Skip to content

Product Privacy Notice

Original document

LAST VERIFIED 2026-10-01

Attention points

19 TO CHECK

Pointers to disclosures this policy may not clearly make, checked against major privacy laws. This is a heuristic — not legal advice, and not a finding that anything is missing or unlawful.

GDPR / UK-GDPR

3/13 ADDRESSED
  • Who controls your data (identity & contact of the data controller)GDPR Art. 13(1)(a)
  • Data Protection Officer contactGDPR Art. 13(1)(b)
  • The legal basis for using your dataGDPR Art. 13(1)(c)
  • Legitimate interests relied on (where that is the basis)GDPR Art. 13(1)(d)
  • International transfers and their safeguardsGDPR Art. 13(1)(f) / 46
  • The right to withdraw consent (where consent is the basis)GDPR Art. 13(2)(c)
  • The right to complain to a supervisory authority (e.g. the ICO)GDPR Art. 13(2)(d)
  • Whether providing your data is required, and what happens if you don'tGDPR Art. 13(2)(e)
  • Automated decision-making or profilingGDPR Arts. 13(2)(f), 22
  • Where your data was obtained, if not collected from you (source)GDPR Art. 14(2)(f)

CCPA / CPRA

1/10 ADDRESSED
  • Notice at collection: what categories of data are collected, and whyCCPA §1798.100(b)
  • The categories of sources the data comes fromCCPA §1798.110(c)
  • The business or commercial purposes for collecting/selling/sharingCCPA §1798.110(c)
  • Categories of third parties data is shared/sold toCCPA §1798.115
  • A 'Do Not Sell or Share My Personal Information' option (if it sells/shares)CCPA §1798.135(a)
  • A 'Limit the Use of My Sensitive Personal Information' option (CPRA)CPRA §1798.135(a)
  • Your CCPA rights (know, delete, correct, opt-out, limit, non-discrimination)CCPA §§1798.100–125
  • A non-discrimination promise for exercising your rightsCCPA §1798.125
  • At least two ways to submit a request, plus a contactCCPA §1798.130

Current text

This Product Privacy Notice provides information about how the products described below process personal data. It explains what features each product provides, what personal data may be processed to deliver those features, why that data is needed, and how long we keep it. It should be read together with the General Privacy Notice, which explains our general privacy practices, your privacy rights, and how we handle personal data across our business. It also describes how we…

Show full text