Who We Are and How to Contact Us

When it comes to your personal data, Gen Digital Inc. and its subsidiaries (collectively referred to as “Gen”, “we”, or “us”), as well as our employees, contractors, and service providers, are committed to providing you with transparency. We process personal data in accordance with applicable legislation.

This privacy notice applies to our processing of personal data in connection with the Neo browser. In this notice, we describe how we collect, process, use and disclose personal data, and your rights and choices regarding our processing of your personal data.

If you are in the European Economic Area, the controller of your personal data is:

NortonLifeLock Ireland Limited

Ballycoolin Business Park

Blanchardstown

Dublin 15

Ireland D15E867

What Personal Data We Collect

We aim to collect only the personal data that we truly need to provide and improve Neo and its features. Neo is not directed to, nor do we knowingly collect data from, minors (as defined by applicable law). The categories of data we may collect include:

• Information You Provide Directly: If you sign up for early access, create an account, or contact us for support, we may collect identifiers like your name, email address, or other contact details. If you participate in feedback programs or surveys, we collect any information you choose to give us (such as feedback comments).

• Browser Usage Data: Neo may collect data about how you use the browser, such as feature usage events, crash and error reports, performance metrics, and aggregated statistics. This can include internet or electronic activity information like the URLs of websites you visit or search queries, but only as necessary for features like AI-driven assistance or security scanning. For example, if a webpage looks suspicious, Neo’s security features might log or send the URL to check if it’s malicious. Routine browsing history, however, is typically stored locally on your device (see Local vs. Cloud Processing below). We do not collect the actual content of your private web communications (such as the text of your emails or messages) unless you actively use a feature that requires it (such as having Neo’s AI summarize an email at your request).

• Device and Technical Information: We collect device-specific data to ensure Neo works properly on your system. This includes things like your device type, operating system version, browser version, unique device identifiers or installation IDs, network connection type, and general location inferred from your IP address.

• Data from Google Services (Gmail and Calendar Integration): If you choose to connect Neo with your Google Gmail account or Google Calendar, we will, with your permission, access your Gmail and Calendar data on your behalf to provide features you request. We access this data only when you actively use the related feature. We do not download or store your raw email content or calendar entries on our servers. The content from Gmail/Calendar is processed transiently (see Google API Integration below for more details).

• Sensitive Personal Data: We do not actively seek or require any special categories of personal data (such as information about your race, political opinions, health, or biometric identifiers) for you to use Neo. In fact, Neo is designed to work without needing such data. However, because Neo acts as a general-purpose browser and assistant, it might process sensitive information only if you choose to input or access it through the browser. For instance, if you view a medical record via Neo or ask the AI assistant about an email that contains health information, that sensitive content will be handled with the same care as all other data (and only for the purpose of fulfilling your request). We will never use such sensitive data to profile you or for any purpose other than delivering the features you actively use.

How We Use Your Personal Data (Purposes and Legal Bases)

We use personal data strictly for valid and lawful purposes in line with data protection laws like the GDPR. In this section we explain why we process your data and the legal basis that allows us to do so. We will not use your data in a way that is incompatible with these purposes:

• Providing and Improving the Service (Performance of a Contract & Legitimate Interests): We process data to operate Neo and provide its features to you. This includes using your data to render web pages, manage your tabs and bookmarks, run the AI assistant features you request, and integrate with services like Gmail/Calendar at your direction. It also includes maintaining and improving the browser’s performance and capabilities – for example, diagnosing crashes or slowdowns and refining our AI algorithms. The legal basis for these core activities is usually “performance of a contract” (where our Terms of Service with you require us to provide the browser’s functionality), and/or our legitimate interest in ensuring our product works well. We consider these uses to also benefit you as the user.

• Security and Fraud Prevention (Legitimate Interests & Legal Obligation): Your safety online is one of our top priorities. We use personal data to protect you and other users from threats such as malicious websites, phishing attempts, viruses, and other harmful activity. For example, Neo’s Norton WebShield feature may check a URL you are about to visit against known threat databases, and could send a fragment of that URL or file to our cloud security service for real-time analysis. We also monitor for bugs or abuse of our services (like repeated login failures which could indicate a bot). The legal basis for processing data for security purposes is our legitimate interest in keeping our services and users secure, and in some cases compliance with legal obligations (such as record-keeping requirements for security incidents).

• AI-Powered Features (Performance of a Contract): A hallmark of Neo is its AI-driven functionality that works like your personal assistant. When you use features like Unified Search and Chat, we will process relevant personal data to deliver this feature. This may involve sending your queries or the content you’re asking Neo about to our AI processing backend (which may be powered by Google Vertex AI or OpenAI) in order to generate answers or actions. We do this only when you invoke these features (for example, when you ask a question or click an AI suggestion card). The legal basis here is typically the performance of our contract with you – these are features you have chosen to use, and we process your data to fulfill that request. In some jurisdictions, using these features may also be considered as you giving us consent to handle that data (since you actively trigger the feature), and you can always choose not to use these optional AI features if you prefer not to send any data to the cloud.

• Communicating with You (Legitimate Interests or Consent): We may use your contact information (like your email) to send you service-related communications. These include onboarding materials, feature updates, security alerts, and important privacy or terms changes. The legal basis for essential service communications is our legitimate interest in keeping you informed about the product and how to use it, or in some cases legal obligation (e.g., notifying you of a data breach). We might also send optional marketing communications about Neo or related Norton services – but we will only do so with your consent where required by law. You have the choice to opt out of marketing emails at any time.

• Analytics and Product Research (Legitimate Interests): To make Neo better, we analyze aggregated usage data and may run user surveys or feedback programs. For example, we might track how often a new feature is used or what the general click-through rate is on an AI suggestion, to understand if it’s helpful. We might also record anonymized statistics like “X% of Neo users also enabled Gmail integration.” We carry out these analytics under our legitimate interest in improving the product. Wherever feasible, we use anonymization or de-identification for analytics.

• Compliance with Legal Obligations: When required, we will process and retain personal data to comply with laws and regulations. For instance, we may need to keep certain transaction records for tax and accounting, or to fulfill data retention obligations under cybersecurity laws. We might also need to disclose information in response to valid legal requests (such as a court order or law enforcement request). The legal basis for this processing is compliance with a legal obligation. When we receive government or law enforcement requests, we scrutinize them carefully and only comply if we are legally required to do so.

We will not use your personal data for any new purpose that isn’t compatible with the above without asking your permission. We also do not use your personal data for automated decisions that produce legal or similarly significant effects on you. Its AI features are there to assist you, not to make authoritative decisions about you.

Local vs. Cloud Processing (Where Your Data Gets Processed)

Neo is designed with a “privacy-first” architecture: this means we try to do as much processing on your device (locally) as possible, and only send data out to our servers or third-party services when necessary for a feature. Here’s how that works in practice:

• On-Device Processing: Most of your browsing data remains on your local device and is never sent to us. This includes your browsing history, the actual contents of webpages you visit, any passwords or form data you save in the browser, cookies and site data, and similar personal browsing information. Neo stores these locally on your computer for your convenience (just like other browsers store your history and login data locally). The default behavior is that your private browsing activities stay private to you on your device.

• Cloud Processing for AI and Safety Features: Some features of Neo leverage powerful cloud-based AI models and online services, which by nature require sending a snippet of data over the internet. We only send what is necessary, and only when necessary. For instance, if you use the AI chat/search bar to ask “What’s a summary of this article?” Neo will take the article text (which is on your device) and send the relevant portion to our cloud AI service to generate a summary. This happens securely over encryption, and the data is used transiently to return a result to you. Another example is Norton WebShield: if you navigate to a brand-new website that’s not in Neo’s local safe list, the browser may query Norton’s cloud reputation service with the site’s address to determine if it’s safe. In doing so, Neo might send the domain name or URL to our server, which checks it against threat intelligence databases.

• Hybrid Approach for Google Integrations: When you connect Gmail or Google Calendar (see next section), Neo fetches data from Google’s servers on the fly when you need it. For example, if you open Neo’s interface to view some of your recent Gmail messages, Neo will retrieve those messages from Google via their API at that moment and display them to you. This retrieval happens directly and securely between the browser and Google – it is not first piped through our own servers in raw form. If any further processing is needed (like using AI to summarize an email), Neo will then send only the required text to our cloud AI service. Crucially, Neo does not store the email or event content on our side; it lives on Google’s systems and your device during use. We treat these connected-service interactions with extra care due to their potentially sensitive nature.

In summary, Neo’s philosophy is local-first. We want your device to handle as much as it can. We only invoke cloud processing to give you functionality that wouldn’t be possible otherwise (for example, the magic of large AI models, or up-to-the-minute threat intelligence).

Google API Integration (Gmail & Google Calendar)

Some of Neo’s advanced features allow you to seamlessly integrate your Google Gmail inbox and Google Calendar so that Neo’s AI can help you manage emails and appointments. This is entirely optional – Neo will only access your Google data if you choose to link your account and grant permission. Here’s what happens if you do:

• OAuth Permission and Limited Scope: When you connect your Google account, you will be shown an OAuth consent screen from Google listing the specific permissions (scopes) that Neo is requesting. We have engineered Neo to ask only for the minimal scopes necessary. For example, to integrate Gmail, Neo might request read access to your email messages and basic profile info; for Calendar, it might request access to view and manage your calendar events.

• Short-Lived Access & No Offline Storage: After you grant permission, Neo receives an authorization token from Google. Neo uses this token to make requests (like “retrieve the latest emails” or “check calendar for tomorrow’s events”) when you use the related feature. Neo does not permanently store your raw Gmail or Calendar content on our systems at all. Emails and events are fetched in real time to your device (so you can view them or have the AI process them) and then they reside only in the browser’s memory/local storage as needed.

• Google’s Limited Use Policy: We comply with Google’s requirements for apps that connect to Google API Services (Google API Services User Data Policy). In plain terms, this means we only use your Google data for the features you expect and nothing else. We do not allow any human at Neo (or Gen) to read your Gmail/Calendar data. We do not use your Gmail or Calendar information to serve you ads or for any other unrelated purpose.

Remember, you can revoke Neo’s access to your Google account at any time via your Google account security settings or within Neo’s settings. This will prevent Neo from accessing any further Gmail/Calendar data until you grant access again.

Data Minimization and Protection of Your Data

We embrace the principles of data minimization, security, and privacy-by-design. This means:

• Only What’s Needed: We only collect and process the minimum data required to achieve each purpose described in this notice. If we don’t need certain data for a feature, we won’t collect it.

• Security Measures: We protect all personal data we hold with strong security measures. This includes technical measures like encryption in transit (your data is encrypted when it travels from your browser to our servers or to our partners like Google or OpenAI) and encryption at rest (any data we store is encrypted on our servers or databases). Our infrastructure is secured and regularly tested for vulnerabilities. We also impose strict access controls – only authorized personnel with a valid need can access personal data, and they are bound by confidentiality obligations. Our developers and staff are trained in privacy and security best practices. Additionally, if a third-party contractor or service provider processes data for us, they must meet our security standards and are subject to contractual privacy obligations.

• Special Handling of Sensitive Data: Although Neo’s normal operation doesn’t require sensitive personal data, any that is processed (for example, content of emails, or if you happen to browse websites revealing sensitive information) is protected just the same. We do not use sensitive data for any purpose other than what you intend.

How We Share Personal Data (Third-Party Disclosures)

We do not share your personal data with third parties for their own marketing or advertising purposes. However, we do share certain data with third parties in the following contexts, each of which is governed by strict agreements to protect your information:

• Service Providers (Processors): We use trusted third-party companies to help us run Neo and support our operations. These include:

o Cloud Infrastructure and AI Providers: We leverage cloud services like Google Cloud (Vertex AI) and OpenAI to power Neo’s AI features. When you use an AI feature, relevant data is sent to these providers to process your request (for example, to generate a chat answer or summarize text). We have contracts and data processing agreements in place with these providers to ensure your data is only used to deliver the service to us. They are not allowed to use your data for their own purposes (such as improving their models or for advertising).

o Analytics and Diagnostics: We may use services like Google Analytics or Firebase Analytics to gather crash reports and aggregated usage stats. These services act on our behalf to provide insights like what features are most popular or how often the app crashes. Data sent to analytics providers is limited to technical information and usage events; it does not include things like your emails or the content of websites you visit.

o Customer Support and CRM: We use customer relationship management tools (for example, for handling support tickets or early access user feedback). If you contact us for support, your contact info and description of the issue may be stored in these systems. The service providers operating these tools are bound to use your data only to assist us in servicing you.

o Email or Notification Services: If we send out emails (like an early access invite or a privacy notice update), we might use an email delivery service provider. They get access to your email address and the content of the email to send it on our behalf, but cannot use that information for anything else.

In all cases, our service providers are bound by data processing agreements under which they must: use the data only for our specified purposes, keep it secure, and delete or return it to us when no longer needed.

• Affiliates: Gen is a global company with subsidiaries and affiliates (such as NortonLifeLock entities in different countries). We may share data with our corporate family as needed to operate the product and provide services to you. For example, if you are in Europe and require support, a Norton support team in another country might assist you, accessing minimal data necessary (like your account email or support history). All Gen affiliates follow the same privacy and security commitments described here. Internal transfers of personal data between our group entities are covered by inter-company agreements that incorporate Standard Contractual Clauses and other safeguards for international data transfers (see International Data Transfers below).

• Business Transfers: If we ever reorganize, merge with another company, or sell some part of our business, your data may be transferred as part of that transaction. For instance, if Neo is acquired by or merged with another organization, your data would likely be one of the assets transferred to the new owner so they can continue providing the service to you. We will provide notice (for example, via email or a prominent notice in the app) if your personal data becomes subject to a new privacy notice due to a corporate change.

• Legal and Safety Disclosures: We may disclose personal data outside our company if we believe in good faith that such disclosure is necessary to (a) comply with any applicable law, regulation, legal process, or enforceable governmental request (for example, to respond to a court order or a subpoena); (b) enforce our terms of service or other agreements, or investigate potential violations thereof; or (c) protect the rights, property, or safety of Neo/Gen, our users, or the public as required or permitted by law. We will only do this after careful review and only provide the minimum information required. Whenever legally and practically possible, we will inform you if we have to disclose your data in this way.

No Sale of Personal Information: We want to re-emphasize that we do not sell your personal data. In the context of U.S. state privacy laws (like the CCPA/CPRA in California), “sell” often means sharing personal data with third parties in exchange for money or other benefits for purposes other than those related to providing you the service. We do not do this. We also do not share your data for targeted advertising purposes (sometimes called “sharing” under California law). All data sharing we engage in is strictly for the business and product purposes outlined above.

Data Retention: How Long We Keep Your Data

We keep your personal data as long as we need it to provide you with our services, to comply with legal obligations or protect our or other’s legitimate interests. Often, there are different reasons to keep a specific piece of information that overlap and influence each other.

When determining the specific retention period, we take into account various criteria, such as the type of service provided to you, the nature of our relationship with you, and mandatory retention periods provided by law and the relevant statute of limitations.

International Data Transfers

We are a global company that processes personal data in many countries. As part of our business, we may transfer data across the Gen group, its subsidiaries and affiliates, and third-party vendors of Gen located worldwide, including Avast, Avira, LifeLock and Norton entities. Data can be located in places where we offer our products or have our offices, infrastructure or data centers, including Europe and the United States.

Transfers of your personal data within Gen and its subsidiaries and affiliates are done pursuant to our intra-group data transfer agreement including EU Commission-approved standard contractual clauses (SCCs). At the same time, intra-group transfers within the Gen group are covered by the EU-U.S. Data Privacy Framework, UK Extension to the EU-U.S. Data Privacy Framework and Swiss-U.S. Data Privacy Framework as set forth by the U.S. Department of Commerce regarding the transfer of personal information from the European Economic Area (EEA), the United Kingdom, and Switzerland to the United States. Click here to access the Gen Digital Inc. Data Privacy Framework Notice.

Before we transfer data to third parties, we look at the risks to the data associated with such transfer. We require third parties to maintain the same protections over your data that we provide directly. For data originating from the European Economic Area we rely on standard contractual clauses (SCCs), where applicable, to ensure your data rights are protected. To request a copy of the SCCs, please contact us at our contact details specified below.

Situations where we transfer Personal Data outside of the EEA include: allowing access to personal data stored in the cloud (such as Google Cloud Platform) to personnel located outside the EEA, the provisioning of our products and services and third-party services related to it and the delivery of support services.

Your Privacy Rights

Depending on your location and applicable law, you may have certain rights regarding your personal data. We honor all rights granted to users under GDPR (for EU residents) and similar laws, as well as rights under laws like the California Consumer Privacy Act (CCPA) for California residents (see California Privacy Disclosures below). Here is a summary of the rights that might be available to you and how you can exercise them:

• Right to Access: You have the right to request a copy of the personal data we hold about you, as well as information about how we use it, who we share it with, and how long we retain it. This is sometimes called a “Data Subject Access Request.” We will provide this information in a portable format (often electronic) as required by law.

• Right to Rectification: If any of your personal data we have is inaccurate or incomplete, you have the right to request that we correct or update it. For example, if you notice your email address or other detail is wrong in our records, let us know and we will fix it.

• Right to Erasure (Deletion): You have the right to request that we delete your personal data. This is not an absolute right – for example, we might need to retain certain information for legal compliance or legitimate business purposes – but we will honor this right to the fullest extent required. If you want us to delete data associated with your account or usage, you can contact us with your request. Keep in mind that deleting certain data may mean we cannot provide you some services.

• Right to Restrict Processing: You can ask us to limit or “pause” the processing of your data in certain circumstances. For instance, if you contest the accuracy of data or have objected to processing (see below), you might want to restrict processing until the issue is resolved. When processing is restricted, we will still store your data but not use it for those contested purposes.

• Right to Object: You have the right to object to our processing of your personal data when we are doing so under a legal basis of legitimate interests. This includes objecting to any profiling or automated processing we do on that basis. If you lodge an objection, we will evaluate whether our legitimate reasons for the processing outweigh your privacy rights. If they do not, or if the law requires, we will cease the processing you objected to. For example, you can object to certain data collection for analytics – if you do, we will stop or provide an alternative (like an opt-out setting).

• Right to Data Portability: For data you have provided to us and which we process by automated means under consent or contract, you have the right to receive it in a structured, commonly used, machine-readable format, and you have the right to have us transmit that data to another service provider (where technically feasible).

• Right to Withdraw Consent: In cases where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. Withdrawing consent won’t affect the lawfulness of any processing we already did while we had your consent, but it will mean we stop the consent-based processing going forward. For example, you can unsubscribe from our marketing emails via the “unsubscribe” link in those emails, or adjust your settings to disable a feature that you previously consented to.

• Right not to be Subject to Automated Decisions: Neo does not make any legally significant decisions about you purely by algorithms. However, if it did, you would have the right to not be subject to a decision based solely on automated processing (including profiling) that significantly affects you.

• Right to Complaint: If you believe your rights have been violated or you have a concern about how we handle your data, you have the right to lodge a complaint with a supervisory authority. For EU users, this would be your local Data Protection Authority (DPA) or the lead DPA for us, which in our case is the Czech Data Protection Office (since our EU main establishment is in the Czech Republic).

California Privacy Disclosures (CCPA/CPRA)

If you are a resident of California, you have specific privacy rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). These rights largely overlap with those discussed above, but California law also requires us to provide some additional details. This section provides information for California consumers about the categories of personal information we collect, the purposes for which we use it, the categories of sources from which we collect it, and the categories of third parties to whom we disclose it for business purposes. It also reiterates your California-specific rights.

Categories of Personal Information Collected: In the past 12 months, Neo has collected (and will collect) the following categories of personal information, as defined by California law:

• Identifiers: Examples include real name, email address, IP address, and other similar identifiers. (In our case, this could be your email if you provided it for early access or support, and device or online identifiers like an installation ID or IP for device recognition and service functionality.)

• Internet or Other Electronic Network Activity: This is a major category for Neo’s functionality. It includes your interactions with websites (browsing history, search queries), telemetry data, crash logs, and usage information about Neo itself. We collect this type of information as needed to provide and improve the service and for security (as described in earlier sections).

• Geolocation Data: We infer approximate location (city, state, country) from your IP address for purposes like language settings and security. We do not track precise GPS location.

• Contents of consumer's email: We collect this information only if you specifically permitted us to do so and only to deliver the requested services.

• Inferences: As noted, we may derive inferences about your preferences or characteristics (e.g., inferring your interests to personalize content). These inferences are drawn from your browsing and usage of Neo.

We do not knowingly collect information from the following categories in a way that is associated with an identifiable consumer: Protected classifications (like race, religion, etc.), Biometric information, Professional or Employment Information, Education Information, or Financial information. Any such data would only be handled if you actively input or accessed it through the browser (and then it’s only used to provide you the service, not separately stored in our systems as a data category). We also do not collect Sensitive Personal Information as defined by CPRA beyond what is strictly necessary for the operation of the browser (and we do not use any Sensitive Personal Information for the purpose of inferring characteristics about you).

Categories of Sources: We collect personal information directly from you (for example, when you provide info for an account or ask the AI a question), automatically through your use of the browser (through software functions that gather usage data or through cookies and similar technologies within Neo), and from service providers or integrated third parties at your direction (for example, from Google’s APIs when you connect your Gmail). We do not purchase personal data from data brokers or similar sources.

Business or Commercial Purposes for Collection: We collect and use the above categories of personal information for the business and commercial purposes described in the How We Use Your Personal Data section. All of these purposes align with what CCPA/CPRA recognize as legitimate “business purposes”. Where we use information for “commercial purposes” (like promoting uptake of a new feature within Neo), it is within the context of improving our product offering to you, not selling your data to others.

Disclosure of Personal Information: We disclose the above categories of personal information to third parties only for the business purposes outlined in How We Share Personal Data. In the last 12 months, we have disclosed the following categories of personal information for our business purposes, and only to the following types of third parties:

• Identifiers (like email, device ID) – disclosed to service providers (e.g., cloud providers, email delivery services) and affiliates as needed to operate the service.

• Internet/Electronic Activity data (like browsing usage, telemetry) – disclosed to analytics providers, AI features providers, error tracking services, and security partners who help us analyze and secure the product.

• Geolocation (IP-based) – disclosed to service providers for localization (for example, to our analytics or content delivery providers to serve the correct regional content).

• Contents of consumer's email – disclosed to our AI features providers for service provision.

• Inferences – disclosed to service providers processing data on our behalf to help personalize the service (but they do not get to use these inferences for themselves).

We have not sold any personal information in the last 12 months, and we do not sell personal information. We also do not share personal information with third parties for cross-context behavioral advertising (as defined under California law). This means we haven’t disclosed data to an ad network or social media company for the purpose of targeting you with ads based on your browsing through Neo.

California Consumer Rights: If you are a California resident, you have the following rights under CCPA/CPRA:

• Right to Know: You can request that we disclose to you the specific pieces of personal information we have collected about you, as well as details about our data practices such as the categories of personal information collected, the categories of sources, the business purposes for collection, and the categories of third parties to whom we disclose information. (Much of that general information is provided in this section of the notice.)

• Right to Delete: You can request that we delete personal information we collected from you and retained, subject to certain exceptions (for example, if we need to keep certain data to complete a transaction you requested, to detect security incidents, for legal compliance, etc.).

• Right to Correct: You can request that we correct inaccurate personal information we hold about you.

• Right to Opt-Out of Sale/Sharing: As noted, we do not sell or share your data in the CCPA sense, so there is no data sale to opt out of. However, California law requires us to mention this right. Should our practices change, we will provide a “Do Not Sell or Share My Personal Information” link or mechanism. For now, you can rest assured we don’t engage in those practices.

• Right to Limit Use of Sensitive PI: This right applies if a business uses “sensitive personal information” (like precise location, racial origin, etc.) for purposes not expected by an average consumer. Neo does not use sensitive personal info beyond what’s necessary to provide the service (and not for inferring characteristics), so this right is not applicable in a substantial way. We’re not using your sensitive data in a manner that California law would allow you to limit (because we’re not, for example, profiling your sensitive data or using it for secondary purposes).

• Right of No Retaliation: We will not discriminate against you for exercising any of these rights. That means we won’t deny you our services or provide a different quality of service just because you made a privacy request.

Exercising Your California Rights: You (or your authorized agent) can submit requests to know, delete, or correct by contacting us as described in Your Privacy Rights above. If we receive an authorized agent request, we may ask for proof that the agent is authorized to act on your behalf. We will verify your identity for each request (for example, by confirming information we already have on file, or through our secure portal). The verification process may vary depending on the sensitivity of the data and the nature of the request.

How can you contact us?

You can reach us using these contact details:

Email: [email protected]

By mail:

Gen Digital Inc. – Privacy Team

60 East Rio Salado Parkway, Suite 1000

Tempe, AZ 85281

United States

Independent EU GDPR Data Protection Officer

Pembroke Privacy Ltd

Email: [email protected]

If you live in the United Kingdom, you can contact our representative NortonLiIfeLock UK Limited, 100 New Bridge Street, London, England EC4V 6JA.

How do we update this notice?

We may update this notice to reflect changes to our personal data processing practices. If we make changes that are determined by us to be material, we will attempt to notify you by email or by means of a notice on this website prior to the change becoming effective. In the case of a material change to our personal data processing practices, any such change will only apply on a going-forward basis.

The most current version of this notice governs our processing of your personal data, so we encourage you to periodically review this page for the latest information on our privacy practices.