SNAPFISH PRIVACY NOTICE

Snapfish Cookie Notice Overlay

Effective Date:  October 1, 2020

At Snapfish, our purpose is to help our customers capture, preserve, and share life’s important moments through professional and personal photography, and personalised products.  We are equally committed to respecting your privacy.

This Privacy Notice (“Notice”) explains how Snapfish (“Snapfish,” “we,” “our,” or “us”) collects and uses personal information and the choices you can make.  This Notice applies to your use of Snapfish.com and our other Snapfish websites, applications, and services that link to this Notice.  This Notice also addresses information we collect from you when you contact one of our customer service representatives, or when you respond to a survey or enter a contest or sweepstakes that we administer.

Our Sites and Apps may be linked on other websites or may contain links to other websites. Our Privacy Notice only applies to our Sites and Apps, and we are not responsible for the privacy practices, security standards, or content of other sites. You should check the privacy policies of those sites before providing your personal information to them.

We encourage you to read this Privacy Notice in its entirety before using our services. By creating an online account, using our services, or making a purchase with any of our brands, you acknowledge that you have read and agree to this Privacy Notice. Your use of our Sites and Apps is also subject to our Terms and Conditions.

What personal information do we collect? How do we use that information?

How do we share your information with third parties?

Does our website collect information from children?

What options do you have to limit our collection and use of your personal information?

How do we keep your information secure?

How do we make updates to this Notice?

How can you contact us with questions about your privacy or this Notice?

Supplemental (CCPA) Notice to Residents of California

Supplemental (GDPR) Notice to Residents of the EEA, Switzerland, and United Kingdom

Supplemental Notice to Residents of Nevada

 

What personal information do we collect? How do we use that information?

We collect various types of personal information when you register with us via our websites, mobile sites or mobile applications (our “Sites and Apps”); purchase any products or services from us; visit or are photographed at one of our offices, studios, or on-site photography locations; contact one of our customer service representatives; register for customer rewards programs; or complete a survey or enter a contest or sweepstakes that we sponsor. This information may be collected directly from you (for example, when you complete our forms or enter your information on our websites to make a purchase) or indirectly through your device or browser when you visit our Sites and Apps.

We use your information to fulfil product orders, to customise and improve the advertising and content you see, to offer suggestions for personalised products based on your content, to deliver marketing communications and promotional materials that you may be interested in, to contact you and provide customer service, to protect the security or integrity of our databases or websites, to detect and prevent fraud or illegal activity, to take precautions against liability, to detect and remediate misuse of our Sites and Apps, to develop and improve our products and services, and for internal operational purposes.

The following chart describes what categories of personal information we may collect, how we collect that information from you, the business purposes for which we generally use such information, and which types of trusted third-party service providers we may share that information with:

Information Type Source Purpose Service Providers
Personal Identifiers (Customer Name, Postal Address, Phone Number, Email Address, Social Media Handle, Age, Gender) Provided directly by customer
  • Maintaining and servicing your account
  • Providing customer service
  • Processing and fulfilling your orders
  • Processing payments on your orders
  • Fulfilling customer rewards
  • Advertising and marketing our products to you
  • Detecting security incidents and protecting against malicious, deceptive, fraudulent, or illegal activity
  • Product creation and order fulfilment vendors
  • Customer service providers
  • Marketing and advertising services
  • Appointment scheduling services
  • Surveys, sweepstakes, and contests
  • Payment and chargeback processors
  • Mailing and shipping services
Identity Verification Information (Government-issued ID, Driver License) Provided directly by customer
  • Identify verification as needed to protect against deceptive, fraudulent or illegal activity
  • None
Household Information (Family Member names, date of birth and/or age) Provided directly by customer
  • Maintaining and servicing your account
  • Processing and fulfilling your orders
  • Fulfilling customer rewards
  • Product creation and order fulfilment vendors
  • Appointment scheduling services
User-Generated Content (including photos) Provided directly by customer
  • Processing and fulfilling your orders
  • Providing customer service
  • Providing you customised product recommendations
  • Helping you tag and organise your photos
  • Analytics to improve our products and services
  • Product creation and order fulfilment vendors
  • Marketing and advertising service providers
Payment Information (credit card information, only last four digits are stored, billing and shipping addresses, checks) Provided directly by customer
  • Processing payments on your orders
  • Detecting security incidents and protecting against malicious, deceptive, fraudulent, or illegal activity
  • Customer service providers
  • Payment and chargeback processors
  • Fraud prevention and site security
Commercial Information (purchase date, purchase totals, product types) Provided directly by customer
  • Providing customer service
  • Processing and fulfilling your orders
  • Processing payments on your orders
  • Analytics to improve our products and services
  • Advertising and marketing our products to you
  • Product creation and order fulfilment vendors
  • Customer service providers
  • Payment and chargeback processors
Internet or Electronic Network Activity Information and Geolocation Information (IP Address, Location, Cookies, Website Browsing and Interaction Activity, Other Device or Browser Identifiers) Collected indirectly from customer’s browser or device
  • Enhancing your user experience
  • Analytics to improve our products and services
  • Advertising and marketing our products to you
  • Detecting security incidents and protecting against malicious, deceptive, fraudulent, or illegal activity
  • Marketing and advertising service providers
  • Website performance and analytics vendors
  • Fraud prevention and site security
Website Login Credentials Provided directly by customer
  • Maintaining and servicing your account
  • Providing customer service
  • Processing and fulfilling your orders
  • Detecting security incidents and protecting against malicious, deceptive, fraudulent, or illegal activity
  • None
Inferences About Customer Preferences and Characteristics Inferred from information provided by customer, information collected indirectly from customer’s browser or device, and information obtained from third-party marketing database partners
  • Enhancing your user experience
  • Analytics to improve our products and services
  • Advertising and marketing our products to you
  • Marketing and advertising service providers
  • Website performance and analytics vendors

In addition to any personal information that you might provide when you do things like buy our products and services or create an account with our brands, we may also have access to other information about you if you interact with our brands via social media, or in certain other situations.

Social Media

If you log into your account with any of our brands through a social media site, we will also have access to certain information from that site, such as your name, account information and profile photo, in accordance with the site’s account verification procedures. Also, if you interact with content on our social media profiles (for example, if you “like” or share a post from one of our brand’s Facebook, Twitter, or Instagram accounts), those social media sites may share information about you with us, including your public profile, e-mail address and friend list. If you choose to “like” or share content, information about you may be publicly displayed on the social network, depending on your privacy settings. You should review the Privacy Notice of that social media site and check your privacy settings through that site. If you post information on a social media or another third-party service that references our brands or our products and services (e.g., via a Twitter hashtag), we may publish your post on our social media accounts or websites.

Information You Provide About Others

The content you choose to upload to our service, including your photos and the information you store in your address book, may include personal information of others.  If you choose to share your photographs or other information with someone else through a feature we offer, we will use the personal information you provide (for example, the e-mail address of the recipient) to fulfil your request and for other purposes described in this Privacy Notice. Before you upload and/or share personal information of others through our service, please ensure that you have the consent of such persons to do so.

Other Information Contained in Your Photos

When you upload your photos to our platforms or give us permission to access the photos stored on your device, your photo content may also include related image information such as the time and the place your photo was taken, tags and similar information stored by your image capture device. If you wish to restrict the transfer of image metadata in your individual photos, please adjust the settings on your image capture device.

Cookies

We use cookies and other tracking technologies to collect your information when you are using our Services. We use such information to analyse trends, remember user settings, administer our Services, track user movements, and market our products and services. We may obtain reports based on the use of these technologies on an individual and/or aggregated basis. You can control cookies through your browser setting and through tools we make available through our Services. For more information about cookies and other tracking technologies we use, including how to disable them, please refer to our Cookie Notice.

Other Sources

We may also obtain data that is publicly available or from third party sources, such as address verification services or third-party marketing database partners, to improve the accuracy of and add to what we know about our customers and prospective customers. We may combine this information with your personal information for the purposes described in this Notice.

 

Employment

In addition to information collected from our customers, we and our service providers also collect certain information from candidates who apply for a job with Snapfish to contact you about your application and evaluate your qualifications for the position, including your name, phone number, e-mail address, postal address, education information, and employment information.

 

How do we share your information with third parties?

We do not sell, license or share the personal information we collect with unaffiliated third parties for their marketing purposes.

We may share personal information in the following situations.

Service Providers

We sometimes use third-party service providers to act on our behalf, for example to help us fulfil your product orders, process payments, enhance and personalise your shopping experience with us, or to deliver our advertisements. Our service providers may receive your name and contact information, payment information, photos and other content you upload to our Sites and Apps, information about purchases you’ve made, cookies and other device identifiers, IP address, and website browsing and interaction activity. These service providers are only allowed to use your information in connection with the specific service they provide on our behalf.

Partners and Affiliates

Snapfish is part of the Shutterfly family of companies and brands. We may share your information among our corporate affiliates and subsidiaries for purposes described in this Notice. This allows us to offer features such as the ability to use your Snapfish account credentials across all of our Web properties and applications where available. We also work with third parties who act as our partners to offer you joint products and services – for example, we work with prominent retailers to offer ship-to-store options to customers in many locations. If you decide to use such products or services, we will share certain information about you with our partners for use as needed to enable us to provide the service.

Law Enforcement, Mergers, and Other Situations

We may be required to share your personal information in other, limited circumstances. For example, we may be required to share certain information to respond to a subpoena or similar judicial process, to comply with state, federal or local laws, to protect the security or integrity of our databases or website, to take precautions against liability, in the event of a corporate reorganisation or, to the extent required by law, to provide information to law enforcement agencies. Additionally, your information may be transferred to another organisation if, for example, we transfer the ownership or operation of the Sites and Apps because we have merged with or have been acquired by another organisation, or if we liquidate our assets. In those cases, the new company’s use of your information will still be subject to this Notice and the privacy preferences you have expressed to us.

 

Does our website collect information from children?

Our Sites and Apps are intended for use by general audiences and are not targeted directly at children. We will not knowingly collect personally identifiable information from children. If we become aware that a child under the age of 13 has provided personal information through our websites or apps, we will remove their personally identifiable information from our files. If a parent or guardian becomes aware that their child has provided such information through our websites or apps, the parent or guardian should contact us in writing at [email protected] so that we may respond appropriately.

 

What options do you have to limit our collection and use of your personal information?

You have choices about how your information is collected and used.  You can notify us of your preferences when you create an account with us, and if you would like to review, correct or delete your account information on our Sites and Apps, you can do so by logging in to your account or by contacting us directly. There may be times when we are unable to fulfil your request – for example, if providing access to your personal information would reveal confidential commercial or proprietary information or personal information about someone else (and we cannot separate your data), if we are prohibited by law from disclosing the information, or if we have a legal obligation to retain certain data. We may require additional personal information from you for the purposes of verifying your identity and rights. If you are a resident of California, please click here to learn more about your rights.

Opting out of Marketing Communications

If you no longer want to receive marketing communications from us, you can unsubscribe by following instructions contained in the messages you receive, by changing your marketing preferences through your Account Settings, or by contacting us through Customer Service. We reserve the right to send you certain communications relating to the services we provide, such as service announcements and administrative messages (for example, communications related to a pending order, an unresolved customer service issue, or a Notice update). We do not offer you the ability to opt-out of receiving those communications.

Cookie Options

You may manage the cookies that Snapfish uses through the settings in our Privacy Preference Centre You may also change your web browser settings to reject Cookies from the site or to alert you before a cookie is placed on your computer. Each browser is different, so you should check your browser’s “Help” menu to learn how to change your cookie preferences. Please note that cookie-based opt-outs only apply to the specific computer and browser on which the opt-out cookie is applied. If you accept a cookie, you can delete it at any time through your web browser. If you choose not to accept Cookies, though, you will not be able to enjoy all the features available to our registered users.

 

How do we keep your information secure?

Although no website, application, database or system is completely secure or “hacker proof,” we have safeguards in place to protect against unauthorised access and disclosures of the personal information we control, including technical, physical and administrative safeguards and security measures. Despite these measures, however, we cannot guarantee that our information security safeguards will never be compromised.

 

How do we make updates to this Notice?

As we implement new technology and introduce new services or otherwise change our privacy practices, or in response to changes in applicable laws or regulations, we may modify this Notice and provide notice to you by posting updates on this page. Please check back periodically to view any updates. Changes to our Notice will become effective when posted.  If we change this Privacy Notice in a material way, we will endeavour to promptly notify our customers through a prominent notice on the applicable Sites and Apps.

 

How can you contact us with questions about your privacy or this Notice?

For further information regarding this website privacy statement or related Snapfish policies and procedures, please contact: [email protected]

 

Supplemental (CCPA) Notice to Residents of California

Effective Date: October 1, 2020

If you are a California resident, California law may apply to how we collect and use your personal information, and what rights you have in some circumstances. The following terms supplement our Privacy Notice and explain the rights of California residents.

For information about what categories of personal information we may collect from our customers, the sources of that information, the purposes for collecting and using that information, and what types of service providers we may share that information with, please see above our section titled What personal information do we collect? How do we use that information?

California residents have the following rights:

  • The right to request information about personal information that we have collected about that customer in the 12 months preceding the customer’s request – including the categories of information collected, the source of that information, the business purpose of that collection, the categories of third parties with whom that information is shared, and the specific personal information collected about that particular customer;
  • The right to receive requested information in a readily-usable format if provided electronically;
  • The right to request that we delete any personal information about the consumer that we have collected (although we may be entitled to retain some information for certain purposes); to exercise this right, please visit us at Customer Service; and
  • You have the right to be free from discrimination based on your exercise of your CCPA rights.

To exercise your rights under California law, please contact us at [email protected]

We do not sell personal information.

We cannot respond to your request to access or delete information unless we are able to both verify your identity or authority to make the request and confirm the personal information relates to you and/or your household. If you have an account on any of our Sites and Apps, we will verify your identity by having you log in to your account. If you do not have an account on our Sites and Apps, we will attempt to verify your request by asking you to provide identifying information that we will match to information in our files. We will only use information you provide in your request for the purpose of verifying your identity or authority to make the request.

You can also designate an authorised agent to make a request on your behalf. Your agent will need to provide a Power of Attorney authorising the agent to act on your behalf, or will need to complete the same verification procedures that would be required for a request submitted by you directly, and provide information that allows us to verify your authorisation.

We may deny deletion requests in whole or in part as permitted or required by applicable law.   We do not charge a different price or rate or provide a different level or quality of goods or services based on your exercising your CCPA rights.

If you are a California resident under the age of 18, and a registered user of any site where this Notice is posted, you may request and obtain removal of content or information you have publicly posted on such site. To make such a request, please send an email with the subject line “California Minor Content Removal Request” to [email protected] Please specify in your request which website or application your request relates to and the specific information or content that you would like removed. Please note that your request does not ensure complete or comprehensive removal of the content or information, because, for example, some of your content may have been reposted by another visitor to our websites.

We may run promotions from time to time whereby we incentivise a customer to provide certain pieces of information with us or allow us to retain or share their information; for example, we may offer a one-time discount if an individual signs up for our email marketing list. We will provide you with more information about these incentives when you sign up, and participation is voluntary. If you change your mind, you may opt out at any time.

 

Supplemental (GDPR) Notice to Residents of the EEA, Switzerland, and United Kingdom

Effective Date: October 1, 2020

Controller of Personal Information

The data controller for your personal information is Snapfish, LLC, located at 2800 Bridge Parkway, Redwood City, California 94065, United States of America.

Legal Bases for How We Process Your Information

The legal bases for processing your information as set out in this Privacy Notice are as follows:

  • Where use of your information is necessary to perform our obligations under a contract with you (for example, to comply with the terms of service of our websites which you accept by browsing the websites/registering, and/or our contract to provide our Services to you);
  • Where use of your information is necessary for our legitimate interests or the legitimate interests of others (for example, to provide security for our websites, products, software, or applications; operate our business and our Services; for direct marketing purposes, as appropriate; to make and receive payments; to engage in employment relationships; to comply with legal requirements and defend our legal rights; and to prevent fraud);
  • Where we have your consent, in accordance with applicable legal requirements, to use your information for a particular purpose; which consent you may withdraw at any time by contacting us; or
  • Where we use your information to comply with applicable legal obligations (for example, keeping track of purchases for tax and auditing purposes).

Integrity and Retention of Personal Information

Snapfish makes it easy for you to keep your personal information accurate, complete, and up to date. We will retain your personal information for the period necessary to fulfil the purposes outlined in this Privacy Notice and our Sites and Apps specific privacy summaries. When assessing these periods, we carefully examine our need to collect personal information at all and if we establish a relevant need, we only retain it for the shortest possible period to realise the purpose of collection unless a longer retention period is required by law.

International Data Transfers

Snapfish servers are in the United States. If you choose to provide us with your information as described in this Privacy Notice, Snapfish may transfer your personal information cross-border. For example, Snapfish may transfer your information to affiliates, partners, or other third parties located outside of your home country, for the purposes described in this Privacy Notice. The laws governing data collection and use in the United States may differ and not provide the same level of protection as the jurisdiction in which you reside.

Where we transfer data from the EEA, Switzerland, or the United Kingdom, Snapfish will implement appropriate safeguards to comply with applicable law in relation to the transfer including the EU Standard Contractual Clauses or other measures that comply with applicable law, for personal data that is being transferred to places where the EEA, Switzerland, and/or the United Kingdom have determined that an adequate level of protection is not guaranteed.

By providing us with your information, you acknowledge such transfers. If applicable, you may make a complaint to the data protection supervisory authority in the country where you are based. If you would like further information about these transfer mechanisms, please feel free to contact us at [email protected]

Your Legal Rights

Your local laws may permit you to request that we:

  • Provide access to and/or a copy of certain information we hold about you;
  • Update or rectify information which is out of date or incorrect;
  • Delete certain information that we are holding about you;
  • Transfer your information to a third-party provider of services; and/or
  • Revoke your consent for the processing of your information, to the extent we rely on consent as the legal basis to process your information; and
  • For French residents only, you have the right to give directives relating to the disposal of your information after your death.

You may edit, cancel, or delete your Snapfish account information at any time by using the self-service tools available under Manage Account in Account Settings (you will be required to log in), or by emailing us at [email protected]. These tools are the most efficient way to take these actions.

You can make your request to edit, cancel or delete through our local Data Protection Representative as well, but please be advised that a request through the Data Protection Representative will take longer to process. Contact information for the Data Protection Representative is listed below.

For any other request please contact our Customer Support. If you request your account to be cancelled or deleted, we will satisfy your request within 30 days. If we require more time to process your request, we will notify you about the delay.

Information necessary for the purposes of maintaining business records regarding a deleted or cancelled account, including records of credit transactions and account ownership, will be retained in accordance with applicable law. We may decline to process requests that are frivolous/vexatious, would jeopardise the privacy of others, are extremely impractical, or for which access is not otherwise required by local law. We may also decline aspects of deletion or access requests if we believe doing so would undermine our legitimate use of data for anti-fraud and security purposes.

Supervisory Authority

Supervisory authorities can 1) email Snapfish directly at pri[email protected], or 2) send regular mail to the local address of our Data Representative (appointed under Art. 27 GDPR) at one of the addresses listed here.

 

Supplemental Notice to Residents of Nevada

Effective Date: October 1, 2020

Nevada law gives Nevada consumers the right to request that a company not sell their personal information for monetary consideration to certain other parties.  This right applies even if their personal information is not currently being sold.  If you are a Nevada consumer and wish to exercise this right, please send an email with the subject line “Nevada Resident Do Not Sell Request” to [email protected].