To help protect privacy and the security of your information, you may be asked to provide additional information to verify your identity and/or ownership rights prior to us exercising your data rights. If we are unable to verify your identity or ownership rights to the data, we may not be able to provide you with data rights until you are able to provide us with proper documents.
Unless you specifically ask us to delete your personal information, we retain your personal information as long as it is necessary to comply with our data retention requirements and provide you with services and the benefits of the Intuit Platform. However, even if you request a deletion, we may be required to maintain your information for as long as necessary to:
1) comply with our legal or regulatory compliance needs (e.g. maintaining records of transactions you have made with us);
2) to exercise, establish or defend legal claims; and/or
3) to protect against fraudulent or abusive activity on our service.
This means we may keep different information for different periods. If your account is canceled because you’ve not used it in a long time, we may delete this information straight away.
There may be occasions where we are unable to fully delete, anonymize, or de-identify your information due to technical, legal, regulatory compliance or other operational reasons. Where this is the case, we will take reasonable measures to securely isolate your personal information from any further processing until such time as we are able to delete, anonymize, or de-identify it.
Unless you have provided us with consent to transfer your information, US Tax Preparation Information shall be processed and stored in the United States in accordance with applicable law.
If you were a TurboTax Canada customer before tax year 2013 and we still house any of your tax return(s) for any of those previous years, your Tax Preparation Information for those previous years will continue to remain in Canada except by your express consent.
With the exceptions noted above, you agree and Intuit reserves the right to store and process your personal information in the United States and in any other country where Intuit or its affiliates, subsidiaries, or service providers operate facilities in accordance with and as permitted by applicable laws and regulations. Some of these countries may have data protection laws that are different from the laws of your country (and, in some cases, may not be as protective).
When we transfer, store or process personal information outside of your jurisdiction, we take appropriate safeguards to require that your personal information remain protected in accordance with this Privacy Statement and applicable law. We may use contracts or the European Commission approved Standard Contractual Clauses to help ensure your information is protected.
Intuit (excluding Credit Karma) complies with the EU-U.S. Privacy Shield Framework and the Swiss-U.S. Privacy Shield Framework as set forth by U.S. Department of Commerce regarding the collection, use, and retention of personal information transferred from the European Union (EU), the United Kingdom (UK), and Switzerland to the United States. You can find more information about Intuit’s EU-U.S. and Swiss-U.S. Privacy Shield certification here.
US Tax Preparation Information
We understand that your Tax Preparation Information is special. Except as necessary to provide you with tax preparation services or as authorized by law, we will not disclose your Tax Preparation Information – including to Intuit’s affiliates and subsidiaries – unless you consent.
We will only use your Tax Preparation Information to provide you with tax preparation services or as authorized by law, unless you consent that we can use and/or share it for other purposes.
If you agree to share your Tax Preparation Information outside of our tax products to be used for purposes other than tax preparation services, including by sharing it with the Intuit Platform, your Tax Preparation Information will be handled in accordance with this Privacy Statement.
Intuit group companies will not share your non-public personal information with unaffiliated third parties unless you authorize us to make those disclosures without your consent, other than as permitted by law. Further, Intuit group companies’ consumer offerings will not share credit reports with our affiliates without your consent.
Access. You may have the right to access:
• the categories of personal information we have collected about you,
• the sources from which that information was collected,
• the business or commercial purpose for collecting your personal information,
• the categories of third parties with whom we share your personal information,
• the specific pieces of personal information we have collected about you,
• the categories of personal information we sold about you,
• the categories of third parties to whom we sold personal information about you, and
• the categories of personal information we disclosed for a business purpose.
Deletion. You may have the right, under certain circumstances, to request that we delete the personal information you have provided to us.
Non-discrimination. You have the right to be free from discrimination related to your exercise of any of your California privacy rights.
Verification. In order to protect your personal information from unauthorized access or deletion, we may require you to verify your credentials before you can submit a rights request. If you do not have an account with us, or if we suspect that your account has suffered fraudulent or malicious activity, we may ask you to provide additional personal information for verification. For Credit Karma members, we may require that you confirm certain pieces of personal information that we have on file and/or log into your Credit Karma account. If we are subsequently unable to confirm your identity, we may refuse your rights request.
Authorized agents. You may use an authorized agent to submit a rights request. If you do so, the agent must present signed written authorization to act on your behalf, and you may also be required to independently verify your identity or your legal authority or ownership of the personal information with us.
Please note that we may claim legal exemptions for certain types of personal information from all or certain parts of the CCPA pursuant to various CCPA exemptions.
What you can do to manage your privacy
You have choices when it comes to managing the privacy of your personal information.
Update your privacy settings. You may update your privacy settings by visiting your account settings.
Manage marketing communications from us. To update your marketing communication preferences, you can go to the marketing preference tools in your account settings. You may also click unsubscribe at the bottom of the marketing emails.
Download a copy of your personal information. You may request a copy of your personal information by visiting your account or ourIntuit Privacy Center. If your inquiry is specific to Credit Karma, by visiting the Credit Karma Help Center or by emailing us at CCPArequests@creditkarma.com.
Correct your personal information. You can edit and correct your personal information at any time by changing it directly in our products and services.
Delete your personal information. You may request for us to delete your personal information by visiting your account settings or the Intuit Privacy Center. If your inquiry is specific to Credit Karma, by visiting the Credit Karma Help Center or by emailing us at CCPArequests@creditkarma.com.
Cookies and other tracking technologies. You may be able to opt-out of interest based advertising by visiting the Digital Advertising Alliance of Canada Opt-Out Page, NAI Opt-Out Page and the Choices Opt-Out Page or by visiting our Intuit Privacy Center.
Your Right to Limit Information Sharing: You have the right to limit our sharing of your information to both affiliates and third-parties for marketing purposes. You can limit our information sharing through our Marketing Preferences Center.
Access, Correction or Deletion. You may request to access, to correct or to delete your personal information.
Objection and Restriction. You may object to our processing of your personal information, including for marketing purposes, or ask us to restrict processing of your personal information. If you request that we stop processing some or all of your personal information or you withdraw (where applicable) your consent for our use or disclosure of your personal information for purposes set out in this privacy notice, we might not be able to provide you all of the Services and customer support offered to our users and authorized under this Notice.
What you can do to manage your privacy
You have choices when it comes to managing the privacy of your personal information.
Update your privacy settings. You may update your privacy settings by visiting your account settings.
Manage marketing communications from us. To update your marketing communication preferences, you can go to the marketing preference tools in your account settings.
Access or Deletion. To make a request for access or deletion of your personal information, contact us through the link provided in the “How to Contact Us” section for Australia, below.
Correct your personal information. You can edit and correct your personal information at any time by changing it directly in our products and services.
Objection and Restriction. To object to data processing or request a restriction, contact us through the link provided in the “How to Contact Us” section for Australia, below.
Sharing with Credit Bureaus
If you are located in Brazil and have requested the cancelling of your registration on each of our partners as allowed by Brazilian Federal Law No. 12,414/2011, we will not be able to provide you any more personalized recommendations based on your credit profile.
Access, Correction, Anonymization or Deletion. You may request to access, to correct, to anonymize or to delete your personal information.
Objection and Restriction. You may object to our processing of your personal information or ask us to restrict processing of your personal information.
Portability. You may request portability of your personal information.
Withdraw Consent. If we have collected and processed your personal information with your consent, you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent.
File a complaint. You have the right to file a complaint with a supervisory authority about our collection and processing of your personal information.
To exercise any of your rights, contact us through the link provided in the “How to Contact Us” section for Brazil, below.
What you can do to manage your privacy
You have choices when it comes to managing the privacy of your personal information.
Update your privacy settings. You may update your privacy settings by visiting your account settings.
Manage marketing communications from us. To update your marketing communication preferences, you can go to the marketing preference tools in your account settings.
Correct your personal information. You can edit and correct your personal information at any time by changing it directly in our products and services.
Request a copy of your personal information. You may request a copy of your personal information by contacting us through the link provided in the “How to Contact Us” section for Brazil, below.
Delete your personal information. You may request for us to delete your personal information by contacting us through the link provided in the “How to Contact Us” section for Brazil, below.
Objection, Restriction & Portability. You may request objection, restriction and portability rights by contacting us through the link provided in the “How to Contact Us” section for Brazil, below.
While we take steps to maintain protection of your personal information, your personal information may be disclosed in response to valid demands or requests from governments, regulators, courts and law enforcement authorities in those other jurisdictions or countries.
Access, Correction or Deletion. You may request to access, to correct or to delete your personal information (provided we no longer have a business need to retain your personal information). Even if you request for your personal information to be deleted, certain aspects may be retained for us to: meet our legal or regulatory compliance (e.g. maintaining records of transactions you have made with us); exercise, establish or defend legal claims; and to protect against fraudulent or abusive activity on the Intuit Platform. Data retained for these purposes will be handled as described in “Information Retention”.
Withdraw consent. You can withdraw your consent at any time to collection, use and disclosure of your personal information. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent.
File a complaint. You have the right to file a complaint with the applicable Privacy Commissioner about our collection and processing of your personal information.
What you can do to manage your privacy
You have choices when it comes to managing the privacy of your personal information.
Update your privacy settings. You may update your privacy settings by visiting your account settings.
Manage marketing communications from us. To update your marketing communication preferences, you can go to the marketing preference tools in your account settings. You may also click unsubscribe at the bottom of the marketing emails.
Cookies and other tracking technologies. You may be able to opt-out of interest based advertising by visiting the Digital Advertising Alliance of Canada Opt-Out Page, NAI Opt-Out Page and the Choices Opt-Out Page.
Correct your personal information. You can edit and correct your personal information at any time by changing it directly in our products and services.
Request a copy of your personal information. You may request a copy of your personal information by contacting us through the link provided in the “How to Contact Us” section for Canada, below.
Delete your personal information. You may request for us to delete your personal information by contacting us through the link provided in the “How to Contact Us” section for Canada, below.
Where data of Indian individuals are involved, you hereby agree that the “reasonable security practices and procedures” under section 43A Explanation (ii) of the Information Technology Act, 2000 means this Intuit’s Privacy Statement and such data security procedures that Intuit may implement from time to time and which may, in Intuit’s discretion, be informed to you from time to time.
What you can do to manage your privacy
You have choices when it comes to managing the privacy of your personal information.
Update your privacy settings. You may update your privacy settings by visiting your account settings.
Manage marketing communications from us. To update your marketing communication preferences, you can go to the marketing preference tools in your account settings.
Correct your personal information. You can edit and correct your personal information at any time by changing it directly in our products and services.
Access. You have the right to know what personal data we have about you, what we use it for and the conditions of use we give to it. Electronic copies of your personal data will be provided if you exercise your right of access.
Rectification. You have the right to request the correction of your personal data if it is outdated, inaccurate, or incomplete (Rectification).
Deletion/Cancellation. You have the right to request that we remove your personal information from our records or databases when you consider that it is not being used in accordance with the principles, duties, and obligations provided for in the applicable laws.
Opposition/Rejection. You have the right to oppose the use of your personal data for specific purposes.
What you can do to manage your privacy
You have choices when it comes to managing the privacy of your personal information and exercising your ARCO rights. Please note that we are required to verify your request prior to exercising your rights. After we have received a request, our response will indicate whether the request for access, rectification, cancellation or opposition is appropriate and, if so, the determination will be made within 15 business days from such date. The deadlines may be extended under the terms set out in the applicable laws.
Update your privacy settings. You may update your privacy settings by visiting your account settings.
Manage marketing communications from us. To update your marketing communication preferences, you can go to the marketing preference tools in your account settings.
Correct your personal information. You can edit and correct your personal information at any time by changing it directly in our products and services.
Request a copy of your personal information. You may request a copy of your personal information by contacting us through the link provided in the “How to Contact Us” section for Mexico, below. When making a request, please provide a clear and precise description of the personal data you wish to access any other element that facilitates the location of your data.
Delete your personal information. You may request for us to delete your personal information by contacting us through the link provided in the “How to Contact Us” section for Mexico, below. When making a request, please provide a clear and precise description of the personal data you wish to delete/cancel or any other element that facilitates the location of your data.
Objection. You may request objection, restriction and portability rights by contacting us through the link provided in the “How to Contact Us” section for Mexico, below. When making a request, please provide a clear and precise description of the personal data you wish to oppose, or any other element that facilitates the location of your data.
How to limit the use and disclosure of your personal information
If you are a resident of Mexico, you also have the right to limit the use or disclosure of your personal information by contacting us through the link provided in the “How to Contact Us” section for Mexico, below.
How to withdraw your consent
If you are a resident of Mexico, you also have the right to withdraw your consent for our processing of your personal information by contacting us through the link provided in the “How to Contact Us” section for Mexico, below.
EU Legal Representative
The controller of your personal data is Intuit Inc. whose contact details can be found in the “How to Contact Us” section below.
Intuit Inc.'s representatives in the UK and EEA are:
In the UK: Intuit Ltd.; Intuit Ltd. contact details can be found in the “How to Contact Us” section below.
In the EEA: Intuit Inc. and Intuit UK Limited have each appointed Intuit France SAS as its Legal Representative in the European Union in accordance with Regulation (EU) 2016/679. Intuit France’s contact details can be found in the “How to Contact Us” section below.
Legal Basis of Processing
Our legal basis for collecting and using the personal information described in this Privacy Statement will depend on the type of personal information and the specific context in which we collect it. However, we will normally process personal information from you only when:
• We have your consent to do so;
• We need the personal information to perform a contract with you or provide a service to you;
• The processing is in our legitimate business interests, such as operating our businesses, improving the Intuit Platform, communicating with you, marketing our offerings and services and to detect illegal activities; and/or
• To comply with legal requirements, including applicable laws and regulations
For residents in the UK searching for a credit card or a personal loan through the Intuit Platform, we may share your personal information, including your contact details, date of birth, as well as the information you give us about your employment, income, and housing and employment expenses with third parties to determine your eligibility, including HD Decisions, Capital One and Monevo. You can find more information about their data protection practices in their privacy policies:
HD Decisions
Capital One
Monevo
If you are a resident of the UK or EEA, you may have the following rights:
Access, Correction or Deletion. You may request to access, to correct or to delete your personal information. Please note that even if you request for your personal information to be deleted, certain aspects may be retained for us to: meet our legal or regulatory compliance (e.g. maintaining records of transactions you have made with us); exercise, establish or defend legal claims; and to protect against fraudulent or abusive activity on our Service. Data retained for these purposes will be handled as described in the section “Information Retention”.
Objection and Restriction. You may object to our processing of your personal information or ask us to restrict processing of your personal information.
Portability. You may request portability of your personal information.
Withdraw Consent. If we have collected and processed your personal information with your consent, you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent.
File a complaint. You have the right to file a complaint with a supervisory authority about our collection and processing of your personal information.
What you can do to manage your privacy
You have choices when it comes to managing the privacy of your personal information.
Update your privacy settings. You may update your privacy settings by visiting your account settings.
Manage marketing communications from us. To update your marketing communication preferences, you can go to the marketing preference tools in your account settings or visit our GDPR Centre. You may also click unsubscribe at the bottom of the marketing emails.
Request a copy of your personal information. You may request a copy of your personal information by visiting our GDPR Centre. If your inquiry is specific to Credit Karma UK, you may request a copy of your personal information by visiting Credit Karma’s Help Centre.
Correct your personal information. You can edit and correct your personal information at any time by changing it directly in our products and services.
Delete your personal information. You may request for us to delete your personal information through our GDPR Centre. If your inquiry is specific to Credit Karma UK, you may request for us to delete your personal information by visiting Credit Karma’s Help Centre.
Objection, Restriction & Portability. You may request for us to delete your personal information through our GDPR Centre. If your inquiry is specific to Credit Karma UK, you may request for us to delete your personal information by visiting Credit Karma’s Help Centre.
Cookies and other tracking technologies. You may be able to opt-out of such interest-based advertising by visiting Network Advertising Initiative or Your Online Choices or by visiting our GDPR Centre.
Intuit Inc.
Attention: Privacy
2800 E Commerce Center Place,
Tucson, AZ 85706
Credit Karma, Inc.
Attention: Legal Department
1100 Broadway, Suite 1800
Oakland, CA 94607PO Box 30963
Oakland CA 94604
legal@creditkarma.com
If you have questions or concerns that have not been addressed by this Privacy Statement, you can contact the Intuit Data Protection Officer here.
Visit the QuickBooks Australia website to learn how to contact their support team. Go to QuickBooks Australia
Intuit Australia Pty. Limited
Level 34, 1 O'Connell St.
Sydney, NSW 2000 Australia
Visit the QuickBooks Brazil website to learn about the various ways to contact their support team. Go to QuickBooks Brazil
Intuit Brasil Serviços de Informática LTDA.
Av. Brigadeiro Faria Lima, nº 3900, 9th floor
São Paulo / SP - Brazil CEP 04358-132
If you have questions or concerns that have not been addressed by this Privacy Statement, you can contact Barbara Sondag, Data Protection Officer at Intuit Brasil Serviços de Informática Ltda.here.
Intuit Canada
Attention: Privacy
5100 Spectrum Way
Mississauga, ON
L4W 5S2
If you have questions or concerns that have not been addressed by this Privacy Statement, you can contact the Intuit Data Protection Officer here
Credit Karma, Inc.
Attention: Privacy Officer
P.O. Box 520,
San Francisco, CA 94104-0520 USA
If your inquiry is specific to Credit Karma, you can visit the Credit Karma Help Centre. You can also email the Credit Karma Canada Privacy Officer by writing to legal@creditkarma.ca.
Intuit France SAS
Intuit Data Protection Administration
7 rue de la Paix 75002 Paris, France
If you have questions or concerns that have not been addressed by this Privacy Statement, you can contact the Intuit Data Protection Officer here
Visit the QuickBooks India website to learn how to contact their support team. Go to QuickBooks India
Intuit Technology Services Private Limited
Campus 4A, PrITech Park (Ecospace)
7th and 8th Floor, Belandur Village
Varthur Hobli, Bangalore East Taluk
Bangalore - 560 103 India
Visit the QuickBooks Mexico website to learn how to contact their support team. Go to QuickBooks Mexico
Intuit QuickBooks Mexico
Montes Urales 424
Lomas de Chapultepec sección V
11000 CDMX, México
Intuit Limited
Attention: Intuit Data Protection Administration,
Cardinal Place, 80 Victoria Street, London,
United Kingdom, SW1E 5JL
Credit Karma UK Limited
c/o Legalinx Limited,
Tallis House, 2 Tallis Street, London,
United Kingdom, EC4Y 0AB
If you have questions or concerns that have not been addressed by this Privacy Statement, you can contact the Intuit Data Protection Officer hereand the Credit Karma Data Protection Officer by writing to dpo@creditkarma.co.uk.