For information concerning privacy rights of California residents and our notice at collection, please click here.
Information That We Collect
We collect and store information you provide when you engage with us and our Sites. The information we may collect includes:
Like many commercial websites, we analyze how visitors use our Sites through what is known as “cookie” technology or similar tracking tools. For more information, visit our “Tracking Tools” page, here.
We may combine the information we collect through cookies, web beacons, or other technology tools with other information we have collected from you or information from other sources.
Use of Information
If you sign up for our mailing list, we will send you emails about offers or services. At any time, you can ‘unsubscribe’ yourself from our email list simply by clicking the ‘unsubscribe’ button.
If you do not wish to receive communications from us about special offers and promotions, you can opt-out of receiving these communications by following the instructions contained in the messages you receive. Even if you opt-out of receiving these messages, we reserve the right to send you certain communications relating to the services we provide, and we may send you service announcements and administrative messages. We do not offer you the opportunity to opt-out of receiving those communications. For more information about interest-based advertising, including how you can manage advertising, please see below “Interest-Based Advertising.”
Disclosure of Information
Please note that if you voluntarily submit any personal information for posting on the Sites, such as a review or a blog post, the information becomes publicly available and can be collected and used by others, so you should use care before posting information about yourself online.
We may use third-party advertising companies that use tracking technologies to serve our advertisements across the Internet. For more information, view our “Tracking Tools” page, here.
Retention of Personal Information
Personal information that we collect, access, or process will be retained only as long as necessary for the fulfilment of the purposes for which it was collected, unless otherwise provided in agreements between you and ODP or as required or authorized by law.
We maintain reasonable and appropriate measures designed to maintain information we collect in a secure manner. We have taken certain physical, electronic, and administrative steps to safeguard and secure the information we collect from visitors to the Sites. Even though we follow reasonable procedures to try to protect the information in our possession, no security system is perfect, and we cannot promise, and you should not expect, that your information will be secure in all circumstances.
ODP sells products and services to other businesses. Only registered users 18 and older and connected with a partner business are permitted to use the Sites.
Under Age 13
The Sites are not directed to children, nor do we knowingly collect any personal information from children under the age of thirteen without verifiable parental consent. If you believe that a child has provided personal information to us, please contact us promptly by sending an email here, and we will endeavor to investigate and delete such information from our systems.
Do Not Track
Do Not Track (DNT) is a privacy preference that users can set in some web browsers, allowing users to opt out of certain tracking by websites and online services. We are not currently set up to respond to these signals.
California Shine the Light: California residents who provide personal information in obtaining products or services for personal, family, or household use are entitled to request and obtain from us once a calendar year information about the customer information we shared with third parties for their own direct marketing purposes, including the categories of information and the names and addresses of those businesses with which we have shared such information. We do not currently share the personal information of California residents with third parties for their own direct marketing purposes. However, if you have further questions about our privacy practices and compliance with California law, please contact us as explained below.
If you are a California resident applying for a job, please click here for information about our privacy practices for applicant information.
Information We Collect
Our Site collects information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or device (”personal information”). ODP has collected (or not collected, if indicated below) the following categories of personal information from its consumers within the last twelve (12) months:
Name, email address, title, company, address, telephone number, and name and address of recipient for delivery (if different from yours); unique personal identifiers, online identifiers, mobile device IDs, Internet Protocol and MAC addresses, account login credentials, or other similar identifiers.
B. Personal information categories listed in certain applicable laws (including the California Customer Records statute (Cal. Civ. Code § 1798.80(e))).
A name, signature, address, telephone number, employment, employment history, credit card number, debit card number, or any other methods of payment for our products.
C. Protected classification characteristics.
Age, sex, veteran, or military status
D. Commercial information.
Records of products or services purchased, obtained, or considered; purchase details; delivery details; payment details; communications we have received about your order or purchase; communications with you, including through requests to contact customer service, sales, or technical support; fraud checks or flags raised about your transactions or payment information, complaints, and claims feedback; and survey responses.
E. Biometric information.
Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data.
F. Internet or other similar network activity.
Browsing history, search history, and information on your operating system and browser; interactions with a website, application, or advertisement, including pages visited, the date and time you visit the Sites, the areas or pages of the Sites that you visit, the amount of time you spend viewing the Sites, the number of times you return to the Sites, links that are clicked, sites or apps visited before coming to our Site, other Site usage data, emails we send that you open, forward, or click through to our Site, and other clickstream data.
G. Geolocation data.
Precise device and physical location or movements.
H. Sensory data.
Audio, electronic, visual, or similar information, including a recording of your interactions with customer service, by phone or using our live chat.
I. Professional or employment-related information.
Information about your current role or employer.
J. Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)).
Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records.
K. Inferences drawn from other personal information.
Profile reflecting a person’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.
Some of this information (including payment card information, account login information, and precise geolocation data) may be considered “sensitive” under certain Privacy Laws. Whether information is sensitive information will depend on the Privacy Laws in your jurisdiction.
ODP obtains the categories of personal information listed above from the following categories of sources:
Use of Personal Information
We may use and/or disclose the personal information we collect for one or more of the following business purposes:
We generally use Sensitive Information for reasonably expected purposes, to provide you with services, in connection with your requests, and as authorized by law. For example, we use Geolocation information to show you the nearest store location and to show the store’s inventory.
ODP will not collect additional categories of personal information or use the personal information we collected for materially different, unrelated, or incompatible purposes without providing you notice.
Disclosing Personal Information
ODP may disclose your personal information to a third party for a business purpose.
We disclose your personal information with the following categories of third parties:
Disclosures of Personal Information for a Business Purpose
In the preceding twelve (12) months, ODP has disclosed the following categories of personal information for a business purpose:
In the preceding twelve (12) months, ODP has not disclosed the following categories of personal information for a business purpose:
Sale or Sharing of Personal Information
In the preceding twelve (12) months, ODP has sold or shared (as these terms are defined under Privacy Laws) the following categories of personal information. (ODP does not knowingly collect, sell, or share the personal information of individuals under the age of 16).
Retention of Personal Information
We will store your Personal Information in a form which permits us to identify you, for as long as necessary for the purpose for which the Personal Information is processed. We may also retain and use your Personal Information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements and rights, or if it is not technically reasonably feasible to remove it. We retain information you provide in connection with requests made under the Privacy Laws for a period of two years.
Your Rights and Choices
The Privacy Laws provide residents of California with specific rights regarding their personal information. This section describes your rights under the Privacy Laws, explains how to exercise those rights, and provides information about the response timing and format and your rights to appeal our decisions.
Access to Specific Information, Right to Know, and Data Portability Rights
You have the right to request that ODP disclose certain information to you about our information collection and disclosure practices. You also have the right to request a copy of the specific pieces of personal information we collected about you. Once we receive and confirm your verifiable consumer request, we will disclose to you:
Deletion Request Rights
You have the right to request that ODP delete your personal information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies. For example, under certain Privacy Laws, we may deny your deletion request if retaining the information is necessary for us or our service provider(s) to:
Information Correction Rights
You have the right to request that we correct information that we hold which is inaccurate. We will require that you provide information about yourself so that we can verify your identity before we can make any change in the information we hold about you and we will use commercially reasonable efforts to make the requested corrections. In some cases, for instance if you have an account with us, you can update your information by logging into your account.
Please see below for information on how to exercise these rights and response timing and format.
Your Opt-Out Rights
Do Not Sell My Personal Information
You have the right to opt out of the sale of your personal information. Once we receive your request, we will opt you out from the sale of such information.
Do Not Share My Personal Information
You have the right to opt out of having your personal information shared for cross context behavioral advertising purposes and having your information used for targeted advertising.
Sharing your personal information means making it available to a third party so that they can use it for cross-context behavioral advertising purposes.
Cross-context behavioral means that we display an advertisement to you that is selected based on personal information about you that we obtained or inferred over time from your activities across other companies’ websites, applications, or online services that we use to predict your preferences or interests. This does not include using your interactions with us or information that you provide to us for us to select advertisements to show you.
Exercising your rights
Exercising Do Not Sell and Do Not Share My Personal Information Rights
You can opt out of the sale or sharing of information for cross-context behavioral advertising purposes in several ways.
This website uses certain third-party tracking tools that collects information about you passively. In addition to opting out of the sale of data collected by ODP, you may also opt out of the collection of your information by such tools by clicking here.
Exercising Access, Deletion, and Correction Rights
To exercise the access, deletion, and information correction rights described above, please submit a verifiable consumer request to us by either:
Only you, or an agent that you authorize to act on your behalf, may make a verifiable consumer request related to your personal information. We currently do not collect household data. If all the members of a household make a Right to Know or Right to Delete request, we will respond as if the requests are individual requests.
You may only make a verifiable consumer request for access or data portability twice within a 12-month period. The verifiable consumer request must:
We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you.
We will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.
Response Timing and Format
We will provide a confirmation email to you within 10 days of receipt of a request for access, deletion, or correction. The confirmation email will explain how we will verify a request which will vary depending on the type of request made. We endeavor to respond to a verifiable consumer request for access or to delete within 45 days of its receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing. We will deliver our response to the email address you provided when you made your request. For a request not to sell or share your information, we will respond as soon as feasibly possible, but no later than 15 days from the date we receive the request.
Any disclosures we provide may only cover the 12-month period preceding a verifiable consumer request. However, you may request that we disclose the required information beyond the 12-month period, and we will honor that expanded request unless doing so proves impossible or would involve a disproportionate effort. Your right to request required information beyond the 12-month period, and our obligation to provide that information, shall only apply to personal information collected on or after January 1, 2022.
For data portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance (e.g. Microsoft Excel file and/or Adobe PDF file).
We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.
You may make a request for access twice in any 12 month period. You may make all other requests at any time.
Non-Discrimination; Notice of Financial Incentive
We will not discriminate against you for exercising any of your Privacy Law rights. Unless permitted by law, we will not:
· Deny you goods or services.
Financial Incentives: From time to time, we may offer financial incentives in connection with the collection or use of personal information. The material terms of the financial incentive will generally be presented to you at the time you sign up. You may withdraw from any financial incentive at any time by emailing us at email@example.com.
Attn: Legal Department Privacy Team
ODP Business Solutions
6600 N. Military Trail
Boca Raton, FL 33496