O'Reilly Privacy Policy (Version 4.15)
This update mostly reorganizes the table of contents and cleans up formatting, but it also quietly removes the company's phone contact number, deletes the explanation of a binding-arbitration option available to EU/Swiss users under the Data Privacy Framework, and removes the archive of links to all older privacy policy versions. A couple of broken links (CCPA opt-out, UK representative email) were also fixed.
Phone number for privacy questions removed
The toll-free phone number for reaching the Data Protection Officer was deleted, leaving a mailing address as the only listed contact method in this section (email channels mentioned elsewhere in the policy still exist).
“[1-800-889-8969](tel:+1-800-889-8969)”
What you can do — Use the EDPO online form, the UK representative email, or other contact methods listed elsewhere in the policy if you can't reach O'Reilly by phone.
OTHER
Disclosure of binding-arbitration recourse option removed
The policy no longer tells EU or Swiss users that they may be able to use a binding arbitration process as a last-resort remedy if other complaint channels fail. The underlying right under the Data Privacy Framework likely still exists, but the policy no longer tells you about it, making it harder to know this option is available.
“you may be entitled to invoke binding arbitration when other dispute resolution procedures have been exhausted”
What you can do — If you're an EU or Swiss user with an unresolved complaint, check the Data Privacy Framework website (dataprivacyframework.gov) directly for information on the Annex I binding arbitration process.
FORCED ARBITRATION
Access to older policy versions removed
You can no longer click through this policy to see the exact text of previous versions (back to version 1.1), making it harder to compare how your rights have changed over time.
“[Click here for version 4.15](https://www.oreilly.com/privacy-070825.html)”
What you can do — Save copies of policy versions yourself if you want to track changes, or use web archive tools (e.g., the Wayback Machine) to find older versions.
OTHER
| 1 | 1 | This version (Version 4.16) is effective as of October 28, 2026. |
| 2 | 2 | |
| 3 | - [Overview]() | |
| 4 | - [About Us]() | |
| 5 | - [Questions or Concerns: Contact Us]() | |
| 3 | 1. [Overview]() | |
± CHANGEDTable of contents reorganized All sections are now numbered 1 through 15 in a single consistent list, instead of having 'Overview,' 'About Us,' and 'Contact Us' unnumbered at the top. | ||
| 4 | 2. [About Us]() | |
| 5 | 3. [Questions or Concerns: Contact Us]() | |
| 6 | 4. [Information We Collect]() | |
| 7 | 5. [Processing and Using Personal Information]() | |
| 8 | 6. [How We Share and Disclose Personal Information]() | |
| 9 | 7. [How We Look After Your Personal Information and How Long We Keep It]() | |
| 10 | 8. [International Transfers of Your Information]() | |
| 11 | 9. [Your Rights: Access and Accuracy, Updating, Correcting, or Deleting Information]() | |
| 12 | 10. [Children's Privacy]() | |
| 13 | 11. [Notice Regarding Sharing Data with Third-Party Websites, Social Media Platforms, and Software Development Kits]() | |
| 14 | 12. [California "Shine the Light" Law]() | |
| 15 | 13. [US Privacy Rights]() | |
| 16 | 14. [Changes to This Privacy Policy]() | |
| 17 | 15. [Previous Versions of the Privacy Policy]() | |
| 6 | 18 | |
| 7 | 1. [Information We Collect]() | |
| 8 | 2. [Processing and Using Personal Information]() | |
| 9 | 3. [How We Share and Disclose Personal Information]() | |
| 10 | 4. [How We Look After Your Personal Information and How Long We Keep It]() | |
| 11 | 5. [International Transfers of Your Information]() | |
| 12 | 6. [Your Rights: Access and Accuracy, Updating, Correcting, or Deleting Information]() | |
| 13 | 7. [Children's Privacy]() | |
| 14 | 8. [Notice Regarding Sharing Data with Third-party Websites, Social Media Platforms, and Software Development Kits]() | |
| 15 | 9. [California "Shine the Light" Law]() | |
| 16 | 10. [US Privacy Rights]() | |
| 17 | 11. [Changes to This Privacy Policy]() | |
| 18 | 12. [Previous Versions of the Privacy Policy]() | |
| 19 | ||
| 20 | 19 | ## Overview |
| 21 | 20 | |
| 22 | 21 | At O'Reilly, we pride ourselves on our commitment to protecting your privacy. Our data governance and privacy policies reflect our company's values and how we strive to maintain your privacy. We carry out our processing operations in compliance with privacy and data protection laws, including, where relevant, the EU General Data Protection Regulation ("GDPR"), Data Privacy Framework Principles, and other applicable global privacy and data protection laws, such as the California Consumer Privacy Act ("CCPA"). |
| 23 | 22 | |
| 24 | 23 | This Privacy Policy (the "Policy") discloses the privacy practices of O'Reilly Media, Inc. and O'Reilly UK Limited ("O'Reilly"), and Safari Books Online, LLC ("Safari") (referred to collectively as "we," "us," and "our"). This Policy governs how we use and protect personal information that we collect when you visit our website, use our services or mobile apps, or otherwise engage with us. Any practices or points that are specific to O'Reilly or Safari are also clearly marked out in this Policy. |
| 25 | 24 | |
| 34 | 33 | Safari Books Online, LLC is a limited liability company registered in Delaware, with a principal office located at 141 Stony Circle, Suite 195, Santa Rosa, CA 95401, United States of America. |
| 35 | 34 | |
| 36 | 35 | ## Questions or Concerns: Contact Us |
| 37 | 36 | |
| 38 | 37 | If you have any questions about this Policy or questions or complaints about our privacy practices, please contact us using the details below: |
| 39 | 38 | |
| 40 | FAO | |
| 39 | **FAO:** Data Protection Officer | |
| 41 | 40 | |
| 42 | Data Protection Officer | |
| 41 | **Address:** 141 Stony Circle, Suite 195, Santa Rosa, CA 95401, United States of America | |
| 43 | 42 | |
| 44 | Address | |
| 45 | ||
| 46 | 141 Stony Circle, Suite 195, Santa Rosa, CA 95401, United States of America | |
| 47 | ||
| 48 | ||
| 49 | ||
| 50 | Phone | |
| 51 | ||
| 52 | [1-800-889-8969](tel:+1-800-889-8969) | |
− REMOVEDContact section reformatted; phone number removed The contact details were reformatted with bold labels, but the phone number (1-800-889-8969) and the blank 'Email' line were removed entirely, leaving only a mailing address as a direct contact method in this section. | ||
| 53 | ||
| 54 | 43 | The contact information above should also be used for communications relating to exercising the rights described in section 6.2 below. |
| 55 | 44 | |
| 56 | 45 | Our EU representative: as we, O'Reilly Media, Inc. and Safari Books Online, LLC, are not established in the EU, pursuant to Article 27 of the General Data Protection Regulation (GDPR), we have appointed European Data Protection Office (EDPO) as our GDPR representative in the EU, whom you may contact if you are located in the EU to raise any issues or queries you have relating to our processing of your personal information and/or this Privacy Policy more generally. You can contact EDPO: |
| 57 | 46 | |
| 58 | 47 | - By using EDPO's online request form: [https://edpo.com/gdpr-data-request/](https://edpo.com/gdpr-data-request/) |
| 59 | 48 | - By writing to EDPO at 60 Merrion Square South Dublin 2, D02 HE24, Ireland |
| 60 | 49 | |
| 61 | Our UK representative: we have appointed O'Reilly UK Limited as our representative in the UK, whom you may contact if you are located in the UK to raise any issues or queries you have relating to our processing of your personal information and/or this Privacy Policy more generally. You can contact O'Reilly UK Limited via email at the following address: | |
| 50 | Our UK representative: we have appointed O'Reilly UK Limited as our representative in the UK, whom you may contact if you are located in the UK to raise any issues or queries you have relating to our processing of your personal information and/or this Privacy Policy more generally. You can contact O'Reilly UK Limited via email at the following address: [privacy\_uk@oreilly.com](mailto:privacy_uk@oreilly.com). | |
| 62 | 51 | |
| 63 | 52 | If you prefer, you can, of course, always contact us using our US contact details set out above. |
| 64 | 53 | |
| 65 | 54 | ## 1\. Information We Collect |
| 66 | 55 | |
| 67 | 56 | We collect personal information in the following ways: |
| 266 | 255 | Under the Data Privacy Framework, O'Reilly and Safari collect, use, and disclose DPF Covered Data for the purposes described in this Policy. Under the Data Privacy Framework, as described in Section 6 below, you may inquire as to whether O'Reilly and/or Safari is processing personal information about you, request access to personal information, and ask that we correct, amend, or delete your personal information where it is inaccurate or has been processed in violation of the DPF Principles. O'Reilly and Safari are responsible for the processing of personal information each receives, under each Data Privacy Framework, and subsequently transfers to a third party acting as an agent on its behalf. The Data Privacy Framework requires that O'Reilly and Safari remain liable should their third parties process personal information in a manner inconsistent with the DPF Principles. O'Reilly and Safari comply with the DPF Principles for all onward transfers of personal data from the European Economic Area, United Kingdom, and Switzerland, including the onward transfer liability provisions. |
| 267 | 256 | |
| 268 | 257 | With respect to DPF Covered Data received or transferred pursuant to the Data Privacy Framework, O'Reilly and Safari are subject to the investigatory and enforcement powers of the US Federal Trade Commission (the "FTC"). The FTC has jurisdiction over O'Reilly and Safari's compliance with the Data Privacy Framework. In certain situations, we may be required to disclose personal information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements. |
| 269 | 258 | |
| 270 | 259 | If you are an EU or Swiss citizen and feel that we are not abiding by the terms of this Privacy Policy or that we are not in compliance with the DPF Principles, please contact us by using the [contact information]() provided at the top of this Privacy Policy. |
| 271 | 260 | |
| 272 | Under certain conditions, more fully described on the Data Privacy Framework website [https://www.dataprivacyframework.gov/s/article/How-to-Submit-a-Complaint-Relating-to-a-Participating-Organization-s-Compliance-with-the-DPF-Principles-dpf](https://www.dataprivacyframework.gov/s/article/How-to-Submit-a-Complaint-Relating-to-a-Participating-Organization-s-Compliance-with-the-DPF-Principles-dpf), you may be entitled to invoke binding arbitration when other dispute resolution procedures have been exhausted. For additional information, see [https://www.dataprivacyframework.gov/framework-article/ANNEX-I-introduction](https://www.dataprivacyframework.gov/framework-article/ANNEX-I-introduction). | |
− REMOVEDExplanation of DPF binding arbitration option removed A paragraph explaining that EU or Swiss users who aren't satisfied with other complaint processes may be able to use a binding arbitration process (described on the Data Privacy Framework's official website) has been deleted. | ||
| 273 | ||
| 274 | 261 | If you are not satisfied with our response, O'Reilly and Safari further commit to cooperate with the EU data protection authorities (DPAs), the UK Information Commissioner's Office (ICO), and the Swiss Federal Data Protection and Information Commissioner (FDPIC) with regard to the investigation and resolution of unresolved Data Privacy Framework complaints concerning data transferred from the EU and Switzerland to the United States. |
| 275 | 262 | |
| 276 | 263 | ### 5.2 Special note to users outside of the United States |
| 277 | 264 | |
| 278 | 265 | We transact business throughout the world and have operations, processes, and systems that cross borders. Our offices are located in the United States, the United Kingdom, China, and Japan, and our servers are located in the United States, the United Kingdom, China, and Japan. We may transfer your personal information within the O'Reilly group of companies in the United States and to affiliates, joint venture partners, and third-party service providers around the world. |
| 279 | 266 | |
| 308 | 295 | **In the case of preventing processing for marketing activities**, you can opt out of marketing by signing in to your O'Reilly account and updating your account settings. You may also opt out of receiving newsletters or other communications by following the opt-out instructions included in each newsletter or communication or by contacting us using the methods outlined in the ["Contact Us" section]() above. |
| 309 | 296 | |
| 310 | 297 | **You can opt out of our Google Analytics** data collection by using the tools available [here](https://tools.google.com/dlpage/gaoptout/). |
| 311 | 298 | |
| 312 | 299 | Please note that your objection to processing (or withdrawal of any previously given consent) could mean that we are unable to provide you with our services. Even after you have chosen to withdraw your consent, we may continue to process your personal information when required or permitted by law, in particular in connection with exercising and defending our legal rights or meeting our legal and regulatory obligations. |
| 313 | 300 | |
| 314 | California residents can exercise their "Do Not Sell or Share My Personal Information" rights under the California Consumer Privacy Act (CCPA) by clicking [here](). | |
| 301 | California residents can exercise their "Do Not Sell or Share My Personal Information" rights under the California Consumer Privacy Act (CCPA) by clicking [here](https://oreilly.com/privacy). | |
± CHANGEDCCPA 'Do Not Sell or Share' link fixed The link for California residents to exercise their 'Do Not Sell or Share My Personal Information' rights previously went nowhere; it now points to an actual page. | ||
| 315 | 302 | |
| 316 | **Thanks. You have been added to the list.** | |
− REMOVEDStray confirmation text removed A leftover line of text, 'Thanks. You have been added to the list.', which appeared to be an accidental form-confirmation message, was deleted. | ||
| 317 | ||
| 318 | 303 | To opt out of advertising cookies, please consult the list of cookies and instructions [here](https://www.oreilly.com/privacy-cookies.html). |
| 319 | 304 | |
| 320 | 305 | ### 6.3 What we need from you to process your requests |
| 321 | 306 | |
| 322 | 307 | We may need to request specific information from you to help us confirm your identity and to enable you to exercise the rights set out above. This is a security measure to ensure that personal information is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response. |
| 323 | 308 | |
| 390 | 375 | Please note that this Policy may change from time to time. We will not reduce your rights under this Policy without your consent. If we make any material changes, we will notify you by email or by means of a notice on this website prior to the change becoming effective. You can also view prior versions of the Policy by viewing the links in Section 12 below. |
| 391 | 376 | |
| 392 | 377 | ## 12\. Previous Versions of the Privacy Policy |
| 393 | 378 | |
| 394 | 379 | ### 12.1 O'Reilly and Safari privacy policies |
| 395 | 380 | |
| 396 | [Click here for version 4.15](https://www.oreilly.com/privacy-070825.html) | |
− REMOVEDArchive of older policy version links removed The lists of links letting users view every prior version of the O'Reilly, Safari, and O'Reilly School of Technology privacy policies (dozens of dated links back to version 1.1) have been deleted, leaving only the section headings. | ||
| 397 | ||
| 398 | [Click here for version 4.14](https://www.oreilly.com/privacy-092623.html) | |
| 399 | ||
| 400 | [Click here for version 4.13](https://www.oreilly.com/privacy-072123.html) | |
| 401 | ||
| 402 | [Click here for version 4.12](https://www.oreilly.com/privacy-120622.html) | |
| 403 | ||
| 404 | [Click here for version 4.11](https://www.oreilly.com/privacy-092822.html) | |
| 405 | ||
| 406 | [Click here for version 4.10](https://www.oreilly.com/privacy-022422.html) | |
| 407 | ||
| 408 | [Click here for version 4.9](https://www.oreilly.com/privacy-100721.html) | |
| 409 | ||
| 410 | [Click here for version 4.8](https://www.oreilly.com/privacy-072921.html) | |
| 411 | ||
| 412 | [Click here for version 4.7](https://www.oreilly.com/privacy-040721.html) | |
| 413 | ||
| 414 | [Click here for version 4.6](https://www.oreilly.com/privacy-010120.html) | |
| 415 | ||
| 416 | [Click here for version 4.5](https://www.oreilly.com/privacy-111219.html) | |
| 417 | ||
| 418 | [Click here for version 4.4](https://www.oreilly.com/privacy-081519.html) | |
| 419 | ||
| 420 | [Click here for version 4.3](https://www.oreilly.com/privacy-112118.html) | |
| 421 | ||
| 422 | [Click here for version 4.2](https://www.oreilly.com/privacy-101018.html) | |
| 423 | ||
| 424 | [Click here for version 4.1](https://www.oreilly.com/privacy-100418.html) | |
| 425 | ||
| 426 | [Click here for version 4.0](https://www.oreilly.com/privacy-052518.html) | |
| 427 | ||
| 428 | 381 | ### 12.2 O'Reilly privacy policies |
| 429 | 382 | |
| 430 | [Click here for version 2.1](https://www.oreilly.com/privacy-111016.html) | |
| 431 | ||
| 432 | [Click here for version 2.0](https://www.oreilly.com/privacy-120214.html) | |
| 433 | ||
| 434 | [Click here for version 1.1](https://www.oreilly.com/privacy-091415.html) | |
| 435 | ||
| 436 | 383 | ### 12.3 O'Reilly School of Technology privacy policies |
| 437 | 384 | |
| 438 | [Click here for version 2.1](http://archive.oreilly.com/oreillyschool/privacy-policy/) | |
| 439 | ||
| 440 | [Click here for version 2.0](http://archive.oreilly.com/oreillyschool/privacy-policy-version2/) | |
| 441 | ||
| 442 | 385 | ### 12.4 Safari privacy policies |
| 443 | ||
| 444 | [Click here for version 3.4](https://cdn.oreillystatic.com/pdf/SafariPrivacyPolicy_v3.4_23October2017.pdf) | |
| 445 | ||
| 446 | [Click here for version 3.3](https://www.safaribooksonline.com/static/legal/SafariPrivacyPolicy_v3.3_13June2017.a4d9478408f5.pdf) | |
ALSO IN THIS CHANGE, NOT TIED TO ONE LINE
- + ADDEDUK representative email address filled in
The UK representative contact instructions now include the actual email address to write to, instead of leaving it unspecified.
You can contact O'Reilly UK Limited via email at the following address:
You can contact O'Reilly UK Limited via email at the following address: [privacy_uk@oreilly.com](mailto:privacy_uk@oreilly.com).