PayPal collects Personal Information from people without PayPal accounts
People can use PayPal Services without an account or profile, and PayPal says it will still collect their Personal Information. Examples given: using Pay without a PayPal Account, using Unbranded Payment Services (e.g., Braintree), using a Fastlane profile, receiving a payment from a PayPal account holder (through the Visa+ service or other third-party wallets, payment networks and processors), or receiving a payment from a payor using Hyperwallet. "Pay without a PayPal Account" excludes Venmo, which has its own terms and privacy statement.
Details not recorded for this card
Supporting quotations
Our Services may be accessed by individuals without a PayPal account or profile.
We will collect Personal Information from you even if you are a non-account holder when you use our Services
Pay without a PayPal Account means our Services may be accessed by individuals without using a PayPal account, a Fastlane profile, or the Unbranded Payment Services.
Pay without a PayPal account does not include Venmo, which is subject to its own terms of service and separate privacy statement.
Unbranded Payment Services means when you are interacting with and making payments to Partners and Merchants using our card processing and/or ACH origination services that do not carry the PayPal brand or when you use our Braintree services.
Fastlane means the online tool whereby individuals can store their payment methods and other Personal Information with PayPal
Hyperwallet means the PayPal technology and online service that allows payout capabilities for businesses of all shapes and sizes through a single integration.
Qualifications & exceptions
Applies to non-account holders when they use or receive payments through the listed Services.
Venmo is outside "Pay without a PayPal Account"; it has its own privacy statement.
Not stated here
The passage does not say here which data categories are collected from non-account holders.
PayPal collects identifiers and device information, including IP address and cookie data
Among the categories of Personal Information PayPal says it collects from you and from your use of the Services are personal identifiers (such as name, business name, address, phone number, email, IP address, device information, cookie data, government-issued identification and signature) and information from your device (such as language settings, browser ID, device ID, device type, cookie preferences, time zone, operating system, screen resolution and similar settings). The lists are introduced with "Such as", so they are examples rather than a complete list. "Device Information" is defined as data that can be automatically collected from any device used to access the Services.
Details not recorded for this card
Supporting quotations
Categories of Personal Information collected from you, including from your interactions with us and use of the Services:
Personal identifiers: Such as name, business name, address, phone number, email, IP address, device information, information collected from cookies or other tracking technologies, government-issued identification, signature, and other information necessary to establish an account or profile.
Information from your device: Such as language settings, browser ID, device ID, device type, cookie preferences, time zone, operating system, platform, screen resolution
Device Information means data that can be automatically collected from any device used to access the Services.
Qualifications & exceptions
Each category is given as examples ("Such as"), not an exhaustive list.
Device Information is data that can be collected automatically from any device used to access the Services.
PayPal collects financial account details, transaction history and shopping information
PayPal lists records and financial information (such as identity card numbers, bank account and routing numbers, card information including payment account number and CVV, income, and the amounts you send or request), transaction and experience information (such as balances, transaction history, shopping cart information, goods or services considered on Partners and Merchants sites, shipping details, purchase history and order tracking), and commercial information (payout amount, payor information and the record of the Services) as categories it collects. "Partners and Merchants" means PayPal's partners and the merchants or businesses that Users transact with to obtain goods or services.
Details not recorded for this card
Supporting quotations
Records and financial information: Such as identity card numbers, government-issued identification, account header information, bank account and routing numbers, credit and debit card information, income
payment account number, CVV, username, and IBAN information.
Transaction and experience information: Such as account balances, transaction history and transaction details, online shopping cart information
shopping activity and goods or services considered on Partners and Merchants sites
Commercial information: Such as payout amount, payor information, and the record of the Services.
Partners and Merchants means our partners and the merchants, partners or businesses that our Users transact with for the purpose of obtaining goods or services.
Qualifications & exceptions
Examples only ("Such as"); not a complete list of what is collected.
Shopping activity "considered on Partners and Merchants sites" is included in the transaction category.
GPS location may be collected with consent; IP-based location is collected during use
PayPal lists geolocation data as collected information. GPS data may be collected with your consent if you have an account for financial Services. IP-based geolocation data is also collected during your user experience or based on your mobile application settings.
Details not recorded for this card
Supporting quotations
Geolocation data: Such as Global Positioning System ("GPS"), which we may collect with your consent if you have an account for financial Services, and IP-based geolocation data during your user experience or based on your mobile application settings.
Qualifications & exceptions
GPS data: "with your consent" and only "if you have an account for financial Services".
IP-based geolocation data: collected during your user experience or based on mobile app settings.
Not stated here
The passage does not say how precisely or how often location is collected.
Data Access & Collection · Company practice
PayPal collects usage and browsing activity, including data gathered through Cookies
Internet or network activity collected includes interactions with the Services, page response times, download errors, date and time of use, shopping history, IP-address location information, page-load statistics, the websites you visited before coming to the Sites, and other usage and browsing information collected through Cookies. "Cookies" is defined to include cookies, pixel tags, web beacons and widgets.
Details not recorded for this card
Supporting quotations
Internet or network activity: Such as interactions with our Services, information about response time for web pages, download errors, date and time when you used the service, shopping history
the websites you visited before coming to the Sites, and other usage and browsing information collected through Cookies.
Cookies means tracking technologies such as cookies, pixel tags, web beacons, and widgets.
Qualifications & exceptions
Examples only ("Such as").
"Cookies" covers cookies, pixel tags, web beacons and widgets.
Biometric data (voice, photo ID, face scans) may be collected when you consent to authentication
PayPal says it may collect biometric data, such as voice identification, photo identification or face scans, when you consent in the user experience to authenticate you for certain account actions. The actions named include verifying your identity before you access accounts and Services, recovering passwords, updating profile information, managing payments and payment methods, lifting account limitations and initiating cryptocurrency transfers.
Details not recorded for this card
Supporting quotations
Biometric data: Such as voice identification, photo identification, or face scans, which we may collect when you consent in the user experience to authenticate you for certain actions related to your account
Qualifications & exceptions
Collected "when you consent in the user experience".
Purpose given is to authenticate you for certain actions related to your account (examples listed).
Not stated here
The passage does not say how long biometric data is kept.
Data Access & Collection · Company practice
Call recordings, chats, emails and survey answers from contacting PayPal are collected
PayPal lists call recordings when you talk to customer service as audio information. It also collects information you provide when you contact it: survey responses, recorded and chat conversations, email correspondence, account or profile status, repayment history, voice identification, vulnerability-related information you provide, and information about others if you choose to share it with PayPal.
Details not recorded for this card
Supporting quotations
Audio, electronic, visual, or similar information: Such as call recordings when you talk to customer service.
Information you provide when you contact us: Such as your responses to surveys, recorded conversations, chat conversations with us, email correspondence with us, account or profile status, repayment history, voice identification, vulnerability-related information provided by you and information about others if you choose to share it with us.
Qualifications & exceptions
Information about others is collected only "if you choose to share it with us".
Data Access & Collection · User right or choice
Business details, imported contacts and profile information are collected; profile can be set to Private
Collected categories also include professional or employment information (business information, job title, contact emails, phone numbers and taxpayer ID numbers), imported contact information (names, addresses, phone numbers, images, emails or usernames of contacts you import or enter manually), and account profile information (username, profile picture, gender or personal description) which you add and which may include Sensitive Personal Information. You can set your profile to "Private" at any time.
Details not recorded for this card
Supporting quotations
Professional or employment information: Such as business information, job title, contact emails, phone numbers and taxpayer ID numbers.
Imported contact information: Such as name, address, phone number, images, email address or usernames associated with the contacts you import or enter manually.
Account profile information: Such as username, profile picture, gender, or personal description, which you add that may include Sensitive Personal Information. You can set your profile to "Private" at any time.
Qualifications & exceptions
Contact information is collected for contacts you import or enter manually.
Profile information is information "you add"; the Private setting is available "at any time".
Not stated here
The passage does not say what "Private" hides or from whom.
Data Access & Collection · Company practice
Sanctions-list information and protected-classification characteristics are listed as collected
PayPal lists information related to legal requirements (such as information from external sanction lists: name, date of birth, place of birth, occupation and the reason a person is on the list, consistent with applicable law) and characteristics of protected classifications (such as age or date of birth, nationality, disability, citizenship and military status) among the categories it collects.
Details not recorded for this card
Supporting quotations
Information related to legal requirements: Such as information from external sanction lists
consistent with applicable law.
Characteristics of protected classifications: Such as, age or date of birth, nationality, disability, citizenship, and military status.
Qualifications & exceptions
Sanction-list information is described as collected "consistent with applicable law".
Examples only ("Such as").
Not stated here
The passage does not say in which situations disability or military status is collected.
Data Access & Collection · Context
Sensitive Personal Information includes SSN, account numbers, biometrics and precise location
PayPal lists Sensitive Personal Information as including Social Security and tax ID numbers, government-issued and related identification, bank account and routing numbers, card information, financial information, biometric data and precise geolocation data, "depending on applicable privacy law". In certain jurisdictions (the example given is under the GDPR) this may also be called "special category information".
Details not recorded for this card
Supporting quotations
Sensitive Personal Information: Such as Social Security and tax ID number, government-issued and other related identification, bank account and routing numbers, credit and debit card information, financial information, biometric data (as described above), or precise geolocation data, depending on applicable privacy law.
In certain jurisdictions (e.g. under the GDPR), this may also be referred to as "special category information".
Qualifications & exceptions
What counts as Sensitive Personal Information depends on applicable privacy law.
"Special category information" is the term in certain jurisdictions such as under the GDPR.
Data Access & Collection · Company practice
PayPal may also obtain this information from Excluded Services and third parties
PayPal says it may also obtain the above categories of Personal Information from Excluded Services (including Venmo and PayPal Honey) and from third parties, including service providers, Partners and Merchants, payment partners such as payment networks and processors, credit reporting agencies and public and private credit databases, government entities, data brokers and financial institutions. Excluded Services are separate brands, affiliates or subsidiaries that follow their own terms and privacy statements.
Details not recorded for this card
Supporting quotations
We may also obtain the above categories of Personal Information from the following categories of sources:
Excluded Services, including Venmo and PayPal Honey.
Third parties, including service providers, Partners and Merchants, payment partners, such as payment networks and processors, credit reporting agencies and public and private credit databases ("CRAs"), government entities, data brokers, and financial institutions.
Excluded Services means companies or separate brands, affiliates, or subsidiaries of PayPal
Qualifications & exceptions
Applies to "the above categories" of Personal Information.
Third-party sources are listed with "including", so the list is not exhaustive.
Linked accounts you agree to connect are periodically collected until you unlink them
PayPal lists linked accounts as a source of Personal Information: non-financial or financial accounts (examples: social network accounts, mail accounts, bank, card or investment accounts) that you agree to link to PayPal. You may unlink them at any time. If you choose to link these accounts or share such information, PayPal says it will periodically collect and process it until you unlink the account.
Details not recorded for this card
Supporting quotations
Linked accounts, including non-financial or financial accounts, such as social network accounts, mail accounts, or bank, card, or investment accounts you agree to link to PayPal.
You may unlink your linked accounts at any time.
we will periodically collect and process it until you unlink the account.
Qualifications & exceptions
Applies only to accounts "you agree to link" or information you choose to share.
Collection and processing continue "periodically" until you unlink the account; you may unlink at any time.
Not stated here
The passage does not say how often the periodic collection occurs.
Data Access & Collection · Company practice
Information also comes from third-party apps you use, PayPal group companies and Partner or Merchant sites
Other listed sources are third-party applications you choose to use (the Apple App Store, Google Play Store or social networking sites), members of the PayPal corporate group, and Partners or Merchants. When you shop on Partner and Merchant sites, the Partner or Merchant may disclose Personal Information to PayPal, which PayPal says it will use in accordance with this Privacy Statement and the relevant PayPal user agreement.
Details not recorded for this card
Supporting quotations
Third-party applications that you choose to use, including the Apple App Store, Google Play Store, or social networking sites.
Members of the PayPal corporate group from time to time
When you shop on Partner and Merchant sites, the Partner or Merchant may disclose Personal Information with PayPal that we will use in accordance with this Privacy Statement and the relevant PayPal user agreement.
Qualifications & exceptions
Third-party applications are covered only when "you choose to use" them.
Partner or Merchant disclosures happen when you shop on their sites.
Not stated here
The relevant PayPal user agreement is not supplied in this document, so how it further limits use is unknown.
Data Access & Collection · Company practice
PayPal and its partners use Cookies for access, personalization, interest-based ads, analytics and fraud prevention
When you interact with the Services, open an email PayPal sends, or visit a third-party website for which PayPal provides Services, PayPal says it and its partners use Cookies to grant access to the Sites, Services, applications and tools, recognize you as a user, customize online experiences and content (including serving interest-based advertising), perform analytics, mitigate risk, prevent potential fraud, and promote trust and safety. It uses Cookies to collect device information and internet activity information and to generate inferences as described earlier.
Details not recorded for this card
Supporting quotations
When you interact with our Services, open email we send you, or visit a third-party website for which we provide Services, we and our partners use Cookies
customize your online experiences and online content, including to serve you interest-based advertising, perform analytics, mitigate risk and prevent potential fraud
We use Cookies to collect your device information, internet activity information, and generate inferences as described above.
Cookies means tracking technologies such as cookies, pixel tags, web beacons, and widgets.
Device Information means data that can be automatically collected from any device used to access the Services.
Qualifications & exceptions
Applies when you use the Services, open PayPal emails, or visit a third-party site for which PayPal provides Services.
Service providers may place their own Cookies and collect device identifiers to serve you ads
PayPal says it may use some authorized service providers to help serve you relevant ads on its Services and other places on the internet. These providers may also place Cookies on your device via the Services (third-party Cookies) and may collect information that helps them identify your device, such as IP address or other unique device identifiers.
Details not recorded for this card
Supporting quotations
We may use some authorized service providers to help us to serve you relevant ads on our Services and other places on the internet.
These service providers may also place Cookies on your device via our Services (third-party Cookies).
They may also collect information that helps them identify your device, such as IP-address or other unique device identifiers.
Qualifications & exceptions
Applies to "some authorized service providers" that help serve ads.
Not stated here
The service providers placing third-party Cookies are not named here.
Data Access & Collection · Company practice
PayPal does not respond to browser Do Not Track settings
PayPal explains that some browsers have an optional Do Not Track setting that lets you opt out of being tracked by advertisers and some third parties. Because many of its services will not function without tracking data, PayPal says it does not respond to DNT settings.
Details not recorded for this card
Supporting quotations
Because many of our services won’t function without tracking data, we do not respond to DNT settings.
Do Not Track
Data Access & Collection · Procedure
A separate cookie statement and an advertising opt-out page are pointed to for more detail
PayPal points to its Statement on Cookies and Tracking Technologies for more on how it uses cookies and to an About Ads page to learn how to opt out of this kind of tracking technology.
Details not recorded for this card
Supporting quotations
If you want to know more about how we use cookies, please review our
To learn how to opt-out of this kind of tracking technology, visit
Not stated here
The text of the linked cookie statement and the About Ads opt-out page is not supplied here, so this card cannot say what they cover or how opting out works.
Data Access & Collection · User right or choice
You can limit the information you provide, but required information is needed to create an account or Fastlane profile
PayPal says you can control how Personal Information is collected or disclosed and how it communicates with you. You may choose to limit the Personal Information you provide when its apps or Services request it, noting that Personal Information helps provide a more personalized experience. Some Personal Information is required for the Services to function. If you choose not to share your contacts, you can still use the mobile apps but some actions may not be as fast or easy. If you do not provide information required for an account or Fastlane profile, such as your name and email address, PayPal says it will not be able to create the account or Fastlane profile for you.
Details not recorded for this card
Supporting quotations
You can control how Personal Information is collected or disclosed, as well as how we communicate with you.
You may choose to limit the Personal Information you provide when our apps or Services request it.
If you choose not to share your contacts with us, you can still use our mobile apps, but some actions may not be as fast or easy as it would be if you shared your contacts.
If you choose not to provide information that is required for an account or Fastlane profile to function, like your name and email address, we will not be able to create an account or Fastlane profile for you.
Fastlane means the online tool whereby individuals can store their payment methods and other Personal Information with PayPal
Qualifications & exceptions
Not sharing contacts: apps still usable but some actions slower.
Not providing required information (like name and email): no account or Fastlane profile can be created.
Not stated here
The passage does not list all information that is required for the Services to function.
Not directed to children under 18; information known to come from them is deleted unless legally retained
PayPal says the Sites and Services are not directed to children under 18 and that it does not knowingly collect information from children under 18 or other individuals not legally allowed to use the Services. If it obtains actual knowledge it has collected Personal Information from someone not allowed to use the Services, it says it will promptly delete it, unless legally obligated to retain it. It asks you to contact it if you believe it mistakenly collected such information.
Details not recorded for this card
Supporting quotations
The Sites and Services are not directed to children under the age of 18. We do not knowingly collect information, including Personal Information, from children under the age of 18 or other individuals who are not legally allowed to use our Services.
If we obtain actual knowledge that we have collected Personal Information from someone not allowed to use our Services, we will promptly delete it, unless we are legally obligated to retain such data.
Qualifications & exceptions
Applies when PayPal has "actual knowledge" of the collection.
Deletion is subject to legal retention obligations.
Not stated here
The passage does not say how PayPal checks for age.
Data Access & Collection · Context
"Cookies" covers pixel tags, web beacons and widgets; "Device Information" is collected automatically from devices
"Cookies" means tracking technologies such as cookies, pixel tags, web beacons and widgets. "Device Information" means data that can be automatically collected from any device used to access the Services, which may include (but is not limited to) device type, network connections, device name, IP address, web browser and internet connection information, geolocation information, and information about apps downloaded to your device.
Details not recorded for this card
Supporting quotations
Cookies means tracking technologies such as cookies, pixel tags, web beacons, and widgets.
Device Information means data that can be automatically collected from any device used to access the Services.
geolocation information, and information about apps downloaded to your device.
Qualifications & exceptions
The Device Information list is "not limited to" the items named.
"Personal Information" includes anything reasonably capable of being associated with you or your household
In this Privacy Statement, "Personal Information" means any information that directly or indirectly identifies you or is reasonably capable of being associated with you or your household, including your identity, finances and online behavior, or such broader meanings as given by the definitions of personal information, personal data, personally identifiable information or like terms under applicable privacy laws.
Details not recorded for this card
Supporting quotations
Personal Information
means any information that directly or indirectly identifies you or is reasonably capable of being associated with you or your household information about you, including your identity, finances and online behavior
Qualifications & exceptions
A broader meaning under applicable privacy laws also applies.
CCPA table: Identifiers are collected and disclosed for twelve listed purposes
In the table, the category Identifiers lists these purposes of collection and disclosure: Provide Services; Communicate with you; Link an account; Manage and improve our Services; Manage fraud and risk; Market our Services; Comply with laws; Process information about your contacts; Communicate with you; Provide receipts in connection with PayPal Point of Sale services; Remember your preferences; Associate information about you. (Communicate with you appears twice in the source.)
Details not recorded for this card
Supporting quotations
Identifiers
Provide Services
Communicate with you
Link an account
Manage and improve our Services
Manage fraud and risk
Market our Services
Comply with laws
Process information about your contacts
Communicate with you
Provide receipts in connection with PayPal Point of Sale services
Remember your preferences
Associate information about you
Qualifications & exceptions
Table row: Identifiers; column: Purpose of Collection and Disclosure.
Not stated here
The table does not map each purpose to each recipient category.
Data Access & Collection · Company practice
CCPA table: Records and Financial Information are collected and disclosed for eleven listed purposes
In the table, Records and Financial Information (including Personal Information described in the California Customer Records Act) lists these purposes: Provide Services; Communicate with you; Link an account; Keep your account and Fastlane profile and financial information up to date; Manage and improve our Services; Manage fraud and risk; Market our Services; Provide personalized Services; Comply with laws; Process information about your contacts; Communicate with you. (Communicate with you appears twice in the source.)
Details not recorded for this card
Supporting quotations
Records and Financial Information (including Personal Information described in California Customer Records Act)
Provide Services
Communicate with you
Link an account
Keep your account and Fastlane profile and financial information up to date
Manage and improve our Services
Manage fraud and risk
Market our Services
Provide personalized Services
Comply with laws
Process information about your contacts
Communicate with you
Qualifications & exceptions
Table row: Records and Financial Information; column: Purpose of Collection and Disclosure.
Not stated here
The table does not map each purpose to each recipient category.
CCPA table: Commercial information is collected and disclosed for eight listed purposes
In the table, Commercial information lists these purposes: Provide Services; Communicate with you; Manage and improve our Services; Manage fraud and risk; Market our Services; Comply with laws; Remember your preferences; Associate information about you.
Details not recorded for this card
Supporting quotations
Commercial information
Provide Services
Communicate with you
Manage and improve our Services
Manage fraud and risk
Market our Services
Comply with laws
Remember your preferences
Associate information about you
Qualifications & exceptions
Table row: Commercial information; column: Purpose of Collection and Disclosure.
Not stated here
The table does not map each purpose to each recipient category.
Data Access & Collection · Company practice
CCPA table: Geolocation Data is used for location-based options and fraud management, shared with five recipient types
In the table, Geolocation Data is collected and disclosed for these purposes: Send you location-based options; Manage fraud and risk. It is disclosed to these categories of third parties: Authorities; PayPal and PayPal affiliates; Service providers; Other financial institutions; Partners and Merchants. The source lists the row label "Geolocation Data" after its cells, but the table structure marks these cells as the Geolocation Data row.
Details not recorded for this card
Supporting quotations
Send you location-based options
Manage fraud and risk
Authorities
PayPal and PayPal affiliates
Service providers
Other financial institutions
Partners and Merchants
Geolocation Data
Qualifications & exceptions
Table row: Geolocation Data.
Not stated here
The table does not say whether this means GPS or IP-based location, nor which recipients receive it for which purpose.
Data Access & Collection · Company practice
CCPA table: Internet or network activity is used for six purposes and disclosed to five recipient categories
In the table, Internet or network activity is collected and disclosed for these purposes: Operate and provide Services; Communicate with you; Manage and improve Services; Market our Services; Send you locally relevant options; Comply with laws. It is disclosed to these categories of third parties: PayPal and PayPal affiliates; Service providers; Other financial institutions; Partners and Merchants; Authorities.
Details not recorded for this card
Supporting quotations
Internet or network activity
Operate and provide Services
Communicate with you
Manage and improve Services
Market our Services
Send you locally relevant options
Comply with laws
PayPal and PayPal affiliates
Service providers
Other financial institutions
Partners and Merchants
Authorities
Qualifications & exceptions
Table row: Internet or network activity.
Not stated here
The table does not map each purpose to each recipient category.
Data Access & Collection · Company practice
CCPA table: Biometric data is used to authenticate you for account actions
In the table, Biometric data lists one purpose: authenticating you for certain actions related to your account, including to meet regulatory requirements or before you access accounts and Services, recover passwords, update profile information, manage payments and payment methods, lift account limitations, and initiate third-party cryptocurrency transfers (the last item continues in the next block of the source).
Details not recorded for this card
Supporting quotations
Biometric
Authenticate you for certain actions related to your account, including to:
meet regulatory requirements or before you access accounts and Services;
recover passwords;
update profile information;
manage payments and payment methods;
lift account limitations; and
initiate third-party crypto currency transfers.
Qualifications & exceptions
Table row: Biometric; column: Purpose of Collection and Disclosure.
Not stated here
The recipients of biometric data are given in the following blocks of the table.
Data Access & Collection · Company practice
CCPA table: Biometric data is disclosed to Service providers and includes crypto transfers among its purposes
In the table, the last purpose in the Biometric row is initiating third-party cryptocurrency transfers (completing the list of authentication purposes: regulatory requirements or before accessing accounts and Services, recovering passwords, updating profile information, managing payments and payment methods, lifting account limitations). The only category of third party listed for Biometric data is Service providers.
Details not recorded for this card
Supporting quotations
initiate third-party crypto currency transfers.
Service providers
Qualifications & exceptions
Table row: Biometric.
The recipient column for this row lists only Service providers.
Not stated here
The table does not say which service providers receive biometric data or for which purpose.
Data Access & Collection · Company practice
CCPA table: Audio, electronic or visual information is used for four purposes and disclosed to four recipient types
In the CCPA table, the category "Audio, electronic, visual, or similar information" lists these purposes of collection and disclosure: Provide Services; Authenticate your access to an account or Fastlane profile; Manage and improve Services; Manage fraud and risk. It lists these categories of third parties to which PayPal discloses it for business purposes: Service providers; PayPal and PayPal affiliates; Merchants and Partners; Authorities.
Details not recorded for this card
Supporting quotations
Audio, electronic, visual, or similar information
Provide Services
Authenticate your access to an account or Fastlane profile
Manage and improve Services
Manage fraud and risk
Service providers
PayPal and PayPal affiliates
Merchants and Partners
Authorities
Qualifications & exceptions
Table row: Audio, electronic, visual, or similar information.
Not stated here
The table does not say which recipients receive this category for which purpose.
Data Access & Collection · Company practice
CCPA table: Professional or employment information is used for two purposes and disclosed to five recipient types
In the CCPA table, the category "Professional or employment information" lists these purposes of collection and disclosure: Provide Services; Manage fraud and risk. It lists these categories of third parties to which PayPal discloses it for business purposes: Service providers; PayPal and PayPal affiliates; Merchants and Partners; Authorities; Other financial institutions.
Details not recorded for this card
Supporting quotations
Professional or employment information
Provide Services
Manage fraud and risk
Service providers
PayPal and PayPal affiliates
Merchants and Partners
Authorities
Other financial institutions
Qualifications & exceptions
Table row: Professional or employment information.
Not stated here
The table does not say which recipients receive this category for which purpose.
Data Access & Collection · Company practice
CCPA table: Information about imported contacts is used to provide Services and disclosed to Service providers
In the CCPA table, the category "Information about your imported contacts" lists these purposes of collection and disclosure: Provide Services. It lists these categories of third parties to which PayPal discloses it for business purposes: Service providers.
Details not recorded for this card
Supporting quotations
Information about your imported contacts
Provide Services
Service providers
Qualifications & exceptions
Table row: Information about your imported contacts.
Not stated here
The table does not say which recipients receive this category for which purpose.
Data Access & Collection · Company practice
CCPA table: Account and profile information is used to provide Services and disclosed to five recipient types
In the CCPA table, the category "Information in your PayPal, Hyperwallet or Xoom account or Fastlane profile" lists these purposes of collection and disclosure: Provide Services. It lists these categories of third parties to which PayPal discloses it for business purposes: Service providers; PayPal and PayPal affiliates; Merchants and Partners; Authorities; Other financial institutions.
Details not recorded for this card
Supporting quotations
Information in your PayPal, Hyperwallet or Xoom account or Fastlane profile
Provide Services
Service providers
PayPal and PayPal affiliates
Merchants and Partners
Authorities
Other financial institutions
Qualifications & exceptions
Table row: Information in your PayPal, Hyperwallet or Xoom account or Fastlane profile.
Not stated here
The table does not say which recipients receive this category for which purpose.
Data Access & Collection · Company practice
CCPA table: Information you give when contacting PayPal has four purposes and four recipient types
In the CCPA table, the category "Information you provide when you contact us" lists these purposes of collection and disclosure: Provide Services; Authenticate your access to an account or Fastlane profile; Manage and improve; Services; Manage fraud and risk. It lists these categories of third parties to which PayPal discloses it for business purposes: Service providers; PayPal and PayPal affiliates; Merchants and Partners; Authorities.
Details not recorded for this card
Supporting quotations
Information you provide when you contact us
Provide Services
Authenticate your access to an account or Fastlane profile
Manage and improve
Services
Manage fraud and risk
Service providers
PayPal and PayPal affiliates
Merchants and Partners
Authorities
Qualifications & exceptions
Table row: Information you provide when you contact us.
The source splits "Manage and improve" and "Services" into two separate blocks; they read together as "Manage and improve Services".
Not stated here
The table does not say which recipients receive this category for which purpose.
Data Access & Collection · Company practice
CCPA table: Inferred data is used for seven purposes including identity checks and risk assessment
In the CCPA table, the category "Inferred data" lists these purposes of collection and disclosure: Provide Services; Manage fraud and risk; Market our Services; Display content based on your interest; Better respond to your requests or inquiries or for similar customer service issues; Verify your identity; Conduct risk assessment. It lists these categories of third parties to which PayPal discloses it for business purposes: PayPal and PayPal affiliates; Service Providers; Other financial institutions; Merchants and Partners; Authorities.
Details not recorded for this card
Supporting quotations
Inferred data
Provide Services
Manage fraud and risk
Market our Services
Display content based on your interest
Better respond to your requests or inquiries or for similar customer service issues
Verify your identity
Conduct risk assessment
PayPal and PayPal affiliates
Service Providers
Other financial institutions
Merchants and Partners
Authorities
Qualifications & exceptions
Table row: Inferred data.
Not stated here
The table does not say which recipients receive this category for which purpose.
Data Access & Collection · Company practice
CCPA table: Sensitive Personal Information has two purposes and is disclosed to six recipient types
In the CCPA table, the category "Sensitive Personal Information" lists these purposes of collection and disclosure: Provide Services; Manage fraud and risk. It lists these categories of third parties to which PayPal discloses it for business purposes: PayPal and PayPal affiliates; Service providers; Other financial institutions; Merchants and Partners; Authorities; Buyers or in connection with; business transfer.
Details not recorded for this card
Supporting quotations
Sensitive Personal Information
Provide Services
Manage fraud and risk
PayPal and PayPal affiliates
Service providers
Other financial institutions
Merchants and Partners
Authorities
Buyers or in connection with
business transfer
Qualifications & exceptions
Table row: Sensitive Personal Information.
The source splits "Buyers or in connection with" and "business transfer" into two blocks; they read together as buyers in connection with a business transfer.
Not stated here
The table does not say which recipients receive this category for which purpose.
Data Access & Collection · Company practice
CCPA table: Characteristics of protected classifications are used to provide Services and manage risk
In the CCPA table, the category "Characteristics of Protected Classifications" lists these purposes of collection and disclosure: Provide our Services; Manage risk. It lists these categories of third parties to which PayPal discloses it for business purposes: PayPal and PayPal affiliates; Service providers; Authorities.
Details not recorded for this card
Supporting quotations
Characteristics of Protected Classifications
Provide our Services
Manage risk
PayPal and PayPal affiliates
Service providers
Authorities
Qualifications & exceptions
Table row: Characteristics of Protected Classifications.
Not stated here
The table does not say which recipients receive this category for which purpose.
Data Access & Collection · Company practice
CCPA table: Information from your device is used for seven listed purposes and disclosed to five recipient types
In the CCPA table, the category "Information from your device" lists these purposes of collection and disclosure: Provide Services; Manage and improve our Services; Manage fraud and risk; Communicate with you; Link an account; Market our Services; Personalize your experience Comply with laws. It lists these categories of third parties to which PayPal discloses it for business purposes: PayPal and PayPal affiliates; Service providers; Other financial institutions; Merchants and Partners; Authorities.
Details not recorded for this card
Supporting quotations
Information from your device
Provide Services
Manage and improve our Services
Manage fraud and risk
Communicate with you
Link an account
Market our Services
Personalize your experience Comply with laws
PayPal and PayPal affiliates
Service providers
Other financial institutions
Merchants and Partners
Authorities
Qualifications & exceptions
Table row: Information from your device.
The source joins "Personalize your experience" and "Comply with laws" in one block; they are two listed purposes.
Not stated here
The table does not say which recipients receive this category for which purpose.
Data Access & Collection · Company practice
Federal notice: information is collected when you open accounts, use cards or send money, and from credit bureaus
PayPal says it collects your personal information, for example, when you open an account or provide account information, use your credit or debit card or give contact information, or use your PayPal and/or Xoom account to tell it who receives money and where to send it. It also collects personal information from others, such as credit bureaus, affiliates or other companies.
Details not recorded for this card
Supporting quotations
How does PayPal collect my personal information?
We collect your personal information, for example, when you
open an account or provide account information
use your credit or debit card or give us your contact information
use your PayPal, and/or Xoom account to tell us who receives the money
use your PayPal, and/or Xoom account to tell us where to send the money
We also collect your personal information from others, such as credit bureaus, affiliates, or other companies.
Qualifications & exceptions
Examples only ("for example"); others sources are "such as credit bureaus, affiliates, or other companies".
Data Access & Collection · Company practice
UK/EEA lawful basis table: fifteen listed categories of data are treated as necessary for the Services
In the first row of the lawful basis table, the "Types of Data" column says necessary categories of Personal Information include: Registration and contact information; Identification and signature information; Payment information; Information related to legal requirements; Information you provide when you contact us; Transaction information; Package tracking; Service-specific; Personal Information; Information from CRAs and financial institutions; Information from your connected financial accounts; Information from your use of the Services; Technical usage data; Device information; and; Location data. (The source lists "Personal Information" and "Service-specific" as separate items.)
Details not recorded for this card
Supporting quotations
Necessary categories of Personal Information include:
Registration and contact information;
Identification and signature information;
Payment information;
Information related to legal requirements;
Information you provide when you contact us;
Transaction information;
Package tracking;
Service-specific;
Personal Information;
Information from CRAs and financial institutions;
Information from your connected financial accounts;
Information from your use of the Services;
Technical usage data;
Device information; and
Location data.
Qualifications & exceptions
Applies to individuals in the UK and EEA.
Described as "necessary" categories; the list is introduced with "include".
Not stated here
The table does not define what "Service-specific" means.
Data Access & Collection · Company practice
UK/EEA lawful basis, second row: necessary data categories include vulnerability information and location data
In the second row, the "Types of Data" column says necessary categories of Personal Information include: Registration and contact information; Identification and signature information; Payment information; Information related to legal requirements; Information you provide when you contact us including information related to your vulnerability; Transaction information; Package tracking; Service-specific Personal Information; Information from CRAs and financial institutions; Information from your connected financial accounts; Information from your use of the Services; Technical usage data; Device information; and Location data. This row adds information related to vulnerability to the contact category.
Details not recorded for this card
Supporting quotations
Necessary categories of Personal Information include:
Registration and contact information;
Identification and signature information;
Payment information;
Information related to legal requirements;
Information you provide when you contact us including information related to your vulnerability;
Transaction information;
Package tracking;
Service-specific Personal Information;
Information from CRAs and financial institutions;
Information from your connected financial accounts;
Information from your use of the Services;
Technical usage data;
Device information; and Location data.
Qualifications & exceptions
Applies to individuals in the UK and EEA.
Not stated here
The table does not define "Service-specific Personal Information".
Data Access & Collection · Company practice
UK/EEA lawful basis, third row: necessary data categories listed so far
In the third row, the "Types of Data" column says necessary categories of Personal Information include: Registration and contact information; Identification and signature information; Payment information; Information related to legal requirements; Information you provide when you contact us; Transaction information; Package tracking; Service-specific Personal Information; Information from CRAs and financial institutions; Information from your connected financial accounts; the list continues in the next section with information from your use of the Services.
Details not recorded for this card
Supporting quotations
Necessary categories of Personal Information include:
Registration and contact information;
Identification and signature information;
Payment information;
Information related to legal requirements;
Information you provide when you contact us;
Transaction information;
Package tracking;
Service-specific Personal Information;
Information from CRAs and financial institutions;
Information from your connected financial accounts;
Information from your use of the Services;
Qualifications & exceptions
Applies to individuals in the UK and EEA.
Not stated here
The remaining items and the row's lawful basis appear in the next section of the source.
Data Access & Collection · Company practice
Singapore: thirteen categories of Personal Information are listed as necessary
For individuals in Singapore, the second column says necessary categories of Personal Information include: Registration and contact information; Identification and signature information; Payment information; Information related to legal requirements; Information you provide when you contact us; Transaction information; Package tracking; Service-specific Personal Information; Information from CRAs and financial institutions; Information from your connected financial accounts; Information from your use of the Services; Technical usage data; Device information; and; Location data.
Details not recorded for this card
Supporting quotations
Necessary categories of Personal Information include:
Registration and contact information;
Identification and signature information;
Payment information; Information related to legal requirements;
Information you provide when you contact us;
Transaction information;
Package tracking;
Service-specific Personal Information;
Information from CRAs and financial institutions;
Information from your connected financial accounts;
Information from your use of the Services;
Technical usage data;
Device information; and
Location data.
Qualifications & exceptions
Applies to individuals in Singapore.
Listed with "include".
Not stated here
The source puts "Payment information" and "Information related to legal requirements" in one block.