O'Reilly Privacy Policy (Version 4.15)
DATED 2021-04-07 · VERSION 20210714_rev01 · COMPARED WITH 20200101_rev01 · ARCHIVE SNAPSHOT
Full text changes — 20200101_rev01 to 20210714_rev01
COLOUR MARKS THE SEVERITY OF A FLAGGED CLAUSE · + AND − MARK ADDED AND REMOVED
| 1 | This version (Version 4.6) is effective as of January 1, 2020. | |
| 1 | This version (Version 4.7) is effective as of April 7, 2021. | |
| 2 | 2 | |
| 3 | 3 | - [Overview]() |
| 4 | 4 | - [About Us]() |
| 5 | 5 | - [Questions or Concerns: Contact Us]() |
| 6 | 6 | |
| 7 | 7 | 1. [Information We Collect]() |
| 53 | 53 | The contact information above should also be used for communications relating to exercising the rights described in section 6.2 below. |
| 54 | 54 | |
| 55 | 55 | If we do not resolve your question or concern satisfactorily, then please contact our U.S.-based third party dispute resolution providers (free of charge) at [https://feedback-form.truste.com/watchdog/request](https://feedback-form.truste.com/watchdog/request). |
| 56 | 56 | |
| 57 | 57 | For inquiries: |
| 58 | 58 | |
| 59 | Our EU Representative: As we, O'Reilly Media, Inc. and Safari Books Online, LLC, are not established in the EU, we have appointed O'Reilly UK Limited as our EU representative whom you may contact if you are located in the EU to raise any issues or queries you have relating to our processing of your personal information and/or this Privacy Policy more generally. Our EU representative's contact details are: | |
| 59 | Our EU Representative: As we, O'Reilly Media, Inc. and Safari Books Online, LLC, are not established in the EU, pursuant to Article 27 of the General Data Protection Regulation (GDPR), we have appointed European Data Protection Office (EDPO) as our GDPR representative in the EU whom you may contact if you are located in the EU to raise any issues or queries you have relating to our processing of your personal information and/or this Privacy Policy more generally. You can contact EDPO: | |
| 60 | 60 | |
| 61 | FAO | |
| 61 | - by using EDPO's online request form: [https://edpo.com/gdpr-data-request/](https://edpo.com/gdpr-data-request/) | |
| 62 | - by writing to EDPO at Avenue Huart Hamoir 71, 1030 Brussels, Belgium | |
| 62 | 63 | |
| 63 | Data Protection Manager | |
| 64 | ||
| 65 | Address | |
| 66 | ||
| 67 | O'Reilly UK Limited, 5 St George's Yard, Farnham, Surrey, GU9 7LW, UK | |
| 68 | ||
| 69 | ||
| 70 | ||
| 71 | Phone | |
| 72 | ||
| 73 | [+44 (0) 1252 721284](tel:+44-1252-721284) | |
| 74 | ||
| 75 | 64 | If you prefer, you can of course always contact us using our US contact details set out above. |
| 76 | 65 | |
| 77 | 66 | ## 1\. Information We Collect |
| 78 | 67 | |
| 79 | 68 | We collect personal information in the following ways: |
| 80 | 69 | |
| 89 | 78 | - make an inquiry, provide feedback, submit correspondence, or make a complaint over the phone, by email, on our website or by post |
| 90 | 79 | - register for, and update an online account with us (including if you access through Facebook, LinkedIn, Twitter, Google, or an open IP provider, or our mobile applications) |
| 91 | 80 | - register to, present at, and/or attend, our events and conferences, scan your attendance badge at any of the booths at our conferences/events, or at our booths when we are present at someone else's conference/event |
| 92 | 81 | - enter into a contract with us |
| 93 | 82 | - sign up for job alerts on our websites, submit a job application, a CV, cover letter, or social media profile to a job vacancy, attend an interview, assessment, or meeting |
| 94 | 83 | - contact other users on the websites, e.g. on the O'Reilly Community website |
| 95 | - 'follow', 'like', post to, or interact with, our social media accounts, including Facebook, LinkedIn, Twitter, Pinterest, Instagram, Google+, and SnapChat | |
| 84 | - 'follow', 'like', post to, or interact with, our social media accounts, including Facebook, LinkedIn, Twitter, Pinterest, Instagram, and SnapChat | |
| 96 | 85 | - contribute content and information about yourself in the course of your use of social and sharing features in our websites, services or products that make users' content and information available to the public or to specific groups, such as others who use those features |
| 97 | 86 | |
| 98 | 87 | The information you provide to us will include (depending on the circumstances): |
| 99 | 88 | |
| 100 | 89 | - **Identity and contact data**: title, names, addresses, email addresses, phone numbers or your signature. |
| 101 | 90 | - **Account profile data**: a username/display name, password, user preferences and, if you sign up through a social media account, certain information about that account. |
| 104 | 93 | - **Employment and background data**: if you apply for employment on our sites, your academic and work history, qualifications, skills, projects and research that you are involved in, references, proof of your entitlement to work in the relevant country, your national security number, your passport or other identity document details, your current level of remuneration (including benefits), and any other such similar information that you may provide to us. |
| 105 | 94 | - **Visual and audio information about yourself**: e.g. a photo or video footage, or sound recording. |
| 106 | 95 | - **Your preferences**: information about your preferences, interests, industry focus, community choices, and other customer profile information. |
| 107 | 96 | - **Sensitive information**: information about your race or ethnicity, religious beliefs, sexual orientation, health and whether or not you have any disability. You can find out more about how we use sensitive information below in the "Special Categories of Data" section. |
| 108 | 97 | - **Any other information that you choose to share with us**: for example, any information that you provide via correspondence, when you fill out our survey(s), that you share via our website or social media accounts linked to our website, or any information that you choose to provide in person at events, meetings, or over the phone. |
| 109 | 98 | - **Mobile application**: when you download and use the Safari service, we automatically collect information on the type of device you use and your operating system version. |
| 99 | - **Usage data**: information related to your usage of O'Reilly online learning, such as the content you have accessed, viewed or otherwise interacted with. | |
| 110 | 100 | |
| 111 | 101 | ### 1.2 Information we collect through technology related to our products and services |
| 112 | 102 | |
| 113 | 103 | Some of our products and services collect information about system and product data. We use this information to manage and administer our products and services, to issue updates and new versions, testing and monitoring services that we provide, enhancing our products and services, and improving and targeting our communications with you. |
| 114 | 104 | |
| 115 | 105 | ### 1.3 Information we collect through online technology |
| 129 | 119 | - **Organizations that we acquire or merge with.** |
| 130 | 120 | - **Organizations with whom we provide co-branded events, websites, products, and services.** |
| 131 | 121 | - **Fraud detection agencies.** |
| 132 | 122 | - **Your current and former employers, recruitment agencies, and referees.** |
| 133 | 123 | - **Service providers** including our website developers, IT support providers, cloud services providers, payment services providers, billing service providers, contractors, consultants, advertising agencies and platforms, digital performance monitoring and management providers, advertising analytics providers, marketing and sales service providers, user experience testing platforms, B2B contact databases, recruitment agencies, survey tool providers, customer relationship and customer support service providers, event ticket retailers, event management platform service providers, customer identity account management providers, HR service providers, couriers, instant messaging service providers. |
| 134 | 124 | - **Social media plugins.** By providing your social media account details you are authorizing that third-party provider to share with us certain information about you. |
| 135 | - **Publicly available sources** such as LinkedIn, Facebook, Twitter, and Google+. | |
| 125 | - **Publicly available sources** such as LinkedIn, Facebook, and Twitter. | |
| 136 | 126 | |
| 137 | 127 | We might also receive information about you from other third parties if you have indicated to such third parties that you would like to hear from us. |
| 138 | 128 | |
| 139 | 129 | ### 1.5 Special categories of data |
| 140 | 130 | |
| 141 | 131 | Special categories of particularly sensitive personal information require higher levels of protection. These so-called "special categories of data" include details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data. Depending on the circumstances, we will also collect information about criminal convictions and offenses. |
| 149 | 139 | - where it is necessary to protect your interests (or someone else's interests) and you are not capable of giving your consent |
| 150 | 140 | - where you have already made the information public. |
| 151 | 141 | |
| 152 | 142 | For example, we will collect special categories of information: |
| 153 | 143 | |
| 154 | 144 | - when you apply to work for us (for diversity and equal opportunities records, to support your needs and facilitate access to our premises, and to carry out background checks); |
| 155 | - when you attend our events, visit our premises, or apply for a diversity and inclusion scholarship from us to attend one of our conferences (to improve racial balance at our events), to make any necessary arrangements for your attendance, and to investigate claims about breaches of our [Conference Code of Conduct](https://www.oreilly.com/conferences/code-of-conduct.html). | |
| 145 | - when you attend our events, visit our premises, or apply for a diversity and inclusion scholarship from us to obtain access to our products or services. | |
| 156 | 146 | |
| 157 | 147 | In limited circumstances, we may request your written consent to allow us to use certain particularly sensitive data. If we do so, we will provide you with full details of the information that we would like and the reason we need it, so that you can carefully consider whether you wish to consent. |
| 158 | 148 | |
| 159 | 149 | ## 2\. Processing and Using Personal Information |
| 160 | 150 | |
| 161 | 151 | ### 2.1 How we process and use information we collect |
| 201 | 191 | Where we use your information for our legitimate interests, we make sure that we take into account any potential impact that such use may have on you. Our legitimate interests don't automatically override yours and we won't use your information if we believe your interests should override ours unless we have other grounds to do so (such as your consent or a legal obligation). If you have any concerns about our processing please refer to details of "Your Rights" in Section 6 below. |
| 202 | 192 | |
| 203 | 193 | ### 2.3 Cross-Device Tracking |
| 204 | 194 | |
| 205 | 195 | Your browsing activity may be tracked across different websites and different devices or apps. For example, we may attempt to match your browsing activity on your mobile device with your browsing activity on your laptop to efficiently serve content to you if you're a logged-in user or, in the case of non-logged in users, to increase the accuracy of site usage analytics. To do this our technology service providers may share data, such as your browsing patterns and device identifiers, and will match the information of the browser and devices that appear to be used by the same person. |
| 206 | 196 | |
| 197 | ### 2.4 Business-to-Business Accounts | |
| 198 | ||
| 199 | You may be receiving access to our O'Reilly online learning service pursuant to a business-to-business ("B2B") contract in place between us and your employer. The following terms apply to our processing of your Personal Information in relation to a B2B account: | |
| 200 | ||
| 201 | - **We act as data processors** for the Personal Information that we receive from your employer. This is the Personal Information that we require in order to create a user account for you under our B2B contract with your employer. As data processors, we only process this Personal Information in accordance with the instructions provided to us by your employer who, as data controller, is solely responsible for determining the purposes for which we may process your Personal Information. | |
| 202 | - **We act as data controllers** for any Personal Information we collect in relation to your usage of O'Reilly online learning ("B2B Usage Data"), such as the content you have accessed, as well as for any additional Personal Information you choose to share with us. Our policies in relation to our collection and processing of your Personal Information as data controllers is covered by this Privacy Policy. | |
| 203 | ||
| 204 | Please note that B2B Usage Data may be made visible, shared or otherwise disclosed to your employer. When we make B2B Usage Data available to your employer, we do so based on the fact that your employer administers your account and that it has a legitimate interest in understanding and optimizing your usage of O'Reilly online learning. Your employer's processing of B2B Usage Data is governed by your employer's privacy policy. Please contact your employer if you have any questions or concerns in relation to your employer's use of B2B Usage Data. | |
| 205 | ||
| 206 | Please note that this section may also apply in circumstances where you are obtaining access to O'Reilly online learning as an authorized user under a B2B account that is administered by an entity that is not your employer (e.g. organizations for which you act as a contractor or as an agent). | |
| 207 | ||
| 207 | 208 | ## 3\. How We Share and Disclose Personal Information |
| 208 | 209 | |
| 209 | 210 | There are certain circumstances in which we may share your personal information with certain third parties, as follows |
| 210 | 211 | |
| 211 | 212 | - **Other website users and clients who use our websites and/or applications** to communicate or otherwise interact with you. |
| 212 | 213 | - **Sponsors, partners and collaborators**, including sponsors of our events, products or services, and organizations with whom we host co-branded events. |
| 213 | 214 | - **Our service providers who are acting as processors** and who assist us with our administrative or business functions, or in the provision of any of our products/services to you. |
| 214 | 215 | - **Wholly owned subsidiaries, and foreign offices, of O'Reilly Media, Inc.** including those based in the USA, UK, China, and Japan. |
| 215 | 216 | - **Regulators and governmental bodies** like the IRS, HMRC, and other authorities and regulators acting as processors or joint controllers who require reporting of processing activities in certain circumstances. |
| 216 | 217 | - **Marketing parties** which are any selected third party that you consent to our sharing your information with for marketing purposes. |
| 217 | 218 | - **Any prospective buyer of our business or assets**, only in the event that we wish to sell any part of our business or assets. |
| 219 | - **Your employer**, pursuant to section 2.4 above. | |
| 218 | 220 | - **Other third parties** including legal, professional or other advisors, regulatory authorities, courts, law enforcement agencies and government agencies) where necessary to enable us to enforce our legal rights, or to protect the rights, property or safety of our employees or where such disclosure may be permitted or required by law. |
| 219 | 221 | |
| 220 | 222 | For a list of the categories of personal information we have disclosed about consumers for a business purpose in the past 12 months, please click [here](https://www.oreilly.com/privacy-categories-disclosed-for-business-purpose.html). For a list of categories of personal information we have sold about consumers for a business purpose in the past 12 months for valuable consideration, please click [here](https://www.oreilly.com/privacy-categories-disclosed-for-valuable-consideration.html). We rely on the lawful bases set out in Section 2.1 above when we use your information for these purposes. |
| 221 | 223 | |
| 222 | 224 | ## 4\. How We Look After Your Personal Information and How Long We Keep It |
| 223 | 225 | |
| 255 | 257 | ## 5\. International Transfers of Your Information |
| 256 | 258 | |
| 257 | 259 | O'Reilly and Safari are both based in the United States of America. |
| 258 | 260 | |
| 259 | 261 | ### 5.1 Privacy Shield Certification |
| 260 | 262 | |
| 261 | O'Reilly Media, Inc. and Safari Books Online, LLC (and entities and subsidiaries that are, or may become, covered by O'Reilly or Safari's privacy shield certification) participates in and have certified its compliance with the EU-U.S. Privacy Shield Framework and the Swiss-U.S. Privacy Shield Framework (collectively the "Privacy Shield Framework"). O'Reilly and Safari are committed to subjecting all personal information received from the European Economic Area, United Kingdom and Switzerland ("Privacy Shield Covered Data"), respectively, in reliance on each Privacy Shield Framework, to the Framework's applicable Principles of Notice, Choice, Accountability for Onward Transfer, Security, Data Integrity and Purpose Limitation, Access, and Recourse, Enforcement and Liability, including the 16 supplemental principles described in each Privacy Shield Framework (collectively, the "Privacy Shield Principles"). O'Reilly and Safari have each certified to the Department of Commerce that it adheres to the Privacy Shield Principles. To learn more about the Privacy Shield Framework and to view O'Reilly and Safari's certifications, please visit the U.S. Department of Commerce's Privacy Shield List available at [https://www.privacyshield.gov](https://www.privacyshield.gov/). If there is any conflict between the terms in this Policy and the Privacy Shield Principles, the Privacy Shield Principles shall govern. Additionally, O'Reilly and Safari may protect your data through other legally-valid methods, including international data transfer agreements. | |
| 263 | Although we realize the impact of the judgement of the Court of Justice of the EU in Case C-311/18 on the validity of the framework, O'Reilly Media, Inc. and Safari Books Online, LLC (and entities and subsidiaries that are, or may become, covered by O'Reilly or Safari's privacy shield certification) participate in and have certified their compliance with the EU-U.S. Privacy Shield Framework and the Swiss-U.S. Privacy Shield Framework (collectively the "Privacy Shield Framework"). O'Reilly and Safari are committed to subjecting all personal information received from the European Economic Area, United Kingdom and Switzerland ("Privacy Shield Covered Data"), respectively, in reliance on each Privacy Shield Framework, to the Framework's applicable Principles of Notice, Choice, Accountability for Onward Transfer, Security, Data Integrity and Purpose Limitation, Access, and Recourse, Enforcement and Liability, including the 16 supplemental principles described in each Privacy Shield Framework (collectively, the "Privacy Shield Principles"). O'Reilly and Safari have each certified to the Department of Commerce that it adheres to the Privacy Shield Principles. To learn more about the Privacy Shield Framework and to view O'Reilly and Safari's certifications, please visit the U.S. Department of Commerce's Privacy Shield List available at [https://www.privacyshield.gov](https://www.privacyshield.gov/). If there is any conflict between the terms in this Policy and the Privacy Shield Principles, the Privacy Shield Principles shall govern. Additionally, O'Reilly and Safari may protect your data through other legally-valid methods, including international data transfer agreements. | |
| 262 | 264 | |
| 263 | 265 | Under the Privacy Shield Framework, O'Reilly and Safari collect, use, and disclose Privacy Shield Covered Data for the purposes described in this Policy. Under the Privacy Shield Framework, as described in Section 6 below, you may inquire as to whether O'Reilly and/or Safari is processing personal information about you, request access to Personal Information, and ask that we correct, amend or delete your personal information where it is inaccurate or has been processed in violation of the Privacy Shield Principles. O'Reilly and Safari are responsible for the processing of personal information each receives, under each Privacy Shield Framework, and subsequently transfers to a third party acting as an agent on its behalf. Privacy Shield requires that O'Reilly and Safari remain liable should its third parties process personal information in a manner inconsistent with the Privacy Shield Principles. O'Reilly and Safari comply with the Privacy Shield Principles for all onward transfers of personal information from the European Economic Area, United Kingdom and Switzerland, including the onward transfer liability provisions. |
| 264 | 266 | |
| 265 | 267 | With respect to Privacy Shield Covered Data received or transferred pursuant to the Privacy Shield Framework, O'Reilly and Safari are subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission (the "FTC"). The FTC has jurisdiction over O'Reilly and Safari's compliance with the Privacy Shield Framework. In certain situations, we may be required to disclose personal information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements. |
| 266 | 268 | |
| 267 | 269 | If you are an EU or Swiss citizen and feel that we are not abiding by the terms of this Privacy Notice, or that we are not in compliance with the Privacy Shield Principles, please contact us by using the [contact information]() provided at the top of this Privacy Policy. |
| 273 | 275 | ### 5.2 Special note to users outside of the United States |
| 274 | 276 | |
| 275 | 277 | We transact business throughout the world and have operations, processes and systems that cross borders. Our offices are located in the United States, the United Kingdom, China and Japan, and our servers are located in the United States, the United Kingdom, Belgium, China and Japan. We transfer your personal information within the O'Reilly and Safari group of companies in the United States, and to affiliates, joint venture partners, and third party service providers around the world. |
| 276 | 278 | |
| 277 | 279 | If you reside in the European Union, please be advised that your personal information will be processed outside of the European Economic Area (EEA). We will take all steps necessary to ensure that your information is adequately protected and processed in accordance with this Privacy Policy, including but not limited to: |
| 278 | 280 | |
| 279 | - only transferring your personal information to [countries that have been deemed to provide an adequate level of protection for personal information by the European Commission](https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/adequacy-protection-personal-data-non-eu-countries_en); | |
| 280 | - where we use providers based in the US, we may transfer data to them if they are part of the [EU-US Privacy Shield](https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/eu-us-privacy-shield_en) which requires them to provide similar protection to personal information shared between the Europe and the US; or | |
| 281 | - only transferring your personal information to [countries that have been deemed to provide an adequate level of protection for personal information by the European Commission](https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/adequacy-protection-personal-data-non-eu-countries_en); or | |
| 281 | 282 | - where we use certain service providers, we may use specific contracts approved by the European Commission which give personal information the same protection it has in Europe (the so-called [European Commission's Standard Contractual Clauses](https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/model-contracts-transfer-personal-data-third-countries_en)). |
| 282 | 283 | |
| 283 | 284 | We may transfer your personal information to countries in the following regions outside of the EEA: North America and Asia. Please contact us using the [contact details]() in this Privacy Policy if you want further information on the specific mechanism used by us when transferring your personal information out of the EEA. |
| 284 | 285 | |
| 285 | 286 | ## 6\. Your Rights: Access and Accuracy, Updating, Correcting, or Deleting Information |
| 286 | 287 | |
| 306 | 307 | **In the case of preventing processing for marketing activities**, you can opt out of marketing by signing in to your O'Reilly Online Learning account and updating your account settings. You may also opt-out of receiving newsletters or other communications by following the opt-out instructions included in each newsletter or communication or by contacting us using the methods outlined in the ["Contact Us" section]() above. |
| 307 | 308 | |
| 308 | 309 | **You can opt out of our Google Analytics** data collection by using the tools available [here](https://tools.google.com/dlpage/gaoptout/). **You can opt out of Adobe Analytics** by using the tools available [here](https://smetrics.oreilly.com/optout.html). |
| 309 | 310 | |
| 310 | 311 | Please note that your objection to processing (or withdrawal of any previously given consent) could mean that we are unable to provide you with our services. Even after you have chosen to withdraw your consent we may continue to process your personal information when required or permitted by law, in particular in connection with exercising and defending our legal rights, or meeting our legal and regulatory obligations. |
| 311 | 312 | |
| 312 | California residents can exercise your "Do Not Sell My Personal Information" rights under the California Consumer Privacy Act (CCPA) by directly emailing [donotsell@oreilly.com](mailto:donotsell@oreilly.com) or clicking [here](mailto:donotsell@oreilly.com). | |
| 313 | California residents can exercise your "Do Not Sell My Personal Information" rights under the California Consumer Privacy Act (CCPA) by clicking [here](). | |
| 313 | 314 | |
| 315 | **Thanks. You have been added to the list.** | |
| 316 | ||
| 314 | 317 | To opt out of advertising cookies please consult the list of cookies and instructions [here](https://www.oreilly.com/privacy-cookies.html). |
| 315 | 318 | |
| 316 | 319 | ### 6.3 What we need from you to process your requests |
| 317 | 320 | |
| 318 | 321 | We may need to request specific information from you to help us confirm your identity and to enable you to exercise the rights set out above. This is a security measure to ensure that personal information is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response. |
| 319 | 322 | |
| 320 | 323 | You will not have to pay a fee to exercise the rights set out above. However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances. We will try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated. |
| 321 | 324 | |
| 322 | 325 | ## 7\. Children's Privacy |
| 323 | 326 | |
| 324 | This section 7 does not apply to our "Safari for Schools" services, which is subject to a separate privacy policy available [here](https://schools.safaribooksonline.com/privacy/). | |
| 325 | ||
| 326 | 327 | Our website and services are not intended for children. We do not knowingly collect or maintain the personal information of children under the age of 13, and in some jurisdictions under the age of 16. If you are under the age of 13, please do not access our website at any time or in any manner. If we learn that we have collected personal information of children under the age of 13 or 16 (as applicable), we will delete any personal information we have collected, unless we have a legal obligation to keep it, and terminate the child's account as applicable. |
| 327 | 328 | |
| 328 | 329 | ## 8\. Notice Regarding Sharing Data with Third Parties Websites, Social Media Platforms and Software Development Kits |
| 329 | 330 | |
| 330 | 331 | You might provide personal information directly to third parties as a consequence of your interactions with our website and other services offered by us. For example, our website may contain content and links to other third-party websites, plug-ins, and applications that are operated by third parties that may also operate cookies. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We don't control these third party websites or cookies, we do not endorse, screen or approve and are not responsible for their privacy statements, and this Privacy Policy does not apply to them. Please check the terms and conditions and privacy policy of the relevant third party website to find out how they collect and use your information. If you do not want us to share your personal information with these companies, contact us using one of the methods described in the ["Contact Us" section]() above. |
| 331 | 332 | |
| 332 | 333 | Please be responsible with personal information of others when using our website and the services available on it. We are not responsible for your misuse of personal information, or for the direct relationship between you and others that takes place outside of the website or our services. |
| 333 | 334 | |
| 334 | Our Services may include publicly accessible blogs, forums, social media pages, and private messaging features. By using such Services, you assume the risk that the personal information provided by you may be viewed and used by third parties for any number of purposes. In addition, social media buttons such as Facebook, LinkedIn, Twitter, SnapChat and Google+ (that might include widgets such as the "share this" button or other interactive mini-programs) may be on our site. These features may collect your IP address, which page you are visiting on our site, and may set a cookie to enable the feature to function properly. These social media features are either hosted by a third party or hosted directly on our site. Your interactions with these features apart from your visit to our site are governed by the privacy policy of the company providing it. | |
| 335 | Our Services may include publicly accessible blogs, forums, social media pages, and private messaging features. By using such Services, you assume the risk that the personal information provided by you may be viewed and used by third parties for any number of purposes. In addition, social media buttons such as Facebook, LinkedIn, Twitter, and SnapChat (that might include widgets such as the "share this" button or other interactive mini-programs) may be on our site. These features may collect your IP address, which page you are visiting on our site, and may set a cookie to enable the feature to function properly. These social media features are either hosted by a third party or hosted directly on our site. Your interactions with these features apart from your visit to our site are governed by the privacy policy of the company providing it. | |
| 335 | 336 | |
| 336 | 337 | We may use third party APIs and software development kits ("SDKs") as part of the functionality of our Services. APIs and SDKs may allow third parties including analytics and advertising partners to collect your personal information for various purposes including to provide analytics services and content that is more relevant to you. For more information about our use of APIs and SDKs, please contact us. |
| 337 | 338 | |
| 338 | 339 | ## 9\. For California Residents: Additional Privacy Rights |
| 339 | 340 | |
| 341 | This section applies only to California consumers. It describes how we collect, use, and share California consumers' personal information in our role as a business, and the rights applicable to such consumers. If you are unable to access this Privacy Policy due to a disability or any physical or mental impairment, please contact us and we will arrange to supply you with the information you need in an alternative format that you can access. | |
| 342 | ||
| 340 | 343 | ### 9.1 California Shine the Light Law |
| 341 | 344 | |
| 342 | 345 | O'Reilly's and Safari's policy is to share your personal information only if you have given us your consent, for instance, by your agreeing to this Privacy Policy through your use of our sites. After obtaining such consent, Safari may in accordance with this Privacy Policy from time to time provide its business partners with contact details for direct marketing purposes of relevant services, products, and programs. If you no longer wish your information to be shared, please let us know, and we will prevent disclosure of your information to such business partners free of charge, or if you have further inquiries regarding our information sharing practices, please let us know using the methods outlined in the ["Contact Us" section]() above. |
| 343 | 346 | |
| 347 | **How We Collect, Use, and Share your Personal Information** | |
| 348 | ||
| 349 | We have collected the following statutory categories of Personal Information in the past twelve (12) months: | |
| 350 | ||
| 351 | - **Identity and contact data**: names, addresses, email addresses. | |
| 352 | - **Account profile data**: a username/display name, password, user preferences and, if you sign up through a social media account, certain information about that account. | |
| 353 | - **Financial data**: payment details, which may include billing addresses, credit/debit card details and bank account details. | |
| 354 | - **Any other information that you choose to share with us**: for example, any information that you choose to provide within the Bio and Social Profiles sections of your Profile Settings, when you fill out our survey(s), that you share via our website or social media accounts linked to our website, or any information that you choose to provide in person at events, meetings, or over the phone. | |
| 355 | - **Technical data**: your web browser user agent information and IP Address. | |
| 356 | - **Usage data and analytics**: information related to your usage of O'Reilly online learning, such as the content you have accessed, viewed or otherwise interacted with. | |
| 357 | ||
| 358 | The business and commercial purposes for which we collect this information are described in Section 2 of this Privacy Policy. The categories of third parties to whom we "disclose" this information for a business purpose are described in Section 3 of this Privacy Policy. | |
| 359 | ||
| 360 | **Your California Rights** | |
| 361 | ||
| 362 | You have certain rights regarding the Personal Information we collect or maintain about you. Please note these rights are not absolute, and there may be cases when we decline your request as permitted by law. | |
| 363 | ||
| 364 | - You have the right to request that we disclose to you what Personal Information we collect, use and disclose. | |
| 365 | - You have the right to request that we delete Personal Information collected or maintained by us, subject to certain exceptions. | |
| 366 | - You have the right to non-discrimination, which means that you will not receive any discriminatory treatment should you decide to exercise one of your privacy rights. | |
| 367 | ||
| 368 | **How to Exercise your California Rights** | |
| 369 | ||
| 370 | You can exercise your rights yourself or you can alternatively designate an authorized agent to exercise these rights on your behalf. Please note that to protect your Personal Information, we will verify your identity by a method appropriate to the type of request you are making. We may also request that your authorized agent have written permission from you to make requests on your behalf, and we may also need to verify your authorized agent's identity to protect your Personal Information. | |
| 371 | ||
| 372 | Please use the contact details below, if you would like to: | |
| 373 | ||
| 374 | - Access this policy in an alternative format; | |
| 375 | - Exercise your rights; | |
| 376 | - Learn more about your rights or our privacy practices; or | |
| 377 | - Designate an authorized agent to make a request on your behalf. | |
| 378 | ||
| 344 | 379 | ### 9.2 Do Not Track |
| 345 | 380 | |
| 346 | 381 | California law requires us to let you know how we respond to web browser Do Not Track (DNT) signals. DNT is a way for users to inform websites and services that they do not want certain information about their webpage visits collected over time and across websites or online services. We do not respond to or honor DNT signals or similar mechanisms transmitted by web browsers at this time. |
| 347 | 382 | |
| 348 | 383 | ## 10\. Changes to this Privacy Policy |
| 349 | 384 | |
| 350 | 385 | Please note that this Policy may change from time to time. We will not reduce your rights under this Policy without your consent. If we make any material changes we will notify you by email or by means of a notice on this website prior to the change becoming effective. You can also view prior versions of the Policy by viewing the links in section 11 below. |
| 351 | 386 | |
| 352 | 387 | ## 11\. Previous Versions of the Privacy Policy |
| 353 | 388 | |
| 354 | 389 | ### 11.1 O'Reilly and Safari privacy policies |
| 355 | 390 | |
| 391 | [Click here for version 4.6](https://www.oreilly.com/privacy-010120.html) | |
| 392 | ||
| 356 | 393 | [Click here for version 4.5](https://www.oreilly.com/privacy-111219.html) |
| 357 | 394 | |
| 358 | 395 | [Click here for version 4.4](https://www.oreilly.com/privacy-081519.html) |
| 359 | 396 | |
| 360 | 397 | [Click here for version 4.3](https://www.oreilly.com/privacy-112118.html) |
| 361 | 398 |