PrIVACY NOTICE

WE ARE TELESIGN

. . . a world leader in Digital Identity and Programmable Communications, based in Los Angeles, California. TeleSign connects, protects and defends companies, customers and the digital interactions between them. With powerful AI that delivers identity with speed, accuracy and global reach, we enable Continuous Trust. Empowering companies to transact, communicate and engage with their customers free of fear, TeleSign helps makes the promise of the digital economy possible.

Data Processor (a.k.a.Service Provider under CCPA)
For the most part, we are a “Data Processor” whereby we process PersonalData that we receive from organizations (TeleSign’s “Customers”) for the provision of our Services. Customers receive Personal Data from you, the data subject, or from certain third parties, and we process this Personal Data on our Customers’ instructions.

Data Controller (a.k.a. Covered Business under CCPA)
In some cases (e.g. in the case of our Websites and Customer Portals), we are a “Data Controller” for the Personal Data that you, the data subject, give to us directly. That is when we determine the purposes and means of processing the Personal Data you provide.

However, regardless of whether we are a Data Controller or a Data Processor, TeleSign believes you – not us – have control over your Personal Data and you can access, manage and delete it, as described in this Privacy Notice.

HOW DO WE COLLECT PERSONAL DATA

As a Data Processor, we receive your Personal Data from our Customers. We process your Personal Data at our Customer’s direction through their use of our Services which are governed by contracts.

As a Data Controller, we collect Personal Data to provide the best possible experience, for example when you utilize our Websites or Customer Portals, when you contact us about our Services, or, in provision of our Services to Customers, to determine characteristics about a phone number that are used for fraud detection, prevention and mitigation purposes.

We collect information in a variety of ways directly from you, when you:

• Correspond with us by phone or email
• Apply for a job or register to attend training
• Participate in surveys, evaluations and promotions
• Join an email mailing list
• Request support from our customer support team for TeleSign Services
• Submit Personal Data through our Websites and Customer Portals or via Cookies

We also collect supplemental information from other sources, including:

• From TeleSign’s Customers in provision of our Services to Customer
• From third parties, such as TeleSign affiliates and partners, that have your permission to share your personal data with us
• From publicly available sources of information
• At conventions, trade events, and trade shows

WHAT PERSONAL DATA DO WE COLLECT

We collect the following categories of Personal Data:

We do not store or retain credit card information. For payments, we use third party payment processors who specialize in the secure online capture and processing of credit/debit card transactions.

Children’s Information
TeleSign does not knowingly collect Personal Data from children under the age of 13. If you are under the age of 13, please do not submit any Personal Data. We encourage parents and legal guardians to monitor their children’s Internet usage and to help enforce our Privacy Notice by instructing their children never to provide Personal Data without their permission. If you have reason to believe that a child under the age of 13 has provided Personal Data to TeleSign, please Contact Us, and we will delete that information from our data bases in the earliest possible timeframe.

WHY DO WE COLLECT PERSONAL DATA

TeleSign collects Personal Data to provide outstanding customer service, operate the Services we provide to Customers, for marketing of our Services, to detect, prevent, mitigate and investigate fraudulent or illegal activities.

As a Data Processor, we collect and use your Personal Data in accordance with the contractual obligations we have with our Customers. As a Data Controller, we collect and use your Personal Data only when you have provided us with your consent, or where there exists a legitimate interest to process such Personal Data in order to develop solutions that prevent fraudulent and illegal behaviors in provision of our Services to Customers.

We may process your Personal Data for one or more of the following business purposes:

• To provide you with information, goods, or services
• To improve and enhance services
• To conduct research and maintain statistics
• To send you SMS / text messages or make voice calls to you that contain alerts, reminders, notifications or one-time passcodes
• To send you SMS / text messages or make voice calls to you for automatic verification and power private two-way communications on digital platforms owned by our Customers
• To provide data intelligence and/or fraud risk assessment about your phone number to our Customers. Data intelligence includes device information, SIM swap detection, subscriber status, contact information, location, risk score, etc., in order to strengthen authentications, evaluate fraud risks, prevent fraudulent behaviors and enhance the user experience. Our Customers obtain your consent for use of your Personal Data in these data services that we provide.

For the purposes of the CCPA, we may use or communicate your Personal Data for valuable consideration for the following business purposes:

• To promote and market TeleSign’s services
• To detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity
• To provide you with information regarding your account and the TeleSign Services. Collecting your personal information enables us to better understand your needs and interests, improves our service, and personalize communications.

Profiling
We may analyze your Personal Data to create a profile of your interests and preferences so that we can contact you with information relevant to you. We may make use of additional information about you when it is available from external sources to help us do this effectively. Where this is the case, we ensure that such external sources have a lawful basis for processing and sharing your Personal Data. We may also use your Personal Data for the legitimate interest of detecting, mitigating and preventing fraud in provision of our Services to Customers.

WHO DO WE SHARE PERSONAL DATA WITH

Unless you give us your permission, we will not share your information with third parties for marketing purposes or any other unauthorized business purpose.

Personal Data may be shared with the following trusted third-party service providers who require the Personal Data to perform their work on TeleSign’s behalf:

• anti-fraud services providers;
• email, data and SMS/Voice communications providers;
• cloud storage providers;
• marketing analytics providers;
• customer relationship management providers,
• learning management system providers, and
• payment processing services providers.

These third party service providers are authorized to use the Personal Data only as necessary to provide their services. TeleSign takes appropriate steps to ensure that these third party service providers protect your Personal Data, such as by signing data processing agreements with them and assessing their security measures. TeleSign may also share the Personal Data with its affiliates and will only use the Personal Data as described in this notice. Additionally, your Personal Data may be disclosed as required by law and when we have reason to believe that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.

Links to other websites
Our Websites include links to other sites whose privacy practices may differ from ours. If you submit Personal Data to any of those sites, their use of your information is governed by their respective privacy policies.

YOUR PRIVACY RIGHTS & CHOICES

As a Data Controller (a.k.a. Covered Business under CCPA), for Personal Data that TeleSign receives from you directly, you have the following rights:

• The Right to Transparency: You have the right to be informed about our privacy and data protection practices in this Privacy Notice.
• The Right to Access/Disclosure: You have the right to know about the specific pieces of Personal Data we have about you, and we will provide you with what we have upon request.
• The Right to Rectification: If your Personal Data is incorrect or incomplete, you have the right to ask us to update it.
• The Right to Object: You have the right to object to or ask us to restrict the processing of your Personal Data.
• The Right to Data Portability: You have the right to receive your Personal Data in a structured, commonly used, portable format.
• The Right to Withdraw Consent/CCPA’s ”Do Not Sell My Personal Information”: At any time, you can opt-out of processing or having your Personal Data sold by contacting us.
• The Right to Delete (GDPR’s “RTBF”): You have the right to request to delete your Personal Data and we will honor it to the extent that it is no longer necessary for any Services contracted by our Customer or required for our legitimate business purposes, legal or contractual record keeping requirements.

All of your rights above can be exercised by contacting us using the details specified below in the Contact Us

As a Data Processor, we provide customer identity and engagement solutions to our Customers that involve the processing of Personal Data, including mobile phone numbers, on their behalf. Inquiries relating to Personal Data that we process through our Services on behalf of our Customers will be directed to our Customers by TeleSign’s Privacy team.

You can visit our Websites without providing any Personal Data. If you choose not to provide any Personal Data, you may not be able to use certain features of our Websites.

Our Websites offer publicly accessible blogs. You should be aware that any information you provide in these areas may be read, collected, and used by others who access them. To request removal of your Personal Data from our blogs, please Contact Us

We will not contact you for marketing purposes by email, phone, post or text message unless you have given your prior consent to us or any of the third parties we may engage for such purposes. At any time, you can change your marketing preferences by Contacting Us

DATA SECURITY & RETENTION

The security of your Personal Data and our Customers’ confidential information is important to us. We maintain a comprehensive information security program designed to ensure the security of your Personal Data by implementing physical, technical, and administrative measures and safeguards.

We follow best practices and generally accepted standards to store and protect the Personal Data we collect, both during transmission and once received and stored, including utilization of encryption where appropriate. For Personal Data collected or received over unsecured Internet channels, we encrypt the transmission of that information using secure socket layer technology (SSL/TLS).

Our Privacy and Security Teams regularly review our security and privacy practices and enhance them as necessary to help ensure the integrity of our systems and security of your Personal Data. Nonetheless, security vulnerabilities are continually evolving which means that no security measures can guarantee absolute security, but we will use reasonable efforts to prevent the accidental or unlawful loss, misuse or alteration of your Personal Data.

We review our data retention periods for Personal Data on a regular basis. We are legally required to hold some types of information for certain periods to fulfill our legal and statutory obligations. Outside of these obligations, we will hold your Personal Data in our systems for as long as is necessary to provide the Services you have requested or our Customer has contracted for, and thereafter for a variety of legitimate legal or business purposes. These might include retention periods:

• mandated by law, contract or similar obligations that apply to our business operations;
• for preserving, resolving (customer support), defending or enforcing our legal/contractual rights; or
• as needed to maintain adequate and accurate business and financial records (billing purposes).

We take steps to destroy or permanently de-identify Personal Data once it is no longer needed. In some cases, we choose to retain usage information in a depersonalized or anonymized form. If Personal Data is anonymized, so that you can no longer be identified, the information ceases to be Personal Data and will not be subject to our regular retention policies or subject to the exercise of your rights and choices as outlined above.

COOKIES

Please review our Cookie Policy which is considered a part of this Privacy Notice.

INTERNATIONAL DATA TRANSFERS

Personal Data provided to TeleSign may be transferred to, accessed from and otherwise processed in the United States, the European Union, the United Kingdom, Serbia and any other country in which TeleSign or its affiliates/trusted third party service providers operate facilities. By submitting your Personal Data, you are agreeing to this transfer, storing or processing by TeleSign and betweenTeleSign and affiliates/trusted third party service providers. When we transfer your information internationally, we will take steps to ensure that appropriate security measures are taken with the aim of ensuring that your privacy rights continue to be protected as required by the Applicable Law, and as outlined in this Privacy Notice.

For international transfers outside of the European Economic Area, TeleSign offers EU Model Clauses, also known as Standard Contractual Clauses, and Data Processing Agreements to meet the adequacy and security requirements for our Customers that operate in the EU.

‍

Contact Us

You have a choice about whether or not you wish to receive information from us. If you do not want to receive direct marketing communications from us about the vital work we do and/or our Services, then you may (i) choose not to submit any Personal Data to us; or (ii) access the unsubscribe option within the TeleSign email communication; or (iii) unsubscribe via this email address: unsubscribe@telesign.com.

If you wish to exercise any of your privacy rights, have any questions or comments about our Privacy Notice, our practices or our Services, or wish to lodge a concern or complaint, please contact us at:

Website:
Privacy Requests

Email:
‍PrivacyOffice@telesign.com

Toll-free number:
‍1 800 850 3485

Postal address:
‍TeleSign Corporation
13274 Fiji Way Suite 600, Marina del Rey CA 90292, USA

To communicate with our Data Protection Officer, please email dpo@telesign.com.

To communicate with our Legal Team regarding law enforcement requests, please email legal@telesign.com.

We will respond to all requests, inquiries, or concerns promptly upon becoming aware but in any case, within thirty (30) days.

You also have the right to lodge a complaint with a data protection authority in your country of residence if you consider that TeleSign’s processing of your Personal Data infringes Applicable Data Protection Law.

China

For exercise of your privacy rights in China, the DPO contact shall be TeleSign’s DPO as outlined above. Please note, such contact information may change once a more permanent DPO is appointed for TeleSign in China. This Notice will be updated to take note of any such changes.

EU

As TeleSign is not primarily established in the European Union, we have appointed a representative in the Netherlands (our “EU Representative”). If you are located in the European Union, or Iceland, Liechtenstein or Norway, you may address the EU Representative to raise any queries you may have relating to TeleSign's processing of your Personal Data and/or this Privacy Notice more generally.

Our EU Representative is TeleSign Netherlands B.V. and the email address by which to contact them is eurep@telesign.com.