PayPal
· PayPal User Agreement
You may not disclose or distribute any customer personal data provided to you by PayPal to a third party, unless such third party is your service provider and acting on your behalf...
StockX
· StockX Privacy Policy
The explicit inclusion of data brokers and social media platforms as potential recipients of sold personal information significantly broadens the potential reach and use of user data.
StockX
· StockX Privacy Policy
Explicitly naming name, address, and email as data that may be sold to advertising partners and social media platforms makes the commercial use of personal data concrete and direct.
This prohibition applies specifically to cross-context behavioral advertising, a defined category under certain U.S. privacy laws, and is limited to sensitive personal data rather than all personal data.
Sensitive personal data is withheld from cross-context behavioral advertising pipelines unless the user affirmatively consents, giving users control over this specific use.
We do not "sell" or "share" sensitive personal data for cross-context behavioral advertising, although we may transfer it to third parties when you instruct us to do so.
Zillow
· Zillow Privacy Notice
This establishes an explicit carve-out for sensitive information from Zillow's data monetization and advertising practices, providing a stronger protection than applies to non-sensitive personal data.
ADP
· ADP Privacy Statement
ADP will only disclose sensitive personal data to those service providers, auditors, and/or advisors who are legally or contractually obligated to protect them or as required or permitted by law.
Okta
· Okta Privacy Policy
In the preceding 12 months Okta has not sold or shared any Sensitive Personal Data; however, we may have disclosed your Sensitive Personal Data to service providers for business purposes
GOAT
· GOAT Privacy Policy
We will not disclose your sensitive personal data to any third party without first obtaining your opt-in consent.
Adyen
· Adyen Privacy Policy
The absolute restriction on other uses or disclosures of sensitive personal information means Adyen has limited its own discretion and cannot rely on other bases to process this category of data.
We may disclose Sensitive Personal Information between the Ancestry Companies (e.g. between Ancestry and AncestryDNA) or if you have agreed to our Informed Consent to Research.
Service Data may flow to third parties outside Google's control whenever a third-party service or application is procured or used through the specified Google platforms.
By using Third-Party Products, Customer permits Zendesk to share Customer's Account information and Service Data with applicable Third-Party Product providers.
Brex
· Brex Privacy Policy
The prohibition is contractual, meaning enforcement depends on Brex's oversight of its service providers rather than a direct legal relationship with the user.
Meta
· Meta Platform Policy
The requirement that the Service Provider agree in writing before use means developers bear responsibility for obtaining written commitments from third parties before engaging them, and failure to do so would itself be a breach.
Rumble
· Rumble Privacy Policy
These third parties have access to your Personal Information only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.
Personal information is shared with third-party service providers across a range of core operational functions, meaning multiple external parties may access user data.
These service providers and data processors are contractually obligated to use personal information only to provide their service to us, and are contractually prohibited from using it for their own purposes.
Personal information may be processed in jurisdictions beyond those specifically named, as the list is non-exhaustive, potentially placing data in countries with fewer privacy protections than the user's home jurisdiction.
Roblox
· Roblox Privacy and Cookie Policy
In some cases, these entities may process persistent identifiers from users under the age of 13. Service providers' processing of persistent identifiers to support these internal operations is subject to contractual requirements...
Workday
· Workday Privacy Statement
This restriction limits service providers from independently exploiting personal information they receive, confining their use strictly to Workday's directions.
must delete or return the personal data once they've fulfilled our request.
Apple service providers are obligated to handle personal data consistent with this Privacy Policy and according to our instructions. They cannot use the personal data we share for their own purposes...
Roblox
· Roblox Privacy Policy
In some cases, these entities may process persistent identifiers from users under the age of 13. Service providers' processing of persistent identifiers to support these internal operations is subject to...
Personal information shared with Cloudflare's Service Providers is contractually ring-fenced to Cloudflare-directed service purposes, preventing secondary commercial use by those providers.
Gemini
· Gemini Privacy Policy
The prohibition limits secondary use of users' Personal Information by third-party service providers, confining it to the scope of their engagement with Gemini.
These service providers are prohibited from using your Personal Data except for these purposes, and they are required to maintain the confidentiality of your information.
The protection offered to users' personal information when shared with third parties is limited to 'reasonable' confidentiality terms, not an absolute prohibition on use.
These Service Providers may only process personal information pursuant to our instructions and in compliance both with this Privacy Policy, the contracts we have in place with such Service Providers, and other applicable confidentiality, data protection, and security measures...