EU-US Data Privacy Framework, UK Extension, and Swiss-US Data Privacy Framework

Amazon.com, Inc. and certain of its controlled US affiliates (together, the Amazon Group Companies, or "We") participate in the EU-US Data Privacy Framework (DPF), the UK Extension to the EU-US DPF, and the Swiss-US DPF regarding the collection, use, and retention of personal information from European Union and European Economic Area member countries, the United Kingdom, and Switzerland. We have certified with the Department of Commerce that we adhere to the DPF Principles.

If you have any inquiries or complaints about our handling of your personal information under the EU-US DPF, UK Extension to the EU-US DPF, and the Swiss-US DPF, or about our privacy practices generally, please contact us at: dataprivacyframework@amazon.com. We will respond to your inquiry promptly. In compliance with the EU-US DPF, UK Extension to the EU-US DPF, and the Swiss-US DPF, the Amazon Group Companies commit to refer unresolved complaints concerning our handling of personal data received in reliance on the EU-US DPF, UK Extension to the EU-US DPF, and Swiss-US DPF to our US-based third-party dispute resolution provider, VeraSafe. If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit https://www.verasafe.com/public-resources/dispute-resolution/submit-dispute/ for more information or to file a complaint. The services of VeraSafe are provided at no cost to you. If neither Amazon nor our third-party dispute resolution provider resolves your complaint, you may pursue binding arbitration through the DPF Panel.

As explained in the Amazon Privacy Notice and AWS Privacy Notice (https://aws.amazon.com/privacy/), we sometimes provide personal information to third parties to perform services on our behalf. If we transfer personal information received under the EU-US DPF, UK Extension to the EU-US DPF, and the Swiss-US DPF to a third party, the third party's access, use, and disclosure of the personal information must also be in compliance with our DPF obligations, and we will remain liable under the EU-US DPF, UK Extension to the EU-US DPF, and the Swiss-US DPF for any failure to do so by the third party unless we prove we are not responsible for the event giving rise to the damage. Subject to applicable law, you have the rights to access, correct, and delete your personal information. You also have choices and means available to limit the use and disclosure of your personal information. For example, we will never materially change our policies and practices to make them less protective of customer information collected in the past without the consent of affected customers. You can read more about your rights and choices in the Amazon Privacy Notice and AWS Privacy Notice.

You can read more about the DPF Principles and the DPF Panel, and review our DPF registration, at the Data Privacy Framework Program page (https://www.dataprivacyframework.gov/). The Amazon Group Companies are subject to the investigatory and enforcement powers of the Federal Trade Commission (FTC). We may be required to disclose personal information that we handle under the EU-US DPF, UK Extension to the EU-US DPF, and the Swiss-US DPF in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.