Rakuten Americas Privacy Policy

Last Updated: January 1, 2020

  1. 1. What This Privacy Policy Covers

    This Privacy Policy explains how Rakuten USA, Inc. d/b/a Rakuten Americas (“Rakuten Americas,” “we” or “us”) collects, processes, and discloses personal information about you when you access or use our website located at https://www.rakuten.us/ (collectively, the “Site”) or otherwise interact with us.

    Rakuten Americas is part of the Rakuten Group, which includes the affiliates and subsidiaries of our parent company, Rakuten, Inc., based in Tokyo, Japan.

  2. 2. Collection of Information

    Information You Provide to Us

    We collect information you provide directly to us. For example, we collect information when you send us a message through the Site or otherwise communicate with us. The types of information we may collect include your email address and any other information you choose to provide.

    Information We Collect Automatically When You Use Our Site

    When you access or use our Site, we use automatic data collection technologies to collect information about you, including:

    Information We Obtain from Other Sources

    We also may receive information about you from our subsidiaries for business purposes including providing analytic services and for other strategic purposes.

  3. 3. Use of Information

    Specifically, we may use the information we collect about you for the purposes listed below:

    Customer Service

    We use your information in order to respond appropriately to your inquiries, complaints, or requests in relation to our Site or services.

    Site Improvement

    We use your information for our everyday business operations such as auditing, administration of the Site, and analytics. Your information may also be used to improve the content and/or functionality of the Site. We also use your information to personalize your experience. For example, we may personalize the content and features you see when visiting the Site. In addition, we may personalize advertisements, marketing communications, and recommendations to make them more tailored to your interests.

    Prevention and Mitigation of Fraudulent or Illegal Activities

    We may use your information to prevent, identify, and investigate scams, cyber-attacks, and other potentially illegal or fraudulent activities, or in relation to any other activities necessary to protect the legal rights of Rakuten Americas and/or the rights of third parties.

    For Protection of You, Others and Our Business

    We may use your information by actively monitoring, investigating, preventing and mitigating any alleged or actual prohibited, illicit or illegal activities on the Site. We also use your information investigate, prevent or mitigate violations of our internal terms, agreements or policies; enforce our agreements with third parties and business partners.

  4. 4. Sharing of Information

    We may share information about you as follows or as otherwise described in this Privacy Policy.

    With Our Affiliates and Subsidiaries

    We may share information about you with our affiliates and subsidiaries or other Rakuten related entities in order to perform analytics, resolve inquiries from you or provide other services.

    Disclosure to Vendors

    We disclose your personal information with vendors, service providers, and third parties that perform services for us, including business operation related services such as data storage and benefits administration.

    To Comply with Law

    In response to a request for information if we believe disclosure is in accordance with, or required by, any applicable law or legal process, including lawful requests by public authorities to meet national security or law enforcement requirements.

    To Protect Rakuten Americas or Others

    If we believe your actions are inconsistent with our user agreements or policies, if we believe you have violated the law, or to protect the rights, property, and safety of Rakuten Americas or others.

    In Connection with a Business Transaction

    In connection with, or during negotiations of, any merger, sale of company assets, financing or acquisition of all or a portion of our business by another company. If there are changes to the internal structure of our parent company so that another Rakuten Americas affiliate or subsidiary takes on the role of centrally collecting, using or disclosing personal information in accordance with this Privacy Policy, that affiliate or subsidiary will handle your information in accordance with this Privacy Policy in place of Rakuten America.

    With Your Consent or at Your Direction

    In addition to the above listed disclosures, we may also share aggregated or de-identified information that cannot reasonably be used by those third parties to identify you.

  5. 5. Transfer of Information to the U.S. and Other Countries

    Rakuten Americas is based in the United States and we process and store information in the U.S. Therefore, we and our vendors or service providers may transfer your information to, or store or access it in, jurisdictions that may not provide equivalent levels of data protection as your home jurisdiction.

  6. 6. Links to Third Party Sites

    Our Site may contain links to other web sites, including but not limited to affiliated or co-branded web sites and sites of our subsidiary companies. Other web sites which are not controlled by Rakuten Americas may reference or link to our Site. We encourage you to review the privacy policies of every web site that you visit that our Site may link to or that may link to our Site. We are not responsible for the privacy practices or content of such other web sites or mobile applications.

  7. 7. Your Privacy Rights

    You have the right to privacy in line with the local laws that apply to you. For example, consumers residing in California are afforded certain additional rights with respect to their personal information under the California Consumer Privacy Act or (“CCPA”) (California Civil Code Section 1798.100 et seq.) and the “Shine the Light” Law (California Civil Code Section 1798.83). If you are a California resident, this section applies to you.

    Disclosures Related to the Collection, Use, Disclosure, and Sale of Personal Information

    Category of Personal Information Sources of Personal Information Why We Collect Personal Information? Who We Share Personal Information With? Did We Disclose the Personal Information for a Business or Commercial Purpose? Did We Sell the Personal Information?
    Identifiers, e.g., email address or account information The sources stated in Section II, including:
    • You
    • Your mobile devices and computers used to access the Site
    • Information received from our subsidiaries and affiliates
    The purposes stated in Section III, including:
    • Providing customer service
    • Improving the Site
    The entities stated in Section IV, including:
    • Vendors, and service providers, and third parties that perform services for us
    • Our subsidiaries and affiliates
    Yes No
    Internet or other electronic network activity information, including browser type information. The sources stated in Section II, including:
    • Your mobile devices and computers used to access the Site
    • Information received from our subsidiaries and affiliates
    The purposes stated in Section III, including:
    • Providing customer service
    • Improving the Site
    The entities stated in Section IV, including:
    • Vendors, and service providers, and third parties that perform services for us
    Yes No

    Your Privacy-Related Rights

    You have various privacy-related rights (“Rights”) to have control over your personal information. For example, below is the list of Rights that California residents have under the CCPA regarding their personal information. This Section describes your Rights and how to exercise those Rights.

    Right to Know and Access: You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months. Once we receive and confirm your verifiable consumer request (see Exercising Right to Know, Access, and Delete below), we will disclose to you:

    Right to Request Deletion: You have the right to request that we delete any personal information we have collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies.

    Right to Opt-Out of Sale of Personal Information: We do not sell your personal information.

    Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not:

    How To Exercise Your Right to Know, Access, and Request Deletion

    To exercise your right to know, access, or delete as described above, you may submit a request to us by either:

    You may only make a request to know or access twice within a 12-month period.

    Your request must be verifiable. In order for us to verify your identity, we will match two or three data points that you provide with data points that we maintain and have determined to be reliable for the purposes of verification. If your request is to know or access specific pieces of personal information, you will be required to sign a declaration under penalty of perjury that the you are the consumer whose personal information is the subject of the request.

    We will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.

    Authorized Agent

    Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your personal information. We may require the agent to provide a written permission from you to submit a request on your behalf and to verify their identity, or demonstrate that he or she has power of attorney in connection with a request to know, access or delete.

    Shine the Light

    California law permits residents of California to request certain details about how their information is shared with third parties for direct marketing purposes. We do not share your information with third parties for their direct marketing purposes.

    California Do Not Track Disclosure

    California Business & Professions Code Section 22575(b) (as amended effective January 1, 2014) provides that California residents are entitled to know how Rakuten Americas responds to “Do Not Track” browser settings. Rakuten Americas does not currently take actions to respond to Do Not Track signals because a uniform technological standard has not yet been developed. We continue to review new technologies and may adopt a standard once one is created.

  8. 8. Retention

    We may retain information about you for as long as it is necessary to fulfill the purposes described Section 3. Some of your information may be retained in our systems even after you request your information to be deleted in order to comply with our obligations under applicable law, collect fees owed, resolve disputes, enforce our legal rights, otherwise use internally in a lawful manner that is reasonably aligned with the expectations of the consumer or compatible with the context in which the information was provided, and to undertake any investigations necessitated by the foregoing.

  9. 9. Information Security

    We have implemented technical and organizational measures to provide a level of security appropriate to the risk to the Personal Information that we process. These measures are aimed at preserving the ongoing integrity and protecting the confidentiality of users’ Personal Information. We evaluate these measures on a regular basis to confirm that it continues to maintain and apply an appropriate level of security.

  10. 10. Changes to the Privacy Policy

    We may change this Privacy Policy from time to time. If we make changes, we will notify you by revising the date at the top of the policy and, in some cases, we may provide you with additional notice (such as adding a statement to our website homepage or sending you a notification). We encourage you to review the Privacy Policy whenever you access the Site or Services or otherwise interact with us to stay informed about our information practices and the choices available to you.

  11. 11. Contact Us

    If you have any questions about this Privacy Policy, please contact us at:

    Rakuten USA, Inc.
    email: pr@rakuten.com
    800 Concar Drive, San Mateo, CA 94402