Last Updated: November 15, 2011
[Update] On November 15, 2011, we replaced section 3.2 Cookies
[Update] On September 20, 2011, we updated our Privacy Statement to reflect the following:
- Changed title from Complete Privacy Policy to Privacy Statement
- Removed reference to GAPP from Section 2.2
- Further clarified practices in sections 3.2 (Cookies) and 3.1 (updated subsection Purchase, Registering a Product or Subscribe to a Product or a Service, or Creating an Account; added subsection Marketing Communications). Section 3.2 also explains use of cookies by affiliated third parties.
This Statement describes the types of information we collect via Symantec’s web sites as set out below, how we may use that information and with whom we may share it. Our Privacy Statement also describes the measures we take to protect the security of the information. We also tell you how you may contact us to update your information, remove your name from our mailing lists or get answers to questions you may have about our privacy practices at Symantec.
Symantec has been awarded TRUSTe's Privacy Seal signifying that this privacy Statement and practices have been reviewed by TRUSTe for compliance with TRUSTe's program requirements including transparency, accountability and choice regarding the collection and use of your personal information. TRUSTe certifies the sites www.symantec.com in North America, www.symanteccloud.com, and Norton domains. The TRUSTe program does not cover information that may be collected through downloadable software. TRUSTe's mission, as an independent third party, is to accelerate online trust among consumers and organizations globally through its leading privacy trustmark and innovative trust solutions. You may contact Symantec directly using any of the communication means outlined at the end of this statement. If you are not satisfied with our response you can contact TRUSTe here.
By displaying the TRUSTe "Trustmark," we let you know:
- What personal information is gathered, stored, tracked or used
- With whom the information may be shared
- How you can correct inaccuracies in the information
This Privacy Statement applies to all Web sites owned by Symantec that display the Symantec or the Norton logo, except for the sites referred to in section 1.2 below and for Web sites hosted by third parties authorized to display the Symantec name and/or corporate logo.
1.0 Privacy Statement Structure and Related Documents
1.1 Contents
Click on one of the links below to jump to the listed section:- Privacy Statement Structure and Related Documents
- Symantec Privacy Practices
- Personal Information We Collect About You and How We Use It
- Managing Your Privacy
- Transfers and Sharing Information
- Security of Personal Information
- Non-Personal Information We Collect About You and How We Use It
- IP Addresses
- Links to Business Partner and Co-Branded Sites
- Statement Changes
- Symantec Contact Information and Complaints
- Regional Privacy Policies
1.2 Related Documents
There are related documents, which supplement this Privacy Statement; please note that this document prevails in the event of any inconsistency:
- Privacy Facts Statement: This is a short and less complicated summary of our privacy practices; in the event of any discrepancy, this Privacy Statement shall apply.
- Social Media Privacy Policy This is a policy respecting the privacy of information in ‘user-generated content’ sites and services that Symantec may from time to time offer; it addresses the issues particular to sites where Symantec does not generate the content but allows users and customers to create content.
- Product and Services Privacy Notices: Symantec has notices that relate to the particular collection and use of personal information that occurs when users subscribe to, purchase, or use our software or services, and are dependent on the technologies and purposes of those products and services. In those cases, the specific privacy notices govern the collection, use, disclosure, and retention of personal information:
- LiveUpdate Privacy Policy: Because of the manner in which LiveUpdate operates to collect and the type of information it collects, LiveUpdate has its own Privacy Policy.
- Norton Community Watch Privacy Policy: This is a policy respecting the collection of information through user submissions to the Norton Community Watch; it addresses issues relating to the collection of information including personally identifiable information.
- Norton Online Family Privacy Policy: This is a policy respecting the collection and use of personal information in respect to the OnlineFamily.Norton services.
2.0 Symantec Privacy Policy
Symantec has a global policy, which establishes a foundation for the privacy of all Personal Information used by Symantec worldwide. The policy states Symantec’s operational principles for managing privacy.
These policies have the following scope:
- It applies to all Personal Information collected by Symantec, electronically or manually. The requirements of the Policy are supplemented by business specific privacy processes.
- The Policy applies to employees, officers, and directors of Symantec and its subsidiaries worldwide.
3.1 Personal Information Collection and Use
You may choose to provide personal information through our web sites. Here are the ways in which you may provide the information and the types of information you may submit. We also provide below some information on how we may use the information.
Contact Us
If you communicate with us through the “Contact Us” link on our web sites, we may ask you for information such as your name, email address and telephone number so we can respond to your questions and comments. We also may use the information you provide to evaluate the quality of our products.
Request a Quote
If you request a quote from us, we ask you to provide details such as your name, email address, telephone number and details of the relevant product. We use your details to prepare and send you a quote. You may also choose to provide additional comments and requests through our free text box.
Purchase, Registering a Product or Subscribe to a Product or a Service, or Creating an Account
If you submit an order on-line with us, we will ask you for information necessary to complete the transaction – such as your name, address, and credit card number, and to allow you to purchase and download products, obtain access to service and technical support, or otherwise utilize products or services that you have selected, as well as technical data concerning your computer or traffic data incidental to your Internet connection. Additionally, you may be asked to set up an account with us in order to obtain software, establish entitlement to upgrades and updates, configure products and services, and access reports and information on the performance of such products and services, etc. This may require you to provide relevant information such as email addresses, physical addresses, IM addresses, and IP address ranges. The processing and transfer of the data are limited to the following purposes: fulfillment of your order(s)/contract(s), extension/delivering product updates/service-subscriptions or licenses, product/service registration, activation and configuration, processing change requests which you may request from time to time, customer and technical support as you may request it from time to time, processing license renewals as you may request it from time to time, automatically processing license renewals if you elect automatic renewal of your software license subscription and internal (compliance) audits and fraud prevention.
Request Technical Support
If you request technical support online, we will ask you for information necessary to complete the transaction – such as your name, address and information about your computer hardware, software and the nature of the problem you are experiencing. Additionally, if required to facilitate support, we may with your permission [conduct an interactive session in which a Symantec technical support assumes control of your computer. No information is retained from such sessions beyond information to substantiate that such session(s) took place. Information concerning technical issues may be retained to provide you with continuing support; generally, the information and knowledge obtained from such support, though not linked to you personally, may be made available to technical and product specialists in order to improve our products or provide similar solutions to similar technical issues encountered by other Symantec customers.
Marketing communications
In addition to the purposes described above, we may also use your data to provide you with information about products and services which may be of interest to you. You have the right to ask us not to process your personal data for such marketing purposes. If you do not want us to use your data in this way, you can exercise your right to prevent such processing by checking/un-checking (as applicable) certain boxes on the web pages and/or forms on which we collect your data. You can also exercise this right at any time by changing your communication choices as described in section 4.2 below.
Subscribe to a Web-site Forum or Networking site
Symantec operates forums, web sites and related information services to better assist its customers in using its products and services, discuss technical issues, and share experience and knowledge. To permit you to obtain access to these information services, to assist us in creating content that is relevant to you, and to improve your experience on our Web site, including helping you quickly find software, services or product information important to you we collect information on your name and e-mail address, and keep track of your preferences concerning the display or location of relevant information. We utilize the information obtained from these sites to improve our products and services. You should be aware that any information you provide in public forums may be read, collected, and used by others who access them. To request removal of your personal information from any forum, contact us at privacy@symantec.com. In some cases, we may not be able to remove your personal information, in which case we will let you know if we are unable to do so and why.
Subscribe to a Newsletter, Receive Product or Technical Alerts
You may wish to receive information about virus alerts, product upgrades, new products, services, newsletters, informative emails, and research on future product ideas or improvements. If so, you will be asked to provide your name and e-mail address. If there is any use beyond contacting you using such information, you will be advised of the intended uses at the point that you are being asked to provide such contact information.
Transactional Emails
We may from time to time send you transactional emails such as order confirmations or information on service related issues. Because these emails are not promotional in nature you are not able to unsubscribe from these transactional emails.
Enter a Contest, Receive Product or Service Information, Offers or Promotions
To provide you with contests, promotions or special offers that may be of interest to you, you may be asked to provide us with your name, address and e-mail address information, as well as to confirm that you are of the age of majority in the jurisdiction in which you reside. You may be asked to provide additional information to better understand you and possibly your organizations’ needs and experiences, opinions, as well as your experience or feedback in order to qualify for such contests or promotions. We will also use your personal information to award prizes if applicable. If there is any use beyond contacting you with such information, you will be advised of the intended uses at the point that you are being asked to provide such contact information.
Soliciting your Opinion, Feedback or Test Software
To assist us in creating better products and services to meet your needs, we may solicit your opinions and feedback concerning our software and services; you may be asked to provide e-mail address information, as well as name, postal address, occupation and the name of your organization, if you have not already done so, as well as the opinions and feedback itself.
Careers
You may be able to submit your resume and other information online to apply for a job with Symantec. The information you provide in connection with your job search will be maintained in a database that is managed by a third party service provider we have retained to help us conduct recruitment-related activities. Our service provider is authorized to use the information only in connection with hosting, managing and maintaining our resume database. We use the information you submit to evaluate your interest in employment and to contact you regarding possible employment with the company.
Refer-A-Friend
If you choose to use our referral service to tell a friend about our site, we will ask you for your friend’s name and email address. We will automatically send your friend a one-time email inviting him or her to visit the site. Symantec does not store your friend’s name and email address after sending the one-time email. Note that this is not available in jurisdictions where this method of referral is prohibited, such as the European Union.
You make the decision whether to proceed with any activity that requests personal information. If you do not wish to provide the requested information, however, you may not be able to complete the transaction or functionality on the site if the information is essential to complete the transaction or functionality.
3.2 Cookies
About cookies
Cookies are small text files that are placed on your computer by websites that you visit or certain emails you open. They are widely used in order to make websites work, or work more efficiently, as well as to provide business and marketing information to the owners of the site. Cookies also enable a web site to tailor information presented to you based on your browsing preferences, such as language and geographical region. For more detailed information about cookies visit www.allaboutcookies.org.
Use of cookies by Symantec
Symantec may use cookies to:
- Personalize web pages during your visit to our web sites; and/or remember you for easy navigation and access during your return visits.
- Provide information about the previous link used by the user. This is a session cookie and it expires when the browser is closed.
- Track your visit to our web sites, for example by logging IP addresses and session information, such as the duration of the visit to the site and the nature of the operating system and browser used, for the purpose to administer the web site and to compile aggregated statistics that we develop to assess the use of our sites and to improve them.
- Aggregate and analyze data about your machine, such as browser type, screen resolution, operating system; or about the Symantec product installed on your machine, such as product ID and days remaining to expiration and your license SKU. This information, which does not personally identify you, is used to determine what content to serve to you when you land on our pages and to provide you with the offers of Symantec products and services that are most relevant to you. These cookies are permanent, but the data collected by the cookie expires after 14 days, unless you visit our store again in the meantime.
- Serve you with banner ads if you exit our store without purchasing. These cookies expire automatically within 30 days.
If you have registered your product and created a Norton Account, we will match the information gathered from our cookies with any information you have given us about yourself, or that is stored in your Norton Account, or that we have otherwise collected about you for the purposes explained in this Privacy Statement.
How to disable cookies
If you do not want Symantec to deploy cookies in your browser, you can set your browser to reject cookies or to notify you when a web site tries to put a cookie in your browser software. Rejecting cookies may affect your ability to use of some of the products and/or services at our Web sites.
3.3 Web Beacons
Symantec may use Web Beacons - also known as single pixel or clear GIFs - on its web sites to analyze traffic patterns such as the frequency of use of particular parts of the site. The data collected helps us learn what information is of most interest to our customers and what offers our customers would most like to see. If you do not want to assist Symantec in improving its Web sites, you can “opt-out” of this web sites analysis by disabling JavaScript on your computer. If you disable JavaScript, some of the features on our web sites will not work.
Symantec may also use web beacons in promotional email messages to determine whether the message was opened and acted on. We may use this information on email response to develop future promotions you may enjoy. For these purposes, some of our Web beacons are tied to your e-mail address.
Except for the email address you have previously provided, the information we collect does not identify you. To modify your Norton privacy options, visit here.
Symantec may also use third party scripts on our sites to optimize the effectiveness of Symantec's ads appearing on other parties' sites. The information collected is not personally identifiable and is limited to the minimum information necessary to optimize effectiveness. Symantec has no access or control of any third party tracking technologies.
3.4 Flash LSOs
Third parties with whom we partner use local shared objects, also known as Flash cookies, to store your preferences for audio control.
Flash cookies are different from browser cookies because of the amount of, type of, and how data is stored. Cookie management tools provided by your browser will not remove Flash cookies. To learn how to manage privacy and storage settings for Flash cookies click here:
http://www.macromedia.com/support/documentation/en/flashplayer/help/
settings_manager.html#117118
4.1 Opt-in and Opt-out
In jurisdictions where your consent is required at the point of collection before any sharing of your information can take place, you will be given the option to opt-in before such information is being shared, and to opt-in to the transfer of your contact information to a third party.
In other jurisdictions, we may offer you these choices at the time you give us your information, or subsequently through ‘opt-out’ mechanisms.
4.2 Communication Choices
If you are on a Symantec web page that requires personal information to be submitted but does not offer communication choices, or if you would like to change your preferences for information that you have previously provided, please use one of the communication channels at the bottom of this statement.
4.3 Other Privacy Considerations
Please remember that information you submit in a discussion groups or forums, like "Ask Symantec", will be deemed public information and will not be kept as confidential. There is a risk in such communication venues that information can be collected and used by others. Please be careful and responsible when you are participating in such discussion groups or forums. For further details, please see our Social Media Privacy Policy.4.4 Updating or Correcting Your Personal Information
You have the right to update or correct or remove your personal information. If you believe that Symantec does not have your most current personal information, you can update it at your Norton Account, at your Symaccount or through the other communication channels at the bottom of this notice. If requested, and to the extent permissible by applicable law relating to the retention of records or otherwise not required for valid business purposes (such as fulfillment of transactions), you may request that we use our best efforts to remove such data from Symantec repositories.
Symantec will respond to access requests within 30 days.
5.1 Transferring Information
Since Symantec is a global company, we provide company information to our worldwide offices, with information processing taking place in many countries. The personal information that you have provided to us, for the purposes set out above, will be transferred to servers in the United States, and there may be further transfers to other countries in which Symantec has operations, or to our outside contractors for the collection, transferring, storage and processing of your information for the purposes outlined above. In respect to transfers from the European Economic Area to the United States or elsewhere, Symantec has data transfer agreements in place if and as required by the data privacy authorities in European countries from where such transfers of personal information are being made.
5.2 Sharing Information
From time to time, and in jurisdictions where it is permitted, we may provide your information to Symantec Partners to communicate to you information or offers about products or services that they believe are important to you or your business. If you prefer that we not provide your information to our business partners, you may let us know using one of the methods described in this Statement, Symantec provides a number of ways for you to ‘opt-out’ of receiving additional information from us or having us provide your personal information to our partners by ‘opt-out’ options provided at the point of collection, through e-mail notices, or through other preference management that may be available depending on the service or web-site.
If you do not wish to continue receiving our e-mail newsletters or bulletins you can opt-out of receiving these communications by replying to the "unsubscribe" address in the body of the email.
5.3 Third Parties
In addition, Symantec may retain the services of outside contractors to provide services for us (e.g. ship products, provide technical support, or handle order processing).
For example, you may decide to purchase a license to a number of Symantec software products online in a downloadable format by way of Electronic Software Delivery (ESD) or in a CD format from one of Symantec’s authorized online resellers. If you elect to purchase a software license through one of Symantec’s authorized online resellers, your personal data will need to be shared between the Symantec reseller (as your vendor) and Symantec (as the software manufacturer and licensor). Furthermore, in order to manage purchases and license renewals by Symantec customers, Symantec will need to share your personal information with a billing system service provider. Such service provider will process data of Symantec’s customers only on behalf of Symantec. (These examples are not exhaustive, and may change from time to time).
We require that all such contractors keep the personal information of our customers secure and confidential. We have contractually bound third parties to such restrictions and require that these contractors provide for appropriate technical and organizational measures to secure the data, that they use personal information only on behalf of Symantec and that they do not share personal information with others or use your personal information for their own marketing purposes.
5.4 Legal Disclosures
Please be advised that in certain instances, it may be necessary for Symantec to disclose your personal information to government officials or otherwise as required by applicable law. No personal information will be disclosed to any law enforcement agency or governmental agency except in response to:- A subpoena, warrant or other process issued by a court of competent jurisdiction;
- A legal process having the same consequence as a court-issued request for information, in that Symantec would be in breach of local law were it to refuse to provide such information, and it or its officers, executive or employees would be subject to liability for failing to honor such legal process, provided there is a legal basis to do so, or,
- Where such disclosure is necessary for Symantec to enforce its legal rights pursuant to the laws of the jurisdiction from which such information was gathered, and there is a legal basis to do so.
6.0 Security of Personal Information
We have taken appropriate security measures, consistent with international information practices, to protect your personal information. These measures include, on our web sites and Internet-enabled technologies, administrative, technical, physical and procedural steps to protect your data from misuse, unauthorized access or disclosure, loss, alteration, or destruction. These measures include:
Physical safeguards, such as locked doors and file cabinets, controlled access to our facilities, and secure destruction of media containing personal information;
Technology safeguards, such as use of Symantec anti-virus and endpoint protection software, encryption, and monitoring of our systems and data centers to ensure compliance with our security policies, and in particular, credit card information is transmitted using secure socket layer (SSL) encryption;
Organizational safeguards, through training and awareness programs on security and privacy, to ensure employees understand the importance and means by which they must protect personal information, as well as through privacy policies and standards that govern how Symantec treats personal information.
7.1 Non-Personal Information We Collect
We collect certain aggregate and non-personal information when users visit our web sites. Aggregate and non-personal information does not relate to a single, identifiable visitor. It tells us information such as how many users visited our sites and the pages accessed. By collecting this information, we learn how to best tailor our web sites to our visitors.
We collect this information either through “cookie” technology or with “web beacons,” as explained above.
7.4 Web Site Traffic
Through our various tracking methods discussed above and using log files, we may track domain names, IP addresses, and browser types from people who visit our site. We use this information to track aggregate traffic patterns throughout Symantec’s Web site. Such information is not correlated with any personal information.8.0 IP Addresses
Symantec collects and retains, for a limited period of time, internet protocol (IP) address information, of its customers, for the following purposes:- subscription and registration,
- to provide technical support;
- to obtain geolocation information;
- and to secure our networks and systems.
IP addresses collected by Symantec are primarily traffic data, which is not necessarily personal information. Symantec does not have the means to reasonably and authoritatively link an IP address to an identifiable individual. Registration of a product does create a unique computer identifier, which is linked to an IP address at the time of registration; however, IP addresses are usually assigned dynamically and therefore are temporary, and may be behind network address translation, and are often capable of falsification (spoofing).
For LiveUpdate’s privacy Policy, please see http://www.symantec.com/about/profile/policies/luprivacy.jsp.
9.0 Links to Business Partner and Co-branded Sites
At the Symantec Web sites, there are a number of links to companies with whom we have a relationship. Symantec is not responsible for the privacy practices of our business partners. We encourage you to read their privacy statements, as they may differ from ours.
We also link to co-branded Web sites that are maintained by Symantec and one or more of our business partners who are collecting your information pursuant to their own policies and purposes.
We encourage you to read the privacy policies on any co-branded site to which you link for information on the privacy practices of that site.
10.0 Statement Changes
In the event there is a major change to Symantec's privacy practices, a prominent notice will be posted on our Web site. If the change involves the use of your personally identifiable information, the notice will contain instructions on how you can opt-out of such use.11.0 Symantec Contact Information
Symantec has created a Privacy Program Office, which is part of Legal and Public Affairs. If you have any questions or comments concerning this Statement, or if you would like to change your communication preferences, update or review the personal information we have about you, or withdraw your consent for the collection, use or disclosure of your personal information, please contact us using one of the options below:- Customer Profile Form at: https://www-secure.symantec.com/custserv/cgi-bin/cs_privacy_dyn.cgi
- Customer Support in your country or region – by telephone, e-mail, or regular mail;
- Through Symantec’s Privacy Department:
Symantec Corporation - Privacy Program Office
350 Ellis Street
PO Box 7011
Mountain View, CA 94043
U.S.A
Telephone: 1 650 527 8000
Email: privacy@symantec.com
12.0 Regional Privacy Policies
Different countries, states, and other entities may require specific policies to be provided, and so, will only apply to you provided you live in the jurisdiction set out in the sub-sections below.12.1 North America
12.1.1 TRUSTe
Symantec is a licensee of the TRUSTe Privacy Program as noted above, which is applicable solely to North America.12.1.2 Your California Privacy Rights
Beginning on January 1, 2005, California Civil Code Section 1798.83 permits customers of Symantec who are California residents to request certain information regarding Symantec’s disclosure of personal information to third parties for their direct marketing purposes. To request such information, please contact us using one of the options listed above in section 11.0.12.2 European Economic Area
In respect to data transfers from the European Economic Area, to the United States or to other countries outside the European Economic Area, Symantec has taken steps to ensure adequate protection for such data transfers in accordance with European and national data protection legislation. For example, Symantec has entered into appropriate data transfer agreements based on the model clauses approved by the European Commission to provide adequate protection for data transfers between Symantec entities and between Symantec and third parties located outside the European Economic Area.12.2.1 Germany
In transferring your information to Symantec, you understand that your name, postal address, phone number, E-mail address, VAT ID (optional), company name (optional), and information about selected product(s), will be transferred from our online store to the producer and licensor Symantec Corporation (350 Ellis Street, Mountain View, CA 94043, U.S.A.), Symantec Limited (Ballycoolin Business Park, Blanchardstown, Dublin 15, Ireland) (Billing, Shipping) und Symantec (Deutschland) GmbH, Wappenhalle, Konrad-Zuse-Platz 2-5, D-81829 München, www.symantec.com
(German consumer contact and support).
Further your payment details (including credit card number, expiry date, sort code, name and address of bank), and order ID will be transferred to Symantec Corporation in the United States and Symantec Limited in Ireland, as well as to Vindicia, Inc. (a Delaware corporation with its principal offices located at 1840 Gateway Drive, Suite 100, San Mateo, California 94404, U.S.A.). Vindicia provides hosting and management services of an automated billing and renewal system and backend infrastructure as part of Symantec’s online system to Symantec Corporation and Symantec Limited.




