Privacy Policy

PayPal · agreement dated September 28, 2026 · Official agreement

Read the agreement

176 of 176 cards

Data Access & Collection · Context

What this Privacy Statement covers

PayPal, Inc. and its subsidiaries and affiliated companies (together "PayPal") publish this statement to describe how they use your Personal Information when you use your PayPal account(s), visit their Sites, or apply for or use their Services, to the extent those Services are available in your jurisdiction. It does not cover Excluded Services, which are separate brands, affiliates or subsidiaries (for example Venmo) that follow their own terms and separate privacy statements.

Supporting quotations

PayPal, Inc. and our subsidiaries and affiliated companies ("we," "our," "us," "PayPal", "PayPal corporate group") provide this Privacy Statement to describe our use of your Personal Information when you use your PayPal account(s), visit our websites ("Sites"), apply for, or use our Services (to the extent available in your jurisdiction). This Privacy Statement does not apply to Excluded Services.
Excluded Services means companies or separate brands, affiliates, or subsidiaries of PayPal, who process Personal Information in accordance with their own terms of service and separate privacy statements. Examples include Venmo, Honey Science LLC, Chargehound LLC, Paidy Inc., Swift Financial LLC, and Bill Me Later, Inc.
Services refers to all PayPal-branded or unbranded payment, financial, and personalization products and solutions, including transactions, rewards, advertising (including PayPal Ads), PayPal Groups, Fastlane, Xoom, Pool, Hyperwallet, credit and financing (including Partner and Merchant offerings), cryptocurrency services offered by PayPal Digital Inc. (a PayPal affiliate company), merchant tools, and emerging financial technologies (including Fastlane), with the exception of Excluded Services. It also includes all related websites, platforms, applications, and future innovations offered or supported by PayPal. Your use of Services includes interaction with our Sites.
Sites means the websites, mobile apps, official social network platforms, or other online properties through which PayPal offers the Services and which has posted or linked to this Privacy Statement.

Qualifications & exceptions

  • Applies to the extent Services are available in your jurisdiction.
  • Does not apply to Excluded Services.

Legal Rights & Agreement Rules · Restriction or exception

Other organizations follow their own privacy policies

This statement does not govern what certain third parties (for example authorities, credit bureaus, acquirers and other financial institutions) do with your Personal Information. Their handling is regulated by their own privacy policies, and PayPal encourages you to read those policies and know your rights before dealing with them.

Supporting quotations

This Privacy Statement does not apply when Personal Information is processed by certain third parties, for example, authorities, credit bureaus, acquirers, and other financial institutions. Instead, the third parties' processing of your Personal Information is regulated by their own privacy policies. We encourage you to read the third parties' privacy policies and know your privacy rights before interacting with them.

Qualifications & exceptions

  • The examples given are not stated to be a complete list of the third parties covered.

Legal Rights & Agreement Rules · Company practice

Processing and rights can differ by where you live

If you live in certain countries, PayPal may process your Personal Information differently to comply with the privacy laws there, and you may have specific privacy rights depending on where you reside. The statement includes jurisdiction-specific information to help you see which rights apply to you.

Supporting quotations

If you reside in certain countries, we may process your Personal Information differently to comply with applicable privacy laws in those jurisdictions. You may also have specific privacy rights depending on your place of residence. To help you understand what rights apply to you, in this Privacy Statement we provide jurisdiction-specific information that provides more information based on where you reside.
Certain capitalized terms that are not otherwise defined in this Privacy Statement are explained in Definitions.

Not stated here

  • The countries and the specific differences are not stated in this passage.

Legal Rights & Agreement Rules · Company commitment

How changes to this statement take effect

PayPal may revise this statement from time to time to reflect changes to its business, Services or applicable laws. If the revised version requires notice under applicable law, PayPal will give 30 days' prior notice by posting on its Policy Updates or Privacy Statement web page; otherwise the revised statement takes effect on its published effective date. If you are a new User, or receive the statement for the first time while an upcoming change is described on those pages, that change applies to you on the date indicated. This version states it was last updated on September 28, 2026.

Supporting quotations

Last updated on September 28, 2026
We may revise this Privacy Statement from time to time to reflect changes to our business, Services, or applicable laws. If the revised version requires notice in accordance with applicable law, we will provide you with 30 days' prior notice by posting notice of the change on the [Policy Updates](https://www.paypal.com/legalhub/upcoming-policies-full) or "[Privacy Statement](https://www.paypal.com/legalhub/privacy-full)" page of our website, otherwise the revised Privacy Statement will be effective as of the published effective date. If you are a new User or are receiving this Privacy Statement for the first time, and there is an upcoming change described on the [Policy Updates](https://www.paypal.com/legalhub/upcoming-policies-full) or [Privacy Statement](https://www.paypal.com/legalhub/privacy-full) page at the time you receive this Privacy Statement, such upcoming change will apply to you on the indicated effective date.

Qualifications & exceptions

  • The 30-day notice applies only if applicable law requires notice.
  • Notice is by posting on the website, not stated as direct delivery to you.

Data Access & Collection · Company practice

Information is collected from people without a PayPal account

PayPal collects Personal Information from you even if you do not hold a PayPal account when you use its Services. Examples given are paying without a PayPal account, using Unbranded Payment Services (for example Braintree), using a Fastlane profile, receiving a payment from a PayPal account holder (including through Visa+ or other third-party wallets, payment networks and processors), or receiving a payment from a payor using Hyperwallet. If you pay without an account and later create one, PayPal may link your earlier transaction information to the new account.

Supporting quotations

Our Services may be accessed by individuals without a PayPal account or profile. We will collect Personal Information from you even if you are a non-account holder when you use our Services, such as when you use our Pay without a PayPal Account, use Unbranded Payment Services (e.g., Braintree), use a Fastlane profile, or when you receive a payment from a PayPal account holder (through the Visa+ service or other third party wallets, payment networks, and processors) or a payment from a payor using the Hyperwallet services. If you Pay without a PayPal account, we may link your transaction information with your PayPal account if you create a PayPal account later.
Fastlane means the online tool whereby individuals can store their payment methods and other Personal Information with PayPal so that they can complete the checkout process faster, create a store or loyalty account, or facilitate other transactions at participating Partners and Merchants with payment card, contact information, shipping data or other data they save in their Fastlane profile as relevant to the specific interaction, participating Partners and Merchants, all without having to manually input payment method details and other Personal Information each time they check out.
Hyperwallet means the PayPal technology and online service that allows payout capabilities for businesses of all shapes and sizes through a single integration.
Pay without a PayPal Account means our Services may be accessed by individuals without using a PayPal account, a Fastlane profile, or the Unbranded Payment Services. Pay without a PayPal account does not include Venmo, which is subject to its own terms of service and separate privacy statement.
Unbranded Payment Services means when you are interacting with and making payments to Partners and Merchants using our card processing and/or ACH origination services that do not carry the PayPal brand or when you use our Braintree services.

Qualifications & exceptions

  • The listed situations are introduced with "such as" and are examples.
  • Linking is stated as something PayPal "may" do, only if you create an account later.

Data Access & Collection · Company practice

Categories of Personal Information PayPal collects

The statement lists the categories of Personal Information PayPal collects from you, including from your interactions with it and your use of the Services. The categories below are described with "such as" examples, so each list illustrates rather than exhausts what is collected.

Supporting quotations

Categories of Personal Information collected from you, including from your interactions with us and use of the Services:
Services refers to all PayPal-branded or unbranded payment, financial, and personalization products and solutions, including transactions, rewards, advertising (including PayPal Ads), PayPal Groups, Fastlane, Xoom, Pool, Hyperwallet, credit and financing (including Partner and Merchant offerings), cryptocurrency services offered by PayPal Digital Inc. (a PayPal affiliate company), merchant tools, and emerging financial technologies (including Fastlane), with the exception of Excluded Services.

Qualifications & exceptions

  • Each category gives examples introduced by "Such as" and is not stated to be exhaustive.

Data Access & Collection · Company practice

Identifiers, contact details and profile information

PayPal collects personal identifiers (name, business name, address, phone number, email, IP address, device information, cookie and tracking data, government-issued identification and signature) and other information needed to set up an account or profile. It also collects professional details (business information, job title, contact emails, phone numbers and taxpayer ID numbers) and contact details for people whose contacts you import or enter manually. Profile information you add, such as username, picture, gender or a personal description, may include Sensitive Personal Information; you can set your profile to "Private" at any time.

Supporting quotations

Personal identifiers: Such as name, business name, address, phone number, email, IP address, device information, information collected from cookies or other tracking technologies, government-issued identification, signature, and other information necessary to establish an account or profile.
Professional or employment information: Such as business information, job title, contact emails, phone numbers and taxpayer ID numbers.
Imported contact information: Such as name, address, phone number, images, email address or usernames associated with the contacts you import or enter manually.
Account profile information: Such as username, profile picture, gender, or personal description, which you add that may include Sensitive Personal Information. You can set your profile to "Private" at any time.
Device Information means data that can be automatically collected from any device used to access the Services. Such information may include, but is not limited to, your device type, your device’s network connections, your device’s name, your device IP address, information about your device’s web browser and internet connection you use to access the Services, geolocation information, and information about apps downloaded to your device.

Qualifications & exceptions

  • Imported contact information covers the contacts you import or enter, who are not the account holder.
  • Setting a profile to Private is stated as available at any time; what Private hides is not described here.

Not stated here

  • What "Private" changes about who can see the profile is not stated in this passage.

Data Access & Collection · Company practice

Financial, payment and transaction information

PayPal collects financial and payment details, including identity card numbers, government ID, bank account and routing numbers, credit and debit card information (issuer, card type, payment account number, CVV), income, IBAN information and the amounts you send or request. It also collects account balances, transaction history and details, online shopping cart and shopping activity, goods or services you considered on Partner and Merchant sites, shipping address and options, purchase history, seller and buyer information, order tracking and product information, and commercial information such as payout amounts, payor information and the record of the Services.

Supporting quotations

Records and financial information: Such as identity card numbers, government-issued identification, account header information, bank account and routing numbers, credit and debit card information, income, amount you send or request, your payment instrument, card, financial or funding account in connection with the Services, including issuer name, card type, country code, payment account number, CVV, username, and IBAN information.
Transaction and experience information: Such as account balances, transaction history and transaction details, online shopping cart information, transaction ID, shopping activity and goods or services considered on Partners and Merchants sites, shipping address, shipping options and associated costs when you check out, purchase history, seller information, such as seller name, industry and postal code, buyer information, purchase information, and order tracking and product information.
Commercial information: Such as payout amount, payor information, and the record of the Services.
Partners and Merchants means our partners and the merchants, partners or businesses that our Users transact with for the purpose of obtaining goods or services.

Qualifications & exceptions

  • Shopping activity and goods considered on Partner and Merchant sites are included in transaction and experience information.

Data Access & Collection · Company practice

Location data

PayPal collects geolocation data. GPS location may be collected with your consent if you have an account for financial Services, and IP-based location data is collected during your user experience or according to your mobile application settings.

Supporting quotations

Geolocation data: Such as Global Positioning System ("GPS"), which we may collect with your consent if you have an account for financial Services, and IP-based geolocation data during your user experience or based on your mobile application settings.

Qualifications & exceptions

  • GPS collection is stated to depend on your consent and on having an account for financial Services; IP-based location is described without a consent condition.

Data Access & Collection · Company practice

Usage, browsing and device information

PayPal collects information about how you use the Services and Sites: interactions with the Services, page response times, download errors, date and time of use, shopping history, IP-based location, page-load and page-view statistics, the websites you visited before coming to the Sites, and other usage and browsing information collected through Cookies. From your device it collects language settings, browser ID, device ID and type, cookie preferences, time zone, operating system, platform, screen resolution and similar information about your device settings, browser and internet connection, including data collected through Cookies or other tracking technologies.

Supporting quotations

Internet or network activity: Such as interactions with our Services, information about response time for web pages, download errors, date and time when you used the service, shopping history, location information, such as your IP address, statistics regarding how pages are loaded or viewed, the websites you visited before coming to the Sites, and other usage and browsing information collected through Cookies.
Information from your device: Such as language settings, browser ID, device ID, device type, cookie preferences, time zone, operating system, platform, screen resolution, and similar information about your device settings, device's web browser, and internet connection, and data collected from Cookies or other tracking technologies.
Cookies means tracking technologies such as cookies, pixel tags, web beacons, and widgets.
Sites means the websites, mobile apps, official social network platforms, or other online properties through which PayPal offers the Services and which has posted or linked to this Privacy Statement.

Data Access & Collection · Company practice

Biometric data used to authenticate you

PayPal may collect biometric data (voice identification, photo identification or face scans) when you consent in the user experience. It is used to authenticate you for certain actions on your account, such as verifying your identity before you access accounts and Services, recovering passwords, updating profile information, managing payments and payment methods, lifting account limitations and starting cryptocurrency transfers.

Supporting quotations

Biometric data: Such as voice identification, photo identification, or face scans, which we may collect when you consent in the user experience to authenticate you for certain actions related to your account, including, for example, to verify your identity before you access accounts and Services, recover passwords, update profile information, manage payments and payment methods, lift account limitations, and initiate cryptocurrency transfers.

Qualifications & exceptions

  • Collection is stated to follow consent given in the user experience.
  • The listed uses are introduced by "including, for example".

Data Access & Collection · Company practice

Call recordings and information you give when you contact PayPal

PayPal collects audio information such as call recordings when you talk to customer service. When you contact PayPal it also collects your survey responses, recorded and chat conversations, email correspondence, account or profile status, repayment history, voice identification, vulnerability-related information you provide, and information about other people if you choose to share it.

Supporting quotations

Audio, electronic, visual, or similar information: Such as call recordings when you talk to customer service.
Information you provide when you contact us: Such as your responses to surveys, recorded conversations, chat conversations with us, email correspondence with us, account or profile status, repayment history, voice identification, vulnerability-related information provided by you and information about others if you choose to share it with us.

Qualifications & exceptions

  • Information about others is collected only if you choose to share it.

Inference & Profiling · Company practice

Data PayPal infers about you

PayPal collects inferred data such as gender, income, browsing and purchasing habits, creditworthiness, fraud and risk assessment, and your preferences and shopping behavior. These inferences are drawn from your transactions and interactions with the Services, ads and offers, or with Partners and Merchants.

Supporting quotations

Inferred data: Such as gender, income, browsing and purchasing habits, creditworthiness, fraud and risk assessment, your preferences and shopping behavior, which we may infer based on your transactions and interactions with our Services, ads and offers or with our Partners and Merchants.

Data Access & Collection · Company practice

Where PayPal gets Personal Information besides you

PayPal may also obtain these categories of Personal Information from other sources: Excluded Services (including Venmo and PayPal Honey) and third parties, including service providers, Partners and Merchants, payment networks and processors, credit reporting agencies and credit databases, government entities, data brokers and financial institutions.

Supporting quotations

We may also obtain the above categories of Personal Information from the following categories of sources:
Excluded Services, including Venmo and PayPal Honey.
Third parties, including service providers, Partners and Merchants, payment partners, such as payment networks and processors, credit reporting agencies and public and private credit databases ("CRAs"), government entities, data brokers, and financial institutions.
Excluded Services means companies or separate brands, affiliates, or subsidiaries of PayPal, who process Personal Information in accordance with their own terms of service and separate privacy statements. Examples include Venmo, Honey Science LLC, Chargehound LLC, Paidy Inc., Swift Financial LLC, and Bill Me Later, Inc.

Qualifications & exceptions

  • The list of sources continues in the next section of the statement.

Data Access & Collection · Company practice

More sources: linked accounts, apps, affiliates and merchants

PayPal also obtains Personal Information from linked accounts you agree to link (social network, mail, bank, card or investment accounts), and while an account stays linked it periodically collects and processes the information you share until you unlink it, which you can do at any time. It also obtains information from third-party applications you choose to use (such as the Apple App Store, Google Play Store or social networking sites), from members of the PayPal corporate group, and from Partners and Merchants you shop with, which PayPal uses under this statement and the relevant PayPal user agreement.

Supporting quotations

Linked accounts, including non-financial or financial accounts, such as social network accounts, mail accounts, or bank, card, or investment accounts you agree to link to PayPal. You may unlink your linked accounts at any time. If you choose to link these accounts or share such information with us, we will periodically collect and process it until you unlink the account.
Third-party applications that you choose to use, including the Apple App Store, Google Play Store, or social networking sites.
Members of the PayPal corporate group from time to time, such as the PayPal family of companies listed in Our Contact Information.
When you shop on Partner and Merchant sites, the Partner or Merchant may disclose Personal Information with PayPal that we will use in accordance with this Privacy Statement and the relevant PayPal user agreement.
Partners and Merchants means our partners and the merchants, partners or businesses that our Users transact with for the purpose of obtaining goods or services.

Qualifications & exceptions

  • Collection from a linked account continues periodically until you unlink it.
  • Information from Partners and Merchants is used in accordance with this Privacy Statement and the relevant PayPal user agreement.

Use & Processing · Company practice

Why PayPal processes your Personal Information

PayPal may process Personal Information to provide the Services, for security and fraud prevention and to comply with law. It also uses it to let you take part in optional features such as syncing your contact list, personalizing content and offers, targeted advertising or connecting to a third-party platform. Some of these features are offered with an opt-out or need your consent, and you can withdraw consent at any time as described in the Your Data Protection Rights section.

Supporting quotations

We may process your Personal Information for a variety of reasons, including to provide our Services, for security and fraud prevention, and to comply with law. We also use Personal Information to allow you to participate in certain features that may be of interest to you, such as syncing your contact list to your account, personalizing content and offers, targeted advertising, or connecting to a third-party platform. Some of these features may be offered with an opt-out or require your consent to enable. You can withdraw your consent at any time, as described in Your Data Protection Rights.
We may collect Personal Information to:

Qualifications & exceptions

  • Which features need consent and which offer an opt-out is not specified in this passage.

Not stated here

  • This passage does not say which optional features rely on consent and which on opt-out.

Use & Processing · Company practice

Using information to provide the Services and process payments

PayPal may use Personal Information to provide the Services: to help you send, receive or request money, make payments, pay bills, administer purchases, display shipping options and costs at checkout, show your profile, account and payment information, prove that transactions were executed, assess your creditworthiness in connection with the Services, confirm your identity (including by electronic signature) and contact details, authenticate your access, and keep your account and financial information accurate and current.

Supporting quotations

Provide our Services. We may use Personal Information to help you send, receive or request money, initiate a payment, add monetary value to an account, pay a bill, administer your purchases, display shipping options and associated costs when you check out, show you your profile, account and payment information, send and receive transactions and prove that they have been executed, to assess your creditworthiness in connection with our Services, confirm your identity (also through the use of electronic signature) and your contact information, to authenticate your access to your account or profile and to confirm your account or profile and financial information are accurate and up to date.
Services refers to all PayPal-branded or unbranded payment, financial, and personalization products and solutions, including transactions, rewards, advertising (including PayPal Ads), PayPal Groups, Fastlane, Xoom, Pool, Hyperwallet, credit and financing (including Partner and Merchant offerings), cryptocurrency services offered by PayPal Digital Inc. (a PayPal affiliate company), merchant tools, and emerging financial technologies (including Fastlane), with the exception of Excluded Services.

Qualifications & exceptions

  • Creditworthiness assessment is described as part of providing the Services.

Use & Processing · Company practice

Visa+ and PayPal World payment matching

For Visa+, PayPal receives the recipient's name and payment information from Visa and from participating third-party digital wallets, to process and match Visa+ payment transactions between those wallets and PayPal. PayPal also uses information from third parties, including third-party wallets, payment networks and processors, to process PayPal World transactions.

Supporting quotations

For Visa+, we will receive the recipient's name and payment information from Visa and third-party Visa+ participating digital wallets for the purpose of processing and matching Visa+ payment transactions between participating digital wallets and PayPal.
We will use information from third parties, including third-party wallets, payment networks, and processors, to process PayPal World transactions.

Use & Processing · Company practice

Fastlane recognition and payment authorization checks

If you use Fastlane, PayPal may recognize you as a Fastlane user when you shop on participating Partner and Merchant sites and may prompt you to take part in interactions such as registering for a store or loyalty account with your Fastlane profile. PayPal will also use your Personal Information and payment method details to determine whether a payment made with Fastlane profile details is authorized by you and likely to be successfully authorized by the chosen payment method.

Supporting quotations

If you are using Fastlane, we may recognize you as a Fastlane user when you shop on participating Partner and Merchant sites, and we may prompt you to engage in participating Partner or Merchant interactions, such as registering for a store or loyalty account using your Fastlane profile. We will also use your Personal Information and payment method details to determine whether the payment you are making with a participating Partner or Merchant is authorized by you and likely to be successfully authorized by the payment method you choose to use when you make a purchase using details from your Fastlane profile.
Fastlane means the online tool whereby individuals can store their payment methods and other Personal Information with PayPal so that they can complete the checkout process faster, create a store or loyalty account, or facilitate other transactions at participating Partners and Merchants with payment card, contact information, shipping data or other data they save in their Fastlane profile as relevant to the specific interaction, participating Partners and Merchants, all without having to manually input payment method details and other Personal Information each time they check out.

Use & Processing · Company practice

Remembering contact details for digital receipts at PayPal Point of Sale

Buyers who use PayPal Point of Sale services (including Venmo Tap to Pay) may choose to give PayPal contact details so digital receipts can be sent. If you give your email address or mobile number to a Partner or Merchant using PayPal Point of Sale, PayPal may remember it for the next time you pay in a physical store of any merchant using PayPal Point of Sale with the same payment card, whether or not you bought from that merchant before, and pre-fill it in the receipt view.

Supporting quotations

Provide receipts in connection with PayPal Point of Sale (formerly Zettle by PayPal) services. For buyers using our PayPal Point of Sale services (including Venmo Tap to Pay), you may choose to provide us your contact details so that we can send you digital receipts. If you provide your e-mail address or mobile number to a Partner or Merchant who uses PayPal Point of Sale, we may remember your details for the next time you buy something from a Merchant who uses PayPal Point of Sale in its physical store, if you use the same payment card. This is regardless of whether you have previously bought something from this Merchant or not. This means that your e-mail address or mobile number will be pre-filled in the receipt view for your convenience the next time you buy something from a Merchant who uses PayPal Point of Sale in its physical store.

Qualifications & exceptions

  • Applies when you use the same payment card.
  • Applies across merchants that use PayPal Point of Sale, not only the merchant you gave the details to.

Use & Processing · Company practice

Improving the Services and sharing aggregated insights

PayPal may use Personal Information to develop new products and features, administer and secure the Services, and for customer analysis, internal operations such as troubleshooting, data analysis, testing, research and statistics. It may also use your transaction and experience data on an aggregated basis to generate business insights and may share those insights with third parties such as Partners and Merchants to help improve their products and services.

Supporting quotations

Manage, analyze and improve our Services. We may use Personal Information to develop new products and features, to administer our Services, to promote the safety and security of the Services, for customer analysis and internal operations (e.g., for troubleshooting) and procedures, data analysis, testing, research, and statistical purposes. We may also use your transaction and experience data on an aggregated basis to generate business insights. We may share those insights with third parties such as our Partners and Merchants to help improve their products and services.
Partners and Merchants means our partners and the merchants, partners or businesses that our Users transact with for the purpose of obtaining goods or services.

Qualifications & exceptions

  • Insights shared with third parties are stated to be generated from data on an aggregated basis.

Use & Processing · Company practice

Training AI models and automated decision making

PayPal may use Personal Information to train the artificial intelligence (AI) models that power its Services. It also uses Automated Decision Making to provide products and Services and to carry out risk analysis, fraud prevention and risk management to protect customers and the business, including preventing fraud against Partners and Merchants and strategic ventures. The statement points to the AI and Automated Decision Making section for more.

Supporting quotations

AI and Automated Decision Making. We may use Personal Information to train our artificial intelligence (AI) models that power our Services and help us deliver more secure, efficient, and personalized services. PayPal also uses Automated Decision Making to provide our products and Services, conduct risk analysis, fraud prevention and risk management to protect our customers and business, including to prevent fraud against our Partners and Merchants and strategic ventures. Please see AI and Automated Decision Making to learn more.

Qualifications & exceptions

  • AI training is stated as something PayPal "may" do with Personal Information.

Not stated here

  • This passage does not say whether you can opt out of AI training; see the dedicated section.

Cross-references

Sharing & Disclosure · Company practice

Credit checks and exchanges with credit reporting agencies

Under applicable law, PayPal will use and exchange Personal Information about you with credit reporting agencies (CRAs) to assess creditworthiness and product suitability, check your identity, trace and recover debts, and prevent fraud and criminal activity. The information may be supplied by CRAs to other organizations to perform similar checks, trace your whereabouts and recover debts you owe.

Supporting quotations

Manage your creditworthiness. Pursuant to applicable law, we will use and exchange Personal Information about you with CRAs to assess creditworthiness and product suitability, check your identity, trace and recover debts, and prevent fraud and criminal activity. This information may be supplied by CRAs to other organizations to perform similar checks and to trace your whereabouts and recover debts that you owe.

Qualifications & exceptions

  • Stated to apply pursuant to applicable law.
  • Onward use by other organizations is described as performing similar checks and recovering debts.

Linking & Identification · Company practice

Linking activity across your transactions and services

If you use the Services without a PayPal account, PayPal may associate those transactions with your PayPal account if you later set one up. If you use Fastlane, Venmo or PayPal Honey, PayPal may associate information about your transactions and experiences across these Services to personalize content and offers and improve your use of the PayPal Services.

Supporting quotations

Associate information about you. If you use our Services without a PayPal Account, we may associate such transactions with your PayPal account if you later establish an account. If you use one of the following—Fastlane, Venmo, and PayPal Honey—we may associate information about your transactions and experiences using these Services to personalize content and offers and improve your use of the PayPal Services.
Fastlane means the online tool whereby individuals can store their payment methods and other Personal Information with PayPal so that they can complete the checkout process faster, create a store or loyalty account, or facilitate other transactions at participating Partners and Merchants with payment card, contact information, shipping data or other data they save in their Fastlane profile as relevant to the specific interaction, participating Partners and Merchants, all without having to manually input payment method details and other Personal Information each time they check out.

Qualifications & exceptions

  • Association with a later-created account applies to transactions made without an account.
  • Venmo and PayPal Honey are Excluded Services; their data is linked here for personalization.

Use & Processing · Company practice

Marketing, events and communications

PayPal may use Personal Information to give you information and news and to market its Services, including where it partners with others to offer similar services or to market about Partners and Merchants. When it associates information about you, it also uses that information to better understand and cater to your interests. It may use Personal Information to facilitate your participation in competitions, offerings and events, and to communicate with you, for example to answer a customer service question.

Supporting quotations

Market our Services. We may use Personal Information to provide you with information, news, and market our Services including where we partner with others to offer similar services to market about our Partners and Merchants. We use Personal Information, including when we associate information about you, to better understand and cater to your interests.
Competitions, Offerings and Events. We may use Personal Information to facilitate your participation in competitions, offerings, and events.
Communicate with you. We may use your Personal Information to communicate with you, such as answering a question you sent to our customer service team.
Partners and Merchants means our partners and the merchants, partners or businesses that our Users transact with for the purpose of obtaining goods or services.

Use & Processing · Company practice

Using your contacts and connecting third-party accounts

PayPal may use Personal Information to help you find and connect your contacts, improve payment accuracy and suggest connections with people you may know. By giving PayPal information about your contacts, you certify that you have permission to provide it for the purposes in this statement. PayPal may also use Personal Information to connect to a third-party account, such as a social network account or a financial institution, when you link it to PayPal or link PayPal to another institution, directly or through an aggregator.

Supporting quotations

Process information about your contacts. We may use Personal Information in order to make it easy for you to find and connect your contacts, improve payment accuracy and suggest connections with people you may know. By providing us with information about your contacts you certify that you have permission to provide that information to PayPal for the purposes described in this Privacy Statement.
Create an account connection between your account and a third-party account or platform. We may use Personal Information to connect with a third-party account, such as your social network account to facilitate payment transactions or a financial institution when you link an account to PayPal or link your PayPal account to another financial institution, directly or through the use of an aggregator.

Qualifications & exceptions

  • You certify you have permission to give PayPal your contacts' information.

Use & Processing · Company practice

Using location to personalize and secure the Services

If you agree to let PayPal track your precise geolocation, it can customize the Services with location-based options, functionality, offers, ads and search results. Even if you do not allow precise tracking, PayPal may use your address to send location-based options recommended by nearby businesses. PayPal also uses precise geolocation to enhance the security of the Sites and Services, and states that it collects precise geolocation data from Users while they are logged into their financial account.

Supporting quotations

Send you locally relevant options and for security. If you agree to let us track your precise geolocation, we can customize our Services by personalizing language and content such as providing location-based options, functionality or offers, ads and search results. Even if you don't allow us to track your precise location, we may still use your address to send you location-based options recommended by businesses that are near your address. In addition, we will use precise geolocation to enhance the security of the Sites and Services. We collect precise geolocation data from Users while they are logged into their financial account.
Users means other account holders and non-account holders of the PayPal Services.

Qualifications & exceptions

  • Personalization from precise location depends on your agreement; address-based local options can continue without it.
  • Security use of precise geolocation is not described as depending on consent.

Use & Processing · Company practice

Personalization, product recommendations and remembered preferences

PayPal may use Personal Information to give you offers and rewards, show ads and personalize your experience, including using insights from purchases and other behavior on its own and Partner or Merchant websites and apps to develop recommendations about products, brands, sizes, preferences and styles, which it provides to Partners and Merchants so they can recommend relevant products to you. It may also remember preferences such as your preferred payment method or whether you want digital receipts by email or text.

Supporting quotations

Personalize your experience and develop product recommendations. We may use Personal Information to provide you offers and rewards, show ads or otherwise personalize your experience, such as using insights from purchases and other behaviors on our and our Partner or Merchant websites or apps to develop recommendations about products, brands, sizes, preferences and styles that we provide to our Partners and Merchants so that they can recommend relevant products to you.
Remember your preferences. We may remember your preferences for the next time you use the Services, such as which of your payment methods you prefer or whether you choose to receive digital receipts via email or text when you checkout.
Partners and Merchants means our partners and the merchants, partners or businesses that our Users transact with for the purpose of obtaining goods or services.

Qualifications & exceptions

  • Recommendation insights are provided to Partners and Merchants.

Data Access & Collection · Company practice

Cookies and tracking technologies, including on third-party sites

When you use the Services, and also other third-party sites and services, PayPal might use tracking technologies such as cookies. The statement refers to the cookies section for details.

Supporting quotations

Website cookies and trackers. When you use Services, as well as other third-party sites and services, we might use tracking technologies like cookies. See Our Use of Cookies and Tracking Technologies for more details.
Cookies means tracking technologies such as cookies, pixel tags, web beacons, and widgets.

Qualifications & exceptions

  • Tracking is described as possible on third-party sites and services as well as on PayPal's own.

Not stated here

  • This passage does not list which third-party sites or services are involved.

Legal Rights & Agreement Rules · Context

Lawful bases for processing

Some jurisdictions require a lawful basis for processing Personal Information. The statement points to a separate section on lawful bases under the EU and UK General Data Protection Regulation and says PayPal applies the same lawful bases under other privacy laws that have equivalent requirements.

Supporting quotations

Please note that certain jurisdictions require providing a lawful basis for processing Personal Information. See Our Lawful Basis for Processing Personal Information for more information about our lawful basis for processing Personal Information under the EU and UK General Data Protection Regulation. We apply the same lawful bases for processing under other privacy laws that have equivalent requirements.

Qualifications & exceptions

  • The "same lawful bases" rule applies to other privacy laws that have equivalent requirements.

Not stated here

  • The lawful bases themselves are in a separate section.

Sharing & Disclosure · Company practice

Who PayPal discloses Personal Information to

PayPal discloses Personal Information to service providers and third parties, including those in the payment network, to help provide the Services, protect customers from risk and fraud, market its products and comply with legal obligations. It may use and disclose Sensitive Personal Information if permitted to carry out legitimate business activities and as allowed by law, for example with consent or for purposes that do not require offering a right to limit use and disclosure of Sensitive Personal Information. The categories of service providers follow.

Supporting quotations

We disclose your Personal Information with service providers and third parties, including those participating in the payment network, to help us provide Services, protect our customers from risk and fraud, market our products, and comply with legal obligations. We may use and disclose your Sensitive Personal Information if permitted to carry out legitimate business activities and as allowed by law (e.g., with consent or for certain purposes that do not require offering a right to limit use and disclosure of Sensitive Personal Information).
We may disclose Personal Information with the following categories of service providers:

Qualifications & exceptions

  • Use and disclosure of Sensitive Personal Information is limited to what is permitted by law and legitimate business activities.

Sharing & Disclosure · Company practice

Disclosure to service providers acting for PayPal

PayPal may disclose Personal Information to service providers that work at its direction and on its behalf to perform outsourced services, such as AI providers, fraud prevention, bill collection, shipping, payment processing, marketing, research, compliance, audits, corporate governance, communications, technical and design services, IT development, maintenance, hosting and customer service support. PayPal says its contracts require these providers to use your information only in connection with the services they perform for PayPal and not for their own benefit. Depending on your country or region, a link to the list of third-party service providers, with purposes and types of information disclosed, may be available.

Supporting quotations

Service providers. We may disclose Personal Information with our service providers that operate at our direction and on our behalf to perform services we outsource to them, such as AI providers, fraud prevention, bill collection, shipping, processing payments, marketing, research, compliance, audits, corporate governance, communications, technical and/or design services, IT development, maintenance, hosting and support customer service operations. Our contracts dictate that these service providers only use your information in connection with the services they perform for us and not for their own benefit. Under applicable data protection laws, depending upon the country/region in which you reside, you may find a link to those [third-party service providers](https://www.paypal.com/kr/legalhub/row-third-parties-list) including the purpose of disclosure, types of information disclosed, etc.

Qualifications & exceptions

  • The use restriction is stated as a contractual term PayPal imposes on the providers.
  • The linked provider list depends on the country or region where you live.

Not stated here

  • The provider list itself is not part of this statement.

Sharing & Disclosure · Company practice

Disclosure within the PayPal group and to Excluded Services

PayPal may disclose Personal Information to members of the PayPal corporate group for purposes including (but not limited to) providing the Services you requested or authorized, managing risk, detecting and preventing illegal and fraudulent acts and policy or agreement violations, and managing the availability and connectivity of PayPal products and communications. It may disclose Personal Information to Excluded Services, including Venmo, to provide you with the Services, personalize your use of the Services and manage its business, and to PayPal Honey to manage its Rewards program.

Supporting quotations

We may also disclose Personal Information with the following categories of third parties:
Members of the PayPal corporate group from time to time, such as the PayPal family of companies listed in Our Contact Information, for purposes including (but not limited to) providing the Services you have requested or authorized, managing risk, helping us to detect and prevent potentially illegal and fraudulent acts and other violations of our policies and agreements, and helping us to manage the availability and connectivity of PayPal products, services, and communications.
Excluded Services. We may disclose Personal Information to the Excluded Services (as defined below), including Venmo to provide you with the Services, personalize your use of the Services, and to manage our business, or with PayPal Honey to manage our Rewards program.
Excluded Services means companies or separate brands, affiliates, or subsidiaries of PayPal, who process Personal Information in accordance with their own terms of service and separate privacy statements. Examples include Venmo, Honey Science LLC, Chargehound LLC, Paidy Inc., Swift Financial LLC, and Bill Me Later, Inc.

Qualifications & exceptions

  • The corporate-group purposes are stated as "including (but not limited to)", so the list is not exhaustive.
  • Excluded Services follow their own terms and separate privacy statements.

Legal Rights & Agreement Rules · Company practice

Disclosure to authorities and others required by law

PayPal may disclose Personal Information to authorities (courts, governments, law enforcement and regulators) if compelled by a subpoena, court order or similar process, when necessary to comply with law, or where reasonably necessary to prevent physical harm or financial loss, report suspected illegal activity or investigate violations of the relevant agreement, or as otherwise required by law. It may also be required to give other third parties information about your use of the Services, for example to comply with card association rules, enforce its user agreement or prevent harm or illegal activity. In some cases PayPal may not be permitted to tell you about such disclosures.

Supporting quotations

Authorities. We may disclose Personal Information with authorities if compelled by a subpoena, court order, or similar legal procedure, when necessary to comply with law, or where the disclosure of Personal Information is reasonably necessary to prevent physical harm or financial loss, report suspected illegal activity, or investigate violations of the relevant agreement, or as otherwise required by law. Such authorities include courts, governments, law enforcement, and regulators. We may also be required to provide other third parties information about your use of our Services, for example, to comply with card association rules, to investigate or enforce violations of our user agreement, or to prevent physical harm or illegal activity. In some cases, PayPal may not be permitted to provide you with information about such disclosures.

Qualifications & exceptions

  • Disclosure is not limited to compelled requests: it also covers cases where it is "reasonably necessary" to prevent harm, report suspected illegal activity or investigate agreement violations.
  • PayPal may be barred from telling you about a disclosure.

Sharing & Disclosure · Company practice

Disclosure to partner financial institutions and payment networks

PayPal may disclose Personal Information to financial institutions to jointly offer a product, such as PayPal Credit, PayPal Savings, PayPal Cashback Mastercard and PayPal Extra Mastercard. It may disclose Personal Information to payment networks and processors to facilitate payment processing or add cards to your electronic wallet. For payment transactions, your Personal Information is shared with the payment provider for the participating Partner or Merchant so the payment can be processed, and that provider may be PayPal or a third-party payment provider.

Supporting quotations

Other financial institutions. We may disclose Personal Information with financial institutions to jointly offer a product, such as PayPal Credit, PayPal Savings, PayPal Cashback Mastercard and PayPal Extra Mastercard.
Payment networks and processors. We may disclose Personal Information with payment networks and processors to facilitate payment processing or to add cards to your electronic wallet. For payment transactions, your Personal Information will be shared with the provider of the payment services for the participating Partner and Merchant to enable the processing of the payment transaction. The payment provider for the Partner and Merchant may be PayPal or a third party payment provider.
Partners and Merchants means our partners and the merchants, partners or businesses that our Users transact with for the purpose of obtaining goods or services.

Qualifications & exceptions

  • The payment provider for a Partner or Merchant may be a third party rather than PayPal.

Sharing & Disclosure · Company practice

Disclosure to fraud, identity, credit and debt collection agencies

PayPal may disclose Personal Information to fraud prevention and identity verification agencies and other companies across industries to help detect activity that suggests fraud. It may disclose Personal Information to credit reporting and debt collection agencies to collect overdue debts through a third party. Those parties' own privacy notices apply to information you share directly with them, and they may report your unpaid debts to credit reporting agencies, which may affect your creditworthiness or ability to get credit later.

Supporting quotations

Fraud prevention and identity verification agencies. We may disclose Personal Information with fraud prevention and identity verification agencies and other companies across industries to assist in detecting activities suggestive of fraud.
Credit reporting and debt collection agencies. We may disclose Personal Information with such agencies to collect unpaid overdue debts through a third party such as a debt collection agency. Please be aware that these parties' privacy notices apply to the processing of Personal Information that you share directly with them, and they may report your unpaid debts to CRAs which may affect your creditworthiness or ability to secure future credit.

Qualifications & exceptions

  • A debt report to credit reporting agencies is described as something the collection agency may do.

Sharing & Disclosure · Company practice

What other PayPal users can see about you

PayPal may disclose Personal Information to other PayPal account holders to complete a payment transaction where necessary, including when you interact with ads or offers relating to its Partners and Merchants. The information that may be shared includes your username, profile photo, first and last name, email, city and phone number in accordance with your account settings. Under your account settings or PayPal.Me preferences, other account holders (including users of Venmo or third-party payment networks and processors) can see information to help facilitate a transaction, for example when a User searches for your account to send money. Depending on your settings this may include username, profile photo, name, email, phone number, city and state, month and year your account was created, and anything you add to the details or "about you" section.

Supporting quotations

Other PayPal account holders to complete a transaction. We may disclose Personal Information with other PayPal account holders to complete a payment transaction, where necessary. This also applies when you interact with ads or offers we provide relating to one of our Partners and Merchants. The Personal Information that may be shared with other PayPal account holders includes your username, profile photo, first and last name, email, city, and phone number in accordance with your account settings.
Other Users in accordance with your account settings. In accordance with your [account settings](https://www.paypal.com/us/myaccount/privacy/profiles/search) or PayPal.Me preferences, your Personal Information can be seen by other account holders (such as users of Venmo or third party payment networks and processors) to help facilitate a transaction. For example, as part of the send money feature, a User may search for your account to initiate a payment. Based on your account settings, the information shown to other Users may include your username, profile photo, first and last name, email, phone number, city and state, month and year of PayPal account creation, and any additional information you include in the details or "about you" section of your account.
Users means other account holders and non-account holders of the PayPal Services.

Qualifications & exceptions

  • What is shown depends on your account settings and PayPal.Me preferences.

Sharing & Disclosure · Company practice

Business profile information shown to other Users

If you have a business profile, PayPal displays a payment link and discloses certain information to other Users: your name or business name, profile picture or logo, the city associated with your account, total time selling with PayPal, total number of followers, and the number of unique Users who paid you in the past year. You can choose to display more, such as street address, phone number, email and website, under your business profile settings.

Supporting quotations

Other Users if you have a business profile. If you have a business profile, we will display a payment link and disclose certain information about you to other Users, including your name or business name, profile picture or logo, and the city associated with your PayPal account, as well as total time selling with us, total number of followers, and total number of unique Users that have paid you in the past year. If you have a business profile, you can choose to display other information to other Users, such as your street address, phone number, email and website, in accordance with your business profile settings.
Users means other account holders and non-account holders of the PayPal Services.

Qualifications & exceptions

  • Additional details are shown only if you choose to display them in your business profile settings.

Sharing & Disclosure · Company practice

Disclosure to your agent and to account-linking parties

PayPal may disclose Personal Information to your agent or legal representative, such as the holder of a power of attorney you grant or a guardian you appoint. If you choose to link your PayPal account with a third-party account, PayPal may disclose Personal Information to third parties who facilitate that linking.

Supporting quotations

Your agent or legal representative. We may disclose Personal Information to your agent or legal representative, such as the holder of a power of attorney that you grant, or a guardian appointed by you.
Linked accounts. If you choose to link your PayPal account with a third-party account, we may disclose Personal Information with third-parties who facilitate that linking.

Sharing & Disclosure · Company practice

Disclosure to Partners and Merchants involved in a transaction

PayPal may disclose Personal Information such as your user name, address, phone number and email address to Partners and Merchants, their service providers and others involved in a transaction so the purchase and delivery can happen. Examples include online purchases, saving payment information with Fastlane, paying other Users, paying through Visa+ or PayPal World, returning goods, and payment-network transactions. If you choose to interact with participating Partners and Merchants, PayPal discloses your profile information to them and their service providers and facilitates the transaction or shopping experience, including when you interact with their ads or offers. Once information is shared with them, their own privacy policies and procedures govern how they handle it. PayPal may also disclose information to Partners and Merchants so they can use the Services, for example checking whether you are a PayPal user and showing a recommended payment method at checkout.

Supporting quotations

Partners and Merchants, their service providers and others involved in a transaction. We may disclose Personal Information with these parties involved in a transaction such as your user name, address, phone number, email address to enable the purchase and delivery of the goods in the transaction. For example, when you use the Services to initiate online purchases, save your payment information with Fastlane, pay other Users using the Services, pay recipients using Visa+, pay using PayPal World, return goods, or when you participate in transactions through the payment network, we may disclose information about you and your account or Fastlane profile with the other parties (or their service providers) involved in processing your transactions. If you choose to interact with participating Partners and Merchants, we will disclose your profile information with the participating Partners and Merchants and their service providers, and facilitate your transaction, shopping experience or other interaction with participating Partners and Merchants sites. This also applies when you interact with ads or offers we provide relating to one of our Partners and Merchants. Please note that once Personal Information is shared with Partners and Merchants (or their service providers) involved in a transaction, the handling of your Personal Information by the Partners and Merchants (or their service provider) is subject to the Partners' and Merchants' own privacy policies and procedures.
We may also disclose Personal Information to Partners and Merchants to enable their use of our Services to facilitate your transactions. For example, when you visit a participating Partners and Merchants site or app, the Partners and Merchants can check whether you are a user of PayPal services and present a recommended payment method to you to simplify your checkout process.
Partners and Merchants means our partners and the merchants, partners or businesses that our Users transact with for the purpose of obtaining goods or services.
Fastlane means the online tool whereby individuals can store their payment methods and other Personal Information with PayPal so that they can complete the checkout process faster, create a store or loyalty account, or facilitate other transactions at participating Partners and Merchants with payment card, contact information, shipping data or other data they save in their Fastlane profile as relevant to the specific interaction, participating Partners and Merchants, all without having to manually input payment method details and other Personal Information each time they check out.

Qualifications & exceptions

  • After disclosure, the Partner or Merchant's own privacy practices apply, not this statement.

Sharing & Disclosure · User right or choice

Sharing for personalized shopping, with an opt-out in the United States

PayPal may disclose Personal Information to Partners and Merchants that you and PayPal interact with so both can personalize services and offers, for example products, sizes, preferences and styles PayPal thinks you will like. In the United States, unless law requires consent, PayPal discloses Personal Information collected after November 27, 2024 (or earlier if you consent) for personalized shopping experiences. You can opt out by logging into your PayPal account and editing your preferences in the Data and Privacy setting. If you opt out, PayPal continues to disclose Personal Information as needed to complete transactions you start, but not to Partners and Merchants for personalized shopping.

Supporting quotations

For our PayPal customers, we may also disclose your Personal Information to Partners and Merchants that you and we interact with to help ourselves and Partners and Merchants personalize services and offers so you can have a better and more relevant experience. Personal Information we disclose includes, for example, products, sizes, preferences, and styles we think you'll like.
Unless we are required by law to obtain your consent, we disclose Personal Information collected from you after November 27, 2024 (or from earlier if you consent) for personalized shopping experiences in the United States.
To opt-out of disclosures of Personal Information to Partners and Merchants for personalized shopping experiences, log into your PayPal account and edit your preferences in the Data and Privacy setting.
If you opt-out, we will continue to disclose your Personal Information as necessary to complete transactions you initiate but will not disclose Personal Information to Partners and Merchant for personalized shopping experiences.

Qualifications & exceptions

  • The United States rule applies to information collected after November 27, 2024, or earlier with your consent.
  • Where law requires consent, the "unless" clause applies instead.
  • An opt-out does not stop disclosures needed to complete transactions you initiate.

Sharing & Disclosure · Company practice

Advertising platforms, security providers and Google services

PayPal may disclose Personal Information to other third parties, for example advertising platforms at your direction, security service providers that help prevent unauthorized access, and parties it cooperates with for marketing to show you ads and offers tailored to your interests. The privacy notices of those parties apply to information you share directly with them. PayPal gives examples: it uses Google reCAPTCHA in its mobile application to prevent misuse, and may use Google Address Autofill to check addresses, and Google's privacy policy and terms apply to what you share with Google. For marketing it may use third parties to identify and display tailored ads and track interactions with them, which are governed by those parties' privacy policies.

Supporting quotations

Other third parties. We may disclose Personal Information with other third parties. For example, we disclose Personal Information to advertising platforms, at your direction. We also disclose Personal Information to security service providers to help prevent unauthorized access to our Services. This further applies to parties we cooperate with for marketing purposes, in particular to show you ads and offers tailored to your interests. Please be aware that these parties' privacy notice applies to the Personal Information that you share directly with them. For example, we use Google's reCAPTCHA to prevent misuse of our Services, when you access our mobile application. We may also use Google Address Autofill to ensure accuracy of your address. Google's [Privacy Policy](https://www.google.com/intl/en/policies/privacy/) and [Terms of Use](https://www.google.com/intl/en/policies/terms/) apply to the Personal Information you share with them. For marketing purposes, we may use third parties to identify and display ads on our Services tailored to your interests and track interactions with these ads. Your interactions with such ads are governed by their Privacy Policy.

Qualifications & exceptions

  • Advertising-platform disclosure is stated to be "at your direction".
  • Ad tracking is carried out by third parties PayPal uses for marketing.

Sharing & Disclosure · Company practice

Disclosure to a buyer in a business transfer

PayPal may disclose Personal Information to an interested or actual buyer in connection with a business transfer, such as a merger, purchase or sale of all or part of its business or assets, including receivables and debts, under appropriate data protection terms. If PayPal or a significant portion of its assets is acquired by a third party, Personal Information may also be disclosed to that party.

Supporting quotations

Buyers in connection with business transfer. We may disclose Personal Information with a buyer in connection with a business transfer. For example, if we are involved in a merger, a purchase, or a sale of all or part of our business or assets, including receivables and debts, we may disclose, under appropriate data protection terms, your Personal Information to an interested or actual buyer of those business or assets. If PayPal or a significant portion of PayPal's assets are acquired by a third party, Personal Information may also be disclosed to that third party.

Sharing & Disclosure · Company practice

Disclosure of Sensitive Personal Information

PayPal may disclose Sensitive Personal Information as appropriate to carry out legitimate business activities, as you have consented to, or as allowed by law. The statement refers to its "Sale" and "Sharing" sections for additional information for individuals in the United States.

Supporting quotations

We may disclose your Sensitive Personal Information as appropriate to carry out legitimate business activities, as you have consented to or as allowed by law. Please also see "Sale" and "Sharing" of Personal Information for additional information for individuals in the United States.

Qualifications & exceptions

  • The three bases (legitimate business activities, your consent, allowed by law) are alternatives joined by "or".

Retention & Deletion · Company practice

How long PayPal keeps Personal Information

PayPal keeps Personal Information for as long as needed or permitted for the purpose it was collected and consistent with applicable law. Information used for the ongoing relationship between you and PayPal is stored for the duration of the relationship plus 10 years, or the period required by applicable local law once the relationship ends, unless PayPal needs to keep it longer to the extent applicable law permits.

Supporting quotations

We retain Personal Information for as long as needed or is permitted in context of the purpose for which it was collected and consistent with applicable law.
The criteria used to determine our retention period is as follows:
Personal Information used for the ongoing relationship between you and PayPal is stored for the duration of the relationship plus a period of 10 years or such period as mandated by any applicable local law once our relationship comes to an end, unless we need to keep it longer to the extent permitted by applicable law, such as:

Qualifications & exceptions

  • The 10-year period is the default; local law can mandate a different period.
  • PayPal may keep information longer where applicable law permits, for the reasons listed next.

Retention & Deletion · Restriction or exception

Reasons PayPal may keep information longer

PayPal may keep Personal Information longer when consistent with a legal obligation or permitted by law (for example under bankruptcy laws and anti-money laundering obligations), and in connection with litigation, investigations, audit and compliance practices or to protect against legal claims. Where retention is advisable for those reasons, PayPal says it keeps information for the least amount of time necessary.

Supporting quotations

When consistent with a legal obligation to which we are subject, or when permitted under applicable law, such as under applicable bankruptcy laws and AML obligations.
In connection with litigation, investigations, audit and compliance practices, or to protect against legal claims.
We retain Personal Information for the least amount of time necessary where retention is advisable in light of litigation, investigations, audit and compliance practices, or to protect against legal claims.

Qualifications & exceptions

  • The examples of laws given (bankruptcy, AML) are introduced with "such as".

Retention & Deletion · Company commitment

Biometric data retention limit

PayPal keeps biometric data for as long as needed or permitted for the purpose it was collected and no more than 3 years after your account closes, unless applicable law requires otherwise.

Supporting quotations

We retain biometric data for as long as needed or permitted given the purpose for which it was collected and no more than 3 years after your account closes, unless otherwise required by applicable law.

Qualifications & exceptions

  • Applicable law can require a different period.

Cross-references

  • narrows (model-proposed): How long PayPal keeps Personal Information — narrows: The general rule keeps relationship information for the relationship plus 10 years; biometric data has its own shorter stated limit of no more than 3 years after the account closes, unless law requires otherwise.

Use & Processing · Company practice

Automated decisions about risk, fraud and creditworthiness

PayPal uses Automated Decision Making technology to make assessments or decisions, including about risk, fraud and creditworthiness, where permitted and in accordance with applicable law. The technology may use profiling to evaluate personal aspects of you, including analyzing or predicting your economic situation, reliability or behavior, for example whether you show traits suggesting credit or financial risk, money laundering or fraud, that conflict with what you submitted, or suggest you hid your real identity. If PayPal decides you pose a credit, fraud, money laundering or other risk, it may refuse new services, stop services you currently use, or limit or restrict them. Users may exercise rights related to Automated Decision Making as described in Your Data Protection Rights.

Supporting quotations

We may process your Personal Information using AI and/or Automated Decision Making technology under the circumstances described below:
Automated Decision Making. PayPal uses Automated Decision Making technology to make assessments or decisions, including related to risk, fraud and creditworthiness, where permitted and in accordance with applicable law. Our Automated Decision Making technology may use profiling techniques to evaluate personal aspects about you, including to analyze or predict your economic situation, reliability and/or behavior. This enables us to assess, for example, whether you display traits indicating possible credit or financial risk, money laundering or fraudulent activity, that are inconsistent with any submissions you have made to us, or that suggest you have hidden your real identity. In making an Automated Decision, PayPal may process Users’ Personal Information. If we determine that you pose a credit, fraud, money laundering or other risk, we may refuse to provide new services to you, stop providing services you currently use, or place limits or restrictions on the services you use. Users may exercise rights related to Automated Decision Making, as described in Your Data Protection Rights.
Profiling means analysis of an individual’s personality, behavior, interest and habits to make predictions or decisions about them, including like terms under applicable laws.

Qualifications & exceptions

  • Applies "where permitted and in accordance with applicable law".
  • Consequences listed are things PayPal "may" do.

Use & Processing · Company practice

Agentic AI tools and the information they can access

PayPal, directly or through trusted partners, may give you access to Agentic AI Tools that operate with a degree of autonomy: they perform tasks, make recommendations and can initiate actions on your behalf while learning from your interactions, using generative AI. When you use them, they have access to your Personal Information, including queries, preferences, interests, purchase history and payment information. PayPal says the tools are not designed to make decisions with legal or similarly significant effects (legal, medical, financial or employment) and you must not use them for that purpose; they provide general assistance and insights, and you should not rely on them in place of your own judgment.

Supporting quotations

Agentic AI. PayPal is committed to offering innovative and personalized experiences, and we may, directly or through our trusted partners, provide you with access to Agentic AI tools (“Agentic AI Tools”). These AI tools are designed to operate with a degree of autonomy, enabling them to perform tasks, make recommendations, and even initiate actions on your behalf, all while learning from your interactions. Agentic AI Tools leverage generative AI technology to enhance your experience on the PayPal platform.
We encourage you to carefully consider the recommendations and actions of Agentic AI Tools. Our Agentic AI Tools are not designed to make decisions that have legal or similarly significant effects, such as decisions with legal, medical, financial, or employment implications, and you must not use (or attempt to use) them for any such purpose. These tools are intended only to provide general assistance and insights, and you should not rely on them to replace your own judgement and expertise.
Agentic AI Tools require access to certain information to function effectively. When you use these tools, they will have access to your Personal Information, including queries, preferences, interests, purchase history, and payment information.

Qualifications & exceptions

  • The tools may be provided directly or through PayPal's trusted partners.
  • You are told not to use the tools for decisions with legal or similarly significant effects.

Data Access & Collection · Company practice

Cookies PayPal and its partners use, and why

When you interact with the Services, open PayPal emails or visit a third-party website where PayPal provides Services, PayPal and its partners use Cookies to give you access to the Sites, Services, applications and tools, recognize you, customize your online experience and content (including interest-based advertising), run analytics, reduce risk, prevent fraud, and promote trust and safety. PayPal uses Cookies to collect your device information and internet activity information and to generate inferences as described earlier in the statement.

Supporting quotations

When you interact with our Services, open email we send you, or visit a third-party website for which we provide Services, we and our partners use Cookies to grant you access to our Sites, Services, applications and tools, recognize you as a user, customize your online experiences and online content, including to serve you interest-based advertising, perform analytics, mitigate risk and prevent potential fraud, and promote trust and safety across our Services. We use Cookies to collect your device information, internet activity information, and generate inferences as described above.
Cookies means tracking technologies such as cookies, pixel tags, web beacons, and widgets.
Device Information means data that can be automatically collected from any device used to access the Services. Such information may include, but is not limited to, your device type, your device’s network connections, your device’s name, your device IP address, information about your device’s web browser and internet connection you use to access the Services, geolocation information, and information about apps downloaded to your device.

Qualifications & exceptions

  • Cookies are used on PayPal's own Sites and also in emails and on third-party websites where PayPal provides Services.
  • Cookie use is by PayPal "and our partners".

Sharing & Disclosure · Company practice

Cookie security and third-party cookies from service providers

Where appropriate, PayPal puts security measures in place to prevent unauthorized access to its Cookies, and a unique identifier ensures that only PayPal and its authorized service providers can access Cookie data. PayPal may use authorized service providers to serve you relevant ads on its Services and elsewhere on the internet; these providers may place their own Cookies on your device through the Services (third-party Cookies) and may collect information that helps identify your device, such as IP address or other unique device identifiers.

Supporting quotations

Where appropriate, security measures are set in place to prevent unauthorized access to our Cookies and similar technologies. A unique identifier ensures that only we and/or our authorized service providers have access to Cookie data.
Service providers are companies that help us with various aspects of our business, such as Sites operations, Services, applications, advertisements and tools. We may use some authorized service providers to help us to serve you relevant ads on our Services and other places on the internet. These service providers may also place Cookies on your device via our Services (third-party Cookies). They may also collect information that helps them identify your device, such as IP-address or other unique device identifiers.

Qualifications & exceptions

  • Security measures are described as set in place "where appropriate".
  • Third-party Cookies are placed by service providers, not only by PayPal.

Data Access & Collection · Restriction or exception

Declining Cookies can limit the Services

Certain features of the Services and Sites are only available through Cookies. If you disable or decline Cookies through your device or browser settings, your use of the Sites and Services may be limited or not possible.

Supporting quotations

Certain aspects and features of our Services and Sites are only available through the use of Cookies, so if you choose to disable or decline Cookies through your device or browser settings, your use of the Sites and Services may be limited or not possible.

Data Access & Collection · Company practice

Do Not Track signals are not honored

Some browsers have a "Do Not Track" setting that lets you opt out of being tracked by advertisers and some third parties. PayPal says many of its services will not function without tracking data, so it does not respond to Do Not Track settings.

Supporting quotations

Some web browsers have an optional setting called “Do Not Track” (“DNT”) that lets you opt-out of being tracked by advertisers and some third parties. Because many of our services won’t function without tracking data, we do not respond to DNT settings.

Data Access & Collection · Procedure

Where to learn more and opt out of this kind of tracking

For more on how PayPal uses cookies, the statement points to its separate Statement on Cookies and Tracking Technologies. To learn how to opt out of this kind of tracking technology, it points to the About Ads opt-out site.

Supporting quotations

If you want to know more about how we use cookies, please review our [Statement on Cookies and Tracking Technologies](https://www.paypal.com/legalhub/cookie-full). To learn how to opt-out of this kind of tracking technology, visit [About Ads](https://optout.aboutads.info/?c=2&lang=EN).

Not stated here

  • The linked cookie statement and the About Ads site are not part of the analyzed text.

Legal Rights & Agreement Rules · User right or choice

Privacy rights depend on where you live; no penalty for using them

Depending on the country you live in, and subject to exceptions and differences among laws, you may have certain rights about how your Personal Information is collected, stored, used and shared. PayPal says it will not discriminate against you, deny services, charge different prices or provide a different level of service solely because you exercise your privacy rights. Some personalized services for PayPal customers may not be as personalized if you limit the Personal Information you share.

Supporting quotations

Under applicable data protection laws, depending upon the country in which you reside, and subject to applicable exceptions and definitional differences among various laws, you may have certain rights about how your Personal Information is collected, stored, used and shared.
Whether you decide to exercise your privacy rights or not, we will not discriminate or deny you services, charge you different prices, or provide you with a different level of service solely for exercising your privacy rights. Although, certain personalized services for PayPal customers may not provide the same level of personalization if you decide to limit the amount of Personal Information you share with us.

Qualifications & exceptions

  • Rights vary by country and are subject to applicable exceptions and definitional differences among laws.
  • Reduced personalization is stated as a possible consequence of limiting shared information and is distinguished from discrimination.

Legal Rights & Agreement Rules · Procedure

How to make a privacy request

PayPal says it provides several ways to exercise privacy rights. You, or an authorized agent where permitted, can follow the instructions below to exercise rights relating to Personal Information in your account profile(s). Even if you have no PayPal account, for example if you pay without a PayPal account, you may find instructions to submit a privacy-rights request through the privacy hub.

Supporting quotations

We recognize the importance of your ability to control the use of your Personal Information and provide several ways for you to exercise your privacy rights.
If you, or an authorized agent, where permitted, want to exercise any of your rights relating to your Personal Information in your account profile(s), please follow the instructions on how to exercise your data protection rights below.
Even if you do not have a PayPal account (for example, where you use Pay without a PayPal account), you may find [instructions](https://www.paypal.com/myaccount/privacy/privacyhub) to submit a privacy-rights request.
Pay without a PayPal Account means our Services may be accessed by individuals without using a PayPal account, a Fastlane profile, or the Unbranded Payment Services. Pay without a PayPal account does not include Venmo, which is subject to its own terms of service and separate privacy statement.

Not stated here

  • The linked privacy hub is not part of the analyzed text.

Legal Rights & Agreement Rules · Procedure

Identity verification and what happens if a request is denied

PayPal may first need to verify who you are, and if permitted or required by privacy laws it may ask for the information needed to reasonably verify your identity, comparing what you submit with its internal business records. If it cannot verify your identity it may not be able to fulfill your request, unless the right does not require verification. If PayPal denies a request in whole or part, you may have the right to be told its reasons, to appeal its decision, or to lodge a complaint with a supervisory authority and seek a judicial remedy, and PayPal says it will give information about the appeals process. You can also contact PayPal using its contact information.

Supporting quotations

We may first need to verify who you are before we can respond to your request. If permitted or required under privacy laws, we may ask you to provide us with information necessary to reasonably verify your identity before responding to your request. We will compare the information you submit against our internal business records to verify your identity. If we can’t verify your identity, we may not be able to fulfill your request, unless the right does not require verification. If we deny your request in whole or in part, you may have the right to be informed of the reasons we have for not taking action and regarding the possibility to appeal our decision or lodging a complaint with a supervisory authority and seeking judicial remedy. In such circumstances, we will provide you with information regarding the appeals process. You can also contact us, as noted in Our Contact Information.

Qualifications & exceptions

  • Rights to reasons, appeal, complaint and judicial remedy are stated as things you "may have", depending on law.
  • Verification is not required where the right does not require it.

Legal Rights & Agreement Rules · Procedure

Requests made by an authorized agent

If a request comes from an authorized agent, PayPal may ask for evidence that you gave the agent a power of attorney or that the agent otherwise has valid written authority to act for you, including a guardianship, conservatorship or other protective arrangement.

Supporting quotations

If we receive your request from an authorized agent, we may ask for evidence that you have provided such agent with a power of attorney or that the agent otherwise has valid written authority to submit requests to exercise rights on your behalf, including a guardianship, conservatorship or other protective arrangement.

Legal Rights & Agreement Rules · User right or choice

Right to know and to see the list of third parties

To request a copy of the Personal Information PayPal has collected about you, you can log in to your PayPal account(s) or profile management portal and submit a request, or, if you live in the United States, call or contact PayPal; for other countries see Our Contact Information. To request a list of the specific third parties to which your Personal Information has been disclosed, US residents can call or contact PayPal, and people elsewhere can submit a request through the Help Center.

Supporting quotations

Your right to know and request a copy of the Personal Information. If you want to request the Personal Information that we’ve collected about you, you have choices:
Log in to your PayPal account(s) or profile management portal, and submit a request.
If you reside in the United States, Call or contact us and request that we provide you with the data we’ve collected. For other countries, please refer to Our Contact Information.
Your right to request a list of specific third parties. If you want to request a list of the specific third parties to which we have disclosed your Personal Information:
If you reside in the United States, Call or contact us and request that we provide you with the data we’ve disclosed. For other countries, you may also submit a request through the [Help Center](https://www.paypal.com/smarthelp/contact-us/privacy).

Qualifications & exceptions

  • The phone/contact route is described for US residents; other countries use the contact information or Help Center.

Legal Rights & Agreement Rules · User right or choice

Right to correct your information

To correct certain Personal Information, you can log in to your PayPal account(s) or profile management portal and submit a request. If you live in the United States you can call or contact PayPal; for other countries, see Our Contact Information.

Supporting quotations

Your right to correct your Personal Information. If you want to correct certain of your Personal Information, you can:
Log in to your PayPal account(s) or profile management portal, and submit a request.
If you reside in the United States, Call or contact us and request that we provide you with the data we’ve collected. For other countries, please refer to Our Contact Information.

Qualifications & exceptions

  • The passage speaks of correcting "certain" Personal Information, not all of it.

Legal Rights & Agreement Rules · User right or choice

Right to delete information or close your account

To delete certain Personal Information, you can log in to your PayPal account(s) or profile management portal and delete information you previously added (for example non-primary addresses in your settings), call or contact PayPal if you live in the United States, or close your PayPal account(s) or profile.

Supporting quotations

Your right to delete your Personal Information. If you want to delete certain of your Personal Information, you can:
Log in to your PayPal account(s) or profile management portal, and delete any information that you've previously added. For example, you may delete your non-primary addresses in your settings.
If you reside in the United States, Call or contact us and request that we provide you with the data we’ve collected. For other countries, please refer to Our Contact Information.
Close your PayPal account(s) or profile.

Qualifications & exceptions

  • Deletion covers "certain" Personal Information.
  • Self-service deletion is described as covering information you previously added.

Retention & Deletion · Restriction or exception

Information PayPal may keep after you close or delete

If you close your account(s) or profile, delete information or ask PayPal to delete it, PayPal still needs to keep some Personal Information, as explained in the retention section, where permitted by applicable law. The stated reasons are to complete a transaction, provide goods or services you requested or keep its promises in your user agreement or contract; detect and prevent malicious, fraudulent or illegal activity; protect your or another person's legal rights, including the right to free speech; manage internal business processes reasonably related to your expectations; comply with laws and legal or governmental processes; and other exempt purposes under applicable law.

Supporting quotations

If you close your PayPal account(s) or profile, delete, or request that we delete Personal Information, we still need to keep some Personal Information as explained in How Long Do We Store Your Personal Information so we can, where permitted by applicable law:
Complete a transaction, provide goods or services you requested, or comply with our promises to you in the user agreement or other contract you have with us;
Detect and prevent malicious, fraudulent, or illegal activity;
Protect your (or another person’s) legal rights, including the right to free speech;
Manage our internal business processes that are reasonably related to your expectations when using our Services;
Comply with laws and other legal or governmental processes; and
Other exempt purposes under applicable law.

Qualifications & exceptions

  • Applies only "where permitted by applicable law".
  • The final reason, "other exempt purposes under applicable law", is open-ended.

Legal Rights & Agreement Rules · User right or choice

Rights about profiling and automated decisions

The statement describes a right to object to or opt out of Profiling in furtherance of Automated Decisions that produce legal or similarly significant effects, and related rights. PayPal says it may use Automated Decision Making and Agentic AI Tools. In the United States, it says these are either exempt practices or do not trigger an opt-out right under applicable US privacy laws. In other jurisdictions, where the right exists, individuals can contact PayPal to seek a review of, object to, or revoke consent for such a decision, and PayPal says it will review the decision with relevant additional circumstances. If you are not approved under an Automated Decision you may not have access to its services; PayPal says it has safety mechanisms, including ongoing review of decision models and random sampling, and you can contact it with concerns so it can determine whether the procedure was performed appropriately.

Supporting quotations

Your right to object to or opt out of Profiling in furtherance of Automated Decisions that produce legal or similarly significant effects on you and related rights.
As explained in AI and Automated Decision Making we may use Automated Decision Making technology and Agentic AI Tools.
In the United States, these are either exempt practices or do not trigger an opt-out right under applicable United States privacy laws. However, in other jurisdictions, individuals may exercise the right to seek a review of, or to object to and/or revoke consent for, an Automated Decision that has legal or similarly significant effects on them (together with the relevant Profiling), where this right exists, by contacting us. We will then review the decision, taking into account relevant additional circumstances.
If you are not approved under the Automated Decisions, you may not have access to our services. PayPal has several safety mechanisms to ensure the decisions are appropriate. These mechanisms include ongoing overviews of our decision models and random sampling in individual cases. If you have any concern about the outcome, you can contact us, and we will determine whether the procedure was performed appropriately.
Profiling means analysis of an individual’s personality, behavior, interest and habits to make predictions or decisions about them, including like terms under applicable laws.

Qualifications & exceptions

  • The review, objection and revocation rights outside the United States apply "where this right exists".
  • In the United States PayPal says no opt-out right is triggered.

Not stated here

  • The passage does not say which non-US jurisdictions give the right.

Legal Rights & Agreement Rules · User right or choice

Consent and permitted purposes for Sensitive Personal Information

Where required by law, PayPal says it will obtain your consent before collecting and processing Sensitive Personal Information, and you can withdraw consent by contacting PayPal. It says it will use Sensitive Personal Information only according to the consent you gave or for permitted purposes to the extent permitted or exempt under applicable law, so a right to limit use and disclosure of it is not needed under US privacy laws. Under US laws the permitted purposes include providing the goods or services you requested; preventing, detecting and investigating security incidents; resisting malicious, deceptive, fraudulent or illegal actions and prosecuting those responsible; verifying or maintaining the quality or safety of a product, service or device; and ensuring physical safety of people. The exemption it relies on for precise geolocation is based on the Gramm-Leach-Bliley Act.

Supporting quotations

Your rights related to Sensitive Personal Information. Where required by law, we will obtain your consent before collecting and processing your Sensitive Personal Information. You can withdraw your consent by contacting us and refer to Our Contact Information of this Privacy Statement.
We will also only use your Sensitive Personal Information in accordance with the consent you have given or for certain permitted purposes to the extent permitted or exempt under applicable law, which is why it is not necessary to exercise a right to limit use and disclosure of Sensitive Personal Information under the United States privacy laws. Under the United States privacy laws, these permitted purposes include providing the goods or services you requested; preventing, detecting, and investigating security incidents; resisting malicious, deceptive, fraudulent, or illegal actions and prosecuting those responsible; verifying or maintaining the quality or safety of a product, service, or device; and ensuring physical safety of natural persons. The exemption we rely on for precise geolocation is based on the Gramm-Leach-Bliley Act.

Qualifications & exceptions

  • Consent is required only "where required by law".
  • The permitted purposes listed are the ones PayPal names under US privacy laws.

Legal Rights & Agreement Rules · User right or choice

Right to ask about disclosures for direct marketing

You may request certain details about how your Personal Information is disclosed to third parties for direct marketing purposes. In the United States, you can call or contact PayPal.

Supporting quotations

Your rights related to disclosure of Personal Information to third-parties for direct marketing purposes: You may request certain details about how your Personal Information is disclosed to third parties for direct marketing purposes. In the United States, Call or contact us.

Data Access & Collection · User right or choice

You can limit what you provide, but some information is required

You can control how Personal Information is collected or disclosed and how PayPal communicates with you. You may choose to limit the information you give when apps or Services ask for it, though information helps PayPal provide a more personalized experience. Some information is required for the Services to function: if you do not share your contacts you can still use the mobile apps but some actions may be slower, and if you do not provide information required for an account or Fastlane profile, such as name and email address, PayPal cannot create the account or profile.

Supporting quotations

You can control how Personal Information is collected or disclosed, as well as how we communicate with you. Here are some of the ways you can customize your choices.
You may choose to limit the Personal Information you provide when our apps or Services request it. To help make choices that are right for you, it’s important to understand that Personal Information helps us provide a richer, more personalized experience for you.
Also, some Personal Information is required for our Services to function. For example, sharing your contacts helps make it easier for you to find the people you want to send money to. If you choose not to share your contacts with us, you can still use our mobile apps, but some actions may not be as fast or easy as it would be if you shared your contacts. Another example is creating an account or Fastlane profile with us. If you choose not to provide information that is required for an account or Fastlane profile to function, like your name and email address, we will not be able to create an account or Fastlane profile for you.
Fastlane means the online tool whereby individuals can store their payment methods and other Personal Information with PayPal so that they can complete the checkout process faster, create a store or loyalty account, or facilitate other transactions at participating Partners and Merchants with payment card, contact information, shipping data or other data they save in their Fastlane profile as relevant to the specific interaction, participating Partners and Merchants, all without having to manually input payment method details and other Personal Information each time they check out.

Qualifications & exceptions

  • Choosing not to provide required information means PayPal cannot create the account or Fastlane profile.

Sharing & Disclosure · User right or choice

Controls for linked accounts and what other Users see

If you link your accounts to a third-party service, you may be able to manage how that service collects, uses and shares your Personal Information; you are told to read its privacy policy. You control which third-party services you link and what Personal Information they can collect, for example through the Security settings in your account. Some Personal Information may be seen by other Users, and you may be able to adjust or turn off this setting in the Data and Privacy section of your account settings.

Supporting quotations

If you link your account(s) to a third-party service, you may be able to manage how your Personal Information is collected, used, and shared by them. Read the third parties’ privacy policies to see the choices they offer you. You can control which third-party services you link to your account and what Personal Information they can collect about you. For example, to manage the permissions, go to the Security settings in your account(s).
Some Personal Information may be seen by other Users. You may be able to adjust or turn off this setting in the Data and Privacy section in your account settings.
Users means other account holders and non-account holders of the PayPal Services.

Qualifications & exceptions

  • Control over what a linked third party does with data depends on the choices that third party offers.
  • Adjusting or turning off visibility to other Users is stated as something you "may be able" to do.

Sharing & Disclosure · User right or choice

Opting out of sharing for personalized shopping

Unless consent is required, PayPal shares Personal Information collected after November 27, 2024 (or earlier if you consent) with Partners and Merchants for personalized shopping experiences in the United States, such as products, preferences, sizes and styles you may like. To opt out, log in to your PayPal account and edit your preferences in the Data and Privacy setting. After opting out, PayPal still discloses information needed to complete transactions you start, but not to Partners and Merchants for personalized shopping.

Supporting quotations

Unless we are required to obtain your consent, we share Personal Information collected after November 27, 2024 (or from earlier if you consent) for personalized shopping experiences in the United States. Personal Information we disclose includes, for example, products, preferences, sizes, and styles we think you’ll like. To opt-out of Personal Information sharing with Partners and Merchants for personalized shopping experiences, log into your PayPal account and edit your preferences in the Data and Privacy setting. If you opt-out, we will continue to disclose your Personal Information as necessary to complete transactions you initiate but will not disclose Personal Information to Partners and Merchants for personalized shopping experiences.
Partners and Merchants means our partners and the merchants, partners or businesses that our Users transact with for the purpose of obtaining goods or services.

Qualifications & exceptions

  • Stated for the United States and for information collected after November 27, 2024 unless you consented earlier.
  • An opt-out does not stop disclosures needed to complete transactions you initiate.

Account & Service Control · User right or choice

Choosing how PayPal contacts you

Your choices about how PayPal communicates with you depend on the purpose of the message, how it is delivered and legal requirements. Some messages are optional and others are necessary to manage your accounts or Fastlane profile. PayPal uses email, text messages, mobile push notifications, and sometimes phone calls or paper mail, depending on the situation, your preferences and applicable law. You can click the unsubscribe link in a PayPal, Hyperwallet or Fastlane marketing email, reply STOP to a text, or turn off notifications on your device or in your notification settings. You cannot opt out of messages considered necessary for the Services, such as digital receipts and emails about changes to your account or Fastlane profile status, though you may be able to choose how they are sent.

Supporting quotations

Your choices about how we communicate with you differ depending on the purpose of the message, how it is delivered and other requirements under applicable law. Some messages are considered optional, and some are necessary for you to manage your accounts or Fastlane profile with us. We use email, text messages, push notifications on your mobile device, and even phone calls or paper mail depending on the situation, your preferences and applicable law.
You can click the unsubscribe link in a PayPal, Hyperwallet, or Fastlane marketing email, opt-out of a text message by replying “STOP,” or turn off notifications on your device. You can also change your account’s notification settings or the notification preferences on your device.
You won’t be able to opt-out of messages that are considered necessary for the Services, such as digital receipts and emails that alert you to changes in your account(s) or Fastlane profile's status. You may be able to decide how we send those messages, such as by email, phone, text message, or a notification on your mobile device.
Fastlane means the online tool whereby individuals can store their payment methods and other Personal Information with PayPal so that they can complete the checkout process faster, create a store or loyalty account, or facilitate other transactions at participating Partners and Merchants with payment card, contact information, shipping data or other data they save in their Fastlane profile as relevant to the specific interaction, participating Partners and Merchants, all without having to manually input payment method details and other Personal Information each time they check out.
Hyperwallet means the PayPal technology and online service that allows payout capabilities for businesses of all shapes and sizes through a single integration.

Qualifications & exceptions

  • Messages considered necessary for the Services cannot be opted out of.

Security & Safeguards · Company commitment

Security measures and your responsibilities

PayPal maintains technical, physical and administrative security measures designed to provide reasonable protection for your Personal Information against loss, misuse, interference, unauthorized access, disclosure and alteration, including firewalls, data encryption, physical access controls at data centers and information access authorization controls. You are responsible for securing your password(s) and account or profile registration information and for verifying that the information PayPal holds about you is accurate and current. PayPal says it is not responsible for protecting Personal Information it shares with a third party through a linked account connection you authorized.

Supporting quotations

We maintain technical, physical, and administrative security measures designed to provide reasonable protection for your Personal Information against loss, misuse, interference, unauthorized access, disclosure, and alteration. The security measures include firewalls, data encryption, physical access controls to our data centers, and information access authorization controls. While we are dedicated to securing our systems and Services, you are responsible for securing and maintaining the privacy of your password(s) and account or profile registration information and verifying that the Personal Information we maintain about you is accurate and current. We are not responsible for protecting any Personal Information that we share with a third-party based on a linked account connection that you have authorized.

Qualifications & exceptions

  • Protection is described as "reasonable", not absolute.
  • PayPal disclaims responsibility for information shared with a third party under a linked account connection you authorized.

Account & Service Control · Company commitment

Children under 18

The Sites and Services are not directed to children under 18. PayPal says it does not knowingly collect information, including Personal Information, from children under 18 or others not legally allowed to use the Services. If it obtains actual knowledge that it has collected such information, it will promptly delete it unless legally obliged to keep it, and you can contact PayPal if you believe it was collected by mistake.

Supporting quotations

The Sites and Services are not directed to children under the age of 18. We do not knowingly collect information, including Personal Information, from children under the age of 18 or other individuals who are not legally allowed to use our Services. If we obtain actual knowledge that we have collected Personal Information from someone not allowed to use our Services, we will promptly delete it, unless we are legally obligated to retain such data. Please contact us if you believe that we have mistakenly or unintentionally collected information from someone not allowed to use our Services.

Qualifications & exceptions

  • The deletion promise is triggered by "actual knowledge".
  • PayPal may keep the information if legally obligated to retain it.

Sharing & Disclosure · Company practice

Transfers of Personal Information to other countries

PayPal operates in many countries, and it or its service providers may transfer and process your Personal Information outside the country where you live, for example using third-party service providers to process and store it in the United States and other countries. Those countries do not always protect Personal Information as much as your own. PayPal says it has taken and will continue to take steps in line with applicable data protection law, such as intra-company agreements, model contractual clauses or derogations. By using the Sites and Services, where permitted under applicable privacy laws, you agree to your Personal Information being transferred to other countries, including those with different data protection rules.

Supporting quotations

We operate in many countries, and we (or our service providers) may transfer your Personal Information and process it outside the country where you live. For example, we use third-party service providers to process and store your Personal Information in the United States and other countries. These countries do not always afford a level of privacy protection that is equivalent to the protection offered to Personal Information in your country. We have taken and will continue to take specific steps, in accordance with the applicable data protection and privacy laws, to protect your Personal Information (e.g., intra-company agreements, model contractual clauses, and/or derogations). By using our Sites and Services, where permitted under applicable privacy laws, you agree to your Personal Information being transferred to other countries, including countries that have different data protection rules than your country.
Sites means the websites, mobile apps, official social network platforms, or other online properties through which PayPal offers the Services and which has posted or linked to this Privacy Statement.

Qualifications & exceptions

  • Your agreement to transfers applies "where permitted under applicable privacy laws".
  • The protective measures are listed as examples.

Data Access & Collection · Context

Definition of Personal Information

In this statement, Personal Information means any information that directly or indirectly identifies you or is reasonably capable of being associated with you or your household, including your identity, finances and online behavior. It also takes any broader meaning given to personal information, personal data, personally identifiable information or similar terms under applicable privacy laws.

Supporting quotations

Personal Information
in this Privacy Statement means any information that directly or indirectly identifies you or is reasonably capable of being associated with you or your household information about you, including your identity, finances and online behavior, or such broader meanings as given under the definitions of personal information, personal data, personally identifiable information, or other like terms under applicable privacy laws.

Qualifications & exceptions

  • The definition extends to household information and to any broader meaning in applicable privacy law.

Data Access & Collection · Context

Definitions of Services and Sites

Services means all PayPal-branded or unbranded payment, financial and personalization products and solutions, including transactions, rewards, advertising (including PayPal Ads), PayPal Groups, Fastlane, Xoom, Pool, Hyperwallet, credit and financing, cryptocurrency services offered by PayPal Digital Inc., merchant tools and emerging financial technologies, except Excluded Services. It also covers related websites, platforms, applications and future innovations offered or supported by PayPal, and using the Services includes interacting with the Sites. Sites means the websites, mobile apps, official social network platforms or other online properties through which PayPal offers the Services and which post or link to this statement.

Supporting quotations

Services refers to all PayPal-branded or unbranded payment, financial, and personalization products and solutions, including transactions, rewards, advertising (including PayPal Ads), PayPal Groups, Fastlane, Xoom, Pool, Hyperwallet, credit and financing (including Partner and Merchant offerings), cryptocurrency services offered by PayPal Digital Inc. (a PayPal affiliate company), merchant tools, and emerging financial technologies (including Fastlane), with the exception of Excluded Services. It also includes all related websites, platforms, applications, and future innovations offered or supported by PayPal. Your use of Services includes interaction with our Sites.
Sites means the websites, mobile apps, official social network platforms, or other online properties through which PayPal offers the Services and which has posted or linked to this Privacy Statement.

Qualifications & exceptions

  • Excluded Services are carved out of "Services".
  • "Future innovations" are included, so the scope can grow.

Legal Rights & Agreement Rules · Restriction or exception

Definition of Excluded Services

Excluded Services are companies or separate brands, affiliates or subsidiaries of PayPal that process Personal Information under their own terms of service and separate privacy statements. Examples are Venmo, Honey Science LLC, Chargehound LLC, Paidy Inc., Swift Financial LLC and Bill Me Later, Inc.

Supporting quotations

Excluded Services means companies or separate brands, affiliates, or subsidiaries of PayPal, who process Personal Information in accordance with their own terms of service and separate privacy statements. Examples include Venmo, Honey Science LLC, Chargehound LLC, Paidy Inc., Swift Financial LLC, and Bill Me Later, Inc.

Qualifications & exceptions

  • The examples are introduced with "Examples include", so the list is not stated to be complete.

Cross-references

  • related (model-proposed): What this Privacy Statement covers — defines: The definition of Excluded Services supplies the carve-out that limits the scope of the statement.

Account & Service Control · Context

Definitions of Fastlane, Hyperwallet, Unbranded Payment Services and paying without an account

Fastlane is an online tool where individuals store payment methods and other Personal Information with PayPal to check out faster, create store or loyalty accounts, or facilitate other transactions at participating Partners and Merchants. Hyperwallet is PayPal technology that provides payout capabilities for businesses through a single integration. Unbranded Payment Services are card processing and ACH origination services for payments to Partners and Merchants that do not carry the PayPal brand, or the Braintree services. "Pay without a PayPal Account" means accessing the Services without a PayPal account, a Fastlane profile or the Unbranded Payment Services, and does not include Venmo, which has its own terms and privacy statement.

Supporting quotations

Fastlane means the online tool whereby individuals can store their payment methods and other Personal Information with PayPal so that they can complete the checkout process faster, create a store or loyalty account, or facilitate other transactions at participating Partners and Merchants with payment card, contact information, shipping data or other data they save in their Fastlane profile as relevant to the specific interaction, participating Partners and Merchants, all without having to manually input payment method details and other Personal Information each time they check out.
Hyperwallet means the PayPal technology and online service that allows payout capabilities for businesses of all shapes and sizes through a single integration.
Pay without a PayPal Account means our Services may be accessed by individuals without using a PayPal account, a Fastlane profile, or the Unbranded Payment Services. Pay without a PayPal account does not include Venmo, which is subject to its own terms of service and separate privacy statement.
Unbranded Payment Services means when you are interacting with and making payments to Partners and Merchants using our card processing and/or ACH origination services that do not carry the PayPal brand or when you use our Braintree services.

Sharing & Disclosure · Context

Definitions of Partners and Merchants and Users

Partners and Merchants are PayPal's partners and the merchants, partners or businesses that Users transact with to obtain goods or services. Users means other account holders and non-account holders of the PayPal Services.

Supporting quotations

Partners and Merchants means our partners and the merchants, partners or businesses that our Users transact with for the purpose of obtaining goods or services.
Users means other account holders and non-account holders of the PayPal Services.

Data Access & Collection · Context

Definitions of Cookies and Device Information

Cookies means tracking technologies such as cookies, pixel tags, web beacons and widgets. Device Information means data that can be automatically collected from any device used to access the Services, which may include but is not limited to device type, network connections, device name, IP address, information about the web browser and internet connection, geolocation information and information about apps downloaded to the device.

Supporting quotations

Cookies means tracking technologies such as cookies, pixel tags, web beacons, and widgets.
Device Information means data that can be automatically collected from any device used to access the Services. Such information may include, but is not limited to, your device type, your device’s network connections, your device’s name, your device IP address, information about your device’s web browser and internet connection you use to access the Services, geolocation information, and information about apps downloaded to your device.

Qualifications & exceptions

  • Device Information is not limited to the listed items.

Use & Processing · Context

Definitions of Automated Decision Making and Profiling

An Automated Decision (Automated Decision Making) is a decision made by automated means with no or limited human involvement, depending on applicable law, and in some cases it may have a legal or similarly significant effect on you; the terms also mean like concepts under applicable laws. Profiling means analysis of a person's personality, behavior, interest and habits to make predictions or decisions about them, including like terms under applicable laws.

Supporting quotations

Automated Decision and Automated Decision Making refers to the process of making a decision by automated means without or limited human involvement, depending on applicable law. In some cases, these decisions could have a legal or similarly significant effect on you as an individual. These terms also mean like concepts under applicable laws.
Profiling means analysis of an individual’s personality, behavior, interest and habits to make predictions or decisions about them, including like terms under applicable laws.

Qualifications & exceptions

  • The meaning of "limited human involvement" depends on applicable law.

Legal Rights & Agreement Rules · Procedure

How to contact PayPal, Hyperwallet, Fastlane and Xoom about privacy

If you have questions about this statement or your Personal Information, you can contact PayPal. For a PayPal account or Unbranded Payment Services, call PayPal Customer Service at 1-888-221-1161 or use the Customer Service web portal. For a Hyperwallet account, call Hyperwallet Customer Service at 1-877-546-8220 or log into the Hyperwallet Pay Portal and use the "Privacy Concerns" email form under Support. For a Fastlane profile, call PayPal Customer Service at 1-844-705-3555 or use the Fastlane profile management portal. For a Xoom account, call Xoom Customer Service at 1-877-815-1531 or use the Xoom Help Center web portal.

Supporting quotations

If you have questions about this Privacy Statement or your Personal Information, contact us so we can help. To talk about your PayPal account or Unbranded Payment Services:
Call PayPal Customer Service at 1-888-221-1161; or
Visit our [Customer Service web portal](https://www.paypal.com/smarthelp/contact-us/privacy).
To talk about your Hyperwallet account:
Call Hyperwallet Customer Service at 1-877-546-8220; or
Log into the Hyperwallet Pay Portal (Go to "Support," select "Email" and complete the form for "Privacy Concerns").
To talk about your Fastlane profile:
Call PayPal Customer Service at 1-844-705-3555; or
Visit your [Fastlane profile management portal](https://connect.paypal.com/cshelp/personal).
To talk about your Xoom account:
Call Xoom Customer Service at 1-877-815-1531; or
Visit our [Help Center web portal](https://help.xoom.com/s/contactsupport?language=en_US).
Hyperwallet means the PayPal technology and online service that allows payout capabilities for businesses of all shapes and sizes through a single integration.
Unbranded Payment Services means when you are interacting with and making payments to Partners and Merchants using our card processing and/or ACH origination services that do not carry the PayPal brand or when you use our Braintree services.

Legal Rights & Agreement Rules · User right or choice

Regional contacts table and right to complain to a regulator

A table of country or region contacts follows, giving the data protection officer (DPO) and contact information for each. You may lodge a complaint with the Supervisory Authority for data protection in your region if permitted under applicable law.

Supporting quotations

Please see the table below for additional information relevant to your local country/region. You may lodge a complaint with the Supervisory Authority for data protection in your region if permitted under applicable law.
Country or Region Data Protection Officer ("DPO"), and Contact Information

Qualifications & exceptions

  • The right to complain is stated "if permitted under applicable law".

Legal Rights & Agreement Rules · Procedure

Table rows: Albania, EU, Norway, Iceland and Liechtenstein contact PayPal (Europe)

In the regional contact table, the rows for Albania, the EU, Norway, Iceland and Liechtenstein (spelled "Lichtenstein" in the source) each name PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg, with an online link for privacy queries. Each row has its own country-specific online link.

Supporting quotations

Albania PayPal (Europe) S.a.r.l. et Cie, S.C.A. 22-24 Boulevard Royal L-2449 Luxembourg Contact [Online](https://www.paypal.com/al/smarthelp/contact-us/privacy) for Privacy queries
EU PayPal (Europe) S.a.r.l. et Cie, S.C.A. 22-24 Boulevard Royal L-2449, Luxembourg Contact [Online](https://www.paypal.com/de/smarthelp/contact-us/privacy) for Privacy queries
Norway PayPal (Europe) S.a.r.l. et Cie, S.C.A. 22-24 Boulevard Royal L-2449, Luxembourg Contact [Online](https://www.paypal.com/no/smarthelp/contact-us/privacy) for Privacy queries
Iceland PayPal (Europe) S.a.r.l. et Cie, S.C.A. 22-24 Boulevard Royal L-2449, Luxembourg Contact [Online](https://www.paypal.com/is/smarthelp/contact-us/privacy) for Privacy queries
Lichtenstein PayPal (Europe) S.a.r.l. et Cie, S.C.A. 22-24 Boulevard Royal L-2449, Luxembourg Contact [Online](https://www.paypal.com/li/smarthelp/contact-us/privacy) for Privacy queries

Qualifications & exceptions

  • Each row is scoped to its own country or region; the shared entity does not make the rows interchangeable.

Legal Rights & Agreement Rules · Procedure

Table rows: PayPal Pte. Ltd. (Singapore) contact for several countries

In the regional contact table, the rows for Argentina, Brunei, Hong Kong, Japan, South Korea and Malaysia each name PayPal Pte. Ltd., 5 Temasek Boulevard 09-01, Suntec Tower 5, Singapore 038985, with a country-specific online link for privacy queries. The India row names a different entity, PayPal Payments Private Limited, but gives the same Singapore address.

Supporting quotations

Argentina PayPal Pte. Ltd. 5 Temasek Boulevard 09-01 Suntec Tower 5 Singapore 038985 Contact [Online](https://www.paypal.com/ar/smarthelp/contact-us/privacy) for Privacy queries
Brunei PayPal Pte. Ltd. 5 Temasek Boulevard 09-01, Suntec Tower 5 Singapore 038985 Contact [Online](https://www.paypal.com/sg/smarthelp/contact-us/privacy) for Privacy queries
Hong Kong PayPal Pte. Ltd. 5 Temasek Boulevard 09-01 Suntec Tower 5 Singapore 038985 Contact [Online](https://www.paypal.com/hk/smarthelp/contact-us/privacy) for Privacy queries
India PayPal Payments Private Limited 5 Temasek Boulevard 09-01 Suntec Tower 5 Singapore 038985 Contact [Online](https://www.paypal.com/in/smarthelp/contact-us/privacy) for Privacy queries
Japan PayPal Pte. Ltd. 5 Temasek Boulevard 09-01 Suntec Tower 5 Singapore 038985 Contact [Online](https://www.paypal.com/jp/smarthelp/contact-us/privacy) for Privacy queries
South Korea PayPal Pte. Ltd. 5 Temasek Boulevard 09-01 Suntec Tower 5 Singapore 038985 Contact [Online](https://www.paypal.com/kr/smarthelp/contact-us/privacy) for Privacy queries
Malaysia PayPal Pte. Ltd. 5 Temasek Boulevard 09-01, Suntec Tower 5 Singapore 038985 Contact [Online](https://www.paypal.com/my/smarthelp/contact-us/privacy) for Privacy queries

Qualifications & exceptions

  • Each row is scoped to its own country; the India row names a different entity at the same Singapore address.

Legal Rights & Agreement Rules · Procedure

South Korea domestic agent and Data Protection Office

For South Korea, the table states that under the Personal Information Protection Act and the Network Act the domestic agent and Data Protection Office is PayPal Korea Services LLC, with a Seoul address, a telephone number and an email address given in the source.

Supporting quotations

Pursuant to the Personal Information Protection Act and the Network Act, the contact details of the domestic agent and Data Protection Office are as follows:
Name and representative: PayPal Korea Services LLC (representative: Mun Yat Wong) Address, telephone and e-mail: Regus Samsungdong Limited (World Trade Center), 27th, 30th Floor, Trade Tower, 511 Young Dong Street, Gangnam-gu, Seoul, South Korea 06164, (+82) 02 737 5775, skrprivacy@paypal.com

Legal Rights & Agreement Rules · Procedure

Table rows: local PayPal entities in Australia, Canada, Israel and Mexico

In the regional contact table, Australia lists PayPal Australia Pty Ltd (Sydney), Canada lists PayPal Canada Co. (Toronto), Israel lists PayPal Israel Payment Services LTD (Tel-Aviv) and Mexico lists Operadora PayPal de Mexico, S. de R.L. de C.V. (Mexico City), each with a postal address and an online link for privacy queries.

Supporting quotations

Australia PayPal Australia Pty Ltd ABN 93 111 195 389, AFSL 304962 GPO Box 351 Sydney NSW 2001 Contact [Online](https://www.paypal.com/au/smarthelp/contact-us/privacy) for Privacy queries
Canada PayPal Canada Co. MaRS Centre West Tower 661 University Avenue Suite 506 Toronto, ON M5G Contact [Online](https://www.paypal.com/ca/smarthelp/contact-us/privacy) for Privacy queries
Israel PayPal Israel Payment Services LTD 98 Yigal Alon St., Tel-Aviv, Israel 6789141 Contact [Online](https://www.paypal.com/il/smarthelp/contact-us/privacy) for Privacy queries
Mexico Operadora PayPal de México, S. de R.L. de C.V Boulevard Manuel Ávila Camacho 137, Piso 7, Polanco I Sección, Alcaldía Miguel Hidalgo, C.P. 11550, Ciudad de México, México Contact [Online](https://www.paypal.com/mx/smarthelp/contact-us/privacy) for Privacy queries

Qualifications & exceptions

  • Each row is scoped to its own country.

Legal Rights & Agreement Rules · Procedure

Table rows: Brazil entity and Data Protection Officer

For Brazil, the table lists PayPal do Brasil Instituicao de Pagamento Ltda. (Legal Department, Sao Paulo) with an online link for privacy queries. In compliance with LGPD article 41 it also names a Data Protection Officer and a Deputy DPO, both reachable at latamdpo@paypal.com.

Supporting quotations

Brazil PayPal do Brasil Instituição de Pagamento Ltda. Attention: Legal Department Avenida Paulista, 1048 13th Floor, CEP 01310-100 Sio Paulo, SP – Brazil Contact [Online](https://www.paypal.com/br/smarthelp/contact-us/privacy) for Privacy queries
In compliance with LGPD article 41, the identity and contact information of the Data Protection Officer (DPO) and of his deputy (Deputy DPO) are the following: Data Protection Officer (DPO): Daniel Douglas Diniz DPO contact e-mail: latamdpo@paypal.com Deputy Data Protection Officer: Fabiana Moreira Chaves Deputy DPO contact e-mail: latamdpo@paypal.com

Legal Rights & Agreement Rules · Procedure

Table rows: PayPal Pte. Ltd. (Singapore) contact for more countries

In the regional contact table, the rows for the Philippines, Singapore, Sri Lanka, Switzerland, Taiwan, the United Arab Emirates and Vietnam each name PayPal Pte. Ltd., 5 Temasek Boulevard 09-01, Suntec Tower 5, Singapore 038985, with a country-specific online link for privacy queries.

Supporting quotations

Philippines PayPal Pte. Ltd. 5 Temasek Boulevard 09-01, Suntec Tower 5 Singapore 038985 Contact [Online](https://www.paypal.com/ph/smarthelp/contact-us/privacy) for Privacy queries
Singapore PayPal Pte. Ltd. 5 Temasek Boulevard 09-01, Suntec Tower 5 Singapore 038985 Contact [Online](https://www.paypal.com/sg/smarthelp/contact-us/privacy) for Privacy queries
Sri Lanka PayPal Pte. Ltd. 5 Temasek Boulevard 09-01, Suntec Tower 5 Singapore 038985 Contact [Online](https://www.paypal.com/lk/smarthelp/contact-us/privacy) for Privacy queries
Switzerland PayPal Pte. Ltd. 5 Temasek Boulevard 09-01, Suntec Tower 5 Singapore 038985 Contact [Online](https://www.paypal.com/ch/cshelp/contact-us/privacy) for Privacy queries
Taiwan PayPal Pte. Ltd. 5 Temasek Boulevard 09-01, Suntec Tower 5 Singapore 038985 Contact [Online](https://www.paypal.com/tw/smarthelp/contact-us/privacy) for Privacy queries
United Arab Emirates PayPal Pte. Ltd. 5 Temasek Boulevard 09-01, Suntec Tower 5 Singapore 038985 Contact [Online](https://www.paypal.com/ae/smarthelp/contact-us/privacy) for Privacy queries
Vietnam PayPal Pte. Ltd. 5 Temasek Boulevard 09-01, Suntec Tower 5 Singapore 038985 Contact [Online](https://www.paypal.com/vn/smarthelp/contact-us/privacy) for Privacy queries

Qualifications & exceptions

  • Each row is scoped to its own country or region.

Legal Rights & Agreement Rules · Procedure

Table row: Russia contacts PayPal (Europe)

In the regional contact table, the Russia row names PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg, with an online link for privacy queries.

Supporting quotations

Russia PayPal (Europe) S.a.r.l. et Cie, S.C.A. 22-24 Boulevard Royal L-2449, Luxembourg Contact [Online](https://www.paypal.com/ru/smarthelp/contact-us/privacy) for Privacy queries
Lichtenstein PayPal (Europe) S.a.r.l. et Cie, S.C.A. 22-24 Boulevard Royal L-2449, Luxembourg Contact [Online](https://www.paypal.com/li/smarthelp/contact-us/privacy) for Privacy queries

Legal Rights & Agreement Rules · Procedure

Table rows: Thailand, United Kingdom and United States contacts

In the regional contact table, the Thailand row gives an address at Athenee Tower in Bangkok with an online link for privacy queries, without naming an entity. The UK row names PayPal UK Ltd, 5 Fleet Place, London. The United States row names PayPal Inc., 2211 N. 1st St., San Jose, CA 95131, with an online link for privacy queries.

Supporting quotations

Thailand Athenee Tower, 23F; 63 Wittayu Road; Lumpini, Pathumwan; Bangkok 10330, Thailand Contact [Online](https://www.paypal.com/th/smarthelp/contact-us/privacy) for Privacy queries
UK PayPal UK Ltd 5 Fleet Place London, UK EC4M 7RD Contact [Online](https://www.paypal.com/uk/smarthelp/contact-us/privacy) for Privacy queries
United States PayPal Inc. 2211 N. 1st St., San Jose, CA 95131 Contact [Online](https://www.paypal.com/us/smarthelp/contact-us/privacy) for Privacy queries

Qualifications & exceptions

  • The Thailand row, as written, gives an address but names no entity.

Data Access & Collection · Context

United States disclosures: what PayPal collected and disclosed in the prior 12 months

This United States section supplements the main statement. It gives, for the prior 12 months and including under the California Consumer Privacy Act as amended (CCPA), a table of the categories of Personal Information PayPal collected and the categories of third parties it disclosed them to for business purposes. The table has three columns: category of Personal Information, purpose of collection and disclosure, and categories of third parties to which PayPal discloses the information for a business purpose. For the precise data points and sources it points back to the collection section, and for the purposes and recipients it points to the use and sharing sections.

Supporting quotations

This section contains additional disclosures for individuals in the United States and supplements PayPal’s Privacy Statement above.
This section provides additional information regarding PayPal’s prior 12-month Personal Information processing activities under the CCPA. In the preceding 12 months, we have collected the categories of Personal Information set forth in the table below. For details about the precise data points we collect and the categories of sources of such collection, please see Categories of Personal Information We Collect. In the preceding 12 months, we have disclosed the following categories of Personal Information for business purposes to the following categories of third parties, which we describe in greater detail in How We Use Personal Information and When and How We Share Personal Information With Others.
Categories of Personal Information We Collect Purpose of Collection and Disclosure Categories of 3rd Parties to which PayPal Discloses this Personal Information for Business Purpose
Services refers to all PayPal-branded or unbranded payment, financial, and personalization products and solutions, including transactions, rewards, advertising (including PayPal Ads), PayPal Groups, Fastlane, Xoom, Pool, Hyperwallet, credit and financing (including Partner and Merchant offerings), cryptocurrency services offered by PayPal Digital Inc. (a PayPal affiliate company), merchant tools, and emerging financial technologies (including Fastlane), with the exception of Excluded Services.

Qualifications & exceptions

  • The table covers the preceding 12 months of activity, not a promise about future practice.
  • The table lists purposes and recipient categories per row of personal information; it does not say which purpose goes with which recipient.

Use & Processing · Company practice

Identifiers: purposes of collection and disclosure

In the United States disclosure table (columns: category of Personal Information, purpose of collection and disclosure, categories of third parties PayPal discloses it to for a business purpose), for the category "Identifiers" the purposes are: provide Services; communicate with you (listed twice); link an account; manage and improve the Services; manage fraud and risk; market the Services; comply with laws; process information about your contacts; provide receipts in connection with PayPal Point of Sale services; remember your preferences; and associate information about you.

Supporting quotations

Identifiers
Provide Services
Communicate with you
Link an account
Manage and improve our Services
Manage fraud and risk
Market our Services
Comply with laws
Process information about your contacts
Communicate with you
Provide receipts in connection with PayPal Point of Sale services
Remember your preferences
Associate information about you

Qualifications & exceptions

  • Each purpose belongs to the Identifiers row of the table.

Sharing & Disclosure · Company practice

Identifiers: third parties PayPal discloses them to

In the United States disclosure table (columns: category of Personal Information, purpose of collection and disclosure, categories of third parties PayPal discloses it to for a business purpose), Identifiers are disclosed for a business purpose to these categories of third parties: PayPal and PayPal affiliates; authorities; other financial institutions; card networks and payment processors; fraud prevention and identity verification agencies; credit reporting agencies (CRAs); service providers; other Users in accordance with account settings; linked accounts; Partners and Merchants; other third parties; and buyers in connection with a business transfer.

Supporting quotations

Identifiers
PayPal and PayPal affiliates
Authorities
Other financial institutions
Card networks and payment Processors
Fraud prevention and identity verification agencies
CRAs
Service providers
Other Users in accordance with account settings
Linked accounts
Partners and Merchants
Other third parties
Buyers in connection with a business transfer
Users means other account holders and non-account holders of the PayPal Services.
Partners and Merchants means our partners and the merchants, partners or businesses that our Users transact with for the purpose of obtaining goods or services.

Use & Processing · Company practice

Records and financial information: purposes of collection and disclosure

In the United States disclosure table (columns: category of Personal Information, purpose of collection and disclosure, categories of third parties PayPal discloses it to for a business purpose), for the category "Records and Financial Information (including Personal Information described in the California Customer Records Act)" the purposes are: provide Services; communicate with you (listed twice); link an account; keep your account, Fastlane profile and financial information up to date; manage and improve the Services; manage fraud and risk; market the Services; provide personalized Services; comply with laws; and process information about your contacts.

Supporting quotations

Records and Financial Information (including Personal Information described in California Customer Records Act)
Provide Services
Communicate with you
Link an account
Keep your account and Fastlane profile and financial information up to date
Manage and improve our Services
Manage fraud and risk
Market our Services
Provide personalized Services
Comply with laws
Process information about your contacts
Communicate with you
Fastlane means the online tool whereby individuals can store their payment methods and other Personal Information with PayPal so that they can complete the checkout process faster, create a store or loyalty account, or facilitate other transactions at participating Partners and Merchants with payment card, contact information, shipping data or other data they save in their Fastlane profile as relevant to the specific interaction, participating Partners and Merchants, all without having to manually input payment method details and other Personal Information each time they check out.

Sharing & Disclosure · Company practice

Records and financial information: third parties PayPal discloses them to

In the United States disclosure table (columns: category of Personal Information, purpose of collection and disclosure, categories of third parties PayPal discloses it to for a business purpose), Records and Financial Information is disclosed for a business purpose to: PayPal and PayPal affiliates; authorities; other financial institutions; card networks and payment processors; fraud prevention and identity verification agencies; CRAs; service providers; other Users in accordance with account settings; linked accounts; Partners and Merchants; other third parties for business purposes; and buyers in connection with a business transfer.

Supporting quotations

Records and Financial Information (including Personal Information described in California Customer Records Act)
PayPal and PayPal affiliates
Authorities
Other financial institutions
Card networks and payment processors
Fraud prevention and identity verification agencies
CRAs
Service providers
Other Users in accordance with account settings
Linked accounts
Partners and Merchants
Other third parties for business purposes
Buyers in connection with a business transfer

Use & Processing · Company practice

Commercial information: purposes of collection and disclosure

In the United States disclosure table (columns: category of Personal Information, purpose of collection and disclosure, categories of third parties PayPal discloses it to for a business purpose), the category "Commercial information" has these purposes: provide Services; communicate with you; manage and improve the Services; manage fraud and risk; market the Services; comply with laws; remember your preferences; and associate information about you.

Supporting quotations

Commercial information
Provide Services
Communicate with you
Manage and improve our Services
Manage fraud and risk
Market our Services
Comply with laws
Remember your preferences
Associate information about you

Sharing & Disclosure · Company practice

Commercial information: third parties PayPal discloses it to

In the United States disclosure table (columns: category of Personal Information, purpose of collection and disclosure, categories of third parties PayPal discloses it to for a business purpose), Commercial information is disclosed for a business purpose to: PayPal and PayPal affiliates; service providers; authorities; other financial institutions; Partners and Merchants; other third parties; buyers or in connection with a business transfer; and other Users if you have a business profile.

Supporting quotations

Commercial information
PayPal and PayPal affiliates
Service providers
Authorities
Other financial institutions
Partners and Merchants
Other third parties
Buyers or in connection with business transfer
Other Users if you have a business profile

Qualifications & exceptions

  • Disclosure to other Users in this row applies if you have a business profile.

Data Access & Collection · Company practice

Geolocation data: purposes and third-party recipients

In the United States disclosure table (columns: category of Personal Information, purpose of collection and disclosure, categories of third parties PayPal discloses it to for a business purpose), the category "Geolocation Data" has two purposes: send you location-based options, and manage fraud and risk. It is disclosed for a business purpose to authorities, PayPal and PayPal affiliates, service providers, other financial institutions and Partners and Merchants.

Supporting quotations

Send you location-based options
Manage fraud and risk
Authorities
PayPal and PayPal affiliates
Service providers
Other financial institutions
Partners and Merchants
Geolocation Data

Data Access & Collection · Company practice

Internet or network activity: purposes and third-party recipients

In the United States disclosure table (columns: category of Personal Information, purpose of collection and disclosure, categories of third parties PayPal discloses it to for a business purpose), the category "Internet or network activity" has these purposes: operate and provide the Services; communicate with you; manage and improve the Services; market the Services; send you locally relevant options; and comply with laws. It is disclosed for a business purpose to PayPal and PayPal affiliates, service providers, other financial institutions, Partners and Merchants, and authorities.

Supporting quotations

Internet or network activity
Operate and provide Services
Communicate with you
Manage and improve Services
Market our Services
Send you locally relevant options
Comply with laws
PayPal and PayPal affiliates
Service providers
Other financial institutions
Partners and Merchants
Authorities

Data Access & Collection · Company practice

Biometric data: purposes of collection and disclosure

In the United States disclosure table (columns: category of Personal Information, purpose of collection and disclosure, categories of third parties PayPal discloses it to for a business purpose), for the category "Biometric" the stated purpose is to authenticate you for certain actions related to your account, including to meet regulatory requirements or before you access accounts and Services, recover passwords, update profile information, manage payments and payment methods, lift account limitations, and initiate third-party cryptocurrency transfers.

Supporting quotations

Biometric
Authenticate you for certain actions related to your account, including to:
meet regulatory requirements or before you access accounts and Services;
recover passwords;
update profile information;
manage payments and payment methods;
lift account limitations; and
initiate third-party crypto currency transfers.

Qualifications & exceptions

  • The list of authenticated actions is introduced by "including", and the last item continues in the next section of the source.

Sharing & Disclosure · Company practice

Biometric data: last purpose and the one listed recipient category

In the United States disclosure table, the Biometric row ends its purposes with initiating third-party cryptocurrency transfers, and its only listed category of third parties receiving the information for a business purpose is service providers.

Supporting quotations

initiate third-party crypto currency transfers.
Service providers

Qualifications & exceptions

  • Service providers is the only recipient category listed in the Biometric row.

Data Access & Collection · Company practice

Audio, electronic and visual information: purposes and recipients

In the United States disclosure table (category, purpose of collection and disclosure, third parties disclosed to for a business purpose), the row "Audio, electronic, visual, or similar information" has the purposes provide Services, authenticate your access to an account or Fastlane profile, manage and improve Services, and manage fraud and risk, with disclosure to service providers, PayPal and PayPal affiliates, Merchants and Partners, and authorities.

Supporting quotations

Audio, electronic, visual, or similar information
Provide Services
Authenticate your access to an account or Fastlane profile
Manage and improve Services
Manage fraud and risk
Service providers
PayPal and PayPal affiliates
Merchants and Partners
Authorities

Data Access & Collection · Company practice

Professional or employment information: purposes and recipients

In the United States disclosure table (category, purpose of collection and disclosure, third parties disclosed to for a business purpose), the row "Professional or employment information" has the purposes provide Services and manage fraud and risk, with disclosure to service providers, PayPal and PayPal affiliates, Merchants and Partners, authorities and other financial institutions.

Supporting quotations

Professional or employment information
Provide Services
Manage fraud and risk
Service providers
PayPal and PayPal affiliates
Merchants and Partners
Authorities
Other financial institutions

Data Access & Collection · Company practice

Imported contacts and account information: purposes and recipients

In the United States disclosure table (category, purpose of collection and disclosure, third parties disclosed to for a business purpose), the row "Information about your imported contacts" has the purpose provide Services and is disclosed to service providers only. The row "Information in your PayPal, Hyperwallet or Xoom account or Fastlane profile" has the purpose provide Services and is disclosed to service providers, PayPal and PayPal affiliates, Merchants and Partners, authorities and other financial institutions.

Supporting quotations

Information about your imported contacts
Provide Services
Service providers
Information in your PayPal, Hyperwallet or Xoom account or Fastlane profile
Provide Services
Service providers
PayPal and PayPal affiliates
Merchants and Partners
Authorities
Other financial institutions
Fastlane means the online tool whereby individuals can store their payment methods and other Personal Information with PayPal so that they can complete the checkout process faster, create a store or loyalty account, or facilitate other transactions at participating Partners and Merchants with payment card, contact information, shipping data or other data they save in their Fastlane profile as relevant to the specific interaction, participating Partners and Merchants, all without having to manually input payment method details and other Personal Information each time they check out.
Hyperwallet means the PayPal technology and online service that allows payout capabilities for businesses of all shapes and sizes through a single integration.

Data Access & Collection · Company practice

Information you provide when you contact us: purposes and recipients

In the United States disclosure table (category, purpose of collection and disclosure, third parties disclosed to for a business purpose), the row "Information you provide when you contact us" has the purposes provide Services, authenticate your access to an account or Fastlane profile, manage and improve Services (the source splits "Manage and improve" and "Services" across two cells), and manage fraud and risk, with disclosure to service providers, PayPal and PayPal affiliates, Merchants and Partners, and authorities.

Supporting quotations

Information you provide when you contact us
Provide Services
Authenticate your access to an account or Fastlane profile
Manage and improve
Services
Manage fraud and risk
Service providers
PayPal and PayPal affiliates
Merchants and Partners
Authorities

Qualifications & exceptions

  • The split of "Manage and improve" and "Services" across two table cells is read here as one purpose.

Inference & Profiling · Company practice

Inferred data: purposes and recipients

In the United States disclosure table (category, purpose of collection and disclosure, third parties disclosed to for a business purpose), the row "Inferred data" has the purposes provide Services, manage fraud and risk, market our Services, display content based on your interest, better respond to your requests or inquiries, verify your identity and conduct risk assessment, with disclosure to PayPal and PayPal affiliates, service providers, other financial institutions, Merchants and Partners, and authorities.

Supporting quotations

Inferred data
Provide Services
Manage fraud and risk
Market our Services
Display content based on your interest
Better respond to your requests or inquiries or for similar customer service issues
Verify your identity
Conduct risk assessment
PayPal and PayPal affiliates
Service Providers
Other financial institutions
Merchants and Partners
Authorities

Data Access & Collection · Company practice

Sensitive and protected-class information: purposes and recipients

In the United States disclosure table (category, purpose of collection and disclosure, third parties disclosed to for a business purpose), the row "Sensitive Personal Information" has the purposes provide Services and manage fraud and risk, with disclosure to PayPal and PayPal affiliates, service providers, other financial institutions, Merchants and Partners, authorities, and buyers or in connection with a business transfer (split across two cells in the source). The row "Characteristics of Protected Classifications" has the purposes provide our Services and manage risk, with disclosure to PayPal and PayPal affiliates, service providers and authorities.

Supporting quotations

Sensitive Personal Information
Provide Services
Manage fraud and risk
PayPal and PayPal affiliates
Service providers
Other financial institutions
Merchants and Partners
Authorities
Buyers or in connection with
business transfer
Characteristics of Protected Classifications
Provide our Services
Manage risk
PayPal and PayPal affiliates
Service providers
Authorities

Qualifications & exceptions

  • Sensitive Personal Information is listed as disclosed to a wider set of recipients than protected-classification characteristics.

Data Access & Collection · Company practice

Information from your device: purposes and recipients

In the United States disclosure table (category, purpose of collection and disclosure, third parties disclosed to for a business purpose), the row "Information from your device" has the purposes provide Services, manage and improve our Services, manage fraud and risk, communicate with you, link an account, market our Services, and "Personalize your experience Comply with laws" (the source runs two purposes into one cell). It is disclosed to PayPal and PayPal affiliates, service providers, other financial institutions, Merchants and Partners, and authorities.

Supporting quotations

Information from your device
Provide Services
Manage and improve our Services
Manage fraud and risk
Communicate with you
Link an account
Market our Services
Personalize your experience Comply with laws
PayPal and PayPal affiliates
Service providers
Other financial institutions
Merchants and Partners
Authorities

Qualifications & exceptions

  • The last purpose cell merges "Personalize your experience" and "Comply with laws"; each is read as a separate purpose.

Sharing & Disclosure · Company commitment

PayPal says it does not sell or share for targeted advertising in the United States

PayPal says it does not "sell" Personal Information or "share" it for cross-context behavioral or targeted advertising that is subject to non-exempt practices under comprehensive US privacy laws, including for children under 16, and has not done so in the prior 12 months. It notes that some information held by a financial institution is subject to federal law such as the Gramm-Leach-Bliley Act and points to the Notice for Consumers of Financial Products and Services.

Supporting quotations

PayPal does not “sell” Personal Information or “share” Personal Information for cross-context behavioral or targeted advertising that is subject to non-exempt practices under comprehensive privacy laws in the United States, including for children under the age of 16, and has not done so in the prior 12 months. Some Personal Information collected, processed, or disclosed by a financial institution are subject to federal laws, such as the Gramm-Leach-Bliley Act. Please see Notice for Consumers of Financial Products and Services below for more information about your rights under United States federal law.

Qualifications & exceptions

  • The statement is limited to "non-exempt practices" under comprehensive US privacy laws.
  • It covers the prior 12 months.
  • The disclosures to Partners and Merchants for personalized shopping are described elsewhere in the statement and are not discussed in this passage.

Cross-references

  • contrast (model-proposed): Sharing for personalized shopping, with an opt-out in the United States — contrast: PayPal states it does not sell or share Personal Information for cross-context behavioral or targeted advertising that is subject to non-exempt practices, while elsewhere it discloses Personal Information to Partners and Merchants for personalized shopping with an opt-out. The text does not say whether the personalized shopping disclosure is an exempt practice, so the two provisions pull in different directions on their face.
  • contrast (model-proposed): Why PayPal processes your Personal Information — contrast: The overview of uses lists targeted advertising among features that may rely on an opt-out or consent, while the United States disclosure says PayPal does not share Personal Information for targeted advertising subject to non-exempt practices. The scope words "non-exempt practices" are not explained in the text.

Legal Rights & Agreement Rules · Company commitment

Published metrics about privacy rights requests

PayPal provides, through a linked page, the metrics the CCPA requires about how it handled privacy rights requests.

Supporting quotations

PayPal provides its [metrics](https://www.paypal.com/us/legalhub/paypal/ca-privacy-rights-full) required under the CCPA relating to how it handled privacy rights requests.

Not stated here

  • The linked metrics page is not part of the analyzed text.

Legal Rights & Agreement Rules · Context

Financial products notice: scope and effective date

The Notice for Consumers of Financial Products and Services does not apply to Unbranded Payment Services, and in this part of the statement "personal information" has the meaning given by the Gramm-Leach-Bliley Act. The notice is dated "Rev. September 28, 2026" and is headed "FACTS: What does PayPal do with your personal information?"

Supporting quotations

The following Notice for Consumers of Financial Products and Services does not apply to Unbranded Payment Services. Please note, the definition of "personal information" for this portion of the Privacy Statement has the meaning given to it by the Gramm-Leach-Bliley Act.
Rev. September 28, 2026
FACTS WHAT DOES PAYPAL DO WITH YOUR PERSONAL INFORMATION?
Unbranded Payment Services means when you are interacting with and making payments to Partners and Merchants using our card processing and/or ACH origination services that do not carry the PayPal brand or when you use our Braintree services.

Qualifications & exceptions

  • Unbranded Payment Services are excluded from this notice.
  • The Gramm-Leach-Bliley meaning of "personal information" applies in this notice, not the earlier definition.

Legal Rights & Agreement Rules · Context

Financial products notice: why it exists and what information it covers

The notice explains that financial companies choose how they share your personal information, that federal law gives consumers the right to limit some but not all sharing, and that federal law requires companies to say how they collect, share and protect it. The types of personal information PayPal collects and shares depend on the product or service you have; it can include Social Security number and account balances, payment or transaction history, and credit history or credit scores. When you are no longer a customer, PayPal continues to share your information as described in the notice.

Supporting quotations

Why? Financial companies choose how they share your personal information. Federal law gives consumers the right to limit some but not all sharing. Federal law also requires us to tell you how we collect, share, and protect your personal information. Please read this notice carefully to understand what we do.
What?
The types of personal information we collect and share depend on the product or service you have with us. This information can include:
Social Security number and account balances
Payment history or transaction history
Credit history or credit scores
When you are no longer our customer, we continue to share your information as described in this notice.

Qualifications & exceptions

  • The listed types are examples ("can include").
  • Sharing continues after you stop being a customer.

Sharing & Disclosure · Context

Financial products notice: how financial companies share customer information

The notice says all financial companies need to share customers' personal information to run their everyday business, and the table that follows lists the reasons financial companies can share, the reasons PayPal chooses to share, and whether you can limit that sharing.

Supporting quotations

How? All financial companies need to share customers' personal information to run their everyday business. In the section below, we list the reasons financial companies can share their customers' personal information; the reasons PayPal chooses to share; and whether you can limit this sharing.
Reasons we can share your personal information Does PayPal share? Can you limit this sharing?

Sharing & Disclosure · Company practice

PayPal shares for everyday business, marketing and joint marketing, and you cannot limit it

In the financial products notice table "Reasons we can share your personal information" (columns: reason, does PayPal share?, can you limit this sharing?), PayPal shares, and you cannot limit that sharing, for four reasons: its everyday business purposes (such as processing your transactions, maintaining your accounts, responding to court orders and legal investigations, or reporting to credit bureaus); its own marketing, to offer its products and services to you; joint marketing with other financial companies; and its affiliates' everyday business purposes involving information about your transactions and experiences.

Supporting quotations

For our everyday business purposes – such as to process your transactions, maintain your account(s), respond to court orders and legal investigations, or report to credit bureaus Yes No
For our marketing purposes – to offer our products and services to you Yes No
For joint marketing with other financial companies Yes No
For our affiliates' everyday business purposes – information about your transactions and experiences Yes No

Qualifications & exceptions

  • Each of these four rows is answered "Yes" for sharing and "No" for whether you can limit it.

Sharing & Disclosure · Company commitment

PayPal does not share creditworthiness with affiliates or for affiliates to market to you

In the financial products notice table "Reasons we can share your personal information" (columns: reason, does PayPal share?, can you limit this sharing?), PayPal answers "No" for sharing information about your creditworthiness for its affiliates' everyday business purposes and for its affiliates to market to you, and the "can you limit" column reads "We don't share".

Supporting quotations

For our affiliates' everyday business purposes – information about your creditworthiness No We don't share
For our affiliates to market to you No We don't share

Sharing & Disclosure · User right or choice

PayPal shares with nonaffiliates to market to you, and you can limit it

In the financial products notice table "Reasons we can share your personal information" (columns: reason, does PayPal share?, can you limit this sharing?), for nonaffiliates to market to you, PayPal answers "Yes" to sharing and "Yes" to whether you can limit the sharing.

Supporting quotations

For our nonaffiliates to market to you Yes Yes

Sharing & Disclosure · Procedure

How to limit sharing under the financial products notice

To limit sharing, you may limit certain sharing by logging into your PayPal account and editing your preferences in the Data and Privacy setting, or call 1-888-221-1161 to limit all sharing where permitted. If you are a new customer, PayPal can begin sharing your information 30 days after the date it sent the notice, and after you stop being a customer it continues sharing as the notice describes. You can contact PayPal at any time to limit sharing. Questions can go to PayPal customer service at 1-888-221-1161 or the privacy contact page.

Supporting quotations

To limit our sharing
To limit our sharing
You may limit certain sharing by logging into you PayPal Account and editing your preferences in the Data and Privacy setting.
Call 1-888-221-1161 to limit all sharing where permitted.
Please note: If you are a new customer, we can begin sharing your information 30 days from the date we sent this notice. When you are no longer our customer, we continue to share your information as described in this notice.
However, you can contact us at any time to limit our sharing.
Questions? Call our customer service at 1-888-221-1161 or visit us at [/smarthelp/contact-us/privacy](https://www.paypal.com/smarthelp/contact-us/privacy).

Qualifications & exceptions

  • The online setting limits "certain" sharing; the phone route is described as limiting all sharing "where permitted".
  • New customers' information can be shared after 30 days.

Data Access & Collection · Company practice

Who provides the notice, how information is protected and collected

The notice is provided by PayPal, Inc. and applies to your personal PayPal and Xoom accounts and Fastlane profile. To protect personal information from unauthorized access and use, PayPal uses security measures that comply with federal law, including computer safeguards and secured files and buildings. PayPal collects personal information, for example, when you open an account or provide account information, use a credit or debit card or give contact information, or use your PayPal or Xoom account to say who receives money and where to send it. It also collects personal information from others, such as credit bureaus, affiliates or other companies.

Supporting quotations

Who we are
Who is providing this notice? This privacy notice is provided by PayPal, Inc. and is applicable to your personal PayPal and Xoom accounts, and Fastlane profile.
What we do
How does PayPal protect my personal information? To protect your personal information from unauthorized access and use, we use security measures that comply with federal law. These measures include computer safeguards and secured files and buildings.
How does PayPal collect my personal information?
We collect your personal information, for example, when you
open an account or provide account information
use your credit or debit card or give us your contact information
use your PayPal, and/or Xoom account to tell us who receives the money
use your PayPal, and/or Xoom account to tell us where to send the money
We also collect your personal information from others, such as credit bureaus, affiliates, or other companies.
Fastlane means the online tool whereby individuals can store their payment methods and other Personal Information with PayPal so that they can complete the checkout process faster, create a store or loyalty account, or facilitate other transactions at participating Partners and Merchants with payment card, contact information, shipping data or other data they save in their Fastlane profile as relevant to the specific interaction, participating Partners and Merchants, all without having to manually input payment method details and other Personal Information each time they check out.

Qualifications & exceptions

  • The collection examples are introduced with "for example".

Legal Rights & Agreement Rules · Restriction or exception

Why you cannot limit all sharing

Federal law gives you the right to limit only sharing information about your creditworthiness for affiliates' everyday business purposes, affiliates using your information to market to you, and sharing for nonaffiliates to market to you. State laws and individual companies may give you additional rights to limit sharing, and the notice points to state-law information below.

Supporting quotations

Why can't I limit all sharing?
Federal law gives you the right to limit only
sharing information about your creditworthiness for affiliates' everyday business purposes
affiliates from using your information to market to you
sharing for nonaffiliates to market to you
State laws and individual companies may give you additional rights to limit sharing. See below for more information on your rights under state law.

Qualifications & exceptions

  • The three limitable categories are those the federal law covers.

Sharing & Disclosure · Context

Notice definitions: affiliates, nonaffiliates and joint marketing

Affiliates are companies related by common ownership or control, and PayPal's affiliates include Bill Me Later, Inc. Nonaffiliates are companies not related by common ownership or control, and the nonaffiliates with which PayPal shares include service providers that perform services or functions on its behalf. Joint marketing is a formal agreement between nonaffiliated financial companies that together market financial products or services to you, and PayPal's joint marketing partners include financial companies and banks.

Supporting quotations

Definitions
Affiliates
Companies related by common ownership or control. They can be financial and nonfinancial companies.
Our affiliates include Bill Me Later, Inc.
Nonaffiliates
Companies not related by common ownership or control. They can be financial and nonfinancial companies.
Nonaffiliates with which we share personal information include service providers that perform services or functions on our behalf.
Joint Marketing A formal agreement between nonaffiliated financial companies that together market financial products or services to you. Our joint marketing partners include financial companies and banks.

Qualifications & exceptions

  • The examples of affiliates, nonaffiliates and joint marketing partners are introduced with "include".

Sharing & Disclosure · Company practice

Other important information: international transfers and the November 27, 2024 rule

PayPal may transfer personal information to other countries, for example for customer service or to process transactions. If you had a PayPal account before November 27, 2024, PayPal says it only shares personal information collected after that date unless you opt out, and may share earlier information if you affirmatively consent by editing preferences in your Data and Privacy settings. If you opened an account after November 27, 2024, PayPal can begin sharing information associated with your account, and sharing continues after you stop being a customer as the notice describes.

Supporting quotations

Other important information
We may transfer Personal Information to other countries, for example, for customer service or to process transactions.
If you are an existing PayPal customer who had a PayPal account before November 27, 2024, we only share personal information collected after November 27, 2024, unless you opt-out. We may share information from earlier in your account, which allows for even better personalization, if you affirmatively consent by editing your preferences in your Data and Privacy settings.
If you are a customer who opened a PayPal account after November 27, 2024, we can begin sharing information associated with your account. When you are no longer our customer, we continue to share your information as described in this notice.

Qualifications & exceptions

  • Information from before November 27, 2024 is shared only with your affirmative consent.

Not stated here

  • The phrase "unless you opt-out" in the sentence about pre-November 27, 2024 accounts is not explained in this passage.

Cross-references

  • contrast (model-proposed): Sharing for personalized shopping, with an opt-out in the United States — contrast: The financial products notice says pre-November 27, 2024 accounts share only information collected after that date "unless you opt-out" and share earlier information with affirmative consent, while the main statement says information from before that date is shared only if you consent and that opting out stops sharing for personalized shopping. The phrase "unless you opt-out" is not explained.

Legal Rights & Agreement Rules · Context

Pointers to the general Privacy Statement and state financial privacy notices

The notice points to the general Privacy Statement for other Personal Information handling practices and rights under privacy laws for information not covered by the Gramm-Leach-Bliley Act, and to a separate California, North Dakota and Vermont Supplemental Financial Privacy Notice for state financial privacy laws. It invites you to contact PayPal with questions.

Supporting quotations

Other Privacy Rights: Please see our general [Privacy Statement](https://www.paypal.com/legalhub/privacy-full) to learn more about our Personal Information handling practices and other rights you may have under privacy laws for Personal Information that is not covered by the Gramm-Leach-Bliley Act. In addition, please see our [California, North Dakota, and Vermont Supplemental Financial Privacy Notice](https://www.paypal.com/us/legalhub/privacy-states?locale.x=en_US) for more information about state financial privacy laws. Contact us if you have questions about our Privacy Statement, this consumer notice, or your Personal Information.

Not stated here

  • The linked supplemental notice is not part of the analyzed text.

Sharing & Disclosure · Company commitment

California mailing address: limits on sharing

If your PayPal or Xoom account or Fastlane profile has a California mailing address, PayPal says it will not share the Personal Information it collects about you except as permitted under California law, for example with your consent or to service your account, and will limit sharing among its companies as California law requires.

Supporting quotations

California: If your PayPal or Xoom account or Fastlane profile has a California mailing address, we will not share Personal Information we collect about you except to the extent permitted under California law, including for example, with your consent or to service your account. We will limit sharing among our companies to the extent required by California law.
Fastlane means the online tool whereby individuals can store their payment methods and other Personal Information with PayPal so that they can complete the checkout process faster, create a store or loyalty account, or facilitate other transactions at participating Partners and Merchants with payment card, contact information, shipping data or other data they save in their Fastlane profile as relevant to the specific interaction, participating Partners and Merchants, all without having to manually input payment method details and other Personal Information each time they check out.

Qualifications & exceptions

  • Applies to accounts or profiles with a California mailing address.
  • The consent and servicing examples are introduced with "for example".

Sharing & Disclosure · Company commitment

Vermont mailing address: limits on creditworthiness and marketing disclosures

If your PayPal or Xoom account or Fastlane profile has a Vermont mailing address, PayPal says it will not disclose information about your creditworthiness to its affiliates, and will not disclose your Personal Information, financial information, credit report or health information to nonaffiliated third parties to market to you, other than as Vermont law permits, unless you authorize the disclosure. More information is available through the Customer Service web portal or by calling 1-888-221-1161.

Supporting quotations

Vermont: If your PayPal, Xoom account or Fastlane profile has a Vermont mailing address, we will not disclose information about your creditworthiness to our affiliates and will not disclose your Personal Information, financial information, credit report, or health information to nonaffiliated third parties to market to you, other than as permitted by Vermont law, unless you authorize us to make those disclosures. Additional information concerning our privacy policies can be found at [Customer Service web portal](https://www.paypal.com/smarthelp/contact-us/privacy) or call 1-888-221-1161.

Qualifications & exceptions

  • Applies to accounts or profiles with a Vermont mailing address.
  • Exceptions are what Vermont law permits or what you authorize.

Legal Rights & Agreement Rules · User right or choice

Nevada mailing address: marketing calls and complaint contacts

If your PayPal or Xoom account or Fastlane profile has a Nevada mailing address, PayPal gives this notice under Nevada law. If you prefer not to receive marketing calls from PayPal, you can be placed on its internal Do Not Call List by calling 1-888-221-1161 or using its online help page. The notice also gives PayPal's address in La Vista, Nebraska, and contact details for the Nevada Attorney General's Bureau of Consumer Protection in Las Vegas.

Supporting quotations

Nevada: If your PayPal, Xoom account or Fastlane profile has a Nevada mailing address, we are providing this notice pursuant to Nevada law. If you prefer not to receive marketing calls from PayPal, you may be placed on our internal Do Not Call List by calling 1-888-221-1161 or going to [/smarthelp/home](https://www.paypal.com/smarthelp/home). For more information, you can contact PayPal at 12312 Port Grace Blvd, La Vista, NE 68128 or you can contact the Bureau of Consumer Protection, Office of the Nevada Attorney General, 555 E. Washington St., Suite 3900, Las Vegas, NV 89101; telephone number: 1-702-486-3132; email: Aginfo@ag.nv.gov.

Legal Rights & Agreement Rules · Procedure

Phone and web contacts to talk about a PayPal account, Xoom account or Fastlane profile

To talk about your PayPal account, call PayPal Customer Service at 1-888-221-1161 or use the Customer Service web portal. For a Xoom account, call Xoom Customer Service at 1-877-815-1531 or use the Help Center web portal. For a Fastlane profile, call PayPal Customer Service at 1-844-705-3555 or use the Fastlane profile management portal.

Supporting quotations

To talk about your PayPal account, call PayPal Customer Service at 1-888-221-1161 or visit our [Customer Service web portal](https://www.paypal.com/smarthelp/contact-us/privacy). To talk about your Xoom account, call Xoom Customer Service at 1-877-815-1531 or visit our [Help Center web portal](https://help.xoom.com/s/contactsupport?language=en_US). To talk about your Fastlane profile, call PayPal Customer Service at 1-844-705-3555 or visit your [Fastlane profile management portal](https://connect.paypal.com/help/support).

Legal Rights & Agreement Rules · Context

UK and EEA disclosures: who is the data controller

This section adds disclosures for individuals in the UK and the European Economic Area (EEA) and supplements the main statement. The data controller of your Personal Information is the PayPal entity established in the country or jurisdiction where you live, which can be found in the contact information.

Supporting quotations

This section contains additional disclosures for individuals in the UK and EEA and supplements PayPal’s Privacy Statement above.
The data controller of your Personal Information is the PayPal entity established in the country or jurisdiction where you reside, which can be found in Our Contact Information.

Qualifications & exceptions

  • Applies to individuals in the UK and EEA.

Legal Rights & Agreement Rules · Context

Lawful bases under the GDPR

PayPal says it may process Personal Information under the lawful bases set out in a table under the General Data Protection Regulation. The table has three columns: the processing purposes, the types of data, and the lawful basis and any special condition for processing.

Supporting quotations

We may process your Personal Information in accordance with the lawful bases below under the General Data Protection Regulation Types of Data Lawful basis and special condition for processing (if relevant)

Use & Processing · Company practice

Purposes treated as necessary for the contract: service, payments, identity and claims

In the UK and EEA lawful-basis table (columns: processing purposes, types of data, lawful basis), the first group of purposes, tied to the contract basis, includes: providing the Services, fulfilling agreements with you and administering the relationship; administering your payment for products and the customer relationship; assessing creditworthiness for an application, confirming identity and contact details and protecting you and others from fraud; confirming identity including by electronic signature; proving that transactions were executed; establishing, exercising or defending a legal claim or collection procedure; complying with internal procedures; and assessing which payment options and services to offer you, for example through internal and external credit assessments.

Supporting quotations

These processing purposes include:
to provide our Services, to fulfil relevant agreements with you and to otherwise administer our business relationship with you;
to administer your payment for products and the customer relationship;
to assess your creditworthiness in connection with your application, confirm your identity and your contact information, and protect you and others from fraud;
to confirm your identity, also through the use of electronic signature, and verify your personal and contact details;
to prove that transactions have been executed;
to establish, exercise or defend a legal claim or collection procedure;
to comply with internal procedures;
to assess which payment options and services to offer you, for example by carrying out internal and external credit assessments;

Qualifications & exceptions

  • The purposes are introduced as "include", so the list is not stated to be exhaustive.

Use & Processing · Company practice

Purposes treated as necessary for the contract: analytics, security, legal compliance and product features

In the UK and EEA lawful-basis table (columns: processing purposes, types of data, lawful basis), the same group of purposes also includes: customer analysis, administering the Services and internal operations such as troubleshooting, data analysis, testing, research and statistics; communicating with you about the Services; promoting security of the Services; complying with applicable laws such as anti-money laundering and bookkeeping rules; processing Visa+ transactions using the recipient's name and payment information from Visa and participating wallets; using third-party wallet, network and processor information to process PayPal World transactions; recognizing Fastlane users and checking whether Fastlane payments are authorized; and providing Point of Sale receipts, including remembering your email or mobile number for later purchases at any Point of Sale merchant when you use the same card.

Supporting quotations

for customer analysis, to administer our Services, and for internal operations, for example troubleshooting, data analysis, testing, research and statistical purposes;
to communicate with you in relation to our Services;
to promote the security of the Services;
to comply with applicable laws, such as AML and bookkeeping laws and rules issued by our designated banks and relevant card networks;
specifically for Visa+, we will receive the recipient’s name and payment information from Visa and third-party Visa+ participating digital wallets for the purpose of processing and matching Visa+ payment transactions between participating digital wallets and PayPal;
We will use information from third parties, including third-party wallets, payment networks, and processors, to process PayPal World transactions.
For Fastlane users, we may recognize you as a Fastlane user when you shop on participating Partner and Merchant sites, and we may prompt you to engage in participating Partner or Merchant interactions, such as registering for a store or loyalty account using your Fastlane profile. We will also use your Personal Information and payment method details to determine whether the payment you are making with a participating Partner or Merchant is authorized by you and likely to be successfully authorized by the payment method you choose to use when you make a purchase using details from your Fastlane profile; and
provide receipts in connection with PayPal Point of Sale services. For buyers using our PayPal Point of Sale services (including Venmo Tap to Pay), you may choose to provide us your contact details so that we can send you digital receipts. If you provide your e-mail address or mobile number to a Partner or Merchant who uses PayPal Point of Sale, we may remember your details for the next time you buy something from a Merchant who uses PayPal Point of Sale in its physical store, if you use the same payment card. This is regardless of whether you have previously bought something from this Merchant or not. This means that your e-mail address or mobile number will be pre-filled in the receipt view for your convenience the next time you buy something from a Merchant who uses PayPal Point of Sale in its physical store.
Fastlane means the online tool whereby individuals can store their payment methods and other Personal Information with PayPal so that they can complete the checkout process faster, create a store or loyalty account, or facilitate other transactions at participating Partners and Merchants with payment card, contact information, shipping data or other data they save in their Fastlane profile as relevant to the specific interaction, participating Partners and Merchants, all without having to manually input payment method details and other Personal Information each time they check out.

Data Access & Collection · Company practice

Data categories listed for the contract-based purposes

In the UK and EEA lawful-basis table (columns: processing purposes, types of data, lawful basis), the types of data listed as "necessary categories of Personal Information" for these purposes are: registration and contact information; identification and signature information; payment information; information related to legal requirements; information you provide when you contact us; transaction information; package tracking; service-specific information; Personal Information (listed as such in the source); information from credit reporting agencies and financial institutions; information from your connected financial accounts; information from your use of the Services; technical usage data; device information; and location data.

Supporting quotations

Necessary categories of Personal Information include:
Registration and contact information;
Identification and signature information;
Payment information;
Information related to legal requirements;
Information you provide when you contact us;
Transaction information;
Package tracking;
Service-specific;
Personal Information;
Information from CRAs and financial institutions;
Information from your connected financial accounts;
Information from your use of the Services;
Technical usage data;
Device information; and
Location data.

Legal Rights & Agreement Rules · Company practice

Basis stated for the first group of purposes: pre-contractual and contractual necessity

In the UK and EEA lawful-basis table (columns: processing purposes, types of data, lawful basis), the lawful basis stated for the first row is that PayPal considers these categories necessary to fulfil its pre-contractual and contractual obligations to you, and that without them you will not be able to use the Services.

Supporting quotations

We collect these categories of Personal Information because we consider them necessary to fulfil our pre-contractual and contractual obligations to you and without which you will not be able to use the Services.

Qualifications & exceptions

  • The basis is PayPal's own statement that the data is necessary for contract performance.
  • The source does not name the GDPR article in this cell.

Use & Processing · Company practice

Purposes in the second group of the lawful-basis table (first part)

In the UK and EEA lawful-basis table (columns: processing purposes, types of data, lawful basis), the second group of purposes begins with: ensuring content is presented in the most effective way for you and your device; preventing misuse of the Services to keep the platform safe and secure; determining your eligibility for, and communicating with you about, Services you may qualify for or that may interest you, for example through internal credit assessments; and carrying out risk analysis, fraud prevention and risk management, for example through Automated Decision Making and AI. The list continues in the next section of the source.

Supporting quotations

These processing purposes include:
to ensure that content is presented in the most effective way for you and your device;
to prevent misuse of our Services as part of our efforts to keep our platform safe and secure;
to determine your eligibility for and to communicate with you about Services for which you may qualify or that may be of interest to you, for example by carrying out internal credit assessments;
to carry out risk analysis, fraud prevention and risk management (e.g., through Automated Decision Making and AI);

Qualifications & exceptions

  • The list is continued in the next section of the source, where the basis for this group is stated.

Use & Processing · Company practice

Legitimate-interest purposes: improvement, marketing, preferences and linking activity

In the UK and EEA lawful-basis table (columns: processing purposes, types of data, lawful basis), the second group of purposes (legitimate interest) also includes: managing and improving the Services and general business development, for example improving risk models to minimize fraud, developing products, internal operations, analysis, testing, research, statistics and exploring new business opportunities; keeping your account and financial information up to date; marketing, product and customer analysis, including where PayPal partners with others to market about its Partners; facilitating your participation in competitions, offerings and events; providing information, news and marketing about the Services, including rewards or ads, also with partners; associating information about you to identify your use of the Services without a PayPal account or the Unbranded Payment Services (for example Braintree) and linking those transactions to your account if you have or later set one up; and remembering your preferences such as payment method or digital receipt delivery.

Supporting quotations

to manage and improve our Services and for general business development purposes, for example improving risk models to minimize fraud, develop new products and features, for internal operations (e.g., for troubleshooting), data analysis, testing, research, statistical purposes, and explore new business opportunities;
to keep your account and financial information up to date;
for marketing, product and customer analysis, including where we partner with others to offer similar services to market about our Partners and testing, for example to improve our product range and optimize our customer offerings;
to facilitate your participation in competitions, offerings, and events;
to provide you with information, news, and marketing about our Services, including rewards or ads from us or where we partner with others to offer similar services;
to associate information about you to identify your use of Services without a PayPal account (e.g., Pay without a PayPal account) or Unbranded Payment Services (e.g., Braintree) and to associate such transactions with your account, if you have one or later establish an account;
to remember your preferences for the next time you use the Services, such as which of your payment methods you prefer or whether you choose to receive digital receipts via email or text when you checkout; and
Pay without a PayPal Account means our Services may be accessed by individuals without using a PayPal account, a Fastlane profile, or the Unbranded Payment Services. Pay without a PayPal account does not include Venmo, which is subject to its own terms of service and separate privacy statement.
Unbranded Payment Services means when you are interacting with and making payments to Partners and Merchants using our card processing and/or ACH origination services that do not carry the PayPal brand or when you use our Braintree services.

Use & Processing · Company practice

Legitimate-interest purposes: compliance, risk, contacts and precise location

In the UK and EEA lawful-basis table (columns: processing purposes, types of data, lawful basis), the legitimate-interest group also includes: complying with laws such as anti-money laundering, bookkeeping, capital adequacy and bank and card network rules, for example KYC, preventing and investigating money laundering, terrorist financing and fraud, sanction screening, and reporting to tax, police, enforcement and supervisory authorities including where not compelled but with a good faith belief that sharing is necessary to comply with law; financial risk management such as credit performance, product suitability, identity checks, debt recovery and preventing crime and insurance risks; processing information about your contacts, where you certify you have permission to provide it; and using precise geolocation to enhance security of the Sites and Services, collected from Users while they are logged into their financial account.

Supporting quotations

to comply with applicable laws, such as AML, bookkeeping laws, regulatory capital adequacy requirements, and rules issued by our designated banks and relevant card networks. For example, when we process Personal Information for KYC requirements, to prevent, detect and investigate money laundering, terrorist financing and fraud. We also carry out sanction screening, report to tax authorities, police enforcement authorities, enforcement authorities, supervisory authorities where we are not compelled by applicable laws but where we have a good faith belief that sharing the information is necessary to comply with applicable law;
to conduct financial risk management obligations, such as credit performance and quality, assess product suitability, check your identity, trace and recover debts, and prevent criminal activity, insurance risks and compliance with capital adequacy requirements under applicable law;
to process information about your contacts to make it easy for you to find and connect them and improve payment accuracy. By providing us with information about your contacts you certify that you have permission to provide that information to PayPal for the purposes described in this Privacy Statement;
we will use precise geolocation to enhance the security of the Sites and Services. We collect precise geolocation data from Users while they are logged into their financial account.
Users means other account holders and non-account holders of the PayPal Services.

Qualifications & exceptions

  • Reporting to authorities can occur without a legal compulsion when PayPal has a good faith belief that sharing is necessary to comply with law.

Data Access & Collection · Company practice

Data categories listed for the legitimate-interest purposes

In the UK and EEA lawful-basis table (columns: processing purposes, types of data, lawful basis), the necessary categories of Personal Information listed for the legitimate-interest group are: registration and contact information; identification and signature information; payment information; information related to legal requirements; information you provide when you contact us, including information related to your vulnerability; transaction information; package tracking; service-specific Personal Information; information from credit reporting agencies and financial institutions; information from your connected financial accounts; information from your use of the Services; technical usage data; and device information and location data.

Supporting quotations

Necessary categories of Personal Information include:
Registration and contact information;
Identification and signature information;
Payment information;
Information related to legal requirements;
Information you provide when you contact us including information related to your vulnerability;
Transaction information;
Package tracking;
Service-specific Personal Information;
Information from CRAs and financial institutions;
Information from your connected financial accounts;
Information from your use of the Services;
Technical usage data;
Device information; and Location data.

Legal Rights & Agreement Rules · Company practice

Basis stated for the legitimate-interest group

In the UK and EEA lawful-basis table (columns: processing purposes, types of data, lawful basis), the lawful basis stated for the second group is PayPal's legitimate interest in keeping itself a secure financial service, continuing to offer innovative services of interest to you, and optimizing sales efforts by tailoring services to your interests, including ads and offers shown to you. PayPal says it relies on this where its legitimate interests are not overridden by the interests or fundamental rights and freedoms of the data subject.

Supporting quotations

We have a legitimate interest in ensuring that PayPal remains a secure financial service and continuing to offer services that are innovative and of interest to you as well as to optimize our sales efforts by tailoring our services to your interests including ads and offers you may be shown. We do this where our legitimate interests are not overridden by the interests or fundamental rights and freedoms of the data subject.

Qualifications & exceptions

  • Applies only where the data subject's interests or fundamental rights do not override PayPal's legitimate interests.

Use & Processing · Company practice

Purposes in the third group of the lawful-basis table

In the UK and EEA lawful-basis table (columns: processing purposes, types of data, lawful basis), the third group of purposes includes: providing the Services and products; verifying your identity, also for signature purposes, and your personal and contact details; establishing, exercising or defending a legal claim or collection procedure; preventing misuse of the Services to keep the platform safe; risk analysis, fraud prevention and risk management, for example through Automated Decision Making and AI; and complying with laws such as anti-money laundering, bookkeeping, capital adequacy and bank and card network rules, including KYC, sanction screening and reporting to tax, police, enforcement and supervisory authorities.

Supporting quotations

These processing purposes include:
to provide our Services and products;
to verify your identity, also for signature purposes, and verify your personal and contact details;
to establish, exercise or defend a legal claim or collection procedure;
to prevent misuse of our Services as part of our efforts to keep our platform safe and secure;
to carry out risk analysis, fraud prevention and risk management (e.g., through Automated Decision Making and AI); and
to comply with applicable laws, such as AML and bookkeeping laws and regulatory capital adequacy requirements and rules issued by our designated banks and relevant card networks. For example, when we process Personal Information for KYC requirements, to prevent, detect and investigate money laundering, terrorist financing and fraud. We also carry out sanction screening, and report to tax authorities, police enforcement authorities, enforcement authorities, and supervisory authorities.

Qualifications & exceptions

  • The lawful basis for this group is in a following cell of the source.

Data Access & Collection · Company practice

Data categories listed for the third group (first part)

In the UK and EEA lawful-basis table (columns: processing purposes, types of data, lawful basis), the necessary categories of Personal Information listed for the third group begin with: registration and contact information; identification and signature information; payment information; information related to legal requirements; information you provide when you contact us; transaction information; package tracking; service-specific Personal Information; information from credit reporting agencies and financial institutions; and information from your connected financial accounts. The list continues in the next section of the source.

Supporting quotations

Necessary categories of Personal Information include:
Registration and contact information;
Identification and signature information;
Payment information;
Information related to legal requirements;
Information you provide when you contact us;
Transaction information;
Package tracking;
Service-specific Personal Information;
Information from CRAs and financial institutions;
Information from your connected financial accounts;
Information from your use of the Services;

Legal Rights & Agreement Rules · Company practice

Third group: remaining data categories and the legal-obligation basis

In the UK and EEA lawful-basis table (columns: processing purposes, types of data, lawful basis), the third group's data categories end with information from your use of the Services, technical usage data, device information and location data. The lawful basis stated for this group is a legal obligation under applicable laws to conduct certain processing activities, done where necessary to comply with applicable laws.

Supporting quotations

Information from your use of the Services;
Technical usage data;
Device information; and
Location data.
We have a legal obligation under applicable laws to conduct certain processing activities. We do this where it is necessary to comply with applicable laws.

Qualifications & exceptions

  • Stated as a legal obligation; the group's purposes include legal claims, misuse prevention, risk management and law compliance.

Sharing & Disclosure · Company practice

Transfers outside the UK and EEA

When PayPal transfers Personal Information of EU residents within its subsidiaries and affiliated companies, it relies on Binding Corporate Rules approved by competent supervisory authorities. For other transfers outside the UK (for UK residents) or the EEA (for EEA residents), it says it will make sure the transfers comply with EU and UK data protection law. In practice it will transfer to a non-EEA or non-UK recipient only where the recipient is in a country judged adequate by the European Commission or the UK Secretary of State, has signed the Standard Contractual Clauses or the UK International Data Transfer Agreement or Addendum, or a data transfer derogation applies, for example where you have consented.

Supporting quotations

When we transfer Personal Information of EU residents within PayPal subsidiaries and affiliated companies, we rely on our [Binding Corporate Rules](https://www.paypal.com/uk/webapps/mpp/ua/bcr?locale.x=en_GB), which have been approved by competent Supervisory Authorities.
For any other transfer of Personal Information to a country outside of the UK (for UK residents) or the EEA (for EEA residents) we will ensure that any such transfers are compliant with EU and UK data protection law, as applicable.
In practice, this means that we will only transfer your Personal Information to a non-EEA or non-UK recipient where: (i) the recipient is located in a country that the European Commission has decided is adequate to receive Personal Information from the EEA or the UK Secretary of State has decided is adequate to receive Personal Information from the UK (as applicable); (ii) the recipient has signed appropriate contractual terms with us that incorporate the European Commission’s [Standard Contractual Clauses](https://commission.europa.eu/publications/standard-contractual-clauses-international-transfers_en) or the UK Information Commissioner’s [International Data Transfer Agreement or International Data Transfer Addendum](https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/international-transfers/international-data-transfer-agreement-and-guidance/) (as applicable); or (iii) a data transfer derogation applies (for example, where you have consented to the transfer of your personal information).

Qualifications & exceptions

  • The three routes are alternatives; a derogation such as consent is one of them.

Legal Rights & Agreement Rules · User right or choice

UK and EEA rights: to be informed, access, correct, erase, restrict and port data

Individuals in the UK and EEA have the right to be informed about the collection and use of their Personal Information, to access and get copies, to correct it, in certain circumstances to erase it, in certain circumstances to restrict processing, and in certain circumstances to data portability by automated means where processing is based on consent, performance of a contract or assisting you to enter a contract. These rights are further illustrated in the Your Data Protection Rights section.

Supporting quotations

Individuals located in the UK and EEA benefit from the following rights, which are further illustrated in Your Data Protection Rights:
The right to be informed about the collection and use of your Personal Information;
The right to access and request copies of your Personal Information;
The right to correct your Personal Information;
The right, in certain circumstances, to erase your Personal Information;
The right to restrict our processing of your Personal Information in certain circumstances;
The right to data portability of your Personal Information by automated means in certain circumstances where we process your Personal Information based on consent, for performance of a contract or where the processing is required to assist you into entering into a contract.

Qualifications & exceptions

  • Erasure, restriction and portability apply "in certain circumstances".

Legal Rights & Agreement Rules · User right or choice

Right to complain to a supervisory authority

You have the right to complain to your local Supervisory Authority about PayPal's use of your Personal Information. In the EEA you may complain to PayPal's lead supervisory authority, the Luxembourg National Commission for Data Protection (CNPD), at its postal address in Belvaux, Luxembourg. In the UK you may complain to your local data protection authority, the Information Commissioner's Office, at its Manchester address or website. You are not required to contact PayPal first, but PayPal asks that you do so to give it a chance to address your concerns.

Supporting quotations

In addition, you have the right to complain to your local Supervisory Authority about our use of your Personal Information.
In EEA, you may lodge a complaint with our lead supervisory authority for data protection, Luxemburg National Commission for Data Protection (CNPD) by post at Commission Nationale pour la Protection des Donnees, Service des plaints, 15, Boulevard du Jazz, L-4370 Belvaux, Luxembourg.
In the UK, you may also lodge a complaint with your local data protection authority, which is the Information Commissioner’s Office: website: [https://ico.org.uk/](https://ico.org.uk/), address: ICO Head Office, 4th Floor, No.3 Circle Square, 5 Hawkshaw Street, Manchester, M1 7BL.
However, while you are not required to do so, we ask that you contact us first to give us the opportunity to address your concerns directly before speaking with your Supervisory Authority.

Qualifications & exceptions

  • Contacting PayPal first is requested, not required.

Sharing & Disclosure · Context

List of credit reporting agencies used in the UK and EEA

A linked list names the credit reporting agencies used in each UK and EEA country, with a link to each agency's privacy notice describing how it uses, shares and retains Personal Information. You can contact the agency in your country directly about its services, your credit score, the information it holds, or to exercise your data subject rights against it.

Supporting quotations

The [list of CRAs](https://www.paypal.com/de/webapps/mpp/ua/cra-list-full?locale.x=en_DE) used in the UK and EEA, including identities of the CRAs used in each relevant country, and a link to their privacy notice from which you can determine the ways in which they use and share Personal Information, including how long they will retain such Personal Information. You can contact the CRAs operating in the country in which you live directly if you have any questions regarding their services, your credit score or the information they have stored about you, or if you wish to exercise your data subject rights towards them.

Not stated here

  • The linked agency list and privacy notices are not part of the analyzed text.

Sharing & Disclosure · Permission or license

EEA banking notice: named third parties and your agreement to transfers

PayPal says Luxembourg data protection and bank secrecy laws require more transparency than most other EU laws, so this statement lists the third-party service providers and business partners to whom it may disclose your Personal Information, with the purpose and type of information disclosed, in a linked list. By accepting the Privacy Statement and keeping a PayPal account, you expressly agree to the transfer of your Personal Information to those third parties for the listed purposes.

Supporting quotations

In general, the Luxembourg laws to which PayPal's handling of user Personal Information is subject (data protection and bank secrecy) require a higher degree of transparency than most other EU laws. This is why, unlike the vast majority of providers of internet-based services or financial services in the EU, PayPal has listed in this Privacy Statement the third party service providers and business partners to whom we may disclose your Personal Information, together with the purpose of disclosure and type of information disclosed. You can review those [third parties](https://www.paypal.com/ie/legalhub/paypal/third-parties-list). By accepting this Privacy Statement and maintaining an account with PayPal, you expressly agree to the transfer of your Personal Information to those third parties for the purposes listed.

Qualifications & exceptions

  • Agreement is stated to follow from accepting the statement and maintaining an account.
  • Applies to the Banking Regulations Notice for Users in the EEA.

Not stated here

  • The third-party list itself is linked and not part of the analyzed text.

Legal Rights & Agreement Rules · Permission or license

EEA banking notice: quarterly list updates and deemed acceptance

PayPal may update the list of third parties on the first business day of each quarter (January, April, July and October) and will only start transferring information to new entities, for new purposes or of new types 30 days after the updated list is made public. You are told to review the list each quarter. If you do not object within 30 days of publication you are deemed to have accepted the changes to the list and to the statement; if you do not agree you may close your account and stop using the services. Some information may need to go to other PayPal companies or entities acting as payment providers, processors or account holders, which under local law may have to disclose information to authorities, and your use of the PayPal Services constitutes your consent to the transfer of such information to provide the Services.

Supporting quotations

PayPal may update the list of third parties referred to above on the first business day of every quarter (January, April, July and October). PayPal will only start transferring any Personal Information to any of the new entities or for the new purposes or Personal Information types indicated in each update after 30 days from the date when that list is made public through this Privacy Statement. You should review the list each quarter on the PayPal website on the dates stated above. If you do not object to the new Personal Information disclosure, within 30 days after the publication of the updated list of third parties, you are deemed to have accepted the changes to the list and to this Privacy Statement. If you do not agree with the changes, you may close your account and stop using our services. In order to provide the PayPal Services, certain of the information we collect (as set out in this Privacy Statement) may be required to be transferred to other PayPal related companies or other entities, including those referred to in this section in their capacity as payment providers, payment processors or account holders (or similar capacities). You acknowledge that according to their local legislation, such entities may be subject to laws, regulations, inquiries, investigations, or orders which may require the disclosure of information to the relevant authorities of the relevant country. Your use of the PayPal Services constitutes your consent to our transfer of such information to provide you the PayPal Services.

Qualifications & exceptions

  • Silence for 30 days is treated as acceptance.
  • The only stated alternative for someone who disagrees is closing the account.
  • Recipient entities may be required by their local law to disclose information to authorities.

Sharing & Disclosure · Permission or license

EEA banking notice: disclosures you direct PayPal to make to authorities and others

You agree to and direct PayPal to disclose necessary information to the police and other law enforcement, security forces, competent governmental, intergovernmental or supranational bodies, and competent agencies, departments, regulatory or self-regulatory authorities or organisations (including those in the Agencies section of the Third Party Provider List) and other third parties, including PayPal Group companies, where PayPal is legally compelled and permitted to comply (including under the Luxembourg FATCA and CRS laws), has reason to believe cooperation in investigations of fraud or other actual or potential illegal activity is appropriate, or is investigating violations of the User Agreement (including with your funding source or card provider).

Supporting quotations

Specifically, you agree to and direct PayPal to do any and all of the following with your information:
Disclose necessary information to: the police and other law enforcement agencies; security forces; competent governmental, intergovernmental or supranational bodies; competent agencies, departments, regulatory authorities, self-regulatory authorities or organisations (including, without limitation, the Agencies referenced in the "Agencies" section of the [Third Party Provider List](https://www.paypal.com/ie/legalhub/paypal/third-parties-list) and other third parties, including PayPal Group companies, that (i) we are legally compelled and permitted to comply with, including but without limitation the Luxembourg laws of 24 July 2015 on the US Foreign Account Tax Compliance Act ("FATCA Law") and 18 December 2015 on the OECD common reporting standard ("CRS Law"); (ii) we have reason to believe it is appropriate for us to cooperate with in investigations of fraud or other illegal activity or potential illegal activity, or (iii) to conduct investigations of violations of our User Agreement (including without limitation, your funding source or credit or debit card provider).

Qualifications & exceptions

  • The three grounds (legal compulsion, cooperation in fraud or illegal-activity investigations, investigations of User Agreement violations) are alternatives.
  • Applies to the EEA banking regulations notice.

Legal Rights & Agreement Rules · Company practice

EEA banking notice: FATCA/CRS notice and shared risk information

If you are covered by the FATCA or CRS Law, PayPal is required to give you notice of the information about you that it may transfer to authorities, and it points to a separate explanation of its obligations. PayPal and other organisations, including parties that accept PayPal, may also share, access and use necessary information, including from other countries and including information recorded by fraud prevention agencies, to assess and manage risk, such as preventing fraud, money laundering and terrorist financing. You can contact PayPal for further details of the relevant fraud prevention agencies.

Supporting quotations

If you are covered by the FATCA or CRS Law, we are required to give you notice of the information about you that we may transfer to various authorities. Please read more about PayPal's obligations under the FATCA and CRS Law and how they could affect you as well as take note of the information we may disclose as result. We and other organisations, including parties that accept PayPal, may also share, access and use (including from other countries) necessary information (including, without limitation the information recorded by fraud prevention agencies) to help us and them assess and to manage risk (including, without limitation, to prevent fraud, money laundering and terrorist financing). Please contact us if you want to receive further details of the relevant fraud prevention agencies. Review more information on these Agencies, fraud prevention agencies and other [third parties](https://www.paypal.com/ie/legalhub/paypal/third-parties-list).

Qualifications & exceptions

  • The FATCA/CRS notice duty applies only if you are covered by those laws.
  • Risk-related sharing is stated "including, without limitation", so it is not limited to the examples.

Not stated here

  • The linked FATCA/CRS explanation and third-party list are not part of the analyzed text.

Sharing & Disclosure · Permission or license

EEA banking notice: user directory, your agent and aggregated statistics

PayPal may disclose your name and PayPal link in the PayPal user directory; your details are confirmed to other users who search by your name, email address or telephone number (or part of these), so people pay the right user, and this feature can be turned off in profile settings. It may disclose necessary information to your agent or legal representative, such as a power-of-attorney holder or appointed guardian. It may also disclose aggregated statistical data to business partners or for public relations, for example the percentage of users living in a city, which it says is not tied to Personal Information.

Supporting quotations

Disclose your name and PayPal link in the PayPal user directory. Your details will be confirmed to other PayPal users in response to a user searching using your name, email address or telephone number, or part of these details. This is to ensure people make payments to the correct user. This feature can be turned off in the PayPal profile settings.
Disclose necessary information to your agent or legal representative (such as the holder of a power of attorney that you grant, or a guardian appointed for you).
Disclose aggregated statistical data with our business partners or for public relations. For example, we may disclose that a specific percentage of our users live in Manchester. However, this aggregated information is not tied to Personal Information.

Qualifications & exceptions

  • The directory feature can be turned off in profile settings.
  • Aggregated statistics are stated not to be tied to Personal Information.

Sharing & Disclosure · Permission or license

EEA banking notice: merchant integration partners and listed third parties

If you are a merchant who uses a third party to access or integrate PayPal, PayPal may disclose necessary information to that partner to facilitate and maintain the arrangement (including integration status, whether you have an active PayPal account and whether you already work with another integration partner). PayPal may disclose necessary information to payment processors, auditors, customer service providers, credit reference and fraud agencies, financial products providers, commercial partners, marketing and public relations companies, operational services providers, group companies, agencies, marketplaces and other listed third parties so it can provide the PayPal Services. The list gives non-exclusive examples, which may include their assigns and successors, of third parties, purposes and information disclosed; except as explicitly stated, those third parties are limited by law or contract from using the information for secondary purposes.

Supporting quotations

If you as a merchant use a third party to access or integrate PayPal, we may disclose to any such partner necessary information for the purpose of facilitating and maintaining such an arrangement (including, without limitation, the status of your PayPal integration, whether you have an active PayPal account and whether you may already be working with a different PayPal integration partner).
Disclose necessary information to the payment processors, auditors, customer services providers, credit reference and fraud agencies, financial products providers, commercial partners, marketing and public relations companies, operational services providers, group companies, agencies, marketplaces and other [third parties](https://www.paypal.com/ie/legalhub/paypal/third-parties-list). The purpose of this disclosure is to allow us to provide PayPal Services to you. We also set out in the list of third parties, under each " Category", non-exclusive examples of the actual third parties (which may include their assigns and successors) to whom we currently disclose your Account Information or to whom we may consider disclosing your Account Information, together with the purpose of doing so, and the actual information we disclose (except as explicitly stated, these third parties are limited by law or by contract from using the information for secondary purposes beyond the purposes for which the information was shared).

Qualifications & exceptions

  • The examples in the third-party list are non-exclusive.
  • The limit on secondary use is stated "except as explicitly stated".

Not stated here

  • The third-party list itself is linked and not part of the analyzed text.

Sharing & Disclosure · Permission or license

EEA banking notice: sharing account information with unaffiliated third parties for their own use

PayPal may share necessary account information with unaffiliated third parties for their use for these purposes: preventing fraud or assessing and managing risk; customer service, including servicing accounts or resolving disputes; shipping and related services for purchases made with PayPal; helping them comply with anti-money laundering and counter-terrorist financing verification requirements; and enabling service providers under contract with PayPal to support its operations, such as fraud prevention, bill collection, marketing, customer service and technology services. PayPal says its contracts require those service providers to use your information only in connection with the services they perform for PayPal and not for their own benefit.

Supporting quotations

Share necessary Account Information with unaffiliated [third parties](https://www.paypal.com/ie/legalhub/paypal/third-parties-list) for their use for the following purposes:
Fraud Prevention and Risk Management: to help prevent fraud or assess and manage risk.
Customer Service: for customer service purposes, including to help service your accounts or resolve disputes (e.g., billing or transactional).
Shipping: in connection with shipping and related services for purchases made using PayPal.
Legal Compliance: to help them comply with anti-money laundering and counter-terrorist financing verification requirements.
Service Providers: to enable service providers under contract with us to support our business operations, such as fraud prevention, bill collection, marketing, customer service and technology services. Our contracts dictate that these service providers only use your information in connection with the services they perform for us and not for their own benefit.

Qualifications & exceptions

  • The service provider use restriction is stated as a contractual term.

Sharing & Disclosure · Permission or license

UK notice: transfers to related entities and your acknowledgement

For users in the UK, certain information PayPal collects may need to be transferred to other PayPal companies or other entities, including payment providers, payment processors or account holders, which under their local law may be subject to laws, investigations or orders requiring disclosure to authorities. You acknowledge this, and acknowledge that PayPal may do the things listed in the following items with your information.

Supporting quotations

In order to provide the PayPal Services, certain of the information we collect (as set out in this Privacy Statement) may be required to be transferred to other PayPal related companies or other entities, including those referred to in this section in their capacity as payment providers, payment processors or account holders (or similar capacities). You acknowledge that according to their local legislation, such entities may be subject to laws, regulations, inquiries, investigations, or orders which may require the disclosure of information to the relevant authorities of the relevant country.
Specifically, you acknowledge that PayPal may do any and all of the following with your information:

Qualifications & exceptions

  • Unlike the EEA banking notice, this notice says you "acknowledge" the transfers and listed actions.

Legal Rights & Agreement Rules · Permission or license

UK notice: disclosures to authorities, FATCA/CRS notice and shared risk information

For users in the UK, PayPal may disclose necessary information to the police and other law enforcement, security forces, competent governmental, intergovernmental or supranational bodies, regulators and other third parties, including PayPal Group companies, where PayPal is legally compelled and permitted to comply (including under laws implementing FATCA and the OECD Common Reporting Standard), has reason to believe cooperation in investigations of fraud or other actual or potential illegal activity is appropriate, or is investigating violations of the User Agreement (including with your funding source or card provider). If you are covered by FATCA or CRS, PayPal must give you notice of the information about you it may transfer to authorities. PayPal and other organisations, including parties that accept PayPal, may also share, access and use necessary information, including from other countries and including information recorded by fraud prevention agencies, to assess and manage risk, such as preventing fraud, money laundering and terrorist financing, and you can ask for details of the relevant fraud prevention agencies.

Supporting quotations

Disclose necessary information to: the police and other law enforcement agencies; security forces; competent governmental, intergovernmental or supranational bodies; competent agencies, departments, regulatory authorities, self-regulatory authorities or organisations and other third parties, including PayPal Group companies, that (i) we are legally compelled and permitted to comply with, including but without limitation laws implementing the US Foreign Account Tax Compliance Act (“FATCA”) and OECD Common Reporting Standard (“CRS”); (ii) we have reason to believe it is appropriate for us to cooperate with in investigations of fraud or other illegal activity or potential illegal activity, or (iii) to conduct investigations of violations of our User Agreement (including without limitation, your funding source or credit or debit card provider).
If you are covered by FATCA or CRS, we are required to give you notice of the information about you that we may transfer to various authorities.
We and other organisations, including parties that accept PayPal, may also share, access and use (including from other countries) necessary information (including, without limitation the information recorded by fraud prevention agencies) to help us and them assess and to manage risk (including, without limitation, to prevent fraud, money laundering and terrorist financing). Please contact us if you want to receive further details of the relevant fraud prevention agencies.

Qualifications & exceptions

  • The three grounds for disclosure are alternatives.
  • The FATCA/CRS notice duty applies only if you are covered.
  • Risk-related sharing is stated "including, without limitation".

Sharing & Disclosure · Permission or license

UK notice: user directory, merchant integrations, your agent and aggregated statistics

For users in the UK, PayPal may disclose your name and PayPal link in the PayPal user directory, confirming your details to users who search by your name, email address or telephone number so payments go to the right user; this can be turned off in profile settings. If you are a Partner and Merchant using a third party to access or integrate PayPal, it may disclose necessary information to that third party to facilitate the arrangement. It may disclose necessary information to your agent or legal representative, and aggregated statistical data to business partners or for public relations, which it says is not tied to Personal Data.

Supporting quotations

Disclose your name and PayPal link in the PayPal user directory. Your details will be confirmed to other PayPal users in response to a user searching using your name, email address or telephone number, or part of these details. This is to ensure people make payments to the correct user. This feature can be turned off in the PayPal profile settings.
If you as a Partner and Merchant use a third party to access or integrate PayPal, we may disclose to any such third party necessary information for the purpose of facilitating and maintaining such an arrangement (including, without limitation, the status of your PayPal integration, whether you have an active PayPal account and whether you may already be working with a different PayPal integration partner).
Disclose necessary information to your agent or legal representative (such as the holder of a power of attorney that you grant, or a guardian appointed for you).
Disclose aggregated statistical data with our business partners or for public relations. For example, we may disclose that a specific percentage of our users live in Manchester. However, this aggregated information is not tied to Personal Data.

Qualifications & exceptions

  • The directory feature can be turned off in profile settings.
  • Aggregated statistics are stated not to be tied to Personal Data.

Sharing & Disclosure · Permission or license

UK notice: processors and other listed third parties

For users in the UK, PayPal may disclose necessary information to payment processors, auditors, customer service providers, credit reference and fraud agencies, financial products providers, commercial partners, marketing and public relations companies, operational services providers, group companies, agencies, marketplaces and other listed third parties so it can provide the PayPal Services. The list gives non-exclusive examples, which may include assigns and successors, of third parties, purposes and information disclosed; except as explicitly stated, those third parties are limited by law or contract from using the information for secondary purposes.

Supporting quotations

Disclose necessary information to the payment processors, auditors, customer services providers, credit reference and fraud agencies, financial products providers, commercial partners, marketing and public relations companies, operational services providers, group companies, agencies, marketplaces and other third parties listed here. The purpose of this disclosure is to allow us to provide PayPal Services to you. We also set out in the list of third parties, under each "Category", non-exclusive examples of the actual third parties (which may include their assigns and successors) to whom we currently disclose your account information or to whom we may consider disclosing your account information, together with the purpose of doing so, and the actual information we disclose (except as explicitly stated, these third parties are limited by law or by contract from using the information for secondary purposes beyond the purposes for which the information was shared).

Qualifications & exceptions

  • The examples in the third-party list are non-exclusive.
  • The limit on secondary use is stated "except as explicitly stated".

Not stated here

  • The third-party list itself is linked and not part of the analyzed text.

Sharing & Disclosure · Permission or license

UK notice: sharing account information with unaffiliated third parties for their own use

For users in the UK, PayPal may share necessary account information with listed unaffiliated third parties for their use for these purposes: preventing fraud or assessing and managing risk; customer service, including servicing accounts or resolving disputes; shipping and related services for purchases made with PayPal; helping them comply with anti-money laundering and counter-terrorist financing verification requirements; and enabling service providers under contract with PayPal to support its operations. PayPal says its contracts require those service providers to use your information only in connection with the services they perform for PayPal and not for their own benefit.

Supporting quotations

Share necessary account information with unaffiliated third parties (listed here) for their use for the following purposes:
Fraud Prevention and Risk Management: to help prevent fraud or assess and manage risk.
Customer Service: for customer service purposes, including to help service your accounts or resolve disputes (e.g., billing or transactional).
Shipping: in connection with shipping and related services for purchases made using PayPal.
Legal Compliance: to help them comply with anti-money laundering and counter-terrorist financing verification requirements.
Service Providers: to enable service providers under contract with us to support our business operations, such as fraud prevention, bill collection, marketing, customer service and technology services. Our contracts dictate that these service providers only use your information in connection with the services they perform for us and not for their own benefit.

Legal Rights & Agreement Rules · Context

UK status disclosure: regulation of PayPal UK Ltd

PayPal UK Ltd is authorised and regulated by the Financial Conduct Authority as an electronic money institution, for its regulated consumer credit activities and for cryptocurrency services, under the firm reference numbers given in the source. Some products and services, such as PayPal Working Capital, are not regulated by the FCA and may offer a lower level of protection, and the statement tells you to read the product terms. It gives PayPal UK Ltd's company number and registered office at 5 Fleet Place, London.

Supporting quotations

PayPal UK Ltd is authorised and regulated by the Financial Conduct Authority (FCA) as an electronic money institution (firm reference number 994790); in relation to its regulated consumer credit activities (firm reference number 996405); and for the provision of cryptocurrency services (firm reference number 1000741). Some products and services, such as PayPal Working Capital, are not regulated by the FCA and may offer a lower level of protection. Please read product terms for further details. PayPal UK Ltd's company number is 14741686. Its registered office is 5 Fleet Place, London, United Kingdom, EC4M 7RD.

Qualifications & exceptions

  • Products such as PayPal Working Capital are not FCA-regulated and may offer a lower level of protection.

Legal Rights & Agreement Rules · Context

Mexico disclosures: scope, data controller and primary and secondary purposes

This section adds disclosures for individuals in Mexico and supplements the main statement. The data controller of your Personal Information is the PayPal entity established where you live, found in the contact information. The section describes PayPal's primary and secondary purposes for processing your Personal Information in a two-column table headed "Primary Purpose" and "Secondary Purpose".

Supporting quotations

This section contains additional disclosures for individuals in Mexico and supplements PayPal’s Privacy Statement above. The data controller of your Personal Information is the PayPal entity established in the country or jurisdiction where you reside, which can be found in Our Contact Information. Below we describe our primary and secondary purpose for processing your Personal Information.
Primary Purpose Secondary Purpose

Use & Processing · Company practice

Mexico primary purposes: services, identity, payments and credit

In the Mexico purposes table (columns: primary purpose, secondary purpose), the primary purposes include: providing the Services, fulfilling agreements and administering the relationship and your payments; for Fastlane users, using Personal Data and payment details to decide whether a payment is authorized by you and likely to succeed; assessing creditworthiness, confirming identity and contact information and protecting you and others from fraud; confirming identity including by electronic signature; proving that transactions were executed; establishing, exercising or defending legal claims or collection procedures; complying with internal procedures; and assessing which payment options and services to offer you, for example through internal and external credit assessments.

Supporting quotations

The primary purpose for processing your Personal are:
to provide our Services, to fulfil relevant agreements with you and to otherwise administer our business relationship with you. to administer your payment for products and the customer relationship.
If you are using Fastlane, we will also use your Personal Data and payment method details to determine whether the payment you are making with a participating Partner or Merchant is authorized by you and likely to be successfully authorized by the payment method you choose to use when you make a purchase using details from your Fastlane profile.
to assess your creditworthiness in connection with your application, confirm your identity and your contact information, and protect you and others from fraud.
to confirm your identity, also through the use of electronic signature, and verify your personal and contact details.
to prove that transactions have been executed.
to establish, exercise or defend a legal claim or collection procedure.
to comply with internal procedures.
to assess which payment options and services to offer you, for example by carrying out internal and external credit assessments.
Fastlane means the online tool whereby individuals can store their payment methods and other Personal Information with PayPal so that they can complete the checkout process faster, create a store or loyalty account, or facilitate other transactions at participating Partners and Merchants with payment card, contact information, shipping data or other data they save in their Fastlane profile as relevant to the specific interaction, participating Partners and Merchants, all without having to manually input payment method details and other Personal Information each time they check out.

Use & Processing · Company practice

Mexico primary purposes: analysis, communication, risk, marketing and compliance

In the Mexico purposes table (columns: primary purpose, secondary purpose), the primary purposes also include: customer analysis, administering the Services and internal operations such as troubleshooting, data analysis, testing, research and statistics; communicating with you about the Services; presenting content effectively for you and your device; determining your eligibility for Services and communicating about them, and risk analysis, fraud prevention and risk management, for example through Automated Decision Making and AI (the source runs these into one item); improving the Services and general business development, including improving risk models, developing products and exploring new business opportunities; keeping your account and financial information up to date; marketing, product and customer analysis including testing; complying with laws such as bookkeeping, capital adequacy, bank and card network rules, KYC, preventing money laundering, terrorist financing and fraud, sanction screening and reporting to tax, police, enforcement and supervisory authorities, and facilitating participation in competitions, offerings and events (the source runs these into one item); financial risk management such as credit performance and quality, insurance risks and capital adequacy compliance; and processing information about your contacts, where you certify that you have permission to provide it.

Supporting quotations

for customer analysis, to administer our Services, and for internal operations, for example troubleshooting, data analysis, testing, research and statistical purposes.
to communicate with you in relation to our Services.
to ensure that content is presented in the most effective way for you and your device.
to determine your eligibility for and to communicate with you about Services for which you may qualify or that may be of interest to you to carry out risk analysis, fraud prevention and risk management (e.g., through Automated Decision Making and AI).
to improve our Services and for general business development purposes, for example improving risk models to minimize fraud, develop new products and features and explore new business opportunities.
To keep your PayPal account and financial information up to date.
for marketing, product and customer analysis, including testing, for example to improve our product range and optimize our customer offerings.
to comply with applicable laws, bookkeeping laws, regulatory capital adequacy requirements, and rules issued by our designated banks and relevant card networks. For example, when we process Personal Information for KYC requirements, to prevent, detect and investigate money laundering, terrorist financing and fraud. We also carry out sanction screening, report to tax authorities, police enforcement authorities, enforcement authorities, supervisory authorities. to facilitate your participation in competitions, offerings, and events.
to conduct financial risk management obligations such as credit performance and quality, insurance risks and compliance with capital adequacy requirements under applicable law.
to process information about your contacts to make it easy for you to find and connect them and improve payment accuracy. By providing us with information about your contacts you certify that you have permission to provide that information to PayPal for the purposes described in this Privacy Statement.

Qualifications & exceptions

  • Two items in the source combine separate purposes in one list entry: the eligibility and risk-analysis item, and the legal-compliance and competitions item.

Legal Rights & Agreement Rules · User right or choice

Mexico ARCO rights and how to exercise them

Notwithstanding the general data protection rights, PayPal says individuals in Mexico can exercise ARCO Rights: access (right to know), rectification, deletion (cancellation and erasure), objection (opposition), portability, and restriction of processing in whole or in part. With an account, you can exercise them through "Data and Privacy" in Account Settings on the website or mobile app, or by calling the Customer Services line, and PayPal will verify your identity by a security code sent by text message, a call to your registered phone number, or by requiring you to access your Account. Without an account, for example when you pay without a PayPal account, you can exercise ARCO rights for your payment transactions by calling the customer services line.

Supporting quotations

Notwithstanding the data privacy rights set forth under Your Data Protection Rights:
We recognize the importance of your ability to control use of your Personal Information and provide several ways for you to exercise your rights to access (right to know), rectification (correction or update), deletion (cancellation and erasure), objection (opposition), portability (transferring), and to restrict process in whole or in part (collectively your ARCO Rights).
If you have an Account you can exercise your ARCO Rights by accessing “Data and Privacy” from Account Settings in the PayPal Website or mobile app, or you can file your request by calling our Customer Services line. We will verify your identity by (i) a security code via text message; (ii) a phone call to the phone number registered in the platform; or (iii) by requesting you to access to your Account.
If you do not you have an Account (for example, where you use Payment without a PayPal account), you can exercise your ARCO rights for your Payment transactions through calling PayPal customer services line.

Qualifications & exceptions

  • Identity verification uses one of three methods listed in the source.
  • Without an account, the stated route covers rights for your payment transactions.

Legal Rights & Agreement Rules · Procedure

Mexico ARCO requests: agents, response time and independent rights

Your duly authorized agent can submit an ARCO request for you through the Customer Services line, and PayPal may require additional information for verification. PayPal says it will respond within twenty business days of your last contact. Exercising one ARCO right does not prevent you from exercising the others.

Supporting quotations

Your duly authorized agent can submit a request on your behalf by contacting our Customer Services line. Please note that we may require additional information for verification.
We will respond to your request within a term of twenty (20) business days of your last contact.
The exercise of any one ARCO rights does not prevent you from exercising your other ARCO rights.

Qualifications & exceptions

  • The response period runs from your last contact.

Legal Rights & Agreement Rules · Procedure

Mexico: Fastlane profile requests and changes that may need a new account

To exercise rights relating to your Fastlane profile, contact PayPal at the number in the contact information or use your Fastlane profile management portal. If you need to change personal data such as your email address or phone number, you can do so by exercising ARCO rights (access, rectification, cancellation and opposition). Because of operational or technical constraints in some services, PayPal says it may be necessary to create a new account or user profile to make those changes; you will be informed, and a newly created account remains subject to this privacy statement.

Supporting quotations

If you want to exercise any of your rights relating to your Personal Information in your Fastlane profile, contact us at the number provided in the Our Contact Information section or submit your request from your Fastlane profile management portal. In the event that you need to modify your personal data—such as your email address or phone number—you may do so by exercising your ARCO rights (Access, Rectification, Cancellation, and Opposition). However, due to operational or technical constraints inherent to certain services, it may be necessary to create a new account or user profile in order to implement such changes. In such cases, you will be duly informed, and any newly created account will remain subject to this privacy statement.
Fastlane means the online tool whereby individuals can store their payment methods and other Personal Information with PayPal so that they can complete the checkout process faster, create a store or loyalty account, or facilitate other transactions at participating Partners and Merchants with payment card, contact information, shipping data or other data they save in their Fastlane profile as relevant to the specific interaction, participating Partners and Merchants, all without having to manually input payment method details and other Personal Information each time they check out.

Qualifications & exceptions

  • Making a change may require creating a new account or profile, which stays subject to this statement.

Legal Rights & Agreement Rules · Company practice

Singapore: legitimate interest as an additional basis

PayPal says it also has a legitimate interest in keeping itself a secure financial service, continuing to offer innovative services of interest to you and optimizing its sales efforts by tailoring services, including ads and offers shown to you. In addition to its other lawful bases, it may process Personal Information where its legitimate interests are not overridden by the interests or fundamental rights and freedoms of the data subject.

Supporting quotations

We also have a legitimate interest in ensuring that PayPal remains a secure financial service and continuing to offer services that are innovative and of interest to you as well as to optimize our sales efforts by tailoring our services to your interests including ads and offers you may be shown. In addition to the other lawful bases under which we process your Personal Information, we may process your Personal Information where our legitimate interests are not overridden by the interests or fundamental rights and freedoms of the data subject.

Qualifications & exceptions

  • Applies only where the data subject's interests or fundamental rights do not override PayPal's legitimate interests.

Use & Processing · Company practice

Singapore processing purposes: services, identity, content, risk and improvement

In the Singapore purposes table (columns: processing purposes, necessary categories of Personal Information), the processing purposes include: providing the Services and products where necessary to comply with applicable laws; verifying your identity, also for signature purposes, and your personal and contact details, where necessary to comply with applicable laws; establishing, exercising or defending legal claims or collection procedures where necessary to comply with applicable laws; presenting content effectively for you and your device; preventing misuse of the Services; determining your eligibility for Services and communicating with you about them, for example through internal credit assessments; risk analysis, fraud prevention and risk management, for example through Automated Decision Making and AI; improving the Services and general business development; keeping your account and financial information up to date; and marketing, product and customer analysis including testing.

Supporting quotations

These processing purposes include:
to provide our Services and products where necessary to comply with applicable laws;
to verify your identity, also for signature purposes, and verify your personal and contact details, where necessary to comply with applicable laws;
to establish, exercise or defend a legal claim or collection procedures, where necessary to comply with applicable laws;
to ensure that content is presented in the most effective way for you and your device;
to prevent misuse of our Services as part of our efforts to keep our platform safe and secure;
to determine your eligibility for and to communicate with you about Services for which you may qualify or that may be of interest to you, for example by carrying out internal credit assessments;
to carry out risk analysis, fraud prevention and risk management (e.g., through Automated Decision Making and AI);
to improve our Services and for general business development purposes, for example improving risk models to minimize fraud, develop new products and features and explore new business opportunities;
to keep your account and financial information up to date;
for marketing, product and customer analysis, including testing, for example to improve our product range and optimize our customer offerings;

Qualifications & exceptions

  • The first three purposes carry the qualifier "where necessary to comply with applicable laws"; the table does not repeat it for the others.
  • The table does not state a lawful basis for each purpose.

Use & Processing · Company practice

Singapore processing purposes: compliance, competitions, contacts, marketing and preferences

In the Singapore purposes table (columns: processing purposes, necessary categories of Personal Information), the processing purposes also include: complying with laws such as anti-money laundering, bookkeeping, capital adequacy and bank and card network rules, for example KYC, preventing and investigating money laundering, terrorist financing and fraud, sanction screening, and reporting to tax, police, enforcement and supervisory authorities including where not compelled but with a good faith belief that sharing is necessary to comply with law; facilitating participation in competitions, offerings and events, and financial risk management such as credit performance and quality, insurance risks and capital adequacy compliance (combined in one source item); processing information about your contacts, where you certify you have permission to provide it; providing information, news and marketing about the Services, including rewards or ads and with partners, depending on your communication preferences; associating information about you to identify your use of the Services without a PayPal account or Unbranded Payment Services and link those transactions to your account if you have or later set one up; and remembering your preferences.

Supporting quotations

to comply with applicable laws, such as AML, bookkeeping laws, regulatory capital adequacy requirements, and rules issued by our designated banks and relevant card networks. For example, when we process Personal Information KYC requirements, to prevent, detect and investigate money laundering, terrorist financing and fraud. We also carry out sanction screening, report to tax authorities, police enforcement authorities, enforcement authorities, supervisory authorities where we are not compelled by applicable laws but where we have a good faith belief that sharing the information is necessary to comply with applicable law;
to facilitate your participation in competitions, offerings, and events; to conduct financial risk management obligations, such as credit performance and quality, insurance risks and compliance with capital adequacy requirements under applicable law;
to process information about your contacts to make it easy for you to find and connect them and improve payment accuracy. By providing us with information about your contacts you certify that you have permission to provide that information to PayPal for the purposes described in this Privacy Statement;
to provide you with information, news, and marketing about our Services, including rewards or ads from us or where we partner with others to offer similar services on our Services as well, depending on your communication preferences;
to associate information about you to identify your use of Services without a PayPal account (e.g., Pay without a PayPal account) or Unbranded Payment Services (e.g., Braintree) and to associate such transactions with your account, if you have one or later establish an account; and to remember your preferences for the next time you use the Services, such as which of your payment methods you prefer or whether you choose to receive digital receipts via email or text when you checkout.
Pay without a PayPal Account means our Services may be accessed by individuals without using a PayPal account, a Fastlane profile, or the Unbranded Payment Services. Pay without a PayPal account does not include Venmo, which is subject to its own terms of service and separate privacy statement.
Unbranded Payment Services means when you are interacting with and making payments to Partners and Merchants using our card processing and/or ACH origination services that do not carry the PayPal brand or when you use our Braintree services.

Qualifications & exceptions

  • Reporting to authorities can occur without a legal compulsion when PayPal has a good faith belief that sharing is necessary to comply with law.
  • Marketing is stated to depend on your communication preferences.

Data Access & Collection · Company practice

Singapore: necessary categories of Personal Information

In the Singapore purposes table (columns: processing purposes, necessary categories of Personal Information), the necessary categories of Personal Information listed are: registration and contact information; identification and signature information; payment information and information related to legal requirements (combined in one source item); information you provide when you contact us; transaction information; package tracking; service-specific Personal Information; information from credit reporting agencies and financial institutions; information from your connected financial accounts; information from your use of the Services; technical usage data; device information; and location data.

Supporting quotations

Necessary categories of Personal Information include:
Registration and contact information;
Identification and signature information;
Payment information; Information related to legal requirements;
Information you provide when you contact us;
Transaction information;
Package tracking;
Service-specific Personal Information;
Information from CRAs and financial institutions;
Information from your connected financial accounts;
Information from your use of the Services;
Technical usage data;
Device information; and
Location data.