To read agreements for a different country or region, change your location.
Effective Date: December 27, 2019
PayPal, Inc. (“PayPal,” “we,” “us,” or “our”) developed this Privacy Policy to explain how we may collect, Process, share, store, and transfer your Personal Data that you provide when you visit the Sites, access the Services and any other Site as a visitor or User (collectively “Braintree Services”). All collection, use, and disclosure of your business and Personal Data will be governed under this Privacy Policy. If you create an Account to use the Braintree Services or otherwise establish a Braintree Account, our collection, use, and disclosure of your customers’ Personal Data will be governed in all respects by the terms of the Payment Services Agreement you enter into with us.
If you have questions about our privacy practices that are not addressed in this Privacy Policy, please contact us.
The Braintree Sites are where you can learn more about Braintree Services and how to become a User, sign up for more information about our Braintree Services, or access your Account if you are a User. We may collect Personal Data about you when you visit or access the Braintree Sites, including the following:
Personal Data You Provide to Us Voluntarily – We collect information about you that you voluntarily provide to us when you: (i) contact us to learn more about Braintree, the Braintree Services, or other opportunities you indicate are of interest at the time; (ii) access or use the Braintree Service; or (iii) contact customer service. This information may include, for example, your name, mailing address, business name, and any other information that you choose to provide to us when you comment on materials on our Braintree Services, in order to contact you as a potential customer, or respond to a support request. This also includes technical data, such as IP addresses and device identifiers that are commonly generated in establishing a connection with the Braintree Services.
Retention – We collect and retain Personal Data submitted to the Braintree Services in an identifiable format for the amount of time necessary to meet your request or fulfill our legal or regulatory obligations, unless it is in our legitimate business interests and not prohibited by law to maintain the Personal Data for longer periods.
We may use information:
We share information with:
Our operations are supported by a network of computers, cloud-based servers, and other infrastructure and information technology, including, but not limited to, third-party service providers. We and our third-party service providers store and Process your Personal Data in the United States of America and elsewhere in the world. We will protect your information as described in this Privacy Policy if your Personal Data is transferred to other countries/regions. By using our Sites and Services, you consent to your Personal Data being transferred to other countries, including countries/regions that have different data protection rules than your country. Please contact us for more information about this.
You may review limited Personal Data after logging in to your Account. If you need to edit or update your information, please contact us. If you do not have an Account or if you have questions about your Account information or other Personal Data, please contact us.
When you visit the Braintree Services, we and certain business partners and vendors may use cookies and other tracking technologies (collectively, “Cookies”) to recognize you and to otherwise customize your online experiences and other content and advertising; measure the effectiveness of promotions; and mitigate risk, prevent potential fraud, and promote trust and safety across the Braintree Services. Certain aspects and features of the Braintree Services are only available through the use of Cookies, so if you choose to disable or decline Cookies, your use of the Braintree Services may be limited or not possible.
We maintain technical, physical, and administrative security measures designed to provide reasonable protection for your information against loss, misuse, unauthorized access, disclosure, and alteration. The security measures include firewalls, data encryption, physical access controls to our data centers, and information access authorization controls.
The Braintree Services are intended for a general audience and are not directed at individuals under the age of majority. We do not knowingly collect information from children or other individuals who are not legally able to use the Braintree Services. If we obtain actual knowledge that we have collected information from a child, we will promptly delete it, unless we are legally obligated to retain such data. If you believe that we have mistakenly or unintentionally collected information from a child, please contact us.
We may change this Privacy Policy from time to time to reflect changes to our privacy practices for our Braintree Services. The revised Privacy Policy will be effective as of the published Effective Date.
If we make a material change to the Privacy Policy, we will notify you in advance by posting notice of the change on the Braintree Services before the change becomes effective. We also may notify you of the change using email or other means.
If you have general questions about our Privacy Policy and practices or questions about your Personal Data, you may contact us.
Account means Braintree account.
Personal Data means information that can be associated with an identified or identifiable person. “Personal Data” can include name, postal address (including billing and shipping addresses), telephone number, email address, financial account information, account number, and date of birth. Personal Data does not include information that does not identify a specific user.
Process describes any method or way that we handle Personal Data or sets of Personal Data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, and consultation, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction of Personal Data.
Services means all Braintree products, services, content, features, technologies, or functions (including integrations with third party services) offered by PayPal and all related sites, applications and services.
Site means the Braintree websites, mobile apps, official social media platforms, or other online properties through which PayPal offers the Services.
User means you or anyone else who has established a relationship with PayPal (for example, by opening an Account) or otherwise uses the Services or accesses the Sites.
In this notice, we are addressing specific disclosure requirements under the California Consumer Privacy Act of 2018 for California residents. This notice should be read together with Braintree’s Privacy Policy and applies to all California residents who visit our Sites or use the Services.
Personal Data Collection and Purposes of Use
We collect, use and share personal data regarding California residents as described in this notice.
We did not sell any consumers' personal data in the preceding 12 months.
California residents may not be discriminated against because they exercise their rights.
| In the preceding 12 months, we have collected the following categories of personal data from California residents: | We have collected such personal data from the following categories of sources: | We collected such personal data to use for the following purposes: | In the preceding 12 months, we shared personal data with the following categories of third parties: |
|---|---|---|---|
| a. Identifiers such as a real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers. |
|
|
|
| b. Personal data listed in California Customer Records statute, which may include: name, signature, social security number, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. |
|
|
|
| c. Personal data that is protected under California or federal law. |
|
|
|
| d. Commercial information, including records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. |
|
|
|
| e. Internet or other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an Internet Web site, application, or advertisement. |
|
|
|
| f. Audio, electronic, visual, thermal, olfactory, or similar information. |
|
|
|
| g. Professional or employment-related information. |
|
|
|
| h. Education information, defined as information that is not publicly available personally identifiable information as defined in the Family Educational Rights and Privacy Act (20 U.S.C. section 1232g, 34 C.F.R. Part 99). |
|
|
|
| i. Inferences drawn from any of the information identified in this subdivision to create a profile about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. |
|
|
|
