Old version
July 8, 2026 00:46 UTC
5104160a107b437c0db347584f6e8f7f5ef9a06b435be31b4951bfaaba305331
CA-V-004608
New version
July 17, 2026 00:53 UTC
7d459a6ef42be3985b353cf82297ecca2f5c80d6bc2a6ef93692553db8d7b997
CA-V-004992
Share 𝕏 Share in Share
Change Summary
Intuit's privacy policy was updated on July 17, 2026 to substantially expand its Data Privacy Framework (DPF) compliance disclosures and procedures. The updated language provides detailed operational procedures for DPF Principles-related complaints, dispute resolution mechanisms, and onward transfer liability. Notably, the policy adds explicit language requiring opt-out or opt-in consent before using personal data for materially new purposes or sharing with external parties not covered as processors.
medium severity
12 Sentences added
0 Sentences removed
6 Sentences modified
480 Sentences before
492 Sentences after
Added
Removed
Modified
BeforeAfter
170When you participate in the text messaging program.170When you participate in the short code program .
171Personal information collected through the text messaging program will not be shared, sold, or rented to affiliated or unaffiliated third parties for their own marketing purposes.171Personal information collected through the short code program (i.e., when you sign up for SMS texts), will not be shared, sold, or rented to affiliated or unaffiliated third parties for their own marketing purposes.
239Intuit Inc. and The Rocket Science Group LLC d/b/a Mailchimp comply with and rely on the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) regarding the collection, use, and retention of personal information transferred from the European Union (EU), the United Kingdom (and Gibraltar), and Switzerland to the United States.239Intuit Inc. and The Rocket Science Group LLC d/b/a Mailchimp complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce.
240With respect to the EU, UK, and Swiss personal information received or transferred pursuant to the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF, Intuit and Mailchimp are subject to the regulatory enforcement powers of the U.S. Federal Trade Commission.240Intuit Inc. and The Rocket Science Group LLC d/b/a Mailchimp has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF.
241You can find more information about Intuit’s and Mailchimp’s Data Privacy Framework certification here .241The Rocket Science Group LLC d/b/a Mailchimp has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF.
242For more information on the transfer safeguards we rely on, please contact us by using the details in the “How to contact us” section below.242If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern.
243To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit here .
244In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, The Rocket Science Group LLC d/b/a Mailchimp commits to resolve DPF Principles-related complaints about our collection and use of your personal information.
245EU and UK and Swiss individuals with inquiries or complaints regarding our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF should first contact The Rocket Science Group LLC d/b/a Mailchimp by using the details in the “How to contact us” section below.
246Should we need to use your personal data for a new purpose that is materially different from the purpose for which the personal data was originally collected, or share it with an external party not covered by this Privacy Policy (i.e., not our processor), The Rocket Science Group LLC d/b/a Mailchimp will offer you the opportunity to opt out through whatever means is most appropriate or collect your opt in consent before engaging in the new use or sharing.
247In compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF, The Rocket Science Group LLC d/b/a Mailchimp commits to refer unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF to TRUSTe, an alternative dispute resolution provider based in the United States.
248If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit https://feedback-form.trustarc.com/watchdog/request for more information or to file a complaint.
249These dispute resolution services are provided at no cost to you.
250For complaints regarding EU-U.S. DPF, the UK Extension to the EU-U.S DPF, and Swiss-U.S. DPF compliance not resolved by any of the other DPF mechanisms, you have the possibility, under certain conditions, to invoke binding arbitration.
251Further information can be found on the official DPF website: https://www.dataprivacyframework.gov/framework-article/ANNEX-I-introduction .
252In certain situations, The Rocket Science Group LLC d/b/a Mailchimp may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
253In the context of onward transfers, The Rocket Science Group LLC d/b/a Mailchimp is accountable for the processing of personal data it receives, under the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and Swiss-U.S. DPF and subsequently transfers to a third party acting as an agent on its behalf.
254The Rocket Science Group LLC d/b/a Mailchimp remains liable under the EU-U.S. DPF Principles, and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF Principles if the The Rocket Science Group LLC d/b/a Mailchimp’s agent processes personal information in a manner inconsistent with the EU-U.S. DPF Principles, and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF Principles, unless the The Rocket Science Group LLC d/b/a Mailchimp proves that it is not responsible for the event giving rise to damage.

Get alerted when Intuit updates their policies

Monitor sends same-day email alerts when Intuit changes any tracked document. $19/month. Or try Compliance free.

Get alerts — $19/mo Try Compliance