U.S. and Canada
Last Updated: September 10, 2021
What This Policy Covers
We collect, use, and share information in connection with your use of the Okyo Product (“Okyo”) website (www.okyo.com) (the “Site”), the Okyo mobile application (the “App”), and any products, devices, hardware, and related software and services featured on the Site and the App (collectively, the “Services”). We are committed to protecting your privacy and design our Services with this commitment in mind. This Policy applies to the Services only and does not describe our practices regarding any products or services or on any websites or Apps where this Policy is not referenced.
For the purposes of this Policy, “Personal Information” means, but is not limited to, information that directly or indirectly, on its own or in conjunction with other information, identifies or is identifiable to an individual, per applicable law.
Personal information generally does not include:
Publicly available information from government records,
Deidentified or aggregated consumer information,
Other information excluded from CCPA’s scope, such as:
Personal Information covered by certain specific privacy laws, including the Fair Credit Reporting Act (FCRA) and GLB, and
Exemptions for Personal Information obtained through employment or through business-to-business transactions.
Your Personal Information is processed by Palo Alto Networks in accordance with this Policy.
Links to Other Websites and Applications: Our Site may contain links to other websites whose content and privacy practices are not operated or controlled by us. If you visit any linked websites, review their relevant policies and documentation carefully. We are not responsible for any Personal Information you choose to give to third party websites not covered by this Policy.
PLEASE NOTE THAT THIS SITE IS INTENDED FOR USERS LOCATED IN THE UNITED STATES OF AMERICA AND CANADA. BY ACCESSING AND USING THIS SITE, YOU CONSENT TO OUR COLLECTION AND USE OF YOUR PERSONAL INFORMATION, INCLUDING OUTSIDE OF YOUR COUNTRY OR PROVINCE OF RESIDENCE AND ACROSS INTERNATIONAL BORDERS IN ACCORDANCE WITH THIS POLICY AND APPLICABLE LAW. PLEASE NOTE, IN SOME JURISDICTIONS, GOVERNMENT, LEGAL, OR REGULATORY AGENCIES MAY ACCESS OR DISCLOSE YOUR PERSONAL INFORMATION UNDER AUTHORITY OF LAW.
BY USING THIS SITE AND/OR OUR SERVICES, YOU CONSENT TO AND AGREE TO COMPLY WITH THIS POLICY. THIS POLICY IS INCORPORATED INTO AND MADE PART OF OUR OKYO TERMS OF SERVICE. PLEASE READ THE ENTIRE POLICY AND ALSO OUR OKYO TERMS OF SERVICE CAREFULLY AS THEY EXPLAIN YOUR CONTRACTUAL AND LEGAL RIGHTS.
How to Contact Us and Make a Consumer Privacy Request
Use any of the following methods to contact us about this Policy, our privacy practices, or to request a more accessible version of this Policy, such as a paper copy.
You may email us at: firstname.lastname@example.org,
Contact us by telephone at 1-855-916-5961, or
Write to us at our business address listed below:
Palo Alto Networks, Inc. Attn: Privacy 3000 Tannery Way Santa Clara, CA 95054
Do not sell my Personal Information (California residents)
The California Consumer Privacy Act requires businesses to disclose whether they sell Personal Information. As a business, we do not sell Personal Information. We may share Personal Information with or allow third parties to collect Personal Information from our Services only if those third parties act as service providers or business partners for us and have agreed to comply with our contractual limitations and applicable law as to their retention, use, and disclosure of your Personal Information and allow us to better interact with and serve you in connection with your request for information or Services.
You or someone authorized to act on your behalf (known under the California Consumer Privacy Act (CCPA) as an “Authorized Agent”) may make a privacy request concerning your Personal Information. If an agent submits a request on your behalf, please make sure the agent identifies itself as your authorized agent when submitting the request. This may include a valid power of attorney. You also may make a verifiable request on behalf of your minor child. To learn more about making such requests and your related rights, visit the “Your privacy rights” section of this Policy.
Making a verifiable consumer request does not require you to create an account with us. We will only use Personal Information provided in a verifiable consumer request to verify your identity or an agent’s authority to make the request.
For purposes of this Policy, “sell” means the sale of your Personal Information to another business or third party for monetary or other valuable consideration, subject to applicable law, including the CCPA. In the past twelve (12) months, we have not “sold” any Personal Information related to the Okyo brand.
Shine the Light Law (California residents)
California Civil Code Section 1798.83, also known as the “Shine the Light” law, permits California residents to annually request, free of charge, information about certain categories of Personal Information, as defined by applicable law, a business has disclosed to third parties for direct marketing purposes in the preceding calendar year. To make a request under the California Shine the Light Act, please contact us using any of the methods described in the “How to contact us and make a consumer privacy request” section of this Policy.
Canadian Residents’ Privacy Rights
We urge you to contact us first if you have any questions or concerns about your rights or our obligations under applicable Canadian law by using any contact method listed under the section of this Policy entitled: How to contact us and make a consumer privacy request. In the event that we are not able to resolve your issue, you can contact the Office of the Privacy Commissioner of Canada. The website address for the Office of the Privacy Commissioner of Canada is www.privcom.gc.ca.
Wherever possible, we seek your consent before we collect your Personal Information. The form of consent may vary depending on the circumstances and the type of information being requested. Your consent can be express or implied, and be provided directly by the individual or by an authorized representative.
Your express consent is preferred. Express consent can be given orally, electronically or in writing. Implied consent may be reasonably inferred from your action or inaction. For example, providing a name and address to receive a publication or providing a name and telephone number to receive a response to a question. When determining the appropriate form of consent, we take into account the sensitivity of the Personal Information, the reasons we are collecting it, and your reasonable expectations. When using Personal Information for a new purpose, we will document that new purpose and ask for your consent again.
It may not always be possible to obtain your consent to collect, use, or disclose your Personal Information in situations where applicable law, including the Canadian Privacy Act and PIPEDA, allow for the disclosure of Personal Information during the course of a necessary investigation or legal matter.
We will not use your Personal Information without your consent unless it is either used: for the same purpose for which the information was originally collected or compiled, consistent with that purpose, or for a purpose that may be disclosed under applicable law. If you opt-out of receiving or withdraw your consent to receive electronic marketing communications (e.g., by by following the instructions under “Unsubscribe” provided in such communications), note that you will continue to receive service communications related to the Services you continue to receive, such as those related to your Okyo subscription.
Information We Collect
The information we collect about you depends on the Services you use, how you use them, and the information you provide to us. For the purposes of this Policy, Personal Information shall have the meaning assigned to it by applicable law, including, but not limited to, information that directly or indirectly, on its own or in conjunction with other information, identifies or is identifiable to an individual. We collect the following Personal Information for our commercial business purposes (which includes, but is not limited to, the definition of “commercial activity:
Information You Directly Provide To Us
We collect Personal Information from:
you, directly, as a customer or consumer of our Services;
your use of our Services (e.g., websites, products, mobile applications, software, and services);
your interactions with us, such as through the Site, email messages to or from Okyo marketing campaigns;
your employer, where your employer may be providing you with the Services;
third parties acting as our Service Providers from whom we obtain information to support or enhance our interaction with and provision of Services to you, such as payment processors; and,
any other instance where you interact with us, such as when seeking technical support or communicating with us on social media.
This Personal Information may include:
Personal identifiers: such as name, email address, username and password, home or billing address, employee ID, telephone numbers, customer number, account password, and IP address or other unique identifier.
Personal information subject to the California Customer Records Act: such as signatures.
Commercial or Financial information: records of Services purchased, ordered, returned, or considered; other purchasing or consuming histories or tendencies; and payment information (e.g., method of payment and account number).
Characteristics of protected classifications under California or Federal Law: such as age, sex, gender, veteran or military status.
Internet or other electronic network activity information: such as web browsing and search history
Geolocation data: approximate location of a device or equipment based on geographical coordinates and measurements.
Audio or visual information: recordings of customer service calls for quality assurance purposes, and photographs of yourself that you voluntarily provide in connection with reviews of our Services.
Professional or employment information (related to consumers associated with enterprise accounts): job title, employer, business address and contact information, employment history, or other professional information.
Inferences drawn from any of the information identified above to create a profile about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, and abilities.
And any other information you decide to provide to us. We may combine such information with information we may already have about you, but only for internal business purposes related to the Services. We do not sell Personal Information to third parties for monetary or other valuable consideration. You also do not have to register an account with us to browse or shop online.
Information We Collect Via Cookies and Similar Technologies
We may collect certain information automatically when you use our Sites, such as your device’s internet protocol (IP) address, your mobile device’s GPS signal, information about nearby WiFi access points and cell towers, other device and online identifiers, browser type, operating system, manufacturer data, Internet service provider, web pages that you visit before and after using the Sites, the date and time of your visit, information about the links you click, the pages you view, the general manner in which you navigate the Sites, and other standard server log information used to improve Site performance and for aggregated and statistical reporting.
We may also collect technical data to address and fix technical problems and improve our Sites and Services, including the memory state of your device when a system or app crash occurs during use. Your device or browser settings may permit you to control the collection of this technical data. This data may include parts of a document you were using when a problem occurred, or the contents of your communications. By using the Sites, you are consenting to the collection of this technical data.
When you create an account, subscribe to our alerts, download our datasets, or contact us directly, we may collect some or all of the following types of information:
Purposes of Our Use of Personal Information
You have a right to know how your information will be used. We use your Personal Information, directly or indirectly through our service providers, for the following business purposes:
To provide you with Okyo and its associated Services, such as administering the terms of our agreement(s) with you, your user account and preferences, or other Site functionality; and product servicing, in-home consultations or installations, and extended warranty coverage;
To Process your payments (via our third party processor), including transaction and order fulfillment and logistics, refunds or adjustments, shipment, diagnosing, repairing, and tracking quality control issues;
To communicate with you or your authorized representative, including soliciting and using feedback, authenticating your identity when you interact with us for customer support purposes, informing you of any important product revisions or updates, and responding to your requests, complaints, and inquiries via telephone, email, chat, postal, or other means;
For our own internal business purposes and operations, such as improving, upgrading, or enhancing our products and services, analyzing trends, performing internal research for technological development and demonstration, conducting data analysis and testing, website optimization, training our customer service and other staff, and maintaining business and legal records;
For marketing, such as through newsletters, customer research, surveys, events, contests, or other promotions and relevant offers;
To protect the security of our assets, systems, and intellectual property and that of our customers and business partners, including, but not limited to, detecting and addressing security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, or investigating and prosecuting those responsible for such activities; or
To comply with applicable law and enforce legal requirements; and
You may choose not to provide us with your Personal Information. However, if you make this choice we may not be able to provide you with the product, service, or information that you requested. For example, we can only offer you a Okyo subscription if you have provided us with certain, required Personal Information and financial information. Please note that some contests or promotions may be conducted by third parties and will be subject to the third parties’ policies and any additional rules stated in connection with such contests or promotions.
In accordance with applicable law, we may also monitor or record your telephone discussions with our customer support representatives for training purposes and to ensure service quality. If you do not want your call to be monitored and recorded, please let us know and we will provide you with an alternative means of communicating with us.
Information Sharing and Disclosure
We share your Personal Information with others as described below. If we share your Personal Information, we require those we share it with to comply with appropriate privacy, security, and confidentiality requirements and standards pursuant to contractual arrangements and applicable law. We may disclose your Personal Information for business purposes to the following categories of third parties:
Our affiliates and subsidiaries;
Service providers and vendors;
Government agencies as required by laws and regulations.
When contracting with service providers, we also require them to keep Personal Information confidential and limit its disclosure on a need-to-know basis to provide the Services or as authorized in writing. We do not authorize these entities to sell your Personal Information or use it solely for their own purposes (e.g., their own marketing purposes).
If we use Personal Information to defend our legal rights or to any law enforcement agency or governmental agency that requires it, including to meet national, state, or local security or law enforcement requirements, we would generally do this in response to:
A subpoena, warrant or other process issued by a court of competent jurisdiction;
A legal process having the same consequence as a court-issued request for information, in that by refusing to provide such information, we would be in breach of local law, and we or our officers, executives or employees would be subject to liability for failing to honor such legal process;
Where such disclosure is necessary for us to enforce our legal rights pursuant to the laws of the jurisdiction from which such information was gathered; or
Where such disclosure is necessary to prevent or lessen a serious and imminent threat of bodily harm to the data subject.
We may use non-Personal Information (such as aggregated, anonymized, and/or de-identified usage data and demographics, referring pages, platform types, click counts, etc.) for any lawful purpose and share it with third parties.
We also collect information via cookies, web beacons, pixels, tags, or other tracking technologies (“Tracking Technologies”), such as your Internet Service Provider and IP address, the date and time you access our website(s), the pages you accessed while visiting our website(s), and the Internet address from which you accessed our website(s). We may place cookies on your device, which may last only during a single session or may be persistent over multiple sessions over time. We use these technologies to remember user preferences, maximize the performance of our website(s) and services, provide you with offers that may be of interest to you, measure the effectiveness of our email and other advertising campaigns, and to personalize online content. These Tracking Technologies may be used to track you across devices and websites over time. To learn more about cookies, clear GIFs/web beacons and related technologies, you may wish to visit https://cookiesandyou.com/.
If you change computers, devices, or browsers, or use multiple computers, devices, or browsers, and delete your cookies, you may need to repeat this process for each computer, device, or browser. Please refer to the instructions in your browser’s “Help” menu to learn more about how to manage cookies and the use of other tracking technologies.
Social Media Features
We receive no information from these third parties about which social media buttons you may have clicked or seen on our website, but it is possible that we may receive a summarized statistical report, without your Personal Information included, on the overall use of the buttons by visitors to our Site.
Do Not Track
There are different ways you can prevent tracking of your online activity. One of them is setting a preference in your browser that alerts websites you visit that you do not want them to collect certain information about you. This is referred to as a Do-Not-Track (“DNT”) signal.
Please note that our websites may not recognize or react in response to DNT signals from Web browsers. At present, there is no universally accepted standard for what a company should do when a DNT signal is detected. In the event a final standard is established, we will assess how to appropriately respond to these signals.
For more detailed information about cookies, Do-Not-Track and other tracking technologies, please visit allaboutcookies.org and allaboutdnt.com.
How We Safeguard Your Personal Information
We have administrative, technical, and physical safeguards and measures in place that we believe are reasonably designed to protect the security and confidentiality of your information from loss or theft, unauthorized access, use or disclosure, modification or destruction. The level of safeguards used to protect Personal Information will depend on the sensitivity of the Personal Information, amount, distribution and format of the information, and method of storage.
We strongly recommend that you do not send sensitive information (like a credit card number) to us via unencrypted email. We are not responsible for any transmission by you of any Personal Information over the public Internet.
We cannot promise that your use of our Site or mobile applications will be completely safe as no security system is impenetrable and no transmission or electronic storage of information is guaranteed to be fully secure or error-free. We therefore urge you to always use caution when providing or transmitting information over the Internet or email, and to protect the confidentiality of all access controls assigned to your account. In addition, you are solely responsible for maintaining the secrecy of any password you create or use in connection with our Site, mobile applications, and Services and your account information. We will never send an unsolicited communication asking you for your password.
Retention of Personal Information
We will only retain your Personal Information, including any communications you send to us through the Site or otherwise, as long as necessary to provide you with our Services and fulfill the purposes for which it was collected and thereafter only for as long as we have another legitimate business purpose to do so (i.e., backup, fraud prevention or detection, audit purposes, etc.) or as otherwise permitted or required by law. If our retention of your Personal Information is no longer required or permitted for the foregoing reasons, we will securely delete or destroy your Personal Information via secure methods or de-identify or anonymize and aggregate so that it's no longer identifiable as Personal Information under applicable law.
Please note that if your Personal Information is collected by a third party, it will be kept in accordance with the privacy policies and records retention requirements of that third party.
We do not knowingly solicit Personal Information from children or send them requests for Personal Information. If you are under the age of 18, do not use or provide any information on this Website or on or through any of its features. If we learn we have collected or received Personal Information from a child under 18 without verification of parental consent, we will delete that information. Our websites and Okyo are not directed to individuals under 18 and we do not knowingly collect Personal Information from them.
We are committed to ensuring that our communications are accessible to people with disabilities. To make accessibility-related requests or report barriers you may contact us via email at email@example.com or call us at 1-855-916-5961.
Your Privacy Rights
Based on your residency and applicable law, you may be entitled to exercise certain privacy rights concerning your Personal Information. If you make a request, we will review it and provide our response within the time period required by applicable law. Our ability to fulfill your request will depend on the extent to which you provide us with all necessary information to confirm your identity, whether we actually possess any relevant information about you, and whether we have conducted any of the activities required by law to be disclosed.
Please refer to the below descriptions of jurisdiction-specific privacy rights that may be available to you under applicable law.
Under Nevada law, Nevada consumers may have the right to opt out of the sale of their personally identifiable information for monetary consideration to others for licensing or sales purposes. While we do not license or sell your personally identifiable information in ways governed by that law, Nevada residents who has purchased goods or services from us may still have the right to submit a request to opt out of any future sales of their personally identifiable information by contacting us using any of the methods listed in the “How to contact us and make a consumer privacy request” section of this Policy. We will respond to and cooperate with your reasonable, verified written opt-out request to the extent required under applicable law. Please note that we reserve the right to take reasonable steps to verify your identity and the authenticity of your request.
The California Consumer Privacy Act of 2018 (CCPA), under the California Civil Code, also provides California residents with certain rights to access and delete their Personal Information as well as opt out from the sale of their Personal Information by businesses to other parties. For purposes of this Section regarding the CCPA, or any other sections that refer to it, all terms referenced herein shall have the meaning accorded to them in the CCPA, when applicable. This Section regarding the CCPA applies only to California “consumers”, as defined under the CCPA.
California residents may contact us to exercise the following privacy rights pursuant to state law:
The CCPA provides California residents with certain rights regarding their Personal Information, including rights to:
Request that we disclose to you certain information about our collection and use of your Personal Information over the past twelve (12) months, including:
The categories of Personal Information about you that we collected;
The categories of sources from which the Personal Information was collected;
The purpose for collecting Personal Information about you;
The categories of third parties with whom we shared Personal Information about you and, if applicable, the categories of Personal Information that were disclosed; and
The specific pieces of Personal Information we collected about you.
Request we delete Personal Information we collected from you, unless the CCPA recognizes an exemption.
Be free from unlawful discrimination for exercising your rights under the CCPA.
This section of the Policy does not apply to information about Palo Alto Networks job applicants, employees, or individuals who are encompassed by the business-to-business exception in the California Consumer Privacy Act (“CCPA”).
If we have a good-faith, reasonable belief that a request to opt-out of the sale of Personal Information is fraudulent, we may deny the request. Should this occur, we will inform you and explain why we believe the request is fraudulent.
Your Right To Request Disclosure of Personal Information that We Collect and Share About You
If you are a California resident, the CCPA grants you the right to request certain information about our practices concerning Personal Information that we have collected in the past 12 months, subject to certain legal limitations and applicable exceptions. Specifically, you can request the following:
Specific Pieces of Information
- The specific pieces of your Personal Information that we’ve collected about you in the past 12 months.
Categories of Information
- The categories of your Personal Information that we’ve collected in the past 12 months. - The categories of sources from which we collected Personal Information. - The business purposes for which we collected or sold Personal Information. - The categories of third parties with which we shared Personal Information in the past 12 months. - The categories of third parties to whom we’ve sold Personal Information in the past 12 months, and the category or categories of Personal Information sold to each. - The categories of Personal Information that we’ve shared with service providers who provide services for us in the past 12 months, like processing your bill, and the category or categories of Personal Information sold to each.
Your Right To Request Deletion of Personal Information We Have Collected About You
Upon your request, we will delete the Personal Information we have collected about you, subject to certain legal limitations and applicable exceptions that permit or require us to retain it.
Exercising Your Rights and How We Will Respond
To exercise any of the rights above, or to ask a question, contact us at 1-855-916-5961, email us at firstname.lastname@example.org.
For requests for access, update, correct, or delete of your Personal Information, we will first acknowledge receipt of your request as required by applicable law (e.g., within 10 business days under the CCPA). We will provide a substantive response to your request as soon as we can within the timeframe required by applicable law (i.e., within 45 calendar days (under the CCPA) or 30 calendar days (under applicable Canadian law) from when we receive your request), although we may be allowed to take longer to process your request under certain circumstances. If we expect your request is going to take us longer than normal to fulfill, we will let you know.
For requests that we stop the processing or sale of your Personal Information, when applicable, we are required to comply within a certain amount of time after you make your request, in accordance with applicable law (e.g., no later than 15 business days after receipt of your request under the CCPA). If we sell your Personal Information to any third parties after you have submitted your request but before we are able to comply with it, we will notify those third parties of your request and direct them not to further sell your Personal Information.
We usually act on requests and provide information free of charge, but we may charge a reasonable fee to cover our administrative costs of providing the information in certain situations. In some cases, the law may allow us to refuse to act on certain requests. When this is the case, we will provide you with an explanation as to why.
Categories of Personal Information We Have Sold
We have not sold any Personal Information in the past 12 months.
Our Commitment to Honoring Your Rights
If you exercise any of the rights explained in this Policy, we will continue to treat you fairly. If you exercise your rights under this Policy, you will not be denied or charged different prices or rates for goods or services, or provided a different level or quality of goods or services than others.
Verification of Identity for Privacy Requests
If you exercise your rights, we will need to obtain information to locate any Personal Information about you that may exist in our records, verify that you are a California (or other covered) resident, and/or verify your identity depending on the nature of the request. We take commercially reasonable steps to verify, and rely on your cooperation to ensure, that your Personal Information is as accurate, complete, and up-to-date as possible. You are responsible for informing us of any relevant changes to your Personal Information.
At times, there may be circumstances where we will not be able to honor your request, as permitted by applicable law. For example, if we are not able to verify your identity and/or that you are a California (or other covered) resident, we may not honor your access, deletion, or opt-out request. Additionally, the CCPA and other applicable law may identify exceptions where we are not required to fulfil your request.
In response to a request for categories or specific pieces of Personal Information or to delete your Personal Information, we may request data such as your name, email address, phone/mobile number and home address to verify your identity. In cases where you are requesting specific pieces of Personal Information, including access to, correction, or deletion of any sensitive or higher risk information, we may also request a signed declaration, under penalty of perjury, that you are who you say you are.
The verification information that you provide to us must match the information currently associated with your Okyo account. We may request alternative information under certain circumstances and will inform you if such information is needed for the verification process.
If we are unable to verify your identity with the degree of certainty required, we will not be able to respond to your request and we will notify you, within the amount of time required by applicable law, to explain the basis of our denial.
If you would like to designate an agent to act on your behalf, you and the agent will need to comply with our agent verification process. You will be required to verify your identity by providing us with certain Personal Information as described above, depending on whether you hold an account with us or not and the nature of the information you require. Additionally, we will require that you provide us with written confirmation that you have authorized the agent to act on your behalf. The agent will be required to provide us with proof of the agent’s identity and status as an agent, under penalty of perjury. Information to identify and verify your agent can be submitted through any of the methods described in the “How to contact us and make a consumer privacy request” section of this Policy.
Please note that this subsection does not apply when an agent is authorized to act on your behalf pursuant to a valid power of attorney. Any such requests will be processed in accordance with applicable law.
Requests for Household Information
There may be some types of Personal Information that can be associated with a household (a group of people living together in a single dwelling). Requests to exercise certain legal rights to access, update, correct, stop processing, do not sell, and/or delete household Personal Information must be made by each member of the household (or their authorized representatives). We will verify the identity of each member of the household using the verification criteria explained above and will also verify that each household member is currently a member of the household.
If we are unable to verify the identity of each household member with the degree of certainty required, we will not be able to respond to the request. We will notify you to explain the basis of our denial.
Changes to This Policy
This Policy may be changed or updated from time to time. We will post the date of the changes at the beginning of this statement. Please check this Policy from time to time to make sure that you are aware of our current privacy practices as of the above date “Last Updated”.
If required under applicable law, we will seek affirmative consent from you before making material changes to the way we handle Personal Information previously collected from you, unless such consent is not given by you. If you do not provide such consent, your Personal Information will continue to be used in a manner that is consistent with the most recent version of this Policy under which it was collected.
If you have any questions regarding this Policy, you may contact us using the information below:
Palo Alto Networks, Inc. Attn: Privacy 3000 Tannery Way Santa Clara, CA 95054 Email: email@example.com Telephone: 1-855-916-5961