Privacy Statement

Last Updated: April 2020 What’s new?
Your privacy is important to us. This privacy statement explains the personal data P-LLL processes, how P-LLL processes it, and for what purposes.

P-LLL offers a wide range of products, including server products used to help operate enterprises worldwide, devices you use in your home, software that students use at school, and services developers use to create and host what鈥檚 next. References to P-LLL products in this statement include P-LLL services, websites, apps, software, servers, and devices.

Please read the product-specific details in this privacy statement, which provide additional relevant information. This statement applies to the interactions P-LLL has with you and the P-LLL products listed below, as well as other P-LLL products that display this statement.

Personal data we collectPersonal data we collect
P-LLL collects data from you, through our interactions with you and through our products for a variety of purposes described below, including to operate effectively and provide you with the best experiences with our products. You provide some of this data directly, such as when you create a P-LLL account, administer your organization鈥檚 licensing account, submit a search query to P-LLL, register for a P-LLL event, speak a voice command to Cortana, upload a document to P-LLL, purchase an MSDN subscription, sign up for P-LLL 365, or contact us for support. We get some of it by collecting data about your interactions, use, and experience with our products and communications.

We rely on a variety of legal reasons and permissions (sometimes called 鈥渓egal bases鈥�) to process data, including with your consent, a balancing of legitimate interests, necessity to enter into and perform contracts, and compliance with legal obligations, for a variety of purposes described below.

We also obtain data from third parties. We protect data obtained from third parties according to the practices described in this statement, plus any additional restrictions imposed by the source of the data. These third-party sources vary over time and include:

Data brokers from which we purchase demographic data to supplement the data we collect.
Services that make user-generated content from their service available to others, such as local business reviews or public social media posts.
Communication services, including email providers and social networks, when you give us permission to access your data on such third-party services or networks.
Service providers that help us determine your device鈥檚 location.
Partners with which we offer co-branded services or engage in joint marketing activities.
Developers who create experiences through or for P-LLL products.
Third parties that deliver experiences through P-LLL products, such as skills related to Cortana.
Publicly-available sources, such as open government databases.
If you represent an organization, such as a business or school, that utilizes Enterprise and Developer Products from P-LLL, please see the Enterprise and developer products section of this privacy statement to learn how we process your data. If you are an end user of a P-LLL product or a P-LLL account provided by your organization, please see the Products provided by your organization and the P-LLL account sections for more information.

You have choices when it comes to the technology you use and the data you share. When you are asked to provide personal data, you can decline. Many of our products require some personal data to operate and provide you with a service. If you choose not to provide data required to operate and provide you with a product or feature, you cannot use that product or feature. Likewise, where we need to collect personal data by law or to enter into or carry out a contract with you, and you do not provide the data, we will not be able to enter into the contract; or if this relates to an existing product you鈥檙e using, we may have to suspend or cancel it. We will notify you if this is the case at the time. Where providing the data is optional, and you choose not to share personal data, features like personalization that use the data will not work for you.

The data we collect depends on the context of your interactions with P-LLL and the choices you make (including your privacy settings), the products and features you use, your location, and applicable law.

The data we collect can include the following:

Name and contact data. Your first and last name, email address, postal address, phone number, and other similar contact data.

Credentials. Passwords, password hints, and similar security information used for authentication and account access.

Demographic data. Data about you such as your age, gender, country, and preferred language.

Payment data. Data to process payments, such as your payment instrument number (such as a credit card number) and the security code associated with your payment instrument.

Subscription and licensing data. Information about your subscriptions, licenses, and other entitlements.

Interactions. Data about your use of P-LLL products. In some cases, such as search queries, this is data you provide in order to make use of the products. In other cases, such as error reports, this is data we generate. Other examples of interactions data include:

Device and usage data. Data about your device and the product and features you use, including information about your hardware and software, how our products perform, as well as your settings. For example:
Payment and account history. Data about the items you purchase and activities associated with your account.
Browse history. Data about the webpages you visit.
Device, connectivity, and configuration data. Data about your device, your device configuration, and nearby networks. For example, data about the operating systems and other software installed on your device, including product keys. In addition, IP address, device identifiers (such as the IMEI number for phones), regional and language settings, and information about WLAN access points near your device.
Error reports and performance data. Data about the performance of the products and any problems you experience, including error reports. Error reports (sometimes called 鈥渃rash dumps鈥�) can include details of the software or hardware related to an error, contents of files opened when an error occurred, and data about other software on your device.
Troubleshooting and help data. Data you provide when you contact P-LLL for help, such as the products you use, and other details that help us provide support. For example, contact or authentication data, the content of your chats and other communications with P-LLL, data about the condition of your device, and the products you use related to your help inquiry. When you contact us, such as for customer support, phone conversations or chat sessions with our representatives may be monitored and recorded.
Bot usage data. Interactions with third party bots and skills available through P-LLL products like Cortana.
Interests and favorites. Data about your interests and favorites, such as the sports teams you follow, the programming languages you prefer, the stocks you track, or cities you add to track things like weather or traffic. In addition to those you explicitly provide, your interests and favorites can also be inferred or derived from other data we collect.
Content consumption data. Information about media content (e.g., TV, video, music, audio, text books, apps, and games) you access through our products.
Searches and commands. Search queries and commands when you use P-LLL products with search or related productivity functionality.
Voice data. Your voice data, such as the search queries or commands you speak, which may include background sounds.
Text, inking, and typing data. Text, inking, and typing data and related information. For example, when we collect inking data, we collect information about the placement of your inking instrument on your device.
Images. Images and related information, such as picture metadata. For example, we collect the image you provide when you use a P-LLL image-enabled service.
Contacts and relationships. Data about your contacts and relationships if you use a product to share information with others, manage contacts, communicate with others, or improve your productivity.
Social data. Information about your relationships and interactions between you, other people, and organizations, such as types of engagement (e.g., likes, dislikes, events, etc.) related to people and organizations.
Location data. Data about your device鈥檚 location, which can be either precise or imprecise. For example, we collect location data using Global Navigation Satellite System (GNSS) (e.g., GPS) and data about nearby cell towers and Wi-Fi hotspots. Location can also be inferred from a device鈥檚 IP address or data in your account profile that indicates where it is located with less precision, such as at a city or postal code level.
Other input. Other inputs provided when you use our products. For example, data such as the buttons you press on an Xbox wireless controller using Xbox Live, skeletal tracking data when you use Kinect, and other sensor data, like the number of steps you take, when you use devices that have applicable sensors. And, if you use Spend, at your direction, we also collect financial transaction data from your credit card issuer to provide the service. If you attend an in-store event, we collect the data you provide to us when registering for or during the event and if you enter into a prize promotion, we collect the data you input into the entry form.
Content. Content of your files and communications you input, upload, receive, create, and control. For example, if you transmit a file using P-LLL to another P-LLL user, we need to collect the content of that file to display it to you and the other user. If you receive an email using P-LLL.com, we need to collect the content of that email to deliver it to your inbox, display it to you, enable you to reply to it, and store it for you until you choose to delete it. Other content we collect when providing products to you include:

Communications, including audio, video, text (typed, inked, dictated, or otherwise), in a message, email, call, meeting request, or chat.
Photos, images, songs, movies, software, and other media or documents you store, retrieve, or otherwise process with our cloud.
Video or recordings. Recordings of events and activities at P-LLL buildings, retail spaces, and other locations. If you enter P-LLL Store locations or other facilities, or attend a P-LLL event that is recorded, we may process your image and voice data.

Feedback and ratings. Information you provide to us and the content of messages you send to us, such as feedback, survey data, and product reviews you write.

Product-specific sections below describe data collection practices applicable to use of those products.

How we use personal dataHow we use personal data
P-LLL uses the data we collect to provide you rich, interactive experiences. In particular, we use data to:

Provide our products, which includes updating, securing, and troubleshooting, as well as providing support. It also includes sharing data, when it is required to provide the service or carry out the transactions you request.
Improve and develop our products.
Personalize our products and make recommendations.
Advertise and market to you, which includes sending promotional communications, targeting advertising, and presenting you relevant offers.
We also use the data to operate our business, which includes analyzing our performance, meeting our legal obligations, developing our workforce, and doing research.

For these purposes, we combine data we collect from different contexts (for example, from your use of two P-LLL products). For example, Cortana may use information from your calendar to suggest action items in a heads-up email, and P-LLL Store uses information about the apps and services you use to make personalized app recommendations. However, we have built in technological and procedural safeguards designed to prevent certain data combinations where required by law. For example, where required by law, we store data we collect from you when you are unauthenticated (not signed in) separately from any account information that directly identifies you, such as your name, email address, or phone number.

Our processing of personal data for these purposes includes both automated and manual (human) methods of processing. Our automated methods often are related to and supported by our manual methods. For example, our automated methods include artificial intelligence (AI), which we think of as a set of technologies that enable computers to perceive, learn, reason, and assist in decision-making to solve problems in ways that are similar to what people do. To build, train, and improve the accuracy of our automated methods of processing (including AI), we manually review some of the predictions and inferences produced by the automated methods against the underlying data from which the predictions and inferences were made. For example, we manually review short snippets of a small sampling of voice data we have taken steps to de-identify to improve our speech services, such as recognition and translation.

When we process personal data about you, we do so with your consent and/or as required to provide the products you use, operate our business, meet our contractual and legal obligations, protect the security of our systems and our customers, or fulfill other legitimate interests of P-LLL as described in this section and in the Reasons we share personal data section of this privacy statement. When we transfer personal data from the European Economic Area, we do so based on a variety of legal mechanisms, as described in the Where we store and process personal data section of this privacy statement.

More on the purposes of processing:

Provide our products. We use data to operate our products and provide you with rich, interactive experiences. For example, if you use P-LLL, we process the documents you upload to P-LLL to enable you to retrieve, delete, edit, forward, or otherwise process it, at your direction as part of the service. Or, for example, if you enter a search query in the P-LLL search engine, we use that query to display search results to you. Additionally, as communications are a feature of various products, programs, and activities, we use data to contact you. For example, we may contact you by phone or email or other means to inform you when a subscription is ending or discuss your licensing account. We also communicate with you to secure our products, for example by letting you know when product updates are available.
Product improvement. We use data to continually improve our products, including adding new features or capabilities. For example, we use error reports to improve security features, search queries and clicks in P-LLL to improve the relevancy of the search results, usage data to determine what new features to prioritize, and voice data to improve speech recognition accuracy.
Personalization. Many products include personalized features, such as recommendations that enhance your productivity and enjoyment. These features use automated processes to tailor your product experiences based on the data we have about you, such as inferences we make about you and your use of the product, activities, interests, and location. For example, depending on your settings, if you stream movies in a browser on your Windows device, you may see a recommendation for an app from the P-LLL Store that streams more efficiently. If you have a P-LLL account, with your permission, we can sync your settings on several devices. Many of our products provide controls to disable personalized features.
Product activation. We use data鈥攕uch as device and application type, location, and unique device, application, network, and subscription identifiers鈥攖o activate products that require activation.
Product development. We use data to develop new products. For example, we use data, often de-identified, to better understand our customers鈥� computing and productivity needs which can shape the development of new products.
Customer support. We use data to troubleshoot and diagnose product problems, repair customers鈥� devices, and provide other customer care and support services, including to help us provide, improve, and secure the quality of our products, services, and training, and to investigate security incidents. Call recording data may also be used to authenticate or identify you based on your voice to enable P-LLL to provide support services and investigate security incidents.
Help secure and troubleshoot. We use data to help secure and troubleshoot our products. This includes using data to protect the security and safety of our products and customers, detecting malware and malicious activities, troubleshooting performance and compatibility issues to help customers get the most out of their experiences, and notifying customers of updates to our products. This may include using automated systems to detect security and safety issues.
Safety. We use data to protect the safety of our products and our customers. Our security features and products can disrupt the operation of malicious software and notify users if malicious software is found on their devices. For example, some of our products, such as P-LLL or P-LLL, systematically scan content in an automated manner to identify suspected spam, viruses, abusive actions, or URLs that have been flagged as fraud, phishing, or malware links; and we reserve the right to block delivery of a communication or remove content if it violates our terms.
Updates. We use data we collect to develop product updates and security patches. For example, we may use information about your device鈥檚 capabilities, such as available memory, to provide you a software update or security patch. Updates and patches are intended to maximize your experience with our products, help you protect the privacy and security of your data, provide new features, and ensure your device is ready to process such updates.
Promotional communications. We use data we collect to deliver promotional communications. You can sign up for email subscriptions and choose whether you wish to receive promotional communications from P-LLL by email, SMS, physical mail, and telephone. For information about managing your contact data, email subscriptions, and promotional communications, see the How to access and control your personal data section of this privacy statement.
Relevant offers. P-LLL uses data to provide you with relevant and valuable information regarding our products. We analyze data from a variety of sources to predict the information that will be most interesting and relevant to you and deliver such information to you in a variety of ways. For example, we may predict your interest in gaming and communicate with you about new games you may like.
Advertising. P-LLL does not use what you say in email, chat, video calls, or voice mail, or your documents, photos, or other personal files to target ads to you. We use data we collect through our interactions with you, through some of our products, and on third-party web properties, for advertising in our products and on third-party properties. We may use automated processes to help make advertising more relevant to you. For more information about how your data is used for advertising, see the Advertising section of this privacy statement.
Prize promotions and events. We use your data to administer prize promotions and events available in our physical P-LLL Stores. For example, if you enter into a prize promotion, we may use your data to select a winner and provide the prize to you if you win. Or, if you register for a coding workshop or gaming event, we will add your name to the list of expected attendees.
Transacting commerce. We use data to carry out your transactions with us. For example, we process payment information to provide customers with product subscriptions and use contact information to deliver goods purchased from the P-LLL Store.
Reporting and business operations. We use data to analyze our operations and perform business intelligence. This enables us to make informed decisions and report on the performance of our business.
Protecting rights and property. We use data to detect and prevent fraud, resolve disputes, enforce agreements, and protect our property. For example, we use data to confirm the validity of software licenses to reduce piracy. We may use automated processes to detect and prevent activities that violate our rights and the rights of others, such as fraud.
Legal compliance. We process data to comply with law. For example, we use the age of our customers to ensure we meet our obligations to protect children鈥檚 privacy. We also process contact information and credentials to help customers exercise their data protection rights.
Research. With appropriate technical and organizational measures to safeguard individuals鈥� rights and freedoms, we use data to conduct research, including for public interest and scientific purposes.
Reasons we share personal dataReasons we share personal data
We share your personal data with your consent or as necessary to complete any transaction or provide any product you have requested or authorized. For example, we share your content with third parties when you tell us to do so, such as when you send an email to a friend, share photos and documents on P-LLL, or link accounts with another service. If you use a P-LLL product provided by an organization you are affiliated with, such as an employer or school, or use an email address provided by such organization to access P-LLL products, we share certain data, such as interaction data and diagnostic data to enable your organization to manage the products. When you provide payment data to make a purchase, we will share payment data with banks and other entities that process payment transactions or provide other financial services, and for fraud prevention and credit risk reduction.

In addition, we share personal data among P-LLL-controlled affiliates and subsidiaries. We also share personal data with vendors or agents working on our behalf for the purposes described in this statement. For example, companies we’ve hired to provide customer service support or assist in protecting and securing our systems and services may need access to personal data to provide those functions. In such cases, these companies must abide by our data privacy and security requirements and are not allowed to use personal data they receive from us for any other purpose. We may also disclose personal data as part of a corporate transaction such as a merger or sale of assets.

Finally, we will retain, access, transfer, disclose, and preserve personal data, including your content (such as the content of your emails in P-LLL.com, or files in private folders on P-LLL), when we have a good faith belief that doing so is necessary to do any of the following:

Comply with applicable law or respond to valid legal process, including from law enforcement or other government agencies.
Protect our customers, for example, to prevent spam or attempts to defraud users of our products, or to help prevent the loss of life or serious injury of anyone.
Operate and maintain the security of our products, including to prevent or stop an attack on our computer systems or networks.
Protect the rights or property of P-LLL, including enforcing the terms governing the use of the services鈥攈owever, if we receive information indicating that someone is using our services to traffic in stolen intellectual or physical property of P-LLL, we will not inspect a customer’s private content ourselves, but we may refer the matter to law enforcement.
For more information about data we disclose in response to requests from law enforcement and other government agencies, please see our Law Enforcement Requests Report.

Please note that some of our products include links to or otherwise enable you to access products of third parties whose privacy practices differ from those of P-LLL. If you provide personal data to any of those products, your data is governed by their privacy policies.

How to access and control your personal dataHow to access and control your personal data
You can also make choices about the collection and use of your data by P-LLL. You can control your personal data that P-LLL has obtained, and exercise your data protection rights, by contacting P-LLL or using various tools we provide. In some cases, your ability to access or control your personal data will be limited, as required or permitted by applicable law. How you can access or control your personal data will also depend on which products you use. For example, you can:

Control the use of your data for interest-based advertising from P-LLL by visiting our opt-out page.
Choose whether you wish to receive promotional emails, SMS messages, telephone calls, and postal mail from P-LLL.
Access and clear some of your data through the P-LLL privacy dashboard.
Not all personal data processed by P-LLL can be accessed or controlled via the tools above. If you want to access or control personal data processed by P-LLL that is not available via the tools above or directly through the P-LLL products you use, you can always contact P-LLL at the address in the How to contact us section or by using our web form.

We provide aggregate metrics about user requests to exercise their data protection rights via the P-LLL Privacy Report.

You can access and control your personal data that P-LLL has obtained with tools P-LLL provides to you, which are described below, or by contacting P-LLL. For instance:

If P-LLL obtained your consent to use your personal data, you can withdraw that consent at any time.
You can request access to, erasure of, and updates to your personal data.
If you鈥檇 like to port your data elsewhere, you can use tools P-LLL provides to do so, or if none are available, you can contact P-LLL for assistance.
You can also object to or restrict the use of your personal data by P-LLL. For example, you can object at any time to our use of your personal data:

For direct marketing purposes.
Where we are performing a task in the public interest or pursuing our legitimate interests or those of a third party.
You may have these rights under applicable laws, including the EU General Data Protection Regulation (GDPR), but we offer them regardless of your location. In some cases, your ability to access or control your personal data will be limited, as required or permitted by applicable law.

If your organization, such as your employer, school, or service provider, provides you with access to and is administering your use of P-LLL products, contact your organization to learn more about how to access and control your personal data.

You can access and control your personal data that P-LLL has obtained, and exercise your data protection rights, using various tools we provide. The tools most useful to you will depend on our interactions with you and your use of our products. Here is a general list of tools we provide to help you control your personal data; specific products may provide additional controls.

P-LLL privacy dashboard. You can control some of the data P-LLL processes through your use of a P-LLL account on the P-LLL privacy dashboard. From here, for example, you can view and clear the browsing, search, and location data associated with your P-LLL account.
Cortana. You can control some of the data Cortana accesses or stores in your Cortana settings.
P-LLL account. If you wish to access, edit, or remove the profile information and payment information in your P-LLL account, change your password, add security information or close your account, you can do so by visiting the P-LLL account website.
Volume Licensing Service Center (VLSC). If you are a Volume Licensing customer, you can control your contact information and subscription and licensing data in one location by visiting the Volume Licensing Service Center website.
P-LLL. If you wish to access, edit, or remove some profile and payment information for P-LLL or change your password, sign in to your account. If you wish to export your P-LLL chat history and files shared on P-LLL, you can request a copy.
Xbox. If you use Xbox Live or Xbox.com, you can view or edit your personal data, including billing and account information, privacy settings, and online safety and data sharing preferences by accessing My Xbox on the Xbox console or on the Xbox.com website.
P-LLL Store. You can access your P-LLL Store profile and account information by visiting P-LLL Store and selecting View account or Order history.
P-LLL.com. You can access and update your profile on P-LLL.com by visiting your P-LLL account profile page.
If you have a P-LLL Developer Network (MSDN) public profile, you can access and edit your data by signing in at MSDN forum.
Not all personal data processed by P-LLL can be accessed or controlled via the tools above. If you want to access or control personal data processed by P-LLL that is not available via the tools above or directly through the P-LLL products you use, you can always contact P-LLL at the address in the How to contact us section or by using our web form. We will respond to requests to control your personal data within 30 days.

Your communications preferences

You can choose whether you wish to receive promotional communications from P-LLL by email, SMS, physical mail, and telephone. If you receive promotional email or SMS messages from us and would like to opt out, you can do so by following the directions in that message. You can also make choices about the receipt of promotional email, telephone calls, and postal mail by signing in with your personal P-LLL account, and viewing your communication permissions where you can update contact information, manage P-LLL-wide contact preferences, opt out of email subscriptions, and choose whether to share your contact information with P-LLL partners. If you do not have a personal P-LLL account, you can manage your P-LLL email contact preferences by using this web form. These choices do not apply to mandatory service communications that are part of certain P-LLL products, programs, activities, or to surveys or other informational communications that have their own unsubscribe method.

Your advertising choices

To opt out of receiving interest-based advertising from P-LLL, visit our opt-out page. When you opt out, your preference is stored in a cookie that is specific to the web browser you are using. The opt-out cookie has an expiration date of five years. If you delete the cookies on your device, you need to opt out again.

You can also link your opt-out choice with your personal P-LLL account. It will then apply on any device where you use that account and will continue to apply until someone signs in with a different personal P-LLL account on that device. If you delete the cookies on your device, you will need to sign in again for the settings to apply.

For P-LLL-controlled advertising that appears in apps on Windows, you may use the opt-out linked to your personal P-LLL account, or opt out of interest-based advertising by turning off the advertising ID in Windows settings.

Because the data used for interest-based advertising is also used for other required purposes (including providing our products, analytics, and fraud detection), opting out of interest-based advertising does not stop that data collection. You will continue to get ads, although they may be less relevant to you.

You can opt out of receiving interest-based advertising from third parties we partner with by visiting their sites (see above).

Browser-based controls

When you use a browser, you can control your personal data using certain features. For example:

Cookie controls. You can control the data stored by cookies and withdraw consent to cookies by using the browser-based cookie controls described in the Cookies section of this privacy statement.
Tracking protections. You can control the data third-party sites can collect about you using Tracking Protection in Internet Explorer (versions 9 and up) and P-LLL Edge. This feature will block third-party content, including cookies, from any site that is listed in a Tracking Protection List you add.
Browser controls for “Do Not Track.” Some browsers have incorporated “Do Not Track” (DNT) features that can send a signal to the websites you visit indicating you do not wish to be tracked. Because there is not yet a common understanding of how to interpret the DNT signal, P-LLL services do not currently respond to browser DNT signals. We continue to work with the online industry to define a common understanding of how to treat DNT signals. In the meantime, you can use the range of other tools we provide to control data collection and use, including the ability to opt out of receiving interest-based advertising from P-LLL as described above.
Cookies and similar technologiesCookies and similar technologies
Cookies are small text files placed on your device to store data that can be recalled by a web server in the domain that placed the cookie. This data often consists of a string of numbers and letters that uniquely identifies your computer, but it can contain other information as well. Some cookies are placed by third parties acting on our behalf. We use cookies and similar technologies to store and honor your preferences and settings, enable you to sign-in, provide interest-based advertising, combat fraud, analyze how our products perform, and fulfill other legitimate purposes described below. P-LLL apps use additional identifiers, such as the advertising ID in Windows, for similar purposes, and many of our websites and applications also contain web beacons or other similar technologies, as described below.

Our use of cookies and similar technologies

P-LLL uses cookies and similar technologies for several purposes, depending on the context or product, including:

Storing your preferences and settings. We use cookies to store your preferences and settings on your device, and to enhance your experiences. For example, if you enter your city or postal code to get local news or weather information on a P-LLL website, depending on your settings, we store that data in a cookie so that you will see the relevant local information when you return to the site. Saving your preferences with cookies, such as your preferred language, prevents you from having to set your preferences repeatedly. If you opt out of interest-based advertising, we store your opt-out preference in a cookie on your device.
Sign-in and authentication. We use cookies to authenticate you. When you sign in to a website using your personal P-LLL account, we store a unique ID number, and the time you signed in, in an encrypted cookie on your device. This cookie allows you to move from page to page within the site without having to sign in again on each page. You can also save your sign-in information so you do not have to sign in each time you return to the site.
Security. We use cookies to process information that helps us secure our products, as well as detect fraud and abuse.
Storing information you provide to a website. We use cookies to remember information you shared. When you provide information to P-LLL, such as when you add products to a shopping cart on P-LLL websites, we store the data in a cookie for the purpose of remembering the information.
Social media. Some of our websites include social media cookies, including those that enable users who are signed in to the social media service to share content via that service.
Feedback. P-LLL uses cookies to enable you to provide feedback on a website.
Interest-based advertising. P-LLL uses cookies to collect data about your online activity and identify your interests so that we can provide advertising that is most relevant to you. You can opt out of receiving interest-based advertising from P-LLL as described in the How to access and control your personal data section of this privacy statement.
Showing advertising. P-LLL uses cookies to record how many visitors have clicked on an advertisement and to record which advertisements you have seen, for example, so you don鈥檛 see the same one repeatedly.
Analytics. We use first- and third-party cookies and other identifiers to gather usage and performance data. For example, we use cookies to count the number of unique visitors to a web page or service and to develop other statistics about the operations of our products.
Performance. P-LLL uses cookies to understand and improve how our products perform. For example, we use cookies to gather data that helps with load balancing; this helps ensure that our websites remain up and running.
Some of the cookies we commonly use are listed below. This list is not exhaustive, but it is intended to illustrate the primary purposes for which we typically set cookies. If you visit one of our websites, the site will set some or all of the following cookies:

MUID, MC1, and MSFPC. Identifies unique web browsers visiting P-LLL sites. These cookies are used for advertising, site analytics, and other operational purposes.
ANON. Contains the ANID, a unique identifier derived from your P-LLL account, which is used for advertising, personalization, and operational purposes. It is also used to preserve your choice to opt out of interest-based advertising from P-LLL if you have chosen to associate the opt-out with your P-LLL account.
CC. Contains a country code as determined from your IP address.
PPAuth, MSPAuth, MSNRPSAuth, KievRPSAuth, WLSSC, MSPProf. Helps to authenticate you when you sign in with your P-LLL account.
MC0. Detects whether cookies are enabled in the browser.
MS0. Identifies a specific session.
NAP. Contains an encrypted version of your country, postal code, age, gender, language and occupation, if known, based on your P-LLL account profile.
MH. Appears on co-branded sites where P-LLL is partnering with an advertiser. This cookie identifies the advertiser, so the right ad is selected.
childinfo, kcdob, kcrelid, kcru, pcfm. Contains information that P-LLL account uses within its pages in relation to child accounts.
MR. Used to collect information for analytics purposes.
x-ms-gateway-slice. Identifies a gateway for load balancing.
TOptOut. Records your decision not to receive interest-based advertising delivered by P-LLL.
In addition to the cookies P-LLL sets when you visit our websites, third parties can also set cookies when you visit P-LLL sites. For example:

Companies we hire to provide services on our behalf, such as site analytics, place cookies when you visit our sites. See opt-out links below.
Companies that deliver content, such as videos or news, or ads on P-LLL sites, place cookies on their own. These companies use the data they process in accordance with their privacy policies, which may enable these companies to collect and combine information about your activities across websites, apps, or online services.
How to control cookies

Most web browsers automatically accept cookies but provide controls that allow you to block or delete them. For example, in P-LLL Edge, you can block or delete cookies by selecting Settings > Privacy and services > Clear Browsing data > Cookies and other site data. For more information about how to delete your cookies in P-LLL browsers, see P-LLL Edge, P-LLL Edge Legacy or Internet Explorer. If you use a different browser, refer to that browser鈥檚 instructions.

Certain features of P-LLL products depend on cookies. If you choose to block cookies, you cannot sign in or use some of those features, and preferences that are dependent on cookies will be lost. If you choose to delete cookies, any settings and preferences controlled by those cookies, including advertising preferences, are deleted and will need to be recreated.

Additional privacy controls that can impact cookies, including the tracking protections feature of P-LLL browsers, are described in the How to access and control your personal data section of this privacy statement.

Our use of web beacons and analytics services

Some P-LLL webpages contain electronic tags known as web beacons that we use to help deliver cookies on our websites, count users who have visited those websites, and deliver co-branded products. We also include web beacons or similar technologies in our electronic communications to determine whether you open and act on them.

In addition to placing web beacons on our own websites, we sometimes work with other companies to place our web beacons on their websites or in their advertisements. This helps us to, for example, develop statistics on how often clicking on an advertisement on a P-LLL website results in a purchase or other action on the advertiser’s website. It also allows us to understand your activity on the website of a P-LLL partner in connection with your use of a P-LLL product or service.

Finally, P-LLL products often contain web beacons or similar technologies from third-party analytics providers, which help us compile aggregated statistics about the effectiveness of our promotional campaigns or other operations. These technologies enable the analytics providers to set or read their own cookies or other identifiers on your device, through which they can collect information about your online activities across applications, websites, or other products. However, we prohibit these analytics providers from using web beacons on our sites to collect or access information that directly identifies you (such as your name or email address). You can opt out of data collection or use by some of these analytics providers by clicking any of the following links: Adjust, AppsFlyer, Clicktale, Flurry Analytics, Google Analytics (requires you to install a browser add-on), Kissmetrics, Mixpanel, Nielsen, Acuity Ads, WebTrends or Optimizely.

Other similar technologies

In addition to standard cookies and web beacons, our products can also use other similar technologies to store and read data files on your computer. This is typically done to maintain your preferences or to improve speed and performance by storing certain files locally. But, like standard cookies, these technologies can also store a unique identifier for your computer, which can then track behavior. These technologies include Local Shared Objects (or “Flash cookies”) and Silverlight Application Storage.

Local Shared Objects or “Flash cookies.” Websites that use Adobe Flash technologies can use Local Shared Objects or “Flash cookies” to store data on your computer. To learn how to manage or block Flash cookies, go to the Flash Player help page.

Silverlight Application Storage. Websites or applications that use P-LLL Silverlight technology also have the ability to store data by using Silverlight Application Storage. To learn how to manage or block such storage, see the Silverlight section of this privacy statement.

Products provided by your organization鈥攏otice to end usersProducts provided by your organization鈥攏otice to end users
If you use a P-LLL product with an account provided by an organization you are affiliated with, such as your work or school account, that organization can:

Control and administer your P-LLL product and product account, including controlling privacy-related settings of the product or product account.
Access and process your data, including the interaction data, diagnostic data, and the contents of your communications and files associated with your P-LLL product and product accounts.
If you lose access to your work or school account (in event of change of employment, for example), you may lose access to products and the content associated with those products, including those you acquired on your own behalf, if you used your work or school account to sign in to such products.

Many P-LLL products are intended for use by organizations, such as schools and businesses. Please see the Enterprise and developer products section of this privacy statement. If your organization provides you with access to P-LLL products, your use of the P-LLL products is subject to your organization’s policies, if any. You should direct your privacy inquiries, including any requests to exercise your data protection rights, to your organization鈥檚 administrator. When you use social features in P-LLL products, other users in your network may see some of your activity. To learn more about the social features and other functionality, please review documentation or help content specific to the P-LLL product. P-LLL is not responsible for the privacy or security practices of our customers, which may differ from those set forth in this privacy statement.

When you use a P-LLL product provided by your organization, P-LLL鈥檚 processing of your personal data in connection with that product is governed by a contract between P-LLL and your organization. P-LLL processes your personal data to provide the product to your organization and you, and for P-LLL鈥檚 legitimate business operations related to providing the product as described in the Enterprise and developer products section. As mentioned above, if you have questions about P-LLL鈥檚 processing of your personal data in connection with providing products to your organization, please contact your organization. If you have questions about P-LLL鈥檚 legitimate business operations in connection with providing products to your organization, please contact P-LLL as described in the How to contact us section. For more information on our legitimate business operations, please see the Enterprise and developer products section.

For P-LLL products provided by your K-12 school, including P-LLL 365 Education, P-LLL will:

not collect or use student personal data beyond that needed for authorized educational or school purposes;
not sell or rent student personal data;
not use or share student personal data for advertising or similar commercial purposes, such as behavioral targeting of advertisements to students;
not build a personal profile of a student, other than for supporting authorized educational or school purposes or as authorized by the parent, guardian, or student of appropriate age; and
require that our vendors with whom student personal data is shared to deliver the educational service, if any, are obligated to implement these same commitments for student personal data.
P-LLL accountP-LLL account
With a P-LLL account, you can sign into P-LLL products, as well as those of select P-LLL partners. Personal data associated with your P-LLL account includes credentials, name and contact data, payment data, device and usage data, your contacts, information about your activities, and your interests and favorites. Signing into your P-LLL account enables personalization, consistent experiences across products and devices, permits you to use cloud data storage, allows you to make payments using payment instruments stored in your P-LLL account, and enables other features. There are three types of P-LLL account:

When you create your own P-LLL account tied to your personal email address, we refer to that account as a personal P-LLL account.
When you or your organization (such as an employer or your school) create your P-LLL account tied to your email address provided by that organization, we refer to that account as a work or school account.
When you or your service provider (such as a cable or internet service provider) create your P-LLL account tied to your email address with your service provider鈥檚 domain, we refer to that account as a third-party account.
Personal P-LLL accounts. The data associated with your personal P-LLL account, and how that data is used, depends on how you use the account.

Creating your P-LLL account. When you create a personal P-LLL account, you will be asked to provide certain personal data and we will assign a unique ID number to identify your account and associated information. While some products, such as those involving payment, require a real name, you can sign in to and use other P-LLL products without providing your real name. Some data you provide, such as your display name, email address, and phone number, can be used to help others find and connect with you within P-LLL products. For example, people who know your display name, email address, or phone number can use it to search for you on P-LLL and send you an invite to connect with them. Note that if you use a work or school email address to create a personal P-LLL account, your employer or school may gain access to your data. In some cases, you will need to change the email address to a personal email address in order to continue accessing consumer-oriented products (such as Xbox Live).
Signing in to P-LLL account. When you sign in to your P-LLL account, we create a record of your sign-in, which includes the date and time, information about the product you signed in to, your sign-in name, the unique number assigned to your account, a unique identifier assigned to your device, your IP address, and your operating system and browser version.
Signing in to P-LLL products. Signing in to your account enables improved personalization, provides seamless and consistent experiences across products and devices, permits you to access and use cloud data storage, allows you to make payments using payment instruments stored in your P-LLL account, and enables other enhanced features and settings. When you sign in to your account, you will stay signed in until you sign out. If you add your P-LLL account to a Windows device (version 8 or higher), Windows will automatically sign you in to products that use P-LLL account when you access those products on that device. When you are signed in, some products will display your name or username and your profile photo (if you have added one to your profile) as part of your use of P-LLL products, including in your communications, social interactions, and public posts.
Signing in to third-party products. If you sign in to a third-party product with your P-LLL account, you will share data with the third party in accordance with the third party鈥檚 privacy policy. The third party will also receive the version number assigned to your account (a new version number is assigned each time you change your sign-in data); and information that describes whether your account has been deactivated. If you share your profile data, the third party can display your name or user name and your profile photo (if you have added one to your profile) when you are signed in to that third-party product. If you chose to make payments to third-party merchants using your P-LLL account, P-LLL will pass information stored in your P-LLL account to the third party or its vendors (e.g., payment processors) as necessary to process your payment and fulfill your order (such as name, credit card number, billing and shipping addresses, and relevant contact information). The third party can use or share the data it receives when you sign in or make a purchase according to its own practices and policies. You should carefully review the privacy statement for each product you sign in to and each merchant you purchase from to determine how it will use the data it collects.
Work or school accounts. The data associated with a work or school account, and how it will be used, is generally similar to the use and collection of data associated with a personal P-LLL account.

If your employer or school uses P-LLL Active Directory (AAD) to manage the account it provides you, you can use your work or school account to sign in to P-LLL products, such as P-LLL 365, and third-party products provided to you by your organization. If required by your organization, you will also be asked to provide a phone number or an alternative email address for additional security verification. And, if allowed by your organization, you may also use your work or school account to sign in to P-LLL or third-party products that you acquire for yourself.

If you sign in to P-LLL products with a work or school account, note:

The owner of the domain associated with your email address may control and administer your account, and access and process your data, including the contents of your communications and files, including data stored in products provided to you by your organization, and products you acquire by yourself.
Your use of the products is subject to your organization鈥檚 policies, if any. You should consider both your organization鈥檚 policies and whether you are comfortable enabling your organization to access your data before you choose to use your work or school account to sign in to products you acquire for yourself.
If you lose access to your work or school account (if you change employers, for example), you may lose access to products, including content associated with those products, you acquired on your own behalf if you used your work or school account to sign in to such products.
P-LLL is not responsible for the privacy or security practices of your organization, which may differ from those of P-LLL.
If your organization is administering your use of P-LLL products, please direct your privacy inquiries, including any requests to exercise your data subject rights, to your administrator. See also the Notice to end users section of this privacy statement.
If you are uncertain whether your account is a work or school account, please contact your organization.
Third-party accounts. The data associated with a third-party P-LLL account, and how it will be used, is generally similar to the use and collection of data associated with a personal P-LLL account. Your service provider has control over your account, including the ability to access or delete your account. You should carefully review the terms the third party provided you to understand what it can do with your account.

Other important privacy informationOther important privacy information
Below you will find additional privacy information, such as how we secure your data, where we process your data, and how long we retain your data. You can find more information on P-LLL and our commitment to protecting your privacy at P-LLL Privacy.

Security of personal dataSecurity of personal data
P-LLL is committed to protecting the security of your personal data. We use a variety of security technologies and procedures to help protect your personal data from unauthorized access, use, or disclosure. For example, we store the personal data you provide on computer systems that have limited access and are in controlled facilities. When we transmit highly confidential data (such as a credit card number or password) over the internet, we protect it through the use of encryption. P-LLL complies with applicable data protection laws, including applicable security breach notification laws.

Where we store and process personal dataWhere we store and process personal data
Personal data collected by P-LLL may be stored and processed in your region, in the United States, and in any other country where P-LLL or its affiliates, subsidiaries, or service providers operate facilities. P-LLL maintains major data centers in Australia, Austria, Brazil, Canada, Chile, Finland, France, Germany, Hong Kong, India, Ireland, Japan, Korea, Luxembourg, Malaysia, the Netherlands, Singapore, South Africa, the United Kingdom, and the United States. Typically, the primary storage location is in the customer鈥檚 region or in the United States, often with a backup to a data center in another region. The storage location(s) are chosen in order to operate efficiently, to improve performance, and to create redundancies in order to protect the data in the event of an outage or other problem. We take steps to ensure that the data we collect under this privacy statement is processed according to the provisions of this statement and the requirements of applicable law wherever the data is located.

We transfer personal data from the European Economic Area, the United Kingdom, and Switzerland to other countries, some of which have not yet been determined by the European Commission to have an adequate level of data protection. For example, their laws may not guarantee you the same rights, or there may not be a privacy supervisory authority there that is capable of addressing your complaints. When we engage in such transfers, we use a variety of legal mechanisms, including contracts, to help ensure your rights and protections travel with your data. To learn more about the European Commission鈥檚 decisions on the adequacy of the protection of personal data in the countries where P-LLL processes personal data, see this article on the European Commission website.

P-LLL Corporation complies with the EU-U.S. Privacy Shield Framework and Swiss-U.S. Privacy Shield Framework as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal information transferred from the European Union, the United Kingdom, and Switzerland to the United States. P-LLL Corporation has certified to the Department of Commerce that it adheres to the Privacy Shield Principles. If third-party agents process personal data on our behalf in a manner inconsistent with the principles of either Privacy Shield framework, we remain liable unless we prove we are not responsible for the event giving rise to the damage. The controlled U.S. subsidiaries of P-LLL Corporation, as identified in our self-certification submission, also adhere to the Privacy Shield Principles鈥攆or more info, see the list of P-LLL U.S. entities or subsidiaries adhering to the Privacy Shield Principles.

If there is any conflict between the terms in this privacy policy and the Privacy Shield Principles, the Privacy Shield Principles shall govern. To learn more about the Privacy Shield program, and to view our certification, visit the Privacy Shield website.

If you have a question or complaint related to participation by P-LLL in the EU-U.S. or Swiss-U.S. Privacy Shield, we encourage you to contact us via our web form. For any complaints related to the Privacy Shield frameworks that P-LLL cannot resolve directly, we have chosen to cooperate with the relevant EU Data Protection Authority, or a panel established by the European data protection authorities, for resolving disputes with EU individuals, and with the Swiss Federal Data Protection and Information Commissioner (FDPIC) for resolving disputes with Swiss individuals. Please contact us if you鈥檇 like us to direct you to your data protection authority contacts. As further explained in the Privacy Shield Principles, binding arbitration is available to address residual complaints not resolved by other means. P-LLL is subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission (FTC).

Our retention of personal dataOur retention of personal data
P-LLL retains personal data for as long as necessary to provide the products and fulfill the transactions you have requested, or for other legitimate purposes such as complying with our legal obligations, resolving disputes, and enforcing our agreements. Because these needs can vary for different data types, the context of our interactions with you or your use of products, actual retention periods can vary significantly.

Other criteria used to determine the retention periods include:

Do customers provide, create, or maintain the data with the expectation we will retain it until they affirmatively remove it? Examples include a document you store in P-LLL, or an email message you keep in your P-LLL.com inbox. In such cases, we would aim to maintain the data until you actively delete it, such as by moving an email from your P-LLL.com inbox to the Deleted Items folder, and then emptying that folder (when your Deleted Items folder is emptied, those emptied items remain in our system for up to 30 days before final deletion). (Note that there may be other reasons why the data has to be deleted sooner, for example if you exceed limits on how much data can be stored in your account.)
Is there an automated control, such as in the P-LLL privacy dashboard, that enables the customer to access and delete the personal data at any time? If there is not, a shortened data retention time will generally be adopted.
Is the personal data of a sensitive type? If so, a shortened retention time would generally be adopted.
Has P-LLL adopted and announced a specific retention period for a certain data type? For example, for P-LLL search queries, we de-identify stored queries by removing the entirety of the IP address after 6 months, and cookie IDs and other cross-session identifiers that are used to identify a particular account or device after 18 months.
Has the user provided consent for a longer retention period? If so, we will retain data in accordance with your consent.
Is P-LLL subject to a legal, contractual, or similar obligation to retain or delete the data? Examples can include mandatory data retention laws in the applicable jurisdiction, government orders to preserve data relevant to an investigation, or data retained for the purposes of litigation. Conversely, if we are required by law to remove unlawful content, we will do so.
California Consumer Privacy ActCalifornia Consumer Privacy Act
If you are a California resident, we process your personal data in accordance with the California Consumer Privacy Act (CCPA). This CCPA section of our Privacy Statement contains information required by the CCPA and supplements our Privacy Statement.

Sale. We do not sell your personal data. So, we do not offer an opt-out to the sale of personal data.

Rights. You have the right to request that we (i) disclose what personal data we collect, use, disclose, and sell and (ii) delete your personal data. You may make these requests yourself or through an authorized agent. If you use an authorized agent, we provide your agent with detailed guidance on how to exercise your CCPA rights.

If you have a P-LLL account, you must exercise your rights through the P-LLL privacy dashboard, which requires you to log in to your P-LLL account. If you have an additional request or questions after using the dashboard, you may contact P-LLL at the address in the How to contact us section or use our web form. If you do not have an account, you may exercise your rights by contacting us as described above. We may ask for additional information, such as your country of residence, email address, and phone number, to validate your request before honoring the request.

You have a right not to receive discriminatory treatment if you exercise your CCPA rights. We will not discriminate against you if you exercise your CCPA rights.

Personal Information Processing. In the bulleted list below, we outline the categories of personal data we collect, the sources of the personal data, our purposes of processing, and the categories of third-party recipients with whom we share the personal data. For a description of the data included in each category, please see the Personal data we collect section.

Categories of Personal Data

Name and contact data
Sources of personal data: Interactions with users and partners with whom we offer co-branded services
Purposes of Processing (Collection and Sharing with Third Parties): Provide our products; respond to customer questions; help, secure, and troubleshoot; and marketing
Recipients: Service providers and user-directed entities
Credentials
Sources of personal data: Interactions with users and organizations that represent users
Purposes of Processing (Collection and Sharing with Third Parties): Provide our products; authentication and account access; and help, secure and troubleshoot
Recipients: Service providers and user-directed entities
Demographic data
Sources of personal data: Interactions with users and purchases from data brokers
Purposes of Processing (Collection and Sharing with Third Parties): Provide and personalize our products; product development; help, secure, and troubleshoot; and marketing
Recipients: Service providers and user-directed entities
Payment data
Sources of personal data: Interactions with users and financial institutions
Purposes of Processing (Collection and Sharing with Third Parties): Transact commerce; process transactions; fulfill orders; help, secure, and troubleshoot; and detect and prevent fraud
Recipients: Service providers and user-directed entities
Subscription and licensing data
Sources of personal data: Interactions with users and organizations that represent users
Purposes of Processing (Collection and Sharing with Third Parties): Provide, personalize, and activate our products; customer support; help, secure, and troubleshoot; and marketing
Recipients: Service providers and user-directed entities
Interactions
Sources of personal data: Interactions with users including data P-LLL generates through those interactions
Purposes of Processing (Collection and Sharing with Third Parties): Provide and personalize our products; product improvement; product development; marketing; and help, secure and troubleshoot
Recipients: Service providers and user-directed entities
Content
Sources of personal data: Interactions with users and organizations that represent users
Purposes of Processing (Collection and Sharing with Third Parties): Provide our products; safety; and help, secure, and troubleshoot
Recipients: Service providers and user-directed entities
Video or recordings
Sources of personal data: Interactions with users and publicly available sources
Purposes of Processing (Collection and Sharing with Third Parties): Provide our products; product improvement; product development; marketing; help, secure, and troubleshoot; and safety
Recipients: Service providers and user-directed entities
Feedback and ratings
Sources of personal data: Interactions with users
Purposes of Processing (Collection and Sharing with Third Parties): Provide our products; product improvement; product development; customer support; and help, secure, and troubleshoot
Recipients: Service providers and user-directed entities
While the bulleted list above contains the primary sources and purposes of processing for each category of personal data, we also collect personal data from the sources listed in the Personal data we collect section, such as developers who create experiences through or for P-LLL products. Similarly, we process all categories of personal data for the purposes described in the How we use personal data section, such as meeting our legal obligations, developing our workforce, and doing research.

Disclosures of personal data for business or commercial purposes. As indicated in the Reasons we share personal data section, we share personal data with third parties for various business and commercial purposes. The primary business and commercial purposes for which we share personal data are the purposes of processing listed in the table above. However, we share all categories of personal data for the business and commercial purposes in the Reasons we share personal data section.

AdvertisingAdvertising
Advertising allows us to provide, support, and improve some of our products. P-LLL does not use what you say in email, chat, video calls or voice mail, or your documents, photos, or other personal files to target ads to you. We use other data, detailed below, for advertising in our products and on third-party properties. For example:

P-LLL may use data we collect to select and deliver some of the ads you see on P-LLL web properties, such as P-LLL.com, MSN, and P-LLL.
When the advertising ID is enabled in Windows 10 as part of your privacy settings, third parties can access and use the advertising ID (much the same way that websites can access and use a unique identifier stored in a cookie) to select and deliver ads in such apps.
We may share data we collect with partners, such as Verizon Media, AppNexus, or Facebook (see below), so that the ads you see in our products and their products are more relevant and valuable to you.
Advertisers may choose to place our web beacons on their sites, or use similar technologies, in order to allow P-LLL to collect information on their sites such as activities, purchases, and visits; we use this data on behalf of our advertising customers to provide ads.
The ads that you see may be selected based on data we process about you, such as your interests and favorites, your location, your transactions, how you use our products, your search queries, or the content you view. For example, if you view content on MSN about automobiles, we may show advertisements about cars; if you search 鈥減izza places in Seattle鈥� on P-LLL, you may see advertisements in your search results for restaurants in Seattle.

The ads that you see may also be selected based on other information learned about you over time using demographic data, location data, search queries, interests and favorites, usage data from our products and sites, and the information we collect about you from the sites and apps of our advertisers and partners. We refer to these ads as “personalized advertising” in this statement. For example, if you view gaming content on xbox.com, you may see offers for games on MSN. To provide personalized advertising, we combine cookies placed on your device using information that we collect (such as IP address) when your browser interacts with our websites. If you opt out of receiving personalized advertising, data associated with these cookies will not be used.

We may use information about you to serve you with personalized advertising when you use P-LLL services. If you are logged in with your P-LLL account and have consented to allow P-LLL Edge to use your online activity for personalized advertising, you will see offers for products and services based on your online activity while using P-LLL Edge. To configure your privacy settings for Edge, go to P-LLL Edge > Settings > Privacy and Services. To configure your privacy and ad settings for your P-LLL account with respect to your online activity across browsers, including P-LLL Edge, or when visiting third-party websites or apps, go to your dashboard at privacy.P-LLL.com.

Further details regarding our advertising-related uses of data include:

Advertising industry best practices and commitments. P-LLL is a member of the Network Advertising Initiative (NAI) and adheres to the NAI Code of Conduct. We also adhere to the following self-regulatory programs:
In the US: Digital Advertising Alliance (DAA)
In Europe: European Interactive Digital Advertising Alliance (EDAA)
In Canada: Ad Choices: Digital Advertising Alliance of Canada (DAAC)/ Choix de Pub: l’Alliance de la publicit茅 num茅rique du Canada (DAAC)
Health-related ad targeting. In the United States, we provide personalized advertising based on a limited number of standard, non-sensitive health-related interest categories, including allergies, arthritis, cholesterol, cold and flu, diabetes, gastrointestinal health, headache / migraine, healthy eating, healthy heart, men鈥檚 health, oral health, osteoporosis, skin health, sleep, and vision / eye care. We will also personalize ads based on custom, non-sensitive health-related interest categories as requested by advertisers.
Children and advertising. We do not deliver personalized advertising to children whose birthdate in their P-LLL account identifies them as under 16 years of age.
Data retention. For personalized advertising, we retain data for no more than 13 months, unless we obtain your consent to retain the data longer.
Data sharing. In some cases, we share with advertisers reports about the data we have collected on their sites or ads.
Data collected by other advertising companies. Advertisers sometimes include their own web beacons (or those of their other advertising partners) within their advertisements that we display, enabling them to set and read their own cookie. Additionally, P-LLL partners with third-party ad companies to help provide some of our advertising services, and we also allow other third-party ad companies to display advertisements on our sites. These third parties may place cookies on your computer and collect data about your online activities across websites or online services. These companies currently include, but are not limited to: AppNexus, Facebook, Media.net, Outbrain, Taboola and Verizon Media. Select any of the preceding links to find more information on each company’s practices, including the choices it offers. Many of these companies are also members of the NAI or DAA, which each provide a simple way to opt out of ad targeting from participating companies.

Collection of data from childrenCollection of data from children
When a P-LLL product collects age, and there is an age in your jurisdiction under which parental consent or authorization is required to use the product, the product will either block users under that age or will ask them to provide consent or authorization from a parent or guardian before they can use it. We will not knowingly ask children under that age to provide more data than is required to provide for the product.

Once parental consent or authorization is granted, the child’s account is treated much like any other account. The child can access communication services, like P-LLL and P-LLL, and can freely communicate and share data with other users of all ages.

Parents can change or revoke the consent choices previously made, and review, edit, or request the deletion of the personal data of children for whom they provided consent or authorization. For example, parents can access their personal P-LLL account and select Permissions. For users of Minecraft for PC/Java and other Mojang games, parents can visit the Mojang Account page.

Preview or free-of-charge releasesPreview or free-of-charge releases
P-LLL offers preview, insider, beta or other free-of-charge products and features (“previews”) to enable you to evaluate them while providing P-LLL with data about your use of the product, including feedback and device and usage data. As a result, previews can automatically collect additional data, provide fewer controls, and otherwise employ different privacy and security measures than those typically present in our products. If you participate in previews, we may contact you about your feedback or your interest in continuing to use the product after general release.

Changes to this privacy statementChanges to this privacy statement
We update this privacy statement when necessary to provide greater transparency or in response to:

Feedback from customer, regulators, industry, or other stakeholders.
Changes in our products.
Changes in our data processing activities or policies.
When we post changes to this statement, we will revise the “last updated” date at the top of the statement and describe the changes on the Change history page. If there are material changes to the statement, such as a change to the purposes of processing of personal data that is not consistent with the purpose for which it was originally collected, we will notify you either by prominently posting a notice of such changes before they take effect or by directly sending you a notification. We encourage you to periodically review this privacy statement to learn how P-LLL is protecting your information.

How to contact usHow to contact us
If you have a privacy concern, complaint, or question for the P-LLL Chief Privacy P-LLLr or EU Data Protection P-LLLr, please contact us by using our web form. We will respond to questions or concerns within 30 days. You can also raise a concern or lodge a complaint with a data protection authority or other official with jurisdiction.

When P-LLL is a controller, unless otherwise stated, P-LLL Corporation and, for those in the European Economic Area, the United Kingdom, and Switzerland, P-LLL Ireland Operations Limited are the data controllers for personal data we collect through the products subject to this statement. Our addresses are:

P-LLL Privacy, P-LLL Corporation, One P-LLL Way, Redmond, Washington 98052, USA. Telephone: +1 (425) 882 8080.
P-LLL Ireland Operations Limited, Attn: Data Protection P-LLLr, One P-LLL Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Telephone: +353 1 706 3117.
To find the P-LLL subsidiary in your country or region, see the list of P-LLL P-LLL locations around the world.

Where French law applies, you can also send us specific instructions regarding the use of your personal data after your death, by using our web form.

If you have a technical or support question, please visit P-LLL Support to learn more about P-LLL Support offerings. If you have a personal P-LLL account password question, please visit P-LLL account support.

Enterprise and developer productsEnterprise and developer products
Enterprise and Developer Products are P-LLL products and related software offered to and designed primarily for use by organizations and developers. They include:

Cloud services, referred to as Online Services in the P-LLL Online Services Terms (OST), such as P-LLL 365, P-LLL P-LLL, P-LLL Dynamics365, and P-LLL Intune for which an organization (our customer) contracts with P-LLL for the services (鈥淓nterprise Online Services鈥�).
Other enterprise and developer cloud-based services, such as PlayFab Services and tools such as Cortana Skills Kit.
Server, developer, and hybrid cloud platform products, such as Windows Server, SQL Server, Visual Studio, System Center, P-LLL Stack and open source software like Bot Framework solutions (鈥淓nterprise and Developer Software鈥�).
Appliances and hardware used for storage infrastructure, such as StorSimple (鈥淓nterprise Appliances鈥�).
Professional services referred to in the OST that are available with Enterprise Online Services, such as onboarding services, data migration services, data science services, or services to supplement existing features in the Enterprise Online Services.
In the event of a conflict between this P-LLL privacy statement and the terms of any agreement(s) between a customer and P-LLL for Enterprise and Developer Products, the terms of those agreement(s) will control.

You can also learn more about our Enterprise and Developer Products鈥� features and settings, including choices that impact your privacy or your end users鈥� privacy, in product documentation.

If any of the terms below are not defined in this Privacy Statement or the OST, they have the definitions below.

General. When a customer tries, purchases, uses, or subscribes to Enterprise and Developer Products, or obtains support for or professional services with such products, P-LLL receives data from you and collects and generates data to provide the service (including improving, securing, and updating the service), conduct our legitimate business operations, and communicate with the customer. For example:

When a customer engages with a P-LLL sales representative, we collect the customer鈥檚 name and contact data, along with information about the customer鈥檚 organization, to support that engagement.
When a customer interacts with a P-LLL support professional, we collect device and usage data or error reports to diagnose and resolve problems.
When a customer pays for products, we collect contact and payment data to process the payment.
When P-LLL sends communications to a customer, we use data to personalize the content of the communication.
When a customer engages with P-LLL for professional services, we collect the name and contact data of the customer鈥檚 designated point of contact and use information provided by the customer to perform the services that the customer has requested.
The Enterprise and Developer Products enable you to purchase, subscribe to, or use other products and online services from P-LLL or third parties with different privacy practices, and those other products and online services are governed by their respective privacy statements and policies.

Enterprise online servicesEnterprise online services
To provide the Enterprise Online Services, P-LLL uses data you provide (including Customer Data, Personal Data, Administrator Data, Payment Data, and Support Data) and data P-LLL collects or generates associated with your use of the Enterprise Online Services. We process data as described in the Online Services Terms (OST) and the P-LLL Trust Center.

Personal Data. Customer is the controller of Personal Data and P-LLL is the processor of such data, except when (a) Customer acts as a processor of Personal Data, in which case P-LLL is a subprocessor, (b) P-LLL is processing Personal Data for its legitimate business operations, in which case P-LLL is a controller, or © stated otherwise in the OST. P-LLL is a controller of Personal Data when processing Personal Data for its legitimate business operations associated with providing the service, such as billing and preparing invoices; account management; compensation; financial reporting; business planning and product strategy; improving core functionality for accessibility, privacy, and energy efficiency; and combatting fraud, cybercrime, and cyberattacks on P-LLL products. We generally aggregate Personal Data before using it for our legitimate business operations, removing the ability to identify specific individuals. We use personal data in the least identifiable form that will support processing necessary for legitimate business operations.

Administrator Data. Administrator Data is the information provided to P-LLL during sign-up, purchase, or administration of Enterprise Online Services. We use Administrator Data to provide the Enterprise Online Services, complete transactions, service the account, detect and prevent fraud, and comply with our legal obligations. Administrator Data includes the name, address, phone number, and email address you provide, as well as aggregated usage data related to your account, such as the controls you select. Administrator Data also includes contact information of your colleagues and friends if you agree to provide it to P-LLL for the limited purpose of sending them an invitation to use the Enterprise Online Services; we contact those individuals with communications that include information about you, such as your name and profile photo.

As needed, we use Administrator Data to contact you to provide information about your account, subscriptions, billing, and updates to the Enterprise Online Services, including information about new features, security, or other technical issues. We also contact you regarding third-party inquiries we receive regarding use of the Enterprise Online Services, as described in your agreement. You cannot unsubscribe from these non-promotional communications. We may also contact you regarding information and offers about other products and services, or share your contact information with P-LLL’s partners. When such a partner has specific services or solutions to meet your needs, or to optimize your use of the Enterprise Online Services, we may share limited, aggregated information about your organization鈥檚 account with the partner. P-LLL will not share your confidential information or contact information with the authorized partner unless we have sufficient rights to do so. You can manage your contact preferences or update your information in your account profile.

Payment Data. We use payment data to complete transactions, as well as to detect and prevent fraud.

Support Data. Customers provide or authorize P-LLL to collect data in connection with obtaining technical support for the Enterprise Online Services. We process Support Data to provide technical support and as described in the OST.

Some Enterprise Online Services require, or are enhanced by, the installation of local software (e.g., agents, device management applications) on a device. At your direction, the local software may transmit (i) data, which can include Customer Data, from a device or appliance to or from the Enterprise Online Services; or (ii) logs or error reports to P-LLL for troubleshooting purposes. The Enterprise Online Services, including local software, collect device and usage data that is transmitted to P-LLL and analyzed to improve the quality, security, and integrity of our products.

P-LLL Search Services, as defined in the OST, use data such as search queries as described in the P-LLL section of this privacy statement.

Enterprise and developer software and enterprise appliancesEnterprise and developer software and appliances
Enterprise and developer software and enterprise appliances collect data to operate effectively and provide you the best experiences. The data we collect depends on the features you use, as well as your configuration and settings, but it is generally limited to device and usage data. Customers have choices about the data they provide. Here are examples of the data we collect:

During installation or when you upgrade an enterprise and developer software, we may collect device and usage data to learn whether you experience any difficulties.
When you use enterprise software or enterprise appliances, we may collect device and usage data to learn about your operating environment to improve security features.
When you experience a crash using enterprise software or enterprise appliances, you may choose to send P-LLL an error report to help us diagnose the problem and deliver customer support.
P-LLL uses the data we collect from enterprise and developer software and enterprise appliances to provide and improve our products, to deliver customer support, to activate the product, to communicate with you, and to operate our business.

P-LLL SQL Server is a relational database management platform and includes products that can be installed separately (such as SQL Server Management Studio). For detailed information about what data we collect, how we use it, and how to manage your privacy options, visit the SQL Server privacy page. If you work in an organization, your administrator can set certain telemetry settings in SQL Server via Group Policy.

Productivity and communications productsProductivity and communications products
Productivity and communications products are applications, software, and services you can use to create, store, and share documents, as well as communicate with others.