Individual Data Request Form

Information about Consumer Products’ Data Collection and Compliance

McAfee Consumer products collect and use a variety of information as part of provisioning (setup) and ongoing processing to deliver security and safety to Consumer customers’ digital and online activities. Many McAfee Consumer products work together using common data elements to ensure the best experience for customers. The paragraphs below describe the collection of information in the course of customers’ use of McAfee Consumer products. Some information McAfee collects is characterized as “personal data”, which means data that may be able to be used to directly or indirectly identify a particular individual.

For additional information on why McAfee collects personal data, how we protect it, how we use it, and in what instances we might share it, please see our Privacy Notice.

GDPR compliance

The European Union (EU) General Data Protection Regulation (GDPR) is in force effective May 25, 2018, providing the pan-European standard for individuals rights to privacy and protection of personal data. McAfee strives for a high standard of data privacy and protections as an obligation to our customers. As we continue to adjust and improve data handling practices, McAfee has made changes to meet compliance with GDPR and our responsibility to customers.

Data types and scope of collection

The following types and scope of data are collected and stored in the process of providing McAfee Consumer security services.

Contact information

McAfee collects and stores your contact information to communicate with you as well as to process purchase transactions and renewal transactions for subscriptions. This information includes:

• name
• physical address
• email address
• telephone number

Biographic and biometric information

McAfee products, in the limited instances listed here, may collect biographic or biometric information as integral to the features and security services provided.

• User photograph – The Family Safety product can collect a photograph of a user as part of the user profile, if the account administrator (parent or guardian) chooses to upload a photograph
• User age – The Family Safety product can collect the user’s age as part of the profile, if the account administrator (parent or guardian) chooses to input the user’s age
• Facial or fingerprint biometric – The True Key product can collect biometric information to be used as an authenticator in place of a password, if the user chooses to use biometric information as an authenticator

Payment information

McAfee is an ecommerce company compliant with Payment Card Industry (PCI) standards. McAfee collects and stores information to complete purchases you make for the payment method you choose, for a given transaction. McAfee supports many payment methods and the payment methods available may be different depending on the country where you reside and make a purchase. McAfee will retain information for multiple payment methods if you provide it. Your contact information described in the section above is often needed to obtain bank authorization for transactions and to send you receipts confirming transaction details. Payment information includes:

• Credit card Personal Account Number (PAN) and expiration date
• Bank account information for Direct Debit (DD) transactions
• PayPal account information

Unique user identifier

Unique identifiers, often referred to as account IDs, are used to associate subscriptions, services and personal data to a single account, and to ensure data is not available to or mixed with data for another user or account. These identifiers, typically email addresses, are linked to a password that secures your account and your information from unauthorized access. Passwords and password recovery information are encrypted and not readable by McAfee.

• Email address
• Password
• Password recovery hint, phrase or challenge questions and answers when provided

Geo-location and geo-position data

Geo-location and geo-position data is collected as part of our security services, for payment fraud prevention, and for optimizing our services for your location. McAfee collects geolocation information to the level of the state or province, city, and postal code linked to the Internet Protocol (IP) address associated with your computing device and internet connection. McAfee collects geo-positioning data for mobile devices and service.

• Internet Protocol (IP) address location from service lookup (state/province and/or city, and/or zip/postal code)
• Latitude and Longitude from Global Positioning System (GPS) are returned by some mobile devices and collected for some products and specific functionality
• Cell (transponder) ID for mobile devices

Demographic preferences

Locale is stored as preference settings to provide customers the best user experience interacting with McAfee and McAfee products. Locale is a combination of values:

• Country
• Language

Machine/device data

Information about devices, such as laptop computers, mobile phones, or networking devices are collected and stored to help McAfee optimize the design and the performance of products. Device ID information, device configuration, OS configuration and other software configuration is instrumental in improving our products. McAfee collects the following types of machine and device data depending on the product:

• Device manufacturers ID
• Device type, make and model are collected for most devices
• Device configuration, such as memory, CPU, and OS version
• Other configuration, such as installed web browsers and security software
• Media access control (MAC) address
• Wi-Fi network SSID

For customers using McAfee consumer software on mobile devices, mobile provider information is collected, depending on the particular device. This information is required to provide the security services in our product or is used as with other machine and device data, to improve our products. Mobile device identifiers, which generally are considered personal data, include:

• Device ID (IMEI)
• SIM Card ID (ICCID)
• Sim subscriber ID (IMSI)
• OS (Android) ID
• Mobile Country Code (MCC)
• Mobile Network Code (MNC)
• Advertiser ID (Google, Apple)

Telemetry

The term telemetry refers to information collected during use as readings or measurements. For example, when a user clicks on a button or control in the product, these clicks are sometimes collected to understand whether or how often a feature is used by customers. Error code information when a product malfunctions also is telemetry. Telemetry covers a wide range of “event” type data that is used to optimize or improve McAfee products. McAfee uses telemetry to improve product reliability, performance and usability. It may be associated with a unique ID to diagnose problems, but does not otherwise collect personal data.

Subscription and purchase data

Various data about your subscription is set and stored to ensure you get the service and features matched to the subscription you selected. If you did not purchase directly from McAfee, the company from which you did purchase (referred to as an “Affiliate,”) is saved using an Affiliate ID that is internal to McAfee. Subscription data that is retained by McAfee includes the following:

• Purchase date
• Price paid
• Subscription end/renewal date
• Affiliate ID
• Item purchased
• Sales order or other purchase ID
• Product key

Global Threat Intelligence (GTI)

McAfee GTI is a custom solution for recording, mapping, and ultimately predicting security threats. McAfee Consumer products return threat and URL data from the device to the GTI backend where it is retained briefly (7 days) for purposes of threat modeling. When this information is sent to GTI, it is not associated with or linked to an individual or subscription.

Support contact information and transcripts

When a Consumer customer contacts our Support team, information and data are collected to ensure customer satisfaction in resolving the issue and providing the best customer experience. Data from the contact will be kept for a limited time period in case follow up is needed and for training purposes, as follows:

• Call logs/notes
• Chat transcripts
• Call recordings

McAfee Consumer products portfolio

McAfee’s current portfolio of Consumer products are represented by the information summarized here. Not all information is collected by all products.

• McAfee LiveSafe (MLS)
• McAfee Total Protection (MTP)
• McAfee Internet Security (MIS)
• McAfee Anti-Virus (MAV)
• McAfee Safe Family (MSF)
• McAfee Multi-Access (MMA)
• McAfee Mobile Security (MMS)
• McAfee Small Business Security (MSBS)
• McAfee Secure Home Platform (SHP)
• McAfee Safe Connect
• McAfee Identity Theft Protection (IDP)
• True Key
• Web Advisor
• Site Advisor