Last Updated: August 21, 2018
“Personal Information,” as used in this Policy, is information that specifically identifies an individual, such as an individual’s name, address, telephone number, or e-mail address. Personal Information also includes information about an individual’s activities, such as information about his or her activity on our Services, and demographic information, such as date of birth, gender, geographic area, and preferences, when any of this information is linked to Personal Information that identifies that individual.
Personal Information does not include “aggregate” or other non-personally identifiable information. Aggregate information is information that we collect about a group or category of products, services, or users that is not personally identifiable or from which individual identities are removed. We may use and disclose aggregate information, and other non-personally identifiable information, for various purposes.
We follow the following principles in order to protect your privacy:
We collect Personal Information from you in the following ways. We do so to fulfill our contractual obligations (such as providing the Services) and for our legitimate business purposes (such as improving the Website and Services). We may also collect Personal Information with your consent.
We collect Personal Information that our users provide to us in a variety of ways on our Services. These include the following:
When you visit our Services, some information is collected automatically. For example, when you access our Services, we automatically collect your browser’s Internet Protocol (IP) address, your browser type, the nature of the device from which you are visiting the Services (e.g., a personal computer or a mobile device), the identifier for any handheld or mobile device that you may be using, the website that you visited immediately prior to accessing any Web-based Services, the actions you take on our Services, and the content, features, and activities that you access and participate in on our Services. We also may collect information regarding your interaction with e-mail messages, such as whether you opened, clicked on, or forwarded a message.
You may opt out of receiving cookie-based advertising from Google by visiting the Google advertising opt-out page and/or from other third party vendors by visiting the Advertising Initiative opt out page. You may also modify your cookie settings in your browser through your browser settings. Please note that if you set your browser to disable cookies you may not be able to fully access and use the Services.
Also, please be aware that third parties, such as companies displaying advertisements on the Services or sites or services provided by third parties (“Third-Party Sites“) that may be linked to from the Services, may set cookies on your hard drive or use other means of passively collecting information about your use of their services, Third-Party Sites or content. We do not have access to, or control over, these third-party means of passive data collection.
Information from Other Sources
We may receive information about you, including Personal Information, from third parties, and may combine this information with other Personal Information we maintain about you. If we do so, this Policy governs any combined information that we maintain in personally-identifiable format.
We may also use Personal Information you provide at any time during your visit to the Website to contact you regarding products, services, and offers, both from ourselves and from third parties, that we believe you may find of interest. We allow you to opt-out from receiving marketing communications from us as described in the “Choice” section below.
Except as described in this Policy, we will not disclose your Personal Information that we collect on the Services to third parties without your consent. We may disclose information to third parties if you consent to us doing so, as well as in the following circumstances:
We may disclose Personal Information to third-party service providers (e.g., payment processing and data storage and processing facilities) that assist us in our work. We limit the Personal Information provided to these service providers to that which is reasonably necessary for them to perform their functions, and we require them to agree to maintain the confidentiality of such Personal Information.
Information about our users, including Personal Information, may be disclosed and otherwise transferred to an acquirer, or successor or assignee as part of any merger, acquisition, debt financing, sale of company assets, or similar transaction, as well as in the event of an insolvency, bankruptcy, or receivership in which Personal Information is transferred to one or more third parties as one of our business assets.
To Protect our Interests
We also disclose Personal Information if we believe that doing so is in our interest to protect our property or other legal rights (including, but not limited to, enforcement of our agreements), or the rights or property of others, or otherwise to help protect the safety or security of our Services and other users of the Services.
Compliance with Law
We may disclose Personal Information required by law, such as to comply with a subpoena or other legal process, or to respond to a government request.
If you receive promotional e-mail from us, you may unsubscribe at any time by following the instructions contained within the e-mail. You may also opt-out from receiving promotional e-mail from us, and any other promotional communications that we may send to you from time to time (e.g., by postal mail) by sending your request to us by e-mail at firstname.lastname@example.org or by writing to us at the address given at the end of this policy. Additionally, if we offer user account functionality on the Services, we may allow you to view and modify settings relating to the nature and frequency of promotional communications that you receive from us.
Please be aware that if you opt-out of receiving promotional e-mail from us, it may take up to ten business days for us to process your opt-out request, and you may receive promotional e-mail from us during that period. Additionally, even after you opt-out from receiving promotional messages from us, you will continue to receive administrative messages from us regarding our Services.
If we offer the ability to create user accounts or profiles on our Services, you may have the ability to access and update many categories of Personal Information that you provide to us by logging in to your account and accessing your account settings. If you wish to access or amend any other Personal Information we hold about you, you may contact us at email@example.com. We may request proof of your identity before sharing or updating such Personal Information.
If you request that we delete your Personal Information on any of our Services (via a user settings page, by e-mail, or otherwise), we will do so within a reasonable period of time, but we may need to retain some of your Personal Information in order to satisfy our legal obligations, or where we reasonably believe that we have a legitimate reason to do so.
Additionally, if you are in the European Union, you may reach out to us to request a copy of your personal information, to request a transfer of your Personal Information to a third party in certain circumstances, to withdraw any consents that you have provided for processing your Personal Information, or to request that we cease processing your Personal Information. However, please note that it may not be possible for us to cease processing all of the Personal Information we hold if we have another legal basis or requirement for maintaining such information. You also have the right to make a complaint at any time to the relevant data protection authority in your country
The Services may contain links to other websites, products, or services that we do not own or operate. For example, the Services may contain links to third-party merchants from which users may purchase sound recordings that are streamed through the Services. The Services also may contain links to Third-Party Sites such as social networking services. If you choose to visit or use any Third-Party Sites or products or services available on or through such Third-Party Sites, please be aware that this Policy will not apply to your activities or any information you disclose while using those Third-Party Sites or any products or services available on or through such Third-Party Sites. We are not responsible for the privacy practices of these Third-Party Sites or any products or services on or through them. Additionally, please be aware that the Services may contain links to websites and services that we operate but that are governed by different privacy policies. We encourage you to carefully review the privacy policies applicable to any website or service you visit other than the Services before providing any Personal Information on them.
Our servers and data centers are located in the United States. If you choose to use the Services from outside the U.S., then you should know that you are transferring your Personal Information outside of your region and into the U.S. for storage and processing. Also, we may transfer your data from the U.S. to other countries or regions in connection with storage and processing of data, fulfilling your requests, and operating the Services. You should know that each region can have its own privacy and data security laws, some of which may be less stringent as compared to those of your own region.
We use reasonable security measures that are designed to protect personal information from accidental loss, disclosure, misuse, and destruction. Please be aware, however, that no data security measures can be guaranteed to be completely effective. Consequently, we cannot ensure or warrant the security of any information that you provide to us. You transmit information to us at your own risk.
We will retain your Personal Information for as long as needed to fulfill your requests, provide the Services, comply with our legal obligations, resolve disputes, and enforce our agreements.
The Services are not directed to, and we do not knowingly collect or solicit personal information from, children under the age of 13. If we learn we have collected or received personal information from a child under the age of 13, we will delete that information. If you believe we might have any information from or about a child under the age of 13, please contact us using the contact information below.
We may occasionally update this Policy. When we do, we will also revise the “last updated” date at the beginning of the Policy. If we change this Policy in a manner that is materially less restrictive of our use or disclosure of your Personal Information, we will use reasonable efforts to notify you of the change and to obtain your consent prior to applying the change to any Personal Information that we collected from you prior to the date the change becomes effective. We encourage you to periodically review this Policy to stay informed about how we collect, use, and disclose personal information.
If you have any questions or comments about this Policy, please contact us using the following contact information:
Extra Space Storage Inc.
2795 East Cottonwood Parkway, Suite 400
Salt Lake City, UT 84121