O'Reilly Privacy Policy (Version 4.15)
This update is mostly cleanup: the table of contents was renumbered, contact labels were reformatted, a broken CCPA opt-out link was fixed, and a UK contact email was added. However, O'Reilly also removed its privacy-team phone number, deleted the notice telling EU/Swiss users they could invoke binding arbitration as a last-resort complaint option under the Data Privacy Framework, and removed almost all links to view older versions of this policy.
Phone contact for privacy questions removed
You used to be able to call 1-800-889-8969 to reach O'Reilly's Data Protection Officer about privacy questions or to exercise your data rights. That phone number has been deleted from the contact section, leaving only a mailing address as a direct contact method.
“[1-800-889-8969](tel:+1-800-889-8969)”
What you can do — Use the mailing address or the EDPO online request form listed in the policy to contact the Data Protection Officer, since the phone number is no longer listed.
OTHER
Notice about optional binding arbitration removed
The policy used to tell EU and Swiss users that, as a last resort, they could invoke binding arbitration through the Data Privacy Framework process if other complaint procedures didn't resolve their issue. That notice has been deleted, so you're less likely to know this option exists. This doesn't take away the underlying right, but it removes O'Reilly's disclosure of it.
“you may be entitled to invoke binding arbitration when other dispute resolution procedures have been exhausted”
What you can do — If you're an EU or Swiss resident with an unresolved privacy complaint, check the official Data Privacy Framework website directly for details on the binding arbitration option, since O'Reilly's policy no longer mentions it.
FORCED ARBITRATION
Access to older policy versions removed
O'Reilly used to provide direct links so you could read every past version of its privacy policy, going back to 2014. Almost all of these links were deleted, making it harder to check what rules applied when your data was originally collected.
“[Click here for version 4.15](https://www.oreilly.com/privacy-070825.html)”
OTHER
| 1 | 1 | This version (Version 4.16) is effective as of October 28, 2026. |
| 2 | 2 | |
| 3 | - [Overview]() | |
| 4 | - [About Us]() | |
| 5 | - [Questions or Concerns: Contact Us]() | |
| 3 | 1. [Overview]() | |
± CHANGEDTable of contents renumbered The list of policy sections was changed from unordered bullets mixed with a separate numbered list into one single numbered list (1 through 15). No section content changed. | ||
| 4 | 2. [About Us]() | |
| 5 | 3. [Questions or Concerns: Contact Us]() | |
| 6 | 4. [Information We Collect]() | |
| 7 | 5. [Processing and Using Personal Information]() | |
| 8 | 6. [How We Share and Disclose Personal Information]() | |
| 9 | 7. [How We Look After Your Personal Information and How Long We Keep It]() | |
| 10 | 8. [International Transfers of Your Information]() | |
| 11 | 9. [Your Rights: Access and Accuracy, Updating, Correcting, or Deleting Information]() | |
| 12 | 10. [Children's Privacy]() | |
| 13 | 11. [Notice Regarding Sharing Data with Third-Party Websites, Social Media Platforms, and Software Development Kits]() | |
| 14 | 12. [California "Shine the Light" Law]() | |
| 15 | 13. [US Privacy Rights]() | |
| 16 | 14. [Changes to This Privacy Policy]() | |
| 17 | 15. [Previous Versions of the Privacy Policy]() | |
| 6 | 18 | |
| 7 | 1. [Information We Collect]() | |
| 8 | 2. [Processing and Using Personal Information]() | |
| 9 | 3. [How We Share and Disclose Personal Information]() | |
| 10 | 4. [How We Look After Your Personal Information and How Long We Keep It]() | |
| 11 | 5. [International Transfers of Your Information]() | |
| 12 | 6. [Your Rights: Access and Accuracy, Updating, Correcting, or Deleting Information]() | |
| 13 | 7. [Children's Privacy]() | |
| 14 | 8. [Notice Regarding Sharing Data with Third-party Websites, Social Media Platforms, and Software Development Kits]() | |
| 15 | 9. [California "Shine the Light" Law]() | |
| 16 | 10. [US Privacy Rights]() | |
| 17 | 11. [Changes to This Privacy Policy]() | |
| 18 | 12. [Previous Versions of the Privacy Policy]() | |
| 19 | ||
| 20 | 19 | ## Overview |
| 21 | 20 | |
| 22 | 21 | At O'Reilly, we pride ourselves on our commitment to protecting your privacy. Our data governance and privacy policies reflect our company's values and how we strive to maintain your privacy. We carry out our processing operations in compliance with privacy and data protection laws, including, where relevant, the EU General Data Protection Regulation ("GDPR"), Data Privacy Framework Principles, and other applicable global privacy and data protection laws, such as the California Consumer Privacy Act ("CCPA"). |
| 23 | 22 | |
| 24 | 23 | This Privacy Policy (the "Policy") discloses the privacy practices of O'Reilly Media, Inc. and O'Reilly UK Limited ("O'Reilly"), and Safari Books Online, LLC ("Safari") (referred to collectively as "we," "us," and "our"). This Policy governs how we use and protect personal information that we collect when you visit our website, use our services or mobile apps, or otherwise engage with us. Any practices or points that are specific to O'Reilly or Safari are also clearly marked out in this Policy. |
| 25 | 24 | |
| 34 | 33 | Safari Books Online, LLC is a limited liability company registered in Delaware, with a principal office located at 141 Stony Circle, Suite 195, Santa Rosa, CA 95401, United States of America. |
| 35 | 34 | |
| 36 | 35 | ## Questions or Concerns: Contact Us |
| 37 | 36 | |
| 38 | 37 | If you have any questions about this Policy or questions or complaints about our privacy practices, please contact us using the details below: |
| 39 | 38 | |
| 40 | FAO | |
| 39 | **FAO:** Data Protection Officer | |
| 41 | 40 | |
| 42 | Data Protection Officer | |
| 41 | **Address:** 141 Stony Circle, Suite 195, Santa Rosa, CA 95401, United States of America | |
| 43 | 42 | |
| 44 | Address | |
| 45 | ||
| 46 | 141 Stony Circle, Suite 195, Santa Rosa, CA 95401, United States of America | |
| 47 | ||
| 48 | ||
| 49 | ||
| 50 | Phone | |
| 51 | ||
| 52 | [1-800-889-8969](tel:+1-800-889-8969) | |
− REMOVEDPrivacy team phone number and email field removed The 'Contact Us' section used to list an 'Email' field (left blank) and a 'Phone' field with a clickable phone number. Both have been removed, leaving only the FAO name and mailing address. | ||
| 53 | ||
| 54 | 43 | The contact information above should also be used for communications relating to exercising the rights described in section 6.2 below. |
| 55 | 44 | |
| 56 | 45 | Our EU representative: as we, O'Reilly Media, Inc. and Safari Books Online, LLC, are not established in the EU, pursuant to Article 27 of the General Data Protection Regulation (GDPR), we have appointed European Data Protection Office (EDPO) as our GDPR representative in the EU, whom you may contact if you are located in the EU to raise any issues or queries you have relating to our processing of your personal information and/or this Privacy Policy more generally. You can contact EDPO: |
| 57 | 46 | |
| 58 | 47 | - By using EDPO's online request form: [https://edpo.com/gdpr-data-request/](https://edpo.com/gdpr-data-request/) |
| 59 | 48 | - By writing to EDPO at 60 Merrion Square South Dublin 2, D02 HE24, Ireland |
| 60 | 49 | |
| 61 | Our UK representative: we have appointed O'Reilly UK Limited as our representative in the UK, whom you may contact if you are located in the UK to raise any issues or queries you have relating to our processing of your personal information and/or this Privacy Policy more generally. You can contact O'Reilly UK Limited via email at the following address: | |
| 50 | Our UK representative: we have appointed O'Reilly UK Limited as our representative in the UK, whom you may contact if you are located in the UK to raise any issues or queries you have relating to our processing of your personal information and/or this Privacy Policy more generally. You can contact O'Reilly UK Limited via email at the following address: [privacy\_uk@oreilly.com](mailto:privacy_uk@oreilly.com). | |
| 62 | 51 | |
| 63 | 52 | If you prefer, you can, of course, always contact us using our US contact details set out above. |
| 64 | 53 | |
| 65 | 54 | ## 1\. Information We Collect |
| 66 | 55 | |
| 67 | 56 | We collect personal information in the following ways: |
| 266 | 255 | Under the Data Privacy Framework, O'Reilly and Safari collect, use, and disclose DPF Covered Data for the purposes described in this Policy. Under the Data Privacy Framework, as described in Section 6 below, you may inquire as to whether O'Reilly and/or Safari is processing personal information about you, request access to personal information, and ask that we correct, amend, or delete your personal information where it is inaccurate or has been processed in violation of the DPF Principles. O'Reilly and Safari are responsible for the processing of personal information each receives, under each Data Privacy Framework, and subsequently transfers to a third party acting as an agent on its behalf. The Data Privacy Framework requires that O'Reilly and Safari remain liable should their third parties process personal information in a manner inconsistent with the DPF Principles. O'Reilly and Safari comply with the DPF Principles for all onward transfers of personal data from the European Economic Area, United Kingdom, and Switzerland, including the onward transfer liability provisions. |
| 267 | 256 | |
| 268 | 257 | With respect to DPF Covered Data received or transferred pursuant to the Data Privacy Framework, O'Reilly and Safari are subject to the investigatory and enforcement powers of the US Federal Trade Commission (the "FTC"). The FTC has jurisdiction over O'Reilly and Safari's compliance with the Data Privacy Framework. In certain situations, we may be required to disclose personal information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements. |
| 269 | 258 | |
| 270 | 259 | If you are an EU or Swiss citizen and feel that we are not abiding by the terms of this Privacy Policy or that we are not in compliance with the DPF Principles, please contact us by using the [contact information]() provided at the top of this Privacy Policy. |
| 271 | 260 | |
| 272 | Under certain conditions, more fully described on the Data Privacy Framework website [https://www.dataprivacyframework.gov/s/article/How-to-Submit-a-Complaint-Relating-to-a-Participating-Organization-s-Compliance-with-the-DPF-Principles-dpf](https://www.dataprivacyframework.gov/s/article/How-to-Submit-a-Complaint-Relating-to-a-Participating-Organization-s-Compliance-with-the-DPF-Principles-dpf), you may be entitled to invoke binding arbitration when other dispute resolution procedures have been exhausted. For additional information, see [https://www.dataprivacyframework.gov/framework-article/ANNEX-I-introduction](https://www.dataprivacyframework.gov/framework-article/ANNEX-I-introduction). | |
− REMOVEDNotice about Data Privacy Framework binding arbitration option deleted A paragraph explaining that EU or Swiss users could, under certain conditions, invoke binding arbitration through the Data Privacy Framework process as a last resort has been removed entirely. | ||
| 273 | ||
| 274 | 261 | If you are not satisfied with our response, O'Reilly and Safari further commit to cooperate with the EU data protection authorities (DPAs), the UK Information Commissioner's Office (ICO), and the Swiss Federal Data Protection and Information Commissioner (FDPIC) with regard to the investigation and resolution of unresolved Data Privacy Framework complaints concerning data transferred from the EU and Switzerland to the United States. |
| 275 | 262 | |
| 276 | 263 | ### 5.2 Special note to users outside of the United States |
| 277 | 264 | |
| 278 | 265 | We transact business throughout the world and have operations, processes, and systems that cross borders. Our offices are located in the United States, the United Kingdom, China, and Japan, and our servers are located in the United States, the United Kingdom, China, and Japan. We may transfer your personal information within the O'Reilly group of companies in the United States and to affiliates, joint venture partners, and third-party service providers around the world. |
| 279 | 266 | |
| 308 | 295 | **In the case of preventing processing for marketing activities**, you can opt out of marketing by signing in to your O'Reilly account and updating your account settings. You may also opt out of receiving newsletters or other communications by following the opt-out instructions included in each newsletter or communication or by contacting us using the methods outlined in the ["Contact Us" section]() above. |
| 309 | 296 | |
| 310 | 297 | **You can opt out of our Google Analytics** data collection by using the tools available [here](https://tools.google.com/dlpage/gaoptout/). |
| 311 | 298 | |
| 312 | 299 | Please note that your objection to processing (or withdrawal of any previously given consent) could mean that we are unable to provide you with our services. Even after you have chosen to withdraw your consent, we may continue to process your personal information when required or permitted by law, in particular in connection with exercising and defending our legal rights or meeting our legal and regulatory obligations. |
| 313 | 300 | |
| 314 | California residents can exercise their "Do Not Sell or Share My Personal Information" rights under the California Consumer Privacy Act (CCPA) by clicking [here](). | |
| 301 | California residents can exercise their "Do Not Sell or Share My Personal Information" rights under the California Consumer Privacy Act (CCPA) by clicking [here](https://oreilly.com/privacy). | |
± CHANGEDCCPA 'Do Not Sell or Share' link fixed The link for California residents to exercise their CCPA opt-out rights previously pointed nowhere (an empty link). It now points to an actual page. | ||
| 315 | 302 | |
| 316 | **Thanks. You have been added to the list.** | |
− REMOVEDStray confirmation text removed A leftover line of placeholder text, 'Thanks. You have been added to the list.', was deleted from the opt-out section. | ||
| 317 | ||
| 318 | 303 | To opt out of advertising cookies, please consult the list of cookies and instructions [here](https://www.oreilly.com/privacy-cookies.html). |
| 319 | 304 | |
| 320 | 305 | ### 6.3 What we need from you to process your requests |
| 321 | 306 | |
| 322 | 307 | We may need to request specific information from you to help us confirm your identity and to enable you to exercise the rights set out above. This is a security measure to ensure that personal information is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response. |
| 323 | 308 | |
| 390 | 375 | Please note that this Policy may change from time to time. We will not reduce your rights under this Policy without your consent. If we make any material changes, we will notify you by email or by means of a notice on this website prior to the change becoming effective. You can also view prior versions of the Policy by viewing the links in Section 12 below. |
| 391 | 376 | |
| 392 | 377 | ## 12\. Previous Versions of the Privacy Policy |
| 393 | 378 | |
| 394 | 379 | ### 12.1 O'Reilly and Safari privacy policies |
| 395 | 380 | |
| 396 | [Click here for version 4.15](https://www.oreilly.com/privacy-070825.html) | |
− REMOVEDLinks to most previous policy versions removed The 'Previous Versions of the Privacy Policy' section used to link out to every past version of O'Reilly's, Safari's, and O'Reilly School of Technology's privacy policies going back to the mid-2010s. Nearly all of these links were deleted, leaving only empty section headers. | ||
| 397 | ||
| 398 | [Click here for version 4.14](https://www.oreilly.com/privacy-092623.html) | |
| 399 | ||
| 400 | [Click here for version 4.13](https://www.oreilly.com/privacy-072123.html) | |
| 401 | ||
| 402 | [Click here for version 4.12](https://www.oreilly.com/privacy-120622.html) | |
| 403 | ||
| 404 | [Click here for version 4.11](https://www.oreilly.com/privacy-092822.html) | |
| 405 | ||
| 406 | [Click here for version 4.10](https://www.oreilly.com/privacy-022422.html) | |
| 407 | ||
| 408 | [Click here for version 4.9](https://www.oreilly.com/privacy-100721.html) | |
| 409 | ||
| 410 | [Click here for version 4.8](https://www.oreilly.com/privacy-072921.html) | |
| 411 | ||
| 412 | [Click here for version 4.7](https://www.oreilly.com/privacy-040721.html) | |
| 413 | ||
| 414 | [Click here for version 4.6](https://www.oreilly.com/privacy-010120.html) | |
| 415 | ||
| 416 | [Click here for version 4.5](https://www.oreilly.com/privacy-111219.html) | |
| 417 | ||
| 418 | [Click here for version 4.4](https://www.oreilly.com/privacy-081519.html) | |
| 419 | ||
| 420 | [Click here for version 4.3](https://www.oreilly.com/privacy-112118.html) | |
| 421 | ||
| 422 | [Click here for version 4.2](https://www.oreilly.com/privacy-101018.html) | |
| 423 | ||
| 424 | [Click here for version 4.1](https://www.oreilly.com/privacy-100418.html) | |
| 425 | ||
| 426 | [Click here for version 4.0](https://www.oreilly.com/privacy-052518.html) | |
| 427 | ||
| 428 | 381 | ### 12.2 O'Reilly privacy policies |
| 429 | 382 | |
| 430 | [Click here for version 2.1](https://www.oreilly.com/privacy-111016.html) | |
| 431 | ||
| 432 | [Click here for version 2.0](https://www.oreilly.com/privacy-120214.html) | |
| 433 | ||
| 434 | [Click here for version 1.1](https://www.oreilly.com/privacy-091415.html) | |
| 435 | ||
| 436 | 383 | ### 12.3 O'Reilly School of Technology privacy policies |
| 437 | 384 | |
| 438 | [Click here for version 2.1](http://archive.oreilly.com/oreillyschool/privacy-policy/) | |
| 439 | ||
| 440 | [Click here for version 2.0](http://archive.oreilly.com/oreillyschool/privacy-policy-version2/) | |
| 441 | ||
| 442 | 385 | ### 12.4 Safari privacy policies |
| 443 | ||
| 444 | [Click here for version 3.4](https://cdn.oreillystatic.com/pdf/SafariPrivacyPolicy_v3.4_23October2017.pdf) | |
| 445 | ||
| 446 | [Click here for version 3.3](https://www.safaribooksonline.com/static/legal/SafariPrivacyPolicy_v3.3_13June2017.a4d9478408f5.pdf) | |
ALSO IN THIS CHANGE, NOT TIED TO ONE LINE
- + ADDEDUK representative now has a clickable email address
The text referring you to O'Reilly UK Limited's email contact previously had no actual email link. It now includes a working mailto link.
via email at the following address:
via email at the following address: [privacy_uk@oreilly.com](mailto:privacy_uk@oreilly.com).