Intuit Privacy - Illustration of a woman standing near the door

You deserve transparency into our data use

We have updated our Global Privacy Statement

Here are a few highlights of the changes to help you understand how this may impact your data.

We've updated our Global Privacy Statement to address requirements in the California Privacy Rights Act (‘CPRA’), which takes effect on January 1, 2023.
We've updated country and state requirements related to data collection, usage practices and disclosures.
The Global Privacy Statement is now in a more easily readable format, where you can expand and close each section.

Review our full statement below for complete details about the changes to our policy and to learn more about how we process personal information.

Intuit Global Privacy Statement

Last Updated: December 1, 2022

See previous Privacy Statements

Scope of this Privacy Statement and our role

Intuit responsibly leverages technology to power prosperity around the world. We believe that everyone has a right to privacy. As a financial services and technology company, we’re providing this Global Privacy Statement (“Privacy Statement”) to explain how we, Intuit Inc. and the Intuit group companies (collectively “Intuit,” “we,” “us,” or “our”), collect, use, share, or otherwise process information that we collect through our services. These services include, as applicable, our websites, mobile applications, social media pages, marketing activities, and other activities described in this Privacy Statement, or when other businesses provide us your personal information (collectively, the “Services”). This Privacy Statement is global, meaning it applies to all Intuit Services. We may provide additional or supplemental privacy statements for certain products or services.

This Privacy Statement describes our privacy practices when we process:

Personal information for the purposes of preparing a tax return or in connection with the preparation of a tax return (collectively, “Tax Preparation Information”) as part of providing TurboTax tax preparation services;
Personal information for the purposes of providing the benefits of our websites and the Intuit platform, which includes all of Intuit’s services, sites, experiences and software (including through our mobile applications and desktop applications) other than Tax Preparation Information (the “Intuit Platform”); and
Personal information as necessary to manage, run, improve, and develop our business and personalize your experience while interacting with the Intuit Platform. Depending on your settings, this may include showing you personalized ads or recommending certain Intuit products based on your interests.

Intuit determines the purposes and means of the processing of your personal information as described in this Privacy Statement, and therefore acts as a ‘data controller’ (or equivalent/similar terms under applicable data privacy laws) of such information. We may share your personal information within the Intuit group companies and conduct processing activities as controllers or joint controllers for the purposes set out in this Privacy Statement.

In certain circumstances, there may be more than one data controller processing your personal information. For example, your employer or a financial partner may also act as a data controller. In these situations, we act as an independent data controller over our processing activities. This means we determine how your personal information will be processed independently from the other data controllers. The other data controllers have their own obligations under applicable data privacy laws. Intuit is not responsible for other data controllers’ processing activities, and you should contact them directly for questions about how they process your personal information and about how to exercise your privacy rights in relation to such processing.

This Privacy Statement does not apply where Intuit processes personal information as a processor or service provider on behalf of our customers, including when we process personal information on behalf of customers of our professional tax software products. When we act as a processor or service provider, the privacy statement of our customer who uses our Services applies instead of this Privacy Statement, and our processing of such personal information is governed by our agreements with such customers. If you have concerns about personal information that we process on behalf of a customer, or wish to exercise your privacy rights regarding such personal information, please contact the customer directly.

If you have any questions about how Intuit processes your personal information, please see How to contact us below.

The Intuit platform

The Intuit Platform and your personal information

When we say “platform,” we mean that when you choose to share data with us, or bring over information from third parties (like a bank or loan provider), Intuit uses that data together, not just within the individual offering(s) you’re using. This means that, for example, we may use your bookkeeping details from QuickBooks, budgets from Mint, contact and purchase history details from Mailchimp, and/or recommendations from Credit Karma. The personal information we use in this centralized way may relate to you as an end user of our Services or as a customer or vendor of an Intuit customer whose personal information has been included in the Intuit Platform.

Business account information

Some experiences and services within the Intuit Platform allow you to interact with a business (such as your employer). If you are granted access to business account (for example, in QuickBooks), the business owner or a designated administrator may control and administer details of your account, for example, by deciding your access rights; making decisions about your personal information (such as details about your payroll); or requiring you to take certain actions (for example, use location tracking to clock in for a shift). If the owner or designated administrator changes your access rights, then you may lose access to the information the business controls.

Your use of the Intuit Platform as part of a business account may be subject to the business’s policies, which may differ from this Privacy Statement. We are not responsible for the privacy or security practices of other businesses, and you should consider both the business’s policies and whether you are comfortable giving the business access to your personal information before connecting to their services.

Personal information we collect

The personal information that we collect or otherwise receive about you depends on the context of your interactions with Intuit, how you configure your account, and the choices you make, including your privacy settings. The way we process your personal information may also depend on the particular Services, functionalities, or experiences you use, your location, and applicable law.

Information you provide to us

You may provide us with your personal information as follows:

Contact data and account profile data. We collect information when you (or your organization) create an account, activate a subscription, and/or upload information to the Intuit Platform. Personal information may include your name, previous name(s) and/or nicknames, title and honorifics, professional title and company name, education, billing and mailing addresses, phone number and email address, profile photo, billing information (your payment information), purchase history, demographic information, preferences, subscription data, and your username and account credentials.
Identity verification information. We collect information to verify your identity, including your name, date of birth, social security number, social insurance number, driver’s license number, passport number, government-issued identification details, and similar information to verify your identity and to help you file your tax return.
Communications, feedback and survey data, and related data. We may collect personal information such as your name, email address, telephone number and any other personal information you choose to share when you reach out to us for support, give us feedback, participate in optional surveys, attend our events, participate in product research or training, or otherwise interact or communicate with us. This information may include: call center recordings and call monitoring records, chat and text records, voicemails, photographs, and video images.
Marketing data. You may provide us with your contact information and preferences for receiving our marketing communications.
Social and community content. We receive content you post on our social media pages and our community pages.
Business and financial information. We may receive information about your business, your finances, expenses, invoices, financial statements, details of your financial transactions, payroll details, payment details, tax return details, details about your customers, vendors, or employees, income and wage information, and/or investment information.
Interactions with experts. The Intuit Platform provides many opportunities for you to connect with live experts, including, for example, accountants or tax preparers. When you interact with these experts, we may receive information about the questions you ask, the details of your accounts, and the guidance provided to you.
Device and contact data. If you grant permission in your device settings, certain features may have access to your device and contacts.

Third-party sources

The Intuit Platform is designed to help you connect with other people and businesses. As a result of those connections, others may be able to input personal information about you, including other customers using the Intuit Platform. For example, an Intuit customer may share personal information about you with us in order to use and benefit from the Intuit Platform. You also may be able to input or process personal information about others, for example, if you are an account administrator of one of our products or use Intuit to manage customer lists. If you input information about others into the Platform, you must only do so if you have first provided sufficient notice and received any required permissions, and have an appropriate legal basis if required by applicable law.

We may also receive personal information about you from other third parties where you have provided consent or where permitted by applicable law. We protect and process the personal information obtained from those third parties as described in this Privacy Statement, consistent with any additional restrictions imposed by the source of the information. Our third-party sources may vary over time and depend upon how you use the Intuit Platform. For example, we receive information from:

Linked third-party services. If you choose to sync a non-Intuit account/service with your Intuit account, we will receive information from that account/service according to your settings with that account/service. This may include details of your bank account information, social media information, purchase history or your business’s sales records through a point of sale application.
Supplemental information and identity verification providers. We work with certain third parties to help us verify your identity, the specifics of your business, and/or supplement the personal information you have provided and ensure the accuracy of your personal information. For example, we use third-party providers to validate your contact information (e.g., name, mailing address, email address, phone number) or to provide additional details about your business. These providers may include, for example, your financial institution, telecommunications provider, or email provider.
Customer support providers. We receive personal information about you or your interaction with the Intuit Platform from certain third parties for troubleshooting purposes. For example, we may obtain information about your interaction(s) with customer support and information about technical issues you have raised, including call center recordings, call monitoring records, voicemails, photographs and chat records.
Credit bureaus and related third parties. Many Intuit features rely on information we receive from credit bureaus and related third parties. For example, in some countries, we may offer free credit reports and credit scores. We request these reports and credit scores on your behalf from credit bureau partners, like TransUnion, Experian and Equifax. These partners may also provide personal information such as employment or income data, social security number, vehicle or driver information, or information about special offers available based on your credit profile so we can make more personalized recommendations for you.
Other users. As described above, we may receive personal information about you from other Intuit Platform users, such as your accountant, bookkeeper, tax preparer, spouse, employer, or other business customers using the Intuit Platform (e.g., businesses from which you buy products or services, or with which you otherwise interact). We may also collect such personal information through features like member referral programs.
Risk management, cybersecurity & anti-fraud providers. We may receive personal information from third parties that help us assess risks associated with our offerings, including to help combat fraud and illegal activity and to help protect your personal information.
Data providers. We may receive information from information services and data licensors that provide demographic and preference information to us.
Content providers. We may receive personal information from companies that make user-generated content from their service available to others, such as local business reviews or public social media posts.
Joint offering partners. We may offer co-branded services or experiences or engage in joint-marketing activities with others, including through our conferences or live events.
Government agencies. We receive information from government agencies, including from various tax agencies, such as your tax filing confirmation from the IRS.
Public information. We collect individual and household demographic information and preference information from publicly available sources, such as open government databases, social media platforms, and others.

Automatic data collection

We, our service providers, and our business partners may automatically log personal information about you, your computer or mobile device, and your interaction over time with the Services, such as:

Device information. We may collect information about your device(s) such as IP addresses, log information, error messages, device type, and unique device identifiers. For example, we may collect IP addresses from you as part of our sign in and security features.
Usage information. We may collect information about your use of the Intuit Platform, such as the pages you viewed, the services and features you used or interacted with, your browser type, and details about any links or communications with which you interacted.
Location information. Certain features in the Intuit Platform may collect your precise location information, device motion information, or both, if you or your organization grant(s) us permission to do so through your device settings (for example, if you use QuickBooks’ time-tracking service, participate in Karma Drive, or use CK Money to locate nearby ATMs).
Information stored locally. Some of our web-enabled desktop services and offerings synchronize with the information on your computer. In doing so, we may collect information such as device information, product usage, and error reports. We may also store personal information locally on your device.
Communication interaction data. We or our third-party service providers may collect information from email providers, communication providers and social networks, such as your interactions with our email, text or other communications (e.g., whether you open and/or forward emails) – we may do this through use of pixel tags (which are also known as clear GIFs), which may be embedded invisibly in our emails.
Online behavioral data. We may automatically collect certain personal information about your use and interactions with our websites, customers’ websites or e-commerce stores, social media websites, and marketing campaigns that we or our customers organize, including device information (such as your IP address and unique device IDs), page view information and search results, links, and if you are a customer contact, whether or not a campaign presented or sent to you using our offerings has been viewed, delivered, opened, clicked on, whether it has bounced or was treated as spam.

Cookies and similar technologies

Intuit and our service providers may use commonly used tools such as cookies, web beacons, pixels, local shared objects and similar technologies (collectively “cookies”) to collect information about you (“Cookie Information”) so we can provide the experiences you request, recognize your visit, track your interactions, and improve your and other customers’ experiences. You have control over some of the information we collect from Cookies and how we use it. Please see Your Personal Information Rights and Choices section for more information. For full details on how we use cookies and similar technologies please see our Intuit Cookies Policy. For full details on how we use cookies and similar technologies when you use or interact with our Mailchimp offerings, please also see our Mailchimp Cookie Policy.

How we use personal information

We may use your personal information in a number of ways or as otherwise described at the time of collection:

Service delivery and operations. We may use your personal information to:

Provide you with the Intuit Platform, create your account and manage our relationship with you
Run and manage our business, including resolving billing and financial disputes
Evaluate your eligibility for marketing offers, products and services
Provide features to you, such as your free credit reports and scores
Provide a product or service that you have requested through the Intuit Platform
Connect you with experts and other users
Communicate with you, such as sending you electronic notifications concerning your financial privacy
Understand your needs and interests, and personalize your experience with the Services and our communications.
Provide you with support and resolve disputes
Authenticate your identity
Manage event registrations and attendance, including sending related communications to you
Register visitors to our offices for security reasons and manage non-disclosure agreements that visitors may be required to sign

Research and development. We may use your personal information to:

Improve and develop our products and services by analyzing how they are used and interacted with, as well as by assessing the use of and interactions with our Platform and certain content our customers send or display through the Platform, including by conducting data analytics to develop insights about you, your needs, and your preferences, so we can make more informed predictions, recommendations, and products for our customers
Combine and anonymize information about your interactions with Intuit to create aggregate, anonymized statistics for use in research (including by contracting with academic institutions) and for marketing, promoting, improving, and developing our platform

Marketing and advertising. We, our service providers and our third-party advertising partners may collect and use your personal information for marketing and advertising purposes to:

Market services, products and experiences, including to deliver gifts and promotional materials, product recommendations and other non-transactional communications via email, post, telephone, SMS or push notifications, in accordance with your marketing preferences.
Personalize your experience and tailor recommendations, advertising, and offers presented to you, including through the development of insights about you and your needs based on your interactions with the Intuit Platform’s products, services, and offerings.

Whistleblower Reporting.

When you report any concern of non-compliance, unethical conduct, or other alleged violation of our Code of Conduct and Ethics personal information you provide will be processed as a part of the investigation of the allegations and retained in accordance with our internal policies until the investigation is complete. While we make every effort to maintain confidentiality, depending on the investigation, disclosing your identity to other individuals may be necessary.

Compliance and protection. We may use your personal information to:

Protect against misuse or abuse of our Services and ensure compliance with our Terms of Service, including in relation to content our customers send or display through the Platform
Comply with legal and regulatory requirements
Protect the rights, property, safety or security of the Intuit Platform, our customers, employees or others and prevent fraudulent or illegal activity
Exercise our rights in the course of judicial, administrative, or arbitration proceedings
Enforce, remedy, or apply our Terms of Service or other agreements

With your consent. In some cases, we may specifically ask for your consent to use your personal information, such as when required by law.

We may process your personal information for other purposes that are compatible with the above purposes where permitted by applicable law.

Automated processing

To provide you with valuable personalized advice, recommendations and experiences, we may process your personal information using automated and manual (human) methods. Our automated methods include artificial intelligence (AI) and a range of technologies that help our services learn and reason to improve our ability to personalize and enhance your experience in the Intuit Platform.

Inferences

We may make inferences about you based on other personal information we have collected or otherwise received about you.

How we share your personal information

When you interact with our services.

We may share your personal information in the following circumstances:

For certain product features. We may use third party API services, such as YouTube and Twilio, for certain product features. If you choose to use those features, you acknowledge and agree that you are also bound by the third party’s privacy policy. You may manage your YouTube API data by visiting Google’s security settings page here. You may make choices about your Twilio API data by visiting Twilio’s privacy notice here.
When you connect with an Intuit Platform partner. You may be provided with offers, products, and services from third-party companies who integrate with our Intuit Platform (“Platform Partner”). If you choose to interact with a Platform Partner, apply for their services or offerings, or otherwise link or sync your account to a Platform Partner’s product or service, you consent and direct us to share your personal information to the Platform Partner providing the service or offering. For example, when we send your personal information to partners in order to generate offers for you to review, when we send your application information directly to our partners, or when we send you to the partner’s site for you to provide the information directly to them.

In some cases, if you click through to go to a Platform Partner’s site, you will automatically be sending your personal information to that Platform Partner. When this happens, you will still have to submit your application on the Platform Partner’s site. Remember that any information you provide to a Platform Partner, whether through us or on your own, will be subject to their privacy practices and terms and conditions.

When you connect to your social media account. Some of our features enable you to connect to a social media account or share information on social media platforms, like Facebook and Twitter. Any information you choose to share on social media may potentially be visible to a global audience and will be subject to the social media provider’s privacy policies (not this Privacy Statement). You should take care only to share information on social media that you are comfortable sharing.
For joint features, sales, promotions and events. With your consent we may share your personal information with third parties who are jointly providing features, sales initiatives, promotions or events with us.
When you publicly post the information. We may provide opportunities for you to publicly post reviews, questions, comments, suggestions, or other content that may include personal information, such as your name or username. Anything you share in a public forum is public, and you should think carefully before you decide to share.
With your wireless carrier. When you use your wireless device in connection with the Intuit Platform, you authorize your wireless carrier to use or disclose information about your account and your wireless device, if available, to Intuit or its service provider for the duration of your business relationship, solely to help them identify you or your wireless device and to prevent fraud.
When you participate in the short code program. Personal information collected through the short code program (i.e., when you sign up for SMS texts), will not be shared, sold, or rented to affiliated or unaffiliated third parties for their own marketing purposes.

Other circumstances.

We also share your personal information with third parties in the following circumstances.

For research. With appropriate controls, we may share information with third parties, such as academic institutions, government and non-profit organizations, for research purposes or to publish academic or policy-related materials. We only share information in a way that does not identify any individual.
With financial services providers. In connection with our financial products, we may share personal information with collection agencies, credit bureaus and loan services providers, and payment card association members. We may also share your personal information with other companies, lawyers, credit bureaus, agents, government agencies, and card associations in connection with issues related to fraud, credit, defaults, or debt collection.

With service providers or agents. We share personal information with our service providers or agents who provide services on our behalf for the purposes described in this Privacy Statement. Service providers or agents are required to implement reasonable privacy and information protection controls to maintain the privacy and security of information provided to them consistent with the privacy practices outlined in this Privacy Statement. Service providers or agents may include companies that assist us with our advertising, marketing, and sales efforts, help us with our technology offerings (such as a hosting, security or anti-fraud providers) and help us run our business.
For mergers and acquisitions. If we are involved with a merger, asset sale, financing, liquidation, bankruptcy, or the acquisition of all or part of our business to another company, we may share your personal information with that company and its advisors before and after the transaction date.
With our affiliates and subsidiaries and your right to limit information sharing. We may share your personal information with our affiliates and subsidiaries for everyday business purposes as described in this Statement, including for marketing purposes, for improving and developing our offerings, and for personalizing your experience on our Platform. Certain laws may provide you with the right to limit our information sharing activities in certain circumstances. Please review these rights in the “Region and state-specific terms” section below.
For advertising and analytics. Intuit may use advertising networks and other providers to display advertising on our Intuit Platform or to manage our advertising on other sites. Our advertising partners may place cookies on unaffiliated websites in order to serve advertisements that may be relevant to you based on your browsing activities and interests and determine the effectiveness of such advertisements. See also the “Region and state-specific terms” section below for additional information.

Intuit (excluding Credit Karma) responds to the Global Privacy Control signal for US residents, as described further in the United States section below. However, we do not respond to “Do Not Track” signals because there is no formal “Do Not Track” standard.

For legal reasons. We may share your personal information with third parties for legal reasons without your consent, and as permitted by law, including:

When we reasonably believe disclosure is required in order to comply with a subpoena, court order, or other applicable law, regulation or legal process;
To protect the rights, property, or safety of Intuit, TurboTax, the Intuit Platform, our customers or others;
To protect or defend against attacks;
To enforce, remedy, or apply our Terms of Service or other agreements;
To prevent fraud, cybersecurity attacks or illegal activity;
For debt collection; and
With regulatory agencies, including government tax agencies, as necessary to help detect and combat fraud and/or protect our customers, users and/or the Intuit Platform, or in required institutional risk control programs.

Your personal information rights and choices

Your choices

At Intuit, we believe that you have choices about information that pertains to you or your business.

We provide all customers with options to manage the privacy of their personal information.

Update your privacy settings. You may update your privacy settings by visiting your account settings.

Correct your personal information. You can edit and correct certain personal information at any time by changing it directly in our products and services.

Access your personal information. You may download a copy of the personal information we have about you by visiting your account, the Intuit Privacy Center, or by calling us toll-free at 1 (877) 261-6470. If your inquiry is specific to Credit Karma, visit the Credit Karma Help Center (for US members), the Credit Karma UK Help Centre (for Credit Karma UK members), or the Credit Karma Canada Help Centre (for Credit Karma Canada members). If your inquiry is specific to Mailchimp, visit the Mailchimp Privacy Rights Request Page.

Delete your personal information. You may ask us to delete your personal information by visiting your account settings or the Intuit Privacy Center or calling us toll-free at 1 (877) 261-6470. If your inquiry is specific to Credit Karma, visit the Credit Karma Help Center (for US members), the Credit Karma UK Help Centre (for Credit Karma UK members), or the Credit Karma Canada Help Centre (for Credit Karma Canada members). If your inquiry is specific to Mailchimp, please visit the Mailchimp Privacy Rights Request Page.

Cookies and other tracking technologies. You may be able to opt-out of interest based advertising by visiting the NAI Opt-Out Page or the Choices Opt-Out Page (or the Digital Advertising Alliance of Canada Opt-Out Page, if you are based in Canada) or by visiting the Intuit Privacy Center. If you reside in California, Connecticut, Colorado or Virginia, please refer to the relevant sections below under Region and state-specific terms for more information about opting out of tracking for targeted advertising purposes,or opting-out of sales and/or sharing.

Manage marketing communications from us. To update your marketing communication preferences, you can go to the marketing preference tools in your account settings or you may use the links below. You may also click unsubscribe at the bottom of the marketing emails. If you receive marketing text messages from us through Intuit’s SMS shortcode program, you may opt out of receiving further marketing text messages from us by replying STOP to the message. We do not sell or share any personal information collected with third parties for their own marketing or advertising efforts.

For more information, please visit:

Intuit communications preferences

Credit Karma US and Credit Karma UK communications preferences

Mailchimp communications preferences

Your Rights

Depending on where you live, you may also have certain state- or country-specific rights with respect to your personal information. Please see the Region and state-specific terms section for your country, below.

Verification

To help protect privacy and the security of your personal information, you may be asked to provide additional information to verify your identity and/or ownership rights before we can fulfill your data rights request. If we cannot verify your identity or your ownership rights to the data, we may not be able to service your request until you provide proper documentation.

Data retention

Unless you specifically ask us to delete your personal information, we retain your personal information as long as it is necessary to comply with our data retention requirements and provide you with services and the benefits of the Intuit Platform and successfully run our business. Even if you submit a deletion request, we may be required to maintain your personal information for as long as necessary to:

comply with our legal or regulatory compliance needs (e.g., maintaining records of transactions you have made with us);
to exercise, establish or defend legal claims; and/or
to protect against fraudulent or abusive activity on our service.

This means we may keep different information for different periods. If your account is canceled because you haven’t used it for a long time, we may delete this information immediately.

There may be occasions where we are unable to fully delete, anonymize, or de-identify your personal information due to technical, legal, regulatory compliance, or other operational reasons. Where this is the case, we will take reasonable measures to securely isolate your personal information from any further processing until such time as we are able to delete, anonymize, or de-identify it.

International data transfers

Unless you have provided us with consent to transfer your personal information, US Tax Preparation Information shall be processed and stored in the United States in accordance with applicable law.

With the exception noted above, Intuit reserves the right to store and process your personal information in the United States and in any other country where Intuit or its affiliates, subsidiaries, or service providers operate facilities in accordance with and as permitted by applicable laws and regulations. Some of these countries may have data protection laws that are different from the laws of your country (and, in some cases, may not be as protective).

When we transfer, store or process personal information outside of your jurisdiction (including to or in the

United States, as described above), we take appropriate safeguards to require that your personal information remain protected in accordance with this Privacy Statement and applicable law.

Some of these recipients of your personal information are located in countries for which the European Commission and/or UK Government (as and where applicable) have issued adequacy decisions, which means that these countries are recognized as providing an adequate level of data protection under applicable UK and/or European data protection laws and the transfer is therefore permitted under Article 45 of the GDPR.

Other recipients of your personal information are located in countries outside the EEA and/or the UK that are not the subject of an adequacy decision (for example, the United States). In these cases, we may use the Standard Contractual Clauses approved by the European Commission or, as may be applicable, the International Data Transfer Agreement approved by the UK Government, to help ensure your personal information is protected. For more information on the transfer safeguards we rely on, please contact us by using the details in the “How to contact us” section below.

Although not relied on for data transfers, Intuit (excluding Credit Karma) complies with the EU-U.S. Privacy Shield Framework and the Swiss-U.S. Privacy Shield Framework as set forth by U.S. Department of Commerce regarding the collection, use, and retention of personal information transferred from the European Union (EU), the United Kingdom (UK), and Switzerland to the United States. We are subject to the investigatory and enforcement powers of the Federal Trade Commission. You can find more information about Intuit’s and Mailchimp’s EU-U.S. and Swiss-U.S. Privacy Shield certification here.

Security of your personal information

We use reasonable physical, technical and organizational safeguards that are designed to protect your personal information. However, despite these controls, we cannot completely ensure or warrant the security of your personal information. You can find out more about how we protect your personal information here.

Changes to our Privacy Statements

From time to time we may change or update our Privacy Statement. We reserve the right to make changes or updates at any time. If we make material changes to the way we process your personal information, we will notify you by posting a notice in the Intuit Platform or on a community post; by sending you a notification; or by other means consistent with applicable law.

You can see when this Privacy Statement was last updated by checking the “last updated” date at the top of this Privacy Statement. Please review this Privacy Statement periodically to stay informed about how Intuit protects your privacy.

Children

Our services are not intended for or directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe we may have information from a child, please contact us.

How to contact us

If you have questions or comments about this Privacy Statement or our practices, please contact us.

You can submit Intuit privacy questions. Submit your privacy question here

You can submit Credit Karma privacy questions. Submit your privacy question here

You can submit Mailchimp privacy questions. Submit your privacy question here

If you have an unresolved privacy or information use concern or complaint that we have not addressed satisfactorily, please contact our U.S.-based third party dispute resolution provider (free of charge) at https://feedback-form.truste.com/watchdog/request.

Region and state-specific terms

Additional terms may apply to you based upon the country you reside in or the products you use. Please click the region or state that applies to you to learn more about additional terms and rights that may apply to you.

United States

If you are a resident of the United States, you may have the following rights and choices:

US Tax Preparation Information

Except as necessary to provide you with tax preparation services or as authorized by law, we will not use or disclose your Tax Preparation Information – including to Intuit’s affiliates and subsidiaries – unless you consent.

If you agree to share your Tax Preparation Information for purposes other than tax preparation services, including by sharing it with the Intuit Platform, your Tax Preparation Information will be handled in accordance with this Privacy Statement.

Gramm-Leach-Bliley Act

Intuit is a financial institution subject to the Gramm-Leach-Bliley Act (GLBA).

By using, accessing, or interacting with the Intuit Platform, you are consenting to receive notices about your financial privacy electronically.

Please find our GLBA Notice here.

California Residents

Scope. This section applies only to California residents. It describes how we collect, use, and share Personal Information of California residents in our capacity as a “business” under the California Consumer Privacy Act (“CCPA”) and your rights with respect to that Personal Information. For purposes of this section, the term “Personal Information” has the meaning given in the CCPA but does not include information exempted from the scope of the CCPA. Please note that we may claim legal exemptions for certain types of personal information and certain Intuit companies from all or certain parts of the CCPA. In some cases, we may provide a different privacy notice to certain categories of California residents, such as employees and job applicants, in which case that notice will apply instead of this section.

Personal Information that we collect, use, and disclose. The chart here summarizes the Personal Information we collect by reference to the categories of Personal Information specified in the CCPA, and describes our practices currently and during the 12 months preceding the effective date of this Privacy Statement. Information you voluntarily provide to us, such as in free-form webforms, may contain other categories of personal information not described in this chart.

Your California privacy rights. As a California resident, you have the rights listed below. However, these rights are not absolute, and in certain cases we may decline your request as permitted by law.

Access. You may request that we provide the following information about how we have collected and used your Personal Information during the past 12 months:
the categories of Personal Information we have collected about you,
the sources from which that information was collected,
the business or commercial purpose for collecting, selling, and/or sharing your Personal Information,
the categories of personal information we shared or sold about you,
the categories of third parties to whom we shared or sold personal information about you,
the categories of personal information we disclosed for a business purpose, and
the categories of third parties to whom we disclosed personal information about you for a business purpose.
Request a copy of your Personal Information. You may request a copy of the Personal Information in your Intuit account or visit our Intuit Privacy Center or call us toll-free at 1 (877) 261-6470. If your inquiry is specific to Credit Karma, visit the Credit Karma Help Center or email us at CCPArequests@creditkarma.com . If your inquiry is specific to Mailchimp, by visit the Mailchimp Privacy Rights Request Page or email us at personaldatarequests@mailchimp.com.

Correction. You can edit and correct your personal information at any time by changing it directly in our products and services.

Deletion. You may have the right, under certain circumstances, to request that we delete the personal information you have provided to us. You may delete your personal information in the Privacy section of your Intuit account or visit our Intuit Privacy Center or call us toll-free at 1 (877) 261-6470. If your inquiry is specific to Credit Karma, visit the Credit Karma Help Center or email us at CCPArequests@creditkarma.com . If your inquiry is specific to Mailchimp, by visit the Mailchimp Privacy Rights Request Page or email us at personaldatarequests@mailchimp.com.

Opt-out of Sales and/or Sharing. Like many companies, Intuit and Mailchimp use services that help deliver interest-based ads to you as described above. The California Consumer Privacy Act (“CCPA”) may classify our use of some of these services as “sharing” your Personal Information with the advertising partners that provide the services. You can opt-out of the “sharing” of your personal information by visiting the “Your California Privacy Rights” link in the footer of the Intuit website. In addition, if you are a visitor from California and have enabled a recognized opt-out mechanism on your browser, device, or platform, you will automatically be opted out of any “sharings” when you interact with our Services beginning on January 1, 2023. Please go here to learn more about enabling one such preference signal, the Global Privacy Control: https://globalprivacycontrol.org/#download. Intuit and Mailchimp do not sell personal information under the CCPA. Credit Karma does not sell or share personal information, and therefore does not offer a “Your California Privacy Rights” link on its website. We do not knowingly sell or share the personal information of individuals under 16 years of age.
Limit processing of sensitive personal information. We only use sensitive personal information as necessary for our (1) Service delivery and operations, (2) compliance and protection, (3) research and development, or (4) Service improvement and analytics purposes in accordance with CCPA. If we use sensitive personal information outside the permitted purposes of CCPA, we will provide you with the right to limit processing of sensitive personal information.
Non-discrimination. You have the right to be free from discrimination or retaliation related to your exercise of any of your California privacy rights.

Verification. In order to protect your personal information from unauthorized access or deletion, we may require you to verify your credentials before you can submit a rights request. If you do not have an account with us, or if we suspect your account has been accessed without your authorization, we may ask you to provide additional personal information for verification. For Credit Karma members, we may require that you confirm certain pieces of personal information that we have on file and/or log into your Credit Karma account. If we are subsequently unable to confirm your identity, we may refuse your rights request.

Authorized agents. You may use an authorized agent to submit a rights request. If you do so, the authorized agent must present signed written authorization to act on your behalf, and you will also be required to independently verify your own identity directly with us and confirm with us that you provided the authorized agent permission to submit the rights request. This verification process is not necessary if your authorized agent provides documentation showing that the authorized agent has power of attorney to act on your behalf under Cal. Prob. Code §§ 4121 to 4130. Learn more about instructions for authorized agents.

Transparency matters. Learn more about the requests we process by viewing our Privacy Rights Transparency Report .

Colorado Residents

Scope. This section applies only to Colorado residents. It describes how we collect, use, and share Personal Data of Colorado residents in our capacity as a business under the Colorado Privacy Rights Act (“CPA”) and your rights with respect to that Personal Data. For purposes of this section, the term “Personal Data” has the meaning given in the CPA but does not include information exempted from the scope of the CPA. Please note that we may claim legal exemptions for certain types of personal information and certain Intuit companies from all or certain parts of the CPA.

Your Colorado privacy rights. As a Colorado resident, you have the rights listed below. However, these rights are not absolute, and in certain cases we may decline your request as permitted by law.

Access. You may request a copy of the Personal Information in your Intuit account or visit our Intuit Privacy Center or call us toll-free at 1 (877) 261-6470. If your inquiry is specific to Credit Karma, visit the Credit Karma Help Center or email us at CCPArequests@creditkarma.com . If your inquiry is specific to Mailchimp, by visit the Mailchimp Privacy Rights Request Page or email us at personaldatarequests@mailchimp.com.

Correction. You can edit and correct your personal information at any time by changing it directly in our products and services.

Deletion. You may have the right, under certain circumstances, to request that we delete the personal information you have provided to us. You may delete your personal information in the Privacy section of your Intuit account or visit our Intuit Privacy Center or call us toll-free at 1 (877) 261-6470. If your inquiry is specific to Credit Karma, visit the Credit Karma Help Center or email us at CCPArequests@creditkarma.com . If your inquiry is specific to Mailchimp, by visit the Mailchimp Privacy Rights Request Page or email us at personaldatarequests@mailchimp.com.

Opt-out of tracking for targeted advertising purposes. You can submit requests to opt-out of tracking for targeted advertising purposes by visiting the “Manage Cookies” or “Privacy Settings” link in the footer of the Intuit website. For Mailchimp, you can submit requests to opt-out of tracking for targeted advertising purposes by visiting the “Cookie Preferences” link in the footer of the Mailchimp website. Intuit, Mailchimp and Credit Karma do not otherwise “sell” your Personal Data to third parties for monetary consideration.

Opt-out of profiling. You can opt-out of the automated processing of your Personal Data to evaluate, analyze, or predict personal aspects related to your economic situation, health, personal preferences, interests, reliability, behavior, location, or movements, to the extent this results in decisions that produce legal or similarly significant effects.

Sensitive Personal Data. We will not process your sensitive personal data without your consent.

Non-discrimination. You have the right to be free from discrimination related to your exercise of any of your Colorado privacy rights.

Authentication. In order to protect your Personal Data from unauthorized access or deletion, we may require you to verify your credentials before you can submit a rights request. If you do not have an account with us, or if we suspect that your account has been accessed without your authorization, we may ask you to provide additional personal information for verification. For Credit Karma members, we may require that you confirm certain pieces of personal information that we have on file and/or log into your Credit Karma account. If we are subsequently unable to confirm your identity, we may refuse your rights request.

Transparency matters. Learn more about the requests we process by viewing our Privacy Rights Transparency Report .

Connecticut Residents

Scope. This section applies only to Connecticut residents. It describes how we collect, use, and share Personal Data of Connecticut residents in our capacity as a business under the Connecticut Data Privacy Act (“CDPA”) and your rights with respect to that Personal Data. For purposes of this section, the term “Personal Data” has the meaning given in the CDPA but does not include information exempted from the scope of the CDPA. Please note that we may claim legal exemptions for certain types of personal information and certain Intuit companies from all or certain parts of the CDPA.

Your Connecticut privacy rights. As a Connecticut resident, you have the rights listed below. However, these rights are not absolute, and in certain cases we may decline your request as permitted by law.

Access. You may request a copy of the Personal Information in your Intuit account or visit our Intuit Privacy Center or call us toll-free at 1 (877) 261-6470. If your inquiry is specific to Credit Karma, visit the Credit Karma Help Center or email us at CCPArequests@creditkarma.com . If your inquiry is specific to Mailchimp, by visit the Mailchimp Privacy Rights Request Page or email us at personaldatarequests@mailchimp.com.
Correction. You can edit and correct your personal information at any time by changing it directly in our products and services.
Deletion. You may have the right, under certain circumstances, to request that we delete the personal information you have provided to us. You may delete your personal information in the Privacy section of your Intuit account or visit our Intuit Privacy Center or call us toll-free at 1 (877) 261-6470. If your inquiry is specific to Credit Karma, visit the Credit Karma Help Center or email us at CCPArequests@creditkarma.com . If your inquiry is specific to Mailchimp, by visit the Mailchimp Privacy Rights Request Page or email us at personaldatarequests@mailchimp.com.
Opt-out of tracking for targeted advertising purposes. You can submit requests to opt-out of tracking for targeted advertising purposes by visiting the “Manage Cookies” or “Privacy Settings” link in the footer of the Intuit website. For Mailchimp, you can submit requests to opt-out of tracking for targeted advertising purposes by visiting the “Cookie Preferences” link in the footer of the Mailchimp website. Intuit does not otherwise “sell” your Personal Data to third parties for monetary consideration.
Opt-out of profiling. You can opt-out of the automated processing of your Personal Data to evaluate, analyze, or predict personal aspects related to your economic situation, health, personal preferences, interests, reliability, behavior, location, or movements, to the extent this results in decisions that produce legal or similarly significant effects.
Sensitive Personal Data. We will not process your sensitive personal data without your consent.
Non-discrimination. You have the right to be free from discrimination related to your exercise of any of your Connecticut privacy rights.

Transparency matters. Learn more about the requests we process by viewing our Privacy Rights Transparency Report .

Virginia Residents

Scope. This section applies only to Virginia residents. It describes how we collect, use, and share Personal Data of Virginia residents in our capacity as a business under the Virginia Consumer Data Protection Act (“VCDPA”) and your rights with respect to that Personal Data. For purposes of this section, the term “Personal Data” has the meaning given in the VCDPA but does not include information exempted from the scope of the VCDPA. Please note that we may claim legal exemptions for certain types of personal information and certain Intuit companies from all or certain parts of the VCDPA.

Your Virginia privacy rights. As a Virginia resident, you have the rights listed below. However, these rights are not absolute, and in certain cases we may decline your request as permitted by law.

Access. You may request a copy of the Personal Information in your Intuit account or visit our Intuit Privacy Center or call us toll-free at 1 (877) 261-6470. If your inquiry is specific to Credit Karma, visit the Credit Karma Help Center or email us at CCPArequests@creditkarma.com . If your inquiry is specific to Mailchimp, by visit the Mailchimp Privacy Rights Request Page or email us at personaldatarequests@mailchimp.com.
Correction. You can edit and correct your personal information at any time by changing it directly in our products and services.

Deletion. You may have the right, under certain circumstances, to request that we delete the personal information you have provided to us. You may delete your personal information in the Privacy section of your Intuit account or visit our Intuit Privacy Center or call us toll-free at 1 (877) 261-6470. If your inquiry is specific to Credit Karma, visit the Credit Karma Help Center or email us at CCPArequests@creditkarma.com . If your inquiry is specific to Mailchimp, by visit the Mailchimp Privacy Rights Request Page or email us at personaldatarequests@mailchimp.com.

Opt-out of tracking for targeted advertising purposes. You can submit requests to opt-out of tracking for targeted advertising purposes by visiting the “Manage Cookies” or “Privacy Settings” link in the footer of the Intuit website. For Mailchimp, you can submit requests to opt-out of tracking for targeted advertising purposes by visiting the “Cookie Preferences” link in the footer of the Mailchimp website. Intuit does not otherwise “sell” your Personal Data to third parties for monetary consideration.
Opt-out of profiling. You can opt-out of the automated processing of your Personal Data to evaluate, analyze, or predict personal aspects related to your economic situation, health, personal preferences, interests, reliability, behavior, location, or movements, to the extent this results in decisions that produce legal or similarly significant effects.
Sensitive Personal Data. We will not process your sensitive personal data without your consent.
Non-discrimination. You have the right to be free from discrimination related to your exercise of any of your Virginia privacy rights.

Transparency matters. Learn more about the requests we process by viewing our Privacy Rights Transparency Report .

United States contact information:

Intuit Inc.

Attention: Privacy

2800 E Commerce Center Place

Tucson, AZ 85706

You can contact the Intuit Data Protection Officer here.

Credit Karma LLC

Attention: Legal Department

PO Box 30963

Oakland CA 94604

legal@creditkarma.com

Mailchimp

The Rocket Science Group LLC d/b/a Mailchimp

Attn: Privacy Officer

675 Ponce de Leon Ave NE, Suite 5000

Atlanta, GA 30308

privacy@mailchimp.com

Australia

If you are a resident of Australia, you may have the following rights and choices:

Update your privacy settings. You may update your privacy settings by visiting your account settings.

Manage marketing communications from us. To update your marketing communication preferences, you can go to the marketing preference tools in your account settings.

Access, Correction or Deletion. You may request to access, to correct or to delete your personal information. You can edit and correct your personal information at any time by changing it directly in our products and services. To make a request for access or deletion of your personal information, contact us through the link below.

Objection and Restriction. You may object to our processing of your personal information, including for marketing purposes, or ask us to restrict processing of your personal information. To object to data processing or request a restriction, contact us through the link below. If you request that we stop processing some or all of your personal information or you withdraw (where applicable) your consent for our use or disclosure of your personal information for purposes set out in this privacy notice, we might not be able to provide you all of the Services and customer support offered to our users and authorized under this Notice.

Australia contact information:

Visit the QuickBooks Australia website to learn how to contact their support team. Go to QuickBooks Australia

Intuit Australia Pty. Limited

Level 34, 1 O'Connell St.

Sydney, NSW 2000 Australia

Brazil

Legal Basis of Processing

We use your personal information only as permitted by law. Applicable Brazil data protection law requires us to have a “legal basis” for each purpose for which we collect your personal information. Our legal basis for collecting and using the personal information described in this Privacy Statement will depend on the type of personal information and the specific context in which we collect it. However, we will normally process personal information from you when:

We have your consent to do so;
We have a contract with you and it is necessary to process your personal information to perform our contract with you, including to provide you with the benefits of the Intuit Platform and operate our business;
The processing is in our legitimate business interests, such as operating our businesses, improving and developing the Intuit Platform, communicating with you, marketing our offerings and services and personalizing your experience, and to detect illegal activities; and/or
To comply with legal requirements, including applicable laws and regulations.

Sharing with Credit Bureaus

If you are located in Brazil and have requested the canceling of your registration on each of our partners as allowed by Brazilian Federal Law No. 12,414/2011, we will not be able to provide you any more personalized recommendations based on your credit profile.

If you are a resident of Brazil, you may have the following rights and choices:

Update your privacy settings. You may update your privacy settings by visiting your account settings.

Manage marketing communications from us. To update your marketing communication preferences, you can go to the marketing preference tools in your account settings.

Access, Correction, Anonymization or Deletion. You may request to access, to correct, to anonymize or to delete your personal information. You may request a copy of your personal information in your Intuit account or by contacting us through the contact information below. You can edit and correct your personal information at any time by changing it directly in our products and services. You may request for us to delete or anonymize your personal information in your Intuit account or by contacting us through the contact information below.

Objection and Restriction. You may object to our processing of your personal information or ask us to restrict processing of your personal information. You may request objection, restriction and portability rights by contacting us through the contact information below.

Portability. You may request portability of your personal information.

Withdraw Consent. If we have collected and processed your personal information with your consent, you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent.

File a complaint. You have the right to file a complaint with a supervisory authority about our collection and processing of your personal information.

Brazil contact information

Visit the QuickBooks Brazil website to learn about the various ways to contact their support team. Go to QuickBooks Brazil

Intuit Brasil Serviços de Informática LTDA.

Av. Brigadeiro Faria Lima, nº 3900, 9th floor

São Paulo / SP - Brazil CEP 04358-132

If you have questions or concerns that have not been addressed by this Privacy Statement, you can contact Barbara Sondag, Data Protection Officer at Intuit Brasil Serviços de Informática Ltda. here.

Canada

While we take steps to maintain protection of your personal information, your personal information may be disclosed in response to valid demands or requests from governments, regulators, courts and law enforcement authorities in those other jurisdictions or countries.

If you are a resident of Canada, you may have the following rights and choices:

Update your privacy settings. You may update your privacy settings by visiting your account settings.

Manage marketing communications from us. To update your marketing communication preferences, you can go to the marketing preference tools in your account settings. You may also click unsubscribe at the bottom of the marketing emails.

Cookies and other tracking technologies. You may be able to opt-out of interest based advertising by visiting the Digital Advertising Alliance of Canada Opt-Out Page, NAI Opt-Out Page and the Choices Opt-Out Page.

Access, Correction or Deletion. You may make a request to access, to correct or to delete your personal information (provided we no longer have a business need to retain your personal information). You may request a copy of the Personal Information or delete the personal information in your Intuit account. If your inquiry is specific to Credit Karma, visit the Credit Karma Help Center . If your inquiry is specific to Mailchimp, by visit the Mailchimp Privacy Rights Request Page or email us at personaldatarequests@mailchimp.com.You can edit and correct your personal information at any time by changing it directly in our products and services. Even if you request for your personal information to be deleted, certain aspects may be retained for us to: meet our legal or regulatory compliance (e.g. maintaining records of transactions you have made with us); exercise, establish or defend legal claims; and to protect against fraudulent or abusive activity on the Intuit Platform. Data retained for these purposes will be handled as described in “Data Retention”.

Withdraw consent. You can withdraw your consent at any time to collection, use and disclosure of your personal information. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent.

File a complaint. You have the right to file a complaint with the applicable Privacy Commissioner about our collection and processing of your personal information.

Canada contact information:

Intuit Canada

Attention: Privacy

Spectrum Way

Mississauga, ON

L4W 5S2

You can contact the Intuit Data Protection Officer here.

Credit Karma LLC

Attention: Privacy Officer

PO Box 30963

Oakland CA 94604

legal@creditkarma.com

If your inquiry is specific to Credit Karma, you can visit the Credit Karma Help Centre. You can also email the Credit Karma Canada Privacy Officer by writing to legal@creditkarma.ca.

The Rocket Science Group LLC d/b/a Mailchimp

Attn: Privacy Officer

675 Ponce de Leon Ave NE, Suite 5000

Atlanta, GA 30308 USA

If your inquiry is specific to Mailchimp, you can visit the Mailchimp Help Centre, or write to privacy@mailchimp.com.

India

Where data of Indian individuals are involved, you hereby agree that the “reasonable security practices and procedures” under section 43A Explanation (ii) of the Information Technology Act, 2000 means this Intuit’s Privacy Statement and such data security procedures that Intuit may implement from time to time and which may, in Intuit’s discretion, be informed to you from time to time.

What you can do to manage your privacy

You have choices when it comes to managing the privacy of your personal information.

Update your privacy settings. You may update your privacy settings by visiting your account settings.

Manage marketing communications from us. To update your marketing communication preferences, you can go to the marketing preference tools in your account settings.

Correct your personal information. You can edit and correct your personal information at any time by changing it directly in our products and services.

India contact information

Visit the QuickBooks India website to learn how to contact their support team. Go to QuickBooks India

Intuit Technology Services Private Limited

Campus 4A, PrITech Park (Ecospace)

7th and 8th Floor, Belandur Village

Varthur Hobli, Bangalore East Taluk

Bangalore - 560 103 India

Mexico

If you are a resident of Mexico, you may have the following choices and rights known as “ARCO rights”:

You have choices when it comes to managing the privacy of your personal information and exercising your ARCO rights. Please note that we are required to verify your request prior to exercising your rights. After we have received a request, our response will indicate whether the request for access, rectification, cancellation or opposition is appropriate and, if so, the determination will be made within 15 business days from such date. The deadlines may be extended under the terms set out in the applicable laws.

Access. You have the right to know what personal data we have about you, what we use it for and the conditions of use we give to it. Electronic copies of your personal data will be provided if you exercise your right of access. You may request a copy of your personal information in your Intuit account or by contacting us through the contact information below. When making a request, please provide a clear and precise description of the personal data you wish to access any other element that facilitates the location of your data.

Rectification. You have the right to request the correction of your personal data if it is outdated, inaccurate, or incomplete (Rectification). You can edit and correct your personal information at any time by changing it directly in our products and services.

Deletion/Cancellation. You have the right to request that we remove your personal information from our records or databases when you consider that it is not being used in accordance with the principles, duties, and obligations provided for in the applicable laws. You may request for us to delete your personal information in your Intuit account or by contacting us through the contact information below. When making a request, please provide a clear and precise description of the personal data you wish to delete/cancel or any other element that facilitates the location of your data.

Opposition/Rejection. You have the right to oppose the use of your personal data for specific purposes. You may request objection, restriction and portability rights by contacting us through the contact information below. When making a request, please provide a clear and precise description of the personal data you wish to oppose, or any other element that facilitates the location of your data.

Update your privacy settings. You may update your privacy settings by visiting your account settings.

Manage marketing communications from us. To update your marketing communication preferences, you can go to the marketing preference tools in your account settings.

How to limit the use and disclosure of your personal information

If you are a resident of Mexico, you also have the right to limit the use or disclosure of your personal information by contacting us through the contact information below.

How to withdraw your consent

If you are a resident of Mexico, you also have the right to withdraw your consent for our processing of your personal information by contacting us through the contact information below.

Mexico contact information

Visit the QuickBooks Mexico website to learn how to contact their support team. Go to QuickBooks Mexico

Intuit QuickBooks Mexico

Montes Urales 424

Lomas de Chapultepec sección V

11000 CDMX, México

If you have questions or concerns that have not been addressed by this Privacy Statement, you can contact the Intuit Data Protection Officer here.

United Kingdom (UK) and European Economic Area (EEA)

Personal Information

References to “personal information” in this Privacy Statement are equivalent to “personal data” governed by EU and UK data protection laws. Essentially, “personal data” is information about an individual, where that individual is either directly identified or can be identified. It does not include ‘anonymous data’ (i.e., information where the identity of an individual has been permanently removed).

Legal Basis of Processing

We use your personal information only as permitted by law. Applicable EEA and UK data protection law requires us to have a “legal basis” for each purpose for which we collect your personal information. Our legal basis for collecting and using the personal information described in this Privacy Statement will depend on the type of personal information and the specific context in which we collect it. However, we will normally process personal information from you when:

We have your consent to do so;
We have a contract with you and it is necessary to process your personal information to perform our contract with you, including to provide you with the benefits of the Intuit Platform and operate our business;
The processing is in our legitimate business interests, such as operating our businesses, improving and developing the Intuit Platform, communicating with you, marketing our offerings and services and personalizing your experience, and to detect illegal activities; and/or
To comply with legal requirements, including applicable laws and regulations.

For residents in the UK searching for a credit card or a personal loan through the Intuit Platform, we may share your personal information, including your contact details, date of birth, as well as the information you give us about your employment, income, and housing and employment expenses with third parties to determine your eligibility, including HD Decisions, Capital One and Monevo. You can find more information about their data protection practices in their privacy policies:

HD Decisions

Capital One

Monevo

If you are a resident of the UK or EEA, you may have the following rights and choices:

Update your privacy settings. You may update your privacy settings by visiting your account settings.

Access, Correction or Deletion. You may request to access, to correct or to delete your personal information.

You may request a copy of your personal information in the Privacy tab of your account or by visiting our GDPR Centre (UK) or GDPR Centre (FR) or GDPR Centre (EU). If your inquiry is specific to Credit Karma UK, you may request a copy of your personal information by visiting Credit Karma’s Help Centre. If your inquiry is specific to Mailchimp, you may request a copy of your personal information by visiting Mailchimp’s Privacy Rights Request page.
You can edit and correct your personal information at any time by changing it directly in our products and services.
You may request for us to delete your personal information in the Privacy tab of your account or through our GDPR Centre (UK) or GDPR Centre (FR) or GDPR Centre (EU). If your inquiry is specific to Credit Karma UK, you may request for us to delete your personal information by visiting Credit Karma’s Help Centre. If your inquiry is specific to Mailchimp, you may request for us to delete your personal information by visiting Mailchimp’s Privacy Rights Request page. Please note that even if you request for your personal information to be deleted, certain aspects may be retained for us to: meet our legal or regulatory compliance (e.g. maintaining records of transactions you have made with us); exercise, establish or defend legal claims; and to protect against fraudulent or abusive activity on our Service. Data retained for these purposes will be handled as described in the section “Data Retention”.

Objection and Restriction. You may object to our processing of your personal information or ask us to restrict processing of your personal information.

Portability. You may request portability of your personal information.

Withdraw Consent. If we process your personal information with your consent, you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent.

File a complaint. You have the right to file a complaint with a supervisory authority about our collection and processing of your personal information. You can find your data protection regulator here.

Manage marketing communications from us. To update your marketing communication preferences, you can go to the marketing preference tools in your account settings or visit our GDPR Centre (UK) or GDPR Centre (FR) or GDPR Centre (EU) or Mailchimp’s Privacy Rights Request page. You may also click unsubscribe at the bottom of the marketing emails.

Cookies and other tracking technologies. You may be able to opt-out of such interest-based advertising by visiting Network Advertising Initiative or Your Online Choices or by visiting our GDPR Centre (UK) or GDPR Centre (FR) or GDPR Centre (EU) or Mailchimp’s Privacy Rights Request page.

UK and EEA Legal Representative

Intuit Inc.:

In the UK: Intuit Ltd. (contact details can be found in the section below)
In the EEA: Intuit Inc. and Intuit UK Limited have each appointed Intuit France SAS as its Legal Representative in the European Union in accordance with Regulation (EU) 2016/679 (contact details can be found in the section below).

Mailchimp:

In the UK: Bird & Bird GDPR Representative Services UK (contact details can be found in the section below).
In the EEA: Bird & Bird GDPR Representative Services Ireland (contact details can be found in the section below).

United Kingdom and EEA contact information

Intuit Limited

Attention: Intuit Data Protection Administration,

Cardinal Place, 80 Victoria Street, London,

United Kingdom, SW1E 5JL

https://quickbooks.intuit.com/uk/gdpr/

Credit Karma UK Limited

4th Floor

One New Oxford Street

London WC1A 1NU

Intuit France SAS

Intuit Data Protection Administration

7 rue de la Paix 75002 Paris, France

https://quickbooks.intuit.com/fr/gdpr/ or https://quickbooks.intuit.com/eu/gdpr/

The Rocket Science Group LLC d/b/a Mailchimp

Bird & Bird GDPR Representative Services Ireland

Deloitte House

29 Earlsfort Terrace

Dublin 2

DO2 AY28

Bird & Bird GDPR Representative Services UK

12 New Fetter Lane

London

EC4A 1JP

United Kingdom

If you have questions or concerns that have not been addressed by this Privacy Statement, you can contact the Intuit Data Protection Officer here, the Credit Karma Data Protection Officer by writing to dpo@creditkarma.co.uk and Mailchimp by writing to privacy@mailchimp.com.