PRIVO excludes third-party analytics and research sharing
PRIVO says personal information is not shared with third parties for analytics, research or product improvement. This is a purpose-specific promise, alongside the policy’s separate service-provider and legally necessary disclosure provisions.
Details not recorded for this card
Supporting quotations
Personal information is not shared with third parties for analytics, research or product improvement.
Qualifications & exceptions
This excludes the listed purposes rather than every third-party disclosure.
Sharing & Disclosure · Company commitment
PRIVO says it does not publicly display or disclose information
The policy states both that no personal information is displayed publicly and that collected information is not publicly disclosed.
Details not recorded for this card
Supporting quotations
No personal information is displayed publicly.
Information collected is not disclosed publicly.
Sharing & Disclosure · Company commitment
Service providers are limited to supporting PRIVO services
PRIVO works with providers solely to support its services, says it does not acquire personal information from them, and says information shared with them is neither used for other purposes nor shared onward. It requires appropriate third-party security measures. Users can email privacy@privo.com for details about information shared with each provider; a separate linked page lists providers and purposes.
Details not recorded for this card
Supporting quotations
PRIVO works with a number of service providers solely to support our services. Personal information is not acquired from service providers. Information shared with these third parties is not used for any other purposes or shared onwards. PRIVO requires that all third parties have appropriate security measures in place.
For more information on the personal information shared with each service provider please contact us here:
To see each service provider, what it is used for and how to find more information on each please
Qualifications & exceptions
Providers are engaged solely to support PRIVO’s services.
qualified by (model-proposed): Framework agent transfers carry conditional continuing liability — The Framework section separately states continuing liability for an agent’s inconsistent handling of EU–US Framework information, unless the organization proves nonresponsibility for the damaging event.
Sharing & Disclosure · Company practice
Some personal information is shared for customer verification
In some instances PRIVO shares personal information only to provide verification services to its customers. It limits this sharing to the personal information described earlier in the policy.
Details not recorded for this card
Supporting quotations
In some instances, personal information is shared to provide verification services to our customers only. This is limited to the personal information outlined above.
Qualifications & exceptions
Only for customer verification and limited to the earlier-described personal information.
Provider misuse would lead to termination and deletion
If PRIVO found a provider violating or misusing personal information, it says it would stop working with that provider and require deletion of all personal information when the agreement terminates.
Details not recorded for this card
Supporting quotations
If a service provider we work with was found to be violating or misusing any personal information, PRIVO would cease to work with this service provider and would require that all personal information is deleted upon termination of the agreement.
Qualifications & exceptions
Triggered by a finding of violation or misuse; deletion is required upon agreement termination.
Sharing & Disclosure · Company practice
PRIVO will disclose identifiable information when it believes legally necessary
PRIVO says it will disclose information about users or their children in identifiable form if it believes disclosure is legally necessary. Examples include court orders, civil subpoenas, and government or law-enforcement investigations involving fraud, intellectual-property infringement, illegality or possible PRIVO legal liability.
Details not recorded for this card
Supporting quotations
PRIVO will disclose information about you or your child(ren), in a manner that is not aggregated or anonymous, if we believe it is legally necessary to do so, for example, in response to a court order or civil subpoena, or to law enforcement or other government officials in connection with an investigation of fraud, intellectual property infringement, or other activity that is illegal or may expose PRIVO to legal liability.
Qualifications & exceptions
PRIVO’s belief that disclosure is legally necessary triggers the provision.
Cross-references
exception to (model-proposed): Parents can choose internal use without unaffiliated-party disclosure — Choosing internal child-data use without unaffiliated-party disclosure consent does not remove the policy’s separate identifiable disclosures when PRIVO believes legally necessary.
Customer information may transfer in a corporate transaction
In a merger, acquisition, reorganization, bankruptcy or similar event, PRIVO customer information may transfer to a successor or be assigned. The information remains governed and protected by this policy, and further use requires explicit consent. PRIVO promises email notice to users for a merger or acquisition.
Details not recorded for this card
Supporting quotations
In addition, in the event of a merger, acquisition, reorganization, bankruptcy or other similar event, PRIVO customer information may be transferred to our successor or assigned but will remain governed by and protected in strict accordance with this Privacy Policy and no further use of customer information will be made without explicit consent. PRIVO will inform users in the event of a merger or acquisition by contacting them using the email address provided.
Qualifications & exceptions
Further use requires explicit consent; the email-notice promise specifically covers mergers and acquisitions.
Parents can choose internal use without unaffiliated-party disclosure
When consenting to participation through the Platform, users may agree to PRIVO’s and its client’s collection and internal use of a child’s personal information without agreeing to their disclosure of it to unaffiliated third parties. This consent choice sits alongside separate legally necessary disclosure provisions.
Details not recorded for this card
Supporting quotations
When you provide us with consent for you and/or your child to participate at an online service using the Platform we give you the option to agree to the collection and use by ourselves and our client of your child’s personal information for internal purposes, without having to agree to the disclosure of your child’s information by us or our client to unaffiliated third parties.
PRIVO will disclose information about you or your child(ren), in a manner that is not aggregated or anonymous, if we believe it is legally necessary to do so
Qualifications & exceptions
Concerns consent to internal use and unaffiliated-party disclosure; legally necessary disclosure is separately provided for.
California notice excludes third-party marketing disclosures and sales
The California notice says PRIVO does not disclose personal information to third parties for marketing or sell individuals’ personal information. Users can email privacy@privo.com for privacy-practice information, review or a deletion request; deletion elsewhere remains subject to legal-retention requirements.
Details not recorded for this card
Supporting quotations
PRIVO does not disclose personal information to third parties for marketing purposes or sell individuals personal information. For further information about our privacy practices, or to review and request to have deleted any personal information you have shared with us, please contact us at:
If consent is revoked or data deletion is requested, then it will be deleted within five working days unless there is a legal requirement to retain the information.
Qualifications & exceptions
This notice addresses California users; legally required retention can limit deletion.
For personal information received under the EU–US Framework and then transferred to an agent, the policy says the participating organization remains responsible and liable under the Principles if the agent processes it inconsistently with them, unless the organization proves it was not responsible for the event causing damage.
Details not recorded for this card
Supporting quotations
In the context of an onward transfer, a participating organization has responsibility for the processing of personal information it receives under the EU-U.S. DPF and subsequently transfers to a third party acting as an agent on its behalf. The participating organization shall remain liable under the Principles if its agent processes such personal information in a manner inconsistent with the Principles, unless the organization proves that it is not responsible for the event giving rise to the damage.
Qualifications & exceptions
Applies to EU–US Framework information transferred to an agent; liability has the stated lack-of-responsibility defense.
Cross-references
qualifies (model-proposed): Service providers are limited to supporting PRIVO services — The Framework section separately states continuing liability for an agent’s inconsistent handling of EU–US Framework information, unless the organization proves nonresponsibility for the damaging event.