
The California section covers residents’ CCPA personal information when Intuit acts as a business. It excludes exempt data and permits claimed legal exemptions for data or entities, such as GLBA-covered information. A different notice for categories such as employees or applicants applies instead where supplied. These limits qualify the California rights described next.
Details not recorded for this card
This section applies only to California residents.
For purposes of this section, the term “Personal Information” and “Sensitive Personal Information” each have the meaning given in the CCPA, but neither term includes information exempted from the scope of the CCPA.
Please note that we may claim legal exemptions for certain types of Personal Information and certain Intuit companies from all or certain parts of the CCPA, such as information subject to the Gramm-Leach-Bliley Act (GLBA) and other data protection laws. In some cases, we may provide a different privacy notice to certain categories of California residents, such as employees and job applicants, in which case that notice will apply instead of this section.
Legal Rights & Agreement Rules · User right or choice
The statement recognizes a right to be free from discrimination or retaliation related to exercising California privacy rights.
Details not recorded for this card
You have the right to be free from discrimination or retaliation related to your exercise of any of your California privacy rights.
Legal Rights & Agreement Rules · Restriction or exception
The other-U.S.-states section applies to residents protected by the relevant state privacy laws when Intuit acts as a business or controller. Its examples span Colorado through Rhode Island as listed in the statement. Exempt information or entities, such as GLBA cases, are excluded, and Intuit may claim other applicable exemptions. Rights can be refused where law permits; this is not a grant of identical rights to every U.S. resident.
Details not recorded for this card
This section applies only to the residents of U.S. states that have privacy laws that grant their residents the rights described below
but does not include information or entities exempted from the scope of the Applicable State Privacy Laws, such as those subject to GLBA. Please note that we may claim legal exemptions for certain types of Personal Information and certain Intuit companies from all or certain parts of the Applicable State Privacy Laws.
As a resident whose Personal Information is protected by Applicable State Privacy Laws, you may have the rights listed below. However, these rights are not absolute, and in certain cases we may decline your request as permitted by law.
Legal Rights & Agreement Rules · User right or choice
Covered residents have a right against discrimination for exercising privacy rights. If Intuit declines a rights request, they may seek reconsideration in writing. Intuit promises a written outcome with reasons and, if denied, a way to contact the state attorney general for a complaint.
Details not recorded for this card
You have the right to be free from discrimination related to your exercise of any of your privacy rights.
If we decline to take action on any request that you submit in connection with the rights described above, you may ask that we reconsider our response by submitting a written request to us using the contact information provided below. We will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. If the appeal is denied, we will also provide you with an online mechanism, if available, or other method through which you may contact your state attorney general’s office to submit a complaint.
Legal Rights & Agreement Rules · Procedure
The U.S. contact is Intuit Inc., Attention: Privacy, 2800 E Commerce Center Place, Tucson, AZ 85706. The statement also links the Intuit Data Protection Officer contact form.
Details not recorded for this card
United States contact information:
Intuit Inc.
Attention: Privacy
2800 E Commerce Center Place
Tucson, AZ 85706
You can contact the Intuit Data Protection Officer
Legal Rights & Agreement Rules · Procedure
The listed contact is Credit Karma LLC, Attention: Legal Department, PO Box 30963, Oakland CA 94604, with CCPArequests@creditkarma.com for requests.
Details not recorded for this card
Credit Karma LLC
Attention: Legal Department
PO Box 30963
Oakland CA 94604
CCPArequests@creditkarma.com
Legal Rights & Agreement Rules · Procedure
The Mailchimp contact is The Rocket Science Group LLC d/b/a Mailchimp, Attn: Privacy Officer, 405 North Angier Ave. NE, Atlanta, GA 30308. A Data Protection Officer contact link is also provided.
Details not recorded for this card
Mailchimp
The Rocket Science Group LLC d/b/a Mailchimp
Attn: Privacy Officer
405 North Angier Ave. NE,
Atlanta, GA 30308
You can contact the Mailchimp Data Protection Officer
Legal Rights & Agreement Rules · Procedure
The Australian section links QuickBooks Australia support and lists Intuit Australia Pty. Limited, Level 34, 1 O’Connell St., Sydney, NSW 2000 Australia.
Details not recorded for this card
Australia contact information:
Visit the QuickBooks Australia website to learn how to contact their support team.
Intuit Australia Pty. Limited
Level 34, 1 O'Connell St.
Sydney, NSW 2000 Australia
Legal Rights & Agreement Rules · Procedure
The listed contact is Intuit Canada, Attention: Privacy, 8 Spadina Ave., Suite 1900, Toronto, Ontario M5V 0S8. A Data Protection Officer contact form is also linked.
Details not recorded for this card
Canada contact information:
Intuit Canada
Attention: Privacy
8 Spadina Ave.
Suite 1900
Toronto, Ontario
M5V 0S8
You can contact the Intuit Data Protection Officer
Legal Rights & Agreement Rules · Procedure
The Canada section lists Credit Karma LLC, Attention: Privacy Officer, PO Box 30963, Oakland CA 94604. It directs inquiries to the Canadian Help Centre and provides dpo@creditkarma.com for its Canada Privacy Officer.
Details not recorded for this card
Credit Karma LLC
Attention: Privacy Officer
PO Box 30963
Oakland CA 94604
You can also email the Credit Karma Canada Privacy Officer by writing to
dpo@creditkarma.com
Legal Rights & Agreement Rules · Procedure
Canadian Mailchimp inquiries can use its Help Centre or the linked question form. The postal contact is The Rocket Science Group LLC d/b/a Mailchimp, Attn: Privacy Officer, 405 North Angier Ave. NE, Atlanta, GA 30308 USA.
Details not recorded for this card
The Rocket Science Group LLC d/b/a Mailchimp
Attn: Privacy Officer
405 North Angier Ave. NE,
Atlanta, GA 30308 USA
If your inquiry is specific to Mailchimp, you can visit the
Legal Rights & Agreement Rules · Procedure
The India contact section links QuickBooks India support and lists Intuit Technology Services Private Limited, Campus 4A, PrITech Park (Ecospace), 7th and 8th Floor, Belandur Village, Varthur Hobli, Bangalore East Taluk, Bangalore - 560 103 India.
Details not recorded for this card
India contact information
Visit the QuickBooks India website to learn how to contact their support team.
Intuit Technology Services Private Limited
Campus 4A, PrITech Park (Ecospace)
7th and 8th Floor, Belandur Village
Varthur Hobli, Bangalore East Taluk
Bangalore - 560 103 India
Legal Rights & Agreement Rules · Context
In the UK/Gibraltar, EEA and Switzerland section, the statement equates personal information with EU/UK personal data: information identifying an individual directly or indirectly. It excludes anonymous data where identity has been permanently removed, rather than treating any masked identifier as anonymous.
Details not recorded for this card
United Kingdom (and Gibraltar)(UK), European Economic Area (EEA), and Switzerland
Personal Information
References to “personal information” in this Privacy Statement are equivalent to “personal data” governed by EU and UK data protection laws. Essentially, “personal data” is information about an individual, where that individual is either directly identified or can be identified. It does not include ‘anonymous data’ (i.e., information where the identity of an individual has been permanently removed).
Legal Rights & Agreement Rules · Company commitment
In the UK/Gibraltar, EEA and Switzerland section, personal data covers identifiable people and excludes permanently anonymous information. Intuit says it uses information only as permitted by law and needs a legal basis for each collection purpose, depending on data and context. A linked table maps activities, categories, purposes and bases, but is not supplied here; the card cannot assign a particular basis to each activity.
Details not recorded for this card
References to “personal information” in this Privacy Statement are equivalent to “personal data” governed by EU and UK data protection laws.
It does not include ‘anonymous data’ (i.e., information where the identity of an individual has been permanently removed).
We use your personal information only as permitted by law. Applicable EEA, UK(and Gibraltar) and Swiss data protection law requires us to have a “legal basis” for each purpose for which we collect your personal information. Our legal basis for collecting and using the personal information described in this Privacy Statement will depend on the type of personal information and the specific context in which we collect it.
Legal Rights & Agreement Rules · User right or choice
UK/Gibraltar, EEA and Swiss residents are told they may complain to a supervisory authority about collection and processing. The statement links European and UK contact resources and warns that some authorities require exhausting Intuit’s internal complaints process first.
Details not recorded for this card
You have the right to file a complaint with a supervisory authority about our collection and processing of your personal information.
Certain supervisory authorities will require that you exhaust our internal complaints process before looking into your complaint.
Legal Rights & Agreement Rules · Context
Intuit Inc., Intuit Limited and Mailchimp appoint Intuit Ireland Software Limited as their EU representative. Intuit Inc. and Mailchimp appoint Intuit Limited as UK representative. Although the heading mentions Switzerland, these sentences do not identify a separate Swiss representative, and they do not list Credit Karma among the represented entities.
Details not recorded for this card
UK and EEA and Swiss Representative
In the EEA: Intuit Inc., Intuit Limited and Mailchimp have each appointed Intuit Ireland Software Limited as its Representative in the European Union
In the UK: Intuit Inc., and Mailchimp have each appointed Intuit Limited as its Representative in the UK
Legal Rights & Agreement Rules · Procedure
The listed regional contact is Intuit Limited, Attention: Intuit Data Protection Administration, Cardinal Place, 80 Victoria Street, London, United Kingdom SW1E 5JL, with a QuickBooks UK GDPR Centre link.
Details not recorded for this card
United Kingdom, EEA and Switzerland contact information
Intuit Limited
Attention: Intuit Data Protection Administration,
Cardinal Place, 80 Victoria Street, London,
United Kingdom, SW1E 5JL
https://quickbooks.intuit.com/uk/gdpr/
Legal Rights & Agreement Rules · Procedure
The contact is Credit Karma UK Limited, 4th Floor, One New Oxford Street, London WC1A 1NU, alongside a Credit Karma UK Help Centre link.
Details not recorded for this card
Credit Karma UK Limited
4th Floor
One New Oxford Street
London WC1A 1NU
Credit Karma UK Help Centre
Legal Rights & Agreement Rules · Procedure
The listed contact is Intuit Ireland Software Limited, 112-114 St Stephen’s Green, Suite 416, Dublin 2, D02 TD28, Ireland, with a QuickBooks EU GDPR Centre link.
Details not recorded for this card
Intuit Ireland Software Limited
112-114 St Stephen’s Green
Suite 416
Dublin 2, D02 TD28
Ireland
https://quickbooks.intuit.com/eu/gdpr/
Legal Rights & Agreement Rules · Procedure
The final regional contact paragraph links the Intuit and Mailchimp Data Protection Officer form and gives dpo@creditkarma.com for Credit Karma’s Data Protection Officer. It is a contact route for unanswered questions or concerns.
Details not recorded for this card
If you have questions or concerns that have not been addressed by this Privacy Statement, you can contact the Intuit and Mailchimp Data Protection Officer
the Credit Karma Data Protection Officer by writing to
dpo@creditkarma.com
Legal Rights & Agreement Rules · Company practice
Intuit may use information to prevent misuse, enforce service terms including customer content rules, comply with law, protect rights, property and safety, prevent fraud or illegality, exercise rights in judicial, administrative or arbitration proceedings, and enforce or remedy agreements.
Details not recorded for this card
Compliance and protection. We may use your personal information to:
Protect against misuse or abuse of our Services and ensure compliance with our Terms of Service, including in relation to content our customers send or display through the Platform
Comply with legal and regulatory requirements
Protect the rights, property, safety or security of the Intuit Platform, our customers, employees or others and prevent fraudulent or illegal activity
Exercise our rights in the course of judicial, administrative, or arbitration proceedings
Enforce, remedy, or apply our Terms of Service or other agreements