TransUnion LLC Privacy Notice
Privacy Notices
PrintThis notice was last modified on and has an effective date of July 1, 2024.
We have recently updated our Privacy Notice. Be sure to review it carefully to understand our privacy practices.
Sontiq, Argus Advisory, and Commerce Signals are now TransUnion Companies. To learn how these companies handle personal information about you and the rights you may have regarding that personal information, please visit the Sontiq Privacy Center, the Argus Privacy Notice, and Commerce Signals Privacy Notice.
This Privacy Notice (“Notice”) provides information about how Trans Union LLC (“TransUnion,” “we,” “us,” or “our”) handles personal information and describes the rights you may have regarding your personal information. Use of our online and offline services constitutes your agreement to the terms of this Notice. If you do not agree with the terms of this Notice, please do not use our services.
This Notice does not cover practices of other TransUnion businesses or products, nor your interactions with us as a job applicant. Please see those respective privacy notices listed on the left-hand panel of this page for more information on those privacy practices.
For transparency purposes only, this Notice provides limited information regarding certain consumer credit reporting and other regulatory activities, governed by the Fair Credit Reporting Act, including use of the Consumer Online Self Service, Digital Self Service, and TransUnion FactAct website, as well as certain business solutions. For more information, please navigate to the “Rights under the Fair Credit Reporting Act (FCRA)” section below.
Analytics Disclosure: We use Google Analytics 360, including Google Tag Manager and Google Ads. If you would like to learn more about Google Analytics, or opt out of this data collection and sharing activity, please use this link: https://www.google.com/policies/privacy/partners/. Please visit our Cookies and Similar Technologies Notice for information regarding our tracking technologies.
Visit our Consumer Privacy Rights page to exercise your privacy rights and choices.
Notice at Collection: We collect personal information as detailed in this Notice. The categories of personal information that we collect are listed below under “Personal information we collect,” and the purposes for which we collect and use personal information are listed below under “Purpose for collecting and use of personal information.” To learn more about your privacy rights, including your right to opt out of the sale or sharing of your personal information, please navigate to the “Privacy rights and choices” section below. Our retention practices are outlined below under “Retaining personal information.”
View annual consumer requests metrics (California Consumer Privacy Act (CCPA) and California Data Broker Registration) for TransUnion Companies.
1. Personal information we collect
As an information solutions provider, we may collect different types of personal information about you from various sources. The below chart describes the categories of personal information we may have collected in the past 12 months, and from whom we collected the personal information, listed by category of personal information.
Category of Personal Information | Personal information we collect |
Identifiers | What we collect
From whom we collect it (by category of sources):
|
Personal information categories listed in the California Customer Records statute Any information that identifies, relates to, describes, or is capable of being associated with, a particular individual, including, but not limited to, an individual’s name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver's license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. Note that personal information in this category may overlap with other categories. | What we collect
From whom we collect it (by category of sources)
|
Characteristics of protected classifications under state or federal law An individual’s age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information). | What we collect
From whom we collect it (by category of sources)
|
Commercial information | What we collect
From whom we collect it (by category of sources)
|
Biometric information | What we collect
From whom we collect it (by category of sources)
|
Internet or other similar electronic network activity | What we collect
From whom we collect it (by category of sources)
|
Geolocation data | What we collect
From whom we collect it (by category of sources)
|
Sensory data | What we collect
From whom we collect it (by category of sources)
|
Professional or employment-related information | What we collect
From whom we collect it (by category of sources):
|
Non-public education information (per the Family Educational Rights and Privacy Act) |
|
Inferences drawn from other personal information | What we collect
From whom we collect it (by category of sources)
|
2. Purpose for collecting and use of personal information
We describe the purpose for collecting personal information, listed by categories of personal information, in the chart below. Please note that a specific piece of personal information may fall into one or more categories of personal information.
We may also use your personal information for other purposes disclosed at the time you provide your personal information or otherwise with your consent.
Category of Personal Information | Purpose of Collection |
Identifiers and personal information categories listed in the California Customer Records statute |
|
Characteristics of protected classifications under state or federal law |
|
Commercial information |
|
Biometric information |
|
Internet or other similar electronic network activity |
|
Geolocation data |
|
Sensory data |
|
Professional or employment information |
|
Non-public education information (per the Family Educational Rights and Privacy Act) |
|
Inferences drawn from other personal information |
|
3. Disclosing for a business purpose and selling/sharing personal information
In the prior 12 months, we may have disclosed (business purpose) or sold/shared (commercial purpose) your personal information to different third parties, as detailed in the chart below. Please note that TransUnion may share your personal information for a targeted advertising purpose.
In accordance with applicable laws and their defined terms – NOTICE: We and this website may sell your sensitive personal data. The entity maintaining this website and notice is a data broker under Texas law. To conduct business in Texas, a data broker must register with the Texas Secretary of State (Texas SOS). Information about data broker registrants is available on the Texas SOS website.
Category of Personal Information | Sold or shared, by category of third parties | Disclosed for a business purpose, by category of third parties |
Identifiers and personal information categories listed in the California Customer Records statute |
|
|
Characteristics of protected classifications under state or federal law |
|
|
Commercial information |
|
|
Biometric information |
|
|
Internet or other similar electronic network activity |
|
|
Geolocation data |
|
|
Sensory data |
|
|
Professional or employment-related information |
|
|
Non-public education information (per the Family Educational Rights and Privacy Act) |
|
|
Inferences drawn from other Personal Information |
|
|
4. Privacy rights and choices
As applicable under privacy laws, when TransUnion is acting as a data controller you may take advantage of certain privacy rights, such as to request access, correction, or deletion of your personal information. You may also have the right to appeal a denial of your privacy rights.
To exercise your privacy rights (subject to limitations and exceptions under applicable law), visit our Consumer Privacy Rights page to submit a verifiable request, and find additional detail below.
- If you have a TransUnion account, you can use it to make your request.
- You can also make your privacy request without setting up an account by continuing as a guest. To do so, we will need your name, address, email, phone number, date of birth, and either your full Social Security number or the last four digits.
- Depending on the type of privacy request, we may also need you to answer knowledgebase questions regarding data associated with you and/or provide a passcode sent to your phone number. We will use that information to verify your identity so we can respond to your request.
- If we return this information to you electronically, the information will be in a portable format, and to the extent that it is technically feasible, we will provide the information in a readily useable format that can be easily transferred to another entity.
To make an opt-out request or to limit our use of your sensitive personal information (subject to limitations and exceptions under applicable law), visit Your Privacy Choices.
- Because we may “sell” or “share” personal information or engage in “profiling,” “targeted advertising,” “cross-context behavioral advertising,” or use sensitive personal information, consistent with the defined terms in applicable state laws, you may also exercise your opt-out rights from such sales/sharing, profiling/automated decision making, targeted advertising, or cross-context behavioral advertising, and limit our use of your sensitive personal information.
- To exercise your right to opt out of the sale or sharing of your personal information through trackers or cookies on our websites, please visit the Cookies Settings page, also located in the footer of our website.
In some instances, TransUnion offers its services to customers as a service provider/data processor or subject to other exceptions under the applicable state privacy laws. Where TransUnion is acting as a service provider/data processor, we are processing data on behalf of others who will provide you with applicable privacy rights.
Explanation of Privacy Rights and Choices
- Right to Access/Know. You may have the right to request a privacy report detailing the personal information collected, disclosed, sold, and shared about you and the purpose for doing so, unless such request proves impossible or would involve disproportionate effort.
- Right to Correct. You may have the right to request that we correct inaccurate personal information that we collect or maintain about you, subject to verification.
- Right to Delete. If we collected or maintain personal information about you, you may have the right to request the deletion of this personal information, unless an exception applies under applicable law.
- Right to Opt Out of the Sale/Sharing. You may have the right to opt out of the sale/sharing of your personal information to third parties.
- Right to Opt Out of Profiling/Automated Decision Making, Targeted Advertising, or Cross-Context Behavioral Advertising. You may have the right to opt out of our use of your personal information for purposes of profiling, automated decision making, targeted advertising, or cross-context behavioral advertising.
- Right to Limit the Use of Sensitive Personal Information. You may have the right to limit how we use your sensitive personal information. Depending on the applicable law, sensitive personal information may include: Social Security number, driver’s license number, biometric information, precise geolocation data, and racial and ethnic origin.
- Right to Appeal. If you believe we have denied any of your consumer privacy rights in error, you may have the right to appeal by replying to our denial message or any communication from us.
We do not discriminate against you based on your exercise of your privacy rights, although some of the functionality and features available on our websites may change or no longer be available to you.
5. Privacy requests via authorized agent
Using an authorized agent (with or without power of attorney) to submit an opt-out request or a request to limit the use of a consumer’s sensitive personal information: In order to submit an opt-out request or a request to limit on behalf of another consumer, please provide written permission, signed by the applicable consumer, authorizing the agent to submit the opt-out request. The name of the agent submitting the request must match the name on the authorization.
In order for us to locate the consumer’s record, please also include the consumer’s first and last name (middle name optional) and their address (including unit number, city, state, and zip code). You may also provide the consumer’s Social Security number and date of birth. While those fields are optional, this information makes it easier for TransUnion to locate the consumer’s information and complete the request.
Documentation may be sent to the addresses listed below.
Using an authorized agent without power of attorney to submit a verifiable privacy request for access, correction, or deletion of a consumer’s personal information: In order to submit a verifiable request for access, correction, or deletion on behalf of another consumer, an authorized agent without power of attorney must provide one item from each of the two sections below.
- Signed permission from the applicable consumer authorizing the agent to submit the verifiable privacy request on their behalf, including a description of the type of privacy request(s). The name of the agent submitting the request must match the name of the authorization.
- The applicable consumer must verify their own identity directly with the business by submitting information or documentation that provides sufficient proof of identification, such as:
- a Social Security number or a copy of a Social Security card issued by the Social Security Administration,
- a certified or official copy of a birth certificate issued by the entity authorized to issue the birth certificate, or
- a copy of a driver's license or an identification card issued by the motor vehicle administration or any other government issued identification.
This secondary identification must include or reference the same name as stated in the signed permission form. The submission must also include sufficient information for TransUnion to locate the consumer’s file. More information can be found on TransUnion’s Consumer Privacy Rights page by selecting the appropriate consumer request option.
Documentation may be sent to the addresses listed below.
Using an authorized agent with power of attorney to submit a verifiable privacy request for access, correction, or deletion of a consumer’s personal information: In order to submit a verifiable request for access, correction, or deletion on behalf of another consumer, an authorized agent with power of attorney must provide the valid power of attorney executed under applicable law.
The submission must also include sufficient information for TransUnion to locate the consumer’s file. More information can be found on TransUnion’s Consumer Privacy Rights page by selecting the appropriate consumer request option.
Documentation may be sent to:
TransUnion Data Privacy Request
PO Box 130
Woodlyn, PA 19094
You can also email the information to privacy@transunion.com
To protect the confidentiality of your data, you and/or your authorized agent may choose to submit your data using confidentiality features offered by your email provider.
All personal information provided as part of this process will be deleted after verification has been completed.
6. Rights under the Fair Credit Reporting Act (FCRA)
For additional information regarding your rights under the FCRA, please visit the Summary of FCRA Rights.
TransUnion’s credit database. We limit access to TransUnion’s consumer credit database and make it available to only the following:
- entities with a permissible purpose to receive it, as defined in the FCRA;
- entities with a permitted use under Title V of the Gramm-Leach-Bliley Act;
- companies who resell our data as permitted under law; and
- companies who process data on our behalf.
Access to information in this database not subject to the FCRA may be provided to companies and other entities for research and other purposes. Under the FCRA, we may provide information to companies that provide you with pre-approved offers of credit or insurance. If you prefer not to receive such offers, you may opt out by calling 1-888-5OPTOUT or visiting https://www.optoutprescreen.com.
Your account information. You have the ability to correct or update personal information that you directly provided to us and that we maintain. Log in to your account to update your information.
Right to access your information. You may order your TransUnion Personal Credit Report online.
Right to change inaccurate or incomplete information. If you believe that there is an error on your credit report, you may file a dispute here.
Child identity theft. We collect, from a child’s parent or guardian, personal information of children to enable a search of our database for any potential activity (i.e., request for a credit report, reporting of data using the child’s personal information, dispute submission, etc.). If you are a parent or guardian and want to check if your child may be a victim of identity theft, please visit our Child Identity Theft Inquiry page.
Freeze a child’s report (child 15 years or younger). We allow a parent or guardian to freeze the credit report of a child aged fifteen (15) years or younger. Visit our Protected Consumer Freeze page to learn more.
7. Personal information of children
Our services are not intended for use by nor directed to individuals under the age of eighteen (18). If we learn that we have collected or received personal information from individuals under the age of eighteen (18), we will delete the personal information or otherwise comply with applicable law. We do not knowingly sell personal information of children under the age of eighteen (18).
Parent or Guardian Privacy Opt-Out Request (child under 18 years)
If you believe we have collected personal information from individuals under the age of eighteen (18), a parent or guardian may make a data privacy opt-out request or limit our use of sensitive personal information (subject to limitations and exceptions under applicable law) by visiting Your Privacy Choices.
8. Securing personal information
We maintain a comprehensive information security program with administrative (policies, standards, and processes), physical, and technical controls designed to protect the confidentiality, integrity, and accessibility of personal information.
9. Retaining personal information
We retain personal information for as long as necessary to fulfill the purposes for which it was collected or processed, as previously described in this Notice, and consistent with applicable laws. For instance, we retain personal information, collected through our services and websites, for as long as a user’s account is active or as needed to provide services to our customers.
When determining retention periods, we consider our relationship with users and their information, the nature and sensitivity of the information, and what is reasonably necessary and proportionate to provide and improve our services. We also adjust retention periods to comply with our legal, reporting, or accounting obligations, to resolve disputes, and to enforce our agreements. We regularly review our retention periods and assess our data minimization practices, retaining the least amount of information for the shortest retention period, while still upholding all our obligations.
10. Corporate reorganization
In the event that we enter into, or intend to enter into, a transaction that alters the structure of our business, such as a reorganization, merger, acquisition, sale, joint venture, assignment, consolidation, transfer, change of control, or other disposition of all or any portion of our business, we may share your personal information. We may also share your personal information if we undergo bankruptcy or liquidation, in the course of such proceedings.
11. Links to other sites or services
This Notice does not apply to other third-party sites or services. If you click on a link or browse to a third-party site from our site/service, your activity and interaction is subject to that third-party's rules and policies. We recommend reviewing the privacy statements on those other sites to understand their privacy practices and make an informed decision regarding your use or interaction with their site/service.
12. Contact information
If you have questions or concerns regarding this Notice, our privacy practices and the protection of your personal information, or the privacy rights and choices available to you, you may contact us in the following ways:
Phone | |
Postal Mail | TransUnion Data Privacy Request |
13. Notice changes and effective date
This Notice is subject to change at any time. If we make any changes to this Notice, we will post the revised Notice on this page with its effective date.
Information for Good®.
Connect with us
