4 ms·

This led me to look up Honey's own privacy policy and I do not see such a disclaimer regarding change of ownership, in fact it specifically references what they

This led me to look up Honey's own privacy policy and I do not see such a disclaimer regarding change of ownership, in fact it specifically references what they can share with PayPal. [0] >We know how important your personal data is to you, so we will never sell it. We'll only share it with your consent or in ways you'd expect (as we explain here). That means we will share your data if needed to complete your purchase, with businesses who help us operate Honey, or if we are legally required to do so. >We may also share information in the following cases:...with our parent company, PayPal, Inc. and affiliates and subsidiaries it controls, but only for purposes allowed by this Privacy Policy; So that sounds like commercial use of personal data is specifically protected with regards to the new parent. The policy does specify they can share your data in an "aggregate or anonymized format" without any caveats, though. Sure does still raise the question of what PayPal spent $4bn on. From what I can read online, online retailers see a lot of benefit from the way Honey incentivizes users to complete a purchase instead of abandon the cart. [0]https://www.joinhoney.com/privacy https://www.joinhoney.com/privacy

akiselev 6y ago
That is the privacy policy that users agree to if they joined post acquisition (probably because Paypal doesn't expect to sell it at this time), which is different than the policy that users agreed to when they joined pre-acquisition. They may have been forced to accept the new policy post acquisition anyway. I think the weasel is this nibble here: > but only for purposes allowed by this Privacy Policy; The privacy policy is between the user and Honey, not the user and PayPal, which implies they are still legally separate entities ("parent company"). Unless Honey has an agreement with Paypal that it can audit and enforce - which as a subsidiary, why would it want to - then once PayPal has the data, its actual use of it is governed by the privacy policy between the user and PayPal if there is an existing relationship or ??? It sounds like all Honey and Paypal need to do is find a half plausible justification from the PP for the data transfer; once it's handed over, Paypal is basically free to do whatever it wants.

akiselev 6y ago

That is the privacy policy that users agree to if they joined post acquisition (probably because Paypal doesn't expect to sell it at this time), which is different than the policy that users agreed to when they joined pre-acquisition. They may have been forced to accept the new policy post acquisition anyway. I think the weasel is this nibble here: > but only for purposes allowed by this Privacy Policy; The privacy policy is between the user and Honey, not the user and PayPal, which implies they are still legally separate entities ("parent company"). Unless Honey has an agreement with Paypal that it can audit and enforce - which as a subsidiary, why would it want to - then once PayPal has the data, its actual use of it is governed by the privacy policy between the user and PayPal if there is an existing relationship or ??? It sounds like all Honey and Paypal need to do is find a half plausible justification from the PP for the data transfer; once it's handed over, Paypal is basically free to do whatever it wants.