O'Reilly Privacy Policy (Version 4.15)

DATED 2025-07-08 · VERSION 20260729_rev01 · COMPARED WITH 20150123_rev01

Full text changes — 20150123_rev01 to 20260729_rev01

COLOUR MARKS THE SEVERITY OF A FLAGGED CLAUSE · + AND − MARK ADDED AND REMOVED

1This version (Version 2.0) of O'Reilly Media, Inc.'s Privacy Policy is effective as of December 2, 2014.
1This version (Version 4.15) is effective as of July 8, 2025.
22
3This Policy ("Policy") describes the privacy practices of O'Reilly Media, Inc. ("O'Reilly," "we," "us," "our") and governs how we collect, store, process, transfer, use, and protect personal information collected from and about you. This Policy applies to the websites that we own and that display or link to this Policy, including the websites located at oreilly.com, but does not apply to oreillyschool.com. Specific information relating to the O'Reilly School of Technology's privacy practices may be found [here](http://www.oreillyschool.com/privacy-policy/). This Policy also applies to your access to these websites via mobile devices. This Policy does not apply to any O'Reilly websites, products or services that display or link to their own privacy policies, or that do not link to or display this Policy.
3- [Overview]()
4- [About Us]()
5- [Questions or Concerns: Contact Us]()
46
5O'Reilly Media, Inc. has received TRUSTe's Privacy Seal certifying that this Policy and our practices comply with the TRUSTe program viewable on the validation page available by clicking the TRUSTe seal. The TRUSTe certification only covers information collected on the O'Reilly websites listed on the validation page, and to our conference specific mobile applications that link to this Policy.
71. [Information We Collect]()
82. [Processing and Using Personal Information]()
93. [How We Share and Disclose Personal Information]()
104. [How We Look After Your Personal Information and How Long We Keep It]()
115. [International Transfers of Your Information]()
126. [Your Rights: Access and Accuracy, Updating, Correcting, or Deleting Information]()
137. [Children's Privacy]()
148. [Notice Regarding Sharing Data with Third-party Websites, Social Media Platforms, and Software Development Kits]()
159. [California "Shine the Light" Law]()
1610. [US Privacy Rights]()
1711. [Changes to This Privacy Policy]()
1812. [Previous Versions of the Privacy Policy]()
619
7Please contact us at if you have questions or concerns about this Policy. If we do not resolve your question or concern satisfactorily, then please contact TRUSTe at [https://feedback-form.truste.com/watchdog/request](https://feedback-form.truste.com/watchdog/request).
20## Overview
821
9O'Reilly Media, Inc. complies with the U.S. - EU Safe Harbor Framework and the U.S. - Swiss Safe Harbor Framework set forth by the U.S. Department of Commerce regarding the collection, use and retention of personal data from the European Economic Area and from Switzerland. You can learn more about the Safe Harbor program, and view our Safe Harbor certification at [http://www.export.gov/safeharbor](http://www.export.gov/safeharbor).
22At O'Reilly, we pride ourselves on our commitment to protecting your privacy. Our data governance and privacy policies reflect our company's values and how we strive to maintain your privacy. We carry out our processing operations in compliance with privacy and data protection laws, including, where relevant, the EU General Data Protection Regulation ("GDPR"), Data Privacy Framework Principles, and other applicable global privacy and data protection laws, such as the California Consumer Privacy Act ("CCPA").
1023
11- [Information We Collect]()
12- [How We Use Information We Collect]()
13- [How We Share and Disclose PI]()
14- [Notice and Choice]()
15- [Onward Transfer]()
16- [Security]()
17- [Access and Accuracy; Updating, Correcting or Deleting Personal Information]()
18- [Children's Privacy]()
19- [Transfers of PI Outside the U.S.]()
20- [Questions or Concerns: Contact Us]()
21- [Changes to this Privacy Policy]()
22- [Your Privacy Rights - Information Sharing Disclosure for California Residents]()
23- [Previous Versions]()
24This Privacy Policy (the "Policy") discloses the privacy practices of O'Reilly Media, Inc. and O'Reilly UK Limited ("O'Reilly"), and Safari Books Online, LLC ("Safari") (referred to collectively as "we," "us," and "our"). This Policy governs how we use and protect personal information that we collect when you visit our website, use our services or mobile apps, or otherwise engage with us. Any practices or points that are specific to O'Reilly or Safari are also clearly marked out in this Policy.
2425
25### 1\. Information We Collect
26Any use you make of O'Reilly service offerings is subject to O'Reilly's [Terms of Service (TOS)](https://www.oreilly.com/terms/) and may also be subject to [O'Reilly's Membership Agreement](https://learning.oreilly.com/membership-agreement/). Any use you make of any Safari service offering is also subject to Safari's [Membership Agreement](https://www.safaribooksonline.com/membership-agreement/) and [TOS](https://www.safaribooksonline.com/terms/). If you are a user under a subscription purchased by one of our enterprise customers, the specific terms stipulated between O'Reilly and the relevant enterprise customer may also apply. For specific information relating to our processing of personal information in the context of enterprise accounts, please refer to the "Business-to-Business Accounts" section of this Policy.
2627
27As used in this Policy, personal Information ("PI") means information that can be directly associated with you (such as your name, email address, telephone number or billing information), or information about activities directly linked to you (such as products, services, or conference admissions that you have purchased). You agree that you will not provide us with the PI of anyone other than yourself unless you first obtain the consent of the person on whose behalf you will be providing PI to us.
28## About Us
2829
29We collect PI in the following ways:
30O'Reilly Media, Inc. is a corporation registered in Delaware, with a principal office located at 141 Stony Circle, Suite 195, Santa Rosa, CA 95401, United States of America.
3031
31**1.1 Information that you provide to us directly**
32O'Reilly UK Limited is a company registered in England, under company number 03569414, with its registered address at O'Reilly UK Ltd, Clockhouse, Dogflud Way, Farnham, GU9 7UD, United Kingdom.
3233
33When you contact or communicate with O'Reilly, we may gather PI such as your name, age, physical address, email address and phone number.
34Safari Books Online, LLC is a limited liability company registered in Delaware, with a principal office located at 141 Stony Circle, Suite 195, Santa Rosa, CA 95401, United States of America.
3435
35When you participate in a promotional offer (such as a trial subscription) and/or purchase products or services, we may gather PI regarding the offer that you participate in, and any products or services that you purchase, as well as payment information.
36## Questions or Concerns: Contact Us
3637
37When you register for an online account, make a purchase, subscribe to a newsletter, participate in communities or an event, program, class or promotion, or click on a URL, we may gather user preferences, product interests, industry focus, community choices and other customer profile information.
38If you have any questions about this Policy or questions or complaints about our privacy practices, please contact us using the details below:
3839
39Our website offers publicly accessible areas where users may contribute content and other information. Any PI that you provide in these areas may be read, collected and used by others.
40FAO
4041
41We may provide you the opportunity to participate surveys on our website. If you participate, we will request certain personally identifiable information from you. The requested information typically includes contact information (such as name and shipping address), and demographic information (such as zip code). As participation in these surveys is voluntary, you need not provide this information if you do not participate.
42Data Protection Officer
4243
43You can log in to our website using third party sign-in services such as Facebook, LinkedIn, Twitter or an Open ID provider. These services will authenticate your identity and provide you with the option to share certain personal information with us such as your name and email address to pre-populate our sign up form(s). Third party services like Facebook Connect give you the option to post information about your activities on our website to your profile page on third party services to share with others within your network on those services.
44Address
4445
45**1.2 Information we collect through technology related to our products and services**
46141 Stony Circle, Suite 195, Santa Rosa, CA 95401, United States of America
4647
47Certain products and services, such as our mobile conference applications, may connect and transmit telemetry and system/product data to us or our authorized agents. This data may include, but is not limited to, system model, mobile carrier, operating system, host ID, location, IP address and other information used to collect aggregate data on app usage, downloads, sessions, and frequency of use.
48Email
4849
49We use this information to manage and administer our products, services and events, and as the basis for advising you of the availability of updates and new versions, providing testing and monitoring of services provided to you, enhancing our products and services, and improving and targeting our communications with you.
50Phone
5051
51When using our mobile applications we may collect your geo-location data in order to help provide you with conference services near you. If you have previously consented to the collection of your geo-location and no longer wish to have it used, you can turn it off at the device level.
52[1-800-889-8969](tel:+1-800-889-8969)
5253
53**1.3 Information we collect through other online technology**
54The contact information above should also be used for communications relating to exercising the rights described in section 6.2 below.
5455
55When you visit our websites, we collect information about the pages you view. In addition, some pages of our website use cookies, web beacons and similar technologies to automatically collect information from you. We send one or more cookies (small text files containing a string of characters) to your computer to uniquely identify your browser. We use "web beacons" (electronic images also known as pixel tags or clear gifs) to recognize a O'Reilly cookie on your computer when you view or take actions on an O'Reilly web page, an O'Reilly advertisement posted on a third party web page, or open an email from us. For these purposes, some of our tracking technologies may be tied to personally identifiable information.
56Our EU representative: as we, O'Reilly Media, Inc. and Safari Books Online, LLC, are not established in the EU, pursuant to Article 27 of the General Data Protection Regulation (GDPR), we have appointed European Data Protection Office (EDPO) as our GDPR representative in the EU, whom you may contact if you are located in the EU to raise any issues or queries you have relating to our processing of your personal information and/or this Privacy Policy more generally. You can contact EDPO:
5657
57Cookies, web beacons and similar technologies enable us to collect information about your visits to our websites, such as:
58- By using EDPO's online request form: [https://edpo.com/gdpr-data-request/](https://edpo.com/gdpr-data-request/)
59- By writing to EDPO at Ground Floor, 71 Lower Baggot Street, Dublin, D02 P593, Ireland
5860
59- Internet Protocol Address
60- Browser type
61- Operating system
62- Referring website (website you visited before coming to our website)
63- Date and time of visit
64- City and country of email address
65- URL of pages visited
66- Other browsing behavior, such as products and white papers downloaded
61Our UK representative: we have appointed O'Reilly UK Limited as our representative in the UK, whom you may contact if you are located in the UK to raise any issues or queries you have relating to our processing of your personal information and/or this Privacy Policy more generally. You can contact O'Reilly UK Limited via email at the following address:
6762
68Our third party web analytics service providers use cookies and web beacons in order to make it easier for you to navigate our website and to help us manage the content on our website. For instance, cookies and web beacons provide information about the effectiveness of our website content.
63If you prefer, you can, of course, always contact us using our US contact details set out above.
6964
70Most browsers allow you to remove and block cookies and web beacons. If you do so, you will need to re-enter your user name and password to access certain parts of our websites and you will only have access to generic content that is not focused on your specific interests. Also, you may not be able to use certain website features or take full advantage of our offerings.
65## 1\. Information We Collect
7166
72Flash cookies and browser cookies are differentiated by the amount, type, and method by which data is stored. Cookie management tools provided by your browser will not remove Flash cookies. Click here to learn how to manage privacy and storage settings for Flash cookies click here: [http://www.macromedia.com/support/documentation/en/flashplayer/help/settings\_manager.html#117118](http://www.macromedia.com/support/documentation/en/flashplayer/help/settings_manager.html)
67We collect personal information in the following ways:
7368
74Our websites includes third party social media features, such as the Facebook and Twitter buttons. These features may on behalf of those third parties collect your IP address, which page you are visiting on our website, and may set a cookie to enable the feature to function properly. Social media features and widgets are either hosted by a third party or hosted directly on our website. Your interactions with these third party social media features are governed by the privacy policy of the third party that provides the feature.
69### 1.1 Information that you provide to us directly
7570
76We may from time-to-time engage a third party advertising network to display advertising on our website or to manage our advertising on third party sites. These advertising networks use cookies and web beacons to collect non-personally-identifiable information about your activities on our websites and other websites in order to provide you with targeted advertising based upon your interests. If you wish to not have this information used for the purpose of serving you targeted ads, you may opt-out by clicking [http://preferences-mgr.truste.com](http://preferences-mgr.truste.com/). Please note this does not opt you out of being served advertising. You will continue to receive generic ads.
71We gather information that you provide to us when you:
7772
78We use mobile analytics tools to improve our understanding of the functionality of our mobile apps and content on your phone. These tools may record information such as how often you use the application, the events that occur within the application, aggregated usage, and performance data, the site or app store from which you downloaded the app. We also use this information to inform app design development and updates. We do not link the information we store within the analytics tools to any PI you submit within the mobile app.
73- Purchase products or services from us
74- Subscribe to our newsletters and mailing lists
75- Participate in promotional offers (such as a trial O'Reilly subscription) and other promotions, competitions, or prize drawings
76- Fill in forms, conduct searches, post content on the website, respond to surveys, or use any other features of our websites
77- Make an inquiry, provide feedback, submit correspondence, or make a complaint over the phone, by email, on our website, or by post
78- Register for and update an online account with us (including if you access it through Facebook, LinkedIn, Twitter, Google, or an open IP provider or our mobile applications)
79- Register for, present at, and/or attend our events and conferences or scan your attendance badge at any of the booths at our conferences/events or at our booths when we are present at someone else's conference/event
80- Enter into a contract with us
81- Sign up for job alerts on our websites; submit a job application, a CV, cover letter, or social media profile to a job vacancy; or attend an interview, assessment, or meeting
82- Contact other users on the websites, for example on the O'Reilly Community website
83- "Follow", "like," post to, or interact with our social media accounts, including Facebook, LinkedIn, Twitter, Pinterest, Instagram, and Snapchat
84- Contribute content and information about yourself in the course of your use of social and sharing features in our websites, services, or products that make users' content and information available to the public or to specific groups, such as others who use those features
7985
80**1.4 Do Not Track**
86The information you provide to us will include (depending on the circumstances):
8187
82California law requires us to let you know how we respond to web browser Do Not Track (DNT) signals. Because there currently isn't an industry or legal standard for recognizing or honoring DNT signals, we don't respond to them at this time. We await the result of work by the privacy community and industry to determine when such a response is appropriate and what form it should take.
88- **Identity and contact data**: title, names, addresses, email addresses, phone numbers, or your signature.
89- **Account profile data**: username/display name, password, user preferences, and, if you sign up through a social media account, certain information about that account.
90- **Conference registration details**: the company/organization you work for, job title/position, language preferences, your name, your email, your age, your gender, your job function, your experience, your opinions, why you are attending the conference, what you hope to learn, and your accessibility needs.
91- **Financial data**: payment details, which may include billing addresses, credit/debit card details, and bank account details.
92- **Employment and background data**: if you apply for employment on our sites, your academic and work history, qualifications, skills, projects, research that you are involved in, references, proof of your entitlement to work in the relevant country, your national security number, your passport or other identity document details, your current level of remuneration (including benefits), and any other such similar information that you may provide to us.
93- **Visual and audio information about yourself**: for example, a photo, video footage, or a sound recording.
94- **Your preferences**: information about your preferences, interests, industry focus, community choices, and other customer profile information.
95- **Sensitive information**: information about your race or ethnicity, religious beliefs, sexual orientation, health, and whether or not you have any disability. You can find out more about how we use sensitive information in "Section 1.5 Special Categories of Data" below.
96- **Any other information that you choose to share with us**: for example, any information that you provide via correspondence, when you fill out our survey(s), via our website or social media accounts linked to our website, in person at events or meetings, or over the phone.
97- **Mobile application**: when you download and use the O'Reilly mobile app, we automatically collect information on the type of device you use and your operating system version.
98- **Usage data**: information related to your usage of the O'Reilly learning platform, such as the content you have accessed, viewed, or otherwise interacted with.
8399
84**1.5 Information from other sources**
100### 1.2 Information we collect through technology related to our products and services
85101
86From time-to-time we may receive information from other sources, such as commercial contact lists or companies that we acquire, and we may combine that information with information previously collected, including information collected in connection with your use and interaction with our other products, services, and websites.
102Some of our products and services collect information about system and product data. We use this information to manage and administer our products and services, to issue updates and new versions, to test and monitor services that we provide, to enhance our products and services, and to improve and target our communications with you.
87103
88Some O'Reilly events, websites or services may be co-branded and offered in conjunction with one or more third parties. When you provide PI in relation to them, both O'Reilly and the relevant third parties may receive the information collected and use the information according to each company's privacy policy and agreement with you. We recommend reading the privacy statements of the companies with whom we provided co-branded offerings, whenever you access or participate in a co-branded offering.
104### 1.3 Information we collect through online technology
89105
90### 2\. How We Use Information We Collect
106We may collect certain information automatically when you use our online technology. This information may include your internet protocol (IP) address, browser settings, cookie identifiers, mobile carrier, mobile advertising and other unique identifiers, details about your browser, operating system, or device, browser session location information, internet service provider, and pages that you visit before, during, and after using the services as well as information about the links you click and other information about how you use our online technology. Information we collect may be associated with accounts and other devices (see for example, "Section 2.3 Cross-Device Tracking" below).
91107
92We use PI to conduct business, provide information and support for products and services, improve our understanding of your needs and interests, develop and improve our services and products, and personalize communications. Examples include:
108Technologies such as cookies, beacons, tags, local storage, and scripts are used by us and our affiliates and by other companies, such as third-party technology service providers and web analytics providers. These technologies make it easier for you to navigate our website and help us manage the content on our website; they are used to analyze trends, administer the sites, track users' movements around the site (including which site you clicked from to arrive at our site), and gather demographic information about our user base. Additional information about these online technologies is available [here](https://www.oreilly.com/privacy-cookies.html).
93109
94- Advising you of relevant promotions, products, services, and news about O'Reilly and affiliated third parties
95- Processing and fulfilling orders
96- Responding to customer service requests
97- Creating and monitoring accounts
98- Conducting market research projects
99- Analyzing how our products and services are used
100- Personalizing content and advertising
101- Monitoring our services in order to prevent and identify unauthorized content use and violations of our end user agreements
102- Planning and forecasting
103- Maintaining legal compliance
104- Preventing fraud and prohibited or illegal activities
110### 1.4 Information from other sources
105111
106We use information collected directly from you in order to monitor website traffic, personalize our website, and to improve our website and mobile applications.
112In certain circumstances, we will receive information about you from other sources, including third parties. For example, we may receive personal information from any of the following, who may be based inside and/or outside the EU:
107113
108### 3\. How We Share and Disclose PI
114- **Other website users.**
115- **Event attendees.**
116- **Your agents or representatives** who are acting on your instructions.
117- **Commercial contact lists** that we acquire from other organizations.
118- **Organizations that we acquire or merge with.**
119- **Organizations with whom we provide co-branded events, websites, products, and services.**
120- **Fraud detection agencies.**
121- **Your current and former employers, recruitment agencies, and references.**
122- **Service providers,** including our website developers, IT support providers, cloud services providers, payment services providers, billing service providers, contractors, consultants, advertising agencies and platforms, digital performance monitoring and management providers, advertising analytics providers, marketing and sales service providers, user experience testing platforms, B2B contact databases, recruitment agencies, survey tool providers, customer relationship and customer support service providers, event ticket retailers, event management platform service providers, customer identity account management providers, HR service providers, couriers, and instant messaging service providers.
123- **Social media plug-ins.** By providing your social media account details, you are authorizing that third-party provider to share with us certain information about you.
124- **Publicly available sources** such as LinkedIn, Facebook, and Twitter.
109125
110We will not sell your information to third party companies for their promotional use, however we may share with or disclose your PI to:
126We might also receive information about you from other third parties if you have indicated to such third parties that you would like to hear from us.
111127
112- Companies related to O'Reilly, in order to support business and marketing processes.
113- Service providers and suppliers, who are authorized to use PI only as necessary to provide services to us. For example, we use a third party payment processor to bill you for purchases of goods and services, and an email service provider to send communications to you on our behalf.
114- Sponsors of events, products, or services that we make available to you, and organizations with whom we make co-branded events, products or services available (the sponsors and co-branding participants are identified when you provide PI to us in the course of registering for the event including participant listings, purchasing or signing up to receive the product or service, or when you otherwise indicate to us that you are going to participate in, purchase, or take advantage of the co-branded offering).
115- Government agencies, law enforcement agencies and others, based on a good faith belief that disclosure is necessary to respond to judicial process, valid government inquiry, or is otherwise required by law.
116- The buyer or other transferee, if O'Reilly or portion of our business is sold or transferred (in which case you will be notified via a notice on our website of the sale or transfer, any related changes regarding uses of your PI, and any choices that you may have regarding your PI).
117- Other third parties for purposes to which you have consented
118- Other users of and participants in of our wikis, forums, blogs, message boards, chat rooms, profile pages, comment fields and other social network environments, to the extent of any PI that is posted there by you or by someone else whom you have authorized to do so.
128### 1.5 Special categories of data
119129
120Our website includes links to other websites whose privacy practices may differ from those of O'Reilly. If you submit PI to any of those websites, your information is governed by their privacy policies, which we encourage you to review carefully.
130Special categories of particularly sensitive personal information require higher levels of protection. These so-called "special categories of data" include details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, and trade union membership and information about your health and genetic and biometric data. Depending on the circumstances, we will also collect information about criminal convictions and offenses.
121131
122We may share with or disclose your PI as necessary, if we suspect a violation of our policies or to protect the rights or safety of any person or entity.
132We need to have further justification for collecting, storing, and using this type of personal information. We process special categories of personal information in the following circumstances:
123133
124We display personal testimonials of satisfied customers on our website in addition to other endorsements. With your consent we may post your testimonial along with your name.
134- In limited circumstances, with your explicit written consent
135- Where it is necessary to carry out our legal obligations or exercise rights in connection with employment
136- Where it is necessary for reasons of substantial public interest, such as for equal opportunities monitoring
137- Where it is necessary in relation to legal claims
138- Where it is necessary to protect your interests (or someone else's interests) and you are not capable of giving your consent
139- Where you have already made the information public
125140
126Information, such as your public profile and information or material (including images) that you in the course of your participation in public or community events and activities make available via our sites, and aggregated or anonymized information, may be shared by us without restriction. You acknowledge that when you make information or material public in the course of participating in public or community activities, we are not responsible for its collection by others, or their subsequent use of it.
141For example, we will collect special categories of information:
127142
128### 4\. Notice and Choice
143- When you apply to work for us (for diversity and equal opportunities records, to support your needs and facilitate access to our premises, and to carry out background checks)
144- When you attend our events, visit our premises, or apply for a diversity and inclusion scholarship from us to obtain access to our products or services
129145
130We provide notice about our use of PI in this Policy, in our web pages, and in other locations where we collect PI. You can choose whether or not to provide PI to us. If you choose not to provide PI, you may not be able to take advantage of certain offers, options, website features, events and services that depend upon accurate PI.
146In limited circumstances, we may request your written consent to allow us to use certain particularly sensitive data. If we do so, we will provide you with full details of the information that we would like to use and the reason we need it so that you can carefully consider whether you wish to consent.
131147
132To request the removal of your PI, please see the "Access and Accuracy" section of this Policy. That section also contains information about making changes with respect to some specific aspects of our website and your website activities.
148## 2\. Processing and Using Personal Information
133149
134### 5\. Onward Transfer
150### 2.1 How we process and use information we collect
135151
136We will only share PI with third parties if those third parties provide an adequate level of data protection to help ensure the security of personal data.
152We process and use your information for the following purposes:
137153
138### 6\. Security
154- **To provide access to our website** in a manner convenient and optimal and with personalized content relevant to you (on the basis of our legitimate interest to ensure our website is presented in an effective and optimal manner).
155- **To register and maintain your O'Reilly or Safari account** (on the basis of performing our contract with you).
156- **To process and fulfill your orders for O'Reilly and Safari products and services** (on the basis of performing our contract with you).
157- **To process and facilitate transactions and payments, and recover money owed to us** (on the basis of performing our contract with you and on the basis of our legitimate interest to recover debts due).
158- **To monitor your account and use of services** to ensure compliance with our end-user agreements and prevent and identify unlawful content use and violations (on the basis of our legitimate interests to operate a safe and lawful business, or where we have a legal obligation to do so).
159- **To enable you to communicate with other website users and clients** (on the basis of your consent where we have requested it, or on the basis of performing our contract with you).
160- **To manage our relationship with you**, which will include notifying you about changes to our Terms of Service or Privacy Policy and asking you to leave a review or take a survey (on the basis of performing our contract with you, to comply with our legal obligations, and our legitimate interests in keeping our records updated and study how our website and services are used).
161- **To enable and support your participation and sharing** in connection with those social features of our websites, products, services, and online communities in which you choose to participate.
162- **To conduct business with you or your employer**, including to contact you and to manage and facilitate our business relationship with you and your employer (on the basis of performing our contract with you, and our legitimate interest in running our business).
163- **To provide customer service and support**, like dealing with inquiries or complaints about the website, which may include sharing your information with our website developer, IT support provider, and payment services provider as necessary (on the basis of performing our contract with you, our legitimate interest in providing the correct products and services to our website users, and to comply with our legal obligations).
164- **To enable you to take part in prize drawings, competitions, and surveys** (on the basis of performing our contract with you, and our legitimate interest in studying how our website and services are used and to develop them and to grow our business).
165- **To work with you and undertake projects with you**, including to process any proposals that you submit to us (on the basis of our contract with you, and our legitimate interest in running our business).
166- **To provide access to and administer O'Reilly scholarship programs** (on the basis of your consent where we have requested it, on the basis of performing our contract with you, and our legitimate interest in making our products and services accessible to a range of individuals with diverse backgrounds).
167- **For recruitment**, including to process any job applications you submit to us, whether directly or via an agent or recruiter, including sharing your information with our third-party recruitment agencies (on the basis of our legitimate interest to recruit new employees or contractors).
168- **To carry out marketing** and let you know about our news, events, new website features, products, or services that we believe may interest you, including sharing your information with our marketing services providers (either on the basis of your consent where we have requested it or our legitimate interest to provide you with marketing communications where we may lawfully do so).
169- **To deliver relevant website content and advertisements to you** and measure or understand the effectiveness of the advertising we serve to you (on the basis of our legitimate interests in studying how our website and services are used, to develop them, to grow our business, and to inform our marketing strategy).
170- **To interact with users on social media platforms** (on the basis of our legitimate interest in promoting our brand and communicating with interested individuals).
171- **To conduct data analytics** to improve our website, products and services, marketing, customer relationships, and experiences (on the basis of our legitimate interests in defining types of customers for our website and services, to keep our website updated and relevant, to develop our business, to provide the right kinds of products and services to our customers, and to inform our business and marketing strategy).
172- **To make suggestions and recommendations** by sharing your information with selected third parties such as sponsors and partners, so they can contact you about things that may interest you (either on the basis of your consent where we have requested it or on the basis of our legitimate interest to share details of conference attendees with our copresenters and sponsors).
173- **To carry out marketing research and user testing** to assess the levels of satisfaction of existing and proposed products and services (on the basis of our legitimate interest in carrying out research and providing the right kinds of products and services to our customers).
174- **To protect, investigate, and deter against fraudulent, unauthorized, or illegal activity** (on the basis of our legitimate interests to operate a safe and lawful business or where we have a legal obligation to do so).
175- **To enable us to comply with our policies and procedures and enforce our legal rights**, and to protect the rights, property, or safety of our employees and share your information with our technical and legal advisors (on the basis of our legitimate interests to operate a safe and lawful business or where we have a legal obligation to do so).
176- **To create deidentified information**, such as deidentified demographic information, deidentified location information, information about the computer or device from which you access our services, or other analyses we create (on the basis of our legitimate interests in studying how our website/services are used, to develop them, to grow our business, and to inform our marketing strategy).
177- **To send push notifications through our mobile application**. We may, if allowed by applicable law, send you push notifications through our mobile application. You may at any time opt out from receiving these types of communications by changing the settings on your mobile device.
139178
140O'Reilly uses administrative, technical, and physical safeguards to protect the security, confidentiality and integrity of PI against loss, misuse and unauthorized access, disclosure, alteration, and destruction. In addition, we use standard security protocols and mechanisms (such as secure socket layer \[SSL\] encryption) to transmit sensitive data such as payment details.
179**We will use your information for the purposes listed above either on the basis of:**
141180
142You can assist us in protecting your PI by keeping your password and login information secret, and making sure that you terminate user sessions, close the browser, and log out when you access our services from shared computers. Please note that no method of transmission over the internet, nor any method of electronic storage, is 100% secure. Therefore, we cannot guarantee its absolute security.
181- Your consent (where we request it)
182- Performance of your contract with us and the provision of our services to you
183- Where we need to comply with a legal or regulatory obligation
184- Our legitimate interests or those of a third party (see "Section 2.2 Legitimate Interests" below for more information)
143185
144### 7\. Access and Accuracy; Updating, Correcting or Deleting Personal Information
186### 2.2 Legitimate interests
145187
146It is important to us to maintain the accuracy of your contact information.
188As outlined above, in certain circumstances we may use your personal information to pursue legitimate interests of our own or those of third parties. Where we refer to our "legitimate interests," we mean our legitimate business interests in conducting and managing our business and our relationship with you, including the legitimate interests we have specified in Section 2.1 above.
147189
148This section of the Policy concerns updating, correcting, and/or deleting PI.
190Where we use your information for our legitimate interests, we make sure that we take into account any potential impact that such use may have on you. Our legitimate interests don't automatically override yours, and we won't use your information if we believe your interests should override ours unless we have other grounds to do so (such as your consent or a legal obligation). If you have any concerns about our processing, please refer to the details of your rights in Section 6 below.
149191
150O'Reilly Media Requests to Access or Update Information:
192### 2.3 Cross-device tracking
151193
152If you need to update, correct, or request the deletion or deactivation of your information please do so by email at .
194Your browsing activity may be tracked across different websites and different devices or apps. For example, we may attempt to match your browsing activity on your mobile device with your browsing activity on your laptop to efficiently serve content to you if you're a logged-in user or, in the case of non-logged-in users, to increase the accuracy of site usage analytics. To do this, our technology service providers may share data, such as your browsing patterns and device identifiers, and will match the information of the browser and devices that appear to be used by the same person.
153195
154You also may update your information by writing to:
196### 2.4 Business-to-business accounts
155197
156O'Reilly Media, Inc.
157Attn: Online Marketing
1581005 Gravenstein Hwy North
159Sebastopol, CA 95472
198You may be receiving access to our O'Reilly learning platform service pursuant to a business-to-business ("B2B") contract in place between us and your employer. Some of our B2B customers are subject to laws and regulations such as GDPR which require them to execute a data processing addendum or other kinds of stipulations regarding privacy and personal data protection with us. To the extent that your employer has executed a data processing addendum with O'Reilly, the following terms apply to our processing of your personal information in relation to a B2B account:
160199
161We will make reasonable efforts to incorporate the changes as soon as possible. Before we make changes, we may ask you to verify your identity and/or provide other details.
200- **We act as data processors** for the personal information that we receive from your employer. This is the personal information that we require in order to create a user account for you under our B2B contract with your employer. As data processors, we only process this personal information in accordance with the instructions provided to us by your employer, who, as data controller, is solely responsible for determining the purposes for which we may process your personal information.
201- **We act as data controllers** for any personal information we collect in relation to your usage of the O'Reilly learning platform ("B2B Usage Data"), such as the content you have accessed, as well as for any additional personal information you choose to share with us. Our policies in relation to our collection and processing of your personal information as data controllers are covered by this Privacy Policy.
162202
163We may keep a copy of the prior information for our records.
203Please note that B2B Usage Data may be made visible, shared, or otherwise disclosed to your employer. When we make B2B Usage Data available to your employer, we do so based on the fact that your employer administers your account and that it has a legitimate interest in understanding and optimizing your usage of the O'Reilly learning platform. Your employer's processing of B2B Usage Data is governed by your employer's privacy policy. Please contact your employer if you have any questions or concerns in relation to your employer's use of B2B Usage Data.
164204
165We provide individuals with reasonable access to their PI in order to have it corrected, amended or deleted where it is inaccurate or inappropriate for the specified purposes of processing. We will respond to all requests for access within 30 days.
205Please note that this section may also apply in circumstances where you are obtaining access to the O'Reilly learning platform as an authorized user under a B2B account that is administered by an entity that is not your employer (for example, an organization for which you act as a contractor or as an agent).
166206
167We will retain your information (including geo-location data) for as long as your account is active, and as necessary to provide you services, to comply with our legal obligations, to resolve disputes, and to enforce our agreements.
207Please note that your employer and O'Reilly may have executed legal terms, including ad hoc terms relating to the processing of your personal information, which deviate from the representations made under this section. If you have any questions relating to the stipulations between O'Reilly and your employer with respect to the processing of your personal information, please reach out to us using the contact information under the ["Contact Us" section]() above, or reach out to your employer directly.
168208
169Marketing Communications: To opt-out from or change your marketing communications preferences, follow the opt-out instructions included in the relevant newsletter or communication. Please note that your marketing communication preferences do not affect transactional, relationship, and/or legally required communications.
209## 3\. How We Share and Disclose Personal Information
170210
171PI Posted in Blogs: To request removal of your PI from one of our blogs, please contact . In some cases, we may not be able to remove your PI. In that case, we will let you know.
211There are certain circumstances in which we may share your personal information with certain third parties, as follows
172212
173Personal Testimonials: If you wish to update or delete your personal testimonial, you can contact us at .
213- **Other website users and clients who use our websites and/or applications** to communicate or otherwise interact with you
214- **Sponsors, partners, and collaborators,** including sponsors of our events, products, or services and organizations with whom we host co-branded events
215- **Our service providers who are acting as processors** and who assist us with our administrative or business functions or in the provision of any of our products/services to you
216- **Wholly owned subsidiaries and foreign offices of O'Reilly Media, Inc.,** including those based in the USA, the UK, China, and Japan
217- **Regulators and governmental bodies** like the IRS, HMRC, and other authorities and regulators acting as processors or joint controllers who require reporting of processing activities in certain circumstances
218- **Marketing parties,** which are any selected third party that you consent to our sharing your information with for marketing purposes
219- **Any prospective buyer of our business or assets**, only in the event that we wish to sell any part of our business or assets
220- **Your employer,** pursuant to Section 2.4 above
221- **Other third parties,** including legal, professional, or other advisors, regulatory authorities, courts, law enforcement agencies, and government agencies, where necessary to enable us to enforce our legal rights or to protect the rights, property, or safety of our employees, or where such disclosure may be permitted or required by law
174222
175### 8\. Children's Privacy
223For a list of the categories of personal information we have disclosed about consumers for a business purpose in the past 12 months, please click [here](https://www.oreilly.com/privacy-categories-disclosed-for-business-purpose.html). For a list of categories of personal information we have sold or shared about consumers for a business purpose in the past 12 months for valuable consideration, please click [here](https://www.oreilly.com/privacy-categories-disclosed-for-valuable-consideration.html). We rely on the lawful bases set out in Section 2.1 above when we use your information for these purposes.
176224
177O'Reilly's websites and marketing are not directed to children under 13 years of age.
225## 4\. How We Look After Your Personal Information and How Long We Keep It
178226
179### 9\. Transfers of PI Outside the U.S.
227### 4.1 Security
180228
181O'Reilly transacts business throughout the world and has operations, processes and systems that cross borders. By providing us with information, including PI, you agree and acknowledge that we may transfer it within O'Reilly in the United States and to affiliates, joint venture partners, and third party service providers around the world.
229We use administrative, technical, and physical safeguards to protect the security, confidentiality, and integrity of personal information against loss, misuse, unauthorized access, disclosure, alteration, and destruction. We also operate a policy of "privacy by design" by looking for opportunities to minimize the amount of personal information we hold about you.
182230
183### 10\. Questions or Concerns: Contact Us
231The safeguards we use include:
184232
185O'Reilly regularly reviews its compliance with this Policy. Please feel free to direct any questions or concerns regarding this Policy or O'Reilly's treatment of PI by emailing us at or by writing to us at:
233- Ensuring the physical security of our offices, warehouses, or other sites
234- Ensuring the physical and digital security of our equipment and devices by using appropriate password protection and encryption
235- Using standard security protocols and mechanisms, such as Secure Sockets Layer (SSL) encryption, to transmit sensitive data such as credit card details
236- Maintaining a data protection policy for and delivering data protection training to our employees
237- Limiting access to your personal information to those who need to use it in the course of their work
186238
187O'Reilly Media, Inc.
188Attn: Online Marketing
1891005 Gravenstein Hwy North
190Sebastopol, CA 95472
239If you have any questions about the security of your personal information, please contact us using the methods outlined in the ["Contact Us" section]() above.
191240
192### 11\. Changes to this Privacy Policy
241### 4.2 Retention
193242
194Please note that this Policy may change from time to time. We will not make material change that would reduce your rights under this Policy without your consent. If we make any material changes we will notify you by email (sent to the e-mail address specified in your account) or by means of a notice on our website prior to the change becoming effective. We will also keep prior versions of this Policy in an archive for your review.
243We will keep your information for as long as is necessary to provide you with the services that you have requested from us or for as long as we reasonably require to retain the information for our lawful business purposes, such as for the purposes of exercising our legal rights or where we are permitted to do so. We operate a data retention policy and look to find ways to reduce the amount of information we hold about you and the length of time that we need to keep it.
195244
196### 12\. Your Privacy Rights - Information Sharing Disclosure for California Residents
245Please contact us using the methods outlined in the ["Contact Us" section]() above if you would like to obtain details of our retention periods for different aspects of your personal information.
197246
198O'Reilly's policy is to share your PI only if you have given us your consent, for instance, by your agreeing to this Policy.
247### 4.3 Help keep your information safe
199248
200After obtaining such consent, O'Reilly may from time to time provide its business partners with contact details for direct marketing purposes of relevant services, products, and programs.
249You can also play a part in keeping your information safe by:
201250
202If you no longer wish your information to be shared, or if you have questions regarding our information sharing practices, please let us know. You can email us at .
251- Choosing a strong account password, changing it regularly, and using different passwords for different online accounts.
252- Keeping your login and password details confidential.
253- Logging out of the website and closing the browser each time you have finished using it, especially when using a shared computer.
254- Informing us if you know or suspect that your account has been compromised or if someone has accessed your account without your permission.
255- Keeping your devices protected by using the latest version of your operating system and maintaining any necessary antivirus software.
256- Being vigilant against fraudulent emails that may appear to be from us. Any emails that we send will come from an email address ending in either @oreilly.com (O'Reilly US), @mail.oreilly.com.cn (O'Reilly China), @oreilly.co.uk (O'Reilly UK), @oreilly.co.jp (O'Reilly Japan), or @safaribooksonline.com or @e.safaribooksonline.com (Safari Books).
203257
204### 13\. Previous Versions
258## 5\. International Transfers of Your Information
205259
206For the previous version please [click here](http://www.oreilly.com/privacy-091415.html).
260O'Reilly and Safari are both based in the United States of America.
207261
208This is version 2.0.
262### 5.1 Data Privacy Framework: EU-US, Swiss-US, and UK Extension
263
264O'Reilly Media, Inc. and Safari Books Online, LLC (and entities and subsidiaries that are, or may become, covered by O'Reilly or Safari's Data Privacy Framework certification) participate in and have certified their compliance with the EU-US Data Privacy Framework, the Swiss-US Data Privacy Framework, and the UK Extension to the EU-US Data Privacy Framework (collectively the "Data Privacy Framework"). O'Reilly and Safari are committed to subjecting all personal information received from the European Economic Area, United Kingdom, and Switzerland ("DPF Covered Data"), respectively, in reliance on each Data Privacy Framework, to the Framework's applicable Principles of Notice, Choice, Accountability for Onward Transfer, Security, Data Integrity and Purpose Limitation, Access, and Recourse, and Enforcement and Liability, any applicable supplemental principles (collectively the "DPF Principles"). O'Reilly and Safari have each certified to the US Department of Commerce that it adheres to the DPF Principles. To learn more about the Data Privacy Framework and to view O'Reilly and Safari's certifications, please visit the US Department of Commerce's Data Privacy Framework List, available at [https://www.dataprivacyframework.gov/s/](https://www.dataprivacyframework.gov/s/). If there is any conflict between the terms in this Policy and the DPF Principles, the DPF Principles shall govern. Additionally, O'Reilly and Safari may protect your data through other legally valid methods, including international data transfer agreements.
265
266Under the Data Privacy Framework, O'Reilly and Safari collect, use, and disclose DPF Covered Data for the purposes described in this Policy. Under the Data Privacy Framework, as described in Section 6 below, you may inquire as to whether O'Reilly and/or Safari is processing personal information about you, request access to personal information, and ask that we correct, amend, or delete your personal information where it is inaccurate or has been processed in violation of the DPF Principles. O'Reilly and Safari are responsible for the processing of personal information each receives, under each Data Privacy Framework, and subsequently transfers to a third party acting as an agent on its behalf. The Data Privacy Framework requires that O'Reilly and Safari remain liable should their third parties process personal information in a manner inconsistent with the DPF Principles. O'Reilly and Safari comply with the DPF Principles for all onward transfers of personal data from the European Economic Area, United Kingdom, and Switzerland, including the onward transfer liability provisions.
267
268With respect to DPF Covered Data received or transferred pursuant to the Data Privacy Framework, O'Reilly and Safari are subject to the investigatory and enforcement powers of the US Federal Trade Commission (the "FTC"). The FTC has jurisdiction over O'Reilly and Safari's compliance with the Data Privacy Framework. In certain situations, we may be required to disclose personal information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
269
270If you are an EU or Swiss citizen and feel that we are not abiding by the terms of this Privacy Policy or that we are not in compliance with the DPF Principles, please contact us by using the [contact information]() provided at the top of this Privacy Policy.
271
272Under certain conditions, more fully described on the Data Privacy Framework website [https://www.dataprivacyframework.gov/s/article/How-to-Submit-a-Complaint-Relating-to-a-Participating-Organization-s-Compliance-with-the-DPF-Principles-dpf](https://www.dataprivacyframework.gov/s/article/How-to-Submit-a-Complaint-Relating-to-a-Participating-Organization-s-Compliance-with-the-DPF-Principles-dpf), you may be entitled to invoke binding arbitration when other dispute resolution procedures have been exhausted. For additional information, see [https://www.dataprivacyframework.gov/s/article/How-to-Submit-a-Complaint-Relating-to-a-Participating-Organization-s-Compliance-with-the-DPF-Principles-dpf](https://www.dataprivacyframework.gov/s/article/How-to-Submit-a-Complaint-Relating-to-a-Participating-Organization-s-Compliance-with-the-DPF-Principles-dpf).
273
274If you are not satisfied with our response, O'Reilly and Safari further commit to cooperate with the EU data protection authorities (DPAs), the UK Information Commissioner's Office (ICO), and the Swiss Federal Data Protection and Information Commissioner (FDPIC) with regard to the investigation and resolution of unresolved Data Privacy Framework complaints concerning data transferred from the EU and Switzerland to the United States.
275
276### 5.2 Special note to users outside of the United States
277
278We transact business throughout the world and have operations, processes, and systems that cross borders. Our offices are located in the United States, the United Kingdom, China, and Japan, and our servers are located in the United States, the United Kingdom, China, and Japan. We may transfer your personal information within the O'Reilly group of companies in the United States and to affiliates, joint venture partners, and third-party service providers around the world.
279
280If you reside in the European Union, please be advised that your personal information will be processed outside of the European Economic Area (EEA). We will take all steps necessary to ensure that your information is adequately protected and processed in accordance with this Privacy Policy, including but not limited to:
281
282- Only transferring your personal information to [countries that have been deemed to provide an adequate level of protection for personal information by the European Commission](https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/adequacy-protection-personal-data-non-eu-countries_en).
283- Where we use certain service providers, we may use specific contracts approved by the European Commission, which give personal information the same protection it has in Europe (the so-called [European Commission's Standard Contractual Clauses](https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/model-contracts-transfer-personal-data-third-countries_en)).
284
285We may transfer your personal information to countries in the following regions outside of the EEA: North America and Asia. Please contact us using the [contact details]() in this Privacy Policy if you want further information on the specific mechanism used by us when transferring your personal information out of the EEA.
286
287## 6\. Your Rights: Access and Accuracy, Updating, Correcting, or Deleting Information
288
289### 6.1 Your rights - summary
290
291You have certain rights in respect of the information that we hold about you, including:
292
293- The right to be informed of the ways in which we use your information, as we seek to do in this Privacy Policy
294- The right to restrict or object to the processing of your personal information, including the right to opt in or opt out of the sale of your personal information to third parties, if applicable, where such requests are permitted by law
295- The right to request access to the information that we hold about you
296- The right to request that we correct or rectify any information that we hold about you which is out of date or incorrect
297- The right to withdraw your consent for our use of your information in reliance of your consent (refer to Section 2 above to see when we are relying on your consent), which you can do by contacting us using any of the details at the top of this Privacy Policy
298- The right to object to our using your information on the basis of our legitimate interests (refer to Section 2 above to see when we are relying on our legitimate interests) or those of a third party, and there is something about your particular situation which makes you want to object to processing on this ground
299- The right to receive a copy of any information we hold about you (or request that we transfer this to another service provider) in a structured, commonly used machine-readable format, in certain circumstances
300- In certain circumstances, the right to ask us to limit or cease processing or erase information we hold about you
301- The right to lodge a complaint about us to the UK Information Commissioner's Office ([https://ico.org.uk/](https://ico.org.uk/)) as well as the right to lodge a complaint with the relevant authority in your country of work or residence
302- The right of nondiscrimination for exercising your rights
303
304### 6.2 How to exercise your rights
305
306You may exercise your rights above by contacting us using the methods outlined in the ["Contact Us" section]() above, and we will comply with your requests unless we have a lawful reason not to do so.
307
308**In the case of preventing processing for marketing activities**, you can opt out of marketing by signing in to your O'Reilly account and updating your account settings. You may also opt out of receiving newsletters or other communications by following the opt-out instructions included in each newsletter or communication or by contacting us using the methods outlined in the ["Contact Us" section]() above.
309
310**You can opt out of our Google Analytics** data collection by using the tools available [here](https://tools.google.com/dlpage/gaoptout/).
311
312Please note that your objection to processing (or withdrawal of any previously given consent) could mean that we are unable to provide you with our services. Even after you have chosen to withdraw your consent, we may continue to process your personal information when required or permitted by law, in particular in connection with exercising and defending our legal rights or meeting our legal and regulatory obligations.
313
314California residents can exercise their "Do Not Sell or Share My Personal Information" rights under the California Consumer Privacy Act (CCPA) by clicking [here]().
315
316**Thanks. You have been added to the list.**
317
318To opt out of advertising cookies, please consult the list of cookies and instructions [here](https://www.oreilly.com/privacy-cookies.html).
319
320### 6.3 What we need from you to process your requests
321
322We may need to request specific information from you to help us confirm your identity and to enable you to exercise the rights set out above. This is a security measure to ensure that personal information is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.
323
324You will not have to pay a fee to exercise the rights set out above. However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive. Alternatively, we may refuse to comply with your request in these circumstances. We will try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.
325
326## 7\. Children's Privacy
327
328Our website and services are not intended for children. We do not knowingly collect or maintain the personal information of children under the age of 13, and in some jurisdictions under the age of 16. If you are under the age of 13, please do not access our website at any time or in any manner. If we learn that we have collected personal information of children under the age of 13 or 16 (as applicable), we will delete any personal information we have collected, unless we have a legal obligation to keep it, and terminate the child's account as applicable.
329
330## 8\. Notice Regarding Sharing Data with Third-Party Websites, Social Media Platforms, and Software Development Kits
331
332You might provide personal information directly to third parties as a consequence of your interactions with our website and other services offered by us. For example, our website may contain content and links to other third-party websites, plug-ins, and applications that are operated by third parties that may also operate cookies. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We don't control these third-party websites or cookies; we do not endorse, screen, or approve and are not responsible for their privacy statements; and this Privacy Policy does not apply to them. Please check the terms and conditions and privacy policy of the relevant third-party website to find out how they collect and use your information. If you do not want us to share your personal information with these companies, contact us using one of the methods described in the ["Contact Us" section]() above.
333
334Please be responsible with the personal information of others when using our website and the services available on it. We are not responsible for your misuse of personal information or for the direct relationship between you and others that takes place outside of the website or our services.
335
336Our services may include publicly accessible blogs, forums, social media pages, and private messaging features. By using such services, you assume the risk that the personal information provided by you may be viewed and used by third parties for any number of purposes. In addition, social media buttons such as Facebook, LinkedIn, Twitter, and Snapchat (that might include widgets such as the "share this" button or other interactive mini-programs) may be on our site. These features may collect your IP address and which page you are visiting on our site and may set a cookie to enable the feature to function properly. These social media features are either hosted by a third party or hosted directly on our site. Your interactions with these features apart from your visit to our site are governed by the privacy policy of the company providing it.
337
338We may use third-party APIs and software development kits ("SDKs") as part of the functionality of our services. APIs and SDKs may allow third parties including analytics and advertising partners to collect your personal information for various purposes, including to provide analytics services and content that is more relevant to you. For more information about our use of APIs and SDKs, please contact us using the methods outlined in the ["Contact Us" section]() above.
339
340## 9\. California "Shine the Light" Law
341
342This section applies only to California consumers. O'Reilly's and Safari's policy is to share your personal information only if you have given us your consent, for instance, by your agreeing to this Privacy Policy through your use of our sites. After obtaining such consent, O'Reilly may in accordance with this Privacy Policy from time to time provide its business partners with your contact details for direct marketing purposes of relevant services, products, and programs. If you no longer wish your information to be shared, please let us know, and we will prevent disclosure of your information to such business partners free of charge, or if you have further inquiries regarding our information sharing practices, please let us know using the methods outlined in the ["Contact Us" section]() above.
343
344**How we collect, use, and share your personal information**
345
346We have collected the following statutory categories of personal information in the past twelve (12) months:
347
348- **Identity and contact data**: names, addresses, and email addresses
349- **Account profile data**: username/display name, password, user preferences, and, if you sign up through a social media account, certain information about that account
350- **Financial data**: payment details, which may include billing addresses, credit/debit card details, and bank account details
351- **Any other information that you choose to share with us**: for example, any information that you choose to provide within the bio and social profiles sections of your profile settings, when you fill out our survey(s), via our website or social media accounts linked to our website, in person at events or meetings, or over the phone
352- **Technical data**: your web browser user agent information and IP address
353- **Usage data and analytics**: information related to your usage of the O'Reilly learning platform, such as the content you have accessed, viewed or otherwise interacted with
354
355The business and commercial purposes for which we collect this information are described in Section 2 of this Privacy Policy. The categories of third parties to whom we "disclose" this information for a business purpose are described in Section 3 of this Privacy Policy.
356
357### 9.2 Do Not Track
358
359California law requires us to let you know how we respond to web browser Do Not Track (DNT) signals. DNT is a way for users to inform websites and services that they do not want certain information about their web page visits collected over time and across websites or online services. We do not respond to or honor DNT signals or similar mechanisms transmitted by web browsers at this time.
360
361## 10\. US Privacy Rights
362
363This section applies if you are a resident of a US state that has enacted a consumer privacy law, such as the California Consumer Privacy Act ("CCPA") for California residents, the Colorado Privacy Rights Act ("CPA") for Colorado residents, or the Connecticut Data Privacy Act ("CDPA") for Connecticut residents. For a description of the categories of personal information about consumers that we have collected and processed in the past 12 months, please refer to sections 2 and 3 of this Policy. Please note that any Sensitive Personal Information, as defined under the CCPA, shall only be processed by us for the purpose of performing the services or provide the products you have requested from us, to prevent, detect, and investigate security incidents, to detect security incidents, resist malicious, deceptive, fraudulent, or illegal actions and to prosecute those responsible for those actions, to ensure customers and other peoples' physical safety, for short-term use such as nonpersonalized advertising as part of our current interactions, to verify or maintain the quality or safety of service, improve, upgrade, or enhance service, or other reasons that do not require an opt-out of this use.
364
365**Your US privacy rights**
366
367You have certain rights regarding the personal information we collect or maintain about you. Please note these rights are not absolute, and there may be cases when we decline your request as permitted by law.
368
369- **Right to know.** You have the right to request that we disclose to you what personal information we collect, use, and share, including the categories of personal information, the categories of sources from which the personal information is collected, the business or commercial purpose for collecting, selling, or sharing personal information, the categories of third parties to whom we disclose personal information, and the specific pieces of personal information we have collected about you.
370- **Right to correct inaccurate information.** You have the right to request that we correct any inaccurate personal information we process about you.
371- **Right to delete personal information.** You have the right to request that we delete personal information collected or maintained by us, subject to certain exceptions.
372- **Right to opt out.** To the extent that we sell or share your personal information, you have the right to opt out from such sale or sharing of your personal information. In any case, please note that we do not knowingly sell or share any personal information of consumers under 16 years of age.
373- **Right to nondiscrimination.** You have the right to nondiscrimination, which means that you will not receive any discriminatory treatment should you decide to exercise one of your privacy rights.
374
375**How to exercise your rights**
376
377You can exercise your rights yourself, or you can alternatively designate an authorized agent to exercise these rights on your behalf. Please note that to protect your personal information, we will verify your identity by a method appropriate to the type of request you are making. We may also request that your authorized agent have written permission from you to make requests on your behalf, and we may also need to verify your authorized agent's identity to protect your personal information.
378
379Please use the contact details methods outlined in the [Contact Us" section above]() if you would like to:
380
381- Access this policy in an alternative format
382- Exercise your rights
383- Learn more about your rights or our privacy practices
384- Designate an authorized agent to make a request on your behalf
385
386You may also opt out from the sale or sharing of your personal information by directly filling out the form included under the ["Contact Us" section]() of this Policy.
387
388## 11\. Changes to This Privacy Policy
389
390Please note that this Policy may change from time to time. We will not reduce your rights under this Policy without your consent. If we make any material changes, we will notify you by email or by means of a notice on this website prior to the change becoming effective. You can also view prior versions of the Policy by viewing the links in Section 12 below.
391
392## 12\. Previous Versions of the Privacy Policy
393
394### 12.1 O'Reilly and Safari privacy policies
395
396[Click here for version 4.14](https://www.oreilly.com/privacy-092623.html)
397
398[Click here for version 4.13](https://www.oreilly.com/privacy-072123.html)
399
400[Click here for version 4.12](https://www.oreilly.com/privacy-120622.html)
401
402[Click here for version 4.11](https://www.oreilly.com/privacy-092822.html)
403
404[Click here for version 4.10](https://www.oreilly.com/privacy-022422.html)
405
406[Click here for version 4.9](https://www.oreilly.com/privacy-100721.html)
407
408[Click here for version 4.8](https://www.oreilly.com/privacy-072921.html)
409
410[Click here for version 4.7](https://www.oreilly.com/privacy-040721.html)
411
412[Click here for version 4.6](https://www.oreilly.com/privacy-010120.html)
413
414[Click here for version 4.5](https://www.oreilly.com/privacy-111219.html)
415
416[Click here for version 4.4](https://www.oreilly.com/privacy-081519.html)
417
418[Click here for version 4.3](https://www.oreilly.com/privacy-112118.html)
419
420[Click here for version 4.2](https://www.oreilly.com/privacy-101018.html)
421
422[Click here for version 4.1](https://www.oreilly.com/privacy-100418.html)
423
424[Click here for version 4.0](https://www.oreilly.com/privacy-052518.html)
425
426### 12.2 O'Reilly privacy policies
427
428[Click here for version 2.1](https://www.oreilly.com/privacy-111016.html)
429
430[Click here for version 2.0](https://www.oreilly.com/privacy-120214.html)
431
432[Click here for version 1.1](https://www.oreilly.com/privacy-091415.html)
433
434### 12.3 O'Reilly School of Technology privacy policies
435
436[Click here for version 2.1](http://archive.oreilly.com/oreillyschool/privacy-policy/)
437
438[Click here for version 2.0](http://archive.oreilly.com/oreillyschool/privacy-policy-version2/)
439
440### 12.4 Safari privacy policies
441
442[Click here for version 3.4](https://cdn.oreillystatic.com/pdf/SafariPrivacyPolicy_v3.4_23October2017.pdf)
443
444[Click here for version 3.3](https://www.safaribooksonline.com/static/legal/SafariPrivacyPolicy_v3.3_13June2017.a4d9478408f5.pdf)