International Data Transfers
Last updated:Houzz may process your personal data among affiliates of the Houzz group outside your local jurisdiction. Many of Houzz's third-party processors also are based in different jurisdictions.
Historically, Houzz has complied with the EU-US Privacy Shield Framework and the Swiss-US Privacy Shield Framework as set forth by the US Department of Commerce regarding the collection, use, and retention of personal information (as defined in these Frameworks) transferred from countries in the EEA, United Kingdom and Switzerland, as applicable, to the United States. On 16 July, 2020, however, the Court of Justice of the European Union issued a judgment declaring as “invalid” the European Commission’s Decision (EU) 2016/1250 of 12 July 2016 on the adequacy of the protection provided by the EU-U.S. Privacy Shield. As a result of that decision, the EU-U.S. Privacy Shield Framework is no longer a valid mechanism to comply with EU data protection requirements when transferring personal data from the European Union to the United States. That decision does not relieve participants in the EU-U.S. Privacy Shield of their obligations under the EU-U.S. Privacy Shield Framework.
We may receive from the EEA and Switzerland some or all of the information listed in the Collection of Information section of this Privacy Policy. Some of that information may qualify as personal information. We may use the personal information we receive from the EEA and Switzerland for the purposes set forth in this Privacy Policy or as you may otherwise be notified. All international transfers of your personal data will remain in compliance with applicable data protection laws. In particular, if we transfer personal data outside of the EEA, we will make sure that (a) the recipient is based in a jurisdiction that the European Commission has decided maintains an adequate level of protection for personal data (which is relevant for Israel or Japan, for example), or (b) the recipient has enacted appropriate safeguards under Article 46 of the GDPR (such as for example Binding Corporate Rules or EU Standard Contractual Clauses).
Onward Transfer
Please refer to the Sharing Your Information section of this Privacy Policy for a description of our data sharing practices. We may also be required to disclose personal information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements. In 2020, we responded to three law enforcement requests and zero national security requests. Up until 15 September, we have received one law enforcement request and zero national security requests in 2021.
We may use third parties to process data on our behalf as described in this Privacy Policy.
Access and Choice
EEA and Swiss individuals have the right to obtain our confirmation of whether we maintain personal information relating to them. As an individual from the EEA or Switzerland, you may also request to correct, amend, or delete the personal information we hold about you. An individual who seeks access, or who seeks to correct, amend, or delete inaccurate personal information, should direct their query as provided in the Contact Us section.
You can manage your profile and settings within our Platform. In the event Houzz desires to share personal information of EEA or Swiss individuals with third parties that are acting as controllers and that were not previously described or to use such personal data for a purpose that is materially different from the purposes listed in this Privacy Policy, prior to doing so, Houzz would provide individuals with opt-out or opt-in choice.
Dispute Resolution
European Union and Swiss individuals with privacy enquiries or complaints should please contact us first as described in the Contact Us section.