PayPal may process Personal Information to provide the Services, for security and fraud prevention and to comply with law. It also uses it to let you take part in optional features such as syncing your contact list, personalizing content and offers, targeted advertising or connecting to a third-party platform. Some of these features are offered with an opt-out or need your consent, and you can withdraw consent at any time as described in the Your Data Protection Rights section.
Supporting quotations
We may process your Personal Information for a variety of reasons, including to provide our Services, for security and fraud prevention, and to comply with law. We also use Personal Information to allow you to participate in certain features that may be of interest to you, such as syncing your contact list to your account, personalizing content and offers, targeted advertising, or connecting to a third-party platform. Some of these features may be offered with an opt-out or require your consent to enable. You can withdraw your consent at any time, as described in Your Data Protection Rights.
We may collect Personal Information to:
Qualifications & exceptions
Which features need consent and which offer an opt-out is not specified in this passage.
Not stated here
This passage does not say which optional features rely on consent and which on opt-out.
Use & Processing · Company practice
Using information to provide the Services and process payments
PayPal may use Personal Information to provide the Services: to help you send, receive or request money, make payments, pay bills, administer purchases, display shipping options and costs at checkout, show your profile, account and payment information, prove that transactions were executed, assess your creditworthiness in connection with the Services, confirm your identity (including by electronic signature) and contact details, authenticate your access, and keep your account and financial information accurate and current.
Supporting quotations
Provide our Services. We may use Personal Information to help you send, receive or request money, initiate a payment, add monetary value to an account, pay a bill, administer your purchases, display shipping options and associated costs when you check out, show you your profile, account and payment information, send and receive transactions and prove that they have been executed, to assess your creditworthiness in connection with our Services, confirm your identity (also through the use of electronic signature) and your contact information, to authenticate your access to your account or profile and to confirm your account or profile and financial information are accurate and up to date.
Services refers to all PayPal-branded or unbranded payment, financial, and personalization products and solutions, including transactions, rewards, advertising (including PayPal Ads), PayPal Groups, Fastlane, Xoom, Pool, Hyperwallet, credit and financing (including Partner and Merchant offerings), cryptocurrency services offered by PayPal Digital Inc. (a PayPal affiliate company), merchant tools, and emerging financial technologies (including Fastlane), with the exception of Excluded Services.
Qualifications & exceptions
Creditworthiness assessment is described as part of providing the Services.
Use & Processing · Company practice
Visa+ and PayPal World payment matching
For Visa+, PayPal receives the recipient's name and payment information from Visa and from participating third-party digital wallets, to process and match Visa+ payment transactions between those wallets and PayPal. PayPal also uses information from third parties, including third-party wallets, payment networks and processors, to process PayPal World transactions.
Supporting quotations
For Visa+, we will receive the recipient's name and payment information from Visa and third-party Visa+ participating digital wallets for the purpose of processing and matching Visa+ payment transactions between participating digital wallets and PayPal.
We will use information from third parties, including third-party wallets, payment networks, and processors, to process PayPal World transactions.
Use & Processing · Company practice
Fastlane recognition and payment authorization checks
If you use Fastlane, PayPal may recognize you as a Fastlane user when you shop on participating Partner and Merchant sites and may prompt you to take part in interactions such as registering for a store or loyalty account with your Fastlane profile. PayPal will also use your Personal Information and payment method details to determine whether a payment made with Fastlane profile details is authorized by you and likely to be successfully authorized by the chosen payment method.
Supporting quotations
If you are using Fastlane, we may recognize you as a Fastlane user when you shop on participating Partner and Merchant sites, and we may prompt you to engage in participating Partner or Merchant interactions, such as registering for a store or loyalty account using your Fastlane profile. We will also use your Personal Information and payment method details to determine whether the payment you are making with a participating Partner or Merchant is authorized by you and likely to be successfully authorized by the payment method you choose to use when you make a purchase using details from your Fastlane profile.
Fastlane means the online tool whereby individuals can store their payment methods and other Personal Information with PayPal so that they can complete the checkout process faster, create a store or loyalty account, or facilitate other transactions at participating Partners and Merchants with payment card, contact information, shipping data or other data they save in their Fastlane profile as relevant to the specific interaction, participating Partners and Merchants, all without having to manually input payment method details and other Personal Information each time they check out.
Use & Processing · Company practice
Remembering contact details for digital receipts at PayPal Point of Sale
Buyers who use PayPal Point of Sale services (including Venmo Tap to Pay) may choose to give PayPal contact details so digital receipts can be sent. If you give your email address or mobile number to a Partner or Merchant using PayPal Point of Sale, PayPal may remember it for the next time you pay in a physical store of any merchant using PayPal Point of Sale with the same payment card, whether or not you bought from that merchant before, and pre-fill it in the receipt view.
Supporting quotations
Provide receipts in connection with PayPal Point of Sale (formerly Zettle by PayPal) services. For buyers using our PayPal Point of Sale services (including Venmo Tap to Pay), you may choose to provide us your contact details so that we can send you digital receipts. If you provide your e-mail address or mobile number to a Partner or Merchant who uses PayPal Point of Sale, we may remember your details for the next time you buy something from a Merchant who uses PayPal Point of Sale in its physical store, if you use the same payment card. This is regardless of whether you have previously bought something from this Merchant or not. This means that your e-mail address or mobile number will be pre-filled in the receipt view for your convenience the next time you buy something from a Merchant who uses PayPal Point of Sale in its physical store.
Qualifications & exceptions
Applies when you use the same payment card.
Applies across merchants that use PayPal Point of Sale, not only the merchant you gave the details to.
Use & Processing · Company practice
Improving the Services and sharing aggregated insights
PayPal may use Personal Information to develop new products and features, administer and secure the Services, and for customer analysis, internal operations such as troubleshooting, data analysis, testing, research and statistics. It may also use your transaction and experience data on an aggregated basis to generate business insights and may share those insights with third parties such as Partners and Merchants to help improve their products and services.
Supporting quotations
Manage, analyze and improve our Services. We may use Personal Information to develop new products and features, to administer our Services, to promote the safety and security of the Services, for customer analysis and internal operations (e.g., for troubleshooting) and procedures, data analysis, testing, research, and statistical purposes. We may also use your transaction and experience data on an aggregated basis to generate business insights. We may share those insights with third parties such as our Partners and Merchants to help improve their products and services.
Partners and Merchants means our partners and the merchants, partners or businesses that our Users transact with for the purpose of obtaining goods or services.
Qualifications & exceptions
Insights shared with third parties are stated to be generated from data on an aggregated basis.
Use & Processing · Company practice
Training AI models and automated decision making
PayPal may use Personal Information to train the artificial intelligence (AI) models that power its Services. It also uses Automated Decision Making to provide products and Services and to carry out risk analysis, fraud prevention and risk management to protect customers and the business, including preventing fraud against Partners and Merchants and strategic ventures. The statement points to the AI and Automated Decision Making section for more.
Supporting quotations
AI and Automated Decision Making. We may use Personal Information to train our artificial intelligence (AI) models that power our Services and help us deliver more secure, efficient, and personalized services. PayPal also uses Automated Decision Making to provide our products and Services, conduct risk analysis, fraud prevention and risk management to protect our customers and business, including to prevent fraud against our Partners and Merchants and strategic ventures. Please see AI and Automated Decision Making to learn more.
Qualifications & exceptions
AI training is stated as something PayPal "may" do with Personal Information.
Not stated here
This passage does not say whether you can opt out of AI training; see the dedicated section.
Cross-references
related (model-proposed): Automated decisions about risk, fraud and creditworthiness — references: The overview of uses points to the AI and Automated Decision Making section, which describes the automated assessments, profiling and consequences.
Use & Processing · Company practice
Marketing, events and communications
PayPal may use Personal Information to give you information and news and to market its Services, including where it partners with others to offer similar services or to market about Partners and Merchants. When it associates information about you, it also uses that information to better understand and cater to your interests. It may use Personal Information to facilitate your participation in competitions, offerings and events, and to communicate with you, for example to answer a customer service question.
Supporting quotations
Market our Services. We may use Personal Information to provide you with information, news, and market our Services including where we partner with others to offer similar services to market about our Partners and Merchants. We use Personal Information, including when we associate information about you, to better understand and cater to your interests.
Competitions, Offerings and Events. We may use Personal Information to facilitate your participation in competitions, offerings, and events.
Communicate with you. We may use your Personal Information to communicate with you, such as answering a question you sent to our customer service team.
Partners and Merchants means our partners and the merchants, partners or businesses that our Users transact with for the purpose of obtaining goods or services.
Use & Processing · Company practice
Using your contacts and connecting third-party accounts
PayPal may use Personal Information to help you find and connect your contacts, improve payment accuracy and suggest connections with people you may know. By giving PayPal information about your contacts, you certify that you have permission to provide it for the purposes in this statement. PayPal may also use Personal Information to connect to a third-party account, such as a social network account or a financial institution, when you link it to PayPal or link PayPal to another institution, directly or through an aggregator.
Supporting quotations
Process information about your contacts. We may use Personal Information in order to make it easy for you to find and connect your contacts, improve payment accuracy and suggest connections with people you may know. By providing us with information about your contacts you certify that you have permission to provide that information to PayPal for the purposes described in this Privacy Statement.
Create an account connection between your account and a third-party account or platform. We may use Personal Information to connect with a third-party account, such as your social network account to facilitate payment transactions or a financial institution when you link an account to PayPal or link your PayPal account to another financial institution, directly or through the use of an aggregator.
Qualifications & exceptions
You certify you have permission to give PayPal your contacts' information.
Use & Processing · Company practice
Using location to personalize and secure the Services
If you agree to let PayPal track your precise geolocation, it can customize the Services with location-based options, functionality, offers, ads and search results. Even if you do not allow precise tracking, PayPal may use your address to send location-based options recommended by nearby businesses. PayPal also uses precise geolocation to enhance the security of the Sites and Services, and states that it collects precise geolocation data from Users while they are logged into their financial account.
Supporting quotations
Send you locally relevant options and for security. If you agree to let us track your precise geolocation, we can customize our Services by personalizing language and content such as providing location-based options, functionality or offers, ads and search results. Even if you don't allow us to track your precise location, we may still use your address to send you location-based options recommended by businesses that are near your address. In addition, we will use precise geolocation to enhance the security of the Sites and Services. We collect precise geolocation data from Users while they are logged into their financial account.
Users means other account holders and non-account holders of the PayPal Services.
Qualifications & exceptions
Personalization from precise location depends on your agreement; address-based local options can continue without it.
Security use of precise geolocation is not described as depending on consent.
Use & Processing · Company practice
Personalization, product recommendations and remembered preferences
PayPal may use Personal Information to give you offers and rewards, show ads and personalize your experience, including using insights from purchases and other behavior on its own and Partner or Merchant websites and apps to develop recommendations about products, brands, sizes, preferences and styles, which it provides to Partners and Merchants so they can recommend relevant products to you. It may also remember preferences such as your preferred payment method or whether you want digital receipts by email or text.
Supporting quotations
Personalize your experience and develop product recommendations. We may use Personal Information to provide you offers and rewards, show ads or otherwise personalize your experience, such as using insights from purchases and other behaviors on our and our Partner or Merchant websites or apps to develop recommendations about products, brands, sizes, preferences and styles that we provide to our Partners and Merchants so that they can recommend relevant products to you.
Remember your preferences. We may remember your preferences for the next time you use the Services, such as which of your payment methods you prefer or whether you choose to receive digital receipts via email or text when you checkout.
Partners and Merchants means our partners and the merchants, partners or businesses that our Users transact with for the purpose of obtaining goods or services.
Qualifications & exceptions
Recommendation insights are provided to Partners and Merchants.
Use & Processing · Company practice
Automated decisions about risk, fraud and creditworthiness
PayPal uses Automated Decision Making technology to make assessments or decisions, including about risk, fraud and creditworthiness, where permitted and in accordance with applicable law. The technology may use profiling to evaluate personal aspects of you, including analyzing or predicting your economic situation, reliability or behavior, for example whether you show traits suggesting credit or financial risk, money laundering or fraud, that conflict with what you submitted, or suggest you hid your real identity. If PayPal decides you pose a credit, fraud, money laundering or other risk, it may refuse new services, stop services you currently use, or limit or restrict them. Users may exercise rights related to Automated Decision Making as described in Your Data Protection Rights.
Supporting quotations
We may process your Personal Information using AI and/or Automated Decision Making technology under the circumstances described below:
Automated Decision Making. PayPal uses Automated Decision Making technology to make assessments or decisions, including related to risk, fraud and creditworthiness, where permitted and in accordance with applicable law. Our Automated Decision Making technology may use profiling techniques to evaluate personal aspects about you, including to analyze or predict your economic situation, reliability and/or behavior. This enables us to assess, for example, whether you display traits indicating possible credit or financial risk, money laundering or fraudulent activity, that are inconsistent with any submissions you have made to us, or that suggest you have hidden your real identity. In making an Automated Decision, PayPal may process Users’ Personal Information. If we determine that you pose a credit, fraud, money laundering or other risk, we may refuse to provide new services to you, stop providing services you currently use, or place limits or restrictions on the services you use. Users may exercise rights related to Automated Decision Making, as described in Your Data Protection Rights.
Profiling means analysis of an individual’s personality, behavior, interest and habits to make predictions or decisions about them, including like terms under applicable laws.
Qualifications & exceptions
Applies "where permitted and in accordance with applicable law".
Consequences listed are things PayPal "may" do.
Use & Processing · Company practice
Agentic AI tools and the information they can access
PayPal, directly or through trusted partners, may give you access to Agentic AI Tools that operate with a degree of autonomy: they perform tasks, make recommendations and can initiate actions on your behalf while learning from your interactions, using generative AI. When you use them, they have access to your Personal Information, including queries, preferences, interests, purchase history and payment information. PayPal says the tools are not designed to make decisions with legal or similarly significant effects (legal, medical, financial or employment) and you must not use them for that purpose; they provide general assistance and insights, and you should not rely on them in place of your own judgment.
Supporting quotations
Agentic AI. PayPal is committed to offering innovative and personalized experiences, and we may, directly or through our trusted partners, provide you with access to Agentic AI tools (“Agentic AI Tools”). These AI tools are designed to operate with a degree of autonomy, enabling them to perform tasks, make recommendations, and even initiate actions on your behalf, all while learning from your interactions. Agentic AI Tools leverage generative AI technology to enhance your experience on the PayPal platform.
We encourage you to carefully consider the recommendations and actions of Agentic AI Tools. Our Agentic AI Tools are not designed to make decisions that have legal or similarly significant effects, such as decisions with legal, medical, financial, or employment implications, and you must not use (or attempt to use) them for any such purpose. These tools are intended only to provide general assistance and insights, and you should not rely on them to replace your own judgement and expertise.
Agentic AI Tools require access to certain information to function effectively. When you use these tools, they will have access to your Personal Information, including queries, preferences, interests, purchase history, and payment information.
Qualifications & exceptions
The tools may be provided directly or through PayPal's trusted partners.
You are told not to use the tools for decisions with legal or similarly significant effects.
Use & Processing · Context
Definitions of Automated Decision Making and Profiling
An Automated Decision (Automated Decision Making) is a decision made by automated means with no or limited human involvement, depending on applicable law, and in some cases it may have a legal or similarly significant effect on you; the terms also mean like concepts under applicable laws. Profiling means analysis of a person's personality, behavior, interest and habits to make predictions or decisions about them, including like terms under applicable laws.
Supporting quotations
Automated Decision and Automated Decision Making refers to the process of making a decision by automated means without or limited human involvement, depending on applicable law. In some cases, these decisions could have a legal or similarly significant effect on you as an individual. These terms also mean like concepts under applicable laws.
Profiling means analysis of an individual’s personality, behavior, interest and habits to make predictions or decisions about them, including like terms under applicable laws.
Qualifications & exceptions
The meaning of "limited human involvement" depends on applicable law.
Use & Processing · Company practice
Identifiers: purposes of collection and disclosure
In the United States disclosure table (columns: category of Personal Information, purpose of collection and disclosure, categories of third parties PayPal discloses it to for a business purpose), for the category "Identifiers" the purposes are: provide Services; communicate with you (listed twice); link an account; manage and improve the Services; manage fraud and risk; market the Services; comply with laws; process information about your contacts; provide receipts in connection with PayPal Point of Sale services; remember your preferences; and associate information about you.
Supporting quotations
Identifiers
Provide Services
Communicate with you
Link an account
Manage and improve our Services
Manage fraud and risk
Market our Services
Comply with laws
Process information about your contacts
Communicate with you
Provide receipts in connection with PayPal Point of Sale services
Remember your preferences
Associate information about you
Qualifications & exceptions
Each purpose belongs to the Identifiers row of the table.
Use & Processing · Company practice
Records and financial information: purposes of collection and disclosure
In the United States disclosure table (columns: category of Personal Information, purpose of collection and disclosure, categories of third parties PayPal discloses it to for a business purpose), for the category "Records and Financial Information (including Personal Information described in the California Customer Records Act)" the purposes are: provide Services; communicate with you (listed twice); link an account; keep your account, Fastlane profile and financial information up to date; manage and improve the Services; manage fraud and risk; market the Services; provide personalized Services; comply with laws; and process information about your contacts.
Supporting quotations
Records and Financial Information (including Personal Information described in California Customer Records Act)
Provide Services
Communicate with you
Link an account
Keep your account and Fastlane profile and financial information up to date
Manage and improve our Services
Manage fraud and risk
Market our Services
Provide personalized Services
Comply with laws
Process information about your contacts
Communicate with you
Fastlane means the online tool whereby individuals can store their payment methods and other Personal Information with PayPal so that they can complete the checkout process faster, create a store or loyalty account, or facilitate other transactions at participating Partners and Merchants with payment card, contact information, shipping data or other data they save in their Fastlane profile as relevant to the specific interaction, participating Partners and Merchants, all without having to manually input payment method details and other Personal Information each time they check out.
Use & Processing · Company practice
Commercial information: purposes of collection and disclosure
In the United States disclosure table (columns: category of Personal Information, purpose of collection and disclosure, categories of third parties PayPal discloses it to for a business purpose), the category "Commercial information" has these purposes: provide Services; communicate with you; manage and improve the Services; manage fraud and risk; market the Services; comply with laws; remember your preferences; and associate information about you.
Supporting quotations
Commercial information
Provide Services
Communicate with you
Manage and improve our Services
Manage fraud and risk
Market our Services
Comply with laws
Remember your preferences
Associate information about you
Use & Processing · Company practice
Purposes treated as necessary for the contract: service, payments, identity and claims
In the UK and EEA lawful-basis table (columns: processing purposes, types of data, lawful basis), the first group of purposes, tied to the contract basis, includes: providing the Services, fulfilling agreements with you and administering the relationship; administering your payment for products and the customer relationship; assessing creditworthiness for an application, confirming identity and contact details and protecting you and others from fraud; confirming identity including by electronic signature; proving that transactions were executed; establishing, exercising or defending a legal claim or collection procedure; complying with internal procedures; and assessing which payment options and services to offer you, for example through internal and external credit assessments.
Supporting quotations
These processing purposes include:
to provide our Services, to fulfil relevant agreements with you and to otherwise administer our business relationship with you;
to administer your payment for products and the customer relationship;
to assess your creditworthiness in connection with your application, confirm your identity and your contact information, and protect you and others from fraud;
to confirm your identity, also through the use of electronic signature, and verify your personal and contact details;
to prove that transactions have been executed;
to establish, exercise or defend a legal claim or collection procedure;
to comply with internal procedures;
to assess which payment options and services to offer you, for example by carrying out internal and external credit assessments;
Qualifications & exceptions
The purposes are introduced as "include", so the list is not stated to be exhaustive.
Use & Processing · Company practice
Purposes treated as necessary for the contract: analytics, security, legal compliance and product features
In the UK and EEA lawful-basis table (columns: processing purposes, types of data, lawful basis), the same group of purposes also includes: customer analysis, administering the Services and internal operations such as troubleshooting, data analysis, testing, research and statistics; communicating with you about the Services; promoting security of the Services; complying with applicable laws such as anti-money laundering and bookkeeping rules; processing Visa+ transactions using the recipient's name and payment information from Visa and participating wallets; using third-party wallet, network and processor information to process PayPal World transactions; recognizing Fastlane users and checking whether Fastlane payments are authorized; and providing Point of Sale receipts, including remembering your email or mobile number for later purchases at any Point of Sale merchant when you use the same card.
Supporting quotations
for customer analysis, to administer our Services, and for internal operations, for example troubleshooting, data analysis, testing, research and statistical purposes;
to communicate with you in relation to our Services;
to promote the security of the Services;
to comply with applicable laws, such as AML and bookkeeping laws and rules issued by our designated banks and relevant card networks;
specifically for Visa+, we will receive the recipient’s name and payment information from Visa and third-party Visa+ participating digital wallets for the purpose of processing and matching Visa+ payment transactions between participating digital wallets and PayPal;
We will use information from third parties, including third-party wallets, payment networks, and processors, to process PayPal World transactions.
For Fastlane users, we may recognize you as a Fastlane user when you shop on participating Partner and Merchant sites, and we may prompt you to engage in participating Partner or Merchant interactions, such as registering for a store or loyalty account using your Fastlane profile. We will also use your Personal Information and payment method details to determine whether the payment you are making with a participating Partner or Merchant is authorized by you and likely to be successfully authorized by the payment method you choose to use when you make a purchase using details from your Fastlane profile; and
provide receipts in connection with PayPal Point of Sale services. For buyers using our PayPal Point of Sale services (including Venmo Tap to Pay), you may choose to provide us your contact details so that we can send you digital receipts. If you provide your e-mail address or mobile number to a Partner or Merchant who uses PayPal Point of Sale, we may remember your details for the next time you buy something from a Merchant who uses PayPal Point of Sale in its physical store, if you use the same payment card. This is regardless of whether you have previously bought something from this Merchant or not. This means that your e-mail address or mobile number will be pre-filled in the receipt view for your convenience the next time you buy something from a Merchant who uses PayPal Point of Sale in its physical store.
Fastlane means the online tool whereby individuals can store their payment methods and other Personal Information with PayPal so that they can complete the checkout process faster, create a store or loyalty account, or facilitate other transactions at participating Partners and Merchants with payment card, contact information, shipping data or other data they save in their Fastlane profile as relevant to the specific interaction, participating Partners and Merchants, all without having to manually input payment method details and other Personal Information each time they check out.
Use & Processing · Company practice
Purposes in the second group of the lawful-basis table (first part)
In the UK and EEA lawful-basis table (columns: processing purposes, types of data, lawful basis), the second group of purposes begins with: ensuring content is presented in the most effective way for you and your device; preventing misuse of the Services to keep the platform safe and secure; determining your eligibility for, and communicating with you about, Services you may qualify for or that may interest you, for example through internal credit assessments; and carrying out risk analysis, fraud prevention and risk management, for example through Automated Decision Making and AI. The list continues in the next section of the source.
Supporting quotations
These processing purposes include:
to ensure that content is presented in the most effective way for you and your device;
to prevent misuse of our Services as part of our efforts to keep our platform safe and secure;
to determine your eligibility for and to communicate with you about Services for which you may qualify or that may be of interest to you, for example by carrying out internal credit assessments;
to carry out risk analysis, fraud prevention and risk management (e.g., through Automated Decision Making and AI);
Qualifications & exceptions
The list is continued in the next section of the source, where the basis for this group is stated.
Use & Processing · Company practice
Legitimate-interest purposes: improvement, marketing, preferences and linking activity
In the UK and EEA lawful-basis table (columns: processing purposes, types of data, lawful basis), the second group of purposes (legitimate interest) also includes: managing and improving the Services and general business development, for example improving risk models to minimize fraud, developing products, internal operations, analysis, testing, research, statistics and exploring new business opportunities; keeping your account and financial information up to date; marketing, product and customer analysis, including where PayPal partners with others to market about its Partners; facilitating your participation in competitions, offerings and events; providing information, news and marketing about the Services, including rewards or ads, also with partners; associating information about you to identify your use of the Services without a PayPal account or the Unbranded Payment Services (for example Braintree) and linking those transactions to your account if you have or later set one up; and remembering your preferences such as payment method or digital receipt delivery.
Supporting quotations
to manage and improve our Services and for general business development purposes, for example improving risk models to minimize fraud, develop new products and features, for internal operations (e.g., for troubleshooting), data analysis, testing, research, statistical purposes, and explore new business opportunities;
to keep your account and financial information up to date;
for marketing, product and customer analysis, including where we partner with others to offer similar services to market about our Partners and testing, for example to improve our product range and optimize our customer offerings;
to facilitate your participation in competitions, offerings, and events;
to provide you with information, news, and marketing about our Services, including rewards or ads from us or where we partner with others to offer similar services;
to associate information about you to identify your use of Services without a PayPal account (e.g., Pay without a PayPal account) or Unbranded Payment Services (e.g., Braintree) and to associate such transactions with your account, if you have one or later establish an account;
to remember your preferences for the next time you use the Services, such as which of your payment methods you prefer or whether you choose to receive digital receipts via email or text when you checkout; and
Pay without a PayPal Account means our Services may be accessed by individuals without using a PayPal account, a Fastlane profile, or the Unbranded Payment Services. Pay without a PayPal account does not include Venmo, which is subject to its own terms of service and separate privacy statement.
Unbranded Payment Services means when you are interacting with and making payments to Partners and Merchants using our card processing and/or ACH origination services that do not carry the PayPal brand or when you use our Braintree services.
Use & Processing · Company practice
Legitimate-interest purposes: compliance, risk, contacts and precise location
In the UK and EEA lawful-basis table (columns: processing purposes, types of data, lawful basis), the legitimate-interest group also includes: complying with laws such as anti-money laundering, bookkeeping, capital adequacy and bank and card network rules, for example KYC, preventing and investigating money laundering, terrorist financing and fraud, sanction screening, and reporting to tax, police, enforcement and supervisory authorities including where not compelled but with a good faith belief that sharing is necessary to comply with law; financial risk management such as credit performance, product suitability, identity checks, debt recovery and preventing crime and insurance risks; processing information about your contacts, where you certify you have permission to provide it; and using precise geolocation to enhance security of the Sites and Services, collected from Users while they are logged into their financial account.
Supporting quotations
to comply with applicable laws, such as AML, bookkeeping laws, regulatory capital adequacy requirements, and rules issued by our designated banks and relevant card networks. For example, when we process Personal Information for KYC requirements, to prevent, detect and investigate money laundering, terrorist financing and fraud. We also carry out sanction screening, report to tax authorities, police enforcement authorities, enforcement authorities, supervisory authorities where we are not compelled by applicable laws but where we have a good faith belief that sharing the information is necessary to comply with applicable law;
to conduct financial risk management obligations, such as credit performance and quality, assess product suitability, check your identity, trace and recover debts, and prevent criminal activity, insurance risks and compliance with capital adequacy requirements under applicable law;
to process information about your contacts to make it easy for you to find and connect them and improve payment accuracy. By providing us with information about your contacts you certify that you have permission to provide that information to PayPal for the purposes described in this Privacy Statement;
we will use precise geolocation to enhance the security of the Sites and Services. We collect precise geolocation data from Users while they are logged into their financial account.
Users means other account holders and non-account holders of the PayPal Services.
Qualifications & exceptions
Reporting to authorities can occur without a legal compulsion when PayPal has a good faith belief that sharing is necessary to comply with law.
Use & Processing · Company practice
Purposes in the third group of the lawful-basis table
In the UK and EEA lawful-basis table (columns: processing purposes, types of data, lawful basis), the third group of purposes includes: providing the Services and products; verifying your identity, also for signature purposes, and your personal and contact details; establishing, exercising or defending a legal claim or collection procedure; preventing misuse of the Services to keep the platform safe; risk analysis, fraud prevention and risk management, for example through Automated Decision Making and AI; and complying with laws such as anti-money laundering, bookkeeping, capital adequacy and bank and card network rules, including KYC, sanction screening and reporting to tax, police, enforcement and supervisory authorities.
Supporting quotations
These processing purposes include:
to provide our Services and products;
to verify your identity, also for signature purposes, and verify your personal and contact details;
to establish, exercise or defend a legal claim or collection procedure;
to prevent misuse of our Services as part of our efforts to keep our platform safe and secure;
to carry out risk analysis, fraud prevention and risk management (e.g., through Automated Decision Making and AI); and
to comply with applicable laws, such as AML and bookkeeping laws and regulatory capital adequacy requirements and rules issued by our designated banks and relevant card networks. For example, when we process Personal Information for KYC requirements, to prevent, detect and investigate money laundering, terrorist financing and fraud. We also carry out sanction screening, and report to tax authorities, police enforcement authorities, enforcement authorities, and supervisory authorities.
Qualifications & exceptions
The lawful basis for this group is in a following cell of the source.
Use & Processing · User right or choice
Fourth group: purposes that rely on your consent
In the UK and EEA lawful-basis table (columns: processing purposes, types of data, lawful basis), the fourth group of purposes covers features that are not necessary to use the Services but may interest you: syncing your contact list to your account; providing biometric data for identification; certain targeted advertising; linking your email account for package tracking; linking non-financial or financial accounts (such as social network, mail, bank, card or investment accounts) that you agree to link; and connecting to a third-party platform or wallet. If you agree to let PayPal track precise geolocation it can customize the Services with language, location-based options, functionality, offers, ads and search results, and even if you do not allow precise tracking it may still use your address to send location-based options recommended by nearby businesses.
Supporting quotations
These processing purposes include:
participate in certain features that while not necessary for use of the Services may be of interest to you, such as syncing your contact list to your account;
providing biometric data for identification purposes;
certain targeted advertising;
linking your email account for package tracking;
linking any non-financial or financial accounts, such as social network accounts, mail accounts, or bank, card, or investment accounts you agree to link to facilitate payments or for other purposes for which you agree to link such external account; or
Connecting to a third party platform or third party wallet; and
if you agree to let us track your precise geolocation, we can customize our Services by using the right language and personalizing content such as providing location-based options, functionality or offers, ads and search results. Even if you don’t allow us to track your precise location, we may still use your address to send you location-based options recommended by businesses that are near your address.
Qualifications & exceptions
Address-based location options can continue even if you do not allow precise location tracking.
Use & Processing · Company practice
Mexico primary purposes: services, identity, payments and credit
In the Mexico purposes table (columns: primary purpose, secondary purpose), the primary purposes include: providing the Services, fulfilling agreements and administering the relationship and your payments; for Fastlane users, using Personal Data and payment details to decide whether a payment is authorized by you and likely to succeed; assessing creditworthiness, confirming identity and contact information and protecting you and others from fraud; confirming identity including by electronic signature; proving that transactions were executed; establishing, exercising or defending legal claims or collection procedures; complying with internal procedures; and assessing which payment options and services to offer you, for example through internal and external credit assessments.
Supporting quotations
The primary purpose for processing your Personal are:
to provide our Services, to fulfil relevant agreements with you and to otherwise administer our business relationship with you. to administer your payment for products and the customer relationship.
If you are using Fastlane, we will also use your Personal Data and payment method details to determine whether the payment you are making with a participating Partner or Merchant is authorized by you and likely to be successfully authorized by the payment method you choose to use when you make a purchase using details from your Fastlane profile.
to assess your creditworthiness in connection with your application, confirm your identity and your contact information, and protect you and others from fraud.
to confirm your identity, also through the use of electronic signature, and verify your personal and contact details.
to prove that transactions have been executed.
to establish, exercise or defend a legal claim or collection procedure.
to comply with internal procedures.
to assess which payment options and services to offer you, for example by carrying out internal and external credit assessments.
Fastlane means the online tool whereby individuals can store their payment methods and other Personal Information with PayPal so that they can complete the checkout process faster, create a store or loyalty account, or facilitate other transactions at participating Partners and Merchants with payment card, contact information, shipping data or other data they save in their Fastlane profile as relevant to the specific interaction, participating Partners and Merchants, all without having to manually input payment method details and other Personal Information each time they check out.
Use & Processing · Company practice
Mexico primary purposes: analysis, communication, risk, marketing and compliance
In the Mexico purposes table (columns: primary purpose, secondary purpose), the primary purposes also include: customer analysis, administering the Services and internal operations such as troubleshooting, data analysis, testing, research and statistics; communicating with you about the Services; presenting content effectively for you and your device; determining your eligibility for Services and communicating about them, and risk analysis, fraud prevention and risk management, for example through Automated Decision Making and AI (the source runs these into one item); improving the Services and general business development, including improving risk models, developing products and exploring new business opportunities; keeping your account and financial information up to date; marketing, product and customer analysis including testing; complying with laws such as bookkeeping, capital adequacy, bank and card network rules, KYC, preventing money laundering, terrorist financing and fraud, sanction screening and reporting to tax, police, enforcement and supervisory authorities, and facilitating participation in competitions, offerings and events (the source runs these into one item); financial risk management such as credit performance and quality, insurance risks and capital adequacy compliance; and processing information about your contacts, where you certify that you have permission to provide it.
Supporting quotations
for customer analysis, to administer our Services, and for internal operations, for example troubleshooting, data analysis, testing, research and statistical purposes.
to communicate with you in relation to our Services.
to ensure that content is presented in the most effective way for you and your device.
to determine your eligibility for and to communicate with you about Services for which you may qualify or that may be of interest to you to carry out risk analysis, fraud prevention and risk management (e.g., through Automated Decision Making and AI).
to improve our Services and for general business development purposes, for example improving risk models to minimize fraud, develop new products and features and explore new business opportunities.
To keep your PayPal account and financial information up to date.
for marketing, product and customer analysis, including testing, for example to improve our product range and optimize our customer offerings.
to comply with applicable laws, bookkeeping laws, regulatory capital adequacy requirements, and rules issued by our designated banks and relevant card networks. For example, when we process Personal Information for KYC requirements, to prevent, detect and investigate money laundering, terrorist financing and fraud. We also carry out sanction screening, report to tax authorities, police enforcement authorities, enforcement authorities, supervisory authorities. to facilitate your participation in competitions, offerings, and events.
to conduct financial risk management obligations such as credit performance and quality, insurance risks and compliance with capital adequacy requirements under applicable law.
to process information about your contacts to make it easy for you to find and connect them and improve payment accuracy. By providing us with information about your contacts you certify that you have permission to provide that information to PayPal for the purposes described in this Privacy Statement.
Qualifications & exceptions
Two items in the source combine separate purposes in one list entry: the eligibility and risk-analysis item, and the legal-compliance and competitions item.
Use & Processing · User right or choice
Mexico secondary purposes rely on your explicit and voluntary consent
In the Mexico purposes table (columns: primary purpose, secondary purpose), the secondary purposes rely on your explicit and voluntary consent to take part in features that are not necessary to use the Services but may interest you, such as syncing your contact list to your PayPal account, providing biometric data, targeted advertising, or connecting to a third-party platform. You may change your mind at any time through your account settings, and you can withdraw consent at any time through your ARCO Rights; withdrawing does not affect the lawfulness of processing before the withdrawal.
Supporting quotations
We rely on your explicit and voluntary consent to process your Personal Information to participate in certain features that while not necessary for use of the Services may be of interest to you, such as syncing your contact list to your PayPal account, providing biometric data, targeted advertising, or connecting to a third-party platform. You may change your mind about use of these features at any time through your account settings. Note that withdrawing your consent will not affect the lawfulness of any processing we have conducted prior to your withdrawal. You can withdraw your consent at any time, through your use of ARCO Rights as described below.
Qualifications & exceptions
The listed features are examples ("such as").
Withdrawal does not undo earlier processing.
Use & Processing · User right or choice
Singapore disclosures: scope and consent-based features
This section adds disclosures for individuals in Singapore and supplements the main statement. PayPal relies on your explicit and voluntary consent to process Personal Information for features that are not necessary to use the Services but may interest you, such as syncing your contact list, providing biometric data, targeted advertising, or connecting to a third-party platform. You may change your mind at any time through your account settings, and you can withdraw consent as described in Your Data Protection Rights; withdrawing does not affect the lawfulness of processing before the withdrawal.
Supporting quotations
This section contains additional disclosures for individuals in Singapore and supplements PayPal’s Privacy Statement above.
We rely on your explicit and voluntary consent to process your Personal Information to participate in certain features that while not necessary for use of the Services may be of interest to you, such as syncing your contact list to your PayPal account, providing biometric data, targeted advertising, or connecting to a third-party platform. You may change your mind about use of these features at any time through your account settings. Note that withdrawing your consent will not affect the lawfulness of any processing we have conducted prior to your withdrawal. You can withdraw your consent at any time, as described in Your Data Protection Rights above.
Qualifications & exceptions
The listed features are examples ("such as").
Withdrawal does not undo earlier processing.
Use & Processing · Company practice
Singapore processing purposes: services, identity, content, risk and improvement
In the Singapore purposes table (columns: processing purposes, necessary categories of Personal Information), the processing purposes include: providing the Services and products where necessary to comply with applicable laws; verifying your identity, also for signature purposes, and your personal and contact details, where necessary to comply with applicable laws; establishing, exercising or defending legal claims or collection procedures where necessary to comply with applicable laws; presenting content effectively for you and your device; preventing misuse of the Services; determining your eligibility for Services and communicating with you about them, for example through internal credit assessments; risk analysis, fraud prevention and risk management, for example through Automated Decision Making and AI; improving the Services and general business development; keeping your account and financial information up to date; and marketing, product and customer analysis including testing.
Supporting quotations
These processing purposes include:
to provide our Services and products where necessary to comply with applicable laws;
to verify your identity, also for signature purposes, and verify your personal and contact details, where necessary to comply with applicable laws;
to establish, exercise or defend a legal claim or collection procedures, where necessary to comply with applicable laws;
to ensure that content is presented in the most effective way for you and your device;
to prevent misuse of our Services as part of our efforts to keep our platform safe and secure;
to determine your eligibility for and to communicate with you about Services for which you may qualify or that may be of interest to you, for example by carrying out internal credit assessments;
to carry out risk analysis, fraud prevention and risk management (e.g., through Automated Decision Making and AI);
to improve our Services and for general business development purposes, for example improving risk models to minimize fraud, develop new products and features and explore new business opportunities;
to keep your account and financial information up to date;
for marketing, product and customer analysis, including testing, for example to improve our product range and optimize our customer offerings;
Qualifications & exceptions
The first three purposes carry the qualifier "where necessary to comply with applicable laws"; the table does not repeat it for the others.
The table does not state a lawful basis for each purpose.
Use & Processing · Company practice
Singapore processing purposes: compliance, competitions, contacts, marketing and preferences
In the Singapore purposes table (columns: processing purposes, necessary categories of Personal Information), the processing purposes also include: complying with laws such as anti-money laundering, bookkeeping, capital adequacy and bank and card network rules, for example KYC, preventing and investigating money laundering, terrorist financing and fraud, sanction screening, and reporting to tax, police, enforcement and supervisory authorities including where not compelled but with a good faith belief that sharing is necessary to comply with law; facilitating participation in competitions, offerings and events, and financial risk management such as credit performance and quality, insurance risks and capital adequacy compliance (combined in one source item); processing information about your contacts, where you certify you have permission to provide it; providing information, news and marketing about the Services, including rewards or ads and with partners, depending on your communication preferences; associating information about you to identify your use of the Services without a PayPal account or Unbranded Payment Services and link those transactions to your account if you have or later set one up; and remembering your preferences.
Supporting quotations
to comply with applicable laws, such as AML, bookkeeping laws, regulatory capital adequacy requirements, and rules issued by our designated banks and relevant card networks. For example, when we process Personal Information KYC requirements, to prevent, detect and investigate money laundering, terrorist financing and fraud. We also carry out sanction screening, report to tax authorities, police enforcement authorities, enforcement authorities, supervisory authorities where we are not compelled by applicable laws but where we have a good faith belief that sharing the information is necessary to comply with applicable law;
to facilitate your participation in competitions, offerings, and events; to conduct financial risk management obligations, such as credit performance and quality, insurance risks and compliance with capital adequacy requirements under applicable law;
to process information about your contacts to make it easy for you to find and connect them and improve payment accuracy. By providing us with information about your contacts you certify that you have permission to provide that information to PayPal for the purposes described in this Privacy Statement;
to provide you with information, news, and marketing about our Services, including rewards or ads from us or where we partner with others to offer similar services on our Services as well, depending on your communication preferences;
to associate information about you to identify your use of Services without a PayPal account (e.g., Pay without a PayPal account) or Unbranded Payment Services (e.g., Braintree) and to associate such transactions with your account, if you have one or later establish an account; and to remember your preferences for the next time you use the Services, such as which of your payment methods you prefer or whether you choose to receive digital receipts via email or text when you checkout.
Pay without a PayPal Account means our Services may be accessed by individuals without using a PayPal account, a Fastlane profile, or the Unbranded Payment Services. Pay without a PayPal account does not include Venmo, which is subject to its own terms of service and separate privacy statement.
Unbranded Payment Services means when you are interacting with and making payments to Partners and Merchants using our card processing and/or ACH origination services that do not carry the PayPal brand or when you use our Braintree services.
Qualifications & exceptions
Reporting to authorities can occur without a legal compulsion when PayPal has a good faith belief that sharing is necessary to comply with law.
Marketing is stated to depend on your communication preferences.