Rakuten USA, Inc. Privacy Policy and Notice of Personal Information Collection

Last Updated: December 21, 2022

  1. 1. What This Privacy Policy Covers

    This website, located at https://rakuten.us/ (the “Site”), is operated by Rakuten USA, Inc. d/b/a Rakuten Americas (“Rakuten Americas”, “we” or “us”), part of the “Rakuten Group,” which includes the affiliates and subsidiaries of our parent company, Rakuten Group, Inc., based in Tokyo, Japan.

    This Privacy Policy explains how Rakuten Americas collects, processes, and discloses personal information about you when you access or use this Site to discover information about Rakuten Americas' headquarters, leadership, affiliates, and the services and job opportunities provided by Rakuten Group companies in the Americas region, or when you otherwise interact with us, such as when you visit our regional office facilities (“Facilities”) or register for or attend a regional event we manage (“Event”). Certain Events or Facilities may have additional privacy disclosures, as applicable, for data collected that is specific to that Event (e.g., dietary restrictions, physical accommodations needed, etc.), or Facility location (Wi-Fi, security cameras, badge readers), and any such additional terms will be disclosed to relevant data subjects or consumers in connection with that Event registration or Facility visit.

    We also process the personal information of job applicants and Rakuten Americas staff. If you click through from this Site to our Rakuten Group Careers page located at https://global.rakuten.com/corp/careers/midcareer/ or apply for a job with a Rakuten Group company, our global Recruitment Privacy Policy will govern the personal information collected from and about you during the recruiting process.

    The personal information we collect, process, and retain about our staff and former staff members in relation to their work activities and relationship with us is governed by our internal Staff Privacy Policy for the Rakuten Americas region, which is accessible to all current staff. Former staff may request a copy of our Staff Privacy Policy by contacting us as provided in the Contact Us section, below.

    In addition to non-staff data we collect as a business on our own behalf when you interact with this Site, our Events or our Facilities, Rakuten Americas may receive and process personal information about you in our role as a service provider to some of our Rakuten Group affiliates, on behalf of those businesses, to assist them in providing the independent services those businesses offer to consumers and their business clients, or for other business purposes such as strategic planning. To the extent you interact with them, please see the privacy policies of these Americas region Rakuten Group companies (linked below) to understand what personal information they collect from and about you, how they may use and disclose it, and to exercise your consumer rights under applicable privacy laws.

  2. 2. Collection of Information

    Types of Information We May Collect:

    When you visit our Site or otherwise interact with us as described herein regarding Events and Facilities, we may collect the following types of information about you:

    Note that we do not collect types of information considered “sensitive” personal information under applicable U.S. state privacy laws.

    Sources of Collection:

    We may collect the above types of information in various ways, as described below:

    Information You Provide to Us Directly

    We collect information you provide directly to us, such as when you fill out a form, register for an Event, pose for a photo, or otherwise submit, send, or provide your information to us yourself.

    Information We Collect Automatically

    When you access or use our Site, we automatically collect certain information about you, including:

  3. 3. Use of Information and Our Legal Basis for Processing it

    We may use the information we collect about you for the purposes listed below:

    Note that we may deidentify or aggregate your information so that it can no longer associated with you, and that we may use such aggregated or deidentified information for any purpose. To the extent we deidentify information for a particular purpose, we maintain it in a deidentified manner and do not attempt to re-identify it.

    Legal Bases: If you are located in the European Economic Area (EEA), the United Kingdom (UK), and certain other locations, we must have an identified legal basis to process your personal information. We process your personal information for the purposes described above, under the following legal bases:

  4. 4. Disclosure of Information

    We do not sell, share, or process your personal information for targeted advertising purposes. We may disclose all the categories of personal information for business or commercial purposes as follows:

    International Data Transfers

    Because we operate as part of a global business, recipients of the personal information we collect may be located outside the jurisdiction in which you are located (or in which we provide our Site, Events or Facilities). As a result, your personal information may be transferred to, stored, or otherwise processed in a country that is not regarded as ensuring an adequate level of protection for personal information in relation to your country of residence.

    We have put in place appropriate safeguards (such as standard contractual clauses) in accordance with applicable legal requirements to ensure that your data is adequately protected when transferred. As a Rakuten Group company, Rakuten Americas relies on the Rakuten Group Binding Corporate Rules (BCRs) (https://corp.rakuten.co.jp/privacy/en/bcr.html) to legitimize international data transfers of EEA and UK personal data within the Rakuten Group.

  5. 5. Your Privacy Rights

    You may have certain rights regarding your personal information based on applicable local laws, including the following rights:

    Right to Know and Access: You have the right to request that we confirm whether or not we are processing personal information about you and that we provide certain information to you about our collection and use of your personal information, including:

    Right to Request Deletion: You have the right to request that we delete any personal information we have collected from you and retained, subject to certain exceptions. Upon such a request, we will delete (and direct our service providers or contractors to delete) your personal information from our records, except to the extent we determine that a statutory exception applies or we have a legal obligation to maintain the information.

    Right to Request Correction: You have the right to request that we correct any personal information about you that is factually inaccurate or complete any personal information that is incomplete.

    Right to Opt-Out of Sale/Sharing of Personal Information: We do not sell, share, or process your personal information for targeted advertising purposes.

    Right to Object to Our Processing: For visitors in the EEA or UK, you have the right to object to our processing on the basis that your individual rights and freedoms outweigh our legitimate interests or to the use of your information for our direct marketing purposes.

    Right to Restrict Our Processing: For visitors in the EEA or UK, you may have the right to Restrict our processing of your personal data if its accuracy is challenged, on the basis that such processing is unlawful, or while it is determined whether our legitimate interests outweigh your individual rights and freedoms.

    Right to Non-Discrimination: In the U.S., we will not discriminate against you for exercising any of your privacy rights, including charging you a different rate or denying you goods or services.

    Right to Appeal: In certain U.S. states, you have the right to appeal our decision regarding your privacy rights request. You may submit an appeal request by contacting us as provided below. We will respond according to the law applicable in your location.

    How To Exercise Your Privacy Rights

    To exercise your privacy rights as described above, you should contact us by email at this address: rusa-privacy@mail.rakuten.com, or you may call us toll-free at +1 888-551-2118.

    Please note that in certain U.S. states, you may not make a request to know or access your information more than twice within a 12-month period.

    Your request must be verifiable. In order for us to verify your identity, we will need to match certain information that we may ask you to provide in your request with data that we maintain and have determined to be reliable for the purposes of verification. We will only use personal information you provide as part of your request to fulfill the request or verify your identity or authority to make the request.

    Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your personal information. We may require any agent making a request on your behalf to prove that you authorized the agent to submit a request on your behalf and we will ask you to personally verify your identity as the requestor.

  6. 6. Additional Notices

    Shine the Light

    California law permits residents of California to request certain details about how their information is shared with third parties for direct marketing purposes. We do not share your information with third parties for their direct marketing purposes.

    Notice Regarding Information of Minors

    This Site and any related services, including our Events and Facilities are intended for adults over 16 years of age, and we do not knowingly collect or process the personal information of minors under 16 years of age without affirmative authorization or without affirmative, verifiable consent from a parent for those under age 13.

  7. 7. Retention

    We may retain information about you for as long as it is necessary to fulfill the purposes described Section 3. Some of your information may be retained in our systems even after you request your information to be deleted if an exception applies, or in order to comply with our obligations under applicable law, resolve disputes, enforce our legal rights, to undertake any investigations necessitated by the foregoing, and otherwise use internally in a lawful manner that is reasonably aligned with your expectations or compatible with the context in which the information was collected or provided.

  8. 8. Information Security

    We have implemented technical and organizational measures to provide a level of security appropriate to the risk to the personal information that we process. These measures are aimed at preserving the ongoing integrity and protecting the confidentiality of users' personal information. We evaluate these measures on a regular basis to confirm that they continue to maintain and apply an appropriate level of security.

  9. 9. Changes to the Privacy Policy

    This Privacy Policy is current as of the date set forth above. We may change this Privacy Policy from time to time consistent with applicable privacy laws and principles and our practices in relation to personal information. If we make changes, we will notify you by revising the date at the top of the policy and, in some cases, including when we make a material change, we will provide you with additional notice (such as adding a statement to our website homepage). We encourage you to review the Privacy Policy whenever you access the Site or otherwise interact with us to stay informed about our information practices and the choices available to you.

  10. 10. Contact Us

    If you have any questions about this Privacy Policy, please contact us at:

    Rakuten USA, Inc. d/b/a Rakuten Americas
    800 Concar Drive, San Mateo, CA 94402
    Email: rusa-privacy@mail.rakuten.com
    Toll-free tel: +1 888-551-2118

    NOTE: If you are trying to reach Rakuten.com Member Services, please contact them at: memberservices@rakuten.com