Privacy Policy and Cookies

PRIVACY POLICY AND COOKIES

Privacy Policy

• What Personal Information We Collect About You

• How We Use Your Personal Information

• With Whom We Share Your Information

• Cookies, Mobile IDS and Similar Technologies

• Third Party Advertising

• Choice and Control

• Sensitive Information

• Retention Period

• Security 

• Third Party Services

• Jurisdiction and Cross-Border Transfer

• Additional Information Regarding California

• Updates To This Privacy Policy

• Contacting Us
   

WHAT PERSONAL INFORMATION WE COLLECT ABOUT YOU

• Identifiers such as a real name, alias, postal address, unique personal identifier, online identifier Internet Protocol address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers;

• Content and files. We collect the photos, documents, or other files you upload to our Services; and if you send us email messages or other communications, we collect and retain those communications;

• Characteristics of protected classifications under California or federal law;

• Commercial information, including records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies;

• Internet or other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an Internet Web site, application, or advertisement;

• Geolocation data;

• Audio, electronic, visual, thermal, olfactory, or similar information;

• Professional or employment-related information;

• Education information, defined as information that is not publicly available personally identifiable information as defined in the Family Educational Rights and Privacy Act (20 U.S.C. section 1232g, 34 C.F.R. Part 99);

• Inferences drawn from any of the information identified in this subdivision to create a profile about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

• Account access information. Information such as account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account.

• Newsletter subscriptions: We collect your email address when you subscribe to our newsletters. For certain newsletters, we collect additional personal information that may be relevant including your name, job title, interests and similar information.

• Sweepstakes, contests and other promotions: We collect personal information such as your name, email address and mailing address when you participate in sweepstakes, contests or similar promotions.

• Registration for programs and events: When you register for our programs, events or conferences, we collect personal information such as your name and email address.

• Reading preferences and market research: We collect personal information from you including your reading preferences (e.g., author, genre) you provide through the Services and any information you provide through voluntary surveys or feedback conducted through the Services, through our service providers’ platforms, by phone or during in-person interviews or focus groups. 

• User-generated content: We collect personal information when you submit user-generated content through online communities and other publicly available sections of the Services, including comments, reviews, or any other material that you submit. Any personal information you submit through these public forums may be viewed by other users of these Services. We are not responsible for the personal information you choose to submit and we have no responsibility to publish, take down, remove or edit any of your submissions (except as required by applicable laws). For more information, please refer to the User Submissions section of our Terms of Use.

• Job applications: We collect personal information in connection with your application for a job at PRH.

• Contact with our Customer Service: We collect personal information for you in offline contexts, including, for example, when you place an order over the phone or contact customer service.

• Publicly available databases, including marketing and data analytics resources. For example, we may receive email addresses, mailing addresses and demographic information (e.g., age, sex, household income) from these sources.

• Authors and joint marketing third parties, when they share the information with us.

• Social media platforms and other third-party service platforms.

• Third party business customers, clients and partners, when they share the information with us (e.g., sales data).

HOW WE USE YOUR PERSONAL INFORMATION

TO WHOM WE DISCLOSE YOUR PERSONAL INFORMATION

We disclose Personal Information:
 

• With our parent company and among our affiliates for the purposes described in this Privacy Policy
  
  
  • You can learn more about our parent company and consult the list and location of our affiliates here.

• To our third party service providers, to facilitate services they provide to us
  
  
  • These can include providers of services such as website design and hosting, data analysis, payment processing, order fulfillment, information technology and related infrastructure provision, customer service, email delivery, ad serving, research survey/interview/focus group management and analysis, marketing, auditing, and other services.

• To our joint marketing partners
  
  
  • We may ask for your consent to provide your Personal Information to our joint marketing partners, for example, to provide you with special offers or promotions that may be of interest to you. Although our treatment of your Personal Information would be governed by this Privacy Policy in those cases, the third party’s treatment of your Personal Information would be governed by its privacy policy. You may withdraw your consent to our sharing of your Personal Information with such third parties at any time by sending us an email at data-privacy@dk.com.

• By using the Services, you may elect to disclose Personal Information.
  
  
  • On message boards, chat, profile pages, blogs, and other services to which you are able to post information and content. Please note that any information you post or disclose through these services will become public and may be available to other users and the general public.

• With other third parties
  
  
  • We may also disclose your Personal Information for the other uses described above (e.g., to comply with applicable laws, cooperate with law enforcement, and in connection with a sale or business transaction).

COOKIES, MOBILE IDS AND SIMILAR TECHNOLOGIES

“Other Information” is any information that does not reveal your specific identity or does not directly relate to an identifiable individual. The Services collect Other Information such as:
 

• Browser and device information
• Information collected through cookies, pixel tags and other technologies
• Demographic information and other information provided by you that does not reveal your specific identity
• Information that has been aggregated in a manner such that it no longer reveals your specific identity

Collection of Other Information

We and our service providers may collect Other Information in a variety of ways, including:

• Your browser or device
  
  
  • Certain information is collected by most browsers or automatically through your device, such as your Media Access Control (MAC) address, computer type (Windows or Mac), screen resolution, operating system name and version, device manufacturer and model, language, Internet browser type and version and the name and version of the Services you are using. We use this information to ensure that the Services function properly.


• Cookies
  
  
  • Cookies are pieces of information stored directly on the computer that you are using. Cookies allow us to collect information such as browser type, time spent on the Services, pages visited, language preferences, and other traffic data. We and our service providers use the information for security purposes, to facilitate navigation, to display information more effectively, and to personalize your experience. We also gather statistical information about use of the Services in order to continually improve their design and functionality, understand how they are used, and assist us with resolving questions regarding them. Cookies further allow us to select which of our advertisements or offers are most likely to appeal to you and display them while you are on the Services. We may also use cookies or other technologies in online advertising to track responses to our ads. We do not currently respond to browser do-not-track signals. If you do not want information collected through the use of cookies, most browsers allow you to automatically decline cookies or be given the choice of declining or accepting a particular cookie (or cookies) from a particular website. You may also wish to refer to http://www.allaboutcookies.org/manage-cookies/index.html. If, however, you do not accept cookies, you may experience some inconvenience in your use of the Services.


• Pixel tags and other similar technologies
  
  
  • Pixel tags. Pixel tags (also known as web beacons and clear GIFs) such as Amazon’s may be used to, among other things, track the actions of users of the Services (including email recipients), measure the success of our marketing campaigns, compile statistics about usage of the Services and response rates, and identify similar audiences to whom we can market our Services.
  
  
  • Analytics. We use Google Analytics, which use cookies and similar technologies to collect and analyze information about use of the Services and report on activities and trends. This service may also collect information regarding the use of other websites, apps and online resources. You can learn about Google’s practices by going to www.google.com/policies/privacy/‌partners/, and exercise the opt-out provided by Google by downloading the Google Analytics opt-out browser add-on, available at https://tools.google.com/dlpage/gaoptout.


• Physical Location
  
  
  • We may collect the physical location of your device by, for example, using satellite, cell phone tower or Wi-Fi signals. We may use your device’s physical location to provide you with personalized location-based services and content.
  
  
  • We may also share your device’s physical location, combined with information about what advertisements you viewed and other information we collect, with our marketing partners to enable them to provide you with more personalized content and to study the effectiveness of advertising campaigns. In some instances, you may be permitted to allow or deny such uses and/or sharing of your device’s location, but if you do, we and/or our marketing partners may not be able to provide you with the applicable personalized services and content.

Uses and Disclosures of Other Information 

We may use and disclose Other Information for any purpose, except where we are required to do otherwise under applicable law.  If we are required to treat Other Information as Personal Information under applicable law, we may use and disclose it for the purposes for which we use and disclose Personal Information as detailed in this Policy.  In some instances, we may combine Other Information with Personal Information.  If we do, we will treat the combined information as Personal Information as long as it is combined.

 

THIRD PARTY ADVERTISING

We may use third-party advertising companies to serve advertisements regarding goods and services that may be of interest to you when you access and use the Services and other websites or online services.

CHOICE AND CONTROL

Your choices regarding our use and disclosure of your Personal Information

We give you choices regarding our use and disclosure of your Personal Information for marketing purposes. You may opt out from:  
 

• Email newsletters.  If you no longer want to receive marketing related emails from us on a going-forward basis, you may opt out by clicking the email footer link to unsubscribe or by emailing marketing@dk.com. You may not be able to unsubscribe from communications that are not related to marketing; otherwise, you might miss important information about your account, the Services, or transactions you engage in on the Website.

• Joint marketing promotions. As described above (see section labeled With Whom We Disclose Your Personal Information), you may withdraw your consent to our sharing of your Personal Information with our joint marketing partners at any time by sending us an email at data-privacy@dk.com.

We will try to comply with your request(s) as soon as reasonably practicable.  Please note that if you opt out of receiving marketing related emails from us, we may still send you important administrative messages, from which you cannot opt out.

How you can access, change, or delete your Personal Information consistent with State Laws

If you would like to request to access, correct, update, suppress, restrict, or delete Personal Information, object to or opt out of the processing of Personal Information, or if you would like to request to receive a copy of your Personal Information for purposes of transmitting it to another company (to the extent these rights are provided to you by applicable law), you may contact us. We will respond to your request consistent with applicable law.  If you are a California resident, please refer to the “Additional Information Regarding California” section at the end of this Policy for more information about the requests you may make under the CCPA.

In your request, please make clear what Personal Information you would like to have changed or whether you would like to have your Personal Information suppressed from our database.  For your protection, we may only implement requests with respect to the Personal Information associated with the particular email address that you use to send us your request, and we may need to verify your identity before implementing your request.  We will try to comply with your request as soon as reasonably practicable.

SENSITIVE INFORMATION

Unless we request it, we ask that you not send us, and you not disclose, any sensitive Personal Information (e.g., social security numbers, political opinions, religion or other beliefs, health, biometrics or genetic characteristics or criminal background) on or through the Services or otherwise to us.

 

RETENTION PERIOD

We retain Personal Information for as long as needed or permitted in light of the purpose(s) for which it was obtained and consistent with applicable law.  The criteria used to determine our retention periods include:  

• The length of time we have an ongoing relationship with you and provide the Services to you (for example, for as long as you have an account with us or keep using the Services); 

• Whether there is a legal obligation to which we are subject (for example, certain laws require us to keep records of your transactions for a certain period of time before we can delete them); or 

• Whether retention is advisable in light of our legal position (such as in regard to applicable statutes of limitations, litigation or regulatory investigations).  

SECURITY

We seek to use reasonable organizational, technical and administrative measures to protect Personal Information within our organization.  Unfortunately, no data transmission or storage system can be guaranteed to be 100% secure.  If you have reason to believe that your interaction with us is no longer secure, please immediately notify us in accordance with the Contacting Us section below. 
 

THIRD PARTY SERVICES

This Privacy Policy does not address, and we are not responsible for, the privacy, information, or other practices of any third parties, including any third party operating any website or service to which the Services link.  The inclusion of a link on the Services does not imply endorsement of the linked site or service by us or by our affiliates. 

In addition, we are not responsible for the information collection, use, disclosure, or security policies or practices of other organizations, such as LinkedIn, Facebook, Google, or any other social media platform provider.

 

JURISDICTION AND CROSS-BORDER TRANSFER

These Services are published in the United States. We attempt to protect the Personal Information of all users of our Services and we attempt to comply with local data protection and consumer rights laws to the extent they may apply to PRH’s services, but our family of Services are located and targeted to United States citizens and our policies are directed at compliance with those laws. If you are uncertain whether this Privacy Policy conflicts with the applicable local privacy laws where you are located, you should not submit your personal information to PRH.

If you are located outside the United States, you should be aware that your Personal Information may be transferred to and processed in the United States, the laws of which may have different levels of privacy protection from your country. By using our Services, you thereby consent to the general use of your information as provided in this Privacy Policy and to the transfer of that information to, and processing and storage of that information in, the United States. In certain circumstances, courts, law enforcement agencies, regulatory agencies or security authorities in the United States may be entitled to access your Personal Information. 

ADDITIONAL INFORMATION REGARDING CALIFORNIA

Pursuant to the California Consumer Privacy Act of 2018, as amended, including by the California Privacy Rights Act of 2023 (“CCPA”), we are providing the following additional details regarding the categories of Personal Information about California residents that we collect, use, disclose or sell. Under the CCPA, “Personal Information” is information that identifies, relates to, describes, or could reasonably be associated or linked with a particular California resident or household. We are providing this Privacy Policy in addition to the information contained in our general Privacy Policy.

Collection of Personal Information

We plan to collect, and have collected within the preceding 12 months, the following categories of Personal Information:

• “Identifiers.” Identifiers, such as name, alias, contact information, unique personal identifiers, and online identifiers;


• “Customer Records Information.” Personal information as defined in the California customer records law, such as financial information (credit and debit card information and billing information);


• “Online Use Information.” Internet or network activity information, such as browsing history, interest data and interactions with our websites;


• “Geolocation Data.” Geolocation data such as device location and approximate location derived from IP address;

Where We Obtain Personal Information From

As described above, we collect this Personal Information from you and from other categories of sources, including publicly available databases, authors and joint marketing partners, social media platforms and third party service platforms, and our business customers, clients and partners, when they share this information with us.
 

Our Use of Personal Information

Also as described above, we may use this Personal Information to operate, manage, and maintain our business, to provide our products and services, and to accomplish our business purposes and objectives, including, for example, using Personal Information to: develop, improve, repair, and maintain our products and services; personalize, advertise, and market our products and services; conduct research, analytics, and data analysis; maintain our facilities and infrastructure; undertake quality and safety assurance measures; conduct risk and security control and monitoring; detect and prevent fraud; perform identity verification; perform accounting, audit, and other internal functions, such as internal investigations; comply with law, legal process, and internal policies; maintain records; and exercise and defend legal claims.
 

Disclosure and Sale of Personal Information

We share Personal Information with the following categories of third parties:
 

• “Affiliates.”  We share with our affiliates for the purposes described in this Privacy Policy.

• “Book Authors.” We share with book authors for marketing purposes.

•  “Service Providers.”  We share with our trusted third-party service providers, to facilitate services they provide to us, such as internet services, website hosting, data analytics, payment processing, order fulfillment, information technology and related infrastructure provision, customer service, email delivery, marketing, auditing, background checks, and other services.  

• “Ad Networks.”   We share with third-party ad networks and online advertising partners to permit them to send you marketing communications.

• “Marketing Partners.”   We share with our marketing partners to permit them to send you marketing communications, consistent with your choices.

• “Social Networks” We share with social network platforms, who use the data we share in accordance with their own privacy policies.

• “Business Partners.”  We share with our trusted business partners.

• “Contest Sponsors.”  With your consent, we share with third-party sponsors of sweepstakes, contests, and similar promotions. 

• “Legal Authorities.”  We share with public and government authorities, including regulators and law enforcement, to respond to requests, as well as to protect and defend legal rights.

• “Other Parties in Litigation” We share information in the context of litigation discovery and in response to subpoenas and court orders.

In the preceding 12 months, we disclosed for our operational business purposes or sold the following categories of Personal Information to the following categories of third parties: 

Your CCPA Rights: Requests to Know, Requests to Delete, Requests to Correct
 
If you are a California resident, you have certain rights with respect to Personal Information that we collect and process about you, including:
 
(1) Right to Know.  You have a right to request that we disclose to you the Personal Information we have collected about you (“Request to Know”). You also have a right to request additional information about our collection, use, disclosure, sale, or sharing of such Personal Information. Note that we have provided much of this information in this Privacy Policy:
  

• The categories of Personal Information we collected about you and the categories of sources from which we collected such Personal Information;

• The specific pieces of Personal Information we collected about you;

• The business or commercial purpose for collecting or selling (if applicable) Personal Information about you;

• The categories of Personal Information about you that we sold and, for each, the categories of third parties to whom we sold such Personal Information (if applicable); and

• The categories of Personal Information about you that we otherwise shared or disclosed, and, for each, the categories of third parties with whom we shared or to whom we disclosed such Personal Information (if applicable).

To make a Right to Know request or a request for additional information, please click here. 

(2) Right to Request Deletion. You also have a right to request that we delete Personal Information under certain circumstances, subject to a number of exceptions (“Request to Delete”). To make a request for deletion, please click here.

(3) Right to Correct Inaccurate Personal Information we collected from you (“Request to Correct”). To make a request to correct please click here.

(4) Right to Limit Use of Sensitive Personal Information. Under the CCPA California Residents have the right to request that we limit the use and disclosure of their Sensitive Information for any purposes other than to provide the services or goods you request or as otherwise permitted by law. Note that we do not use sensitive personal information for any such additional purposes

(5) Right to Designate an Authorized Agent. You may designate, in writing or through a power of attorney, an authorized agent to make requests on your behalf to exercise your rights under the CCPA. Before accepting such a request from an agent, we will require the agent to provide proof you have authorized it to act on your behalf, and we may need you to verify your identity directly with us (as further described below in the section titled “Responding to Individual Rights Requests”).

(6) Right to Non-Discrimination. You have the right to be free from unlawful discrimination for exercising your rights under the CCPA.

(7) Right to Notice of Privacy Practices. You have a right to receive notice of our practices at or before collection of personal information. 

Additional California Disclosures

Additionally, under California Civil Code section 1798.83, also known as the “Shine the Light” law, California residents who have provided personal information to a business with which the individual has established a business relationship for personal, family, or household purposes (“California Customers”) may request information about whether the business has disclosed personal information to any third parties for the third parties’ direct marketing purposes. 

We comply with this law by offering our customers a choice about the disclosure of personal information to third parties for their direct marketing purposes, and you can make or change such choice by emailing us at data-privacy@dk.com or submitting a request to opt out of sharing of your personal information. 

California Customers may request further information about our compliance with this law by e-mailing data-privacy@dk.com. Please note that businesses are required to respond to one request per California Customer each year and may not be required to respond to requests made by means other than through the designated e-mail address. 

California residents under the age of 18 who are registered users of online sites, services, or applications have a right under California Business and Professions Code Section 22581 to remove, or request and obtain removal of, content or information they have publicly posted. To remove content or information you have publicly posted, contact us at data-privacy@dk.com. 

Alternatively, to request that we remove such content or information, please send a detailed description of the specific content or information you wish to have removed to data-privacy@dk.com. Please be aware that your request does not guarantee complete or comprehensive removal of content or information posted online and that the law may not permit or require removal in certain circumstances. 

Notice of Financial Incentive 

We may, at times, offer discount codes or other incentives, such as downloadable content, when you sign up for marketing content such as newsletters. When you sign up for one of these programs, we typically collect your first and last name and email address so that we may provide you with the offers you requested as well as other offers that we think may be of interest to you. We have not assigned a specific monetary value to the Personal Information we collect via these incentives as the value varies from consumer to consumer, based on the discounts and incentives each customer redeems, and the purchases they make. But we do receive value in the form of consumer engagement and purchases, which we estimate by comparing the total amount spent by our customers who redeem such discounts and incentives, less our expenses to provide the offering to those customers who do not redeem such discounts and incentives within the same timeframe less the costs of the discount and of administering the newsletter program. You can unsubscribe from these newsletters and related communications as described in the communications, which will opt you out from related discounts or other incentive offers and retain any incentive received prior to opting out. 

Responding to Individual Rights Requests

We will verify and respond to requests from individuals to exercise their privacy rights consistent with applicable law, taking into account the type and sensitivity of the Personal Information subject to the request.  If you maintain a password-protected account with us, we may verify your identity through our existing authentication practices for your account and require you to re-authenticate yourself before disclosing, correcting or deleting your Personal Information.  Alternatively, we may send our response to your request to the contact point in our records that is associated with the Personal Information that is requested.  If you make a Request to Delete, we may ask you to confirm your request before we delete your Personal Information.

If you are the authorized agent of a consumer, making a Request to Know (or access), Correct, Port, or a Delete on behalf of the consumer, we will ask you for:

1. proof of your registration with the relevant Secretary of State to conduct business in the relevant State.

2. proof that the consumer has authorized you to make a request to Know (or access), correct, port, or delete on the consumer’s behalf. This must be an authorization signed by the consumer. “Signed” means that the permission has either been physically signed or provided electronically in accordance with the Uniform Electronic Transactions Act, Civil Code 1633.7 et seq.

If an authorized agent has not provided us with a power of attorney from the consumer pursuant to Probate Code sections 4000-4465, we may also:

1. require the consumer to provide you with a written authorization signed by the consumer to make the request on the consumer’s behalf.

2. verify the identity of the consumer as we would if the consumer were making the request personally.

3. Obtain verification from the consumer that they provided the authorized agent authorization to make the request.

If you are the authorized agent of a consumer, making a Request to Opt-Out on behalf of the consumer, we may ask you for:

1. proof of your registration with the relevant Secretary of State to conduct business in the relevant State.

2. proof that the consumer has authorized you to make a Request to Opt-Out on the consumer’s behalf. This must be a permission signed by the consumer. “Signed” means that the permission has either been physically signed or provided electronically in accordance with the Uniform Electronic Transactions Act, Civil Code 1633.7 et seq.

UPDATES TO THIS PRIVACY POLICY

The “Last Updated” legend at the top of this Privacy Policy indicates when this Privacy Policy was last revised. Any changes will become effective when we post the revised Privacy Policy on the Services.  

 

CONTACTING US

DK Publishing, a division of Penguin Random House LLC, located at 1745 Broadway, New York, NY, is the company responsible for the collection, use, and disclosure of your Personal Information under this Privacy Policy. If you have any questions about this Privacy Policy, please contact us as follows:

By email:

• General: data-privacy@dk.com

• Newsletter Unsubscribe Requests: marketing@dk.com 

By phone: (800) 793-2665

By mail:
Online Privacy - DK
Attn: Customer Service
Penguin Random House
1745 Broadway
New York, NY
 
Because email communications are not always secure, please do not include credit card or other sensitive information in your emails to us.