What is PayPal's Privacy Statement?

PayPal’s Privacy Statement describes PayPal’s information collection practices, and how we use, store, disclose and protect that information. The Privacy Statement applies to the PayPal website and all related sites, applications, services and tools regardless of the device or method you use to access those platforms.

You accept the Privacy Statement when you sign up for, access, or use our products, services, content, features, technologies or functions. If you have a specific question about PayPal’s collection, use, storage, disclosure and protection of information, please review our PayPal Privacy Statement.

What services and companies does PayPal’s privacy statement cover?
The following companies are in PayPal’s family of products and are covered by our Privacy Statement: PayPal, Inc. and Xoom. The following are PayPal-owned companies who have their own privacy statements: Venmo, Honey, iZettle, Simility, Hyperwallet.
 
How can I find what personal data PayPal collects about me? 
You can access your personal data by logging into your PayPal account. Alternatively, you can contact PayPal to obtain a copy of your personal data. We can only disclose personal data to the owner of that data, or to a party authorized by the account holder.

Logging in to your account is usually sufficient for us to authenticate you, but we reserve the right to disallow access to data if we're unable to verify your identity, if there's a conflicting legal obligation, or if doing so would put PayPal or other parties at risk. To ensure the security of your personal data, in these very specific and infrequent cases, we will conduct reasonable ID and verification checks as part of any request to access data to make sure that you’re the account holder.
 
How can I correct or update my personal data?

You can correct your data by logging into your PayPal account. Alternatively, for data which you cannot correct for yourself, you can contact PayPal and request that we correct your personal data. We can only correct personal data where requested to do so by the owner of that data, or by a party authorized by the account holder. 

Any request to correct data which we are legally required to verify as financial service provider may require PayPal to request additional information from you to confirm your personal data (e.g., marriage license).

We reserve the right to not allow alteration of data if we're unable to verify your identity, if there's a conflicting legal obligation, or if doing so would put PayPal or other parties at risk.
 
How long does PayPal keep my data?
PayPal is required by law to retain information related to the provision of financial services to our customers for a certain time period, during which the data may not be erased.

We retain data to comply with the law, prevent fraud, collect any fees owed, resolve disputes, troubleshoot problems, assist with any investigations, enforce a site’s terms and conditions, protect PayPal from legal risks, and take other actions otherwise permitted by law.

Your data may be automatically erased once the retention time has ended and there's no other legal reason to keep it for longer.
 
Does PayPal transfer data across national borders?
Our operations are supported by a network of computers, cloud-based servers, and other infrastructure and information technology, including third-party service providers. These parties may be established in jurisdictions other than your own and outside the European Economic Area and Switzerland. We've taken specific steps, in accordance with EEA data protection law, to protect your Personal Data. In particular, for transfers of your Personal Data within PayPal related companies, we rely on Binding Corporate Rules approved by competent Supervisory Authorities (available here).