4. Your rights
You may have choices regarding our collection, use and disclosure of your Personal Data:
a. Opting out of receiving electronic communications from us
If you no longer want to receive marketing-related emails from us, you may opt-out via the unsubscribe link included in such emails or as described here. We will try to comply with your request(s) as soon as reasonably practicable. Please note that if you opt-out of receiving marketing-related emails from us, we retain the right to communicate to you regarding the services you receive (e.g. support and important legal notices).
b. Your data protection rights
Depending on your location and subject to applicable law, you may have the following rights:
- The right to request confirmation of whether Stripe processes Personal Data relating to you, and if so, to request a copy of that Personal Data;
- The right to request that Stripe rectify or update your Personal Data that is inaccurate, incomplete or outdated;
- The right to request that Stripe erase your Personal Data in certain circumstances provided by law. Learn More;
- The right to request that Stripe restrict the use of your Personal Data in certain circumstances, such as while Stripe considers another request that you have submitted (including a request that Stripe make an update to your Personal Data);
- The right to request that we export your Personal Data that we hold to another company, where technically feasible;
- Where the processing of your Personal Data is based on your previously given consent, you have the right to withdraw your consent at any time;
- Where we process your information based on our legitimate interests, you may also have the right to object to the processing of your Personal Data. Unless we have compelling legitimate grounds or where it is needed for legal reasons, we will cease processing your information when you object. Learn More.
- The right not to be discriminated against for exercising these rights; and/or
- The right to appeal any decision by Stripe relating to these rights.
You may have additional rights regarding your Personal Data under applicable law. For example, see Jurisdiction-specific provisions section under California below.
c. Process for exercising data protection rights
To exercise your data protection rights please see Stripe Privacy Center.
d. Applicable entities involved
The Stripe entity responsible for your data will depend on your location and the Stripe Media Service you use with us. For most of our services, it is either Stripe, Inc., the US parent company operating under US law, or Stripe Payments Europe, Limited (“SPEL”), an Irish company operating under Irish law, the data controller responsible for Personal Data collected and processed in relation to Stripe Media Services.
If you are a resident of the EEA or we have identified SPEL as your data controller, and believe we process your information within the scope of the General Data Protection Regulation (GDPR), you may direct your complaints to the Irish Data Protection Commission if you are unhappy about our privacy practices.
e. Jurisdiction-specific provisions
- United States - California. If you are a consumer located in California, we process your personal information in accordance with California law (e.g. the "CCPA"). For specific details, please see here. Stripe uses cookies, including advertising cookies, as described in our Cookie Policy.
- Your Rights and Choices. As a California consumer and subject to certain limitations under the CCPA, you have choices regarding our use and disclosure of your personal information (learn more about data subject rights metrics). In addition to the above rights (see here), please note these other California-specific rights:
- Exercising the right to know: You have a right to request additional information about the categories of personal information collected, sold, disclosed, or shared; purposes for which this personal information was collected, sold, or shared; categories of sources of personal information; and categories of third parties with whom we disclosed or shared this personal information.
- Exercising the right to opt-out from a sale: We do not sell “Personal Information” as defined by the CCPA and have not done so in the past 12 months.
- Exercising the right to limit the use or sharing of Sensitive Personal Information: we do not sell or disclose Sensitive Personal Information as defined by the CCPA and have not done so in the past 12 months. Learn more about our collection and use of Sensitive Personal Information here.
- Right to opt-out of sharing of cross-context behavioral advertising. Learn more here and here.
- To submit a request to exercise any of the rights described above, please contact us using the methods described in the Contact Us section below. We will verify your request by asking you to send it from the email address associated with your account or requiring you to provide information necessary to verify your identity, including name, address, transaction history, photo identification, and other information associated with your account.
- You may designate, in writing or through a power of attorney, an authorized agent to make requests on your behalf to exercise your rights under the CCPA. Your agent may submit a request on your behalf by contacting us using the methods described in the Contact Us section below. We may still require you to directly verify your identity and confirm that you provided the authorized agent permission to submit the request.
- Do Not Track and signals. Learn more about how we honor “do not track” and other signals.