FAQ: Norton's compliance with the European Union's General Data Protection Regulation

GDPR general information

(Applicable for customers located in the European Economic Area.)

What is GDPR?

The General Data Protection Regulation (GDPR) is a regulation in Europe, designed to ensure that you are aware both of your rights and of how we, as a company, use your personal data. You can find more information on our website at https://www.gendigital.com/privacy . GDPR is applicable to customers located in the European Economic Area (EEA).

Where can I find more information on Norton's privacy practices and data collected?

Website:
You can find information about our privacy program and practices on our Privacy Center located at https://www.gendigital.com/privacy

By physical mail:
You can request information about our privacy program and practices by writing to:

If in the US/the Americas region:

Gen Digital Inc. - Global Privacy Office

60 E. Rio Salado, Suite 1000,

Tempe, AZ 85281
If in the EU / in the Europe Middle East Africa region:

NortonLifeLock Ireland Limited - Global Privacy Office

Ballycoolin Business Park, Blanchardstown,

Dublin 15, Ireland
Independent EU GDPR Data Protection Officer

Pembroke Privacy Ltd

4 Upper Pembroke Street

Dublin 2

Ireland DO2VN24

What are my rights under the EU Privacy/GDPR regulation?

The GDPR give EU data subjects more control over their data and more control over the processing of your data. More information is available on the European Commission's website at https://ec.europa.eu/info/law/law-topic/data-protection/reform/rights-citizens_en.

Are NortonLifeLock products and services GDPR compliant?

At NortonLifeLock, we believe that privacy is of utmost importance, and we have taken the necessary steps to protect your personal data. As part of our GDPR compliance program, we continually re-assess our internal controls and standards to ensure that the appropriate data privacy safeguards are in place.
Privacy is factored and built into all our products and services. For more information, please refer to our product transparency accessible from our Privacy Center:
https://www.gendigital.com/privacyhttps://www.gendigital.com/privacy

Do you have a privacy department that I can contact?

You can request information about our privacy program and practices by sending an email to nll_privacy@GenDigital.com or by writing to:

If in the US/the Americas region:

Gen Digital Inc. - Global Privacy Office

60 E. Rio Salado, Suite 1000,

Tempe, AZ 85281

Email: nll_privacy@GenDigital.com
If in the EU / in the Europe Middle East Africa region:

NortonLifeLock Ireland Limited - Global Privacy Office

Ballycoolin Business Park, Blanchardstown,

Dublin 15, Ireland

Email: nll_privacy@GenDigital.com
Independent EU GDPR Data Protection Officer

Pembroke Privacy Ltd

4 Upper Pembroke Street

Dublin 2

Ireland DO2VN24

Email: dpo@GenDigital.com

Do not forget to mark your letter for the attention of the Privacy Office.

Personal data that Norton collects or has collected and how we process it

Is my IP address also collected when browsing Norton website or using Norton mobile apps?

Norton checks and may collect your public IP address to determine your location; this allows us to present our websites and content to you in your local language and ensure that we comply with the rules governing how our websites are displayed in your geography.

Why do you collect IP address?

IP address is used for licensing and localization of services. It is necessary for license activation on the specific device.

Can I request my IP address?

No, IP addresses are dynamic and can change at any time. We do not refresh this information once enrollment is complete, so we have no record of your device's current IP address. However, you can find your current IP address by searching "what is my IP address?" in search engines.

What personal data/information has or does Norton collect on or about me?

The majority of personal information that Norton may have was collected directly from you, and in most cases provided to us by you. This includes your name, billing, transaction, and contact information we use to establish a Norton account. This information is available in your account.
For more detailed information on the data we collect, please refer to the NortonLifeLock Product and Services Privacy Notices accessible from our privacy center at https://www.nortonlifelock.com/privacy/privacy-notices/.

How does Norton process personal data/information about me and for what purposes?

Norton is dedicated to providing consumers with excellent products and services. We only use your data to fulfill orders you have placed with us, to contact you regarding your orders, to improve the quality, performance, and security of our products and services, and, to keep you informed of any future products or services we believe you may be interested in. You will find more details on each of these purposes in our global privacy statement and product transparency notices at https://www.gendigital.com/privacy .

Where does Norton store my personal data/information?

All data, including cloud storage, is held in the United States and the European Union.

Does Norton sell my data/information?

No. We do not sell, lease, or rent consumer information to third parties for monetary or other valuable consideration. Norton has strict policies that govern what information have and use with our third-party suppliers/partners, to help ensure the privacy of our customers.

Gen Digital and our advertising partners collect certain pieces of information from our visitors, such as device identifiers, cookies, advertising IDs, hashed email addresses, and usage activity. We and our partners may share this information with third parties to deliver ads for Gen Digital products on our own and other websites. You may adjust your cookie settings by clicking the “Privacy Settings” link in the footer of our websites. Another way in which you can communicate your cookie preferences to us is change the cookie settings in your browser. Please see our Cookie Statement for additional information.

We encourage customers to read our privacy statement to learn more about how Norton protects and uses their personal information: https://www.gendigital.com/privacy .

How does Norton protect my personal data/information? What kind of safeguards do you maintain to protect my personal data/information?

Norton has always taken appropriate precautionary measures to protect your personal data. These measures include policies for the protection of your personal data:

Physical Safeguards - e.g., locked file cabinets and controlled access to facilities
Technology Safeguards - e.g., anti-virus software, end-point protection, encryption (at rest and in transit)
Organizational Safeguards - e.g., privacy and security training for employees

For detailed information on the protection of personal information, see the Global Privacy Statement on our website at https://www.gendigital.com/privacy or refer to our License and Services Agreement at https://www.gendigital.com/legal/repository/ .

How long does Norton retain/store my personal data/information?

Norton maintains personal data based on the business reasons for which the information was collected, and as required by applicable laws and regulations. In general, information is maintained for the following periods:

As long as necessary to maintain our ongoing business relationship, or as needed to provide you with the products, services, or information which you are entitled to or can otherwise reasonably expect to receive from us;
For as long as necessary for the purpose for which we collected it or for which you supplied it to us in accordance with any product or service relevant activity or process;
Any retention period that is necessary to comply with our legal obligations, to resolve disputes, to enforce our agreements, or to comply with our business retention schedule;
The end of the period in which litigation or investigations might arise in respect of our business relations or other interactions with you.

For detailed information on the retention of personal information, see the Product Privacy Statements in our Privacy Center at https://www.gendigital.com/privacy and refer to the License and Services Agreement at https://www.gendigital.com/legal/repository/ .

Data subject rights

How can I obtain a copy of my personal data/information?

The majority of your personal information we hold can be found and deleted by logging into your customer account. You may also submit a request for a copy of your personal information by visiting the Privacy Center and selecting “Data Subject Requests”. There you may complete a form to obtain a portable copy of your personal information.

How can I correct my personal information?

There are two ways to correct your data:

How can I get Norton to transfer my personal information to a third-party (data portability)?

To protect your information, Norton does not provide your information to third parties other than our current third-party suppliers/partners that may include commercial partners, contact centers and payment processors.
If you would like to share your information with a third party, you can access your personal information by logging into your account.

How can I have my personal data deleted from Norton (and third-party vendors)?

Request for account deletion can now be done from within the My Norton Portal.

Log into your account via my.norton.com.
Under “My Account” select “Privacy Options” tab.
A Warning message will appear to review and then select “Delete My Data”.

You may also submit a request for deletion of your personal information by visiting the Privacy Center and selecting “Data Subject Requests”. There you may complete a form to request deletion of the personal information held by Norton about you.