Klarna Privacy Policy

1. What type of information does Klarna collect?

We collect two basic types of information from you in conjunction with your use of the Klarna Services (collectively, your “personal information”): (1) personally identifiable information; and (2) non-personally identifiable information.

 Personally Identifiable Information is any information that can identify you. 

• Examples include your name, e-mail address, telephone number, postal address, device identifiers, IP addresses, geolocation information, and financial account information that you provide, such as credit or debit card numbers. 

• We may also collect personally identifiable information about you from third parties such as data vendors.

• Aggregate and/or de-identified information is not considered personally identifiable information.

  Non-personally identifiable information is information that does not identify you directly, but may be linkable to you.

• Examples include demographic information and general location information.

If non-personally identifiable information is directly linked to personally identifiable information, it will be considered personally identifiable information while it is linked. For example, if your payment history and transaction history are linked to your name, then that information will be considered personally identifiable information and subject to heightened privacy and security restrictions, as reflected in this Privacy Policy.

2. How does Klarna Collect Information?

We collect information about you through:

• Your interactions with or use of the Klarna Services, including both information you give us, as well as information we derive from your usage;

• Your contact with our customer support and other communications with us; 

• Third parties, such as data vendors, consumer reporting agencies, your bank, payment service providers you use, affiliates you interact with, or merchants you perform a transaction with;

• Through our websites and mobile applications, using cookies, Clear GIFs, web beacons, mobile application plug-ins, browser extension and similar technologies.

  Cookies are small files that are stored on your computer or device when you use the Klarna Services. Cookies record your preferences and the actions you take on your computer or device. We may also use web beacons and mobile application plug-ins, such as software development kits, application programming interfaces and similar technologies. We use these and other similar technologies for security, to monitor traffic, improve the Klarna Services, and make the Klarna Services easier to use and more relevant to you. We may also use these technologies to personalize your experience, deliver advertisements, and for research and marketing.

  You can learn more about ad-serving companies and the options available to limit their collection and use of your information by visiting the websites for the Network Advertising Initiative and the Digital Advertising Alliance. Similarly, you can learn about your options to opt out of mobile app tracking by certain advertising networks through your device settings and by resetting the advertiser ID on your Apple or Android device.

Clear GIFs are tiny graphics with a unique identifier, similar in function to cookies. In contrast to cookies, which are stored on your computer’s hard drive, clear GIFs are embedded invisibly on web pages. We may use clear GIFs (a.k.a. web beacons, web bugs or pixel tags), in connection with the Klarna Services to, among other things, track the activities of Site visitors, help us manage content, and compile statistics about usage of Klarna Services.

Third Party Analytics We may use automated devices and applications provided by third parties to evaluate usage of the Klarna Services. We use these tools to help us improve the Klarna Services, performance and user experiences. These entities may use cookies and other tracking technologies to perform their services. 

Sometimes when you communicate with us, or utilize our services we use third party service providers. In some cases these service providers may monitor and record mouse movements, swiping, scrolling, clicks, and keystrokes so that we can better understand how our products are utilized, and in some cases they may provide interfaces that allow you to communicate with us, for example through a chat window. In these cases, we maintain contracts with these third parties and they are required to keep your information confidential. By utilizing the Klarna Services you consent to our use of service providers for these purposes.

3. How do we use the personal information we collect?

We may use your personal information to:

• Provide the Klarna Services and customer support.

• Process transactions and send notices about your transactions.

• Resolve disputes and collect payments and/or fees.

• Verify the accuracy of and authenticate your information.

• Detect, investigate and prevent potentially prohibited or illegal activities, such as fraud.

• Communicate about accounts or transactions and send information about features and enhancements.

• Contact you, for example by phone, text (SMS) or email.

• Communicate changes to our policies.

• Personalize content and experiences, including providing recommendations based on your preferences and queries.

• Publish product and merchant reviews that you submit.

• Send offers or promotions for the Klarna Services.

• Provide advertising, including advertising based on your use of the Klarna Services or third-party websites.

• Provide membership benefits.

• Improve and develop Klarna Services and new products and services.

• Perform statistical, demographic and marketing analyses of users of the Klarna Services and their purchasing patterns.

• Conduct any other legitimate business activities not otherwise prohibited by law.

3.1 Use of Transactional Data for Model Training Purposes

We use advanced technology, including machine learning (ML) and artificial intelligence (AI), to provide and improve our services. Specifically, we use your transactional data, account history, and interaction data (collectively, "Activity Data"), in either raw or anonymized/aggregated form, for the following purposes:

• Probability of Default (PD) Modeling: We process your Activity Data through automated models to assign a probability of default to specific transactions or credit applications. This helps us determine your eligibility for products and set appropriate credit limits.

• Model Training and Refinement: We use anonymized and aggregated Activity Data to train, test, and improve our proprietary algorithms. This ensures our risk assessments remain accurate and reflective of current economic conditions.

• Fraud Prevention: Our AI systems monitor your transactions in real-time to identify patterns that suggest unauthorized or fraudulent activity.

Conversation content via the use of Klarna’s AI assistant is processed by Klarna's and third party-parties’ systems who act as service providers to Klarna (as defined under CCPA, and other relevant state privacy laws) under contracts that restrict their use of your data to providing the AI assistant service.

Consistent with applicable state privacy laws, including California’s CCPA/CPRA regulations on Automated Decision-Making Technology (ADMT), you may have the right to opt out of, or appeal decisions made by, automated systems that produce legal or similarly significant effects concerning you. Please see Section 14 (US Regional Privacy Rights Notice) for information on how to exercise these rights.

3.2 Open Banking (Connecting Your Bank Account)

When you choose to connect a bank account through Klarna's Open Banking service, we collect and process information from that account such as your account balance, income or salary deposits, and transaction history. This is in order to provide and improve the Klarna Services. We use this information to:

• verify your identity and the accuracy of the information you have provided;

• assess your eligibility for credit and determine appropriate terms and credit limits, including through the automated processes described in Section 3.1; and

• detect, investigate, and prevent fraud and other prohibited or unlawful activity.

We process information obtained through Open Banking only for the purposes you authorize when you connect your account.

4. How do we share personal information?

We will only share your personal information with third parties as described in this Privacy Policy. When we share your personal information we include reasonable contractual, legal, technical and organizational measures to ensure that your information is processed with an adequate level of protection and in accordance with applicable law.

We may share your personal information with:

• Service providers, affiliates and commercial partners who help with our business operations including but not limited to, fraud prevention, account maintenance, customer service, marketing and technology services.

• Consumer reporting agencies, fraud detection companies and collection agencies, as permitted by law.

• Merchants you order goods or services from using the Klarna Services.

• Marketing or advertising partners who assist us in serving advertising. These partners may use tracking technologies to collect or receive information through the Klarna Services and elsewhere on the internet and use that information to provide measurement services and targeted ads. These marketing or advertising partners may allow third party companies to access information about you so that those companies may market other products you may be interested in.

• Klarna Membership partners to provide you benefits if you are a subscriber of Klarna Membership. 

• Analytics companies.

• Companies that we plan to merge with or be acquired by or to whom we may sell or transfer our assets, including as part of a reorganization or bankruptcy proceeding.

• Third parties, including governmental authorities and law enforcement, to (i) protect or defend the legal rights, interests or property of Klarna and any related entity of Klarna; (ii) protect the safety and security of our customers or members of the public; (iii) protect against fraud; or (iv) comply with applicable law, or with a civil, criminal, or regulatory inquiry, investigation, subpoena, or summons. Including, without limitation, LexisNexis Risk Solutions Group; Emailage and ThreatMetrix services: Processing Notices | LexisNexis Risk Solutions.

• Other third parties with your consent or at your direction to do so.

• Third parties for any legitimate business purpose not otherwise prohibited by law.

  We will only share your Personal Information with third parties as described in this Privacy Policy, as otherwise notified to you at the time of collection (for example as set forth in an agreement you have entered into with us) or with your consent.

  Text messaging originator opt-in data and consent will not be shared with any of the third parties listed in this section except, as stated as below for the purpose of providing the Klarna Marketing Text Message Program to consumers.

5. Product Specific Information

The following information relates to specific products offered by Klarna.

5.1 Auto-Track (available in the Klarna App)

The Auto-Track feature (previously Magic Import) is described in these terms and conditions. If you connect to the Auto-Track feature, we will process order information (such as delivery tracking identifiers, supplier information, product information, and payment information) related to purchases you have made, and email information (to identify the relevant order and delivery information as well as sender information), in order to provide you with delivery information and an overview of your purchases in the Klarna App and to improve our services. We may also identify any relevant promotional codes to present to you in the Klarna App.

Data obtained through the service is shared with our service provider in order to provide the service to you. Neither Klarna nor our service provider will share data obtained through Auto-Track with any third parties, unless necessary to provide or improve the service to you. We will not transfer data to third parties for serving ads.

5.2 Klarna Desktop Extension 

Klarna Desktop Extension is a browser extension of the Klarna Services available for select web browsers. By downloading and using the Klarna Desktop Extension you can request and use One-time Cards directly in your browser on websites where this service is enabled in accordance with our internal policies. When you browse the internet with the Klarna Desktop Extension enabled, we will receive the domain of the websites that you visit. To the extent this is personal information, it will be handled in compliance with the terms of this Privacy Policy. 

5.3 Sponsored Links

If you click on a link that is sponsored which promotes a store, product or service you will be redirected to the store’s website through a third party, a so-called “affiliate network.” The affiliate network might place a tracking technology on your device that contains the information that you clicked on such a link in the Klarna App, which then may be used to track your visit to a store in order to calculate a potential commission to us.

5.4 Google

5.4.1 reCAPTCHA

When you use the Klarna mobile application (also through our web portal), Google will collect your device information through Google’s reCAPTCHA service which is implemented there (in some cases together with additional information that you choose to enter into the reCAPTCHA service), and Klarna will share the phone number used for verification. Google will process this information in accordance with its terms of service and privacy policy.

5.4.2 Google Maps

When you use Google Maps in the checkout (for example by searching for your address in the address field) or the Klarna App, Google will process your information subject to Google Maps’/Google Earth's Terms of Service and Privacy Policy. 

5.5 Rakuten

We partner with Rakuten Advertising, who may collect personal information when you interact with the Klarna Services. The collection and use of this information is subject to the privacy policy located here: Rakuten’s privacy policy; To submit an opt-out request

5.6 Identification and Verification Process

In this section we explain how we collect, use and disclose your biometric data for identification and verification purposes in line with U.S. state biometric privacy laws such as the Illinois Biometric Information Privacy Act, the Texas Act on Capture or Use of Biometric Identifier, or the Washington Biometric Privacy Law (H.B. 1493). 

In order to verify that you are the person depicted in your government-issued identification document, Klarna uses third-party technologies from the following identification and verification vendors (“ID&V Vendors”) to collect personal information from or about you, including biometric information and biometric identifiers such as your faceprint (“Biometric Information”), a selfie, and government-issued identification, including information contained within the barcode (collectively the “ID&V Personal Information”): 

Onfido Limited
14-18 Finsbury Square, 3rd Floor, London
England, EC2A 1AH 
https://onfido.com/ 
Facial Scan and Voice Recording Policy | Privacy Policy | Terms of Service

Trulioo Information Services Inc.
#400 – 114 E. 4 th Avenue, Vancouver, British Columbia, 
Canada V5T 1G2
https://www.trulioo.com/  
Facial Scan and Biometric Information Policy | Privacy Policies

Persona Identities, Inc. 

50 Beale Street, Floor 16 San Francisco,

California US 94105-1813

https://withpersona.com/ 

Privacy Policy

Specifically, Klarna and/or the respective ID&V Vendor will ask you to take a selfie through the user flow through Klarna’s services. The respective ID&V Vendor will then scan and map your facial features in comparison with the picture on your government-issued identification document. Which specific ID&V Vendor is used for your identification and verification process will be visible in the user flow. 

Biometric Information: Klarna and the ID&V Vendor may use your ID&V Personal Information for the following purposes (as applicable), in each case as described in this Klarna privacy policy and/or the the respective ID&V Vendor’s privacy policy (see above).

• To carry out the services for which the ID&V Personal Information were provided; 

• To verify your identity and to prevent fraud; and

• To comply with Klarna’s or the ID&V Vendor’s obligations under applicable law.

Government Identification Information: Using the identification and verification user flow in the Klarna services requires the ID&V Vendor to take a picture of the front and back of: (1) your driver’s license or state-issued identification card; or (2) your U.S. passport (collectively “Documentation”). This allows the ID&V Vendor to compare the photo of your Documentation with the real-time image of you that the ID&V Vendor will capture through the selfie function. The ID&V Vendor will also collect other information that is on the front and back of your Documentation including the barcode and information derived from the barcode (e.g., name, date of birth, height). We use this information primarily to verify your identity and to prevent fraud. 

Note that Klarna and/or the ID&V Vendor may disclose your ID&V Personal Information to Klarna’s and ID&V Vendor’s service providers, and as otherwise required under applicable law.

The ID&V Vendors are not allowed to use your ID&V Personal Information for their own purposes.

5.7 Klarna Mobile

The Klarna Mobile service is provided by Klarna Technologies, Inc. We collect and process your personal information, such as name, date of birth, email address, phone number, and billing address.

Information we collect regarding each service is listed here:

• Klarna Mobile - Local plan data: Information related to your Klarna Mobile local plan subscription, including your plan selection, data consumption, payment history, current mobile provider details (where applicable). Neither Klarna (including all Klarna group companies), nor Gigs Wireless, LLC.  has access to the content of your phone calls, messages, or internet browsing data.

• Travel eSIM Data: Information related to your Klarna Travel eSIM, including your plan selection, data consumption and  payment history. Neither Klarna (including all Klarna group companies), nor Gigs Wireless LLC has access to the content of your internet browsing data.
  

  Detailed information on relevant personal data for each service can also be found in the terms and conditions we have listed here.

6. How do we protect personal information?

We use reasonable security measures to protect your personal information from unauthorized access and use in compliance with applicable law. These measures include computer safeguards and encrypted, secured files and buildings. We also maintain other physical, technical, administrative, and procedural safeguards to protect personal information. Please be aware that despite our efforts, no data security measures can guarantee 100% security. You should take steps to protect against unauthorized access to your password, phone, and computer by, among other things, signing off after using a shared computer, choosing a robust password that nobody else knows or can easily guess, and keeping your log-in and password private. We are not responsible for any lost, stolen, or compromised passwords or for any activity on your account via unauthorized password activity.

7. How can you restrict us from sharing your personal information?

Personally Identifiable Information: You may choose not to provide your personally identifiable information to us; however, you will not be able to use the Klarna Services.

You can also limit our use and sharing of your personal information in other ways, such as:

• You may unsubscribe from marketing emails by clicking the “Unsubscribe” link in the email footer or by contacting Klarna Customer Service (but we will still be permitted to contact you for servicing and account-related purposes).

• You can modify browser settings to decline cookies, but certain features of Klarna Services may not function properly or may be unavailable if you do. For more information on cookies and how to disable them, you can consult the information provided by the Interactive Advertising Bureau at www.allaboutcookies.org.

• For your mobile device, you can understand which third parties have currently enabled cookies on your mobile device and how to opt-out of some of those cookies by accessing the Network Advertising Initiative's website at https://www.networkadvertising.org/mobile-choices from your mobile device. On your mobile device you may also select “Limit Ad Tracking” (on iOS devices) or “Opt out of Interest-Based Ads” (on Android). Even if you disable tracking, keep in mind that you may still receive interest-based advertising, including from third parties with whom your information had been previously disclosed and that you may still receive advertising from third parties, although such advertising may not be based on your interests and preferences.

• We use the information provided by Google Analytics to improve the Klarna Services. For more information regarding how Google collects, uses, and shares your information and how to opt out of certain uses please visit https://www.google.com/policies/privacy/partners/ and https://tools.google.com/dlpage/gaoptout.

• Your browser or device may include “Do Not Track” functionality. Note that our information collection and disclosure practices, and the choices that we provide to customers, will continue to operate as described in this Privacy Policy whether or not a Do Not Track signal is received.

8. Third-Party Links

The Klarna Services may contain links to third-party websites, including social media sites and merchant sites. By including a link to a third-party website, we do not endorse or recommend any products or services offered or information contained at the third-party website. Any access to and use of such linked websites is not governed by this Privacy Policy, but instead is governed by the privacy policies of those third-party websites. We are not responsible for the information practices of such third-party websites. If you decide to visit a third-party website via a link contained in or by the Klarna Services, you do so at your risk.

9. Children Under 13

Our products and services are not designed for children under 13. If we discover that a child under 13 has provided us with personal information, we will delete such information from our systems.

10. Governing Law and Notice to Non-US Users

The Klarna Services are directed to individuals located in the United States, and our policies are directed at compliance with those laws. If you are located outside the United States, you should NOT submit personal information to us. If you voluntarily submit personal information to us, you thereby consent to the general use of such information as provided in this Privacy Policy and to the transfer of that information to, and/or storage of that information in, the United States.

11. Accessing, Correcting or Deleting Your Information

You may request to know, access, correct, or delete personal information that you have provided to us. You will not be permitted to examine the personal information of any other person or entity and may be required to provide us with personal information to verify your identity prior to accessing any records containing information about you. Depending on where you live and the type of information you have provided to us, you may have different rights and choices for managing your personal data. For example, certain state laws do not apply to personal data collected, processed, or disclosed by a financial institution according to federal or state laws, such as the Gramm-Leach-Bliley Act and and applicable state financial privacy laws.

Accordingly, the ability to know, access, correct, or delete data is not absolute, and is subject to our internal policies. We must adhere to certain legal obligations preventing us from immediately deleting some of your personal information. For example, we may not accommodate a request to change or delete personal information if we believe doing so would violate any law or legal requirement or cause the information to be incorrect. To submit a request, email privacy@klarna.com, call +1 888 518-2771, or make a request through our Privacy page.

12. Changes to this Policy

This Privacy Policy is current as of the “Published On” date set forth above. We may change this Privacy Policy from time to time, so please be sure to check back periodically. We will post any changes to this Privacy Policy on the Klarna Services. If we make any changes to this Privacy Policy that materially affect our practices with regard to the personal information we have previously collected from you, we will aim to provide you with notice in advance of such change by highlighting the change on our website.

13. How can you contact Klarna?

If you have questions about the privacy aspects of the Klarna Services or would like to make a complaint, please contact Klarna customer service.

14. US Regional Privacy Rights Notice/ Notice at Collection

This Notice applies to residents of certain U.S. States whose information is processed pursuant to applicable U.S. State privacy law requirements, including the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, “CCPA”) and other applicable U.S. state consumer privacy laws (together with the CCPA, “State Privacy Laws”).These rights do not apply, however, to any information we collect that is exempt from specific state privacy laws , such as non-public personal information that we collect or disclose in providing a financial product or service for personal, family or household use or that is subject to certain state and federal privacy laws, such as the Gramm Leach Bliley Act, and the Fair Credit Reporting Act. While this Notice does not apply to information that is exempt from the specific state privacy laws, , in the interest of transparency, we have identified certain categories of personal information that overlap with these categories of exempted data.

For the purpose of this Section 14, the terms "personal information," "sensitive personal information," "consumer," "business purpose," "commercial purpose," "third party," "service provider," "share," "sell," and "sold" have the same meaning as provided in the CCPA, and other applicable state privacy laws .

We do not disclose your personal information to third parties for their direct marketing purposes. Residents of certain states, including California, may have the right to request information about any such disclosures. Because we do not make such disclosures, no opt-out is required.

Minor Content Removal: If you are under 18 years of age and a registered user of the Klarna Services, you may ask us to remove content or information that you have posted through the Klarna Services by contacting Klarna Customer Service. Please note that your request does not ensure complete or comprehensive removal of the content or information, as, for example, some of your content may have been reposted by another user.

14.1 Your Rights as a US Resident

If you reside in the US, , you may have the following rights regarding your personal information ( (not exempted as noted above):

• Right to opt-out of the sale and sharing of your Personal Information - A common understanding of “selling” information is that it involves a company taking information it has learned about you and exchanging that information with an unrelated third party for money, who will then use that data for a new purpose that you did not intend. We do not do this. 

Some applicable state privacy laws have a much broader definition of “sell” which encompasses activities beyond the traditional common understanding of “selling” for money, such as disclosing, disseminating, making available, transferring or otherwise communicating by electronic or other means, a consumer’s personal information for money or other “valuable” consideration. 

There are certain activities we perform that do fall under the very broad definition of “sale.” You have the right to opt-out of the sale of your personal information for targeted and/or cross contextual behavioral advertising, and profiling.  Please note that your right to opt-out does not apply to our sharing of data with service providers, who are engaged to perform a function on our behalf and are contractually obligated to use the data only for that function. 

We do not have actual knowledge that we have sold or shared the personal information of any resident under 16 years of age. If you are, or are the parent or guardian of a consumer who is under 16 years of age, and you believe we have sold or shared personal information of such minor without required consent, please contact us at privacy@klarna.com.

Our Notice of the Right to Opt-Out of the Share/Sale is available on our US Regional Privacy Notice page.

• Request to Know – You have the right to know what personal information we have collected about you, including the categories of personal information, the categories of sources from which the personal information is collected, the business or commercial purpose for collecting, selling, or sharing your personal information, the categories of third parties to whom we disclose your personal information, and the specific pieces of personal information we have collected about you.

• Request to Delete - You have the right to request in certain circumstances that we delete any personal information that we have collected directly from you, subject to certain exceptions. 

• Request to Correct - You have the right to request us to correct inaccurate Personal Information that we maintain about you

• Request to limit use or disclosure of Sensitive Personal Information - While we may collect pieces of sensitive personal information as defined by state privacy laws, such information is either exempt from these laws or is only used or disclosed to provide the Klarna Services or for other purposes permitted by the applicable state privacy laws. . Therefore, we have no obligation to provide you the right to limit the use or disclosure of sensitive personal information under these  laws .

• Use of an Authorized Agent – You may exercise your rights through an authorized agent. Your authorized agent can submit a request by emailing privacy@klarna.com, calling +1 888 518-2771 or through the chat feature in our Customer Service Web Portal. If you use an authorized agent to submit a request to delete, request to correct, or a request to know, we may require the authorized agent to provide proof that the you gave the agent signed permission to submit the request We may also require you to do either of the following: (1) verify your own identity directly with us or (2) Directly confirm with us that you provided the authorized agent permission to submit the request. You or the authorized agent can submit a power of attorney that complies with your state Probate Code as evidence of such authorization

• Right to not receive discriminatory treatment - If you choose to exercise any of your rights under state privacy laws , you have the right to not receive discriminatory treatment by us. We will not discriminate against you because you exercise any of the rights as described in this section.

• Right to Appeal – If we decline to act on your privacy rights request, you may appeal our decision within 60 days of receiving our response by submitting a written appeal to privacy@klarna.com with the subject line 'Privacy Rights Appeal.' You must clearly identify the original request and the grounds for your appeal. We will review your appeal and respond within 60 days of receipt (or such other period as required by applicable state law). If we deny your appeal, we will provide you with a written explanation of the reason(s) for the denial and, where required by applicable state law, information on how to submit a complaint to your state attorney general or data protection authority. The right to appeal is available to consumers in all U.S. states whose privacy laws require an appeal mechanism, including Connecticut, Montana, Oregon and Minnesota.

• Right to Opt Out of Profiling and Automated Decision-Making – You may have the right to opt out of the processing of your personal information for profiling in furtherance of solely automated decisions that produce legal or similarly significant effects concerning you, such as decisions related to the provision or denial of financial services or credit. 'Profiling' means any form of automated processing of personal data to evaluate, analyze, or predict aspects of your personal life, including your economic situation, creditworthiness, personal preferences, behavior, or location. We use automated systems, including machine learning and AI models, to assist in certain credit decisions and fraud prevention processes as described in Section 3.1 of this Policy. To opt out of profiling, please visit our US Regional Privacy Notice page or contact us at privacy@klarna.com. Please note that certain automated processing activities are integral to the financial services we provide and may be exempt from opt-out rights under applicable law (for example, automated processing necessary to fulfill a contract with you, for fraud prevention, or required under applicable federal or state law). Where an exemption applies, we will inform you of the reason.

14.2 Exercising Your California Privacy Rights

To protect our customers’ personal information, we are required to verify your identity before we can take action on your requests. To do so we may ask you to verify information about you that we already have on file, for example your mailing address, email address, telephone number or details about a purchase you have made with us. We may have a reason under the law why we do not have to respond to your request, or respond to it in a more limited way than you anticipated. If we do, we will explain that to you in our response.

To submit a request visit our US Regional Privacy Notice page and submit a request via our webform, email privacy@klarna.com or call +1 888 518-2771.

14.3 Personal Information We Collect, and How it is Used

You have a right to receive notice of how we have handled personal information collected since January 1, 2022. Specifically: the categories of personal information we collected, the business or commercial purposes for which the personal information is collected, the sources of the personal information, the categories of personal information that we have disclosed to third parties (including the categories sold or shared as those terms are defined by applicable state privacy laws), the categories of the third parties that we have disclosed personal information and the purposes for those disclosures.

14.3.1 Categories of Personal Information We Collect

We collect personal information as part of our business. The personal information we collect depends on your relationship with us and which of the Klarna Services you have used (or not used). We collect the following categories of personal information from consumers to deliver the Klarna Services. These are also the categories of personal information we have collected in the prior 12 months.

• Personal Identifiers - For example, your name, phone number, contact address and email address, Social Security Number, drivers license, passport or other government issued ID, bank account, credit/debit card number bank account, subscription ID, IP address and Device ID. 

• Customer Records - For example, your address, telephone number, credit card, debit card, and bank account information.

• Protected Classifications - For example, your date of birth from which we can derive your age, or your military status.

• Commercial Information - For example, actual or considered transactions, information about your income, information in a credit report, data consumption, preferences or opinions.

• Biometric Information - For example, a facial geometry scan or “faceprint.”

• Internet or other electronic network activity information - For example, browser or device information; interactions with specific websites and advertisements, use of specific services in our mobile application, or internet browsing history, cookies, web beacons, pixel tags, and clickstream or other traffic data.

• Geolocation Information - For example, the geolocation of your personal device.

• Audio, electronic, visual, thermal, olfactory, or similar information - For example, audio recordings or email and chat communications.

• Inferences drawn to create a profile about a consumer reflecting the consumer’s preferences or characteristics - For example, profiles reflecting your preferences, such as interests, hobbies, characteristic tendencies, behaviors, attitudes or aptitudes, including inferences drawn from personal information like browsing information and clickstream or other website traffic data. 

• Sensitive Personal Information - For example, your Driver's License, Passport or other government issued ID, health information (should you choose to provide it) and email communications (when you have enrolled in Auto-Track).

  14.3.2 Categories of Sources of Personal Information

We have collected personal information about consumers from the following sources:

• Your interactions with, or use of the Klarna Services including both information you give us, as well as information we derive from your usage;

• Your contact with our customer support and other communications with us; 

• Third parties, such as data vendors, marketing and advertising partners, consumer reporting agencies or fraud prevention bureaus, your bank, payment service providers you use, or merchants you perform a transaction with;

• Through our websites and mobile applications, using cookies, Clear GIFs, web beacons, mobile application plug-ins, browser extension and similar technologies.

  14.3.3 Purposes for Collection and Disclosure of Personal Information

  We collect personal information about consumers for the following business and commercial purposes. We may collect information about you for additional purposes that are disclosed to you at the time of collection.

  In some circumstances, we will disclose personal information about you to third parties as described in this notice. In those cases, the disclosure is done for the following business and commercial purposes as well.

• Online Auditing: Auditing related to an interaction with a consumer and a concurrent transaction, including, but not limited to, counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with standards that may apply.

• Detecting and Protecting: Detecting and protecting against security incidents and malicious, deceptive, fraudulent, or illegal activity.

• Debugging: Activities to identify and repair errors in technological functionality.

• Short-term, Transient Use: Data collected, but not retained, other than to facilitate a one-time transaction or non-personalized advertising shown as part of a consumer's current interaction with the business when information is not disclosed to another third party or used to build a profile or to alter consumer experience outside of the current interaction with the business.

• Providing the Klarna Services: Issuing and servicing of Klarna products and services, including but not limited to: customer service; processing or fulfilling orders, subscriptions and transactions; verifying customer information; responding to consumer requests; applications; underwriting; processing payments; transactions; providing IT infrastructure, storage, analytics and similar services.

• Analytic Activities: Analysis to improve Klarna marketing and marketing facilitation purposes, advertising, websites, mobile app, products, and services; to complete behavioral research; and to do other research, reporting, or evaluation.

• Research & Strategic Development: Business, consumer, product, strategy, and technological research and development, excluding marketing and advertising activities.

• Marketing and Advertising of Klarna and its Products and Services: Advertising and marketing Klarna products and services, personalize an individual's Klarna website or mobile app experience, and to deliver content or product and service offerings relevant to an individual's interests, including targeted ads and promotional offers.

• Marketing and Advertising of Klarna and Our Products and Services through Cross-Context Behavioral Advertising and Similar Methods: Advertising and marketing our products and services, and to deliver content or product and service offerings relevant to an individual's interests, including targeted ads and promotional offers through cross context behavioral advertising and similar methods.

• Marketing and Advertising of Our Partners and Their Products and Services: Offering our partner’s products and services, offering membership benefits, personalizing an individual's Klarna website or mobile app experience, and delivering content or product and service offerings relevant to an individual's interests, including targeted ads and promotional offers.

• Legal/Compliance/Regulatory purposes: Satisfying internal and regulatory compliance requirements, responding to regulatory exams, conducting internal and external audits, responding to subpoenas and other law enforcement requests, record keeping, and enforcing or defending our rights and property.

  14.3.4 Categories of Personal Information that have Sold or Shared

We have sold/shared the following categories of personal information in the prior 12 months. In each case, the information was sold/shared with Marketing or Advertising partners and Analytics companies for marketing and advertising of Klarna, our products and services, as well as the products and services of our partners through cross-context behavioral advertising and similar methods as well as Online Auditing.

• Personal Identifiers - Specifically email addresses, Device IDs and IP addresses

  • Sold: Yes; Shared: Yes

• Internet or other electronic network activity information - Specifically information about your use of the Klarna Services, for example how you have used the Klarna mobile app.

  • Sold: Yes; Shared: Yes

Our Notice of the Right to Opt-Out of the Share/Sale is available on our US Regional Privacy Notice page.

14.3.5 Categories of Personal Information Disclosed

In the preceding 12 months, we have disclosed personal information for a business or commercial purpose, as permitted or required by law or as otherwise set forth in this Policy. When we disclose personal information to a service provider, we enter into a contract that describes our business purpose for disclosing and requires the service provider to keep personal information confidential and to use it only for purposes consistent with the contract between us.

We may disclose all categories of your personal information for a business or commercial purpose to the following third parties:

• Service providers, affiliates and commercial partners who help with our business operations, including but not limited to, fraud prevention, account maintenance, customer service, marketing and technology services.

• Consumer reporting agencies, fraud detection companies and collection agencies, as permitted by law.

• Merchants you order goods or services from using the Klarna Services.

• Marketing or advertising partners who assist us in serving advertising. These partners may use tracking technologies to collect or receive information through the Klarna Services and elsewhere on the internet and use that information to provide measurement services and targeted ads. These marketing or advertising partners may allow third party companies to access information about you so that those companies may market other products you may be interested in.

• Klarna Membership partners to provide you benefits if you are a subscriber. 

• Analytics companies.

• Companies that we plan to merge with or be acquired by or to whom we may sell or transfer our assets, including as part of a reorganization or bankruptcy proceeding.

• Third parties, including governmental authorities and law enforcement, to (i) protect or defend the legal rights, interests or property of Klarna and any related entity of Klarna; (ii) protect the safety and security of our customers or members of the public; (iii) protect against fraud; or (iv) comply with applicable law, or with a civil, criminal, or regulatory inquiry, investigation, subpoena, or summons. Including, without limitation, LexisNexis Risk Solutions Group; Emailage and ThreatMetrix services: Processing Notices | LexisNexis Risk Solutions.

• Parties to whom you have directed or authorized our disclosure.

• Third parties for any legitimate business purpose not otherwise prohibited by law.

The business and commercial purposes for which we have disclosed personal information are listed in Section 14.3.3.

14.3.6 Retaining Your Personal Information

We have policies and practices requiring the secure deletion of personal information when there is no applicable regulatory retention requirement and we no longer have a business need to use the information for a purpose that is compatible with our disclosed purposes of collection. Personal information that has been aggregated or deidentified so that it cannot reasonably be used to infer information about you or otherwise be linked to you may be retained indefinitely.

The criteria we use to determine the applicable retention period for each category of personal information include: (1) the duration of our relationship with you and your use of Klarna Services; (2) applicable legal, regulatory, or contractual requirements (for example, applicable financial services record-keeping requirements or statutes of limitations); (3) whether the data is necessary to prevent fraud, defend legal claims, or comply with a legal obligation; (4) whether the purpose for which the information was collected can still be accomplished; and (5) industry standard practices for data of that type. For specific retention periods by data category, please contact us at privacy@klarna.com.

14.4 Opt Out Signals and Global Privacy Control (GPC)

Global Privacy Control (GPC): Our websites and applications recognize and honor the Global Privacy Control (GPC) browser signal as a legally valid opt-out of the sale and sharing of your personal information for cross-context behavioral advertising and targeted advertising. When your browser or device sends a GPC signal to our websites, we will treat this signal as an opt-out of the sale and sharing of your personal information, consistent with the requirements of applicable state privacy laws including California, Connecticut, Montana, Oregon, and Minnesota. This opt-out will apply to the specific browser or device sending the GPC signal. For more information about the Global Privacy Control, visit https://globalprivacycontrol.org.

Do Not Track (DNT): Some web browsers transmit 'Do Not Track' (DNT) signals to websites. Because there is currently no universally accepted standard governing how companies should respond to DNT signals, our websites do not respond to DNT signals in a standardized way. However, you may use the opt-out mechanisms described in this Privacy Policy to limit certain uses of your personal information. You can find information about how to manage browser settings in Section 7 of this Policy.

14.5 Notice of Financial Incentive

We may offer customers the opportunity to participate in various incentive, referral, loyalty, or other promotional programs (collectively “Programs”) related to the collection, retention, sharing or sale of your personal information. By participating in the Programs, you may earn benefits such as rebates (e.g. Cashback Rewards), gift cards, vouchers, discounts and other valuable offers. These benefits may be considered “financial incentives” or “price or service difference”. These Programs may involve collecting the following categories of Personal Information from customers who participate: customer identifiers; customer records; protected class and demographic information; purchase or transaction information; internet or other electronic network activity information and device information; audio, electronic, visual, or other sensory information; and inferences from such information. We are providing you with this information so that you may make an informed decision on whether to participate in any Program. 

When you sign-up for the Programs, you opt-in to receive such financial incentives. We may also collect certain personal information in connection with Programs that we used to administer the Program and provide you Program benefits, and to understand your interaction with Klarna Services so that we may improve our products and services and notify you of offers and promotions that may be of interest to you. 

By participating in any such Program, you agree that the financial incentives offered in connection with the Programs are reasonably related to the value of the personal information  collected and retained in connection with the Programs. 

14.6 Additional Questions?

If you have any additional questions about the privacy aspects of the Klarna Services please see our US regional privacy notice page, contact Customer Service by emailing privacy@klarna.com, calling +1 888 518-2771 or through the chat feature in our Customer Service Web Portal.

15. US Consumer Privacy Notice

All non-public personal information that we collect (except through a Klarna account with WebBank) is subject to the following Consumer Privacy Notice:

Rev. June 2026