HP recognizes that privacy is a fundamental human right and further recognizes the importance of privacy, security and data protection to our customers and partners worldwide. As a global organization, with legal entities, business processes, management structures, and technical systems that cross international borders, we strive to provide protections across all of our operations that exceed legal minimums and to deploy consistent, rigorous policies and procedures.
This Privacy Statement informs you of our privacy practices and of the choices you can make and rights you can exercise in relation to your personal data, including information that may be collected from your online activity, use of devices, and interactions you have with HP offline, such as when you engage with our customer support representatives. This Privacy Statement applies to all HP companies as well as HP-owned websites, domains, services (including device management), applications, subscriptions (e.g. Instant Ink) and products, and those of our subsidiaries (collectively “HP Services”). In most cases, HP Inc. will be the data controller.
We have an accountability-based program and are committed to the following principles, which are based on internationally-recognized frameworks and principles of privacy and data protection:
We process personal data in accordance with law and with transparency and fairness to you. Our data processing activities are conducted: 1) with your consent; 2) in order to fulfill our obligations to you; 3) for the legitimate purposes of operating our business, advancing innovation and providing a seamless customer experience; or 4) otherwise in accordance with law.
We are transparent and provide clear notice and choice to you about the types of personal data collected and the purposes for which it is collected and processed. We will not use personal data for purposes that are incompatible with these Principles, our Privacy Statement or specific notices associated with HP Services.
We provide you with reasonable access along with the ability to review, correct, amend or delete the personal data you have shared with us.
We only use personal data for the purposes described at the time of collection or for additional compatible purposes in accordance with law. We take reasonable steps to ensure that personal data is accurate, complete and current and we only collect personal data which is relevant and limited to what is necessary for the purposes for which it is collected. We will keep personal data for no longer than is necessary for the purposes for which it was collected and then we will securely delete or destroy it.
To protect personal data against unauthorized use or disclosure we implement strong information security controls in our own operations and offer market-leading products and solutions with high levels of data security protection.
We acknowledge our potential liability for transfers of personal data among HP entities or to third parties. Personal data will only be shared when third parties are obligated by contract to provide equivalent levels of protection.
We are committed to resolving any concerns regarding your personal data. We voluntarily participate in several international privacy programs that provide recourse to individuals if they feel HP has not adequately respected their rights.
As a global company, it is possible that any information you provide may be transferred to or accessed by HP entities worldwide in accordance with this Privacy Statement and on the basis of the following International Privacy Programs.
In compliance with EU-US Privacy Shield Principles, HP commits to resolve complaints about your privacy and our collection or use of your personal information.
HP has further committed to refer unresolved privacy complaints under the EU-US Privacy Shield Principles to BBB EU PRIVACY SHIELD, a non-profit alternative dispute resolution provider located in the United States and operated by the Council of Better Business Bureaus. If you do not receive timely acknowledgment of your complaint, or if your complaint is not satisfactorily addressed, please visit www.bbb.org/EU-privacy-shield/for-eu-consumers/ for more information and to file a complaint.
If your complaint is not resolved through the above channels, under limited circumstances you may be able to invoke binding arbitration before a Privacy Shield Panel.
HP is subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission, or any other U.S. authorized statutory body.
*The specific U.S.-based HP companies participating in the EU-US Privacy Framework include: Compaq Information Technologies, LLC; Hewlett-Packard Company Archives LLC; Hewlett-Packard Development Company, L.P.; Hewlett-Packard Enterprises, LLC; Hewlett-Packard Products CV 1, LLC; Hewlett-Packard Products CV 2, LLC; Hewlett-Packard World Trade, LLC; HP Federal LLC; HP Hewlett Packard Group LLC, HP Inc.; HPI Bermuda Holdings LLC; HPI Brazil Holdings LLC; HPI Federal LLC; HPI J1 Holdings LLC; HPI J2 Holdings LLC; HPI Luxembourg LLC; HPQ Holdings, LLC; Indigo America, Inc.; Palm Latin America, Inc.; Palm, Inc.; PrinterOn America Corporation; Shoreline Investment Management Company; and Tall Tree Insurance Company.
HP’s Binding Corporate Rules (“BCR”) ensure that personal data transferred from the European Economic Area (“EEA”) is adequately protected while being processed by any of HP’s global entities. HP transfers of personal data from the EU are conducted in accordance with the following approved BCR.
HP has received TrustArc’s APEC Privacy Seal signifying that this Privacy Statement and our practices have been reviewed for compliance with the TrustArc program viewable on the validation page available by clicking the TrustArc seal. HP’s privacy practices described in this Statement comply with the APEC Cross Border Privacy Rules System (“CBPR”), including transparency, accountability, and choice regarding the collection and use of your personal information. The CBPR certification does not cover information that may be collected through downloadable software on third-party platforms.
We collect and use personal data to manage your relationship with HP and better serve you when you are using HP Services by personalizing and improving your experience. Examples of how we use data include:
Providing you with a seamless customer experience by maintaining accurate contact and registration data, delivering comprehensive customer support, offering products, services, subscriptions and features that may interest you and enabling you to participate in contests and surveys. We also use your data to deliver a tailored experience, personalize the HP Services and communications you receive and create recommendations based your use of HP Services.
Assisting you in completing transactions and orders of our products or services, administering your account, processing payments, arranging shipments and deliveries and facilitating repairs and returns.
Improving the performance and operation of our products, solutions, services and support, including warranty support and timely firmware and software updates and alerts to ensure the continued operation of the device or service. For more information, please see the section on Information Automatically Collected About Your Use of HP Services.
Communicating with you about HP Services. Examples of administrative communications may include responses to your inquiries or requests, service completion or warranty-related communications, safety recall notifications, communications required by law or applicable corporate updates related to mergers, acquisitions or divestitures.
Maintaining the integrity and security of our websites, products, features and services and preventing and detecting security threats, fraud or other criminal or malicious activity that might compromise your information. When you interact with us, we will also take reasonable steps to verify your identity, such as requiring a password and user ID, before granting access to your personal data. We may also maintain additional security measures, such as CCTV, to safeguard our physical locations.
Conducting ordinary business operations, verifying your identity, making credit decisions if you apply for credit, conducting business research and analytics, corporate reporting and management, staff training and quality assurance purposes (which may include monitoring or recording calls to our customer support) and outreach.
Innovating new products, features and services using research and development tools and incorporating data analysis activities.
Providing personalized promotional offers (in accordance with your Privacy Preferences) on HP Services and other selected partner websites (for example, you might see an advertisement for a product on a partner site that you have recently viewed on an HP site). We might also share some of your information with marketing service providers and digital marketing networks to present advertisements that might interest you.
Compliance with applicable laws, regulations, court orders, government and law enforcement requests, to operate our services and products properly and to protect ourselves, our users and our customers and to solve any customer disputes.
Personal data is any information that personally identifies you or from which you could be identified either directly or indirectly. We may collect your personal data through your use of HP Services or during interactions with HP representatives.
The personal data we collect from you depends on the nature of your interaction with us or on the HP Services you use, but may include the following:
We collect data from the following third parties:
In order to provide certain HP Services at an enterprise level, your business contact data may be provided to HP by a designated entity within your business or enterprise (such as a member of your IT department). Where necessary, we may also use information provided by you or your employer, together with information from publicly-available and other online and offline sources, to conduct due diligence checks on business contacts as part of our anti-corruption compliance program.
We also receive non-personal data, such as aggregated or de-identified demographic/profile data, from third-party sources such as companies that specialize in providing enterprise data, analytics and software as a service.
In order to ensure data accuracy and offer a superior customer experience by providing you with better personalized services, content, marketing and ads, in some cases we link or combine the information that we collect from the different sources outlined above with the information we collect directly from you. For example, we compare the geographic information acquired from commercial sources with the IP address collected by our Automatic Data Collection Tools to derive your general geographic area. Information may also be linked via a unique identifier such as a cookie or account number.
Where necessary, we obtain information to conduct due diligence checks on business contacts as part of our anti-corruption compliance program and in accordance with our legal obligations.
You are not required to share the personal data that we request, however, if you choose not to share the information, in some cases we will not be able to provide you with HP Services, certain specialized features or be able to effectively respond to any queries you may have.
We engage service providers or Partners to manage or support certain aspects of our business operations on our behalf. These service providers or partners may be located in the US or in other global locations and may provide services such as credit card processing and fraud management services, customer support, sales pursuits on our behalf, order fulfillment, product delivery, content personalization, advertising and marketing activities (including digital and personalized advertising), IT services, email service providers, data hosting, live-help, debt collection and management or support of HP websites. Our service providers and partners are required by contract to safeguard any personal data they receive from us and are prohibited from using the personal data for any purpose other than to perform the services as instructed by HP. We also take steps to provide adequate protection for any transfers of your personal data in accordance with applicable law such as signing EU Standard Contractual Clauses with the service provider or partner, relying on their Privacy Shield certification, other approved codes of conduct or certification mechanisms or binding and enforceable commitments of the service provider.
We may also transfer information about you to advertising partners (including the ad networks, ad-serving companies, and other service providers they may use) so that they may recognize your devices and deliver interest based content and advertisements to you. The information may include your name, postal address, email, device ID, or other identifier in encrypted form. The providers may process the information in hashed or de-identified form. These providers may collect additional information from you, such as your IP address and information about your browser or operating system and may combine information about you with information from other companies in data sharing cooperatives in which we participate.
Circumstances may arise where, whether for strategic or other business reasons, HP decides to sell, buy, merge or otherwise reorganize businesses. In such transactions, we may disclose or transfer your personal data to prospective or actual purchasers or receive personal data from sellers. Our practice is to seek appropriate protection for your personal data in these types of transactions.
We may also share your personal data when we believe, in good faith, that we have an obligation to: (i) respond to duly authorized information requests of law enforcement agencies, regulators, courts and other public authorities, including to meet national security or other law enforcement requirements; (ii) comply with any law, regulation, subpoena, or court order; (iii) investigate and help prevent security threats, fraud or other criminal or malicious activity; (iv) enforce/protect the rights and properties of HP or its subsidiaries; or (v) protect the rights or personal safety of HP, our employees, and third parties on or using HP property when allowed and in line with the requirements of applicable law.
You can find more information about Automatic Data Collection Tools at: www.allaboutcookies.org.
When you visit any HP website, it may store or retrieve information on your browser, mostly in the form of cookies, which are text files containing small amounts of information. This information might be about you, your preferences or your device and is mostly used to make the site work as you expect it to. The information does not usually directly identify you, but it can give you a more personalized web experience.
HP uses Automatic Data Collection Tools for the following reasons:
Please note that the above is not an exhaustive list and may be updated by us from time to time.
If you are a registered user, the information collected from our websites is not anonymous and we may use this information along with other information we know or infer about you including your preferences to tailor content, services, advertising and offers for you.
Automatic Data Tools that are Strictly Necessary or used for Performance & Analytics or Personalization are set to expire after 364 days. Automatic Data Collection Tools used for targeting are set to expire after 90 days since your last visit.
When you share information using a social media sharing button on HP websites, the social network will record that you have done this. This information may be linked to targeting/advertising activities. The types of tools used by these third parties and how they use the information generated by them will be governed by those companies’ privacy policies.
We may use Automatic Data Collection Tools such as web beacons, which are typically a transparent graphic image (usually 1 pixel x 1 pixel), to compile information about your interaction with email or other communications. A web beacon can be embedded in HP subscription or marketing communications to determine whether our messages have been opened or acted upon and whether our mailing tools are working correctly.
You can make or change your choices regarding Automatic Data Collection Tools, as well as receiving either subscription or general communications at the data collection point or by using other methods, which are described in the following sections. These options do not apply to communications primarily for the purpose of administering order completion, contracts, support, product safety warnings, driver updates, or other administrative and transactional notices where the primary purpose of these communications is not promotional in nature.
HP marketing communications provide information about products, services, and/or support and you can select how these communications are delivered – e.g., via postal mail, email, telephone, fax or mobile device. Marketing communications may include new product or services information, special offers, personalized content, targeted advertising or invitations to participate in market research or compliance reviews. Subscription communications include email newsletters, software updates, etc. that may be expressly requested by you or which you consented to receive.
You may opt out of receiving these general communications by using one of the following methods:
HP contracts with service providers to place ads on websites owned by third parties. Sometimes this will be achieved by sharing some personal data as described in the section on Third-Party Advertising Cookies and Social Media Cookies.
When you visit HP sites, you have the option to accept or adjust what cookies you allow us to place on your browser through our Privacy Preference Center. You can modify these settings at any time by visiting Cookie Settings.
If you don’t want to allow cookies at all, please refer to your browser settings. Note that by disabling certain categories of cookies, you may be prevented from accessing some features of our sites or certain content or functionality may not be available. Certain browsers allow you to navigate websites in an incognito or private mode. Once the browser session is closed, typically all cookies collected during the session are automatically destroyed.
Even if you opt-out of Performance & Analytics tracking and Targeting, you might continue to see non-personalized advertisements from HP via our partners. As an example, you might visit a website containing Personal Computer feature comparisons. Based on your interest, our partners might serve you with HP product advertisements.
If you are in the EU and would like to opt out of third party cookies relating to interest based advertising, please go to www.youronlinechoices.eu.
In the US and Canada, we comply with the Digital Advertising Alliance industry standards with respect to interest based advertising. To learn more about your advertising choices if you are in the US, please click here or in Canada please click here. In the US, the Network Advertising Initiative also offers a means to opt out of a number of advertising cookies. Please visit www.networkadvertising.org to learn more. Note that opting out does not mean you will no longer receive online advertising. It does mean that the company or companies from which you opted out will no longer deliver ads tailored to your web preferences and usage patterns.
Some newer web browsers incorporate “Do Not Track” features. Currently, no industry standard exists for handling “Do Not Track” requests, therefore at this time, our websites may not respond to “Do Not Track” requests or headers from these browsers.
You can disable automatic data collection tools, such as web beacons, in email messages by not downloading images contained in messages you receive (this feature varies depending on the email software used on your personal computer). However, doing this may not always disable Automatic Data Collection Tools in the email message due to specific email software capabilities. For more information about this, please refer to the information provided by your email software or service provider.
You have the right to ask us for a copy of any personal data that you have provided to us or that we maintain about you and to request an explanation about the processing. In addition, you have the right to withdraw any consent previously granted or to request correction, amendment, restriction, anonymization or deletion of your personal data; and to obtain the personal data you provide with your consent or in connection with a contract in a structured, machine readable format and to ask us to transfer this data to another data controller.
You also have the right to object to the processing of your personal data in some circumstances, in particular when we are using your data for direct marketing or to create a marketing profile. Please see Choosing Your Privacy Preferences for guidance on how to exercise your rights with regard to marketing.
In certain cases, these rights may be limited, for example if fulfilling your request would reveal personal data about another person or if you ask us to delete information which we are required by law to keep or have compelling legitimate interests to keep.
To exercise your rights, or if you have any questions or concerns about our Privacy Statement, our collection and use of your data or a possible breach of local privacy laws, you can contact HP’s Chief Privacy and Data Protection Officer or write to us at the appropriate address below:
HP France SAS
Global Legal Affairs
14 rue de la Verrerie
CS 40012 – 92197
Global Legal Affairs
ATTN: Privacy Office
Av. Vasco de Quiroga #2999
Col. Santa Fe Peña Blanca
Del. Alvaro Obregon
C.P. 01210 México D.F.
REST OF WORLD
Global Legal Affairs
ATTN: Privacy Office
1501 Page Mill Road
Palo Alto, California 94304
All communications will be treated confidentially. Upon receipt of your communication, our representative will contact you within a reasonable time to respond to your questions or concerns. We aim to ensure that your concerns are resolved in a timely and appropriate manner.