Lime · Lime Privacy Policy · View original document ↗

Business Transfer and Merger

Low severity High confidence Explicitdocumentlanguage Unique · 0 of 325 platforms
Share 𝕏 Share in Share 🔒 PDF
Monitor governance changes for Lime Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.
Document Record

What it is

If Lime is acquired, merged, or sold, your personal data including location history and account information may be transferred to the new owner as part of the deal.

This analysis describes what Lime's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

A change of corporate ownership could result in your personal data being held and used by a different company with different privacy practices, without any specific notice or consent requirement stated in the policy.

Consumer impact (what this means for users)

In a merger or acquisition, your Lime account data including trip history, location records, and payment information may be transferred to a new corporate owner whose privacy practices and data governance standards may differ from Lime's.

How other platforms handle this

Skillshare Medium

In connection with any reorganization, restructuring, merger or sale, or other transfer of assets, we will transfer information, including personal information, provided that the receiving party agrees to respect your personal information in a manner that is consistent with our Privacy Policy.

Canva Medium

If Canva is involved in a merger, acquisition, or sale of all or a portion of its assets, your information may be transferred as part of that transaction. We will notify you via email or a prominent notice on our website prior to your information becoming subject to a different privacy policy.

Calm Medium

Where required by law, we provide adequate protection for the transfer of personal data in accordance with applicable law, such as by obtaining your consent, relying on the European Commission's adequacy decisions, or executing Standard Contractual Clauses. Where relevant, you may request a copy of ...

See all platforms with this clause type →

Monitoring

Lime has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.

Start Watcher free trial Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

— Excerpt from Lime's Lime Privacy Policy

ConductAtlas Analysis

Institutional analysis (Compliance & governance intelligence)

REGULATORY LANDSCAPE: Business transfer provisions engage GDPR Article 6(1)(f) (legitimate interests as a basis for transfer), and the requirement under GDPR Articles 13/14 that data subjects be notified of material changes to processing purposes or controller identity. In the US, the FTC has previously challenged acquisitions where privacy policy terms changed materially post-merger. CCPA/CPRA does not prohibit such transfers but requires the acquiring entity to honor existing consumer rights requests. GOVERNANCE EXPOSURE: Low-Medium. This is a standard provision common across the industry. However, for a company that processes sensitive location data at scale, the data asset being transferred in a corporate transaction has significant value and sensitivity. The policy does not commit to notifying users prior to a completed transfer or providing opt-out rights in connection with such a transfer. JURISDICTION FLAGS: EU/EEA (GDPR notification obligations for change of controller), California (CPRA rights survive transfer), UK (UK GDPR equivalents). Jurisdictions with data residency requirements may be implicated if a corporate transaction results in a change of processing location. CONTRACT AND VENDOR IMPLICATIONS: M&A due diligence for Lime as a target should include a full data asset inventory, review of consent mechanisms, assessment of regulatory obligations in all operating jurisdictions, and evaluation of data sharing agreements that may require consent to assignment. COMPLIANCE CONSIDERATIONS: Ensure that privacy notice update procedures are in place to notify users of changes in data controller identity following a transaction, confirm that acquiring entity due diligence includes full privacy compliance review, and assess GDPR Article 14 notification obligations where a new controller is processing data originally collected by Lime.

Full compliance analysis

Regulatory citations, enforcement risk, and due diligence action items.

Track 1 platform — free Try Watcher free for 14 days

Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.

Applicable agencies

  • FTC
    The FTC reviews privacy representations in corporate transactions and has challenged post-merger privacy policy changes that materially differ from original user expectations
    File a complaint →

Applicable regulations

CCPA/CPRA
California, USA
Connecticut Data Privacy Act Amendments
US-CT
CAN-SPAM
United States Federal
DMA
European Union
FTC Act Section 5
United States Federal
GDPR
European Union
Indiana Consumer Data Protection Act
US-IN
Kentucky Consumer Data Protection Act
US-KY
Universal Opt-Out Mechanism Expansion 2026
US
VPPA
United States Federal

Provision details

Document information
Document
Lime Privacy Policy
Entity
Lime
Document last updated
May 5, 2026
Tracking information
First tracked
May 7, 2026
Last verified
May 10, 2026
Record ID
CA-P-008702
Document ID
CA-D-00742
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
cd7d89df3ddef8ec8a1c45f442c0230938afa4acde458e82818127bc8dd8f8e6
Analysis generated
May 7, 2026 22:37 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Lime
Document: Lime Privacy Policy
Record ID: CA-P-008702
Captured: 2026-05-07 22:37:24 UTC
SHA-256: cd7d89df3ddef8ec…
URL: https://conductatlas.com/platform/lime/lime-privacy-policy/business-transfer-and-merger/
Accessed: May 13, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Low
Categories

Other risks in this policy

Related Analysis

Professional Governance Intelligence

Need to monitor specific governance provisions?

Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Professional free trial

Or start with Watcher →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does Lime's Business Transfer and Merger clause do?

A change of corporate ownership could result in your personal data being held and used by a different company with different privacy practices, without any specific notice or consent requirement stated in the policy.

How does this clause affect you?

In a merger or acquisition, your Lime account data including trip history, location records, and payment information may be transferred to a new corporate owner whose privacy practices and data governance standards may differ from Lime's.

Is ConductAtlas affiliated with Lime?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Lime.