PayPal, Inc. and its subsidiaries and affiliated companies (together "PayPal") publish this statement to describe how they use your Personal Information when you use your PayPal account(s), visit their Sites, or apply for or use their Services, to the extent those Services are available in your jurisdiction. It does not cover Excluded Services, which are separate brands, affiliates or subsidiaries (for example Venmo) that follow their own terms and separate privacy statements.
Supporting quotations
PayPal, Inc. and our subsidiaries and affiliated companies ("we," "our," "us," "PayPal", "PayPal corporate group") provide this Privacy Statement to describe our use of your Personal Information when you use your PayPal account(s), visit our websites ("Sites"), apply for, or use our Services (to the extent available in your jurisdiction). This Privacy Statement does not apply to Excluded Services.
Excluded Services means companies or separate brands, affiliates, or subsidiaries of PayPal, who process Personal Information in accordance with their own terms of service and separate privacy statements. Examples include Venmo, Honey Science LLC, Chargehound LLC, Paidy Inc., Swift Financial LLC, and Bill Me Later, Inc.
Services refers to all PayPal-branded or unbranded payment, financial, and personalization products and solutions, including transactions, rewards, advertising (including PayPal Ads), PayPal Groups, Fastlane, Xoom, Pool, Hyperwallet, credit and financing (including Partner and Merchant offerings), cryptocurrency services offered by PayPal Digital Inc. (a PayPal affiliate company), merchant tools, and emerging financial technologies (including Fastlane), with the exception of Excluded Services. It also includes all related websites, platforms, applications, and future innovations offered or supported by PayPal. Your use of Services includes interaction with our Sites.
Sites means the websites, mobile apps, official social network platforms, or other online properties through which PayPal offers the Services and which has posted or linked to this Privacy Statement.
Qualifications & exceptions
Applies to the extent Services are available in your jurisdiction.
Does not apply to Excluded Services.
Data Access & Collection · Company practice
Information is collected from people without a PayPal account
PayPal collects Personal Information from you even if you do not hold a PayPal account when you use its Services. Examples given are paying without a PayPal account, using Unbranded Payment Services (for example Braintree), using a Fastlane profile, receiving a payment from a PayPal account holder (including through Visa+ or other third-party wallets, payment networks and processors), or receiving a payment from a payor using Hyperwallet. If you pay without an account and later create one, PayPal may link your earlier transaction information to the new account.
Supporting quotations
Our Services may be accessed by individuals without a PayPal account or profile. We will collect Personal Information from you even if you are a non-account holder when you use our Services, such as when you use our Pay without a PayPal Account, use Unbranded Payment Services (e.g., Braintree), use a Fastlane profile, or when you receive a payment from a PayPal account holder (through the Visa+ service or other third party wallets, payment networks, and processors) or a payment from a payor using the Hyperwallet services. If you Pay without a PayPal account, we may link your transaction information with your PayPal account if you create a PayPal account later.
Fastlane means the online tool whereby individuals can store their payment methods and other Personal Information with PayPal so that they can complete the checkout process faster, create a store or loyalty account, or facilitate other transactions at participating Partners and Merchants with payment card, contact information, shipping data or other data they save in their Fastlane profile as relevant to the specific interaction, participating Partners and Merchants, all without having to manually input payment method details and other Personal Information each time they check out.
Hyperwallet means the PayPal technology and online service that allows payout capabilities for businesses of all shapes and sizes through a single integration.
Pay without a PayPal Account means our Services may be accessed by individuals without using a PayPal account, a Fastlane profile, or the Unbranded Payment Services. Pay without a PayPal account does not include Venmo, which is subject to its own terms of service and separate privacy statement.
Unbranded Payment Services means when you are interacting with and making payments to Partners and Merchants using our card processing and/or ACH origination services that do not carry the PayPal brand or when you use our Braintree services.
Qualifications & exceptions
The listed situations are introduced with "such as" and are examples.
Linking is stated as something PayPal "may" do, only if you create an account later.
Data Access & Collection · Company practice
Categories of Personal Information PayPal collects
The statement lists the categories of Personal Information PayPal collects from you, including from your interactions with it and your use of the Services. The categories below are described with "such as" examples, so each list illustrates rather than exhausts what is collected.
Supporting quotations
Categories of Personal Information collected from you, including from your interactions with us and use of the Services:
Services refers to all PayPal-branded or unbranded payment, financial, and personalization products and solutions, including transactions, rewards, advertising (including PayPal Ads), PayPal Groups, Fastlane, Xoom, Pool, Hyperwallet, credit and financing (including Partner and Merchant offerings), cryptocurrency services offered by PayPal Digital Inc. (a PayPal affiliate company), merchant tools, and emerging financial technologies (including Fastlane), with the exception of Excluded Services.
Qualifications & exceptions
Each category gives examples introduced by "Such as" and is not stated to be exhaustive.
Data Access & Collection · Company practice
Identifiers, contact details and profile information
PayPal collects personal identifiers (name, business name, address, phone number, email, IP address, device information, cookie and tracking data, government-issued identification and signature) and other information needed to set up an account or profile. It also collects professional details (business information, job title, contact emails, phone numbers and taxpayer ID numbers) and contact details for people whose contacts you import or enter manually. Profile information you add, such as username, picture, gender or a personal description, may include Sensitive Personal Information; you can set your profile to "Private" at any time.
Supporting quotations
Personal identifiers: Such as name, business name, address, phone number, email, IP address, device information, information collected from cookies or other tracking technologies, government-issued identification, signature, and other information necessary to establish an account or profile.
Professional or employment information: Such as business information, job title, contact emails, phone numbers and taxpayer ID numbers.
Imported contact information: Such as name, address, phone number, images, email address or usernames associated with the contacts you import or enter manually.
Account profile information: Such as username, profile picture, gender, or personal description, which you add that may include Sensitive Personal Information. You can set your profile to "Private" at any time.
Device Information means data that can be automatically collected from any device used to access the Services. Such information may include, but is not limited to, your device type, your device’s network connections, your device’s name, your device IP address, information about your device’s web browser and internet connection you use to access the Services, geolocation information, and information about apps downloaded to your device.
Qualifications & exceptions
Imported contact information covers the contacts you import or enter, who are not the account holder.
Setting a profile to Private is stated as available at any time; what Private hides is not described here.
Not stated here
What "Private" changes about who can see the profile is not stated in this passage.
Data Access & Collection · Company practice
Financial, payment and transaction information
PayPal collects financial and payment details, including identity card numbers, government ID, bank account and routing numbers, credit and debit card information (issuer, card type, payment account number, CVV), income, IBAN information and the amounts you send or request. It also collects account balances, transaction history and details, online shopping cart and shopping activity, goods or services you considered on Partner and Merchant sites, shipping address and options, purchase history, seller and buyer information, order tracking and product information, and commercial information such as payout amounts, payor information and the record of the Services.
Supporting quotations
Records and financial information: Such as identity card numbers, government-issued identification, account header information, bank account and routing numbers, credit and debit card information, income, amount you send or request, your payment instrument, card, financial or funding account in connection with the Services, including issuer name, card type, country code, payment account number, CVV, username, and IBAN information.
Transaction and experience information: Such as account balances, transaction history and transaction details, online shopping cart information, transaction ID, shopping activity and goods or services considered on Partners and Merchants sites, shipping address, shipping options and associated costs when you check out, purchase history, seller information, such as seller name, industry and postal code, buyer information, purchase information, and order tracking and product information.
Commercial information: Such as payout amount, payor information, and the record of the Services.
Partners and Merchants means our partners and the merchants, partners or businesses that our Users transact with for the purpose of obtaining goods or services.
Qualifications & exceptions
Shopping activity and goods considered on Partner and Merchant sites are included in transaction and experience information.
Data Access & Collection · Company practice
Location data
PayPal collects geolocation data. GPS location may be collected with your consent if you have an account for financial Services, and IP-based location data is collected during your user experience or according to your mobile application settings.
Supporting quotations
Geolocation data: Such as Global Positioning System ("GPS"), which we may collect with your consent if you have an account for financial Services, and IP-based geolocation data during your user experience or based on your mobile application settings.
Qualifications & exceptions
GPS collection is stated to depend on your consent and on having an account for financial Services; IP-based location is described without a consent condition.
Data Access & Collection · Company practice
Usage, browsing and device information
PayPal collects information about how you use the Services and Sites: interactions with the Services, page response times, download errors, date and time of use, shopping history, IP-based location, page-load and page-view statistics, the websites you visited before coming to the Sites, and other usage and browsing information collected through Cookies. From your device it collects language settings, browser ID, device ID and type, cookie preferences, time zone, operating system, platform, screen resolution and similar information about your device settings, browser and internet connection, including data collected through Cookies or other tracking technologies.
Supporting quotations
Internet or network activity: Such as interactions with our Services, information about response time for web pages, download errors, date and time when you used the service, shopping history, location information, such as your IP address, statistics regarding how pages are loaded or viewed, the websites you visited before coming to the Sites, and other usage and browsing information collected through Cookies.
Information from your device: Such as language settings, browser ID, device ID, device type, cookie preferences, time zone, operating system, platform, screen resolution, and similar information about your device settings, device's web browser, and internet connection, and data collected from Cookies or other tracking technologies.
Cookies means tracking technologies such as cookies, pixel tags, web beacons, and widgets.
Sites means the websites, mobile apps, official social network platforms, or other online properties through which PayPal offers the Services and which has posted or linked to this Privacy Statement.
Data Access & Collection · Company practice
Biometric data used to authenticate you
PayPal may collect biometric data (voice identification, photo identification or face scans) when you consent in the user experience. It is used to authenticate you for certain actions on your account, such as verifying your identity before you access accounts and Services, recovering passwords, updating profile information, managing payments and payment methods, lifting account limitations and starting cryptocurrency transfers.
Supporting quotations
Biometric data: Such as voice identification, photo identification, or face scans, which we may collect when you consent in the user experience to authenticate you for certain actions related to your account, including, for example, to verify your identity before you access accounts and Services, recover passwords, update profile information, manage payments and payment methods, lift account limitations, and initiate cryptocurrency transfers.
Qualifications & exceptions
Collection is stated to follow consent given in the user experience.
The listed uses are introduced by "including, for example".
Data Access & Collection · Company practice
Call recordings and information you give when you contact PayPal
PayPal collects audio information such as call recordings when you talk to customer service. When you contact PayPal it also collects your survey responses, recorded and chat conversations, email correspondence, account or profile status, repayment history, voice identification, vulnerability-related information you provide, and information about other people if you choose to share it.
Supporting quotations
Audio, electronic, visual, or similar information: Such as call recordings when you talk to customer service.
Information you provide when you contact us: Such as your responses to surveys, recorded conversations, chat conversations with us, email correspondence with us, account or profile status, repayment history, voice identification, vulnerability-related information provided by you and information about others if you choose to share it with us.
Qualifications & exceptions
Information about others is collected only if you choose to share it.
Data Access & Collection · Company practice
Sanctions data, protected characteristics and Sensitive Personal Information
PayPal collects information from external sanction lists (name, date and place of birth, occupation and the reason a person is listed) consistent with applicable law. It collects characteristics of protected classifications such as age or date of birth, nationality, disability, citizenship and military status. It also treats Social Security and tax ID numbers, government-issued identification, bank and routing numbers, card and financial information, biometric data and precise geolocation as Sensitive Personal Information, depending on applicable privacy law; under laws such as the GDPR this may be called special category information.
Supporting quotations
Information related to legal requirements: Such as information from external sanction lists, including name, date of birth, place of birth, occupation, and the reason why the person is on the external sanction lists in question, consistent with applicable law.
Characteristics of protected classifications: Such as, age or date of birth, nationality, disability, citizenship, and military status.
Sensitive Personal Information: Such as Social Security and tax ID number, government-issued and other related identification, bank account and routing numbers, credit and debit card information, financial information, biometric data (as described above), or precise geolocation data, depending on applicable privacy law. In certain jurisdictions (e.g. under the GDPR), this may also be referred to as "special category information".
Qualifications & exceptions
Which items count as Sensitive Personal Information depends on applicable privacy law.
Sanction-list data is stated to be collected consistent with applicable law.
Data Access & Collection · Company practice
Where PayPal gets Personal Information besides you
PayPal may also obtain these categories of Personal Information from other sources: Excluded Services (including Venmo and PayPal Honey) and third parties, including service providers, Partners and Merchants, payment networks and processors, credit reporting agencies and credit databases, government entities, data brokers and financial institutions.
Supporting quotations
We may also obtain the above categories of Personal Information from the following categories of sources:
Excluded Services, including Venmo and PayPal Honey.
Third parties, including service providers, Partners and Merchants, payment partners, such as payment networks and processors, credit reporting agencies and public and private credit databases ("CRAs"), government entities, data brokers, and financial institutions.
Excluded Services means companies or separate brands, affiliates, or subsidiaries of PayPal, who process Personal Information in accordance with their own terms of service and separate privacy statements. Examples include Venmo, Honey Science LLC, Chargehound LLC, Paidy Inc., Swift Financial LLC, and Bill Me Later, Inc.
Qualifications & exceptions
The list of sources continues in the next section of the statement.
Data Access & Collection · Company practice
More sources: linked accounts, apps, affiliates and merchants
PayPal also obtains Personal Information from linked accounts you agree to link (social network, mail, bank, card or investment accounts), and while an account stays linked it periodically collects and processes the information you share until you unlink it, which you can do at any time. It also obtains information from third-party applications you choose to use (such as the Apple App Store, Google Play Store or social networking sites), from members of the PayPal corporate group, and from Partners and Merchants you shop with, which PayPal uses under this statement and the relevant PayPal user agreement.
Supporting quotations
Linked accounts, including non-financial or financial accounts, such as social network accounts, mail accounts, or bank, card, or investment accounts you agree to link to PayPal. You may unlink your linked accounts at any time. If you choose to link these accounts or share such information with us, we will periodically collect and process it until you unlink the account.
Third-party applications that you choose to use, including the Apple App Store, Google Play Store, or social networking sites.
Members of the PayPal corporate group from time to time, such as the PayPal family of companies listed in Our Contact Information.
When you shop on Partner and Merchant sites, the Partner or Merchant may disclose Personal Information with PayPal that we will use in accordance with this Privacy Statement and the relevant PayPal user agreement.
Partners and Merchants means our partners and the merchants, partners or businesses that our Users transact with for the purpose of obtaining goods or services.
Qualifications & exceptions
Collection from a linked account continues periodically until you unlink it.
Information from Partners and Merchants is used in accordance with this Privacy Statement and the relevant PayPal user agreement.
Data Access & Collection · Company practice
Cookies and tracking technologies, including on third-party sites
When you use the Services, and also other third-party sites and services, PayPal might use tracking technologies such as cookies. The statement refers to the cookies section for details.
Supporting quotations
Website cookies and trackers. When you use Services, as well as other third-party sites and services, we might use tracking technologies like cookies. See Our Use of Cookies and Tracking Technologies for more details.
Cookies means tracking technologies such as cookies, pixel tags, web beacons, and widgets.
Qualifications & exceptions
Tracking is described as possible on third-party sites and services as well as on PayPal's own.
Not stated here
This passage does not list which third-party sites or services are involved.
Data Access & Collection · Company practice
Cookies PayPal and its partners use, and why
When you interact with the Services, open PayPal emails or visit a third-party website where PayPal provides Services, PayPal and its partners use Cookies to give you access to the Sites, Services, applications and tools, recognize you, customize your online experience and content (including interest-based advertising), run analytics, reduce risk, prevent fraud, and promote trust and safety. PayPal uses Cookies to collect your device information and internet activity information and to generate inferences as described earlier in the statement.
Supporting quotations
When you interact with our Services, open email we send you, or visit a third-party website for which we provide Services, we and our partners use Cookies to grant you access to our Sites, Services, applications and tools, recognize you as a user, customize your online experiences and online content, including to serve you interest-based advertising, perform analytics, mitigate risk and prevent potential fraud, and promote trust and safety across our Services. We use Cookies to collect your device information, internet activity information, and generate inferences as described above.
Cookies means tracking technologies such as cookies, pixel tags, web beacons, and widgets.
Device Information means data that can be automatically collected from any device used to access the Services. Such information may include, but is not limited to, your device type, your device’s network connections, your device’s name, your device IP address, information about your device’s web browser and internet connection you use to access the Services, geolocation information, and information about apps downloaded to your device.
Qualifications & exceptions
Cookies are used on PayPal's own Sites and also in emails and on third-party websites where PayPal provides Services.
Cookie use is by PayPal "and our partners".
Data Access & Collection · Restriction or exception
Declining Cookies can limit the Services
Certain features of the Services and Sites are only available through Cookies. If you disable or decline Cookies through your device or browser settings, your use of the Sites and Services may be limited or not possible.
Supporting quotations
Certain aspects and features of our Services and Sites are only available through the use of Cookies, so if you choose to disable or decline Cookies through your device or browser settings, your use of the Sites and Services may be limited or not possible.
Data Access & Collection · Company practice
Do Not Track signals are not honored
Some browsers have a "Do Not Track" setting that lets you opt out of being tracked by advertisers and some third parties. PayPal says many of its services will not function without tracking data, so it does not respond to Do Not Track settings.
Supporting quotations
Some web browsers have an optional setting called “Do Not Track” (“DNT”) that lets you opt-out of being tracked by advertisers and some third parties. Because many of our services won’t function without tracking data, we do not respond to DNT settings.
Data Access & Collection · Procedure
Where to learn more and opt out of this kind of tracking
For more on how PayPal uses cookies, the statement points to its separate Statement on Cookies and Tracking Technologies. To learn how to opt out of this kind of tracking technology, it points to the About Ads opt-out site.
Supporting quotations
If you want to know more about how we use cookies, please review our [Statement on Cookies and Tracking Technologies](https://www.paypal.com/legalhub/cookie-full). To learn how to opt-out of this kind of tracking technology, visit [About Ads](https://optout.aboutads.info/?c=2&lang=EN).
Not stated here
The linked cookie statement and the About Ads site are not part of the analyzed text.
Data Access & Collection · User right or choice
You can limit what you provide, but some information is required
You can control how Personal Information is collected or disclosed and how PayPal communicates with you. You may choose to limit the information you give when apps or Services ask for it, though information helps PayPal provide a more personalized experience. Some information is required for the Services to function: if you do not share your contacts you can still use the mobile apps but some actions may be slower, and if you do not provide information required for an account or Fastlane profile, such as name and email address, PayPal cannot create the account or profile.
Supporting quotations
You can control how Personal Information is collected or disclosed, as well as how we communicate with you. Here are some of the ways you can customize your choices.
You may choose to limit the Personal Information you provide when our apps or Services request it. To help make choices that are right for you, it’s important to understand that Personal Information helps us provide a richer, more personalized experience for you.
Also, some Personal Information is required for our Services to function. For example, sharing your contacts helps make it easier for you to find the people you want to send money to. If you choose not to share your contacts with us, you can still use our mobile apps, but some actions may not be as fast or easy as it would be if you shared your contacts. Another example is creating an account or Fastlane profile with us. If you choose not to provide information that is required for an account or Fastlane profile to function, like your name and email address, we will not be able to create an account or Fastlane profile for you.
Fastlane means the online tool whereby individuals can store their payment methods and other Personal Information with PayPal so that they can complete the checkout process faster, create a store or loyalty account, or facilitate other transactions at participating Partners and Merchants with payment card, contact information, shipping data or other data they save in their Fastlane profile as relevant to the specific interaction, participating Partners and Merchants, all without having to manually input payment method details and other Personal Information each time they check out.
Qualifications & exceptions
Choosing not to provide required information means PayPal cannot create the account or Fastlane profile.
Data Access & Collection · Context
Definition of Personal Information
In this statement, Personal Information means any information that directly or indirectly identifies you or is reasonably capable of being associated with you or your household, including your identity, finances and online behavior. It also takes any broader meaning given to personal information, personal data, personally identifiable information or similar terms under applicable privacy laws.
Supporting quotations
Personal Information
in this Privacy Statement means any information that directly or indirectly identifies you or is reasonably capable of being associated with you or your household information about you, including your identity, finances and online behavior, or such broader meanings as given under the definitions of personal information, personal data, personally identifiable information, or other like terms under applicable privacy laws.
Qualifications & exceptions
The definition extends to household information and to any broader meaning in applicable privacy law.
Data Access & Collection · Context
Definitions of Services and Sites
Services means all PayPal-branded or unbranded payment, financial and personalization products and solutions, including transactions, rewards, advertising (including PayPal Ads), PayPal Groups, Fastlane, Xoom, Pool, Hyperwallet, credit and financing, cryptocurrency services offered by PayPal Digital Inc., merchant tools and emerging financial technologies, except Excluded Services. It also covers related websites, platforms, applications and future innovations offered or supported by PayPal, and using the Services includes interacting with the Sites. Sites means the websites, mobile apps, official social network platforms or other online properties through which PayPal offers the Services and which post or link to this statement.
Supporting quotations
Services refers to all PayPal-branded or unbranded payment, financial, and personalization products and solutions, including transactions, rewards, advertising (including PayPal Ads), PayPal Groups, Fastlane, Xoom, Pool, Hyperwallet, credit and financing (including Partner and Merchant offerings), cryptocurrency services offered by PayPal Digital Inc. (a PayPal affiliate company), merchant tools, and emerging financial technologies (including Fastlane), with the exception of Excluded Services. It also includes all related websites, platforms, applications, and future innovations offered or supported by PayPal. Your use of Services includes interaction with our Sites.
Sites means the websites, mobile apps, official social network platforms, or other online properties through which PayPal offers the Services and which has posted or linked to this Privacy Statement.
Qualifications & exceptions
Excluded Services are carved out of "Services".
"Future innovations" are included, so the scope can grow.
Data Access & Collection · Context
Definitions of Cookies and Device Information
Cookies means tracking technologies such as cookies, pixel tags, web beacons and widgets. Device Information means data that can be automatically collected from any device used to access the Services, which may include but is not limited to device type, network connections, device name, IP address, information about the web browser and internet connection, geolocation information and information about apps downloaded to the device.
Supporting quotations
Cookies means tracking technologies such as cookies, pixel tags, web beacons, and widgets.
Device Information means data that can be automatically collected from any device used to access the Services. Such information may include, but is not limited to, your device type, your device’s network connections, your device’s name, your device IP address, information about your device’s web browser and internet connection you use to access the Services, geolocation information, and information about apps downloaded to your device.
Qualifications & exceptions
Device Information is not limited to the listed items.
Data Access & Collection · Context
United States disclosures: what PayPal collected and disclosed in the prior 12 months
This United States section supplements the main statement. It gives, for the prior 12 months and including under the California Consumer Privacy Act as amended (CCPA), a table of the categories of Personal Information PayPal collected and the categories of third parties it disclosed them to for business purposes. The table has three columns: category of Personal Information, purpose of collection and disclosure, and categories of third parties to which PayPal discloses the information for a business purpose. For the precise data points and sources it points back to the collection section, and for the purposes and recipients it points to the use and sharing sections.
Supporting quotations
This section contains additional disclosures for individuals in the United States and supplements PayPal’s Privacy Statement above.
This section provides additional information regarding PayPal’s prior 12-month Personal Information processing activities under the CCPA. In the preceding 12 months, we have collected the categories of Personal Information set forth in the table below. For details about the precise data points we collect and the categories of sources of such collection, please see Categories of Personal Information We Collect. In the preceding 12 months, we have disclosed the following categories of Personal Information for business purposes to the following categories of third parties, which we describe in greater detail in How We Use Personal Information and When and How We Share Personal Information With Others.
Categories of Personal Information We Collect Purpose of Collection and Disclosure Categories of 3rd Parties to which PayPal Discloses this Personal Information for Business Purpose
Services refers to all PayPal-branded or unbranded payment, financial, and personalization products and solutions, including transactions, rewards, advertising (including PayPal Ads), PayPal Groups, Fastlane, Xoom, Pool, Hyperwallet, credit and financing (including Partner and Merchant offerings), cryptocurrency services offered by PayPal Digital Inc. (a PayPal affiliate company), merchant tools, and emerging financial technologies (including Fastlane), with the exception of Excluded Services.
Qualifications & exceptions
The table covers the preceding 12 months of activity, not a promise about future practice.
The table lists purposes and recipient categories per row of personal information; it does not say which purpose goes with which recipient.
Data Access & Collection · Company practice
Geolocation data: purposes and third-party recipients
In the United States disclosure table (columns: category of Personal Information, purpose of collection and disclosure, categories of third parties PayPal discloses it to for a business purpose), the category "Geolocation Data" has two purposes: send you location-based options, and manage fraud and risk. It is disclosed for a business purpose to authorities, PayPal and PayPal affiliates, service providers, other financial institutions and Partners and Merchants.
Supporting quotations
Send you location-based options
Manage fraud and risk
Authorities
PayPal and PayPal affiliates
Service providers
Other financial institutions
Partners and Merchants
Geolocation Data
Data Access & Collection · Company practice
Internet or network activity: purposes and third-party recipients
In the United States disclosure table (columns: category of Personal Information, purpose of collection and disclosure, categories of third parties PayPal discloses it to for a business purpose), the category "Internet or network activity" has these purposes: operate and provide the Services; communicate with you; manage and improve the Services; market the Services; send you locally relevant options; and comply with laws. It is disclosed for a business purpose to PayPal and PayPal affiliates, service providers, other financial institutions, Partners and Merchants, and authorities.
Supporting quotations
Internet or network activity
Operate and provide Services
Communicate with you
Manage and improve Services
Market our Services
Send you locally relevant options
Comply with laws
PayPal and PayPal affiliates
Service providers
Other financial institutions
Partners and Merchants
Authorities
Data Access & Collection · Company practice
Biometric data: purposes of collection and disclosure
In the United States disclosure table (columns: category of Personal Information, purpose of collection and disclosure, categories of third parties PayPal discloses it to for a business purpose), for the category "Biometric" the stated purpose is to authenticate you for certain actions related to your account, including to meet regulatory requirements or before you access accounts and Services, recover passwords, update profile information, manage payments and payment methods, lift account limitations, and initiate third-party cryptocurrency transfers.
Supporting quotations
Biometric
Authenticate you for certain actions related to your account, including to:
meet regulatory requirements or before you access accounts and Services;
recover passwords;
update profile information;
manage payments and payment methods;
lift account limitations; and
initiate third-party crypto currency transfers.
Qualifications & exceptions
The list of authenticated actions is introduced by "including", and the last item continues in the next section of the source.
Data Access & Collection · Company practice
Audio, electronic and visual information: purposes and recipients
In the United States disclosure table (category, purpose of collection and disclosure, third parties disclosed to for a business purpose), the row "Audio, electronic, visual, or similar information" has the purposes provide Services, authenticate your access to an account or Fastlane profile, manage and improve Services, and manage fraud and risk, with disclosure to service providers, PayPal and PayPal affiliates, Merchants and Partners, and authorities.
Supporting quotations
Audio, electronic, visual, or similar information
Provide Services
Authenticate your access to an account or Fastlane profile
Manage and improve Services
Manage fraud and risk
Service providers
PayPal and PayPal affiliates
Merchants and Partners
Authorities
Data Access & Collection · Company practice
Professional or employment information: purposes and recipients
In the United States disclosure table (category, purpose of collection and disclosure, third parties disclosed to for a business purpose), the row "Professional or employment information" has the purposes provide Services and manage fraud and risk, with disclosure to service providers, PayPal and PayPal affiliates, Merchants and Partners, authorities and other financial institutions.
Supporting quotations
Professional or employment information
Provide Services
Manage fraud and risk
Service providers
PayPal and PayPal affiliates
Merchants and Partners
Authorities
Other financial institutions
Data Access & Collection · Company practice
Imported contacts and account information: purposes and recipients
In the United States disclosure table (category, purpose of collection and disclosure, third parties disclosed to for a business purpose), the row "Information about your imported contacts" has the purpose provide Services and is disclosed to service providers only. The row "Information in your PayPal, Hyperwallet or Xoom account or Fastlane profile" has the purpose provide Services and is disclosed to service providers, PayPal and PayPal affiliates, Merchants and Partners, authorities and other financial institutions.
Supporting quotations
Information about your imported contacts
Provide Services
Service providers
Information in your PayPal, Hyperwallet or Xoom account or Fastlane profile
Provide Services
Service providers
PayPal and PayPal affiliates
Merchants and Partners
Authorities
Other financial institutions
Fastlane means the online tool whereby individuals can store their payment methods and other Personal Information with PayPal so that they can complete the checkout process faster, create a store or loyalty account, or facilitate other transactions at participating Partners and Merchants with payment card, contact information, shipping data or other data they save in their Fastlane profile as relevant to the specific interaction, participating Partners and Merchants, all without having to manually input payment method details and other Personal Information each time they check out.
Hyperwallet means the PayPal technology and online service that allows payout capabilities for businesses of all shapes and sizes through a single integration.
Data Access & Collection · Company practice
Information you provide when you contact us: purposes and recipients
In the United States disclosure table (category, purpose of collection and disclosure, third parties disclosed to for a business purpose), the row "Information you provide when you contact us" has the purposes provide Services, authenticate your access to an account or Fastlane profile, manage and improve Services (the source splits "Manage and improve" and "Services" across two cells), and manage fraud and risk, with disclosure to service providers, PayPal and PayPal affiliates, Merchants and Partners, and authorities.
Supporting quotations
Information you provide when you contact us
Provide Services
Authenticate your access to an account or Fastlane profile
Manage and improve
Services
Manage fraud and risk
Service providers
PayPal and PayPal affiliates
Merchants and Partners
Authorities
Qualifications & exceptions
The split of "Manage and improve" and "Services" across two table cells is read here as one purpose.
Data Access & Collection · Company practice
Sensitive and protected-class information: purposes and recipients
In the United States disclosure table (category, purpose of collection and disclosure, third parties disclosed to for a business purpose), the row "Sensitive Personal Information" has the purposes provide Services and manage fraud and risk, with disclosure to PayPal and PayPal affiliates, service providers, other financial institutions, Merchants and Partners, authorities, and buyers or in connection with a business transfer (split across two cells in the source). The row "Characteristics of Protected Classifications" has the purposes provide our Services and manage risk, with disclosure to PayPal and PayPal affiliates, service providers and authorities.
Supporting quotations
Sensitive Personal Information
Provide Services
Manage fraud and risk
PayPal and PayPal affiliates
Service providers
Other financial institutions
Merchants and Partners
Authorities
Buyers or in connection with
business transfer
Characteristics of Protected Classifications
Provide our Services
Manage risk
PayPal and PayPal affiliates
Service providers
Authorities
Qualifications & exceptions
Sensitive Personal Information is listed as disclosed to a wider set of recipients than protected-classification characteristics.
Data Access & Collection · Company practice
Information from your device: purposes and recipients
In the United States disclosure table (category, purpose of collection and disclosure, third parties disclosed to for a business purpose), the row "Information from your device" has the purposes provide Services, manage and improve our Services, manage fraud and risk, communicate with you, link an account, market our Services, and "Personalize your experience Comply with laws" (the source runs two purposes into one cell). It is disclosed to PayPal and PayPal affiliates, service providers, other financial institutions, Merchants and Partners, and authorities.
Supporting quotations
Information from your device
Provide Services
Manage and improve our Services
Manage fraud and risk
Communicate with you
Link an account
Market our Services
Personalize your experience Comply with laws
PayPal and PayPal affiliates
Service providers
Other financial institutions
Merchants and Partners
Authorities
Qualifications & exceptions
The last purpose cell merges "Personalize your experience" and "Comply with laws"; each is read as a separate purpose.
Data Access & Collection · Company practice
Who provides the notice, how information is protected and collected
The notice is provided by PayPal, Inc. and applies to your personal PayPal and Xoom accounts and Fastlane profile. To protect personal information from unauthorized access and use, PayPal uses security measures that comply with federal law, including computer safeguards and secured files and buildings. PayPal collects personal information, for example, when you open an account or provide account information, use a credit or debit card or give contact information, or use your PayPal or Xoom account to say who receives money and where to send it. It also collects personal information from others, such as credit bureaus, affiliates or other companies.
Supporting quotations
Who we are
Who is providing this notice? This privacy notice is provided by PayPal, Inc. and is applicable to your personal PayPal and Xoom accounts, and Fastlane profile.
What we do
How does PayPal protect my personal information? To protect your personal information from unauthorized access and use, we use security measures that comply with federal law. These measures include computer safeguards and secured files and buildings.
How does PayPal collect my personal information?
We collect your personal information, for example, when you
open an account or provide account information
use your credit or debit card or give us your contact information
use your PayPal, and/or Xoom account to tell us who receives the money
use your PayPal, and/or Xoom account to tell us where to send the money
We also collect your personal information from others, such as credit bureaus, affiliates, or other companies.
Fastlane means the online tool whereby individuals can store their payment methods and other Personal Information with PayPal so that they can complete the checkout process faster, create a store or loyalty account, or facilitate other transactions at participating Partners and Merchants with payment card, contact information, shipping data or other data they save in their Fastlane profile as relevant to the specific interaction, participating Partners and Merchants, all without having to manually input payment method details and other Personal Information each time they check out.
Qualifications & exceptions
The collection examples are introduced with "for example".
Data Access & Collection · Company practice
Data categories listed for the contract-based purposes
In the UK and EEA lawful-basis table (columns: processing purposes, types of data, lawful basis), the types of data listed as "necessary categories of Personal Information" for these purposes are: registration and contact information; identification and signature information; payment information; information related to legal requirements; information you provide when you contact us; transaction information; package tracking; service-specific information; Personal Information (listed as such in the source); information from credit reporting agencies and financial institutions; information from your connected financial accounts; information from your use of the Services; technical usage data; device information; and location data.
Supporting quotations
Necessary categories of Personal Information include:
Registration and contact information;
Identification and signature information;
Payment information;
Information related to legal requirements;
Information you provide when you contact us;
Transaction information;
Package tracking;
Service-specific;
Personal Information;
Information from CRAs and financial institutions;
Information from your connected financial accounts;
Information from your use of the Services;
Technical usage data;
Device information; and
Location data.
Data Access & Collection · Company practice
Data categories listed for the legitimate-interest purposes
In the UK and EEA lawful-basis table (columns: processing purposes, types of data, lawful basis), the necessary categories of Personal Information listed for the legitimate-interest group are: registration and contact information; identification and signature information; payment information; information related to legal requirements; information you provide when you contact us, including information related to your vulnerability; transaction information; package tracking; service-specific Personal Information; information from credit reporting agencies and financial institutions; information from your connected financial accounts; information from your use of the Services; technical usage data; and device information and location data.
Supporting quotations
Necessary categories of Personal Information include:
Registration and contact information;
Identification and signature information;
Payment information;
Information related to legal requirements;
Information you provide when you contact us including information related to your vulnerability;
Transaction information;
Package tracking;
Service-specific Personal Information;
Information from CRAs and financial institutions;
Information from your connected financial accounts;
Information from your use of the Services;
Technical usage data;
Device information; and Location data.
Data Access & Collection · Company practice
Data categories listed for the third group (first part)
In the UK and EEA lawful-basis table (columns: processing purposes, types of data, lawful basis), the necessary categories of Personal Information listed for the third group begin with: registration and contact information; identification and signature information; payment information; information related to legal requirements; information you provide when you contact us; transaction information; package tracking; service-specific Personal Information; information from credit reporting agencies and financial institutions; and information from your connected financial accounts. The list continues in the next section of the source.
Supporting quotations
Necessary categories of Personal Information include:
Registration and contact information;
Identification and signature information;
Payment information;
Information related to legal requirements;
Information you provide when you contact us;
Transaction information;
Package tracking;
Service-specific Personal Information;
Information from CRAs and financial institutions;
Information from your connected financial accounts;
Information from your use of the Services;
Data Access & Collection · Company practice
Singapore: necessary categories of Personal Information
In the Singapore purposes table (columns: processing purposes, necessary categories of Personal Information), the necessary categories of Personal Information listed are: registration and contact information; identification and signature information; payment information and information related to legal requirements (combined in one source item); information you provide when you contact us; transaction information; package tracking; service-specific Personal Information; information from credit reporting agencies and financial institutions; information from your connected financial accounts; information from your use of the Services; technical usage data; device information; and location data.
Supporting quotations
Necessary categories of Personal Information include:
Registration and contact information;
Identification and signature information;
Payment information; Information related to legal requirements;
Information you provide when you contact us;
Transaction information;
Package tracking;
Service-specific Personal Information;
Information from CRAs and financial institutions;
Information from your connected financial accounts;