Statement covers PayPal group accounts, Sites and Services, but not Excluded Services
PayPal, Inc. and its subsidiaries and affiliates ("PayPal") say this Privacy Statement describes how they use your Personal Information when you use your PayPal account(s), visit their Sites, or apply for or use their Services, to the extent those Services are available in your jurisdiction. It does not apply to Excluded Services, which the Statement defines as separate brands, affiliates or subsidiaries (examples named: Venmo, Honey Science LLC, Chargehound LLC, Paidy Inc., Swift Financial LLC, Bill Me Later, Inc.) that follow their own terms and separate privacy statements. "Services" is defined broadly (payments, rewards, PayPal Ads, Fastlane, Xoom, Pool, Hyperwallet, credit and financing, crypto services offered by PayPal Digital Inc., merchant tools and more) and "Sites" covers websites, mobile apps and official social network platforms that post or link to this Statement.
Details not recorded for this card
Supporting quotations
PayPal, Inc. and our subsidiaries and affiliated companies
This Privacy Statement does not apply to Excluded Services.
Excluded Services means companies or separate brands, affiliates, or subsidiaries of PayPal, who process Personal Information in accordance with their own terms of service and separate privacy statements.
Services refers to all PayPal-branded or unbranded payment, financial, and personalization products and solutions
Sites means the websites, mobile apps, official social network platforms, or other online properties through which PayPal offers the Services and which has posted or linked to this Privacy Statement.
means any information that directly or indirectly identifies you or is reasonably capable of being associated with you or your household
Qualifications & exceptions
Applies to Services only "to the extent available in your jurisdiction".
Does not apply to Excluded Services, which have their own terms and privacy statements.
"Sites" means online properties that have posted or linked to this Privacy Statement.
Not stated here
The Statement does not list every Excluded Service; the named brands are examples only.
Third parties such as authorities, credit bureaus and acquirers follow their own privacy policies
The Statement does not apply when certain third parties (the examples given are authorities, credit bureaus, acquirers and other financial institutions) process your Personal Information. Their processing is governed by their own privacy policies, and PayPal encourages you to read those policies before interacting with them.
Details not recorded for this card
Supporting quotations
This Privacy Statement does not apply when Personal Information is processed by certain third parties, for example, authorities, credit bureaus, acquirers, and other financial institutions.
the third parties' processing of your Personal Information is regulated by their own privacy policies
Qualifications & exceptions
Applies to "certain third parties"; the Statement gives examples but does not list every third party.
Not stated here
Which third parties beyond the examples fall outside the Statement is not specified here.
Legal Rights & Agreement Rules · Context
Processing and privacy rights can differ depending on where you live
If you live in certain countries, PayPal says it may process your Personal Information differently to comply with local privacy laws, and you may have specific privacy rights depending on your place of residence. The Statement provides jurisdiction-specific information to show which rights apply.
Details not recorded for this card
Supporting quotations
If you reside in certain countries, we may process your Personal Information differently to comply with applicable privacy laws in those jurisdictions.
You may also have specific privacy rights depending on your place of residence.
Qualifications & exceptions
Only if you reside in certain countries; the Statement does not list them in this passage.
Legal Rights & Agreement Rules · Company practice
PayPal may revise the Statement; 30 days' prior notice only where applicable law requires notice
PayPal may revise this Privacy Statement from time to time to reflect changes to its business, Services or applicable laws. The version covered here says "Last updated on October 12, 2026". If a revised version requires notice under applicable law, PayPal says it will give 30 days' prior notice by posting on its Policy Updates or Privacy Statement page. Otherwise the revised Statement takes effect on its published effective date. For a new User or someone receiving the Statement for the first time, an upcoming change described on those pages applies on its indicated effective date.
Details not recorded for this card
Supporting quotations
We may revise this Privacy Statement from time to time to reflect changes to our business, Services, or applicable laws.
If the revised version requires notice in accordance with applicable law, we will provide you with 30 days' prior notice by posting notice of the change on the
otherwise the revised Privacy Statement will be effective as of the published effective date.
such upcoming change will apply to you on the indicated effective date.
Last updated on October 12, 2026
Qualifications & exceptions
The 30-day prior notice applies only "if the revised version requires notice in accordance with applicable law".
Notice, where given, is by posting on the Policy Updates or Privacy Statement page of the PayPal website.
Where notice is not required by law, the revision is effective on the published effective date.
Not stated here
The passage does not say which changes legally require notice.
The text of the linked Policy Updates and Privacy Statement pages is not supplied here, so this card cannot say what upcoming changes they list.
Data Access & Collection · Company practice
PayPal collects Personal Information from people without PayPal accounts
People can use PayPal Services without an account or profile, and PayPal says it will still collect their Personal Information. Examples given: using Pay without a PayPal Account, using Unbranded Payment Services (e.g., Braintree), using a Fastlane profile, receiving a payment from a PayPal account holder (through the Visa+ service or other third-party wallets, payment networks and processors), or receiving a payment from a payor using Hyperwallet. "Pay without a PayPal Account" excludes Venmo, which has its own terms and privacy statement.
Details not recorded for this card
Supporting quotations
Our Services may be accessed by individuals without a PayPal account or profile.
We will collect Personal Information from you even if you are a non-account holder when you use our Services
Pay without a PayPal Account means our Services may be accessed by individuals without using a PayPal account, a Fastlane profile, or the Unbranded Payment Services.
Pay without a PayPal account does not include Venmo, which is subject to its own terms of service and separate privacy statement.
Unbranded Payment Services means when you are interacting with and making payments to Partners and Merchants using our card processing and/or ACH origination services that do not carry the PayPal brand or when you use our Braintree services.
Fastlane means the online tool whereby individuals can store their payment methods and other Personal Information with PayPal
Hyperwallet means the PayPal technology and online service that allows payout capabilities for businesses of all shapes and sizes through a single integration.
Qualifications & exceptions
Applies to non-account holders when they use or receive payments through the listed Services.
Venmo is outside "Pay without a PayPal Account"; it has its own privacy statement.
Not stated here
The passage does not say here which data categories are collected from non-account holders.
A guest transaction may be linked to a PayPal account you create later
If you Pay without a PayPal account, PayPal says it may link your transaction information with your PayPal account if you create a PayPal account later.
Details not recorded for this card
Supporting quotations
If you Pay without a PayPal account, we may link your transaction information with your PayPal account if you create a PayPal account later.
Qualifications & exceptions
Applies when you pay without an account and later create one.
Stated as "may", not as always.
Not stated here
The passage does not say how long the earlier transaction information is kept before linking.
PayPal collects identifiers and device information, including IP address and cookie data
Among the categories of Personal Information PayPal says it collects from you and from your use of the Services are personal identifiers (such as name, business name, address, phone number, email, IP address, device information, cookie data, government-issued identification and signature) and information from your device (such as language settings, browser ID, device ID, device type, cookie preferences, time zone, operating system, screen resolution and similar settings). The lists are introduced with "Such as", so they are examples rather than a complete list. "Device Information" is defined as data that can be automatically collected from any device used to access the Services.
Details not recorded for this card
Supporting quotations
Categories of Personal Information collected from you, including from your interactions with us and use of the Services:
Personal identifiers: Such as name, business name, address, phone number, email, IP address, device information, information collected from cookies or other tracking technologies, government-issued identification, signature, and other information necessary to establish an account or profile.
Information from your device: Such as language settings, browser ID, device ID, device type, cookie preferences, time zone, operating system, platform, screen resolution
Device Information means data that can be automatically collected from any device used to access the Services.
Qualifications & exceptions
Each category is given as examples ("Such as"), not an exhaustive list.
Device Information is data that can be collected automatically from any device used to access the Services.
PayPal collects financial account details, transaction history and shopping information
PayPal lists records and financial information (such as identity card numbers, bank account and routing numbers, card information including payment account number and CVV, income, and the amounts you send or request), transaction and experience information (such as balances, transaction history, shopping cart information, goods or services considered on Partners and Merchants sites, shipping details, purchase history and order tracking), and commercial information (payout amount, payor information and the record of the Services) as categories it collects. "Partners and Merchants" means PayPal's partners and the merchants or businesses that Users transact with to obtain goods or services.
Details not recorded for this card
Supporting quotations
Records and financial information: Such as identity card numbers, government-issued identification, account header information, bank account and routing numbers, credit and debit card information, income
payment account number, CVV, username, and IBAN information.
Transaction and experience information: Such as account balances, transaction history and transaction details, online shopping cart information
shopping activity and goods or services considered on Partners and Merchants sites
Commercial information: Such as payout amount, payor information, and the record of the Services.
Partners and Merchants means our partners and the merchants, partners or businesses that our Users transact with for the purpose of obtaining goods or services.
Qualifications & exceptions
Examples only ("Such as"); not a complete list of what is collected.
Shopping activity "considered on Partners and Merchants sites" is included in the transaction category.
GPS location may be collected with consent; IP-based location is collected during use
PayPal lists geolocation data as collected information. GPS data may be collected with your consent if you have an account for financial Services. IP-based geolocation data is also collected during your user experience or based on your mobile application settings.
Details not recorded for this card
Supporting quotations
Geolocation data: Such as Global Positioning System ("GPS"), which we may collect with your consent if you have an account for financial Services, and IP-based geolocation data during your user experience or based on your mobile application settings.
Qualifications & exceptions
GPS data: "with your consent" and only "if you have an account for financial Services".
IP-based geolocation data: collected during your user experience or based on mobile app settings.
Not stated here
The passage does not say how precisely or how often location is collected.
Data Access & Collection · Company practice
PayPal collects usage and browsing activity, including data gathered through Cookies
Internet or network activity collected includes interactions with the Services, page response times, download errors, date and time of use, shopping history, IP-address location information, page-load statistics, the websites you visited before coming to the Sites, and other usage and browsing information collected through Cookies. "Cookies" is defined to include cookies, pixel tags, web beacons and widgets.
Details not recorded for this card
Supporting quotations
Internet or network activity: Such as interactions with our Services, information about response time for web pages, download errors, date and time when you used the service, shopping history
the websites you visited before coming to the Sites, and other usage and browsing information collected through Cookies.
Cookies means tracking technologies such as cookies, pixel tags, web beacons, and widgets.
Qualifications & exceptions
Examples only ("Such as").
"Cookies" covers cookies, pixel tags, web beacons and widgets.
Biometric data (voice, photo ID, face scans) may be collected when you consent to authentication
PayPal says it may collect biometric data, such as voice identification, photo identification or face scans, when you consent in the user experience to authenticate you for certain account actions. The actions named include verifying your identity before you access accounts and Services, recovering passwords, updating profile information, managing payments and payment methods, lifting account limitations and initiating cryptocurrency transfers.
Details not recorded for this card
Supporting quotations
Biometric data: Such as voice identification, photo identification, or face scans, which we may collect when you consent in the user experience to authenticate you for certain actions related to your account
Qualifications & exceptions
Collected "when you consent in the user experience".
Purpose given is to authenticate you for certain actions related to your account (examples listed).
Not stated here
The passage does not say how long biometric data is kept.
Data Access & Collection · Company practice
Call recordings, chats, emails and survey answers from contacting PayPal are collected
PayPal lists call recordings when you talk to customer service as audio information. It also collects information you provide when you contact it: survey responses, recorded and chat conversations, email correspondence, account or profile status, repayment history, voice identification, vulnerability-related information you provide, and information about others if you choose to share it with PayPal.
Details not recorded for this card
Supporting quotations
Audio, electronic, visual, or similar information: Such as call recordings when you talk to customer service.
Information you provide when you contact us: Such as your responses to surveys, recorded conversations, chat conversations with us, email correspondence with us, account or profile status, repayment history, voice identification, vulnerability-related information provided by you and information about others if you choose to share it with us.
Qualifications & exceptions
Information about others is collected only "if you choose to share it with us".
Data Access & Collection · User right or choice
Business details, imported contacts and profile information are collected; profile can be set to Private
Collected categories also include professional or employment information (business information, job title, contact emails, phone numbers and taxpayer ID numbers), imported contact information (names, addresses, phone numbers, images, emails or usernames of contacts you import or enter manually), and account profile information (username, profile picture, gender or personal description) which you add and which may include Sensitive Personal Information. You can set your profile to "Private" at any time.
Details not recorded for this card
Supporting quotations
Professional or employment information: Such as business information, job title, contact emails, phone numbers and taxpayer ID numbers.
Imported contact information: Such as name, address, phone number, images, email address or usernames associated with the contacts you import or enter manually.
Account profile information: Such as username, profile picture, gender, or personal description, which you add that may include Sensitive Personal Information. You can set your profile to "Private" at any time.
Qualifications & exceptions
Contact information is collected for contacts you import or enter manually.
Profile information is information "you add"; the Private setting is available "at any time".
Not stated here
The passage does not say what "Private" hides or from whom.
Inference & Profiling · Company practice
PayPal infers data such as income, creditworthiness and shopping habits
PayPal lists inferred data (such as gender, income, browsing and purchasing habits, creditworthiness, fraud and risk assessment, and your preferences and shopping behavior) among what it collects. It says these are inferred based on your transactions and interactions with its Services, ads and offers, or with Partners and Merchants.
Details not recorded for this card
Supporting quotations
Inferred data: Such as gender, income, browsing and purchasing habits, creditworthiness, fraud and risk assessment, your preferences and shopping behavior, which we may infer based on your transactions and interactions with our Services, ads and offers or with our Partners and Merchants.
Qualifications & exceptions
Inferences are drawn from your transactions and interactions with the Services, ads and offers, or Partners and Merchants.
Examples only ("Such as").
Not stated here
The passage does not say how inferences are generated or which model or method is used.
Data Access & Collection · Company practice
Sanctions-list information and protected-classification characteristics are listed as collected
PayPal lists information related to legal requirements (such as information from external sanction lists: name, date of birth, place of birth, occupation and the reason a person is on the list, consistent with applicable law) and characteristics of protected classifications (such as age or date of birth, nationality, disability, citizenship and military status) among the categories it collects.
Details not recorded for this card
Supporting quotations
Information related to legal requirements: Such as information from external sanction lists
consistent with applicable law.
Characteristics of protected classifications: Such as, age or date of birth, nationality, disability, citizenship, and military status.
Qualifications & exceptions
Sanction-list information is described as collected "consistent with applicable law".
Examples only ("Such as").
Not stated here
The passage does not say in which situations disability or military status is collected.
Data Access & Collection · Context
Sensitive Personal Information includes SSN, account numbers, biometrics and precise location
PayPal lists Sensitive Personal Information as including Social Security and tax ID numbers, government-issued and related identification, bank account and routing numbers, card information, financial information, biometric data and precise geolocation data, "depending on applicable privacy law". In certain jurisdictions (the example given is under the GDPR) this may also be called "special category information".
Details not recorded for this card
Supporting quotations
Sensitive Personal Information: Such as Social Security and tax ID number, government-issued and other related identification, bank account and routing numbers, credit and debit card information, financial information, biometric data (as described above), or precise geolocation data, depending on applicable privacy law.
In certain jurisdictions (e.g. under the GDPR), this may also be referred to as "special category information".
Qualifications & exceptions
What counts as Sensitive Personal Information depends on applicable privacy law.
"Special category information" is the term in certain jurisdictions such as under the GDPR.
Data Access & Collection · Company practice
PayPal may also obtain this information from Excluded Services and third parties
PayPal says it may also obtain the above categories of Personal Information from Excluded Services (including Venmo and PayPal Honey) and from third parties, including service providers, Partners and Merchants, payment partners such as payment networks and processors, credit reporting agencies and public and private credit databases, government entities, data brokers and financial institutions. Excluded Services are separate brands, affiliates or subsidiaries that follow their own terms and privacy statements.
Details not recorded for this card
Supporting quotations
We may also obtain the above categories of Personal Information from the following categories of sources:
Excluded Services, including Venmo and PayPal Honey.
Third parties, including service providers, Partners and Merchants, payment partners, such as payment networks and processors, credit reporting agencies and public and private credit databases ("CRAs"), government entities, data brokers, and financial institutions.
Excluded Services means companies or separate brands, affiliates, or subsidiaries of PayPal
Qualifications & exceptions
Applies to "the above categories" of Personal Information.
Third-party sources are listed with "including", so the list is not exhaustive.
Linked accounts you agree to connect are periodically collected until you unlink them
PayPal lists linked accounts as a source of Personal Information: non-financial or financial accounts (examples: social network accounts, mail accounts, bank, card or investment accounts) that you agree to link to PayPal. You may unlink them at any time. If you choose to link these accounts or share such information, PayPal says it will periodically collect and process it until you unlink the account.
Details not recorded for this card
Supporting quotations
Linked accounts, including non-financial or financial accounts, such as social network accounts, mail accounts, or bank, card, or investment accounts you agree to link to PayPal.
You may unlink your linked accounts at any time.
we will periodically collect and process it until you unlink the account.
Qualifications & exceptions
Applies only to accounts "you agree to link" or information you choose to share.
Collection and processing continue "periodically" until you unlink the account; you may unlink at any time.
Not stated here
The passage does not say how often the periodic collection occurs.
Data Access & Collection · Company practice
Information also comes from third-party apps you use, PayPal group companies and Partner or Merchant sites
Other listed sources are third-party applications you choose to use (the Apple App Store, Google Play Store or social networking sites), members of the PayPal corporate group, and Partners or Merchants. When you shop on Partner and Merchant sites, the Partner or Merchant may disclose Personal Information to PayPal, which PayPal says it will use in accordance with this Privacy Statement and the relevant PayPal user agreement.
Details not recorded for this card
Supporting quotations
Third-party applications that you choose to use, including the Apple App Store, Google Play Store, or social networking sites.
Members of the PayPal corporate group from time to time
When you shop on Partner and Merchant sites, the Partner or Merchant may disclose Personal Information with PayPal that we will use in accordance with this Privacy Statement and the relevant PayPal user agreement.
Qualifications & exceptions
Third-party applications are covered only when "you choose to use" them.
Partner or Merchant disclosures happen when you shop on their sites.
Not stated here
The relevant PayPal user agreement is not supplied in this document, so how it further limits use is unknown.
Use & Processing · Company practice
Personal Information is used for services, security and law, plus optional features with opt-out or consent
PayPal says it may process Personal Information for a variety of reasons, including to provide Services, for security and fraud prevention, and to comply with law. It also uses Personal Information for optional features such as syncing your contact list to your account, personalizing content and offers, targeted advertising, or connecting to a third-party platform. Some of these features may be offered with an opt-out or require your consent, and you can withdraw consent at any time as described in the Your Data Protection Rights section.
Details not recorded for this card
Supporting quotations
We may process your Personal Information for a variety of reasons, including to provide our Services, for security and fraud prevention, and to comply with law.
such as syncing your contact list to your account, personalizing content and offers, targeted advertising, or connecting to a third-party platform.
Some of these features may be offered with an opt-out or require your consent to enable. You can withdraw your consent at any time, as described in
We may collect Personal Information to:
Qualifications & exceptions
"Some" features offer an opt-out or need consent; the passage does not say which ones.
Consent can be withdrawn at any time as described in Your Data Protection Rights.
Not stated here
The passage does not say which features are opt-out and which require consent.
Use & Processing · Company practice
Personal Information is used to run payments, verify identity and assess creditworthiness
To provide the Services, PayPal says it may use Personal Information to help you send, receive or request money, initiate payments, add value to an account, pay bills, administer purchases, show shipping options and costs, show your profile, account and payment information, send and receive transactions and prove they were executed, confirm your identity (including through electronic signature) and contact information, authenticate account access, and confirm that account and financial information is accurate and up to date. The same use includes assessing your creditworthiness in connection with the Services.
Details not recorded for this card
Supporting quotations
Provide our Services. We may use Personal Information to help you send, receive or request money, initiate a payment, add monetary value to an account, pay a bill, administer your purchases
to assess your creditworthiness in connection with our Services, confirm your identity (also through the use of electronic signature) and your contact information, to authenticate your access to your account or profile and to confirm your account or profile and financial information are accurate and up to date.
Qualifications & exceptions
Stated as "may use"; the list is a set of examples of providing the Services.
Creditworthiness assessment is "in connection with our Services".
Use & Processing · Company practice
Visa+ and PayPal World transactions use recipient and payment information from third parties
For Visa+, PayPal says it will receive the recipient's name and payment information from Visa and third-party Visa+ participating digital wallets, to process and match Visa+ payment transactions between participating wallets and PayPal. For PayPal World transactions, it will use information from third parties, including third-party wallets, payment networks and processors, to process them.
Details not recorded for this card
Supporting quotations
For Visa+, we will receive the recipient's name and payment information from Visa and third-party Visa+ participating digital wallets for the purpose of processing and matching Visa+ payment transactions between participating digital wallets and PayPal.
We will use information from third parties, including third-party wallets, payment networks, and processors, to process PayPal World transactions.
Qualifications & exceptions
Visa+ information is used for the purpose of processing and matching Visa+ transactions between participating digital wallets and PayPal.
Not stated here
The passage does not define PayPal World in this part of the Statement.
Use & Processing · Company practice
Fastlane users can be recognized at participating sites and their payment details used to check authorization
If you use Fastlane, PayPal says it may recognize you as a Fastlane user when you shop on participating Partner and Merchant sites and may prompt you to take part in interactions such as registering for a store or loyalty account using your Fastlane profile. It will also use your Personal Information and payment method details to determine whether a payment made with a participating Partner or Merchant using your Fastlane profile details is authorized by you and likely to be successfully authorized by the chosen payment method.
Details not recorded for this card
Supporting quotations
If you are using Fastlane, we may recognize you as a Fastlane user when you shop on participating Partner and Merchant sites
We will also use your Personal Information and payment method details to determine whether the payment you are making with a participating Partner or Merchant is authorized by you and likely to be successfully authorized by the payment method you choose to use
Fastlane means the online tool whereby individuals can store their payment methods and other Personal Information with PayPal
Qualifications & exceptions
Applies only if you are using Fastlane and shop on participating Partner and Merchant sites.
Recognition and prompts are described as "may"; the authorization check is described as "will".
Contact details given for Point of Sale receipts may be remembered and pre-filled by card
For buyers using PayPal Point of Sale services (including Venmo Tap to Pay), you may choose to give contact details so PayPal can send digital receipts. If you give your email address or mobile number to a Partner or Merchant using PayPal Point of Sale, PayPal says it may remember your details for next time you buy from a Merchant who uses PayPal Point of Sale in a physical store, if you use the same payment card, whether or not you bought from that Merchant before. The details are then pre-filled in the receipt view.
Details not recorded for this card
Supporting quotations
Provide receipts in connection with PayPal Point of Sale (formerly Zettle by PayPal) services.
you may choose to provide us your contact details so that we can send you digital receipts.
we may remember your details for the next time you buy something from a Merchant who uses PayPal Point of Sale in its physical store, if you use the same payment card.
This is regardless of whether you have previously bought something from this Merchant or not.
Qualifications & exceptions
Applies to buyers who choose to give an email address or mobile number to a Partner or Merchant using PayPal Point of Sale.
Details are remembered only "if you use the same payment card" at a Merchant using PayPal Point of Sale in its physical store.
Not stated here
The passage does not say how to stop the details being remembered.
Use & Processing · Company practice
Personal Information is used to improve services; aggregated insights may be shared with Partners and Merchants
PayPal says it may use Personal Information to develop new products and features, administer the Services, promote safety and security, support customer analysis and internal operations (such as troubleshooting), and for data analysis, testing, research and statistical purposes. It may also use your transaction and experience data on an aggregated basis to generate business insights, which it may share with third parties such as Partners and Merchants to help improve their products and services.
Details not recorded for this card
Supporting quotations
We may use Personal Information to develop new products and features, to administer our Services, to promote the safety and security of the Services
We may also use your transaction and experience data on an aggregated basis to generate business insights. We may share those insights with third parties such as our Partners and Merchants to help improve their products and services.
Qualifications & exceptions
Business insights are generated from transaction and experience data "on an aggregated basis".
Sharing of insights is described as "may" and gives Partners and Merchants as an example of recipients.
Use & Processing · Company practice
Personal Information may train PayPal AI models and feed automated decision making
PayPal says it may use Personal Information to train the artificial intelligence (AI) models that power its Services. It also says PayPal uses Automated Decision Making to provide its products and Services, conduct risk analysis, prevent fraud and manage risk, including fraud against Partners and Merchants and strategic ventures. The passage points to the AI and Automated Decision Making section for more.
Details not recorded for this card
Supporting quotations
We may use Personal Information to train our artificial intelligence (AI) models that power our Services and help us deliver more secure, efficient, and personalized services.
PayPal also uses Automated Decision Making to provide our products and Services, conduct risk analysis, fraud prevention and risk management to protect our customers and business
Qualifications & exceptions
AI model training is stated as "may use Personal Information".
Automated Decision Making is described for products and Services, risk analysis and fraud prevention.
Not stated here
This bullet does not say which Personal Information is used for AI training or whether you can opt out; see the AI and Automated Decision Making section.
Sharing & Disclosure · Company practice
Personal Information is exchanged with credit reporting agencies, and they may pass it on
Pursuant to applicable law, PayPal says it will use and exchange Personal Information about you with credit reporting agencies (CRAs) to assess creditworthiness and product suitability, check your identity, trace and recover debts, and prevent fraud and criminal activity. It adds that this information may be supplied by CRAs to other organizations to perform similar checks and to trace your whereabouts and recover debts you owe.
Details not recorded for this card
Supporting quotations
Pursuant to applicable law, we will use and exchange Personal Information about you with CRAs to assess creditworthiness and product suitability, check your identity, trace and recover debts, and prevent fraud and criminal activity.
This information may be supplied by CRAs to other organizations to perform similar checks and to trace your whereabouts and recover debts that you owe.
Qualifications & exceptions
Applies "pursuant to applicable law".
CRAs may supply the information to other organizations for similar checks, tracing and debt recovery.
Not stated here
The passage does not say which CRAs are used or which credit products trigger this exchange.
Linking & Identification · Company practice
Guest transactions may be tied to a later account; Fastlane, Venmo and Honey activity may be combined
If you use the Services without a PayPal Account, PayPal says it may associate those transactions with your PayPal account if you later establish an account. If you use Fastlane, Venmo or PayPal Honey, PayPal may associate information about your transactions and experiences using those Services to personalize content and offers and improve your use of the PayPal Services. Venmo and PayPal Honey are listed elsewhere in this Statement as Excluded Services with their own privacy statements, so this passage describes PayPal combining information from them with other PayPal information.
Details not recorded for this card
Supporting quotations
If you use our Services without a PayPal Account, we may associate such transactions with your PayPal account if you later establish an account.
If you use one of the following—Fastlane, Venmo, and PayPal Honey—we may associate information about your transactions and experiences using these Services to personalize content and offers and improve your use of the PayPal Services.
Fastlane means the online tool whereby individuals can store their payment methods and other Personal Information with PayPal
Qualifications & exceptions
Guest-transaction association applies only if you later establish an account.
Cross-service association applies to Fastlane, Venmo and PayPal Honey; purpose given is personalizing content and offers and improving use of the PayPal Services.
Not stated here
The passage does not say whether the cross-service association can be switched off here.
Personal Information is used to market Services, run competitions and communicate with you
PayPal says it may use Personal Information to give you information and news and to market its Services, including where it partners with others to offer similar services or to market about its Partners and Merchants. It uses Personal Information, including when it associates information about you, to better understand and cater to your interests. It may also use it to facilitate your participation in competitions, offerings and events, and to communicate with you, such as answering a question you sent to customer service.
Details not recorded for this card
Supporting quotations
Market our Services. We may use Personal Information to provide you with information, news, and market our Services
We use Personal Information, including when we associate information about you, to better understand and cater to your interests.
We may use Personal Information to facilitate your participation in competitions, offerings, and events.
We may use your Personal Information to communicate with you, such as answering a question you sent to our customer service team.
Qualifications & exceptions
Marketing includes cases where PayPal partners with others to offer similar services.
Personal Information used for interests includes information associated about you.
Not stated here
This passage does not say how to opt out of marketing; see the choices sections.
Use & Processing · Company practice
Personal Information is used for legal compliance, sanctions screening and reporting to authorities
PayPal says it may use Personal Information to comply with applicable laws and rules (including AML, bookkeeping rules from designated banks and card networks, and KYC), enforce its agreements with you and others, and establish, exercise or defend legal claims or collection procedures. It also carries out sanction screening and reports to tax, police, enforcement and supervisory authorities, including where it is not compelled by law but has a good faith belief that sharing is necessary to comply with applicable law.
Details not recorded for this card
Supporting quotations
Comply with laws and risk oversight. We may use Personal Information to comply with applicable laws and rules
enforce our agreements with you and other people who use our Services, and establish, and exercise or defend a legal claim or collection procedure.
We also carry out sanction screening, report to tax authorities, police and other enforcement authorities, supervisory authorities where we are not compelled by applicable laws but where we have a good faith belief that sharing the information is necessary to comply with applicable law.
Qualifications & exceptions
Reporting without legal compulsion requires "a good faith belief that sharing the information is necessary to comply with applicable law".
Rules cited include those "issued by our designated banks and relevant card networks".
Personal Information is used for financial risk management, debt recovery and fraud and scam prevention
PayPal says it will conduct financial risk management, such as credit performance and quality, assess product suitability, check your identity, trace and recover debts, prevent criminal activity, fraud and scams, mitigate insurance risks, and support compliance with capital adequacy requirements under applicable law.
Details not recorded for this card
Supporting quotations
Further, we will conduct financial risk management, such as credit performance and quality, assess product suitability, check your identity, trace and recover debts, prevent criminal activity, fraud and scams, mitigate insurance risks, and support compliance with capital adequacy requirements under applicable law.
Qualifications & exceptions
Stated as "we will conduct" financial risk management.
Capital adequacy support is "under applicable law".
Contact information you provide is used to find connections; you certify you have permission
PayPal says it may use Personal Information to make it easy for you to find and connect your contacts, improve payment accuracy and suggest connections with people you may know. By giving PayPal information about your contacts, you certify that you have permission to provide it to PayPal for the purposes described in this Privacy Statement.
Details not recorded for this card
Supporting quotations
We may use Personal Information in order to make it easy for you to find and connect your contacts, improve payment accuracy and suggest connections with people you may know.
By providing us with information about your contacts you certify that you have permission to provide that information to PayPal for the purposes described in this Privacy Statement.
Qualifications & exceptions
You certify permission by providing information about your contacts.
Not stated here
The passage does not say what happens if a contact later objects.
Linking & Identification · Company practice
Personal Information is used to connect with third-party accounts and financial institutions you link
PayPal says it may use Personal Information to connect with a third-party account, such as a social network account, to facilitate payment transactions, or with a financial institution when you link an account to PayPal or link your PayPal account to another financial institution, directly or through an aggregator.
Details not recorded for this card
Supporting quotations
We may use Personal Information to connect with a third-party account, such as your social network account to facilitate payment transactions or a financial institution when you link an account to PayPal or link your PayPal account to another financial institution, directly or through the use of an aggregator.
Qualifications & exceptions
Applies when you link an account; may be done directly or through an aggregator.
Not stated here
The aggregators are not named.
Use & Processing · Company practice
Precise location personalizes services if you allow it; address-based offers and security use continue regardless
If you agree to let PayPal track your precise geolocation, it can personalize language and content, such as location-based options, functionality, offers, ads and search results. Even if you do not allow precise location tracking, PayPal says it may still use your address to send location-based options recommended by nearby businesses. PayPal also says it will use precise geolocation to enhance the security of the Sites and Services, and that it collects precise geolocation data from Users while they are logged into their financial account. "Users" means other account holders and non-account holders of the PayPal Services.
Details not recorded for this card
Supporting quotations
If you agree to let us track your precise geolocation, we can customize our Services by personalizing language and content
Even if you don't allow us to track your precise location, we may still use your address to send you location-based options recommended by businesses that are near your address.
In addition, we will use precise geolocation to enhance the security of the Sites and Services. We collect precise geolocation data from Users while they are logged into their financial account.
Users means other account holders and non-account holders of the PayPal Services.
Qualifications & exceptions
Personalization from precise location happens "if you agree".
Address-based nearby offers may still be sent if you do not allow precise location tracking.
Security use of precise geolocation is stated as "we will use" and is not described as depending on consent; collection occurs while Users are logged into their financial account.
Not stated here
The passage does not say how to turn off the security use of precise geolocation.
Purchase insights are used to personalize, and recommendations are given to Partners and Merchants
PayPal says it may use Personal Information to give you offers and rewards, show ads or otherwise personalize your experience. For example, it may use insights from purchases and other behaviors on its own and Partner or Merchant websites or apps to develop recommendations about products, brands, sizes, preferences and styles, which it provides to Partners and Merchants so that they can recommend relevant products to you.
Details not recorded for this card
Supporting quotations
We may use Personal Information to provide you offers and rewards, show ads or otherwise personalize your experience
using insights from purchases and other behaviors on our and our Partner or Merchant websites or apps to develop recommendations about products, brands, sizes, preferences and styles that we provide to our Partners and Merchants so that they can recommend relevant products to you.
Partners and Merchants means our partners and the merchants, partners or businesses that our Users transact with
Qualifications & exceptions
Insights come from behavior on PayPal and Partner or Merchant websites or apps.
Recommendations are provided to Partners and Merchants.
Not stated here
The passage does not say whether the recommendations given to Partners and Merchants identify you.
Preferences are remembered, and cookies and trackers may be used on PayPal and third-party sites
PayPal says it may remember preferences for next time, such as your preferred payment methods or whether you choose digital receipts by email or text. When you use the Services, as well as other third-party sites and services, PayPal says it might use tracking technologies like cookies; the Statement refers to Our Use of Cookies and Tracking Technologies for more.
Details not recorded for this card
Supporting quotations
We may remember your preferences for the next time you use the Services, such as which of your payment methods you prefer or whether you choose to receive digital receipts via email or text when you checkout.
When you use Services, as well as other third-party sites and services, we might use tracking technologies like cookies.
Cookies means tracking technologies such as cookies, pixel tags, web beacons, and widgets.
Qualifications & exceptions
Tracking may occur on the Services and on other third-party sites and services.
Not stated here
The cookie details are in the separate cookies section, not in this passage.
Where lawful bases are required, EU and UK GDPR bases are applied equally under other equivalent laws
PayPal notes that some jurisdictions require a lawful basis for processing Personal Information and refers readers to Our Lawful Basis for Processing Personal Information for the basis under the EU and UK General Data Protection Regulation. It says it applies the same lawful bases under other privacy laws that have equivalent requirements.
Details not recorded for this card
Supporting quotations
Please note that certain jurisdictions require providing a lawful basis for processing Personal Information.
We apply the same lawful bases for processing under other privacy laws that have equivalent requirements.
Our Lawful Basis for Processing Personal Information
Qualifications & exceptions
Applies to jurisdictions that require a lawful basis; same bases applied under other laws with "equivalent requirements".
Not stated here
Which other laws count as having equivalent requirements is not stated here.
Sharing & Disclosure · Company practice
Personal Information is disclosed to service providers and third parties; Sensitive Personal Information where allowed
PayPal says it discloses your Personal Information to service providers and third parties, including those participating in the payment network, to help provide Services, protect customers from risk and fraud, market its products and comply with legal obligations. It may use and disclose Sensitive Personal Information if permitted to carry out legitimate business activities and as allowed by law (examples given: with consent, or for certain purposes that do not require offering a right to limit use and disclosure of Sensitive Personal Information).
Details not recorded for this card
Supporting quotations
We disclose your Personal Information with service providers and third parties, including those participating in the payment network, to help us provide Services, protect our customers from risk and fraud, market our products, and comply with legal obligations.
We may use and disclose your Sensitive Personal Information if permitted to carry out legitimate business activities and as allowed by law
Qualifications & exceptions
Sensitive Personal Information use and disclosure is limited to what is "permitted" for legitimate business activities and "allowed by law".
Not stated here
Which purposes do not require offering a right to limit use are not listed in this passage.
Sharing & Disclosure · Company practice
Service providers receive Personal Information to act for PayPal under contracts limiting their use
PayPal says it may disclose Personal Information to service providers that operate at its direction and on its behalf to perform outsourced services, such as AI providers, fraud prevention, bill collection, shipping, payment processing, marketing, research, compliance, audits, corporate governance, communications, technical and design services, IT development, maintenance, hosting and customer service support. It says its contracts dictate that these providers only use your information in connection with the services they perform for PayPal and not for their own benefit. Depending on the country or region where you live, a link to the third-party service providers may be available under applicable data protection laws.
Details not recorded for this card
Supporting quotations
We may disclose Personal Information with the following categories of service providers:
We may disclose Personal Information with our service providers that operate at our direction and on our behalf to perform services we outsource to them, such as AI providers, fraud prevention, bill collection, shipping, processing payments, marketing, research
Our contracts dictate that these service providers only use your information in connection with the services they perform for us and not for their own benefit.
Under applicable data protection laws, depending upon the country/region in which you reside, you may find a link to those
Qualifications & exceptions
Providers act "at our direction and on our behalf".
The contractual use limit is stated by PayPal; the contracts themselves are not supplied.
A provider list link is available "depending upon the country/region in which you reside".
Not stated here
The linked third-party service provider list is not supplied in this document, so which providers receive data is not stated here.
Sharing & Disclosure · Company practice
PayPal corporate group members receive Personal Information for services, risk management and fraud prevention
PayPal says it may disclose Personal Information to members of the PayPal corporate group from time to time, for purposes including (but not limited to) providing the Services you have requested or authorized, managing risk, detecting and preventing potentially illegal and fraudulent acts and other violations of policies and agreements, and managing the availability and connectivity of PayPal products, services and communications.
Details not recorded for this card
Supporting quotations
We may also disclose Personal Information with the following categories of third parties:
Members of the PayPal corporate group from time to time
for purposes including (but not limited to) providing the Services you have requested or authorized, managing risk, helping us to detect and prevent potentially illegal and fraudulent acts and other violations of our policies and agreements
Qualifications & exceptions
The listed purposes are "including (but not limited to)", so other purposes are not excluded.
Not stated here
The group companies are in the contact information section, not this passage.
Sharing & Disclosure · Company practice
Personal Information may go to Excluded Services such as Venmo, and to PayPal Honey for the Rewards program
PayPal says it may disclose Personal Information to Excluded Services, including Venmo, to provide you with the Services, personalize your use of the Services and manage its business, or to PayPal Honey to manage its Rewards program. Excluded Services are separate brands, affiliates or subsidiaries that process Personal Information under their own terms and separate privacy statements.
Details not recorded for this card
Supporting quotations
We may disclose Personal Information to the Excluded Services
to provide you with the Services, personalize your use of the Services, and to manage our business, or with PayPal Honey to manage our Rewards program.
Excluded Services means companies or separate brands, affiliates, or subsidiaries of PayPal, who process Personal Information in accordance with their own terms of service and separate privacy statements.
Qualifications & exceptions
Venmo purposes: provide the Services, personalize use of the Services, manage PayPal's business; PayPal Honey purpose: manage the Rewards program.
Not stated here
How Venmo or PayPal Honey then handle the information is governed by their own privacy statements, which are not supplied here.
Personal Information may be disclosed to authorities and, in some cases, without telling you
PayPal says it may disclose Personal Information to authorities (courts, governments, law enforcement and regulators) if compelled by a subpoena, court order or similar legal procedure, when necessary to comply with law, or where disclosure is reasonably necessary to prevent physical harm or financial loss, report suspected illegal activity, investigate violations of the relevant agreement, or as otherwise required by law. It may also be required to give other third parties information about your use of the Services, for example to comply with card association rules, to investigate or enforce violations of its user agreement, or to prevent physical harm or illegal activity. In some cases PayPal may not be permitted to tell you about such disclosures.
Details not recorded for this card
Supporting quotations
We may disclose Personal Information with authorities if compelled by a subpoena, court order, or similar legal procedure, when necessary to comply with law, or where the disclosure of Personal Information is reasonably necessary to prevent physical harm or financial loss
We may also be required to provide other third parties information about your use of our Services, for example, to comply with card association rules
In some cases, PayPal may not be permitted to provide you with information about such disclosures.
Qualifications & exceptions
Disclosure to authorities is tied to legal compulsion, legal necessity or reasonable necessity for the listed purposes.
Disclosures to other third parties can be required for card association rules or enforcement of the user agreement.
Not stated here
The passage does not say how many such requests are received or whether notices are ever given.
Sharing & Disclosure · Company practice
Personal Information is shared with financial institutions that jointly offer products such as PayPal Credit
PayPal says it may disclose Personal Information to financial institutions to jointly offer a product, with PayPal Credit, PayPal Savings, PayPal Cashback Mastercard and PayPal Extra Mastercard given as examples.
Details not recorded for this card
Supporting quotations
We may disclose Personal Information with financial institutions to jointly offer a product, such as PayPal Credit, PayPal Savings, PayPal Cashback Mastercard and PayPal Extra Mastercard.
Qualifications & exceptions
Applies to financial institutions jointly offering a product with PayPal.
Sharing & Disclosure · Company practice
Payment networks, processors and the merchant's payment provider receive information to process payments
PayPal says it may disclose Personal Information to payment networks and processors to facilitate payment processing or to add cards to your electronic wallet. For payment transactions, your Personal Information will be shared with the payment services provider for the participating Partner or Merchant so the payment can be processed. That provider may be PayPal or a third-party payment provider.
Details not recorded for this card
Supporting quotations
We may disclose Personal Information with payment networks and processors to facilitate payment processing or to add cards to your electronic wallet.
your Personal Information will be shared with the provider of the payment services for the participating Partner and Merchant to enable the processing of the payment transaction. The payment provider for the Partner and Merchant may be PayPal or a third party payment provider.
Partners and Merchants means our partners and the merchants, partners or businesses that our Users transact with for the purpose of obtaining goods or services.
Qualifications & exceptions
The provider receiving data for a transaction is the one used by the participating Partner or Merchant, which may be PayPal or a third party.
Not stated here
The third-party payment providers that may be involved are not named.
Fraud prevention and identity verification agencies and other companies may receive information
PayPal says it may disclose Personal Information to fraud prevention and identity verification agencies and other companies across industries to assist in detecting activities suggestive of fraud.
Details not recorded for this card
Supporting quotations
We may disclose Personal Information with fraud prevention and identity verification agencies and other companies across industries to assist in detecting activities suggestive of fraud.
Qualifications & exceptions
Purpose given is detecting activities suggestive of fraud.
Not stated here
The "other companies across industries" are not named.
Sharing & Disclosure · Company practice
Information may go to debt collection agencies, which may report unpaid debts to credit agencies
PayPal says it may disclose Personal Information to credit reporting and debt collection agencies to collect unpaid overdue debts through a third party such as a debt collection agency. These parties' privacy notices apply to the information you share directly with them, and they may report your unpaid debts to CRAs, which may affect your creditworthiness or ability to secure future credit.
Details not recorded for this card
Supporting quotations
We may disclose Personal Information with such agencies to collect unpaid overdue debts through a third party such as a debt collection agency.
they may report your unpaid debts to CRAs which may affect your creditworthiness or ability to secure future credit.
Qualifications & exceptions
Applies to collecting unpaid overdue debts.
Reporting to CRAs is by the receiving parties and "may" affect creditworthiness or future credit.
Sharing & Disclosure · Company practice
Other PayPal account holders may see your name, photo, email, city and phone number to complete a transaction
PayPal says it may disclose Personal Information to other PayPal account holders to complete a payment transaction, where necessary, including when you interact with ads or offers relating to one of its Partners and Merchants. The information that may be shared includes your username, profile photo, first and last name, email, city and phone number, in accordance with your account settings. "Users" means other account holders and non-account holders of the PayPal Services.
Details not recorded for this card
Supporting quotations
We may disclose Personal Information with other PayPal account holders to complete a payment transaction, where necessary. This also applies when you interact with ads or offers we provide relating to one of our Partners and Merchants.
The Personal Information that may be shared with other PayPal account holders includes your username, profile photo, first and last name, email, city, and phone number in accordance with your account settings.
Users means other account holders and non-account holders of the PayPal Services.
Qualifications & exceptions
Applies "where necessary" to complete a payment transaction.
What is shared is "in accordance with your account settings".
Other Users can see profile details such as phone number, city and state depending on your account settings
In accordance with your account settings or PayPal.Me preferences, your Personal Information can be seen by other account holders (such as users of Venmo or third-party payment networks and processors) to help facilitate a transaction. For example, with the send money feature a User may search for your account to start a payment. Based on your settings, what other Users see may include your username, profile photo, first and last name, email, phone number, city and state, the month and year you created your PayPal account, and anything you add in the details or "about you" section.
Details not recorded for this card
Supporting quotations
your Personal Information can be seen by other account holders (such as users of Venmo or third party payment networks and processors) to help facilitate a transaction.
Based on your account settings, the information shown to other Users may include your username, profile photo, first and last name, email, phone number, city and state, month and year of PayPal account creation, and any additional information you include in the details or "about you" section of your account.
Qualifications & exceptions
Visibility depends on your account settings or PayPal.Me preferences.
Viewers include account holders such as users of Venmo or third-party payment networks and processors.
Not stated here
The linked account settings page is not supplied here, so the available settings are not described.
Sharing & Disclosure · Company practice
Business profiles display a payment link and public details such as name, logo, city and sales history
If you have a business profile, PayPal says it will display a payment link and disclose certain information about you to other Users: your name or business name, profile picture or logo, the city associated with your PayPal account, total time selling with PayPal, total number of followers, and the number of unique Users who have paid you in the past year. You can choose to display other information, such as your street address, phone number, email and website, in accordance with your business profile settings.
Details not recorded for this card
Supporting quotations
If you have a business profile, we will display a payment link and disclose certain information about you to other Users
total time selling with us, total number of followers, and total number of unique Users that have paid you in the past year.
you can choose to display other information to other Users, such as your street address, phone number, email and website, in accordance with your business profile settings.
Users means other account holders and non-account holders of the PayPal Services.
Qualifications & exceptions
Applies only if you have a business profile.
Extra details (street address, phone, email, website) are shown only if you choose, per your business profile settings.
Personal Information may go to your agent, power of attorney holder or guardian
PayPal says it may disclose Personal Information to your agent or legal representative, such as the holder of a power of attorney that you grant or a guardian appointed by you.
Details not recorded for this card
Supporting quotations
We may disclose Personal Information to your agent or legal representative, such as the holder of a power of attorney that you grant, or a guardian appointed by you.
Qualifications & exceptions
Examples given are a power of attorney you grant or a guardian appointed by you.
Not stated here
The passage does not say how PayPal verifies an agent or representative.
Sharing & Disclosure · Company practice
Third parties that help link your PayPal account to another account may receive Personal Information
If you choose to link your PayPal account with a third-party account, PayPal says it may disclose Personal Information to third parties who facilitate that linking.
Details not recorded for this card
Supporting quotations
If you choose to link your PayPal account with a third-party account, we may disclose Personal Information with third-parties who facilitate that linking.
Qualifications & exceptions
Applies only if you choose to link your PayPal account with a third-party account.
Sharing & Disclosure · Company practice
Partners, Merchants and their providers receive information to complete transactions, then apply their own policies
PayPal says it may disclose Personal Information such as your user name, address, phone number and email to Partners and Merchants, their service providers and others involved in a transaction, to enable the purchase and delivery of goods. Examples: initiating online purchases, saving payment information with Fastlane, paying other Users, paying recipients using Visa+, paying using PayPal World, returning goods, or transactions through the payment network. If you choose to interact with participating Partners and Merchants, PayPal will disclose your profile information to them and their service providers and facilitate the transaction or shopping experience; this also applies when you interact with ads or offers PayPal provides for a Partner or Merchant. Once shared, the Partner or Merchant's handling is subject to their own privacy policies and procedures.
Details not recorded for this card
Supporting quotations
We may disclose Personal Information with these parties involved in a transaction such as your user name, address, phone number, email address to enable the purchase and delivery of the goods in the transaction.
save your payment information with Fastlane, pay other Users using the Services, pay recipients using Visa+, pay using PayPal World, return goods
If you choose to interact with participating Partners and Merchants, we will disclose your profile information with the participating Partners and Merchants and their service providers
the handling of your Personal Information by the Partners and Merchants (or their service provider) is subject to the Partners' and Merchants' own privacy policies and procedures.
Partners and Merchants means our partners and the merchants, partners or businesses that our Users transact with for the purpose of obtaining goods or services.
Fastlane means the online tool whereby individuals can store their payment methods and other Personal Information with PayPal
Qualifications & exceptions
Profile information is disclosed if you choose to interact with participating Partners and Merchants.
After sharing, handling is governed by the Partners' and Merchants' own privacy policies.
Not stated here
The Partners' and Merchants' own privacy policies are not supplied here.
Merchants can check whether you are a PayPal user and show a recommended payment method
PayPal says it may disclose Personal Information to Partners and Merchants to enable their use of the Services to facilitate your transactions. For example, when you visit a participating Partner or Merchant site or app, they can check whether you are a user of PayPal services and present a recommended payment method to simplify checkout.
Details not recorded for this card
Supporting quotations
We may also disclose Personal Information to Partners and Merchants to enable their use of our Services to facilitate your transactions.
the Partners and Merchants can check whether you are a user of PayPal services and present a recommended payment method to you to simplify your checkout process.
Qualifications & exceptions
Applies when you visit a participating Partner or Merchant site or app.
Not stated here
The passage does not say what information the check reveals to the Partner or Merchant if you are not a PayPal user.
Sharing & Disclosure · Company practice
US personalized shopping disclosures to Partners and Merchants cover information collected after November 27, 2024
For PayPal customers, PayPal says it may disclose Personal Information to Partners and Merchants that you and PayPal interact with, to help personalize services and offers; examples are products, sizes, preferences and styles it thinks you will like. Unless required by law to obtain your consent, PayPal says it discloses Personal Information collected from you after November 27, 2024 (or from earlier if you consent) for personalized shopping experiences in the United States.
Details not recorded for this card
Supporting quotations
For our PayPal customers, we may also disclose your Personal Information to Partners and Merchants that you and we interact with to help ourselves and Partners and Merchants personalize services and offers
Personal Information we disclose includes, for example, products, sizes, preferences, and styles we think you'll like.
Unless we are required by law to obtain your consent, we disclose Personal Information collected from you after November 27, 2024 (or from earlier if you consent) for personalized shopping experiences in the United States.
Qualifications & exceptions
Applies to PayPal customers.
For the United States: information collected after November 27, 2024, or earlier if you consent; where law requires consent, consent is needed instead.
Not stated here
Whether information collected before November 27, 2024 is disclosed without consent in other countries is not stated here.
Sharing & Disclosure · User right or choice
You can opt out of personalized shopping disclosures in Data and Privacy settings; transaction disclosures continue
To opt out of disclosures of Personal Information to Partners and Merchants for personalized shopping experiences, you log in to your PayPal account and edit your preferences in the Data and Privacy setting. If you opt out, PayPal says it will continue to disclose Personal Information as necessary to complete transactions you initiate but will not disclose Personal Information to Partners and Merchants for personalized shopping experiences.
Details not recorded for this card
Supporting quotations
To opt-out of disclosures of Personal Information to Partners and Merchants for personalized shopping experiences, log into your PayPal account and edit your preferences in the Data and Privacy setting.
If you opt-out, we will continue to disclose your Personal Information as necessary to complete transactions you initiate but will not disclose Personal Information to Partners and Merchant for personalized shopping experiences.
Qualifications & exceptions
Opt-out is made by logging in and editing preferences in the Data and Privacy setting.
Disclosures needed to complete transactions you initiate continue after opt-out.
Sharing & Disclosure · Company practice
Other third parties, including advertising platforms and Google services, may receive information
PayPal says it may disclose Personal Information to other third parties, for example advertising platforms (at your direction) and security service providers that help prevent unauthorized access. This also applies to parties it cooperates with for marketing, to show you ads and offers tailored to your interests. Those parties' privacy notices apply to information you share directly with them. PayPal gives Google reCAPTCHA (to prevent misuse when you access the mobile application) and Google Address Autofill (to ensure address accuracy) as examples, and says Google's policies apply to information shared with Google. For marketing, it may use third parties to identify and display ads tailored to your interests and to track interactions with these ads, which are governed by their privacy policy.
Details not recorded for this card
Supporting quotations
We may disclose Personal Information with other third parties. For example, we disclose Personal Information to advertising platforms, at your direction.
We also disclose Personal Information to security service providers to help prevent unauthorized access to our Services.
This further applies to parties we cooperate with for marketing purposes, in particular to show you ads and offers tailored to your interests.
we use Google's reCAPTCHA to prevent misuse of our Services, when you access our mobile application. We may also use Google Address Autofill to ensure accuracy of your address.
For marketing purposes, we may use third parties to identify and display ads on our Services tailored to your interests and track interactions with these ads.
Qualifications & exceptions
Disclosure to advertising platforms is "at your direction".
Third parties' own privacy notices apply to information you share directly with them.
Not stated here
The linked Google and advertiser policies are not supplied here.
Sharing & Disclosure · Company practice
Personal Information may go to a buyer in a merger, sale or acquisition
PayPal says it may disclose Personal Information to a buyer in connection with a business transfer, for example a merger, purchase or sale of all or part of its business or assets, including receivables and debts, under appropriate data protection terms, to an interested or actual buyer. If PayPal or a significant portion of its assets is acquired by a third party, Personal Information may also be disclosed to that third party.
Details not recorded for this card
Supporting quotations
We may disclose Personal Information with a buyer in connection with a business transfer.
we may disclose, under appropriate data protection terms, your Personal Information to an interested or actual buyer of those business or assets.
If PayPal or a significant portion of PayPal's assets are acquired by a third party, Personal Information may also be disclosed to that third party.
Qualifications & exceptions
Disclosure to a buyer is "under appropriate data protection terms".
Applies to mergers, purchases and sales of all or part of the business or assets.
Not stated here
The passage does not say whether you would be notified of a transfer.
Sharing & Disclosure · Company practice
Sensitive Personal Information may be disclosed for legitimate business activities, with consent or as allowed by law
PayPal says it may disclose Sensitive Personal Information as appropriate to carry out legitimate business activities, as you have consented to, or as allowed by law, and points to the "Sale" and "Sharing" section for US individuals. That section says PayPal does not "sell" Personal Information or "share" it for cross-context behavioral or targeted advertising that is subject to non-exempt practices under comprehensive US privacy laws (including for children under 16) and has not done so in the prior 12 months.
Details not recorded for this card
Supporting quotations
We may disclose your Sensitive Personal Information as appropriate to carry out legitimate business activities, as you have consented to or as allowed by law.
PayPal does not “sell” Personal Information or “share” Personal Information for cross-context behavioral or targeted advertising that is subject to non-exempt practices under comprehensive privacy laws in the United States, including for children under the age of 16, and has not done so in the prior 12 months.
Qualifications & exceptions
Disclosure must be for legitimate business activities, consented to, or allowed by law.
The no-sale/no-share statement is made about practices subject to non-exempt rules under comprehensive US privacy laws.
Not stated here
The US no-sale statement is quoted from a different section; it is covered in detail where that section appears.
Personal Information is kept as long as needed or permitted for the purpose of collection
PayPal says it retains Personal Information for as long as needed or permitted in the context of the purpose for which it was collected and consistent with applicable law, using the retention criteria set out below.
Details not recorded for this card
Supporting quotations
We retain Personal Information for as long as needed or is permitted in context of the purpose for which it was collected and consistent with applicable law.
The criteria used to determine our retention period is as follows:
Qualifications & exceptions
Retention is tied to the purpose of collection and to applicable law.
Retention & Deletion · Company practice
Relationship information is kept for the relationship plus 10 years, or longer where law or claims require
Personal Information used for the ongoing relationship between you and PayPal is stored for the duration of the relationship plus 10 years (or such period as mandated by applicable local law) after the relationship ends. PayPal may keep it longer to the extent permitted by applicable law, such as when consistent with a legal obligation (examples: bankruptcy laws and AML obligations) or in connection with litigation, investigations, audit and compliance practices, or to protect against legal claims. Where retention is advisable for those reasons, PayPal says it retains Personal Information for the least amount of time necessary.
Details not recorded for this card
Supporting quotations
Personal Information used for the ongoing relationship between you and PayPal is stored for the duration of the relationship plus a period of 10 years or such period as mandated by any applicable local law once our relationship comes to an end
unless we need to keep it longer to the extent permitted by applicable law
When consistent with a legal obligation to which we are subject, or when permitted under applicable law, such as under applicable bankruptcy laws and AML obligations.
In connection with litigation, investigations, audit and compliance practices, or to protect against legal claims.
We retain Personal Information for the least amount of time necessary where retention is advisable
Qualifications & exceptions
The 10-year period or local-law period applies after the relationship ends.
Longer retention is "to the extent permitted by applicable law" for the listed examples.
Not stated here
The passage does not say what counts as the relationship ending, for example account closure.
Retention & Deletion · Company commitment
Biometric data is kept no more than 3 years after account closure unless law requires otherwise
PayPal says it retains biometric data for as long as needed or permitted given the purpose for which it was collected and no more than 3 years after your account closes, unless otherwise required by applicable law.
Details not recorded for this card
Supporting quotations
We retain biometric data for as long as needed or permitted given the purpose for which it was collected and no more than 3 years after your account closes, unless otherwise required by applicable law.
Qualifications & exceptions
The 3-year limit runs from account closure and does not apply where applicable law requires otherwise.
Inference & Profiling · Company practice
Automated decisions on risk, fraud and creditworthiness may restrict or end services
PayPal says it may process Personal Information using AI and/or Automated Decision Making. It uses Automated Decision Making to make assessments or decisions, including about risk, fraud and creditworthiness, where permitted and in accordance with applicable law. This may use profiling techniques to evaluate personal aspects about you, including to analyze or predict your economic situation, reliability and/or behavior, for example to assess whether you show traits indicating possible credit or financial risk, money laundering or fraud, inconsistency with your submissions, or hidden identity. If PayPal decides you pose a credit, fraud, money laundering or other risk, it may refuse new services, stop services you currently use, or place limits or restrictions on them. Users may exercise rights related to Automated Decision Making as described in Your Data Protection Rights.
Details not recorded for this card
Supporting quotations
We may process your Personal Information using AI and/or Automated Decision Making technology under the circumstances described below:
PayPal uses Automated Decision Making technology to make assessments or decisions, including related to risk, fraud and creditworthiness, where permitted and in accordance with applicable law.
Our Automated Decision Making technology may use profiling techniques to evaluate personal aspects about you, including to analyze or predict your economic situation, reliability and/or behavior.
If we determine that you pose a credit, fraud, money laundering or other risk, we may refuse to provide new services to you, stop providing services you currently use, or place limits or restrictions on the services you use.
Users may exercise rights related to Automated Decision Making, as described in
Profiling means analysis of an individual’s personality, behavior, interest and habits to make predictions or decisions about them
Users means other account holders and non-account holders of the PayPal Services.
Qualifications & exceptions
Used "where permitted and in accordance with applicable law".
Consequences are stated as "may": refuse new services, stop current services, or limit or restrict them.
Not stated here
This passage does not say whether a human reviews these decisions; see Your Data Protection Rights for the rights described.
Agentic AI tools can act on your behalf and will access your queries, preferences, purchases and payment information
PayPal says it may, directly or through trusted partners, give you access to Agentic AI tools designed to operate with a degree of autonomy: performing tasks, making recommendations and even initiating actions on your behalf while learning from your interactions, using generative AI. These tools require access to certain information; when you use them, they will have access to your Personal Information, including queries, preferences, interests, purchase history and payment information.
Details not recorded for this card
Supporting quotations
we may, directly or through our trusted partners, provide you with access to Agentic AI tools
These AI tools are designed to operate with a degree of autonomy, enabling them to perform tasks, make recommendations, and even initiate actions on your behalf, all while learning from your interactions.
When you use these tools, they will have access to your Personal Information, including queries, preferences, interests, purchase history, and payment information.
Qualifications & exceptions
Applies when you use the Agentic AI Tools, which may be provided directly or through trusted partners.
Access listed includes queries, preferences, interests, purchase history and payment information ("including", so not limited to these).
Not stated here
The passage does not say whether information from these tools is used to train AI models or how long it is kept.
Legal Rights & Agreement Rules · Restriction or exception
Agentic AI tools are not designed for legal, medical, financial or employment decisions and must not be used for them
PayPal encourages you to carefully consider the recommendations and actions of its Agentic AI Tools. It says they are not designed to make decisions with legal or similarly significant effects (such as legal, medical, financial or employment implications) and that you must not use, or attempt to use, them for such a purpose. They are intended only for general assistance and insights, and you should not rely on them to replace your own judgement and expertise.
Details not recorded for this card
Supporting quotations
Our Agentic AI Tools are not designed to make decisions that have legal or similarly significant effects, such as decisions with legal, medical, financial, or employment implications, and you must not use (or attempt to use) them for any such purpose.
These tools are intended only to provide general assistance and insights, and you should not rely on them to replace your own judgement and expertise.
Qualifications & exceptions
The prohibition is on your use for decisions with legal or similarly significant effects.
Not stated here
The passage does not say what consequences follow if you use the tools for such a purpose.
Data Access & Collection · Company practice
PayPal and its partners use Cookies for access, personalization, interest-based ads, analytics and fraud prevention
When you interact with the Services, open an email PayPal sends, or visit a third-party website for which PayPal provides Services, PayPal says it and its partners use Cookies to grant access to the Sites, Services, applications and tools, recognize you as a user, customize online experiences and content (including serving interest-based advertising), perform analytics, mitigate risk, prevent potential fraud, and promote trust and safety. It uses Cookies to collect device information and internet activity information and to generate inferences as described earlier.
Details not recorded for this card
Supporting quotations
When you interact with our Services, open email we send you, or visit a third-party website for which we provide Services, we and our partners use Cookies
customize your online experiences and online content, including to serve you interest-based advertising, perform analytics, mitigate risk and prevent potential fraud
We use Cookies to collect your device information, internet activity information, and generate inferences as described above.
Cookies means tracking technologies such as cookies, pixel tags, web beacons, and widgets.
Device Information means data that can be automatically collected from any device used to access the Services.
Qualifications & exceptions
Applies when you use the Services, open PayPal emails, or visit a third-party site for which PayPal provides Services.
Security measures and unique identifiers restrict access to Cookie data where appropriate
PayPal says that where appropriate it sets security measures to prevent unauthorized access to its Cookies and similar technologies, and that a unique identifier ensures only PayPal and/or its authorized service providers have access to Cookie data.
Details not recorded for this card
Supporting quotations
Where appropriate, security measures are set in place to prevent unauthorized access to our Cookies and similar technologies.
A unique identifier ensures that only we and/or our authorized service providers have access to Cookie data.
Qualifications & exceptions
Measures apply "where appropriate".
Access is stated to be limited to PayPal and/or its authorized service providers.
Data Access & Collection · Company practice
Service providers may place their own Cookies and collect device identifiers to serve you ads
PayPal says it may use some authorized service providers to help serve you relevant ads on its Services and other places on the internet. These providers may also place Cookies on your device via the Services (third-party Cookies) and may collect information that helps them identify your device, such as IP address or other unique device identifiers.
Details not recorded for this card
Supporting quotations
We may use some authorized service providers to help us to serve you relevant ads on our Services and other places on the internet.
These service providers may also place Cookies on your device via our Services (third-party Cookies).
They may also collect information that helps them identify your device, such as IP-address or other unique device identifiers.
Qualifications & exceptions
Applies to "some authorized service providers" that help serve ads.
Not stated here
The service providers placing third-party Cookies are not named here.
Account & Service Control · Restriction or exception
Disabling Cookies may limit or prevent use of the Sites and Services
PayPal says certain aspects and features of its Services and Sites are only available through Cookies, so if you disable or decline Cookies in your device or browser settings, your use of the Sites and Services may be limited or not possible.
Details not recorded for this card
Supporting quotations
Certain aspects and features of our Services and Sites are only available through the use of Cookies, so if you choose to disable or decline Cookies through your device or browser settings, your use of the Sites and Services may be limited or not possible.
Qualifications & exceptions
Applies if you disable or decline Cookies through device or browser settings.
Not stated here
The passage does not say which features need Cookies.
Data Access & Collection · Company practice
PayPal does not respond to browser Do Not Track settings
PayPal explains that some browsers have an optional Do Not Track setting that lets you opt out of being tracked by advertisers and some third parties. Because many of its services will not function without tracking data, PayPal says it does not respond to DNT settings.
Details not recorded for this card
Supporting quotations
Because many of our services won’t function without tracking data, we do not respond to DNT settings.
Do Not Track
Data Access & Collection · Procedure
A separate cookie statement and an advertising opt-out page are pointed to for more detail
PayPal points to its Statement on Cookies and Tracking Technologies for more on how it uses cookies and to an About Ads page to learn how to opt out of this kind of tracking technology.
Details not recorded for this card
Supporting quotations
If you want to know more about how we use cookies, please review our
To learn how to opt-out of this kind of tracking technology, visit
Not stated here
The text of the linked cookie statement and the About Ads opt-out page is not supplied here, so this card cannot say what they cover or how opting out works.
Legal Rights & Agreement Rules · Context
Your privacy rights depend on where you live and applicable law
PayPal says that under applicable data protection laws, depending on the country where you reside and subject to applicable exceptions and definitional differences among laws, you may have certain rights about how your Personal Information is collected, stored, used and shared.
Details not recorded for this card
Supporting quotations
Under applicable data protection laws, depending upon the country in which you reside, and subject to applicable exceptions and definitional differences among various laws, you may have certain rights about how your Personal Information is collected, stored, used and shared.
Qualifications & exceptions
Depends on country of residence, exceptions and definitional differences among laws.
Not stated here
This passage does not list which rights apply in which country.
Account & Service Control · Company commitment
Exercising privacy rights will not lead to denied service or different prices, though personalization may differ
PayPal says it will not discriminate or deny you services, charge different prices, or provide a different level of service solely because you exercise privacy rights. It adds that certain personalized services for PayPal customers may not provide the same level of personalization if you limit the amount of Personal Information you share.
Details not recorded for this card
Supporting quotations
we will not discriminate or deny you services, charge you different prices, or provide you with a different level of service solely for exercising your privacy rights.
certain personalized services for PayPal customers may not provide the same level of personalization if you decide to limit the amount of Personal Information you share with us.
Qualifications & exceptions
The commitment applies to differences "solely for exercising your privacy rights".
Personalization may be reduced if you limit the Personal Information you share.
Account & Service Control · Procedure
Rights requests follow the instructions below, including for people without a PayPal account
PayPal says it provides several ways to exercise your privacy rights. If you, or an authorized agent where permitted, want to exercise rights relating to Personal Information in your account profile(s), follow the instructions below. Even if you have no PayPal account (for example, where you Pay without a PayPal account), you may find instructions to submit a privacy-rights request.
Details not recorded for this card
Supporting quotations
We recognize the importance of your ability to control the use of your Personal Information and provide several ways for you to exercise your privacy rights.
If you, or an authorized agent, where permitted, want to exercise any of your rights relating to your Personal Information in your account profile(s), please follow the instructions on how to exercise your data protection rights below.
Even if you do not have a PayPal account (for example, where you use Pay without a PayPal account), you may find
Pay without a PayPal Account means our Services may be accessed by individuals without using a PayPal account, a Fastlane profile, or the Unbranded Payment Services.
Qualifications & exceptions
Authorized agents may act "where permitted".
Non-account holders, including those who Pay without a PayPal account, are told they may find request instructions.
Not stated here
The linked privacy-rights request instructions for people without an account are not supplied here, so what they require is unknown.
PayPal may verify your identity first, and may decline a request if it cannot
PayPal says it may first need to verify who you are. If permitted or required under privacy laws, it may ask for information necessary to reasonably verify your identity, which it compares against internal business records. If it cannot verify your identity, it may not be able to fulfill your request, unless the right does not require verification. If a request is denied in whole or in part, you may have the right to be told the reasons and about appealing or lodging a complaint with a supervisory authority and seeking judicial remedy; PayPal says it will give information about the appeals process in those circumstances.
Details not recorded for this card
Supporting quotations
We may first need to verify who you are before we can respond to your request.
We will compare the information you submit against our internal business records to verify your identity. If we can’t verify your identity, we may not be able to fulfill your request, unless the right does not require verification.
If we deny your request in whole or in part, you may have the right to be informed of the reasons we have for not taking action and regarding the possibility to appeal our decision or lodging a complaint with a supervisory authority and seeking judicial remedy.
Qualifications & exceptions
Verification information may be requested "if permitted or required under privacy laws".
Failure to verify may prevent fulfillment "unless the right does not require verification".
Appeal and complaint rights are described as something you "may have".
Not stated here
The appeals process itself is not described in this passage.
Account & Service Control · Procedure
PayPal may ask for proof that an agent has authority to submit requests for you
If a request comes from an authorized agent, PayPal says it may ask for evidence that you gave the agent a power of attorney or that the agent otherwise has valid written authority to submit requests on your behalf, including a guardianship, conservatorship or other protective arrangement.
Details not recorded for this card
Supporting quotations
If we receive your request from an authorized agent, we may ask for evidence that you have provided such agent with a power of attorney or that the agent otherwise has valid written authority to submit requests to exercise rights on your behalf
Qualifications & exceptions
Evidence is requested "may", not in every case.
Account & Service Control · User right or choice
You can request the Personal Information PayPal has collected by portal, or by phone or contact in the United States
To request the Personal Information PayPal has collected about you, you can log in to your PayPal account(s) or profile management portal and submit a request. If you reside in the United States, you can call or contact PayPal and ask it to provide the data it has collected. For other countries the Statement refers you to Our Contact Information.
Details not recorded for this card
Supporting quotations
Your right to know and request a copy of the Personal Information.
Log in to your PayPal account(s) or profile management portal, and submit a request.
If you reside in the United States, Call or contact us and request that we provide you with the data we’ve collected.
Qualifications & exceptions
The call or contact route is stated for United States residents; other countries are referred to Our Contact Information.
Not stated here
The phone numbers and contact details are in the contact information section, not this passage.
Account & Service Control · User right or choice
United States residents can request a list of the specific third parties that received their information
To request a list of the specific third parties to which PayPal has disclosed your Personal Information, if you reside in the United States you can call or contact PayPal and ask for the data it has disclosed. For other countries you may submit a request through the Help Center.
Details not recorded for this card
Supporting quotations
Your right to request a list of specific third parties.
If you reside in the United States, Call or contact us and request that we provide you with the data we’ve disclosed. For other countries, you may also submit a request through the
Qualifications & exceptions
Call or contact route is stated for United States residents; other countries use a Help Center request.
Not stated here
The linked Help Center page is not supplied here.
Account & Service Control · User right or choice
You can correct certain Personal Information through your account or portal, or by contacting PayPal (US)
To correct certain Personal Information, you can log in to your PayPal account(s) or profile management portal and submit a request. If you reside in the United States, you can call or contact PayPal; the source wording for this route says to request that PayPal "provide you with the data we’ve collected", which is the same wording as the access route and does not itself mention making a correction. For other countries the Statement refers you to Our Contact Information.
Details not recorded for this card
Supporting quotations
Your right to correct your Personal Information. If you want to correct certain of your Personal Information, you can:
Log in to your PayPal account(s) or profile management portal, and submit a request.
If you reside in the United States, Call or contact us and request that we provide you with the data we’ve collected. For other countries, please refer to Our Contact Information.
Qualifications & exceptions
Call or contact route is stated for United States residents; other countries are referred to Our Contact Information.
Not stated here
The US contact item repeats the access-request wording; the source does not say how a correction is made through that route.
Account & Service Control · User right or choice
You can delete information you added, contact PayPal in the United States, or close your account
To delete certain Personal Information, you can log in to your PayPal account(s) or profile management portal and delete information you previously added (for example, non-primary addresses in your settings). If you reside in the United States, you can call or contact PayPal; as with the correction route, the source wording for this item says to request that PayPal "provide you with the data we’ve collected" and does not itself mention deletion. You can also close your PayPal account(s) or profile. For other countries the Statement refers you to Our Contact Information.
Details not recorded for this card
Supporting quotations
Your right to delete your Personal Information. If you want to delete certain of your Personal Information, you can:
Log in to your PayPal account(s) or profile management portal, and delete any information that you've previously added. For example, you may delete your non-primary addresses in your settings.
If you reside in the United States, Call or contact us and request that we provide you with the data we’ve collected. For other countries, please refer to Our Contact Information.
Close your PayPal account(s) or profile.
Qualifications & exceptions
Portal deletion covers information you "previously added"; the example given is non-primary addresses.
Call or contact route is stated for United States residents.
Not stated here
The US contact item repeats the access-request wording; the source does not say how deletion is requested through that route.
Retention & Deletion · Restriction or exception
Closing your account or deleting data does not remove information PayPal still needs to keep
If you close your account or profile, delete, or request deletion of Personal Information, PayPal says it still needs to keep some Personal Information, as explained in the retention section, so it can, where permitted by applicable law: complete a transaction, provide requested goods or services or comply with its promises in the user agreement or other contract; detect and prevent malicious, fraudulent or illegal activity; protect your or another person's legal rights, including free speech; manage internal business processes reasonably related to your expectations when using the Services; comply with laws and legal or governmental processes; and for other exempt purposes under applicable law.
Details not recorded for this card
Supporting quotations
If you close your PayPal account(s) or profile, delete, or request that we delete Personal Information, we still need to keep some Personal Information
Complete a transaction, provide goods or services you requested, or comply with our promises to you in the user agreement or other contract you have with us;
Detect and prevent malicious, fraudulent, or illegal activity;
Protect your (or another person’s) legal rights, including the right to free speech;
Manage our internal business processes that are reasonably related to your expectations when using our Services;
Comply with laws and other legal or governmental processes; and
Other exempt purposes under applicable law.
Qualifications & exceptions
Applies "where permitted by applicable law".
The list ends with "Other exempt purposes under applicable law", so it is not limited to the named examples.
Not stated here
The passage does not say which information is kept for each purpose.
Account & Service Control · User right or choice
Where law allows, you can object to processing based on PayPal's or a third party's legitimate interests
Where applicable by law, if you want to object to PayPal's use of your Personal Information to pursue its legitimate interests or those of a third party, you can contact PayPal using Our Contact Information. The Statement refers to Our Lawful Basis for Processing Personal Information for more.
Details not recorded for this card
Supporting quotations
Where applicable by law, if you want to object to our use of your Personal Information to pursue our legitimate interests or those of a third party, you can refer to Our Contact Information of this Privacy Statement to contact us.
Qualifications & exceptions
Available "where applicable by law".
Not stated here
The passage does not say how PayPal handles an objection.
Account & Service Control · User right or choice
You can withdraw consent by contacting PayPal; earlier processing and non-consent grounds are unaffected
If you want to withdraw consent to PayPal's use of your Personal Information where it processed it with your consent, you can contact PayPal using Our Contact Information. PayPal says withdrawing consent will not affect the lawfulness of processing before the withdrawal, nor processing in reliance on a lawful processing ground other than consent.
Details not recorded for this card
Supporting quotations
If you want to withdraw consent to our use of your Personal Information in circumstances where we processed it with your consent, you can refer to Our Contact Information of this Privacy Statement to contact us.
Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your Personal Information conducted in reliance on a lawful processing ground other than consent.
Qualifications & exceptions
Applies where processing was based on your consent.
Does not affect earlier processing or processing under another lawful ground.
Account & Service Control · User right or choice
In the United States there is no opt-out from automated decisions; other jurisdictions may allow review or objection
On the right to object to or opt out of Profiling in furtherance of Automated Decisions with legal or similarly significant effects, PayPal says it may use Automated Decision Making technology and Agentic AI Tools. In the United States, it says these are either exempt practices or do not trigger an opt-out right under applicable US privacy laws. In other jurisdictions, individuals may, where the right exists, contact PayPal to seek a review of, object to and/or revoke consent for an Automated Decision that has legal or similarly significant effects on them (together with the relevant Profiling); PayPal says it will then review the decision, taking relevant additional circumstances into account.
Details not recorded for this card
Supporting quotations
Your right to object to or opt out of Profiling in furtherance of Automated Decisions that produce legal or similarly significant effects on you and related rights.
we may use Automated Decision Making technology and Agentic AI Tools.
In the United States, these are either exempt practices or do not trigger an opt-out right under applicable United States privacy laws.
However, in other jurisdictions, individuals may exercise the right to seek a review of, or to object to and/or revoke consent for, an Automated Decision that has legal or similarly significant effects on them (together with the relevant Profiling), where this right exists, by contacting us.
Profiling means analysis of an individual’s personality, behavior, interest and habits to make predictions or decisions about them
Qualifications & exceptions
United States: described as exempt practices or not triggering an opt-out right.
Other jurisdictions: review, objection or revocation is available "where this right exists", by contacting PayPal.
Not stated here
The passage does not list the other jurisdictions where the right exists.
If an automated decision does not approve you, you may lose access; PayPal describes safety checks and a review route
PayPal says that if you are not approved under the Automated Decisions, you may not have access to its services. It says it has several safety mechanisms to ensure the decisions are appropriate, including ongoing overviews of its decision models and random sampling in individual cases. If you have a concern about the outcome, you can contact PayPal, and it says it will determine whether the procedure was performed appropriately.
Details not recorded for this card
Supporting quotations
If you are not approved under the Automated Decisions, you may not have access to our services.
These mechanisms include ongoing overviews of our decision models and random sampling in individual cases.
If you have any concern about the outcome, you can contact us, and we will determine whether the procedure was performed appropriately.
Qualifications & exceptions
The review of an outcome is a determination of "whether the procedure was performed appropriately".
Not stated here
The passage does not say whether a human reviews individual decisions or whether the outcome itself can be changed.
Account & Service Control · User right or choice
Sensitive Personal Information: consent where required, and US use limited to permitted purposes
Where required by law, PayPal says it will obtain your consent before collecting and processing Sensitive Personal Information, and you can withdraw consent by contacting PayPal. It says it will use Sensitive Personal Information only in accordance with your consent or for certain permitted purposes to the extent permitted or exempt under applicable law, which is why exercising a right to limit use and disclosure under US privacy laws is not necessary. The US permitted purposes named are providing the goods or services you requested; preventing, detecting and investigating security incidents; resisting malicious, deceptive, fraudulent or illegal actions and prosecuting those responsible; verifying or maintaining the quality or safety of a product, service or device; and ensuring physical safety of natural persons. The exemption relied on for precise geolocation is based on the Gramm-Leach-Bliley Act.
Details not recorded for this card
Supporting quotations
Where required by law, we will obtain your consent before collecting and processing your Sensitive Personal Information. You can withdraw your consent by contacting us and refer to
We will also only use your Sensitive Personal Information in accordance with the consent you have given or for certain permitted purposes to the extent permitted or exempt under applicable law
these permitted purposes include providing the goods or services you requested; preventing, detecting, and investigating security incidents; resisting malicious, deceptive, fraudulent, or illegal actions and prosecuting those responsible; verifying or maintaining the quality or safety of a product, service, or device; and ensuring physical safety of natural persons.
The exemption we rely on for precise geolocation is based on the Gramm-Leach-Bliley Act.
Qualifications & exceptions
Consent is obtained "where required by law".
The US permitted-purpose explanation applies "under the United States privacy laws".
The precise geolocation exemption is stated to rest on the Gramm-Leach-Bliley Act.
Not stated here
The passage does not say which uses of Sensitive Personal Information PayPal relies on each permitted purpose for.
Account & Service Control · User right or choice
You may request details of disclosures to third parties for direct marketing; in the US, call or contact PayPal
PayPal says you may request certain details about how your Personal Information is disclosed to third parties for direct marketing purposes. In the United States, you call or contact PayPal.
Details not recorded for this card
Supporting quotations
You may request certain details about how your Personal Information is disclosed to third parties for direct marketing purposes. In the United States, Call or contact us.
Qualifications & exceptions
The request route given is for the United States.
Not stated here
The passage does not say what the "certain details" include.
Data Access & Collection · User right or choice
You can limit the information you provide, but required information is needed to create an account or Fastlane profile
PayPal says you can control how Personal Information is collected or disclosed and how it communicates with you. You may choose to limit the Personal Information you provide when its apps or Services request it, noting that Personal Information helps provide a more personalized experience. Some Personal Information is required for the Services to function. If you choose not to share your contacts, you can still use the mobile apps but some actions may not be as fast or easy. If you do not provide information required for an account or Fastlane profile, such as your name and email address, PayPal says it will not be able to create the account or Fastlane profile for you.
Details not recorded for this card
Supporting quotations
You can control how Personal Information is collected or disclosed, as well as how we communicate with you.
You may choose to limit the Personal Information you provide when our apps or Services request it.
If you choose not to share your contacts with us, you can still use our mobile apps, but some actions may not be as fast or easy as it would be if you shared your contacts.
If you choose not to provide information that is required for an account or Fastlane profile to function, like your name and email address, we will not be able to create an account or Fastlane profile for you.
Fastlane means the online tool whereby individuals can store their payment methods and other Personal Information with PayPal
Qualifications & exceptions
Not sharing contacts: apps still usable but some actions slower.
Not providing required information (like name and email): no account or Fastlane profile can be created.
Not stated here
The passage does not list all information that is required for the Services to function.
You can control which third-party services you link and what they collect, through Security settings
If you link your account(s) to a third-party service, PayPal says you may be able to manage how that service collects, uses and shares your Personal Information, and you should read the third parties' privacy policies to see their choices. You can control which third-party services you link and what Personal Information they can collect; for example, to manage permissions, go to the Security settings in your account(s).
Details not recorded for this card
Supporting quotations
If you link your account(s) to a third-party service, you may be able to manage how your Personal Information is collected, used, and shared by them.
You can control which third-party services you link to your account and what Personal Information they can collect about you. For example, to manage the permissions, go to the Security settings in your account(s).
Qualifications & exceptions
The third party's own choices depend on that third party's privacy policy.
Not stated here
The third parties' privacy policies are not supplied here.
Sharing & Disclosure · User right or choice
You may be able to adjust or turn off what other Users can see in Data and Privacy settings
PayPal says some Personal Information may be seen by other Users, and that you may be able to adjust or turn off this setting in the Data and Privacy section of your account settings. "Users" means other account holders and non-account holders of the PayPal Services.
Details not recorded for this card
Supporting quotations
Some Personal Information may be seen by other Users. You may be able to adjust or turn off this setting in the Data and Privacy section in your account settings.
Users means other account holders and non-account holders of the PayPal Services.
Qualifications & exceptions
Stated as "may be able to"; availability may depend on the information and setting.
Not stated here
The passage does not say which information cannot be hidden.
Personalized shopping sharing in the US covers post-November 27, 2024 data; opt out in Data and Privacy settings
Unless PayPal is required to obtain your consent, it says it shares Personal Information collected after November 27, 2024 (or from earlier if you consent) for personalized shopping experiences in the United States, for example products, preferences, sizes and styles it thinks you will like. To opt out of sharing with Partners and Merchants for personalized shopping, log in to your PayPal account and edit your preferences in the Data and Privacy setting. After opting out, PayPal says it will still disclose Personal Information as necessary to complete transactions you initiate but not for personalized shopping.
Details not recorded for this card
Supporting quotations
Unless we are required to obtain your consent, we share Personal Information collected after November 27, 2024 (or from earlier if you consent) for personalized shopping experiences in the United States.
To opt-out of Personal Information sharing with Partners and Merchants for personalized shopping experiences, log into your PayPal account and edit your preferences in the Data and Privacy setting.
If you opt-out, we will continue to disclose your Personal Information as necessary to complete transactions you initiate but will not disclose Personal Information to Partners and Merchants for personalized shopping experiences.
Partners and Merchants means our partners and the merchants, partners or businesses that our Users transact with for the purpose of obtaining goods or services.
Qualifications & exceptions
Applies to the United States; cutoff date November 27, 2024 unless you consent to earlier data.
Where law requires consent, consent is needed instead.
Opt-out does not stop disclosures needed to complete transactions you initiate.
PayPal contacts you by email, text, push notification, phone or mail; some messages are optional and some necessary
PayPal says your choices about how it communicates with you differ depending on the purpose of the message, how it is delivered and legal requirements. Some messages are optional and some are necessary for you to manage your accounts or Fastlane profile. PayPal says it uses email, text messages, push notifications on your mobile device, and even phone calls or paper mail, depending on the situation, your preferences and applicable law.
Details not recorded for this card
Supporting quotations
Your choices about how we communicate with you differ depending on the purpose of the message, how it is delivered and other requirements under applicable law.
Some messages are considered optional, and some are necessary for you to manage your accounts or Fastlane profile with us.
We use email, text messages, push notifications on your mobile device, and even phone calls or paper mail depending on the situation, your preferences and applicable law.
Fastlane means the online tool whereby individuals can store their payment methods and other Personal Information with PayPal
Qualifications & exceptions
Channel used depends on the situation, your preferences and applicable law.
You can unsubscribe from marketing messages but not from necessary messages such as receipts and account alerts
You can click the unsubscribe link in a PayPal, Hyperwallet or Fastlane marketing email, opt out of a text message by replying "STOP", or turn off notifications on your device. You can also change your account's notification settings or your device's notification preferences. You will not be able to opt out of messages considered necessary for the Services, such as digital receipts and emails that alert you to changes in your account(s) or Fastlane profile's status, although you may be able to decide how they are sent (email, phone, text message or mobile notification).
Details not recorded for this card
Supporting quotations
You can click the unsubscribe link in a PayPal, Hyperwallet, or Fastlane marketing email, opt-out of a text message by replying “STOP,” or turn off notifications on your device.
You won’t be able to opt-out of messages that are considered necessary for the Services, such as digital receipts and emails that alert you to changes in your account(s) or Fastlane profile's status.
You may be able to decide how we send those messages, such as by email, phone, text message, or a notification on your mobile device.
Hyperwallet means the PayPal technology and online service that allows payout capabilities for businesses of all shapes and sizes through a single integration.
Qualifications & exceptions
Opt-out applies to marketing emails and texts; necessary messages cannot be opted out of.
Delivery method for necessary messages is something you "may be able to" choose.
Security measures are kept; you protect your password; no responsibility for data shared via linked accounts
PayPal says it maintains technical, physical and administrative security measures designed to provide reasonable protection for Personal Information against loss, misuse, interference, unauthorized access, disclosure and alteration, including firewalls, data encryption, physical access controls to data centers and information access authorization controls. You are responsible for securing your password(s) and account or profile registration information and for verifying that the Personal Information PayPal maintains about you is accurate and current. PayPal says it is not responsible for protecting Personal Information it shares with a third party based on a linked account connection you have authorized.
Details not recorded for this card
Supporting quotations
We maintain technical, physical, and administrative security measures designed to provide reasonable protection for your Personal Information against loss, misuse, interference, unauthorized access, disclosure, and alteration.
The security measures include firewalls, data encryption, physical access controls to our data centers, and information access authorization controls.
you are responsible for securing and maintaining the privacy of your password(s) and account or profile registration information and verifying that the Personal Information we maintain about you is accurate and current.
We are not responsible for protecting any Personal Information that we share with a third-party based on a linked account connection that you have authorized.
Qualifications & exceptions
Protection is "reasonable", not absolute.
The exclusion applies to information shared with a third party under a linked account connection you authorized.
Data Access & Collection · Company commitment
Not directed to children under 18; information known to come from them is deleted unless legally retained
PayPal says the Sites and Services are not directed to children under 18 and that it does not knowingly collect information from children under 18 or other individuals not legally allowed to use the Services. If it obtains actual knowledge it has collected Personal Information from someone not allowed to use the Services, it says it will promptly delete it, unless legally obligated to retain it. It asks you to contact it if you believe it mistakenly collected such information.
Details not recorded for this card
Supporting quotations
The Sites and Services are not directed to children under the age of 18. We do not knowingly collect information, including Personal Information, from children under the age of 18 or other individuals who are not legally allowed to use our Services.
If we obtain actual knowledge that we have collected Personal Information from someone not allowed to use our Services, we will promptly delete it, unless we are legally obligated to retain such data.
Qualifications & exceptions
Applies when PayPal has "actual knowledge" of the collection.
Deletion is subject to legal retention obligations.
Not stated here
The passage does not say how PayPal checks for age.
Use & Processing · Permission or license
Information may be processed outside your country; by using the Services you agree to transfers where permitted
PayPal says it operates in many countries and it (or its service providers) may transfer your Personal Information and process it outside the country where you live, for example using third-party service providers to process and store it in the United States and other countries. It acknowledges these countries do not always offer privacy protection equivalent to your country. It says it has taken and will continue to take specific steps under applicable data protection laws (for example intra-company agreements, model contractual clauses and/or derogations). By using the Sites and Services, where permitted under applicable privacy laws, you agree to your Personal Information being transferred to other countries, including countries with different data protection rules than yours.
Details not recorded for this card
Supporting quotations
we (or our service providers) may transfer your Personal Information and process it outside the country where you live.
we use third-party service providers to process and store your Personal Information in the United States and other countries.
We have taken and will continue to take specific steps, in accordance with the applicable data protection and privacy laws, to protect your Personal Information (e.g., intra-company agreements, model contractual clauses, and/or derogations).
By using our Sites and Services, where permitted under applicable privacy laws, you agree to your Personal Information being transferred to other countries, including countries that have different data protection rules than your country.
Qualifications & exceptions
Your agreement by use applies "where permitted under applicable privacy laws".
Safeguards are described as examples, not a complete list.
Not stated here
The passage does not say which transfer safeguard applies to which country.
Use & Processing · Context
"Automated Decision" means a decision made by automated means with no or limited human involvement
The Statement defines Automated Decision and Automated Decision Making as making a decision by automated means without or limited human involvement, depending on applicable law. It says some of these decisions could have a legal or similarly significant effect on you, and that the terms also mean like concepts under applicable laws.
Details not recorded for this card
Supporting quotations
Automated Decision and Automated Decision Making refers to the process of making a decision by automated means without or limited human involvement, depending on applicable law.
In some cases, these decisions could have a legal or similarly significant effect on you as an individual.
Qualifications & exceptions
Meaning depends on applicable law.
Data Access & Collection · Context
"Cookies" covers pixel tags, web beacons and widgets; "Device Information" is collected automatically from devices
"Cookies" means tracking technologies such as cookies, pixel tags, web beacons and widgets. "Device Information" means data that can be automatically collected from any device used to access the Services, which may include (but is not limited to) device type, network connections, device name, IP address, web browser and internet connection information, geolocation information, and information about apps downloaded to your device.
Details not recorded for this card
Supporting quotations
Cookies means tracking technologies such as cookies, pixel tags, web beacons, and widgets.
Device Information means data that can be automatically collected from any device used to access the Services.
geolocation information, and information about apps downloaded to your device.
Qualifications & exceptions
The Device Information list is "not limited to" the items named.
"Excluded Services" are separate brands that follow their own terms and privacy statements
"Excluded Services" means companies or separate brands, affiliates or subsidiaries of PayPal that process Personal Information in accordance with their own terms of service and separate privacy statements. The examples given are Venmo, Honey Science LLC, Chargehound LLC, Paidy Inc., Swift Financial LLC and Bill Me Later, Inc.
Details not recorded for this card
Supporting quotations
Excluded Services means companies or separate brands, affiliates, or subsidiaries of PayPal, who process Personal Information in accordance with their own terms of service and separate privacy statements.
Examples include Venmo, Honey Science LLC, Chargehound LLC, Paidy Inc., Swift Financial LLC, and Bill Me Later, Inc.
Qualifications & exceptions
Examples are given with "Include", so the list is not stated to be complete.
Not stated here
The separate privacy statements of the Excluded Services are not supplied here.
"Fastlane" stores payment and personal details for faster checkout; "Hyperwallet" provides business payouts
"Fastlane" is the online tool whereby individuals can store payment methods and other Personal Information with PayPal to check out faster, create a store or loyalty account, or facilitate other transactions at participating Partners and Merchants, using payment card, contact, shipping or other data saved in their Fastlane profile as relevant to the interaction. "Hyperwallet" is PayPal technology and an online service that allows payout capabilities for businesses through a single integration.
Details not recorded for this card
Supporting quotations
Fastlane means the online tool whereby individuals can store their payment methods and other Personal Information with PayPal so that they can complete the checkout process faster, create a store or loyalty account, or facilitate other transactions at participating Partners and Merchants
Hyperwallet means the PayPal technology and online service that allows payout capabilities for businesses of all shapes and sizes through a single integration.
Qualifications & exceptions
Fastlane data used depends on the specific interaction and participating Partners and Merchants.
"Partners and Merchants" and "Users" are defined broadly, with Users including non-account holders
"Partners and Merchants" means PayPal's partners and the merchants, partners or businesses that its Users transact with to obtain goods or services. "Users" means other account holders and non-account holders of the PayPal Services.
Details not recorded for this card
Supporting quotations
Partners and Merchants means our partners and the merchants, partners or businesses that our Users transact with for the purpose of obtaining goods or services.
Users means other account holders and non-account holders of the PayPal Services.
"Pay without a PayPal Account" and "Unbranded Payment Services" cover guest and Braintree-type payments, not Venmo
"Pay without a PayPal Account" means the Services may be accessed without using a PayPal account, a Fastlane profile or the Unbranded Payment Services; it does not include Venmo, which has its own terms and privacy statement. "Unbranded Payment Services" means interacting with and making payments to Partners and Merchants using PayPal's card processing and/or ACH origination services that do not carry the PayPal brand, or using its Braintree services.
Details not recorded for this card
Supporting quotations
Pay without a PayPal Account means our Services may be accessed by individuals without using a PayPal account, a Fastlane profile, or the Unbranded Payment Services.
Pay without a PayPal account does not include Venmo, which is subject to its own terms of service and separate privacy statement.
Unbranded Payment Services means when you are interacting with and making payments to Partners and Merchants using our card processing and/or ACH origination services that do not carry the PayPal brand or when you use our Braintree services.
Qualifications & exceptions
Venmo is excluded from "Pay without a PayPal Account".
"Personal Information" includes anything reasonably capable of being associated with you or your household
In this Privacy Statement, "Personal Information" means any information that directly or indirectly identifies you or is reasonably capable of being associated with you or your household, including your identity, finances and online behavior, or such broader meanings as given by the definitions of personal information, personal data, personally identifiable information or like terms under applicable privacy laws.
Details not recorded for this card
Supporting quotations
Personal Information
means any information that directly or indirectly identifies you or is reasonably capable of being associated with you or your household information about you, including your identity, finances and online behavior
Qualifications & exceptions
A broader meaning under applicable privacy laws also applies.
"Profiling" means analyzing personality, behavior, interests and habits to make predictions or decisions
"Profiling" means analysis of an individual's personality, behavior, interest and habits to make predictions or decisions about them, including like terms under applicable laws.
Details not recorded for this card
Supporting quotations
Profiling means analysis of an individual’s personality, behavior, interest and habits to make predictions or decisions about them, including like terms under applicable laws.
"Services" covers PayPal-branded and unbranded products, including ads, crypto and credit, except Excluded Services
"Services" refers to all PayPal-branded or unbranded payment, financial and personalization products and solutions, including transactions, rewards, advertising (including PayPal Ads), PayPal Groups, Fastlane, Xoom, Pool, Hyperwallet, credit and financing (including Partner and Merchant offerings), cryptocurrency services offered by PayPal Digital Inc. (a PayPal affiliate), merchant tools and emerging financial technologies, with the exception of Excluded Services. It also includes related websites, platforms, applications and future innovations offered or supported by PayPal, and your use of Services includes interaction with the Sites.
Details not recorded for this card
Supporting quotations
Services refers to all PayPal-branded or unbranded payment, financial, and personalization products and solutions
with the exception of Excluded Services. It also includes all related websites, platforms, applications, and future innovations offered or supported by PayPal.
Your use of Services includes interaction with our Sites.
Qualifications & exceptions
Excludes Excluded Services.
Includes future innovations offered or supported by PayPal.
"Sites" covers websites, mobile apps and official social network platforms that post or link to the Statement
"Sites" means the websites, mobile apps, official social network platforms or other online properties through which PayPal offers the Services and which has posted or linked to this Privacy Statement.
Details not recorded for this card
Supporting quotations
Sites means the websites, mobile apps, official social network platforms, or other online properties through which PayPal offers the Services and which has posted or linked to this Privacy Statement.
Qualifications & exceptions
Limited to properties that have posted or linked to this Privacy Statement.
Contact PayPal Customer Service by phone or web portal about your PayPal account or Unbranded Payment Services
For questions about the Privacy Statement or your Personal Information, PayPal says to contact it. To talk about your PayPal account or Unbranded Payment Services, call PayPal Customer Service at 1-888-221-1161 or visit the Customer Service web portal.
Details not recorded for this card
Supporting quotations
If you have questions about this Privacy Statement or your Personal Information, contact us so we can help. To talk about your PayPal account or Unbranded Payment Services:
Call PayPal Customer Service at 1-888-221-1161; or
Visit our
Unbranded Payment Services means when you are interacting with and making payments to Partners and Merchants using our card processing and/or ACH origination services that do not carry the PayPal brand or when you use our Braintree services.
Qualifications & exceptions
This route covers the PayPal account and Unbranded Payment Services, not Hyperwallet, Fastlane or Xoom.
Not stated here
The linked Customer Service web portal is not supplied here.
Hyperwallet account questions go to Hyperwallet Customer Service by phone or the Pay Portal
To talk about your Hyperwallet account, call Hyperwallet Customer Service at 1-877-546-8220 or log into the Hyperwallet Pay Portal (go to "Support", select "Email" and complete the form for "Privacy Concerns").
Details not recorded for this card
Supporting quotations
To talk about your Hyperwallet account:
Call Hyperwallet Customer Service at 1-877-546-8220; or
Log into the Hyperwallet Pay Portal (Go to "Support," select "Email" and complete the form for "Privacy Concerns").
Hyperwallet means the PayPal technology and online service that allows payout capabilities for businesses of all shapes and sizes through a single integration.
Xoom account questions go to Xoom Customer Service by phone or the Help Center web portal
To talk about your Xoom account, call Xoom Customer Service at 1-877-815-1531 or visit the Xoom Help Center web portal.
Details not recorded for this card
Supporting quotations
To talk about your Xoom account:
Call Xoom Customer Service at 1-877-815-1531; or
Visit our
Qualifications & exceptions
Applies to Xoom accounts.
Not stated here
The linked Help Center portal is not supplied here.
Legal Rights & Agreement Rules · User right or choice
A regional table gives local contacts, and you may complain to your data protection authority if permitted
PayPal refers readers to a table with additional information relevant to their local country or region, listing a Data Protection Officer or contact information. It says you may lodge a complaint with the Supervisory Authority for data protection in your region if permitted under applicable law.
Details not recorded for this card
Supporting quotations
Please see the table below for additional information relevant to your local country/region. You may lodge a complaint with the Supervisory Authority for data protection in your region if permitted under applicable law.
Country or Region Data Protection Officer ("DPO"), and Contact Information
Qualifications & exceptions
A complaint to the Supervisory Authority is available "if permitted under applicable law".
Not stated here
The table does not list the United States.
Legal Rights & Agreement Rules · Context
For Albania, the EU, Norway, Iceland and Liechtenstein the listed contact entity is PayPal (Europe) in Luxembourg
The regional contact table lists PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg, with an online privacy-query contact, for Albania, the EU, Norway, Iceland and Lichtenstein (spelled as in the source).
Details not recorded for this card
Supporting quotations
Albania PayPal (Europe) S.a.r.l. et Cie, S.C.A. 22-24 Boulevard Royal L-2449 Luxembourg
EU PayPal (Europe) S.a.r.l. et Cie, S.C.A. 22-24 Boulevard Royal L-2449, Luxembourg
Norway PayPal (Europe) S.a.r.l. et Cie, S.C.A. 22-24 Boulevard Royal L-2449, Luxembourg
Iceland PayPal (Europe) S.a.r.l. et Cie, S.C.A. 22-24 Boulevard Royal L-2449, Luxembourg
Lichtenstein PayPal (Europe) S.a.r.l. et Cie, S.C.A. 22-24 Boulevard Royal L-2449, Luxembourg
Qualifications & exceptions
Applies to the listed countries or regions only.
Legal Rights & Agreement Rules · Context
Argentina, Brunei, Hong Kong, India, Japan, South Korea and Malaysia list a PayPal address in Singapore
The regional contact table lists PayPal Pte. Ltd. (or, for India, PayPal Payments Private Limited), 5 Temasek Boulevard 09-01, Suntec Tower 5, Singapore 038985, with an online privacy-query contact, for Argentina, Brunei, Hong Kong, India, Japan, South Korea and Malaysia.
For Australia, Brazil, Canada, Israel and Mexico the listed contact is a local PayPal entity
The regional contact table lists local PayPal entities with addresses and online privacy-query contacts: PayPal Australia Pty Ltd (Sydney), PayPal do Brasil Instituição de Pagamento Ltda. (Brazil, attention Legal Department), PayPal Canada Co. (Toronto), PayPal Israel Payment Services LTD (Tel-Aviv) and Operadora PayPal de México, S. de R.L. de C.V (Mexico City).
Details not recorded for this card
Supporting quotations
Australia PayPal Australia Pty Ltd ABN 93 111 195 389, AFSL 304962 GPO Box 351 Sydney NSW 2001
Brazil PayPal do Brasil Instituição de Pagamento Ltda. Attention: Legal Department
Canada PayPal Canada Co. MaRS Centre West Tower 661 University Avenue Suite 506 Toronto, ON M5G
Israel PayPal Israel Payment Services LTD 98 Yigal Alon St., Tel-Aviv, Israel 6789141
Mexico Operadora PayPal de México, S. de R.L. de C.V Boulevard Manuel Ávila Camacho 137
Qualifications & exceptions
Applies to the listed countries only.
Legal Rights & Agreement Rules · Context
Brazil: the source names a Data Protection Officer and deputy under LGPD article 41
For Brazil, the Statement says that in compliance with LGPD article 41 it identifies a Data Protection Officer and a Deputy Data Protection Officer, both reachable at the e-mail address latamdpo@paypal.com.
Details not recorded for this card
Supporting quotations
In compliance with LGPD article 41, the identity and contact information of the Data Protection Officer (DPO) and of his deputy (Deputy DPO) are the following:
DPO contact e-mail: latamdpo@paypal.com
Qualifications & exceptions
Applies to Brazil.
Legal Rights & Agreement Rules · Context
South Korea: a domestic agent and Data Protection Office are listed under Korean law
For South Korea, the Statement says that pursuant to the Personal Information Protection Act and the Network Act, the contact details of the domestic agent and Data Protection Office are given: PayPal Korea Services LLC, with an address in Seoul, a telephone number and an e-mail address.
Details not recorded for this card
Supporting quotations
Pursuant to the Personal Information Protection Act and the Network Act, the contact details of the domestic agent and Data Protection Office are as follows:
Name and representative: PayPal Korea Services LLC
United States: PayPal Inc., 2211 N. 1st St., San Jose, CA is the listed contact with an online privacy contact
The regional contact table lists PayPal Inc., 2211 N. 1st St., San Jose, CA 95131, with an online contact for privacy queries, for the United States.
Details not recorded for this card
Supporting quotations
United States PayPal Inc. 2211 N. 1st St., San Jose, CA 95131
Qualifications & exceptions
Applies to the United States row of the table.
Not stated here
The linked online privacy contact page is not supplied here.
Legal Rights & Agreement Rules · Context
Philippines, Singapore, Sri Lanka, Switzerland, Taiwan, the UAE and Vietnam list a PayPal address in Singapore
The regional contact table lists PayPal Pte. Ltd., 5 Temasek Boulevard 09-01, Suntec Tower 5, Singapore 038985, with an online privacy-query contact, for the Philippines, Singapore, Sri Lanka, Switzerland, Taiwan, the United Arab Emirates and Vietnam.
Russia: the listed contact entity is PayPal (Europe) in Luxembourg
The regional contact table lists PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg, with an online privacy-query contact, for Russia.
Details not recorded for this card
Supporting quotations
Russia PayPal (Europe) S.a.r.l. et Cie, S.C.A. 22-24 Boulevard Royal L-2449, Luxembourg
Qualifications & exceptions
Applies to the Russia row of the table.
Legal Rights & Agreement Rules · Context
Thailand and the UK list a local address; the Thailand row does not name an entity
The regional contact table lists, for Thailand, an address at Athenee Tower in Bangkok with an online privacy contact; the row does not name a PayPal entity. For the UK it lists PayPal UK Ltd, 76 Upper Ground, London SE1 9PZ, with an online privacy contact.
UK PayPal UK Ltd 76 Upper Ground London, United Kingdom, SE1 9PZ
Qualifications & exceptions
Applies to the Thailand and UK rows only.
Not stated here
The Thailand row gives an address but no named entity.
Legal Rights & Agreement Rules · Context
US disclosures supplement the Statement and summarize the prior 12 months of CCPA processing
This section adds disclosures for individuals in the United States and supplements the Privacy Statement above. It provides information about PayPal's Personal Information processing in the prior 12 months under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA). PayPal says that in the preceding 12 months it collected the categories of Personal Information in the table below and disclosed those categories for business purposes to the categories of third parties shown, described in more detail in the uses and sharing sections.
Details not recorded for this card
Supporting quotations
This section contains additional disclosures for individuals in the United States and supplements PayPal’s Privacy Statement above.
This section provides additional information regarding PayPal’s prior 12-month Personal Information processing activities under the CCPA.
In the preceding 12 months, we have collected the categories of Personal Information set forth in the table below.
In the preceding 12 months, we have disclosed the following categories of Personal Information for business purposes to the following categories of third parties
Qualifications & exceptions
Covers the preceding 12 months and individuals in the United States, with CCPA-specific information for California.
Not stated here
The table gives categories of data, purposes and recipient categories per row; it does not map each purpose to each recipient.
Data Access & Collection · Company practice
CCPA table: Identifiers are collected and disclosed for twelve listed purposes
In the table, the category Identifiers lists these purposes of collection and disclosure: Provide Services; Communicate with you; Link an account; Manage and improve our Services; Manage fraud and risk; Market our Services; Comply with laws; Process information about your contacts; Communicate with you; Provide receipts in connection with PayPal Point of Sale services; Remember your preferences; Associate information about you. (Communicate with you appears twice in the source.)
Details not recorded for this card
Supporting quotations
Identifiers
Provide Services
Communicate with you
Link an account
Manage and improve our Services
Manage fraud and risk
Market our Services
Comply with laws
Process information about your contacts
Communicate with you
Provide receipts in connection with PayPal Point of Sale services
Remember your preferences
Associate information about you
Qualifications & exceptions
Table row: Identifiers; column: Purpose of Collection and Disclosure.
Not stated here
The table does not map each purpose to each recipient category.
Sharing & Disclosure · Company practice
CCPA table: Identifiers are disclosed to twelve categories of third parties for business purposes
In the table, the category Identifiers is disclosed for business purposes to these categories of third parties: PayPal and PayPal affiliates; Authorities; Other financial institutions; Card networks and payment Processors; Fraud prevention and identity verification agencies; CRAs; Service providers; Other Users in accordance with account settings; Linked accounts; Partners and Merchants; Other third parties; Buyers in connection with a business transfer.
Details not recorded for this card
Supporting quotations
Identifiers
PayPal and PayPal affiliates
Authorities
Other financial institutions
Card networks and payment Processors
Fraud prevention and identity verification agencies
CRAs
Service providers
Other Users in accordance with account settings
Linked accounts
Partners and Merchants
Other third parties
Buyers in connection with a business transfer
Qualifications & exceptions
Table row: Identifiers; column: Categories of 3rd Parties to which PayPal Discloses this Personal Information for Business Purpose.
Not stated here
The table does not say which recipients receive Identifiers for which purpose.
Data Access & Collection · Company practice
CCPA table: Records and Financial Information are collected and disclosed for eleven listed purposes
In the table, Records and Financial Information (including Personal Information described in the California Customer Records Act) lists these purposes: Provide Services; Communicate with you; Link an account; Keep your account and Fastlane profile and financial information up to date; Manage and improve our Services; Manage fraud and risk; Market our Services; Provide personalized Services; Comply with laws; Process information about your contacts; Communicate with you. (Communicate with you appears twice in the source.)
Details not recorded for this card
Supporting quotations
Records and Financial Information (including Personal Information described in California Customer Records Act)
Provide Services
Communicate with you
Link an account
Keep your account and Fastlane profile and financial information up to date
Manage and improve our Services
Manage fraud and risk
Market our Services
Provide personalized Services
Comply with laws
Process information about your contacts
Communicate with you
Qualifications & exceptions
Table row: Records and Financial Information; column: Purpose of Collection and Disclosure.
Not stated here
The table does not map each purpose to each recipient category.
CCPA table: Records and Financial Information are disclosed to twelve categories of third parties
In the table, Records and Financial Information is disclosed for business purposes to these categories of third parties: PayPal and PayPal affiliates; Authorities; Other financial institutions; Card networks and payment processors; Fraud prevention and identity verification agencies; CRAs; Service providers; Other Users in accordance with account settings; Linked accounts; Partners and Merchants; Other third parties for business purposes; Buyers in connection with a business transfer.
Details not recorded for this card
Supporting quotations
Records and Financial Information (including Personal Information described in California Customer Records Act)
PayPal and PayPal affiliates
Authorities
Other financial institutions
Card networks and payment processors
Fraud prevention and identity verification agencies
CRAs
Service providers
Other Users in accordance with account settings
Linked accounts
Partners and Merchants
Other third parties for business purposes
Buyers in connection with a business transfer
Qualifications & exceptions
Table row: Records and Financial Information; column: Categories of 3rd Parties to which PayPal Discloses this Personal Information for Business Purpose.
Not stated here
The table does not say which recipients receive these records for which purpose.
CCPA table: Commercial information is collected and disclosed for eight listed purposes
In the table, Commercial information lists these purposes: Provide Services; Communicate with you; Manage and improve our Services; Manage fraud and risk; Market our Services; Comply with laws; Remember your preferences; Associate information about you.
Details not recorded for this card
Supporting quotations
Commercial information
Provide Services
Communicate with you
Manage and improve our Services
Manage fraud and risk
Market our Services
Comply with laws
Remember your preferences
Associate information about you
Qualifications & exceptions
Table row: Commercial information; column: Purpose of Collection and Disclosure.
Not stated here
The table does not map each purpose to each recipient category.
Sharing & Disclosure · Company practice
CCPA table: Commercial information is disclosed to eight categories of third parties
In the table, Commercial information is disclosed for business purposes to these categories of third parties: PayPal and PayPal affiliates; Service providers; Authorities; Other financial institutions; Partners and Merchants; Other third parties; Buyers or in connection with business transfer; Other Users if you have a business profile. The last item, other Users, applies "if you have a business profile".
Details not recorded for this card
Supporting quotations
Commercial information
PayPal and PayPal affiliates
Service providers
Authorities
Other financial institutions
Partners and Merchants
Other third parties
Buyers or in connection with business transfer
Other Users if you have a business profile
Qualifications & exceptions
Table row: Commercial information; column: Categories of 3rd Parties.
Disclosure to other Users applies if you have a business profile.
Not stated here
The table does not say which recipients receive commercial information for which purpose.
Data Access & Collection · Company practice
CCPA table: Geolocation Data is used for location-based options and fraud management, shared with five recipient types
In the table, Geolocation Data is collected and disclosed for these purposes: Send you location-based options; Manage fraud and risk. It is disclosed to these categories of third parties: Authorities; PayPal and PayPal affiliates; Service providers; Other financial institutions; Partners and Merchants. The source lists the row label "Geolocation Data" after its cells, but the table structure marks these cells as the Geolocation Data row.
Details not recorded for this card
Supporting quotations
Send you location-based options
Manage fraud and risk
Authorities
PayPal and PayPal affiliates
Service providers
Other financial institutions
Partners and Merchants
Geolocation Data
Qualifications & exceptions
Table row: Geolocation Data.
Not stated here
The table does not say whether this means GPS or IP-based location, nor which recipients receive it for which purpose.
Data Access & Collection · Company practice
CCPA table: Internet or network activity is used for six purposes and disclosed to five recipient categories
In the table, Internet or network activity is collected and disclosed for these purposes: Operate and provide Services; Communicate with you; Manage and improve Services; Market our Services; Send you locally relevant options; Comply with laws. It is disclosed to these categories of third parties: PayPal and PayPal affiliates; Service providers; Other financial institutions; Partners and Merchants; Authorities.
Details not recorded for this card
Supporting quotations
Internet or network activity
Operate and provide Services
Communicate with you
Manage and improve Services
Market our Services
Send you locally relevant options
Comply with laws
PayPal and PayPal affiliates
Service providers
Other financial institutions
Partners and Merchants
Authorities
Qualifications & exceptions
Table row: Internet or network activity.
Not stated here
The table does not map each purpose to each recipient category.
Data Access & Collection · Company practice
CCPA table: Biometric data is used to authenticate you for account actions
In the table, Biometric data lists one purpose: authenticating you for certain actions related to your account, including to meet regulatory requirements or before you access accounts and Services, recover passwords, update profile information, manage payments and payment methods, lift account limitations, and initiate third-party cryptocurrency transfers (the last item continues in the next block of the source).
Details not recorded for this card
Supporting quotations
Biometric
Authenticate you for certain actions related to your account, including to:
meet regulatory requirements or before you access accounts and Services;
recover passwords;
update profile information;
manage payments and payment methods;
lift account limitations; and
initiate third-party crypto currency transfers.
Qualifications & exceptions
Table row: Biometric; column: Purpose of Collection and Disclosure.
Not stated here
The recipients of biometric data are given in the following blocks of the table.
Data Access & Collection · Company practice
CCPA table: Biometric data is disclosed to Service providers and includes crypto transfers among its purposes
In the table, the last purpose in the Biometric row is initiating third-party cryptocurrency transfers (completing the list of authentication purposes: regulatory requirements or before accessing accounts and Services, recovering passwords, updating profile information, managing payments and payment methods, lifting account limitations). The only category of third party listed for Biometric data is Service providers.
Details not recorded for this card
Supporting quotations
initiate third-party crypto currency transfers.
Service providers
Qualifications & exceptions
Table row: Biometric.
The recipient column for this row lists only Service providers.
Not stated here
The table does not say which service providers receive biometric data or for which purpose.
Data Access & Collection · Company practice
CCPA table: Audio, electronic or visual information is used for four purposes and disclosed to four recipient types
In the CCPA table, the category "Audio, electronic, visual, or similar information" lists these purposes of collection and disclosure: Provide Services; Authenticate your access to an account or Fastlane profile; Manage and improve Services; Manage fraud and risk. It lists these categories of third parties to which PayPal discloses it for business purposes: Service providers; PayPal and PayPal affiliates; Merchants and Partners; Authorities.
Details not recorded for this card
Supporting quotations
Audio, electronic, visual, or similar information
Provide Services
Authenticate your access to an account or Fastlane profile
Manage and improve Services
Manage fraud and risk
Service providers
PayPal and PayPal affiliates
Merchants and Partners
Authorities
Qualifications & exceptions
Table row: Audio, electronic, visual, or similar information.
Not stated here
The table does not say which recipients receive this category for which purpose.
Data Access & Collection · Company practice
CCPA table: Professional or employment information is used for two purposes and disclosed to five recipient types
In the CCPA table, the category "Professional or employment information" lists these purposes of collection and disclosure: Provide Services; Manage fraud and risk. It lists these categories of third parties to which PayPal discloses it for business purposes: Service providers; PayPal and PayPal affiliates; Merchants and Partners; Authorities; Other financial institutions.
Details not recorded for this card
Supporting quotations
Professional or employment information
Provide Services
Manage fraud and risk
Service providers
PayPal and PayPal affiliates
Merchants and Partners
Authorities
Other financial institutions
Qualifications & exceptions
Table row: Professional or employment information.
Not stated here
The table does not say which recipients receive this category for which purpose.
Data Access & Collection · Company practice
CCPA table: Information about imported contacts is used to provide Services and disclosed to Service providers
In the CCPA table, the category "Information about your imported contacts" lists these purposes of collection and disclosure: Provide Services. It lists these categories of third parties to which PayPal discloses it for business purposes: Service providers.
Details not recorded for this card
Supporting quotations
Information about your imported contacts
Provide Services
Service providers
Qualifications & exceptions
Table row: Information about your imported contacts.
Not stated here
The table does not say which recipients receive this category for which purpose.
Data Access & Collection · Company practice
CCPA table: Account and profile information is used to provide Services and disclosed to five recipient types
In the CCPA table, the category "Information in your PayPal, Hyperwallet or Xoom account or Fastlane profile" lists these purposes of collection and disclosure: Provide Services. It lists these categories of third parties to which PayPal discloses it for business purposes: Service providers; PayPal and PayPal affiliates; Merchants and Partners; Authorities; Other financial institutions.
Details not recorded for this card
Supporting quotations
Information in your PayPal, Hyperwallet or Xoom account or Fastlane profile
Provide Services
Service providers
PayPal and PayPal affiliates
Merchants and Partners
Authorities
Other financial institutions
Qualifications & exceptions
Table row: Information in your PayPal, Hyperwallet or Xoom account or Fastlane profile.
Not stated here
The table does not say which recipients receive this category for which purpose.
Data Access & Collection · Company practice
CCPA table: Information you give when contacting PayPal has four purposes and four recipient types
In the CCPA table, the category "Information you provide when you contact us" lists these purposes of collection and disclosure: Provide Services; Authenticate your access to an account or Fastlane profile; Manage and improve; Services; Manage fraud and risk. It lists these categories of third parties to which PayPal discloses it for business purposes: Service providers; PayPal and PayPal affiliates; Merchants and Partners; Authorities.
Details not recorded for this card
Supporting quotations
Information you provide when you contact us
Provide Services
Authenticate your access to an account or Fastlane profile
Manage and improve
Services
Manage fraud and risk
Service providers
PayPal and PayPal affiliates
Merchants and Partners
Authorities
Qualifications & exceptions
Table row: Information you provide when you contact us.
The source splits "Manage and improve" and "Services" into two separate blocks; they read together as "Manage and improve Services".
Not stated here
The table does not say which recipients receive this category for which purpose.
Data Access & Collection · Company practice
CCPA table: Inferred data is used for seven purposes including identity checks and risk assessment
In the CCPA table, the category "Inferred data" lists these purposes of collection and disclosure: Provide Services; Manage fraud and risk; Market our Services; Display content based on your interest; Better respond to your requests or inquiries or for similar customer service issues; Verify your identity; Conduct risk assessment. It lists these categories of third parties to which PayPal discloses it for business purposes: PayPal and PayPal affiliates; Service Providers; Other financial institutions; Merchants and Partners; Authorities.
Details not recorded for this card
Supporting quotations
Inferred data
Provide Services
Manage fraud and risk
Market our Services
Display content based on your interest
Better respond to your requests or inquiries or for similar customer service issues
Verify your identity
Conduct risk assessment
PayPal and PayPal affiliates
Service Providers
Other financial institutions
Merchants and Partners
Authorities
Qualifications & exceptions
Table row: Inferred data.
Not stated here
The table does not say which recipients receive this category for which purpose.
Data Access & Collection · Company practice
CCPA table: Sensitive Personal Information has two purposes and is disclosed to six recipient types
In the CCPA table, the category "Sensitive Personal Information" lists these purposes of collection and disclosure: Provide Services; Manage fraud and risk. It lists these categories of third parties to which PayPal discloses it for business purposes: PayPal and PayPal affiliates; Service providers; Other financial institutions; Merchants and Partners; Authorities; Buyers or in connection with; business transfer.
Details not recorded for this card
Supporting quotations
Sensitive Personal Information
Provide Services
Manage fraud and risk
PayPal and PayPal affiliates
Service providers
Other financial institutions
Merchants and Partners
Authorities
Buyers or in connection with
business transfer
Qualifications & exceptions
Table row: Sensitive Personal Information.
The source splits "Buyers or in connection with" and "business transfer" into two blocks; they read together as buyers in connection with a business transfer.
Not stated here
The table does not say which recipients receive this category for which purpose.
Data Access & Collection · Company practice
CCPA table: Characteristics of protected classifications are used to provide Services and manage risk
In the CCPA table, the category "Characteristics of Protected Classifications" lists these purposes of collection and disclosure: Provide our Services; Manage risk. It lists these categories of third parties to which PayPal discloses it for business purposes: PayPal and PayPal affiliates; Service providers; Authorities.
Details not recorded for this card
Supporting quotations
Characteristics of Protected Classifications
Provide our Services
Manage risk
PayPal and PayPal affiliates
Service providers
Authorities
Qualifications & exceptions
Table row: Characteristics of Protected Classifications.
Not stated here
The table does not say which recipients receive this category for which purpose.
Data Access & Collection · Company practice
CCPA table: Information from your device is used for seven listed purposes and disclosed to five recipient types
In the CCPA table, the category "Information from your device" lists these purposes of collection and disclosure: Provide Services; Manage and improve our Services; Manage fraud and risk; Communicate with you; Link an account; Market our Services; Personalize your experience Comply with laws. It lists these categories of third parties to which PayPal discloses it for business purposes: PayPal and PayPal affiliates; Service providers; Other financial institutions; Merchants and Partners; Authorities.
Details not recorded for this card
Supporting quotations
Information from your device
Provide Services
Manage and improve our Services
Manage fraud and risk
Communicate with you
Link an account
Market our Services
Personalize your experience Comply with laws
PayPal and PayPal affiliates
Service providers
Other financial institutions
Merchants and Partners
Authorities
Qualifications & exceptions
Table row: Information from your device.
The source joins "Personalize your experience" and "Comply with laws" in one block; they are two listed purposes.
Not stated here
The table does not say which recipients receive this category for which purpose.
Sharing & Disclosure · Company commitment
PayPal says it does not sell or share Personal Information for targeted advertising and has not in the prior 12 months
PayPal says it does not "sell" Personal Information or "share" Personal Information for cross-context behavioral or targeted advertising that is subject to non-exempt practices under comprehensive privacy laws in the United States, including for children under 16, and has not done so in the prior 12 months. It notes that some Personal Information collected, processed or disclosed by a financial institution is subject to federal laws such as the Gramm-Leach-Bliley Act, and refers to the Notice for Consumers of Financial Products and Services for rights under United States federal law.
Details not recorded for this card
Supporting quotations
“Sale” and “Sharing” of Personal Information
PayPal does not “sell” Personal Information or “share” Personal Information for cross-context behavioral or targeted advertising that is subject to non-exempt practices under comprehensive privacy laws in the United States, including for children under the age of 16, and has not done so in the prior 12 months.
Some Personal Information collected, processed, or disclosed by a financial institution are subject to federal laws, such as the Gramm-Leach-Bliley Act.
Qualifications & exceptions
The statement is limited to practices "subject to non-exempt" rules under comprehensive US privacy laws.
Covers the prior 12 months.
Not stated here
The statement does not say how "sell" and "share" are treated for practices that are exempt under those laws.
Legal Rights & Agreement Rules · Company commitment
PayPal provides metrics on how it handled privacy rights requests under the CCPA
PayPal says it provides its metrics required under the CCPA relating to how it handled privacy rights requests, through a linked page.
Details not recorded for this card
Supporting quotations
CCPA Privacy Rights Reporting
PayPal provides its
required under the CCPA relating to how it handled privacy rights requests.
Not stated here
The linked metrics page is not supplied here, so the metrics themselves are not stated.
Legal Rights & Agreement Rules · Restriction or exception
Federal financial notice excludes Unbranded Payment Services and uses the Gramm-Leach-Bliley definition
The Notice for Consumers of Financial Products and Services does not apply to Unbranded Payment Services, and for that part of the Privacy Statement "personal information" has the meaning given to it by the Gramm-Leach-Bliley Act. The notice is dated "Rev. September 28, 2026".
Details not recorded for this card
Supporting quotations
Notice for Consumers of Financial Products and Services
The following Notice for Consumers of Financial Products and Services does not apply to Unbranded Payment Services.
the definition of "personal information" for this portion of the Privacy Statement has the meaning given to it by the Gramm-Leach-Bliley Act.
Rev. September 28, 2026
Unbranded Payment Services means when you are interacting with and making payments to Partners and Merchants using our card processing and/or ACH origination services that do not carry the PayPal brand or when you use our Braintree services.
Qualifications & exceptions
Does not apply to Unbranded Payment Services (card processing and/or ACH origination not carrying the PayPal brand, or Braintree services).
"Personal information" in this notice follows the Gramm-Leach-Bliley Act definition.
Federal notice: PayPal collects and shares data such as SSN and credit history, even after you stop being a customer
The federal-law notice ("FACTS: What does PayPal do with your personal information?") says financial companies choose how they share personal information, that federal law gives consumers the right to limit some but not all sharing, and that federal law requires PayPal to tell you how it collects, shares and protects personal information. It says the types of personal information collected and shared depend on the product or service you have with PayPal and can include Social Security number and account balances, payment or transaction history, and credit history or credit scores. When you are no longer a customer, PayPal says it continues to share your information as described in the notice.
Details not recorded for this card
Supporting quotations
FACTS WHAT DOES PAYPAL DO WITH YOUR PERSONAL INFORMATION?
Financial companies choose how they share your personal information. Federal law gives consumers the right to limit some but not all sharing. Federal law also requires us to tell you how we collect, share, and protect your personal information.
The types of personal information we collect and share depend on the product or service you have with us. This information can include:
Social Security number and account balances
Payment history or transaction history
Credit history or credit scores
When you are no longer our customer, we continue to share your information as described in this notice.
What?
Qualifications & exceptions
The types collected and shared depend on the product or service.
Sharing continues after you are no longer a customer.
Not stated here
The sharing choices are in the table that follows this passage, covered in the next section.
Sharing & Disclosure · Context
Federal notice: financial companies share customer information to run their business; the table shows what PayPal shares
The federal notice says all financial companies need to share customers' personal information to run their everyday business. The table that follows lists the reasons financial companies can share, the reasons PayPal chooses to share, and whether you can limit the sharing.
Details not recorded for this card
Supporting quotations
How? All financial companies need to share customers' personal information to run their everyday business.
we list the reasons financial companies can share their customers' personal information; the reasons PayPal chooses to share; and whether you can limit this sharing.
Sharing & Disclosure · Company practice
Federal notice table: PayPal shares for everyday business and marketing, and you cannot limit these
The table has three columns: reasons we can share, whether PayPal shares, and whether you can limit this sharing. Each row is a single block in the source with the answers at the end. For everyday business purposes (such as processing transactions, maintaining accounts, responding to court orders and legal investigations, or reporting to credit bureaus), PayPal shares: Yes; you can limit: No. For PayPal's own marketing purposes (to offer its products and services to you): Yes; No. For joint marketing with other financial companies: Yes; No.
Details not recorded for this card
Supporting quotations
Reasons we can share your personal information Does PayPal share? Can you limit this sharing?
For our everyday business purposes – such as to process your transactions, maintain your account(s), respond to court orders and legal investigations, or report to credit bureaus Yes No
For our marketing purposes – to offer our products and services to you Yes No
For joint marketing with other financial companies Yes No
Qualifications & exceptions
The answers are read in the order of the header columns: "Does PayPal share?" then "Can you limit this sharing?".
Not stated here
The source puts both answers at the end of each row in one block; the column assignment follows the header order.
Sharing & Disclosure · Company practice
Federal notice table: affiliates get transaction data, not credit data; you can limit nonaffiliate marketing
Continuing the table: for affiliates' everyday business purposes using information about your transactions and experiences, PayPal shares: Yes; you can limit: No. For affiliates' everyday business purposes using information about your creditworthiness: No; "We don't share". For affiliates to market to you: No; "We don't share". For nonaffiliates to market to you: Yes; Yes, so you can limit this sharing.
Details not recorded for this card
Supporting quotations
For our affiliates' everyday business purposes – information about your transactions and experiences Yes No
For our affiliates' everyday business purposes – information about your creditworthiness No We don't share
For our affiliates to market to you No We don't share
For our nonaffiliates to market to you Yes Yes
Qualifications & exceptions
The answers are read in the order of the header columns: "Does PayPal share?" then "Can you limit this sharing?".
Not stated here
The source puts both answers at the end of each row in one block; the column assignment follows the header order.
Account & Service Control · User right or choice
Federal notice: limit sharing in Data and Privacy settings or by phone; new customers' sharing can begin after 30 days
To limit sharing, you may limit certain sharing by logging into your PayPal Account and editing your preferences in the Data and Privacy setting, or call 1-888-221-1161 to limit all sharing where permitted. For new customers, PayPal can begin sharing information 30 days from the date it sent the notice; when you are no longer a customer it continues to share as described. PayPal says you can contact it at any time to limit its sharing. For questions, call customer service at 1-888-221-1161 or use its privacy contact page.
Details not recorded for this card
Supporting quotations
To limit our sharing
You may limit certain sharing by logging into you PayPal Account and editing your preferences in the Data and Privacy setting.
Call 1-888-221-1161 to limit all sharing where permitted.
If you are a new customer, we can begin sharing your information 30 days from the date we sent this notice.
However, you can contact us at any time to limit our sharing.
Questions? Call our customer service at 1-888-221-1161 or visit us at
Qualifications & exceptions
Online settings limit "certain" sharing; the phone route is for limiting "all sharing where permitted".
New customers: sharing can begin 30 days after the notice was sent.
Not stated here
The passage does not say which sharing cannot be limited beyond the table's "No" answers.
Legal Rights & Agreement Rules · Context
Federal notice is provided by PayPal, Inc. for personal PayPal and Xoom accounts and Fastlane profiles
The notice says it is provided by PayPal, Inc. and applies to your personal PayPal and Xoom accounts and Fastlane profile.
Details not recorded for this card
Supporting quotations
Who we are
This privacy notice is provided by PayPal, Inc. and is applicable to your personal PayPal and Xoom accounts, and Fastlane profile.
Qualifications & exceptions
Applies to personal PayPal and Xoom accounts and Fastlane profiles.
Security & Safeguards · Company commitment
Federal notice: PayPal protects information with security measures that comply with federal law
To protect personal information from unauthorized access and use, PayPal says it uses security measures that comply with federal law, including computer safeguards and secured files and buildings.
Details not recorded for this card
Supporting quotations
What we do
To protect your personal information from unauthorized access and use, we use security measures that comply with federal law. These measures include computer safeguards and secured files and buildings.
Qualifications & exceptions
Measures are described as complying with federal law and include (not limited to) the named safeguards.
Data Access & Collection · Company practice
Federal notice: information is collected when you open accounts, use cards or send money, and from credit bureaus
PayPal says it collects your personal information, for example, when you open an account or provide account information, use your credit or debit card or give contact information, or use your PayPal and/or Xoom account to tell it who receives money and where to send it. It also collects personal information from others, such as credit bureaus, affiliates or other companies.
Details not recorded for this card
Supporting quotations
How does PayPal collect my personal information?
We collect your personal information, for example, when you
open an account or provide account information
use your credit or debit card or give us your contact information
use your PayPal, and/or Xoom account to tell us who receives the money
use your PayPal, and/or Xoom account to tell us where to send the money
We also collect your personal information from others, such as credit bureaus, affiliates, or other companies.
Qualifications & exceptions
Examples only ("for example"); others sources are "such as credit bureaus, affiliates, or other companies".
Account & Service Control · Context
Federal law lets you limit only three kinds of sharing; state laws and companies may give more rights
PayPal explains you cannot limit all sharing because federal law gives you the right to limit only: sharing information about your creditworthiness for affiliates' everyday business purposes; affiliates using your information to market to you; and sharing for nonaffiliates to market to you. State laws and individual companies may give additional rights to limit sharing, and the notice points to the state-law information below.
Details not recorded for this card
Supporting quotations
Why can't I limit all sharing?
Federal law gives you the right to limit only
sharing information about your creditworthiness for affiliates' everyday business purposes
affiliates from using your information to market to you
sharing for nonaffiliates to market to you
State laws and individual companies may give you additional rights to limit sharing.
Qualifications & exceptions
Federal rights limited to the three listed kinds of sharing; state laws and companies may add more.
Sharing & Disclosure · Context
Federal notice defines affiliates, nonaffiliates and joint marketing; Bill Me Later is named as an affiliate
The notice defines affiliates as companies related by common ownership or control (financial and nonfinancial) and names Bill Me Later, Inc. as an affiliate. Nonaffiliates are companies not related by common ownership or control; those PayPal shares personal information with include service providers performing services on its behalf. Joint marketing is a formal agreement between nonaffiliated financial companies that together market financial products or services to you; PayPal's partners include financial companies and banks.
Details not recorded for this card
Supporting quotations
Affiliates
Companies related by common ownership or control. They can be financial and nonfinancial companies.
Our affiliates include Bill Me Later, Inc.
Nonaffiliates
Companies not related by common ownership or control. They can be financial and nonfinancial companies.
Nonaffiliates with which we share personal information include service providers that perform services or functions on our behalf.
A formal agreement between nonaffiliated financial companies that together market financial products or services to you. Our joint marketing partners include financial companies and banks.
Qualifications & exceptions
Nonaffiliate and joint marketing examples are described with "include", so are not stated to be complete.
Sharing & Disclosure · Company practice
Federal notice: data may be transferred abroad; sharing of pre-November 27, 2024 data depends on your preferences
PayPal says it may transfer Personal Information to other countries, for example for customer service or to process transactions. For existing customers who had a PayPal account before November 27, 2024, it says it only shares personal information collected after November 27, 2024, "unless you opt-out" (the source wording; it does not say what opting out changes here). It adds that it may share information from earlier in the account, for better personalization, if you affirmatively consent by editing your preferences in the Data and Privacy settings. For customers who opened an account after November 27, 2024, PayPal can begin sharing information associated with the account, and continues to share it as described after you are no longer a customer.
Details not recorded for this card
Supporting quotations
We may transfer Personal Information to other countries, for example, for customer service or to process transactions.
If you are an existing PayPal customer who had a PayPal account before November 27, 2024, we only share personal information collected after November 27, 2024, unless you opt-out.
We may share information from earlier in your account, which allows for even better personalization, if you affirmatively consent by editing your preferences in your Data and Privacy settings.
If you are a customer who opened a PayPal account after November 27, 2024, we can begin sharing information associated with your account.
Other important information
Qualifications & exceptions
Applies to existing customers with accounts before November 27, 2024, and separately to customers who opened accounts afterward.
Earlier information may be shared if you affirmatively consent in your Data and Privacy settings.
Not stated here
The phrase "unless you opt-out" appears next to a sharing limit and the source does not explain what opting out would change for pre-November 27, 2024 information.
Legal Rights & Agreement Rules · Procedure
Federal notice points to the general Statement and a California, North Dakota and Vermont notice
The notice refers readers to the general Privacy Statement for PayPal's Personal Information handling practices and other rights under privacy laws for information not covered by the Gramm-Leach-Bliley Act. It also refers to a California, North Dakota, and Vermont Supplemental Financial Privacy Notice for state financial privacy laws, and says to contact PayPal with questions.
Details not recorded for this card
Supporting quotations
Other Privacy Rights: Please see our general
to learn more about our Personal Information handling practices and other rights you may have under privacy laws for Personal Information that is not covered by the Gramm-Leach-Bliley Act.
Contact us if you have questions about our Privacy Statement, this consumer notice, or your Personal Information.
Not stated here
The linked Supplemental Financial Privacy Notice is not supplied here, so what it says about state rights is not stated.
Sharing & Disclosure · Company commitment
California mailing address: sharing limited to what California law permits, such as consent or servicing
If your PayPal or Xoom account or Fastlane profile has a California mailing address, PayPal says it will not share Personal Information it collects about you except to the extent permitted under California law, including for example with your consent or to service your account. It says it will limit sharing among its companies to the extent required by California law.
Details not recorded for this card
Supporting quotations
California: If your PayPal or Xoom account or Fastlane profile has a California mailing address, we will not share Personal Information we collect about you except to the extent permitted under California law, including for example, with your consent or to service your account.
We will limit sharing among our companies to the extent required by California law.
Qualifications & exceptions
Applies to accounts or profiles with a California mailing address.
Sharing is allowed to the extent permitted under California law, for example with consent or to service the account.
Not stated here
The passage does not list every sharing California law permits.
Sharing & Disclosure · Company commitment
Vermont mailing address: no creditworthiness sharing with affiliates; no nonaffiliate marketing without authorization
If your PayPal, Xoom account or Fastlane profile has a Vermont mailing address, PayPal says it will not disclose information about your creditworthiness to its affiliates and will not disclose your Personal Information, financial information, credit report or health information to nonaffiliated third parties to market to you, other than as permitted by Vermont law, unless you authorize those disclosures. It points to the Customer Service web portal or 1-888-221-1161 for more information about its privacy policies.
Details not recorded for this card
Supporting quotations
Vermont: If your PayPal, Xoom account or Fastlane profile has a Vermont mailing address, we will not disclose information about your creditworthiness to our affiliates and will not disclose your Personal Information, financial information, credit report, or health information to nonaffiliated third parties to market to you, other than as permitted by Vermont law, unless you authorize us to make those disclosures.
or call 1-888-221-1161.
Qualifications & exceptions
Applies to accounts or profiles with a Vermont mailing address.
The nonaffiliate marketing limit is "other than as permitted by Vermont law" and can be lifted if you authorize the disclosures.
Not stated here
The linked Customer Service web portal is not supplied here.
Account & Service Control · User right or choice
Nevada mailing address: you can be placed on PayPal's internal Do Not Call List
If your PayPal, Xoom account or Fastlane profile has a Nevada mailing address, PayPal says it provides this notice pursuant to Nevada law. If you prefer not to receive marketing calls from PayPal, you may be placed on its internal Do Not Call List by calling 1-888-221-1161 or going to its help page. For more information you can contact PayPal at 12312 Port Grace Blvd, La Vista, NE 68128 or the Bureau of Consumer Protection, Office of the Nevada Attorney General, 555 E. Washington St., Suite 3900, Las Vegas, NV 89101 (telephone 1-702-486-3132; email Aginfo@ag.nv.gov).
Details not recorded for this card
Supporting quotations
Nevada: If your PayPal, Xoom account or Fastlane profile has a Nevada mailing address, we are providing this notice pursuant to Nevada law.
If you prefer not to receive marketing calls from PayPal, you may be placed on our internal Do Not Call List by calling 1-888-221-1161 or going to
you can contact PayPal at 12312 Port Grace Blvd, La Vista, NE 68128 or you can contact the Bureau of Consumer Protection, Office of the Nevada Attorney General, 555 E. Washington St., Suite 3900, Las Vegas, NV 89101; telephone number: 1-702-486-3132; email: Aginfo@ag.nv.gov.
Qualifications & exceptions
Applies to accounts or profiles with a Nevada mailing address.
Not stated here
The linked help page is not supplied here.
Account & Service Control · Procedure
Federal notice contact routes: separate numbers and portals for PayPal, Xoom and Fastlane
To talk about your PayPal account, call PayPal Customer Service at 1-888-221-1161 or visit the Customer Service web portal. For a Xoom account, call Xoom Customer Service at 1-877-815-1531 or visit the Help Center web portal. For a Fastlane profile, call PayPal Customer Service at 1-844-705-3555 or visit the Fastlane profile management portal.
Details not recorded for this card
Supporting quotations
To talk about your PayPal account, call PayPal Customer Service at 1-888-221-1161 or visit our
To talk about your Xoom account, call Xoom Customer Service at 1-877-815-1531 or visit our
To talk about your Fastlane profile, call PayPal Customer Service at 1-844-705-3555 or visit your
Qualifications & exceptions
A different number applies to each product.
Not stated here
The linked portals are not supplied here.
Legal Rights & Agreement Rules · Context
UK and EEA section supplements the Statement; the controller is the PayPal entity where you live
This section contains additional disclosures for individuals in the UK and the European Economic Area (EEA) and supplements the Privacy Statement above. The data controller of your Personal Information is the PayPal entity established in the country or jurisdiction where you reside, which can be found in Our Contact Information.
Details not recorded for this card
Supporting quotations
Disclosures for Individuals in the United Kingdom (“UK”) and European Economic Area (“EEA”)
This section contains additional disclosures for individuals in the UK and EEA and supplements PayPal’s Privacy Statement above.
Data Controller
The data controller of your Personal Information is the PayPal entity established in the country or jurisdiction where you reside, which can be found in Our Contact Information.
Qualifications & exceptions
Applies to individuals in the UK and EEA.
Legal Rights & Agreement Rules · Company practice
UK/EEA lawful basis, first row: contract-necessary purposes include Services, payments and identity checks
For individuals in the UK and EEA, a table sets out lawful bases under the General Data Protection Regulation. In the first row, the processing purposes include: to provide our Services, to fulfil relevant agreements with you and to otherwise administer our business relationship with you; to administer your payment for products and the customer relationship; to assess your creditworthiness in connection with your application, confirm your identity and your contact information, and protect you and others from fraud; to confirm your identity, also through the use of electronic signature, and verify your personal and contact details; to prove that transactions have been executed; to establish, exercise or defend a legal claim or collection procedure; to comply with internal procedures; to assess which payment options and services to offer you, for example by carrying out internal and external credit assessments. PayPal says it collects the necessary categories of Personal Information for this row because it considers them necessary to fulfil its pre-contractual and contractual obligations to you and without which you will not be able to use the Services.
Details not recorded for this card
Supporting quotations
We may process your Personal Information in accordance with the lawful bases below under the General Data Protection Regulation Types of Data Lawful basis and special condition for processing (if relevant)
These processing purposes include:
to provide our Services, to fulfil relevant agreements with you and to otherwise administer our business relationship with you;
to administer your payment for products and the customer relationship;
to assess your creditworthiness in connection with your application, confirm your identity and your contact information, and protect you and others from fraud;
to confirm your identity, also through the use of electronic signature, and verify your personal and contact details;
to prove that transactions have been executed;
to establish, exercise or defend a legal claim or collection procedure;
to comply with internal procedures;
to assess which payment options and services to offer you, for example by carrying out internal and external credit assessments;
We collect these categories of Personal Information because we consider them necessary to fulfil our pre-contractual and contractual obligations to you and without which you will not be able to use the Services.
Qualifications & exceptions
Applies to individuals in the UK and EEA (GDPR lawful bases).
Row 1 of the lawful basis table; purposes continue in the next card.
Not stated here
This card lists purposes in the first part of the row; the rest follow in the next card.
Legal Rights & Agreement Rules · Company practice
UK/EEA lawful basis, first row (cont.): analysis, security, legal compliance, Visa+, Fastlane and receipts
Continuing the first row of the lawful basis table, the processing purposes also include: for customer analysis, to administer our Services, and for internal operations, for example troubleshooting, data analysis, testing, research and statistical purposes; to communicate with you in relation to our Services; to promote the security of the Services; to comply with applicable laws, such as AML and bookkeeping laws and rules issued by our designated banks and relevant card networks; Visa+ transaction matching using recipient name and payment information from Visa and participating wallets; use of third-party information to process PayPal World transactions; Fastlane recognition and authorization checks for Fastlane users; and Point of Sale receipts, where contact details you provide may be remembered and pre-filled for later purchases with the same payment card.
Details not recorded for this card
Supporting quotations
for customer analysis, to administer our Services, and for internal operations, for example troubleshooting, data analysis, testing, research and statistical purposes;
to communicate with you in relation to our Services;
to promote the security of the Services;
to comply with applicable laws, such as AML and bookkeeping laws and rules issued by our designated banks and relevant card networks;
specifically for Visa+, we will receive the recipient’s name and payment information from Visa and third-party Visa+ participating digital wallets for the purpose of processing and matching Visa+ payment transactions between participating digital wallets and PayPal;
We will use information from third parties, including third-party wallets, payment networks, and processors, to process PayPal World transactions.
For Fastlane users, we may recognize you as a Fastlane user when you shop on participating Partner and Merchant sites, and we may prompt you to engage in participating Partner or Merchant interactions, such as registering for a store or loyalty account using your Fastlane profile. We will also use your Personal Information and payment method details to determine whether the payment you are making with a participating Partner or Merchant is authorized by you and likely to be successfully authorized by the payment method you choose to use when you make a purchase using details from your Fastlane profile; and
provide receipts in connection with PayPal Point of Sale services. For buyers using our PayPal Point of Sale services (including Venmo Tap to Pay), you may choose to provide us your contact details so that we can send you digital receipts. If you provide your e-mail address or mobile number to a Partner or Merchant who uses PayPal Point of Sale, we may remember your details for the next time you buy something from a Merchant who uses PayPal Point of Sale in its physical store, if you use the same payment card. This is regardless of whether you have previously bought something from this Merchant or not. This means that your e-mail address or mobile number will be pre-filled in the receipt view for your convenience the next time you buy something from a Merchant who uses PayPal Point of Sale in its physical store.
Qualifications & exceptions
Applies to individuals in the UK and EEA.
The Visa+, PayPal World, Fastlane and receipts items repeat practices described in the main Statement.
Data Access & Collection · Company practice
UK/EEA lawful basis table: fifteen listed categories of data are treated as necessary for the Services
In the first row of the lawful basis table, the "Types of Data" column says necessary categories of Personal Information include: Registration and contact information; Identification and signature information; Payment information; Information related to legal requirements; Information you provide when you contact us; Transaction information; Package tracking; Service-specific; Personal Information; Information from CRAs and financial institutions; Information from your connected financial accounts; Information from your use of the Services; Technical usage data; Device information; and; Location data. (The source lists "Personal Information" and "Service-specific" as separate items.)
Details not recorded for this card
Supporting quotations
Necessary categories of Personal Information include:
Registration and contact information;
Identification and signature information;
Payment information;
Information related to legal requirements;
Information you provide when you contact us;
Transaction information;
Package tracking;
Service-specific;
Personal Information;
Information from CRAs and financial institutions;
Information from your connected financial accounts;
Information from your use of the Services;
Technical usage data;
Device information; and
Location data.
Qualifications & exceptions
Applies to individuals in the UK and EEA.
Described as "necessary" categories; the list is introduced with "include".
Not stated here
The table does not define what "Service-specific" means.
Legal Rights & Agreement Rules · Company practice
UK/EEA lawful basis, second row: content, misuse prevention, eligibility and risk analysis purposes
In the second row of the table, the processing purposes listed so far include: to ensure that content is presented in the most effective way for you and your device; to prevent misuse of our Services as part of our efforts to keep our platform safe and secure; to determine your eligibility for and to communicate with you about Services for which you may qualify or that may be of interest to you, for example by carrying out internal credit assessments; to carry out risk analysis, fraud prevention and risk management (e.g., through Automated Decision Making and AI). This row continues in the next section of the source.
Details not recorded for this card
Supporting quotations
These processing purposes include:
to ensure that content is presented in the most effective way for you and your device;
to prevent misuse of our Services as part of our efforts to keep our platform safe and secure;
to determine your eligibility for and to communicate with you about Services for which you may qualify or that may be of interest to you, for example by carrying out internal credit assessments;
to carry out risk analysis, fraud prevention and risk management (e.g., through Automated Decision Making and AI);
Qualifications & exceptions
Applies to individuals in the UK and EEA.
Risk analysis and fraud prevention are described as including Automated Decision Making and AI.
Not stated here
The lawful basis and data types for this row appear after these purposes, in the next section.
Legal Rights & Agreement Rules · Company practice
UK/EEA lawful basis, second row (cont.): improving services, marketing, legal compliance and risk management
For individuals in the UK and EEA, the second row of the lawful basis table continues its processing purposes: to manage and improve our Services and for general business development purposes, for example improving risk models to minimize fraud, develop new products and features, for internal operations (e.g., for troubleshooting), data analysis, testing, research, statistical purposes, and explore new business opportunities; to keep your account and financial information up to date; for marketing, product and customer analysis, including where we partner with others to offer similar services to market about our Partners and testing, for example to improve our product range and optimize our customer offerings; to comply with applicable laws, such as AML, bookkeeping laws, regulatory capital adequacy requirements, and rules issued by our designated banks and relevant card networks. For example, when we process Personal Information for KYC requirements, to prevent, detect and investigate money laundering, terrorist financing and fraud. We also carry out sanction screening, report to tax authorities, police enforcement authorities, enforcement authorities, supervisory authorities where we are not compelled by applicable laws but where we have a good faith belief that sharing the information is necessary to comply with applicable law; to facilitate your participation in competitions, offerings, and events; to conduct financial risk management obligations, such as credit performance and quality, assess product suitability, check your identity, trace and recover debts, and prevent criminal activity, insurance risks and compliance with capital adequacy requirements under applicable law.
Details not recorded for this card
Supporting quotations
to manage and improve our Services and for general business development purposes, for example improving risk models to minimize fraud, develop new products and features, for internal operations (e.g., for troubleshooting), data analysis, testing, research, statistical purposes, and explore new business opportunities;
to keep your account and financial information up to date;
for marketing, product and customer analysis, including where we partner with others to offer similar services to market about our Partners and testing, for example to improve our product range and optimize our customer offerings;
to comply with applicable laws, such as AML, bookkeeping laws, regulatory capital adequacy requirements, and rules issued by our designated banks and relevant card networks. For example, when we process Personal Information for KYC requirements, to prevent, detect and investigate money laundering, terrorist financing and fraud. We also carry out sanction screening, report to tax authorities, police enforcement authorities, enforcement authorities, supervisory authorities where we are not compelled by applicable laws but where we have a good faith belief that sharing the information is necessary to comply with applicable law;
to facilitate your participation in competitions, offerings, and events;
to conduct financial risk management obligations, such as credit performance and quality, assess product suitability, check your identity, trace and recover debts, and prevent criminal activity, insurance risks and compliance with capital adequacy requirements under applicable law;
Qualifications & exceptions
Applies to individuals in the UK and EEA.
Reporting to authorities without legal compulsion requires a good faith belief that sharing is necessary to comply with applicable law.
The second row continues its purposes: to process information about your contacts to make it easy for you to find and connect them and improve payment accuracy. By providing us with information about your contacts you certify that you have permission to provide that information to PayPal for the purposes described in this Privacy Statement; to provide you with information, news, and marketing about our Services, including rewards or ads from us or where we partner with others to offer similar services; to associate information about you to identify your use of Services without a PayPal account (e.g., Pay without a PayPal account) or Unbranded Payment Services (e.g., Braintree) and to associate such transactions with your account, if you have one or later establish an account; to remember your preferences for the next time you use the Services, such as which of your payment methods you prefer or whether you choose to receive digital receipts via email or text when you checkout; and; we will use precise geolocation to enhance the security of the Sites and Services. We collect precise geolocation data from Users while they are logged into their financial account. The guest-transaction purpose refers to Pay without a PayPal Account and Unbranded Payment Services as defined in the Statement.
Details not recorded for this card
Supporting quotations
to process information about your contacts to make it easy for you to find and connect them and improve payment accuracy. By providing us with information about your contacts you certify that you have permission to provide that information to PayPal for the purposes described in this Privacy Statement;
to provide you with information, news, and marketing about our Services, including rewards or ads from us or where we partner with others to offer similar services;
to associate information about you to identify your use of Services without a PayPal account (e.g., Pay without a PayPal account) or Unbranded Payment Services (e.g., Braintree) and to associate such transactions with your account, if you have one or later establish an account;
to remember your preferences for the next time you use the Services, such as which of your payment methods you prefer or whether you choose to receive digital receipts via email or text when you checkout; and
we will use precise geolocation to enhance the security of the Sites and Services. We collect precise geolocation data from Users while they are logged into their financial account.
Pay without a PayPal Account means our Services may be accessed by individuals without using a PayPal account, a Fastlane profile, or the Unbranded Payment Services.
Unbranded Payment Services means when you are interacting with and making payments to Partners and Merchants using our card processing and/or ACH origination services that do not carry the PayPal brand or when you use our Braintree services.
Users means other account holders and non-account holders of the PayPal Services.
Qualifications & exceptions
Applies to individuals in the UK and EEA.
You certify permission for contact information you provide.
Precise geolocation is collected from Users while logged into their financial account.
UK/EEA lawful basis, second row: necessary data categories include vulnerability information and location data
In the second row, the "Types of Data" column says necessary categories of Personal Information include: Registration and contact information; Identification and signature information; Payment information; Information related to legal requirements; Information you provide when you contact us including information related to your vulnerability; Transaction information; Package tracking; Service-specific Personal Information; Information from CRAs and financial institutions; Information from your connected financial accounts; Information from your use of the Services; Technical usage data; Device information; and Location data. This row adds information related to vulnerability to the contact category.
Details not recorded for this card
Supporting quotations
Necessary categories of Personal Information include:
Registration and contact information;
Identification and signature information;
Payment information;
Information related to legal requirements;
Information you provide when you contact us including information related to your vulnerability;
Transaction information;
Package tracking;
Service-specific Personal Information;
Information from CRAs and financial institutions;
Information from your connected financial accounts;
Information from your use of the Services;
Technical usage data;
Device information; and Location data.
Qualifications & exceptions
Applies to individuals in the UK and EEA.
Not stated here
The table does not define "Service-specific Personal Information".
Legal Rights & Agreement Rules · Company practice
UK/EEA: legitimate interest in a secure, innovative service and tailored ads, unless overridden
For the second row, the lawful basis column says PayPal has a legitimate interest in ensuring it remains a secure financial service, continuing to offer innovative services of interest to you, and optimizing sales efforts by tailoring services to your interests, including ads and offers you may be shown. It does this where its legitimate interests are not overridden by the interests or fundamental rights and freedoms of the data subject.
Details not recorded for this card
Supporting quotations
We have a legitimate interest in ensuring that PayPal remains a secure financial service and continuing to offer services that are innovative and of interest to you as well as to optimize our sales efforts by tailoring our services to your interests including ads and offers you may be shown.
We do this where our legitimate interests are not overridden by the interests or fundamental rights and freedoms of the data subject.
Qualifications & exceptions
Applies to individuals in the UK and EEA.
Relied on only where not overridden by the data subject's interests or fundamental rights and freedoms.
Legal Rights & Agreement Rules · Company practice
UK/EEA lawful basis, third row: services, identity, legal claims, misuse prevention, risk analysis and legal compliance
The third row of the lawful basis table lists these processing purposes: to provide our Services and products; to verify your identity, also for signature purposes, and verify your personal and contact details; to establish, exercise or defend a legal claim or collection procedure; to prevent misuse of our Services as part of our efforts to keep our platform safe and secure; to carry out risk analysis, fraud prevention and risk management (e.g., through Automated Decision Making and AI); and; to comply with applicable laws, such as AML and bookkeeping laws and regulatory capital adequacy requirements and rules issued by our designated banks and relevant card networks. For example, when we process Personal Information for KYC requirements, to prevent, detect and investigate money laundering, terrorist financing and fraud. We also carry out sanction screening, and report to tax authorities, police enforcement authorities, enforcement authorities, and supervisory authorities.
Details not recorded for this card
Supporting quotations
These processing purposes include:
to provide our Services and products;
to verify your identity, also for signature purposes, and verify your personal and contact details;
to establish, exercise or defend a legal claim or collection procedure;
to prevent misuse of our Services as part of our efforts to keep our platform safe and secure;
to carry out risk analysis, fraud prevention and risk management (e.g., through Automated Decision Making and AI); and
to comply with applicable laws, such as AML and bookkeeping laws and regulatory capital adequacy requirements and rules issued by our designated banks and relevant card networks. For example, when we process Personal Information for KYC requirements, to prevent, detect and investigate money laundering, terrorist financing and fraud. We also carry out sanction screening, and report to tax authorities, police enforcement authorities, enforcement authorities, and supervisory authorities.
Qualifications & exceptions
Applies to individuals in the UK and EEA.
Not stated here
The lawful basis for this row is shown in a later cell of the table, in the next section of the source.
Data Access & Collection · Company practice
UK/EEA lawful basis, third row: necessary data categories listed so far
In the third row, the "Types of Data" column says necessary categories of Personal Information include: Registration and contact information; Identification and signature information; Payment information; Information related to legal requirements; Information you provide when you contact us; Transaction information; Package tracking; Service-specific Personal Information; Information from CRAs and financial institutions; Information from your connected financial accounts; the list continues in the next section with information from your use of the Services.
Details not recorded for this card
Supporting quotations
Necessary categories of Personal Information include:
Registration and contact information;
Identification and signature information;
Payment information;
Information related to legal requirements;
Information you provide when you contact us;
Transaction information;
Package tracking;
Service-specific Personal Information;
Information from CRAs and financial institutions;
Information from your connected financial accounts;
Information from your use of the Services;
Qualifications & exceptions
Applies to individuals in the UK and EEA.
Not stated here
The remaining items and the row's lawful basis appear in the next section of the source.
Legal Rights & Agreement Rules · Company practice
UK/EEA lawful basis, third row: legal obligation applies where processing is necessary to comply with law
The third row of the lawful basis table lists these remaining necessary data categories: Information from your use of the Services; Technical usage data; Device information; and; Location data. Its lawful basis column says PayPal has a legal obligation under applicable laws to conduct certain processing activities, and does this where necessary to comply with applicable laws.
Details not recorded for this card
Supporting quotations
Information from your use of the Services;
Technical usage data;
Device information; and
Location data.
We have a legal obligation under applicable laws to conduct certain processing activities. We do this where it is necessary to comply with applicable laws.
Information from your connected financial accounts;
Device Information means data that can be automatically collected from any device used to access the Services.
Qualifications & exceptions
Applies to individuals in the UK and EEA.
Relied on "where it is necessary to comply with applicable laws".
The fourth row of the lawful basis table lists these processing purposes: participate in certain features that while not necessary for use of the Services may be of interest to you, such as syncing your contact list to your account; providing biometric data for identification purposes; certain targeted advertising; linking your email account for package tracking; linking any non-financial or financial accounts, such as social network accounts, mail accounts, or bank, card, or investment accounts you agree to link to facilitate payments or for other purposes for which you agree to link such external account; or; Connecting to a third party platform or third party wallet; and; if you agree to let us track your precise geolocation, we can customize our Services by using the right language and personalizing content such as providing location-based options, functionality or offers, ads and search results. Even if you don’t allow us to track your precise location, we may still use your address to send you location-based options recommended by businesses that are near your address. As in the main Statement, personalization from precise location happens if you agree, while address-based location options may still be sent if you do not.
Details not recorded for this card
Supporting quotations
These processing purposes include:
participate in certain features that while not necessary for use of the Services may be of interest to you, such as syncing your contact list to your account;
providing biometric data for identification purposes;
certain targeted advertising;
linking your email account for package tracking;
linking any non-financial or financial accounts, such as social network accounts, mail accounts, or bank, card, or investment accounts you agree to link to facilitate payments or for other purposes for which you agree to link such external account; or
Connecting to a third party platform or third party wallet; and
if you agree to let us track your precise geolocation, we can customize our Services by using the right language and personalizing content such as providing location-based options, functionality or offers, ads and search results. Even if you don’t allow us to track your precise location, we may still use your address to send you location-based options recommended by businesses that are near your address.
Qualifications & exceptions
Applies to individuals in the UK and EEA.
Precise geolocation personalization is "if you agree"; address-based options may still be sent otherwise.
Legal Rights & Agreement Rules · Company practice
UK/EEA lawful basis, fourth row: PayPal relies on explicit and voluntary consent for these features
For the fourth row, necessary categories of Personal Information include: Registration and contact information; Identification and signature information; Biometric data; Information from your use of the Services; Technical usage data; Device information; and; Location data. The lawful basis column says that, except as otherwise described above, PayPal relies on your explicit and voluntary consent.
Details not recorded for this card
Supporting quotations
Necessary categories of Personal Information include:
Registration and contact information;
Identification and signature information;
Biometric data;
Information from your use of the Services;
Technical usage data;
Device information; and
Location data.
Except as otherwise described above, we rely on your explicit and voluntary consent.
Qualifications & exceptions
Applies to individuals in the UK and EEA.
"Except as otherwise described above" limits this statement to processing not covered by earlier rows.
Use & Processing · Company commitment
UK/EEA transfers rely on Binding Corporate Rules, adequacy decisions, standard contractual clauses or derogations
For EU residents, PayPal says transfers within its subsidiaries and affiliated companies rely on its Binding Corporate Rules, approved by competent Supervisory Authorities. For any other transfer outside the UK (for UK residents) or the EEA (for EEA residents), it says it will ensure the transfer complies with EU and UK data protection law. In practice it says it will only transfer to a non-EEA or non-UK recipient where (i) the country is adequate under a European Commission or UK Secretary of State decision, (ii) the recipient has signed appropriate contractual terms incorporating the European Commission's Standard Contractual Clauses or the UK ICO's International Data Transfer Agreement or Addendum, or (iii) a data transfer derogation applies, for example where you have consented.
Details not recorded for this card
Supporting quotations
International Transfers of Personal Information
When we transfer Personal Information of EU residents within PayPal subsidiaries and affiliated companies, we rely on our
which have been approved by competent Supervisory Authorities.
For any other transfer of Personal Information to a country outside of the UK (for UK residents) or the EEA (for EEA residents) we will ensure that any such transfers are compliant with EU and UK data protection law, as applicable.
In practice, this means that we will only transfer your Personal Information to a non-EEA or non-UK recipient where: (i) the recipient is located in a country that the European Commission has decided is adequate to receive Personal Information from the EEA or the UK Secretary of State has decided is adequate to receive Personal Information from the UK (as applicable); (ii) the recipient has signed appropriate contractual terms with us that incorporate the European Commission’s
(iii) a data transfer derogation applies (for example, where you have consented to the transfer of your personal information).
Qualifications & exceptions
Applies to UK and EEA residents.
The Binding Corporate Rules rely is described for EU residents.
Transfers are limited to the three listed routes ("only transfer ... where").
Not stated here
The linked Binding Corporate Rules, Standard Contractual Clauses and ICO documents are not supplied here, so what they require is not stated.
Account & Service Control · User right or choice
UK and EEA individuals have rights to be informed, access, correct, erase, restrict and port their data
Individuals in the UK and EEA benefit from these rights, further illustrated in Your Data Protection Rights: The right to be informed about the collection and use of your Personal Information; The right to access and request copies of your Personal Information; The right to correct your Personal Information; The right, in certain circumstances, to erase your Personal Information; The right to restrict our processing of your Personal Information in certain circumstances; The right to data portability of your Personal Information by automated means in certain circumstances where we process your Personal Information based on consent, for performance of a contract or where the processing is required to assist you into entering into a contract.
Details not recorded for this card
Supporting quotations
UK and EEA Data Protection Rights
Individuals located in the UK and EEA benefit from the following rights, which are further illustrated in Your Data Protection Rights:
The right to be informed about the collection and use of your Personal Information;
The right to access and request copies of your Personal Information;
The right to correct your Personal Information;
The right, in certain circumstances, to erase your Personal Information;
The right to restrict our processing of your Personal Information in certain circumstances;
The right to data portability of your Personal Information by automated means in certain circumstances where we process your Personal Information based on consent, for performance of a contract or where the processing is required to assist you into entering into a contract.
Qualifications & exceptions
Applies to individuals located in the UK and EEA.
Erasure, restriction and portability apply "in certain circumstances"; portability applies where processing is based on consent, performance of a contract or assisting you into entering a contract.
Account & Service Control · User right or choice
UK and EEA individuals may object to processing, withdraw consent and have automated decisions reviewed
Individuals in the UK and EEA also have: the right to object, in certain circumstances, to processing for tasks in the public interest, official authority, legitimate interests, scientific, historical or statistical research, or direct marketing; the right to withdraw consent, including by opting out of marketing, without affecting earlier consent-based processing or processing on another lawful ground (and, for direct marketing, you can always modify permissions, object and opt out using the unsubscribe link or account settings); and the right to have automated decisions reviewed and to be informed of any Automated Decision Making, including Profiling, and the logic involved, its significance and envisaged consequences.
Details not recorded for this card
Supporting quotations
The right to object to processing of your Personal Information in certain circumstances where we process your Personal Information for tasks carried out in the public interest, in the exercise of an official authority, for our legitimate interests, for scientific or historical research, or statistical purposes, or for direct marketing purposes;
The right to withdraw your consent to the Processing of your Personal Information, including through opting-out of marketing communications
If we use your Personal Information for direct marketing, you can always modify your permissions, object and opt out of future direct marketing messages using the unsubscribe link in electronic communications or through your account settings;
The right to have automated decisions reviewed and to be informed of the existence of any Automated Decision Making, including any Profiling, and the logic involved, significance of and the envisaged consequences of any such processing;
Profiling means analysis of an individual’s personality, behavior, interest and habits to make predictions or decisions about them
Qualifications & exceptions
Applies to individuals located in the UK and EEA.
The objection right applies "in certain circumstances".
Legal Rights & Agreement Rules · User right or choice
UK and EEA: you may complain to your Supervisory Authority; PayPal asks you to contact it first but does not require it
You have the right to complain to your local Supervisory Authority about PayPal's use of your Personal Information. In the EEA, you may lodge a complaint with PayPal's lead supervisory authority, the Luxembourg National Commission for Data Protection (CNPD), by post at the address given. In the UK, you may lodge a complaint with your local data protection authority, the Information Commissioner's Office (address given in Manchester). While you are not required to, PayPal asks that you contact it first to give it the opportunity to address your concerns directly before speaking with your Supervisory Authority.
Details not recorded for this card
Supporting quotations
In addition, you have the right to complain to your local Supervisory Authority about our use of your Personal Information.
In EEA, you may lodge a complaint with our lead supervisory authority for data protection, Luxemburg National Commission for Data Protection (CNPD)
In the UK, you may also lodge a complaint with your local data protection authority, which is the Information Commissioner’s Office:
address: ICO Head Office, 4th Floor, No.3 Circle Square, 5 Hawkshaw Street, Manchester, M1 7BL.
However, while you are not required to do so, we ask that you contact us first to give us the opportunity to address your concerns directly before speaking with your Supervisory Authority.
Qualifications & exceptions
Applies to individuals in the UK and EEA.
Contacting PayPal first is requested, not required.
Sharing & Disclosure · Procedure
UK and EEA: a linked list names the credit reporting agencies used in each country, and you can contact them directly
PayPal refers to a list of the CRAs used in the UK and EEA, including the identities of the CRAs used in each relevant country and a link to their privacy notice showing how they use and share Personal Information and how long they retain it. It says you can contact the CRAs operating in your country directly with questions about their services, your credit score or the information they hold about you, or to exercise your data subject rights towards them.
Details not recorded for this card
Supporting quotations
List of CRAs Used in the UK and EEA
used in the UK and EEA, including identities of the CRAs used in each relevant country, and a link to their privacy notice from which you can determine the ways in which they use and share Personal Information, including how long they will retain such Personal Information.
You can contact the CRAs operating in the country in which you live directly if you have any questions regarding their services, your credit score or the information they have stored about you, or if you wish to exercise your data subject rights towards them.
Qualifications & exceptions
Applies to the UK and EEA.
Not stated here
The linked list of CRAs is not supplied here, so the CRAs and their retention periods are not stated.
Sharing & Disclosure · Permission or license
EEA banking notice: PayPal lists third-party providers; by accepting the Statement you agree to transfers
For EEA users, PayPal says the Luxembourg laws it is subject to (data protection and bank secrecy) require a higher degree of transparency than most other EU laws, so it lists the third-party service providers and business partners to whom it may disclose Personal Information, with the purpose and type of information disclosed. It states that by accepting this Privacy Statement and maintaining an account with PayPal, you expressly agree to the transfer of your Personal Information to those third parties for the purposes listed.
Details not recorded for this card
Supporting quotations
Banking Regulations Notice for Users in the EEA
In general, the Luxembourg laws to which PayPal's handling of user Personal Information is subject (data protection and bank secrecy) require a higher degree of transparency than most other EU laws.
PayPal has listed in this Privacy Statement the third party service providers and business partners to whom we may disclose your Personal Information, together with the purpose of disclosure and type of information disclosed.
By accepting this Privacy Statement and maintaining an account with PayPal, you expressly agree to the transfer of your Personal Information to those third parties for the purposes listed.
Qualifications & exceptions
Applies to Users in the EEA.
The agreement is described as arising from accepting the Statement and maintaining an account.
Not stated here
The linked third-party list is not supplied here, so the third parties and purposes are not stated.
Legal Rights & Agreement Rules · Permission or license
EEA banking notice: the third-party list may change quarterly; no objection within 30 days counts as acceptance
For EEA users, PayPal says it may update the third-party list on the first business day of each quarter (January, April, July and October) and will only start transferring information to new entities, for new purposes or for new information types after 30 days from publication. It says you should review the list each quarter, and that if you do not object within 30 days of publication you are deemed to have accepted the changes to the list and to the Privacy Statement; if you disagree you may close your account and stop using the services. It adds that information may need to be transferred to other PayPal companies or entities acting as payment providers, processors or account holders, that those entities may be subject to local laws requiring disclosure to authorities, and that your use of the PayPal Services constitutes your consent to the transfer.
Details not recorded for this card
Supporting quotations
PayPal may update the list of third parties referred to above on the first business day of every quarter (January, April, July and October).
PayPal will only start transferring any Personal Information to any of the new entities or for the new purposes or Personal Information types indicated in each update after 30 days from the date when that list is made public through this Privacy Statement.
If you do not object to the new Personal Information disclosure, within 30 days after the publication of the updated list of third parties, you are deemed to have accepted the changes to the list and to this Privacy Statement. If you do not agree with the changes, you may close your account and stop using our services.
You acknowledge that according to their local legislation, such entities may be subject to laws, regulations, inquiries, investigations, or orders which may require the disclosure of information to the relevant authorities of the relevant country. Your use of the PayPal Services constitutes your consent to our transfer of such information to provide you the PayPal Services.
Qualifications & exceptions
Applies to Users in the EEA.
New transfers begin only after 30 days from publication.
Deemed acceptance applies if you do not object within 30 days after publication.
Not stated here
The passage does not say how to object other than closing your account.
Sharing & Disclosure · Permission or license
EEA banking notice: you direct PayPal to disclose information to police, regulators and others (FATCA, CRS)
For EEA users, PayPal says you agree to and direct it to disclose necessary information to the police and other law enforcement agencies, security forces, competent governmental, intergovernmental or supranational bodies, and competent agencies, departments, regulatory or self-regulatory authorities or organisations (including the Agencies in the linked Third Party Provider List) and other third parties, including PayPal Group companies, that (i) it is legally compelled and permitted to comply with, including the Luxembourg laws of 24 July 2015 on FATCA and 18 December 2015 on CRS, (ii) it has reason to believe it is appropriate to cooperate with in investigations of fraud or other illegal activity, or (iii) to conduct investigations of violations of the User Agreement (including your funding source or credit or debit card provider).
Details not recorded for this card
Supporting quotations
Specifically, you agree to and direct PayPal to do any and all of the following with your information:
Disclose necessary information to: the police and other law enforcement agencies; security forces; competent governmental, intergovernmental or supranational bodies; competent agencies, departments, regulatory authorities, self-regulatory authorities or organisations (including, without limitation, the Agencies referenced in the "Agencies" section of the
and other third parties, including PayPal Group companies, that (i) we are legally compelled and permitted to comply with, including but without limitation the Luxembourg laws of 24 July 2015 on the US Foreign Account Tax Compliance Act ("FATCA Law") and 18 December 2015 on the OECD common reporting standard ("CRS Law"); (ii) we have reason to believe it is appropriate for us to cooperate with in investigations of fraud or other illegal activity or potential illegal activity, or (iii) to conduct investigations of violations of our User Agreement
Qualifications & exceptions
Applies to Users in the EEA.
Disclosure covers three listed situations: legal compulsion, cooperation in fraud or illegal-activity investigations, and User Agreement investigations.
Not stated here
The linked Third Party Provider List and its "Agencies" section are not supplied here.
Sharing & Disclosure · Company practice
EEA banking notice: FATCA/CRS notice, and shared use of information to manage fraud and other risk
If you are covered by the FATCA or CRS Law, PayPal says it is required to give you notice of the information about you that it may transfer to various authorities. It also says that PayPal and other organisations, including parties that accept PayPal, may share, access and use (including from other countries) necessary information, including information recorded by fraud prevention agencies, to assess and manage risk (including to prevent fraud, money laundering and terrorist financing). It invites you to contact it for details of the relevant fraud prevention agencies.
Details not recorded for this card
Supporting quotations
If you are covered by the FATCA or CRS Law, we are required to give you notice of the information about you that we may transfer to various authorities.
We and other organisations, including parties that accept PayPal, may also share, access and use (including from other countries) necessary information (including, without limitation the information recorded by fraud prevention agencies) to help us and them assess and to manage risk (including, without limitation, to prevent fraud, money laundering and terrorist financing).
Please contact us if you want to receive further details of the relevant fraud prevention agencies.
Qualifications & exceptions
Applies to Users covered by the FATCA or CRS Law and the EEA banking notice.
Information may be accessed "including from other countries".
Not stated here
The FATCA and CRS Law information referred to and the linked third-party list are not supplied here, so what is transferred to authorities is not stated.
Sharing & Disclosure · Permission or license
EEA banking notice: account information may go to IP owners with claims under EU member state law
For EEA users, PayPal says it may disclose Account Information to intellectual property right owners if, under the applicable national law of an EU member state, they have a claim against PayPal for an out-of-court information disclosure due to an infringement of their intellectual property rights for which PayPal Services have been used. The examples given are provisions of the German Trademark Act and the German Copyright Act (not supplied in this document).
Details not recorded for this card
Supporting quotations
Disclose Account Information to intellectual property right owners if under the applicable national law of an EU member state they have a claim against PayPal for an out-of-court information disclosure due to an infringement of their intellectual property rights for which PayPal Services have been used
Qualifications & exceptions
Applies where an EU member state's national law gives the owner such a claim against PayPal.
Not stated here
The cited German Trademark Act and German Copyright Act provisions are external laws and are not supplied here.
Sharing & Disclosure · Permission or license
EEA banking notice: information may be disclosed to credit card associations or in civil or criminal legal process
For EEA users, PayPal says it may disclose necessary information in response to the requirements of the credit card associations or a civil or criminal legal process.
Details not recorded for this card
Supporting quotations
Disclose necessary information in response to the requirements of the credit card associations or a civil or criminal legal process.
Qualifications & exceptions
Applies to the EEA banking notice.
Sharing & Disclosure · User right or choice
EEA banking notice: your name and PayPal link appear in a user directory, which can be turned off in profile settings
For EEA users, PayPal says it may disclose your name and PayPal link in the PayPal user directory. Your details will be confirmed to other PayPal users who search using your name, email address or telephone number, or part of these, to ensure people pay the correct user. This feature can be turned off in the PayPal profile settings.
Details not recorded for this card
Supporting quotations
Disclose your name and PayPal link in the PayPal user directory.
Your details will be confirmed to other PayPal users in response to a user searching using your name, email address or telephone number, or part of these details.
This feature can be turned off in the PayPal profile settings.
Qualifications & exceptions
Details are confirmed in response to a search by name, email address, telephone number or part of these.
The feature can be turned off in profile settings.
Sharing & Disclosure · Company practice
EEA banking notice: integration status of merchants may be shared with their third-party partner
For EEA users, if you as a merchant use a third party to access or integrate PayPal, PayPal says it may disclose to that partner necessary information to facilitate and maintain the arrangement, including the status of your PayPal integration, whether you have an active PayPal account and whether you may already be working with a different PayPal integration partner.
Details not recorded for this card
Supporting quotations
If you as a merchant use a third party to access or integrate PayPal, we may disclose to any such partner necessary information for the purpose of facilitating and maintaining such an arrangement
Qualifications & exceptions
Applies to merchants who use a third party to access or integrate PayPal.
Sharing & Disclosure · Company practice
EEA banking notice: Account Information goes to processors, auditors and partners
For EEA users, PayPal says it may disclose necessary information to payment processors, auditors, customer service providers, credit reference and fraud agencies, financial products providers, commercial partners, marketing and public relations companies, operational services providers, group companies, agencies, marketplaces and other third parties, to allow it to provide PayPal Services. It says its list of third parties sets out, under each category, non-exclusive examples of the actual third parties, the purpose and the information disclosed. Except as explicitly stated, it says these third parties are limited by law or by contract from using the information for secondary purposes beyond those for which it was shared.
Details not recorded for this card
Supporting quotations
Disclose necessary information to the payment processors, auditors, customer services providers, credit reference and fraud agencies, financial products providers, commercial partners, marketing and public relations companies, operational services providers, group companies, agencies, marketplaces and other
The purpose of this disclosure is to allow us to provide PayPal Services to you.
except as explicitly stated, these third parties are limited by law or by contract from using the information for secondary purposes beyond the purposes for which the information was shared
Qualifications & exceptions
Applies to the EEA banking notice.
The examples in the list are "non-exclusive".
The secondary-use limit applies "except as explicitly stated".
Not stated here
The linked list of third parties is not supplied here.
Sharing & Disclosure · Company practice
EEA banking notice: information may go to your agent, and aggregated statistics may be shared with partners
For EEA users, PayPal says it may disclose necessary information to your agent or legal representative (such as the holder of a power of attorney you grant or a guardian appointed for you). It may also disclose aggregated statistical data with business partners or for public relations, for example that a specific percentage of users live in Manchester; it says this aggregated information is not tied to Personal Information.
Details not recorded for this card
Supporting quotations
Disclose necessary information to your agent or legal representative (such as the holder of a power of attorney that you grant, or a guardian appointed for you).
Disclose aggregated statistical data with our business partners or for public relations.
However, this aggregated information is not tied to Personal Information.
Qualifications & exceptions
Applies to the EEA banking notice.
Aggregated data is described as not tied to Personal Information.
Sharing & Disclosure · Company practice
EEA banking notice: Account Information shared with unaffiliated third parties for five listed purposes
For EEA users, PayPal says it may share necessary Account Information with unaffiliated third parties for their use for these purposes: fraud prevention and risk management (to help prevent fraud or assess and manage risk); customer service (including to help service accounts or resolve billing or transactional disputes); shipping (in connection with shipping and related services for purchases made using PayPal); legal compliance (to help them comply with anti-money laundering and counter-terrorist financing verification requirements); and service providers under contract that support its business operations, such as fraud prevention, bill collection, marketing, customer service and technology services, whose contracts dictate they only use the information in connection with services performed for PayPal and not for their own benefit.
Details not recorded for this card
Supporting quotations
Share necessary Account Information with unaffiliated
for their use for the following purposes:
Fraud Prevention and Risk Management: to help prevent fraud or assess and manage risk.
Customer Service: for customer service purposes, including to help service your accounts or resolve disputes (e.g., billing or transactional).
Shipping: in connection with shipping and related services for purchases made using PayPal.
Legal Compliance: to help them comply with anti-money laundering and counter-terrorist financing verification requirements.
Service Providers: to enable service providers under contract with us to support our business operations, such as fraud prevention, bill collection, marketing, customer service and technology services. Our contracts dictate that these service providers only use your information in connection with the services they perform for us and not for their own benefit.
Qualifications & exceptions
Applies to the EEA banking notice.
Five purposes are listed; service providers are bound by contract to use the information only for services performed for PayPal.
Not stated here
The linked third-party list is not supplied here.
Sharing & Disclosure · Company practice
UK notice: information may be transferred to PayPal companies and entities that may be subject to local disclosure laws
For users in the UK, PayPal says that to provide the PayPal Services, certain information it collects may need to be transferred to other PayPal related companies or other entities, including those referred to in this section as payment providers, payment processors or account holders (or similar capacities). You acknowledge that, under their local legislation, such entities may be subject to laws, regulations, inquiries, investigations or orders that may require disclosure of information to the relevant authorities of the relevant country.
Details not recorded for this card
Supporting quotations
Notice for Users in the UK
In order to provide the PayPal Services, certain of the information we collect (as set out in this Privacy Statement) may be required to be transferred to other PayPal related companies or other entities
You acknowledge that according to their local legislation, such entities may be subject to laws, regulations, inquiries, investigations, or orders which may require the disclosure of information to the relevant authorities of the relevant country.
Qualifications & exceptions
Applies to users in the UK.
Not stated here
The entities referred to in this section are not named in this passage.
Sharing & Disclosure · Permission or license
UK notice: you acknowledge PayPal may disclose information to police, regulators and others, and share risk data
For users in the UK, PayPal says you acknowledge it may disclose necessary information to the police and other law enforcement agencies, security forces, competent governmental, intergovernmental or supranational bodies, and competent agencies, departments, regulatory or self-regulatory authorities or organisations and other third parties, including PayPal Group companies, that (i) it is legally compelled and permitted to comply with, including laws implementing FATCA and the OECD Common Reporting Standard (CRS), (ii) it has reason to believe it is appropriate to cooperate with in investigations of fraud or other illegal activity, or (iii) to conduct investigations of violations of the User Agreement. If you are covered by FATCA or CRS it must give you notice of the information about you that it may transfer to authorities. PayPal and other organisations, including parties that accept PayPal, may also share, access and use necessary information (including from fraud prevention agencies, and from other countries) to assess and manage risk, and you can contact PayPal for details of the fraud prevention agencies.
Details not recorded for this card
Supporting quotations
Specifically, you acknowledge that PayPal may do any and all of the following with your information:
Disclose necessary information to: the police and other law enforcement agencies; security forces; competent governmental, intergovernmental or supranational bodies; competent agencies, departments, regulatory authorities, self-regulatory authorities or organisations and other third parties, including PayPal Group companies, that (i) we are legally compelled and permitted to comply with, including but without limitation laws implementing the US Foreign Account Tax Compliance Act (“FATCA”) and OECD Common Reporting Standard (“CRS”); (ii) we have reason to believe it is appropriate for us to cooperate with in investigations of fraud or other illegal activity or potential illegal activity, or (iii) to conduct investigations of violations of our User Agreement
If you are covered by FATCA or CRS, we are required to give you notice of the information about you that we may transfer to various authorities.
We and other organisations, including parties that accept PayPal, may also share, access and use (including from other countries) necessary information (including, without limitation the information recorded by fraud prevention agencies) to help us and them assess and to manage risk
Please contact us if you want to receive further details of the relevant fraud prevention agencies.
Qualifications & exceptions
Applies to users in the UK.
Disclosure covers three listed situations: legal compulsion, cooperation in fraud or illegal-activity investigations, and User Agreement investigations.
Not stated here
The information PayPal may transfer under FATCA and CRS is not stated in this passage.
Sharing & Disclosure · Permission or license
UK notice: disclosures to IP owners, card associations and legal process, the user directory, and integration partners
For users in the UK, PayPal says it may disclose account information to intellectual property right owners if, under applicable law, they have a claim against PayPal for an out-of-court information disclosure due to infringement for which PayPal Services were used; disclose necessary information in response to the requirements of credit card associations or a civil or criminal legal process; disclose your name and PayPal link in the user directory, confirmed to other PayPal users who search by name, email address, telephone number or part of these, which can be turned off in the PayPal profile settings; and, if you as a Partner and Merchant use a third party to access or integrate PayPal, disclose to that third party necessary information such as the status of your PayPal integration, whether you have an active PayPal account and whether you may be working with a different integration partner.
Details not recorded for this card
Supporting quotations
Disclose account Information to intellectual property right owners if under applicable law they have a claim against PayPal for an out-of-court information disclosure due to an infringement of their intellectual property rights for which PayPal Services have been used.
Disclose necessary information in response to the requirements of the credit card associations or a civil or criminal legal process.
Disclose your name and PayPal link in the PayPal user directory.
This feature can be turned off in the PayPal profile settings.
If you as a Partner and Merchant use a third party to access or integrate PayPal, we may disclose to any such third party necessary information for the purpose of facilitating and maintaining such an arrangement
Qualifications & exceptions
Applies to users in the UK.
The directory feature can be turned off in the PayPal profile settings.
Sharing & Disclosure · Company practice
UK notice: Account Information goes to processors and partners; agents and aggregated statistics are also covered
For users in the UK, PayPal says it may disclose necessary information to payment processors, auditors, customer service providers, credit reference and fraud agencies, financial products providers, commercial partners, marketing and public relations companies, operational services providers, group companies, agencies, marketplaces and other third parties listed in a linked list, to allow it to provide PayPal Services. Except as explicitly stated, these third parties are limited by law or contract from secondary use. PayPal may also disclose necessary information to your agent or legal representative, and aggregated statistical data to business partners or for public relations, which it says is not tied to Personal Data.
Details not recorded for this card
Supporting quotations
Disclose necessary information to the payment processors, auditors, customer services providers, credit reference and fraud agencies, financial products providers, commercial partners, marketing and public relations companies, operational services providers, group companies, agencies, marketplaces and other third parties listed here.
except as explicitly stated, these third parties are limited by law or by contract from using the information for secondary purposes beyond the purposes for which the information was shared
Disclose necessary information to your agent or legal representative (such as the holder of a power of attorney that you grant, or a guardian appointed for you).
Disclose aggregated statistical data with our business partners or for public relations.
However, this aggregated information is not tied to Personal Data.
Qualifications & exceptions
Applies to users in the UK.
The third-party examples in the list are "non-exclusive".
Not stated here
The list of third parties the passage refers to ("listed here") is not supplied in this document.
Sharing & Disclosure · Company practice
UK notice: account information shared with unaffiliated third parties for five listed purposes
For users in the UK, PayPal says it may share necessary account information with unaffiliated third parties for their use for fraud prevention and risk management, customer service (including servicing accounts or resolving billing or transactional disputes), shipping and related services for purchases made using PayPal, legal compliance (anti-money laundering and counter-terrorist financing verification), and service providers under contract that support its business operations (such as fraud prevention, bill collection, marketing, customer service and technology services) and may only use the information for services performed for PayPal.
Details not recorded for this card
Supporting quotations
Share necessary account information with unaffiliated third parties (listed here) for their use for the following purposes:
Fraud Prevention and Risk Management: to help prevent fraud or assess and manage risk.
Customer Service: for customer service purposes, including to help service your accounts or resolve disputes (e.g., billing or transactional).
Shipping: in connection with shipping and related services for purchases made using PayPal.
Legal Compliance: to help them comply with anti-money laundering and counter-terrorist financing verification requirements.
Service Providers: to enable service providers under contract with us to support our business operations, such as fraud prevention, bill collection, marketing, customer service and technology services. Our contracts dictate that these service providers only use your information in connection with the services they perform for us and not for their own benefit.
Qualifications & exceptions
Applies to users in the UK.
Not stated here
The list of unaffiliated third parties the passage refers to ("listed here") is not supplied in this document.
Legal Rights & Agreement Rules · Context
UK status disclosure: PayPal UK Ltd is FCA-authorised, but some products such as Working Capital are not regulated
PayPal says PayPal UK Ltd is authorised and regulated by the Financial Conduct Authority as an electronic money institution (firm reference number 994790), for regulated consumer credit activities (996405) and for cryptocurrency services (1000741). It says some products and services, such as PayPal Working Capital, are not regulated by the FCA and may offer a lower level of protection, and refers to the product terms. It gives the company number (14741686) and registered office (76 Upper Ground, London SE1 9PZ).
Details not recorded for this card
Supporting quotations
Status Disclosure
PayPal UK Ltd is authorised and regulated by the Financial Conduct Authority (FCA) as an electronic money institution (firm reference number 994790); in relation to its regulated consumer credit activities (firm reference number 996405); and for the provision of cryptocurrency services (firm reference number 1000741).
Some products and services, such as PayPal Working Capital, are not regulated by the FCA and may offer a lower level of protection.
PayPal UK Ltd's company number is 14741686. Its registered office is 76 Upper Ground, London, United Kingdom, SE1 9PZ.
Qualifications & exceptions
Applies to PayPal UK Ltd.
Some products and services are not FCA-regulated and may offer a lower level of protection.
Not stated here
The product terms referred to are not supplied here.
Legal Rights & Agreement Rules · Context
Mexico section supplements the Statement; the controller is the PayPal entity where you live
This section contains additional disclosures for individuals in Mexico and supplements the Privacy Statement above. The data controller of your Personal Information is the PayPal entity established in the country or jurisdiction where you reside, which can be found in Our Contact Information. The section describes primary and secondary purposes for processing your Personal Information.
Details not recorded for this card
Supporting quotations
Disclosures for Individuals in Mexico
This section contains additional disclosures for individuals in Mexico and supplements PayPal’s Privacy Statement above. The data controller of your Personal Information is the PayPal entity established in the country or jurisdiction where you reside, which can be found in Our Contact Information.
Below we describe our primary and secondary purpose for processing your Personal Information.
Qualifications & exceptions
Applies to individuals in Mexico.
Use & Processing · Company practice
Mexico primary purposes: services, payments, creditworthiness, identity, claims and communication
For individuals in Mexico, the primary purposes for processing Personal Information include: to provide our Services, to fulfil relevant agreements with you and to otherwise administer our business relationship with you. to administer your payment for products and the customer relationship; If you are using Fastlane, we will also use your Personal Data and payment method details to determine whether the payment you are making with a participating Partner or Merchant is authorized by you and likely to be successfully authorized by the payment method you choose to use when you make a purchase using details from your Fastlane profile; to assess your creditworthiness in connection with your application, confirm your identity and your contact information, and protect you and others from fraud; to confirm your identity, also through the use of electronic signature, and verify your personal and contact details; to prove that transactions have been executed; to establish, exercise or defend a legal claim or collection procedure; to comply with internal procedures; to assess which payment options and services to offer you, for example by carrying out internal and external credit assessments; for customer analysis, to administer our Services, and for internal operations, for example troubleshooting, data analysis, testing, research and statistical purposes; to communicate with you in relation to our Services.
Details not recorded for this card
Supporting quotations
Primary Purpose Secondary Purpose
The primary purpose for processing your Personal are:
to provide our Services, to fulfil relevant agreements with you and to otherwise administer our business relationship with you. to administer your payment for products and the customer relationship.
If you are using Fastlane, we will also use your Personal Data and payment method details to determine whether the payment you are making with a participating Partner or Merchant is authorized by you and likely to be successfully authorized by the payment method you choose to use when you make a purchase using details from your Fastlane profile.
to assess your creditworthiness in connection with your application, confirm your identity and your contact information, and protect you and others from fraud.
to confirm your identity, also through the use of electronic signature, and verify your personal and contact details.
to prove that transactions have been executed.
to establish, exercise or defend a legal claim or collection procedure.
to comply with internal procedures.
to assess which payment options and services to offer you, for example by carrying out internal and external credit assessments.
for customer analysis, to administer our Services, and for internal operations, for example troubleshooting, data analysis, testing, research and statistical purposes.
to communicate with you in relation to our Services.
Qualifications & exceptions
Applies to individuals in Mexico.
Fastlane users: payment method details are used to determine whether a payment is authorized by you and likely to succeed.
The primary purposes for individuals in Mexico continue: to ensure that content is presented in the most effective way for you and your device; to determine your eligibility for and to communicate with you about Services for which you may qualify or that may be of interest to you to carry out risk analysis, fraud prevention and risk management (e.g., through Automated Decision Making and AI); to improve our Services and for general business development purposes, for example improving risk models to minimize fraud, develop new products and features and explore new business opportunities; To keep your PayPal account and financial information up to date; for marketing, product and customer analysis, including testing, for example to improve our product range and optimize our customer offerings; to comply with applicable laws, bookkeeping laws, regulatory capital adequacy requirements, and rules issued by our designated banks and relevant card networks. For example, when we process Personal Information for KYC requirements, to prevent, detect and investigate money laundering, terrorist financing and fraud. We also carry out sanction screening, report to tax authorities, police enforcement authorities, enforcement authorities, supervisory authorities. to facilitate your participation in competitions, offerings, and events; to conduct financial risk management obligations such as credit performance and quality, insurance risks and compliance with capital adequacy requirements under applicable law; to process information about your contacts to make it easy for you to find and connect them and improve payment accuracy. By providing us with information about your contacts you certify that you have permission to provide that information to PayPal for the purposes described in this Privacy Statement. The source joins some purposes in one block (eligibility with risk analysis, and legal compliance with competitions); they read as separate listed purposes.
Details not recorded for this card
Supporting quotations
to ensure that content is presented in the most effective way for you and your device.
to determine your eligibility for and to communicate with you about Services for which you may qualify or that may be of interest to you to carry out risk analysis, fraud prevention and risk management (e.g., through Automated Decision Making and AI).
to improve our Services and for general business development purposes, for example improving risk models to minimize fraud, develop new products and features and explore new business opportunities.
To keep your PayPal account and financial information up to date.
for marketing, product and customer analysis, including testing, for example to improve our product range and optimize our customer offerings.
to comply with applicable laws, bookkeeping laws, regulatory capital adequacy requirements, and rules issued by our designated banks and relevant card networks. For example, when we process Personal Information for KYC requirements, to prevent, detect and investigate money laundering, terrorist financing and fraud. We also carry out sanction screening, report to tax authorities, police enforcement authorities, enforcement authorities, supervisory authorities. to facilitate your participation in competitions, offerings, and events.
to conduct financial risk management obligations such as credit performance and quality, insurance risks and compliance with capital adequacy requirements under applicable law.
to process information about your contacts to make it easy for you to find and connect them and improve payment accuracy. By providing us with information about your contacts you certify that you have permission to provide that information to PayPal for the purposes described in this Privacy Statement.
Qualifications & exceptions
Applies to individuals in Mexico.
Reporting to authorities is part of the legal compliance purpose; you certify permission for contact information you provide.
Use & Processing · User right or choice
Mexico secondary purposes rely on explicit consent, which you can change in account settings or by ARCO request
For individuals in Mexico, PayPal says it relies on your explicit and voluntary consent to process Personal Information for features that are not necessary to use the Services but may interest you, such as syncing your contact list to your PayPal account, providing biometric data, targeted advertising, or connecting to a third-party platform. You may change your mind about these features at any time through your account settings. Withdrawing consent does not affect the lawfulness of earlier processing, and you can withdraw consent at any time through your use of ARCO Rights.
Details not recorded for this card
Supporting quotations
We rely on your explicit and voluntary consent to process your Personal Information to participate in certain features that while not necessary for use of the Services may be of interest to you, such as syncing your contact list to your PayPal account, providing biometric data, targeted advertising, or connecting to a third-party platform.
You may change your mind about use of these features at any time through your account settings.
withdrawing your consent will not affect the lawfulness of any processing we have conducted prior to your withdrawal.
Qualifications & exceptions
Applies to individuals in Mexico.
Withdrawal does not affect processing done before it.
Account & Service Control · User right or choice
Mexico ARCO rights: access, rectification, deletion, objection, portability and restriction
Notwithstanding the rights in Your Data Protection Rights, PayPal recognizes your ability to exercise rights to access (right to know), rectification (correction or update), deletion (cancellation and erasure), objection (opposition), portability (transferring), and to restrict processing in whole or in part (together, ARCO Rights). With an Account you can exercise ARCO Rights through "Data and Privacy" in Account Settings on the PayPal website or mobile app, or by calling the Customer Services line; PayPal says it will verify your identity by (i) a security code via text message, (ii) a phone call to the registered phone number, or (iii) requesting that you access your Account. If you do not have an Account (for example, where you use Payment without a PayPal account), you can exercise ARCO rights for your payment transactions by calling the PayPal customer services line.
Details not recorded for this card
Supporting quotations
ARCO Rights
Notwithstanding the data privacy rights set forth under Your Data Protection Rights:
We recognize the importance of your ability to control use of your Personal Information and provide several ways for you to exercise your rights to access (right to know), rectification (correction or update), deletion (cancellation and erasure), objection (opposition), portability (transferring), and to restrict process in whole or in part (collectively your ARCO Rights).
If you have an Account you can exercise your ARCO Rights by accessing “Data and Privacy” from Account Settings in the PayPal Website or mobile app, or you can file your request by calling our Customer Services line.
We will verify your identity by (i) a security code via text message; (ii) a phone call to the phone number registered in the platform; or (iii) by requesting you to access to your Account.
If you do not you have an Account (for example, where you use Payment without a PayPal account), you can exercise your ARCO rights for your Payment transactions through calling PayPal customer services line.
Qualifications & exceptions
Applies to individuals in Mexico.
Account holders use settings or phone; people without an account use the phone line for their payment transactions.
Account & Service Control · Procedure
Mexico: authorized agents can submit ARCO requests; PayPal responds within twenty business days
For individuals in Mexico, PayPal says your duly authorized agent can submit an ARCO request on your behalf by contacting the Customer Services line, and that it may require additional information for verification. It says it will respond to your request within twenty (20) business days of your last contact, and that exercising any one ARCO right does not prevent you from exercising the others.
Details not recorded for this card
Supporting quotations
Your duly authorized agent can submit a request on your behalf by contacting our Customer Services line. Please note that we may require additional information for verification.
We will respond to your request within a term of twenty (20) business days of your last contact.
The exercise of any one ARCO rights does not prevent you from exercising your other ARCO rights.
Qualifications & exceptions
Applies to individuals in Mexico.
The 20 business days run "of your last contact".
Account & Service Control · Procedure
Fastlane profile rights: use the contact number or portal; changes may require creating a new account or profile
If you want to exercise rights relating to Personal Information in your Fastlane profile, PayPal says to contact it at the number in Our Contact Information or submit your request from your Fastlane profile management portal. If you need to modify personal data such as your email address or phone number, you may do so by exercising your ARCO rights (Access, Rectification, Cancellation and Opposition). Due to operational or technical constraints inherent to certain services, it may be necessary to create a new account or user profile to implement such changes; PayPal says you will be duly informed and any new account remains subject to this privacy statement. This passage sits in the Mexico section and refers to ARCO rights.
Details not recorded for this card
Supporting quotations
If you want to exercise any of your rights relating to your Personal Information in your Fastlane profile, contact us at the number provided in the Our Contact Information section or submit your request from your Fastlane profile management portal.
In the event that you need to modify your personal data—such as your email address or phone number—you may do so by exercising your ARCO rights (Access, Rectification, Cancellation, and Opposition).
it may be necessary to create a new account or user profile in order to implement such changes. In such cases, you will be duly informed, and any newly created account will remain subject to this privacy statement.
Fastlane means the online tool whereby individuals can store their payment methods and other Personal Information with PayPal
Qualifications & exceptions
Appears in the section for individuals in Mexico and refers to ARCO rights.
A new account or profile may be needed "due to operational or technical constraints".
Not stated here
The passage does not say whether it applies outside Mexico.
Singapore section supplements the Statement for individuals in Singapore
This section contains additional disclosures for individuals in Singapore and supplements the Privacy Statement above.
Details not recorded for this card
Supporting quotations
Disclosures for Individuals in Singapore
This section contains additional disclosures for individuals in Singapore and supplements PayPal’s Privacy Statement above.
Qualifications & exceptions
Applies to individuals in Singapore.
Use & Processing · User right or choice
Singapore: optional features rely on explicit and voluntary consent that you can withdraw at any time
For individuals in Singapore, PayPal says it relies on your explicit and voluntary consent to process Personal Information for features that are not necessary to use the Services but may interest you, such as syncing your contact list to your PayPal account, providing biometric data, targeted advertising, or connecting to a third-party platform. You may change your mind at any time through your account settings. Withdrawing consent does not affect the lawfulness of earlier processing, and you can withdraw consent as described in Your Data Protection Rights.
Details not recorded for this card
Supporting quotations
We rely on your explicit and voluntary consent to process your Personal Information to participate in certain features that while not necessary for use of the Services may be of interest to you, such as syncing your contact list to your PayPal account, providing biometric data, targeted advertising, or connecting to a third-party platform.
You may change your mind about use of these features at any time through your account settings.
You can withdraw your consent at any time, as described in
Qualifications & exceptions
Applies to individuals in Singapore.
Withdrawal does not affect processing done before it.
Legal Rights & Agreement Rules · Company practice
Singapore: PayPal also relies on legitimate interests where not overridden by individuals' rights
For individuals in Singapore, PayPal says it also has a legitimate interest in ensuring it remains a secure financial service, continuing to offer innovative services of interest to you, and optimizing its sales efforts by tailoring services to your interests, including ads and offers. In addition to its other lawful bases, it may process Personal Information where its legitimate interests are not overridden by the interests or fundamental rights and freedoms of the data subject.
Details not recorded for this card
Supporting quotations
We also have a legitimate interest in ensuring that PayPal remains a secure financial service and continuing to offer services that are innovative and of interest to you as well as to optimize our sales efforts by tailoring our services to your interests including ads and offers you may be shown.
we may process your Personal Information where our legitimate interests are not overridden by the interests or fundamental rights and freedoms of the data subject.
Qualifications & exceptions
Applies to individuals in Singapore.
Relied on only where not overridden by the data subject's interests or fundamental rights and freedoms.
For individuals in Singapore, the table lists processing purposes including: to provide our Services and products where necessary to comply with applicable laws; to verify your identity, also for signature purposes, and verify your personal and contact details, where necessary to comply with applicable laws; to establish, exercise or defend a legal claim or collection procedures, where necessary to comply with applicable laws; to ensure that content is presented in the most effective way for you and your device; to prevent misuse of our Services as part of our efforts to keep our platform safe and secure; to determine your eligibility for and to communicate with you about Services for which you may qualify or that may be of interest to you, for example by carrying out internal credit assessments; to carry out risk analysis, fraud prevention and risk management (e.g., through Automated Decision Making and AI); to improve our Services and for general business development purposes, for example improving risk models to minimize fraud, develop new products and features and explore new business opportunities; to keep your account and financial information up to date; for marketing, product and customer analysis, including testing, for example to improve our product range and optimize our customer offerings.
Details not recorded for this card
Supporting quotations
These processing purposes include:
to provide our Services and products where necessary to comply with applicable laws;
to verify your identity, also for signature purposes, and verify your personal and contact details, where necessary to comply with applicable laws;
to establish, exercise or defend a legal claim or collection procedures, where necessary to comply with applicable laws;
to ensure that content is presented in the most effective way for you and your device;
to prevent misuse of our Services as part of our efforts to keep our platform safe and secure;
to determine your eligibility for and to communicate with you about Services for which you may qualify or that may be of interest to you, for example by carrying out internal credit assessments;
to carry out risk analysis, fraud prevention and risk management (e.g., through Automated Decision Making and AI);
to improve our Services and for general business development purposes, for example improving risk models to minimize fraud, develop new products and features and explore new business opportunities;
to keep your account and financial information up to date;
for marketing, product and customer analysis, including testing, for example to improve our product range and optimize our customer offerings;
Qualifications & exceptions
Applies to individuals in Singapore.
The first three purposes are limited to "where necessary to comply with applicable laws".
The Singapore processing purposes continue: to comply with applicable laws, such as AML, bookkeeping laws, regulatory capital adequacy requirements, and rules issued by our designated banks and relevant card networks. For example, when we process Personal Information KYC requirements, to prevent, detect and investigate money laundering, terrorist financing and fraud. We also carry out sanction screening, report to tax authorities, police enforcement authorities, enforcement authorities, supervisory authorities where we are not compelled by applicable laws but where we have a good faith belief that sharing the information is necessary to comply with applicable law; to facilitate your participation in competitions, offerings, and events; to conduct financial risk management obligations, such as credit performance and quality, insurance risks and compliance with capital adequacy requirements under applicable law; to process information about your contacts to make it easy for you to find and connect them and improve payment accuracy. By providing us with information about your contacts you certify that you have permission to provide that information to PayPal for the purposes described in this Privacy Statement; to provide you with information, news, and marketing about our Services, including rewards or ads from us or where we partner with others to offer similar services on our Services as well, depending on your communication preferences; to associate information about you to identify your use of Services without a PayPal account (e.g., Pay without a PayPal account) or Unbranded Payment Services (e.g., Braintree) and to associate such transactions with your account, if you have one or later establish an account; and to remember your preferences for the next time you use the Services, such as which of your payment methods you prefer or whether you choose to receive digital receipts via email or text when you checkout. The marketing purpose is stated to depend on your communication preferences. The guest-transaction purpose uses the Statement's defined terms Pay without a PayPal Account and Unbranded Payment Services.
Details not recorded for this card
Supporting quotations
to comply with applicable laws, such as AML, bookkeeping laws, regulatory capital adequacy requirements, and rules issued by our designated banks and relevant card networks. For example, when we process Personal Information KYC requirements, to prevent, detect and investigate money laundering, terrorist financing and fraud. We also carry out sanction screening, report to tax authorities, police enforcement authorities, enforcement authorities, supervisory authorities where we are not compelled by applicable laws but where we have a good faith belief that sharing the information is necessary to comply with applicable law;
to facilitate your participation in competitions, offerings, and events; to conduct financial risk management obligations, such as credit performance and quality, insurance risks and compliance with capital adequacy requirements under applicable law;
to process information about your contacts to make it easy for you to find and connect them and improve payment accuracy. By providing us with information about your contacts you certify that you have permission to provide that information to PayPal for the purposes described in this Privacy Statement;
to provide you with information, news, and marketing about our Services, including rewards or ads from us or where we partner with others to offer similar services on our Services as well, depending on your communication preferences;
to associate information about you to identify your use of Services without a PayPal account (e.g., Pay without a PayPal account) or Unbranded Payment Services (e.g., Braintree) and to associate such transactions with your account, if you have one or later establish an account; and to remember your preferences for the next time you use the Services, such as which of your payment methods you prefer or whether you choose to receive digital receipts via email or text when you checkout.
Pay without a PayPal Account means our Services may be accessed by individuals without using a PayPal account, a Fastlane profile, or the Unbranded Payment Services.
Unbranded Payment Services means when you are interacting with and making payments to Partners and Merchants using our card processing and/or ACH origination services that do not carry the PayPal brand or when you use our Braintree services.
Qualifications & exceptions
Applies to individuals in Singapore.
Reporting to authorities without compulsion requires a good faith belief that sharing is necessary to comply with applicable law.
Marketing depends on your communication preferences.
Not stated here
The source joins several purposes in single blocks (competitions with financial risk management; guest transactions with preferences).
Singapore: thirteen categories of Personal Information are listed as necessary
For individuals in Singapore, the second column says necessary categories of Personal Information include: Registration and contact information; Identification and signature information; Payment information; Information related to legal requirements; Information you provide when you contact us; Transaction information; Package tracking; Service-specific Personal Information; Information from CRAs and financial institutions; Information from your connected financial accounts; Information from your use of the Services; Technical usage data; Device information; and; Location data.
Details not recorded for this card
Supporting quotations
Necessary categories of Personal Information include:
Registration and contact information;
Identification and signature information;
Payment information; Information related to legal requirements;
Information you provide when you contact us;
Transaction information;
Package tracking;
Service-specific Personal Information;
Information from CRAs and financial institutions;
Information from your connected financial accounts;
Information from your use of the Services;
Technical usage data;
Device information; and
Location data.
Qualifications & exceptions
Applies to individuals in Singapore.
Listed with "include".
Not stated here
The source puts "Payment information" and "Information related to legal requirements" in one block.