Third Party Processors and Controllers engaged by Total Security

Third Party Processors and Controllers engaged by Total Security

Processing operation (use) by recipient

Relevant categories of personal data transferred to recipient

Location of where data is stored or sent

ChargeHive Limited — a company incorporated in England with a registered number 13609127, whose registered office is at Larch House, Parklands Business Park, Denmead, Hampshire, PO7 6XP

To provide secure payment processing services.

Name, Address, Email, Payment Method (eg credit card, PayPal etc), purchase history

United States

Fortifico Limited — a company incorporated in England with a registered number 09307406, whose registered office is at Larch House, Parklands Business Park, Denmead, Hampshire, PO7 6XP

To provide secure credit card processing when ordering from us. If you choose to purchase products and services online using a credit card, the credit card information is sent to us using SSL (Secure Socket Layer) encryption, an industry-standard method for protecting data as it travels over the Internet, or a similar encryption technology that may become accepted as an industry standard, or better encryption method, in the future. To learn more about our credit card processing vendors and their respective privacy and other policies which apply when you make a payment through their services, please review the terms of Fortifi’s Privacy Policy.

Name, Address, Email, Phone, Chat History, Email History, IP address, Purchase & Subscription Data, billing details

United States

Aura Sub LLC (formerly Intersections Inc.) — a company incorporated in the United States of America with a registered number 6234761, whose registered office is at New Castle, DE, United States

Identity Protection services (U.S consumers only)

User ID, name, email address, Randomly generated SSO token (not personal data)

United States

Superlative Enterprises Pty Limited (trading as haveIbeenpwned) — a company incorporated in Australia with company number 085 442 020, whose registered office is at 57 Admiralty Drive, Surfers Paradise, Queensland 4217

To provide data breach searches, where you request us to do so on your behalf.

Partial email hash, partial password hash

Australia

Raygun Limited — a company incorporated in New Zealand with company number 1899673, whose registered office is at L7, 59 Courtenay Place, Te Aro, Wellington, 6011, New Zealand

To help us diagnose and fix software errors and performance problems

Email address, Crash Reports

New Zealand

Microsoft Corporation — a company incorporated in the United States of America with a registered number 0074865, whose registered address is at One Microsoft Way Redmond, WA 98052-6399

Assist with identifying issues within our Windows application

Crash Reports (may contain email address), Anonymous Analytics

United States

Aress Software and Education Technologies Private Limited — a company incorporated in India with a registered number 122069, whose registered address is at L-13, MIDC Ambad, Nashik MH Maharashtra 422010, India

BPO (business process outsourcing)

Any of the personal data we collect about you including name, email address, IP address, billing and subscription details.

India

Paysafe Group Limited — a company incorporated in Isle of Man with a registered number FC034700, whose registered address is at 3rd Floor, Queen Victoria House, 41-43 Victoria Street, Douglas, Isle Of Man, IM1 2LF

To provide secure payment processing services.

Any of the personal data we collect about you including name, email address, billing address, IP address, billing and subscription details.

United Kingdom

Worldpay Company LLC — a company incorporated in the United States of America with a registered number 198504-215, whose registered address is at 8500 Governors Hill Drive, Cincinnati, OH 45249, United States

To provide secure payment processing services

Any of the personal data we collect about you including name, email address, billing address, IP address, billing and subscription details.

United States

Checkout Limited — a company incorporated in England with a registered number 08037323, whose registered office is at Wenlock Works, Shepherdess Walk, London, England, N1 7BQ.

To provide secure payment processing services

Any of the personal data we collect about you including name, email address, billing address, IP address, billing and subscription details.

United Kingdom

PayPal (Europe) (Europe) S.à.r.l. et Cie, S.C.A — a company incorporated in Luxembourg with a registered number RCS Luxembourg B 118 349, whose registered office is at 5th Floor 22-24 Boulevard Royal L-2449, Luxembourg

To provide secure payment processing services

Any of the personal data we collect about you including name, email address, billing address, IP address, billing and subscription details.

United Kingdom; United States

Stripe Payments Europe Limited — a company incorporated in Ireland with a registered number 513174, whose registered office is at The One Building, Lower Grand Canal St, Dublin 2, Ireland

To provide secure payment processing services

Any of the personal data we collect about you including name, email address, billing address, IP address, billing and subscription details.

United Kingdom; United States

Vindicia Inc — a company incorporated in the United States of America with a registered number C2538216, whose registered office is at 1390 Timberlake Manor Parkway STE 300 Chesterfield MO 63017

Additional charge attempts on failed renewals

Name, Billing address, payment details

United States, United Kingdom

Ethoca Limited — a company incorporated in Ireland with a registered number 412289, whose registered office is at Mountain View Central Park, Dublin 18 Dublin, Ireland

Fraud prevention

Billing details

United States; United Kingdom

Verifi Inc — a company incorporated in the United States of America with a registered number C2796478, whose registered address is at 8391 Beverly Blvd., #310, Los Angeles, CA 90048, United States.

Fraud prevention

Billing details

United States

Cybersource Limited — a company incorporated in England with a registered number 03425262, whose registered office is at 100 New Bridge Street, London, EC4V 6JA

Fraud prevention

Name, Email Address, Billing address, Card details, IP address

United Kingdom; United States

NortonLifeLock Ireland Limited, a company incorporated in Ireland with registered number 159355, whose registered office is at Ballycoolin Busines Park, Blanchardstown, Dublin 15, Ireland

NortonLifeLock provide virtual private network services for us which we incorporate into our products and services. Where we provide you with these services, we act as a joint controller with NortonLifeLock meaning that we are each jointly responsible for the personal data. You can find NortonLifeLock’s privacy policy here.

NortonLockLife rely on the lawful basis of legitimate business interests in order to process personal data in connection with our VPN services.

Connect data;

Usage data;

Error analysis data;

Product data

IP address

Republic of Ireland

Avira Operations GmbH - a company incorporated in Germany with a company number HRA 721878 whose registered office is Kaplaneiweg 1, 88069 Tettnang, Germany

Data is scanned for malicious/suspicious content

No personal data is transferred

All data is stored and processed in the European Union

Adyen N.V - a company incorporated in the Netherlands with registration number 34259528, whose registered office is at Simon Carmiggeltstraat 6-50, Amsterdam, Netherlands, 1011 DJ

To provide secure payment processing services

Any of the personal data we collect about you including name, email address, billing address, IP address, billing and subscription details.

United States/United Kingdom

Anodot - A company incorporated in the United States of America, whose registered office is at 44679 Endicott Drive, Suite 300, Ashburn, VA 20147

Performance analysis and alerting

Anonymous Analytics, billing and subscription details.

United States / EU / United Kingdom

Flexpay - A company incorporated in Canada, whose registered office is at 410 Saint-Nicolas, Suite 007, Montreal, Quebec, H2Y 2A5

Payment processing optimization services

Any of the personal data we collect about you including name, email address, billing address, IP address, billing and subscription details.

Canada

Kount Inc - A company incorporated in the United States of America, whose registered office is at 1005 W Main Street Boise ID 83702 USA

Fraud prevention

Any of the personal data we collect about you including name, email address, billing address, IP address, billing and subscription details.

United States

International Risk Mitigation, LLC - a company incorporated in the United States of America with a registered number 4707714, whose registered office is at 8951 Collin, McKinney Pkwy #1001, McKinney, TX 75070

Chargeback representment

Any of the personal data we collect about you including name, email address, billing address, IP address, billing and subscription details.

United States

Lookout Inc - 275 Battery Street, Suite 200, San Francisco, CA 94111

Password management services via Total Password

Any of the personal data we collect about you including name, email address, billing address, IP address, billing and subscription details.

United States

Real Defense LLC - 150 S. Los Robles Ave Suite 400 Pasadena, CA 91101 (801) 895-7907

Device optimisation services via Total Cleaner

Any of the personal data we collect about you including name, email address, billing address, IP address, billing and subscription details. User/device data: Information about how users interact with the service and the devices they use.

United States

Funambol Inc. - 1065 East Hillsdale Blvd. Suite 250 CA 94404 Foster City

Cloud storage services via Total Drive

Personal details: Such as names, addresses, and contact information. Family, lifestyle, and social circumstances: Details about family members, lifestyle choices, and social activities. User/device data: Information about how users interact with the service and the devices they use. Browsing data: Information about websites visited and online activity. Sensitive personal data: This could include racial or ethnic origin, political opinions, religious beliefs, health data, and other sensitive information.

Ireland

IPVanish, Inc - 114 5th Ave 15th Floor, New York, New York 10011

Virtual Private Network (VPN) services via Total VPN (in development)

Connect data; Usage data; Error analysis data; Product data; IP address

United States

AWS - 410 Terry Avenue North, Seattle, WA 98109-5210, U.S.A.

Cloud Hosting Provider

Cloud Database housing our customer data

United States

Google Cloud Platform - 1600 Amphitheatre Pkwy, Mountain View, CA 94043, United States

Cloud Hosting Provider

Cloud infrastructure using Kubernetes

United States

Justt US - 1013 Centre Road Suite 403-B, Wilmington, DE, 19805, United States

Automated Chargeback Disputing

Any of the personal data we collect about you including name, email address, billing address, IP address, billing and subscription details.

United States/United Kingdom

American Express - Travel Related Services Company, Inc., a corporation with an office at 200 Vesey Street, New York, New York, 10285 and American Express Payment Services Limited, an entity with an office at Belgrave House, 76 Buckingham Palace Road, London, SW1W 9AX, United Kingdom (“Amex”)

To provide secure payment processing services

Any of the personal data we collect about you including name, email address, billing address, IP address, billing and subscription details.

United States/United Kingdom

EPX - Registered ISO of BMO Harris Bank N.A., Fresno First Bank, United States

To provide secure payment processing services

Any of the personal data we collect about you including name, email address, billing address, IP address, billing and subscription details.

United States

Cardworks Merchant Services - 6900 Jericho Turnpike, Suite 208, Syosset, NY 11791, United States

To provide secure payment processing services

Any of the personal data we collect about you including name, email address, billing address, IP address, billing and subscription details.

United States

Cleverbridge - Gereonstrasse 43-65, 50670 Cologne, Germany.

To provide secure payment processing services

Any of the personal data we collect about you including name, email address, billing address, IP address, billing and subscription details.

United States / EU / United Kingdom

UnifyCX - Headoffice: 9931 Corporate Campus, Dr. Suite 1400, Louisville, KY 40223

BPO (Business process outsourcing)

Any of the personal data we collect about you including name, email address, IP address, billing and subscription details.

India & The Philippines

Alphabet Inc - Alphabet Inc. (via Google Cloud or Google LLC). Corporate Headquarters (Googleplex): 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA

Cloud computing, data storage, analytics, etc. Assists with identifying issues within our Windows application

Crash Reports (may contain email address), Analytics

U.S

Sprout Social - Social media management and customer engagement platform. Global Headquarters: Suite 700, 131 S. Dearborn St., Chicago, IL 60603, USA

Monitoring, scheduling, and publishing posts across social media platforms on behalf of the company, Assisting customer service and marketing teams in managing brand presence and interaction on social media

Public usernames, profile pictures, and handles. In some cases, personal identifiers shared voluntarily in direct messages (e.g. email address, subscription ID)

U.S

Optizmo - Primary (U.S.) Headquarters: 14425 Falcon Head Blvd., Bldg E100, Austin, TX 78738, USA

Hosting and managing email suppression lists in connection with email marketing campaigns facilitating compliance with CAN-SPAM, CASL, and other email marketing laws by ensuring opted-out users are excluded from marketing emails

Encrypted email addresses that have opted out of marketing (suppression list data)

U.S

Functional Software, Inc. d/b/a Sentry. Address is Functional Software, Inc., 45 Fremont Street, 8th Floor, San Francisco, CA 94105.

Assist with identifying issues within our macOS applications

Crash Reports (may contain email address), Analytics

Hosted in United States & Germany, may be processed in United States, Canada and Europe.

AppsFlyer - AppsFlyer Ltd. (Headquarters) 100 1st Street, 25th Floor San Francisco, CA 94105, USA

Marketing Attribution

Any of the personal data we collect about you including IP address, billing and subscription details, user/device data

Hosted on AWS & Google Cloud in EU

Apple Inc - One Apple Park Way, Cupertino, California, 95014

Platform Provider

User ID

Depends on User Location. Personal data relating to individuals in the European Economic Area, the United Kingdom, and Switzerland is controlled by Apple Distribution International Limited in Ireland