Last Updated: March 12, 2020
1. TYPES OF INFORMATION WE COLLECT
We collect two basic types of information – personal information and anonymous information – and we may use personal and anonymous information to create a third type of information, aggregate information. Personal Information means information that identifies (whether directly or indirectly) a particular individual, such as the individual’s first and last name, postal address, e-mail address and/or telephone number. Anonymous Information means information that does not directly or indirectly identify, and cannot reasonably be used to identify, an individual (including an individual’s computing device). Aggregate Information means information about groups or categories of individuals which does not identify and cannot reasonably be used to identify an individual. We may share Aggregate and Anonymous Information with other parties without restriction.
We collect the following categories of information:
Registration information you provide when you create an account, which may include personal data such as: your first name and surname, country of residence, gender, date of birth, e-mail address, username and password.
Transaction information you provide when you request information or purchase a product or service from us, whether on our sites or through our applications, including identification information (copy of valid passport or government-issued photo identification document, if provided to Linden Lab), your date of birth, your postal and/or residential address, telephone number and payment information. If you conduct transactions (for instance, on Second Life’s LindeX or Sansar’s SandeX or through Tilia), we may collect and retain some or all of the information related to these transactions, including transaction amount(s), parties involved, time and manner of exchange, and other transaction circumstances, such as payment method and names or emails of external third-party accounts (for example, PayPal or Skrill).
Information you provide in public forums on our Service. Please note that our sites and applications may offer chat, forums, community environments (including multiplayer gameplay) or other tools that do not have a restricted audience. If you provide Personal Information when you use any of these features, that Personal Information may be publicly posted and otherwise disclosed without limitation as to its use by us or by a third party. We do not require our users to include sensitive data (e.g., race, ethnicity, political opinions, religious or philosophical beliefs, membership of a trade union, physical or mental health, sexual life or criminal record) in their account. If you choose to post any such data to your account or public forums on our Service, please understand that it is visible to others as noted above. We have no obligation to keep private any sensitive information or personally identifiable information that you have made available to other users or the public using these functions. To request removal of your Personal Information from a public forum on one of our sites or applications, please contact Customer Support at firstname.lastname@example.org (Sansar) or https://lindenlab.freshdesk.com/support/tickets/new (Second Life).
Information sent either one-to-one or within a limited group using our message, chat, post or similar functionality, where we are permitted by law to collect this information.
Content, communications and other information you provide to us, view or engage with when you use our sites and applications, our applications on third-party sites or platforms (such as social networking sites) or link your profile from a third-party site or platform to your registered account. We collect information about how you use our Services, such as the types of content you view or engage with, the features you use, the actions you take, the people or accounts you interact with, and the time, frequency and duration of your activities.
Location information when you visit our sites or use our applications, including location information either provided by a mobile device interacting with one of our sites or applications, or associated with your internet protocol (IP) address, where we are permitted by law to process this information.
Usage, viewing and technical data, including your device identifier and features, IP address, web pages you visited prior to coming to our sites, proxy server, operating system, web browser and add-ons, internet service provider or your mobile carrier, and third-party user handles associated with your account when you visit our sites, use our applications on third-party sites or platforms, or open e-mails that we send. We use log-ins, cookies, device information and IP addresses to identify you and log your use.
Your marketing preferences.
Information you share with us in connection with surveys, contests, or promotions.
Communications that you send to us, such as customer support inquiries or other inquiries related to your account.
Additionally, there are a few special circumstances to note:
Intellectual Property Claim Notices: If you notify us of an intellectual property claim, the information in your claim notice may be shared with other parties to the disagreement or third parties in our discretion and as required by law;
Beta Service User: If you volunteer to serve as a beta participant for our pre-commercial content, we may track bug reports and individual system performance in an effort to test our technology rigorously before it is deployed;
Former Customer: If you discontinue your use of our Service, we may keep your registration file in our database for use in the event that you elect to renew your use of our Service, as well as for anti-fraud and other such protective measures.
2. HOW WE COLLECT YOUR INFORMATION
We collect information you provide directly to us when you request products, services or information from us, register with us, participate in public forums or other activities on our sites and applications, respond to customer inquiries or surveys, or otherwise interact with us. We also record some of this information automatically when you use our Services. We also may receive some of this information from third parties.
We collect the types of information as outlined in Section 1 and when you visit our sites or applications, when you register and manage your account, when you use our Services, when you purchase a product or services from us, when you post to public forums or chats, if you send us support inquiries, intellectual property claims or other claims, complaints or inquiries, when you participate in contests or promotions, or when we ask you for information for contractual or legal reasons.
We acquire information from other trusted sources to update or supplement the information you provided or we collected automatically. Local law may require that you authorize the third party to share your information with us before we can acquire it.
3. USE OF YOUR INFORMATION BY LINDEN LAB
Linden Research, Inc. (itself or in the capacity of a data processor for Linden Research UK, Ltd.) and Tilia Inc. (itself or in the capacity of a data processor) (collectively, “Linden Lab Controller”) will be the data controller for your information. Linden Lab Controller may have access to your information where it performs services on behalf of the data controller(s) (as a data processor) and, unless prohibited under applicable law, for use on its own behalf (as a data controller) for the following purposes:
Provide you with the products and services you request, such as create and manage your account, process payments, send you emails or other communications about your transactions and Service-related announcements, provide you with customized services based on your preferences
Communicate with you about your account or transactions with us and send you information about features on our sites and applications or changes to our policies
Consistent with local law and choices and controls that may be available to you:
Send you offers and promotions for our products and services or, as permitted, third-party products and services
Personalize content and experiences on our sites and applications
Provide you with advertising based on your activity on our sites and applications and on third-party sites and applications
Administer surveys, contests, or promotions
Optimize or improve our products, services and operations
Detect, investigate and prevent activities that may violate our policies (including our Terms of Service) or be illegal, including law enforcement requests
Verify accounts and monitor activities within our Services to promote safety and security of our Services
Comply with applicable laws and regulations, including regulation related to money services business (by Tilia Inc., for example)
Develop, test, evaluate and improve our Services
Respond to your inquiries or concerns.
Except under certain limited circumstances as set forth here and in our Terms of Service, Linden Lab Controller does not disclose to third parties the Personal Information or other account-related information that you provide to us without your permission. You understand, however, that Linden Lab Controller may disclose your Personal Information or other account-related information under the following circumstances:
If we believe in good faith that such disclosure is necessary under applicable law, or to comply with legal process served on Linden Lab;
In order to protect and defend the rights or interests of Linden Lab, its products and services, and/or the other users of such products and services;
In order to report to law enforcement authorities, or assist in their investigation of suspected illegal or wrongful activity, or to report any instance in which we believe a person may be in danger;
To service providers with whom we have contracted to assist us with the features or operations (such as anti-fraud functions, billing, collections, registration, customer support, e-mail delivery, age verification, or Sansar’s SandeX, Second Life’s LindeX or Tilia operations), to fulfill your service requests, offer new content or help us improve our products and/or services. Our contracts with these third parties prohibit them from using any of your Personal Information for purposes unrelated to the product or services they are providing;
To other third parties (a) to provide you with services you have requested, (b) to offer you information about our products or services (e.g. events or features), or (c) to whom you explicitly ask us to send your information (or about whom you are otherwise explicitly notified and consent to when using a specific service). For instance, we may provide certain information to our payment processor, to credit card associations, banks or issuers (if you are using a credit card), to PayPal (if you are using a PayPal account), or to providers of other services you request. If you choose to use these third parties’ products or services, then their use of your information is governed by their privacy policies. You should evaluate the practices of third party providers before deciding to use their services; and
To other business entities, should we plan to merge with or be acquired by that business entity.
4. SHARING YOUR INFORMATION WITH OTHER COMPANIES
We will not share your Personal Information outside of Linden Lab except in limited circumstances, including:
When you allow us to share your Personal Information with another company, such as:
Directing us to share your Personal Information with third-party sites or platforms, such as social networking sites
Please note that once we share your Personal Information with another company, the information received by the other company becomes subject to the other company’s privacy practices
When companies perform services on our behalf, however, these companies are prohibited from using your Personal Information for purposes other than those requested by us or required by law;
When we share, assign or otherwise transfer Personal Information with third parties in connection with the sale of any of our products, services, assets and/or businesses, or when the ownership or control of all or part of our Services changes;
When we share Personal Information with third parties to enforce our Terms of Service or rules, to ensure the safety and security of our users and third parties, to comply with law enforcement or other legal process or in other cases if we believe in good faith that disclosure is required by law.
5. YOUR CONTROLS, RIGHTS AND CHOICES
5.1 Data Retention
5.2 Right to Access and Control your Personal Information
We provide you with the ability to exercise certain controls, rights and choices regarding our collection, use, process, store and sharing of your information. Individuals located in certain countries, including the European Economic Area, have certain statutory rights in relation to their personal data. In accordance with applicable law and subject to any exemptions provided by law, your controls, rights and choices may include:
Correct or Update: You may correct or update your account registration or your Personal Information or you may also ask us to change or update your data in certain cases, particularly if it is inaccurate;
Delete: You may delete your account registration or ask us to erase or delete all or some your Personal Information (for example, if it is no longer necessary to provide Services to you);
Object to, Limit or Restrict use of Personal Data: You may ask us to stop using all or some your Personal Information (for example if we have no legal right to keep using it) or to limit our use of it (for example, of your Personal Information is inaccurate or unlawfully held);
You may change your choices for subscriptions, newsletters and alerts;
You may choose whether to receive offers and promotions, or other marketing, from us for our products and services, or products and services that we think may be of interest to you, and you have a right to object to Linden Lab’s use of your Personal Information for this purpose at any time;
You may choose whether to share your Personal Information with other companies so they can send you offers and promotions about their products and services;
You may choose whether to receive targeted advertising from many ad networks, data exchanges, marketing analytics and other service providers by following the directions set forth above in Section 2;
Right to Access and/or Take Your Data: You may request access to the Personal Information we hold about you and you may ask for a copy of your Personal Information in machine-readable form.
You may exercise your controls, rights and choices, or request access to your Personal Information, by modifying your selections on your account preferences page, following unsubscribe instructions provided in communications we send to you, or sending correspondence regarding your request(s) or the publications or services you no longer wish to receive from us to the following address:
945 Battery Street
San Francisco, CA 94111
We will consider your request in accordance with applicable laws. Please note that, for technical reasons, there is likely to be a delay in deleting your Personal Information from our systems if you ask us to delete it. Please be aware that such a request does not ensure complete or comprehensive removal of the content or information you have posted on our sites or that we have, and that there may be circumstances in which the law does not require or allow removal even if requested. Please be aware that if you do not allow us to collect Personal Information from you, we may not be able to deliver certain products and services to you, and some of our Services may not be able to take account of your interests and preferences.
You may have the right to lodge a complaint with a competent supervisory authority, subject to applicable law.
To the extent that Linden Lab’s processing of your Personal Information is subject to the General Data Protection Regulation (GDPR), Linden Lab relies on its lawful bases, described below, to process your data.
If you collect or process Personal Information of users associated with the European Economic Area on a Linden Lab website or create or use of programs or applications that retain information about such Linden Lab users or their computers, you may also have obligations under the GDPR. You should seek independent legal advice relating to your status and obligations under the GDPR. Nothing on this website is intended to provide you with, nor should it be used as a substitute for, legal advice.
5.3 Account Closure
We retain your Personal Information even after you have closed your account if reasonably necessary to comply with our legal obligations (including law enforcement requests), meet regulatory requirements, resolve disputes, respond to government investigations, maintain security, prevent fraud and abuse, enforce our Terms of Service or other terms or policies, and protect our and other’s rights. We will retain Anonymous Information and Aggregate Information after your account has been closed. As we do not control data you shared with others, such data will remain visible or accessible.
6. CHILDREN’S PRIVACY
We recognize the need to provide further privacy protections with respect to Personal Information that we may collect from children on our sites and applications. Some of the features on our sites and applications are not directed towards children, and we do not knowingly collect Personal Information from children in connection with those features. When we direct certain sites, products or services toward children and intend to collect Personal Information from children, we take additional steps to protect their privacy, including:
Notifying parents (including guardians) about our information practices with regard to children, including the types of Personal Information we may collect from children, the uses to which we may put that information, and whether and with whom we may share that information;
In accordance with applicable law, obtaining parental consent for the collection, disclosure or use of Personal Information from their children, or for sending information about our products and services directly to their children;
Limiting our collection of Personal Information from children to no more than is reasonably necessary to participate in an online activity; and
Giving parents access or the ability to request access to Personal Information we have collected from their children and the ability to request that such Personal Information be changed or deleted. At anytime a parent may request that we cease to collect further Personal Information from their child or request that any Personal Information that we have collected be changed or deleted from our records, in accordance with applicable law, by sending an e-mail to our Customer Support teams at email@example.com (Sansar) or https://lindenlab.freshdesk.com/support/tickets/new (Second Life).
In some instances, certain portions of our Service may allow children to submit Personal Information (such as their name and/or the child’s or his or her parent’s e-mail address) without first obtaining their parent’s consent. For example, we may collect online contact information from a child for the purpose of:
Obtaining parental consent and/or providing the child’s parent with any information regarding their child’s use of our Service, as required by law;
Responding directly to a specific request from the child on a one-time basis (for instance, in response to a customer support inquiry);
Responding directly more than once to a specific request from the child (for instance, to receive a newsletter or in-game communication from us), provided that in such case (i) we will use reasonable efforts to notify the child’s parent (e.g. via e-mail) of such ongoing communications with the child promptly after our initial response to the child and before making any subsequent responses to the child, and (ii) the child’s parent shall have the right to refuse further contact with the child and require the deletion of Personal Information about or collected from the child by contacting our Customer Support team;
Protecting the safety of a child participant on our Service, provided that we have used reasonable efforts to provide notice to the child’s parent (e.g. via e-mail). If the parent fails to respond to such notice, we may use such online contact information for the purpose stated therein; and
Protecting the security or integrity of our Service, to take precautions against liability, to respond to judicial process or to the extent permitted under other provisions of applicable laws, to provide information to law enforcement agencies or for an investigation on a matter related to public safety, to the extent reasonably necessary to do so.
Parents are encouraged to spend time online with their children and to become familiar with the types of content available through our Service and on the Internet in general. Parents should regularly oversee their child’s use of e-mail and other online communications and transactional features. Control tools are available from online services and software manufacturers that can help to provide a safe online environment for children. If your child has used your credit card in connection with our Service without your permission, please contact our Customer Support teams immediately at firstname.lastname@example.org (Sansar) or https://lindenlab.freshdesk.com/support/tickets/new (Second Life).
7. DATA TRANSFERS, SECURITY AND LAWFUL BASIS FOR PROCESSING
7.1 Cross Border Data Transfers
We implement technical, physical and organizational security safeguards designed to protect your data, from loss, misuse and unauthorized access and disclosure. We regularly monitor our systems for possible vulnerabilities and attacks. However, given the nature of electronic communications and information processing technologies, we cannot guarantee the security or safety of any information that is send to us, transmitted through the Internet or stored on our systems. There is no guarantee that data may not be accessed, disclosed, altered, or destroyed by breach by others of any of our physical, technical, or organizational safeguards. In the event that Personal Information is compromised due to a breach of security, Linden Lab will promptly notify our users in compliance with applicable law.
7.3 Lawful Basis for Processing
We will collect, use, process and store your Personal Information where we have a valid lawful basis. Our lawful bases include one or more of the following:
Consent (you have given Linden Lab consent, which you can change at anytime);
Performance of a contract (our processing is necessary for the performance of a contract we have with you to deliver the Services you have requested, to respond to your inquiries or to take specific steps before entering into a contract with you);
Legal obligation (processing is necessary for Linden Lab to comply with laws, regulations and regulatory authorities, court orders or law enforcement requests);
Vital Interest (processing is necessary to protect your vital interests or vital interests of another person);
Legitimate interest (improve our business or customer relationships, marketing and advertising, resolve disputes, prevent fraud and abuse, analyze and improve safety and security of our Services, enforce our Terms of Service, to anonymize and subsequently use the information).
9. COMMENTS AND QUESTIONS
945 Battery Street
San Francisco, CA 94111
YOUR CALIFORNIA PRIVACY RIGHTS:
CCPA: If you are a resident of California, please review the California Consumer Privacy Act privacy notice here.
Do Not Track: We currently do not respond to Do Not Track signals or similar signals.