O'Reilly Privacy Policy (Version 4.15)
This update is mostly administrative: it updates the version number and effective date, corrects the EDPO (EU representative) mailing address, swaps a dead link for the correct Data Privacy Framework arbitration complaint page, and archives the previous version (4.15) for reference. No substantive changes to what data is collected, shared, retained, or to your rights were made.
Cosmetic change: formatting, typos, or contact details.
| 1 | This version (Version 4.15) is effective as of July 8, 2025. | |
| 1 | This version (Version 4.16) is effective as of October 28, 2026. | |
± CHANGEDVersion and effective date updated The document now shows it's version 4.16, effective October 28, 2026, instead of version 4.15 from July 8, 2025. | ||
| 2 | 2 | |
| 3 | 3 | - [Overview]() |
| 4 | 4 | - [About Us]() |
| 5 | 5 | - [Questions or Concerns: Contact Us]() |
| 6 | 6 | |
| 7 | 7 | 1. [Information We Collect]() |
| 53 | 53 | |
| 54 | 54 | The contact information above should also be used for communications relating to exercising the rights described in section 6.2 below. |
| 55 | 55 | |
| 56 | 56 | Our EU representative: as we, O'Reilly Media, Inc. and Safari Books Online, LLC, are not established in the EU, pursuant to Article 27 of the General Data Protection Regulation (GDPR), we have appointed European Data Protection Office (EDPO) as our GDPR representative in the EU, whom you may contact if you are located in the EU to raise any issues or queries you have relating to our processing of your personal information and/or this Privacy Policy more generally. You can contact EDPO: |
| 57 | 57 | |
| 58 | 58 | - By using EDPO's online request form: [https://edpo.com/gdpr-data-request/](https://edpo.com/gdpr-data-request/) |
| 59 | - By writing to EDPO at Ground Floor, 71 Lower Baggot Street, Dublin, D02 P593, Ireland | |
| 59 | - By writing to EDPO at 60 Merrion Square South Dublin 2, D02 HE24, Ireland | |
± CHANGEDEU representative's mailing address corrected The physical address for O'Reilly's EU data protection representative (EDPO) was updated to a new Dublin address. This is just a contact detail fix, not a change in your rights. | ||
| 60 | 60 | |
| 61 | 61 | Our UK representative: we have appointed O'Reilly UK Limited as our representative in the UK, whom you may contact if you are located in the UK to raise any issues or queries you have relating to our processing of your personal information and/or this Privacy Policy more generally. You can contact O'Reilly UK Limited via email at the following address: |
| 62 | 62 | |
| 63 | 63 | If you prefer, you can, of course, always contact us using our US contact details set out above. |
| 64 | 64 | |
| 65 | 65 | ## 1\. Information We Collect |
| 266 | 266 | Under the Data Privacy Framework, O'Reilly and Safari collect, use, and disclose DPF Covered Data for the purposes described in this Policy. Under the Data Privacy Framework, as described in Section 6 below, you may inquire as to whether O'Reilly and/or Safari is processing personal information about you, request access to personal information, and ask that we correct, amend, or delete your personal information where it is inaccurate or has been processed in violation of the DPF Principles. O'Reilly and Safari are responsible for the processing of personal information each receives, under each Data Privacy Framework, and subsequently transfers to a third party acting as an agent on its behalf. The Data Privacy Framework requires that O'Reilly and Safari remain liable should their third parties process personal information in a manner inconsistent with the DPF Principles. O'Reilly and Safari comply with the DPF Principles for all onward transfers of personal data from the European Economic Area, United Kingdom, and Switzerland, including the onward transfer liability provisions. |
| 267 | 267 | |
| 268 | 268 | With respect to DPF Covered Data received or transferred pursuant to the Data Privacy Framework, O'Reilly and Safari are subject to the investigatory and enforcement powers of the US Federal Trade Commission (the "FTC"). The FTC has jurisdiction over O'Reilly and Safari's compliance with the Data Privacy Framework. In certain situations, we may be required to disclose personal information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements. |
| 269 | 269 | |
| 270 | 270 | If you are an EU or Swiss citizen and feel that we are not abiding by the terms of this Privacy Policy or that we are not in compliance with the DPF Principles, please contact us by using the [contact information]() provided at the top of this Privacy Policy. |
| 271 | 271 | |
| 272 | Under certain conditions, more fully described on the Data Privacy Framework website [https://www.dataprivacyframework.gov/s/article/How-to-Submit-a-Complaint-Relating-to-a-Participating-Organization-s-Compliance-with-the-DPF-Principles-dpf](https://www.dataprivacyframework.gov/s/article/How-to-Submit-a-Complaint-Relating-to-a-Participating-Organization-s-Compliance-with-the-DPF-Principles-dpf), you may be entitled to invoke binding arbitration when other dispute resolution procedures have been exhausted. For additional information, see [https://www.dataprivacyframework.gov/s/article/How-to-Submit-a-Complaint-Relating-to-a-Participating-Organization-s-Compliance-with-the-DPF-Principles-dpf](https://www.dataprivacyframework.gov/s/article/How-to-Submit-a-Complaint-Relating-to-a-Participating-Organization-s-Compliance-with-the-DPF-Principles-dpf). | |
| 272 | Under certain conditions, more fully described on the Data Privacy Framework website [https://www.dataprivacyframework.gov/s/article/How-to-Submit-a-Complaint-Relating-to-a-Participating-Organization-s-Compliance-with-the-DPF-Principles-dpf](https://www.dataprivacyframework.gov/s/article/How-to-Submit-a-Complaint-Relating-to-a-Participating-Organization-s-Compliance-with-the-DPF-Principles-dpf), you may be entitled to invoke binding arbitration when other dispute resolution procedures have been exhausted. For additional information, see [https://www.dataprivacyframework.gov/framework-article/ANNEX-I-introduction](https://www.dataprivacyframework.gov/framework-article/ANNEX-I-introduction). | |
± CHANGEDLink for arbitration complaint info updated A reference link about how to file a complaint under the Data Privacy Framework was swapped for a different, presumably more current, government webpage covering the same topic. | ||
| 273 | 273 | |
| 274 | 274 | If you are not satisfied with our response, O'Reilly and Safari further commit to cooperate with the EU data protection authorities (DPAs), the UK Information Commissioner's Office (ICO), and the Swiss Federal Data Protection and Information Commissioner (FDPIC) with regard to the investigation and resolution of unresolved Data Privacy Framework complaints concerning data transferred from the EU and Switzerland to the United States. |
| 275 | 275 | |
| 276 | 276 | ### 5.2 Special note to users outside of the United States |
| 277 | 277 | |
| 278 | 278 | We transact business throughout the world and have operations, processes, and systems that cross borders. Our offices are located in the United States, the United Kingdom, China, and Japan, and our servers are located in the United States, the United Kingdom, China, and Japan. We may transfer your personal information within the O'Reilly group of companies in the United States and to affiliates, joint venture partners, and third-party service providers around the world. |
| 390 | 390 | Please note that this Policy may change from time to time. We will not reduce your rights under this Policy without your consent. If we make any material changes, we will notify you by email or by means of a notice on this website prior to the change becoming effective. You can also view prior versions of the Policy by viewing the links in Section 12 below. |
| 391 | 391 | |
| 392 | 392 | ## 12\. Previous Versions of the Privacy Policy |
| 393 | 393 | |
| 394 | 394 | ### 12.1 O'Reilly and Safari privacy policies |
| 395 | 395 | |
| 396 | [Click here for version 4.15](https://www.oreilly.com/privacy-070825.html) | |
+ ADDEDPrevious version 4.15 archived A link to the now-outdated version 4.15 of this policy was added to the historical archive list, as is standard practice when a new version is published. | ||
| 397 | ||
| 396 | 398 | [Click here for version 4.14](https://www.oreilly.com/privacy-092623.html) |
| 397 | 399 | |
| 398 | 400 | [Click here for version 4.13](https://www.oreilly.com/privacy-072123.html) |
| 399 | 401 | |
| 400 | 402 | [Click here for version 4.12](https://www.oreilly.com/privacy-120622.html) |
| 401 | 403 | |