Privacy Center

Original document

Attention points

21 TO CHECK

Pointers to disclosures this policy may not clearly make, checked against major privacy laws. This is a heuristic — not legal advice, and not a finding that anything is missing or unlawful.

GDPR / UK-GDPR

2/13 ADDRESSED
  • Data Protection Officer contactGDPR Art. 13(1)(b)
  • The legal basis for using your dataGDPR Art. 13(1)(c)
  • Legitimate interests relied on (where that is the basis)GDPR Art. 13(1)(d)
  • Who your data is shared with (recipients)GDPR Art. 13(1)(e)
  • International transfers and their safeguardsGDPR Art. 13(1)(f) / 46
  • How long your data is kept (retention)GDPR Art. 13(2)(a)
  • The right to withdraw consent (where consent is the basis)GDPR Art. 13(2)(c)
  • The right to complain to a supervisory authority (e.g. the ICO)GDPR Art. 13(2)(d)
  • Whether providing your data is required, and what happens if you don'tGDPR Art. 13(2)(e)
  • Automated decision-making or profilingGDPR Arts. 13(2)(f), 22
  • Where your data was obtained, if not collected from you (source)GDPR Art. 14(2)(f)

CCPA / CPRA

0/10 ADDRESSED
  • Notice at collection: what categories of data are collected, and whyCCPA §1798.100(b)
  • The categories of sources the data comes fromCCPA §1798.110(c)
  • The business or commercial purposes for collecting/selling/sharingCCPA §1798.110(c)
  • Categories of third parties data is shared/sold toCCPA §1798.115
  • A 'Do Not Sell or Share My Personal Information' option (if it sells/shares)CCPA §1798.135(a)
  • A 'Limit the Use of My Sensitive Personal Information' option (CPRA)CPRA §1798.135(a)
  • Your CCPA rights (know, delete, correct, opt-out, limit, non-discrimination)CCPA §§1798.100–125
  • A non-discrimination promise for exercising your rightsCCPA §1798.125
  • Retention period (or criteria) per category of data (CPRA)CPRA §1798.100(a)(3)
  • At least two ways to submit a request, plus a contactCCPA §1798.130

Current text

Norton's Privacy Center provides access to our privacy documentation. As part of Gen™ - a global company with a family of trusted consumer brands - we follow our group General Privacy Notice which includes information broadly applicable across all Gen brands, services and products. To fully understand our data processing, read the General Privacy Notice along with the linked Product Privacy Notice and Cookies & Third-Party Analytics Notice.

These notices let you know what personal data we collect, the purpose for that collection, how and why we share that information, your data subject rights, and many other details related to our commitment to data privacy protection and transparency. You can explore your privacy rights by clicking on the Data Subject Request form.

If you are in the European Economic Area, and unless stipulated otherwise contractually, the Controller of your personal data for Norton products is: NortonLifeLock Ireland Limited, Ballycoolin Business Park, Blanchardstown Dublin 15, Ireland D15E867. If you live in the United Kingdom, Norton's representative established in the UK is NortonLifeLock UK Limited, 100 New Bridge Street, London, England EC4V 6JA.