Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The notice discloses that California residents may opt out of the sharing of personal information for cross-context behavioral advertising by submitting a request via a link in the California section of the notice or by emailing dpo@checkout.com, and states that Checkout does not sell personal information.
This analysis describes what Checkout.com's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes an operative opt-out right for California residents under CPRA for cross-context behavioral advertising, which is a distinct mechanism from a sale opt-out, and the notice separately asserts that no personal information is sold.
The updated policy establishes formal complaint procedures for UK and Australia users, requiring Checkout to acknowledge complaints within 30 days and respond without undue delay. For UK users specifically, the policy clarifies that complaints must first be raised with Checkout before escalating to the Information Commissioner's Office. The policy also discloses that transaction information collection now includes country data alongside currency and amount. For Australia users, the policy clarifies that identity verification is a legal requirement and cannot be provided anonymously or pseudonymously. Users in these jurisdictions can submit data protection complaints through Checkout's designated process and escalate to their respective regulatory authorities if dissatisfied with Checkout's response.
View change record →Under these terms, California residents may submit a request to opt out of personal information sharing for cross-context behavioral advertising by contacting dpo@checkout.com or using the designated opt-out link. The agreement states that personal information is not sold, but sharing for advertising purposes is disclosed as a separate and active practice subject to the opt-out mechanism.
Cross-platform context
See how other platforms handle California CCPA/CPRA Cross-Context Behavioral Advertising Opt-Out and similar clauses.
Compare across platforms →Monitoring
Checkout.com has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"Your right to opt-out of cross-context behavioral advertising. You may opt-out of the sharing of your personal information for cross-context behavioral advertising. Please click the link here or contact us at dpo@checkout.com to submit a request to opt-out of cross-context behavioral advertising Sale of personal information: Checkout does not sell personal information, as such we do not knowingly sell personal information relating to minorsExcerpt from Checkout.com's Privacy
1. REGULATORY LANDSCAPE: This provision directly engages the CCPA as amended by the CPRA, which distinguishes between the sale of personal information and sharing for cross-context behavioral advertising, with separate opt-out rights for each. The California Privacy Protection Agency and the California Attorney General have enforcement authority. The provision's statement that Checkout does not sell personal information but does share for cross-context behavioral advertising is consistent with the CPRA's definitional framework. 2. GOVERNANCE EXPOSURE: Medium. The notice provides the opt-out mechanism but does not describe the categories of personal information shared for cross-context behavioral advertising or the third parties with whom such sharing occurs, which may be required disclosures under CPRA regulations. 3. JURISDICTION FLAGS: This provision applies exclusively to California residents as defined under CCPA and CPRA. Colorado, Virginia, and other states with comprehensive privacy laws have analogous opt-out rights for targeted advertising that may also apply to Checkout's operations but are not addressed in this section. 4. CONTRACT AND VENDOR IMPLICATIONS: The existence of a cross-context behavioral advertising sharing practice implicates any advertising network or analytics partner listed among Checkout's third-party service providers. Organizations using Checkout should assess whether this sharing practice affects their own CPRA compliance obligations where Checkout processes data on their behalf. 5. COMPLIANCE CONSIDERATIONS: Compliance teams should verify that the opt-out link referenced in the California section is functional and leads to a compliant Global Privacy Control or equivalent mechanism, that opt-out requests submitted via email are processed within CPRA-specified timelines (15 business days), and that the categories of personal information shared for cross-context behavioral advertising are documented and disclosed in a CPRA-compliant format.
Full institutional analysis
Regulatory citations, enforcement risk, and due diligence action items.
Monitor: same-day alerts on the platforms you choose. Analyst: full institutional analysis.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This provision establishes an operative opt-out right for California residents under CPRA for cross-context behavioral advertising, which is a distinct mechanism from a sale opt-out, and the notice separately asserts that no personal information is sold.
Under these terms, California residents may submit a request to opt out of personal information sharing for cross-context behavioral advertising by contacting dpo@checkout.com or using the designated opt-out link. The agreement states that personal information is not sold, but sharing for advertising purposes is disclosed as a separate and active practice subject to the opt-out mechanism.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Checkout.com.