This Privacy Policy describes our practices regarding the collection, use and disclosure of information collected by Redbox Entertainment, Inc., its parent Chicken Soup for the Soul Entertainment Inc., its affiliates, including Crackle Plus, LLC, and its subsidiaries (“Redbox”) through our web sites, kiosks, applications, and streaming and other online services that post or include a link to this Privacy Policy (collectively, the “Redbox Platforms”). This Privacy Policy only covers information collected on the Redbox Platforms and offline by Redbox.

Please review this Privacy Policy carefully. In addition, please review the Terms of Use, which govern your use of the Redbox Platforms.

Table of Contents

Changes To The Privacy Policy

To the extent allowed by applicable law, Redbox reserves the right to change this Privacy Policy at any time without prior notice. Redbox will notify you of material changes by posting the changed or modified Privacy Policy on the Redbox Platforms. We may also provide notice to you in other ways, such as through contact information you have provided. Any changes will be effective immediately upon the posting of the revised Privacy Policy unless otherwise specified. Your continued use of the any of the Redbox Platforms after the effective date of the revised Privacy Policy will constitute your consent to those changes to the fullest extent allowed by applicable law. However, Redbox will provide notice and obtain your consent (opt-in or opt-out) if required. Note, that you may need to consent to our new policies in order to continue to use the Redbox Platforms and our services.

Back to main

The Information We Collect And How We Use It

We collect information from you directly, automatically when you visit the Redbox Platforms and sometimes from third parties. Some of this information may be considered “personal information” or “personal data”, and some of which may be considered “sensitive”, under various applicable laws. We consider information that identifies you as a specific, identified individual to be personal information (such as your name, phone number, e-mail address), and we treat additional information, including IP addresses and cookie identifiers, as “personal information” where required by applicable law. And, if we combine information we consider to be non-personal with personal information, we will treat that combined information as personal information under this Privacy Policy. Note that we may de-identify or pseudonymize personal information so that it is non-personal, such as by aggregating it or converting it to a code, sometimes using function commonly known as a “hash.” We maintain and use de-identified data without attempting to re-identify it, except where permitted by applicable law, such as to determine whether our de-identification processes satisfy legal requirements. We will treat de-identified or pseudonymized information as non-personal to the fullest extent allowed by applicable law.

Back to main

Information You Provide Us Directly

We may ask you to provide information when you interact with us, including contact information and other personal information, payment information (for example, credit card or gift card information), demographic information (for example, your gender, age or similar information), and information about the titles you rent from our kiosks or stream online through our streaming services. Certain features may also collect information about your preferences and interests. We may also collect information from you when you interact with our customer service team over the phone or through chat or if you respond to our text messages.

Back to main

Information We Collect Automatically

We and third-party advertising companies and business partners may use a variety of technologies that automatically or passively collect certain information whenever you visit any Redbox Platform or otherwise interact with us or our content (“Usage Information”). Usage Information may include the hardware model, browser, and operating system you are using, the URL or advertisement that referred you to the Redbox Platform you are visiting, all of the areas within the Redbox Platforms that you visit, the content you watch and how you interact with it, your time zone, location information, and mobile network (if applicable), among other information. In addition, we automatically collect your IP address or other unique identifier (“Device Identifier”) for any computer, mobile phone or other device you use to access our Redbox Platforms. In some cases, we may directly collect location information through your device. You may be able to turn off the collection of location information through the settings on your device. Usage Information is generally non-identifying, but if Redbox associates it with you as a specific and identifiable person, Redbox treats it as personal information.

The methods that may be used to collect Usage Information include the following:

Cookies and Local Storage
Cookies and local storage are data files placed within a browser on a device when it is used to visit a Redbox Platform. Certain web browsers and browser add-ons may provide additional local data storage mechanisms. Cookies and local storage can be used for a variety of purposes, including to store a unique identifier for your device that recognizes your device as you visit the Redbox Platforms or other web sites or online services and to remember your preferences. Most browsers provide you with the ability to disable or decline cookies and local storage. You will need to check your browser’s settings for further information. If you choose to disable cookies or to adjust your privacy settings on your device, some features of a Redbox Platform may not function properly. For more information about cookies and managing cookies generally, visit http://www.allaboutcookies.org.

Web Tags
Small graphic images or other web programming code called web beacons (also known as “1x1 GIFs” or “clear GIFs”), may be included in our web pages and e-mail messages. Web tags or similar technologies may be used for a number of purposes, including, without limitation, to count visitors to a Redbox Platform, to monitor how users navigate a Redbox Platform, to count how many e-mails that were sent were actually opened or to count how many particular videos or links were actually viewed.

Beacons
Beacons are small, wireless transmitters that use low energy Bluetooth technology to send signals to other smart devices in their proximity and can be used by mobile applications to help locate a device’s physical location. We may use beacons when your device interacts with the Redbox Platforms, typically through a mobile application, to help you locate a Redbox kiosk, to serve you relevant advertisements, and may in some instances, share beacon data with third parties, including to serve you advertisements based on your location.

Embedded Scripts
An embedded script is programming code that is designed to collect information about your interactions with the Redbox Platforms, such as the links you click on. The code is temporarily downloaded onto your device from our server or a third-party service provider, is active only while you are connected to a site, and is deactivated or deleted thereafter.

In addition, we may use these and a variety of other technologies that collect Usage Information and similar information for security and fraud detection purposes and to enforce our intellectual property rights. This includes the use of digital rights management technology that is embedded in DVDs, streamed content or other content provided by Redbox in order to prevent theft and unauthorized access to content, and to protect the intellectual property rights of Redbox and content owners.

Back to main

Information Third Parties Provide About You

Redbox may receive information about you from third parties, including business partners and data providers. For example, if you are on another website and you agree to receive information from Redbox, that site will forward your information to us so that we may contact you. And, we may supplement the information we collect with outside records from third parties, such as public databases, publicly available Social Media pages, and third parties who enhance the information we have about you. We use this information to better provide you with information and products, to tailor our content and the offers we show you, and for other business purposes. The information collected and stored by the third party is subject solely to the third party’s privacy practices.

Back to main

The Redbox Platforms may host or facilitate interactions with an interactive third-party website or service (“Social Media”), which may include the ability for you to “like” or “share” content. You may also have the opportunity to log in through or otherwise connect your account on a Social Media service (e.g., Facebook or Twitter). When you interact with Social Media through the Redbox Platforms, we will receive information about you from that third-party service and they may set their own cookies and collect information about your use of the Redbox Platforms, including your IP address or other Device Identifier and which page you are visiting on a Redbox Platform. These Social Media platforms may be able to collect certain information about your visits to the Sites regardless of whether or not you affirmatively interact with the feature and whether or not you are logged into (or have) an account with the third party platform.

Back to main

Our Use Of Information Collected Through The REDBOX PLATFORMS

Redbox may use information collected through the Redbox Platforms, including Usage Information and personal information, to: (1) allow you to participate in features we offer or to provide related customer services, including to communicate with you about any inquiries or requests you submit to us; (2) recognize you across the Redbox Platforms and across devices; (3) to better understand our customers, including across our parent company, affiliates, and subsidiaries; (4) tailor content recommendations and offers we display to you, both on the Redbox Platforms, and elsewhere online, including by our affiliates and subsidiaries; (5) process a rental, purchase, or other transaction; (6) provide you with information, products, or services that you have requested or that we think may interest you, including through email, text message, and notifications on your device; (7) investigate and prevent fraudulent transactions and other illegal activities or activities that violate our policies; (8) process your registration, including verifying your information is active and valid; (9) improve the Redbox Platforms or our services and for internal business purposes; (10) facilitate your job search via the Redbox Platforms and prepare related governmental and internal statistics reports; (11) contact you with regard to your use of the Redbox Platforms or any Redbox service and, in our discretion, changes to the Redbox Platform policies; and (12) for purposes disclosed at the time you provide your personal information or otherwise with your consent. We may also use and share non-personal information in our discretion and we may use non-personal information, including information that has been de-identified (typically by using a mathematical process known as a “hash”), to make inferences about you and offers and content you may be interested in, to serve you with relevant advertising, and to allow others to do so.

Back to main

The Redbox Platforms may offer message boards and other public areas (Community Forums) where you can choose to interact with others and/or to post or submit content. Note that anything you choose to disclose in such a community forum is public. It may be viewed, collected and used by others and the protections of this Privacy Policy will not apply. Think carefully before you post and use caution before disclosing any personal information. Please review the section of our Terms of Use for information on the rights that you grant to us in any content you choose to post in a community forum.

You acknowledge that, if you choose to post any information about your movie or other rentals or viewing history on a third-party platform or in a Redbox community forum, or by liking or sharing any content, the Video Privacy Protection Act of 1998 (18 U.S.C. § 2710) (or any similar state law) does not apply. However, to the extent it does apply in any manner, you are providing your informed, written consent to the disclosure of that information pursuant to the Video Privacy Protection Act.

Back to main

Disclosure Of Information To Third Parties

Redbox may share non-personal information, which may include Usage Information, information that has been hashed or otherwise de-identified or pseudonymized, with third parties in our discretion and as allowed by law, including for targeted advertising purposes. We do not share your personal information with third parties for those third parties’ own direct marketing purposes unless you consent (opt-in or opt-out) to such sharing.

We may share the information we have collected about you as allowed by law and as disclosed at the time you provide your information, as described in this Privacy Policy, with your consent, and in the following circumstances:

When You Direct That We Share Your Information

We may share information when you direct us to do so. For example, you may be presented with an opportunity to receive marketing offers from a third party or you engage with a Social Media service or other third party application or feature, through which information about you is shared. Please note that we are not responsible for the privacy practices of third parties. If you later decide that you no longer want to receive communications from a third party, you will need to contact that third party directly.

Back to main

Third Parties Providing Services on Our Behalf

We may share information with third-party service providers or allow those third parties to collect information about you, to enable them to perform services on our behalf, such as website hosting, conducting website usage analytics, sending email, text, or other communications, fulfilling orders, providing marketing assistance and data analysis, processing payments, and other services. Additionally, we may share various information relating to our users and fraudulent or potentially fraudulent activities with our fraud prevention and similar service providers, and they will use this information to help us and their other clients prevent fraudulent and illegal transactions.

Back to main

Sweepstakes, Contests and Promotions

We may offer sweepstakes, contests, and other promotions (any, a “Promotion”) that may require registration. By participating in a Promotion, you are agreeing to the provisions, conditions, or official rules that govern the Promotion, which may contain specific requirements of you (including, except where prohibited by law, allowing the sponsor(s) of the Promotion to use your name, voice, likeness or other indicia of persona in advertising or marketing materials). If you choose to enter a Promotion, personal information may be disclosed to third parties or the public in connection with the administration of such Promotion, including, without limitation, in connection with winner selection, prize fulfillment, as required by law, or as permitted by the Promotion’s terms or official rules (such as on a winners list).

Employment Applications
If you apply for a job through the Redbox Platforms, we or our service provider(s) may ask you to provide self-identifying information (such as veteran status, gender, and ethnicity) in conjunction with laws and regulations enforced by the Equal Employment Opportunity Commission and other federal, state and local regulatory agencies. Providing such self-identifying information is voluntary, but if you do provide such information, we and/or our service provider may submit that information to the appropriate government or regulatory agencies to fulfill reporting requirements and use that information to defend against employment-related complaints.

Please note that we may utilize a careers portal that is operated by a third party, in which case your use of the careers portal will be subject to the third party’s privacy practices as disclosed on the portal, and not to this policy.

Administrative and Legal Reasons
We may transfer and disclose user information to third parties: (i) in the event we are required to comply with a legal obligation, such as respond to subpoenas or other legal process or if we believe in good faith that the law requires it; (ii) at the request of governmental authorities conducting an investigation; or (iii) to protect and/or defend the Terms of Use, the Redbox Transaction Terms or other policies applicable to a Redbox Platform or our services; (iv) to respond to an emergency; or (v) otherwise to protect the personal safety, rights, property or security of Redbox, our customers, or a third party. We may also use Device Identifiers, including IP addresses, to identify users, and may do so in cooperation with copyright owners, Internet service providers, wireless service providers or law enforcement agencies in our discretion.

Business Transfers
In the event Redbox goes through a transition, Redbox reserves the right to disclose and transfer all information related to a Redbox Platforms (including, without limitation, during the course of any due diligence process): (i) to a subsequent owner, co-owner or operator of a Redbox Platform or applicable database; or (ii) in connection with a corporate merger, consolidation, restructuring, bankruptcy, the sale of certain of Redbox’s ownership interests, assets, or both, or other company change. By providing your information, you understand and agree that we may transfer such information to the acquiring entity without your further consent.

Back to main

THIRD-PARTY ADVERTISING AND ANALYTICS COMPANIES AND SIMILAR THIRD PARTIES

Redbox works with third party business partners (such as network advertisers, ad agencies, analytics providers, and other advertising partners) to serve Redbox ads online, to serve third party ads on the Redbox Platforms to provide us with information regarding the use of the Redbox Platforms and the effectiveness of our advertisements. These third parties may set and access their own tracking technologies on your device (including cookies and web beacons), and they may otherwise collect or have access to Usage Information and other information about you, some of which may be personal information under various state laws. Some of these parties may collect personal information over time when you visit the Redbox Platforms or other online websites and services. We may share information, typically information that has been hashed or otherwise de-identified (including hashed email addresses), Usage Information, and location information, with third party advertising companies, analytics providers and other third parties for the purpose of serving you more relevant ads on and off the Redbox Platforms.

We use Google Analytics, which uses cookies and similar technologies to collect and analyze information about use of the Redbox Platforms and report on activities and trends. This service may also collect information regarding the use of other websites, apps, and online services. You can learn about Google’s practices by going to http://www.google/policies/privacy/partners, and opt out of them by downloading the Google Analytics opt-out browser add-on, available at http://www.tools.google.com/dlpage/gaoptout.

We may use a variety of companies to serve our advertisements. Some of these companies are members of the Network Advertising Initiative (“NAI”) or the Digital Advertising Alliance (“DAA”) Self-Regulatory Program for Online Behavioral Advertising and you may want to visit the following webpages, which provide “opt-out” mechanisms for participating companies: https://optout.networkadvertising.org and https://optout.aboutads.info. You can opt-out from interest based advertising on your mobile device through your mobile device settings. Please note opting out through these mechanisms does not opt you out of being served advertising and you will continue to receive generic ads while online. Certain states provide additional rights. Please see our sections for residents for California and Virginia below for additional rights you may have.

Back to main

“DO NOT TRACK” AND GLOBAL PRIVACY CONTROL SIGNALS

Do Not TrackNote that your browser settings may allow you to automatically transmit a “Do Not Track” signal to websites and online services you visit. When you choose to turn on the “Do Not Track” settings in your browser, your browser will send a signal to websites, analytics providers, advertisements networks, plug-in providers, and other web service providers you encounter while browsing to stop tracking your activity. To find out more about and set up “Do Not Track,” please visit http://www.allaboutdnt.com

Global Privacy ControlGlobal Privacy Control (“GPC”) is a technical specification in your browser settings that you can use to automatically inform websites of your privacy preferences with regard to third party online tracking. To find out more about and set up GPC, please visit https://globalprivacycontrol.org/#about

Changing Your Information

You are responsible for maintaining the accuracy of the information you submit to us, such as your contact information provided as part of registration. Certain Redbox Platforms allow you to correct or update certain personal information you have provided. Note that when you edit your personal information or change your preferences on a Redbox Platform, information that you remove may persist internally for Redbox’s administrative purposes or within backup media. If you have made any public postings on a Redbox Platform, these communications cannot generally be removed.

Back to main

Your Choices When Using REDBOX PLATFORMS

Redbox offers you the following choices with regard to the information collected through the Redbox Platforms:

Targeted Advertising
Redbox offers visitors to the Redbox Platforms the ability to disable the collection of information through third party cookies and similar tracking technologies for certain targeted advertising and similar purposes. You can opt-out by launching the Privacy Preference Center on our website.

Marketing Emails and Mobile Messages
You may opt out of receiving marketing e-mails by following the opt-out instructions provided to you in those e-mails. Please note that we reserve the right to send you certain communications relating to your account or use of the Redbox Platforms or Redbox services, such as administrative and services announcements. These transactional account messages may be unaffected if you choose to opt out from marketing e-mails.

If you sign up to receive SMS or MMS or RCS messages from Redbox, you may unsubscribe from any SMS or MMS or RCS messages received by replying “STOP”.

With your consent, we may send promotional and non-promotional push notifications or alerts to your device, and may in some cases do so based on your device’s physical proximity to a beacon. You can elect to stop receiving those messages at any time by changing the notification settings on your device.

Other Privacy Rights
If you are a California resident, please see our NOTICE TO CALIFORNIA RESIDENTS for additional information about how to exercise your privacy rights. If you are a Virginia resident, please see our NOTICE TO VIRGINIA RESIDENTS for more information on additional rights you may have. If you are a Nevada resident, please see our Notice to Nevada Residentsfor more information on additional rights you may have.

Back to main

Third Party Content, Sites & Devices

The Redbox Platforms may contain content that is served by someone else or links to third-party content or web sites that Redbox does not control. This includes links from advertisers, sponsors and partners that may use our logo(s) as part of a co-branding relationship. You may also be able to access the Redbox Platforms through third-party devices and platforms, such as a set-top box, internet-connected TV, or similar device. The third-party operators and content providers use their own cookies or other tracking technologies on your device and they may independently collect data from or about you. Redbox is not responsible for the privacy practices employed by any third party.

Back to main

Security

While Redbox takes commercially reasonable steps designed to secure your personal information, no data transmission over the Internet, wireless transmission or electronic storage of information can be guaranteed to be 100% secure. Redbox cannot ensure or warrant the security of any information we collect. You use the Redbox Platforms and provide us information at your own risk.

Back to main

Consent To Transfer

Redbox is based in the United States the information we collect is governed by United States law. By accessing or using a Redbox Platform or providing us with any information, you consent to the transfer, processing and storage of your information in and to the United States and other countries, jurisdictions in which the privacy laws may not be as comprehensive as those in the country where you reside and/or are a citizen. Personal information processed or stored in another jurisdiction may be subject to access requests from governments, courts, or law enforcement in accordance with the laws of that jurisdiction.

Back to main

General Audience Site

The Redbox Platforms are intended for a general audience and are not intended for use by anyone younger than the age of 18 and we do not knowingly collect personal information from children younger than age 18. If we learn that we have inadvertently collected Personal Information from a user who is younger than age 18, we will delete the information from our active databases.

Back to main

Notice To California Residents

1.CALIFORNIA PRIVACY NOTICE

This California Privacy Notice is updated and effective as of December 19, 2022.

This notice supplements Redbox’s Privacy Notice and applies only to California residents. This California Privacy Notice sets forth the disclosures and rights for California Consumers regarding their Personal Information, as required by the California Consumer Privacy Rights Act of 2018 (“CCPA”), the California Privacy Rights Act of 2020 (“CPRA”), and any implementing regulations adopted thereunder. Terms (including defined capitalized terms) used in this California Privacy Notice have the same meanings given in the CCPA and CPRA and the associated regulations, unless otherwise defined.

EXERCISING YOUR CONSUMER REQUEST RIGHTS

California consumers have the right to request: (1) that we disclose to you what Personal Information we collect, use, disclose, and sell, including the right to request that we provide to you the categories and specific pieces of Personal Information we have collected about you (“Right to Know”); (2) that we correct inaccurate Personal Information we hold about you (“Right to Correct”); (3) to opt-out from the sharing of your Personal Information and Sensitive Personal Information to a third party for cross-context behavioral advertising (i.e., targeted advertising) (“Right to Opt-Out of Sharing”); (4) to opt-out from the sale of their Personal Information and Sensitive Personal Information (“Right to Opt-Out of Sale”); and (5) that we limit the use or disclosure of your Sensitive Personal Information to the purposes set forth in the statute, including the use which is necessary and anticipated to perform the services or provide the goods reasonably expected by an average consumer who requests those goods or services (“Right to Limit the Use and Disclosure of Sensitive Personal Information”), all subject to the meanings and exceptions set forth in the CCPA and CPRA. More information on each of these rights is below.

In your request, you must provide enough information to allow us to verify you are the person about whom we collected personal information, or their authorized representative. You must also describe your request with enough detail so that we can understand, evaluate and respond to it. We can’t respond to your request if we can’t verify your identity. Making such a request does not require you to create an account with us, and we will only use the information you provide in a request to verify your identity. Should you need to file an appeal for any prior request, you may do so at https://www.redbox.com/privacy-appeals

Verifying Your Requests

We will take reasonable steps to verify your identity based upon the information you provide and the type of request you are making. When you exercise your Right to Know, Right to Delete, and/or Right to Correct, we may ask that you provide us with information, beyond your full name, in order to verify your identity and fulfill your request. If we are unable to verify that the individual submitting the request is the same individual about whom we have collected information (or someone authorized by that individual to act on their behalf), we will not be able to process the request.

Agents

If you are an authorized representative submitting a request on a user’s behalf, please complete the applicable request per the instructions below. You may also make a request on behalf of your minor child. We will follow up to request a signed, written permission signed by the individual who is the subject of the request authorizing you to make the request on their behalf. The written permission must state your full legal name, the full legal name of the individual who is the subject of the request, and needs to be clear about the permission granted. Alternatively, you may submit a copy of a power of attorney under Probate Code sections 4000-4465. In either case, please also indicate in your email the nature of your request. The consumer’s identity, in addition to your own, will need to be independently verified in order for us to be able to fulfill your request. We may also ask the consumer to directly confirm with us that they provided you permission to submit a request. Please keep in mind that if we do not receive adequate proof that you are authorized to act on the consumer’s behalf, we may deny the request.

Right to Know

California Consumers have the right to know what information we have collected about you (the categories and the specific pieces of information).
If you are a California Consumer and would like to exercise your Right to Know, please submit your request at https://www.redbox.com/your-privacy-choices or call us toll-free at 1-866-733-2693.

Verifying Requests
Please note that we will take steps to verify your identity in order to fulfill your request. We will first verify your email address is active and we will take steps to verify the information you provide to us.

In order to verify your identity, we will request that you provide: your name, email address/phone number (depending on what you have used to interact with Redbox Platforms), the title of your last rental transaction, and the last 4 digits of the credit card used.

If we are unable to verify that the individual submitting the request is the same individual about whom we have collected information (or someone authorized by that individual to act on their behalf), we will not be able to process the request.

In order to have us provide specific pieces of information, we will require a signed declaration under penalty of perjury that you are the consumer whose Personal Information is the subject of the request.

Right to Delete

California Consumers have the right to request that we delete information we have collected from you. If you are a California Consumer and would like to exercise your Right to Delete, please submit your request at https://www.redbox.com/your-privacy-choices or by calling us at 1-866-733-2693.

Please note that as part of the verification process, once you submit a request to delete, we may follow up and require you to confirm that you want your information to be deleted.

Right to Opt-Out Of The Sale or Sharing for Cross Contextual Behavior Advertising Of Personal Information

Right to Opt-Out of Sharing for Cross Contextual Behavioral Advertising
California Consumers have the right to opt-out of the sharing of your Personal Information or Sensitive Personal Information to a third party for cross-context behavioral advertising (i.e., targeted advertising), whether or not for monetary or other valuable consideration. If you are a California Consumer and would like exercise your Right to Opt-Out of Sharing, please submit your request at https://www.redbox.com/your-privacy-choices or call us toll-free at 1-866-733-2693.

Right to Opt-Out of Sale
The CPRA also provides California consumers the right to request to opt-out of the sale of Personal Information.

If you are a California resident and would like to opt-out of the sale of Personal Information, please submit your request by completing the following form: https://www.redbox.com/your-privacy-choices or call us toll-free at 1-866-733-2693.

Cookie-Based Opt Outs for Do Not Sell or Share for Cross Contextual Behavioral Advertising
As discussed above, certain online advertising (and certain analytics or similar marketing business partners) may collect data from visitors to the Redbox Platforms through the use of cookies, which may be considered a “sale” or “share” for cross-context behavioral advertising as defined in the CCPA and CPRA. To disable sharing through cookies set by 3rd parties that may be considered "sales" or “sharing” under the CCPA and CPRA, click here:

In addition, the Digital Advertising Alliance (“DAA”) also offers tools for California consumers to send requests under the CCPA and CPRA to opt out of the sale of personal information by some or all of the participating companies https://www.privacyrights.info/ and you also may want to visit other industry opt out tools, included in our privacy policy under the section titled THIRD-PARTY ADVERTISING AND ANALYTICS COMPANIES AND SIMILAR THIRD PARTIES.

Right to Correct Inaccurate Information

California Consumers the right to request that we correct inaccurate information we hold about you. If you are a California Consumer and would like to exercise your Right to Correct, please submit your request by completing the following form: https://www.redbox.com/your-privacy-choices or call us toll-free at 1-866-733-2693.

Right to Limit the Use and Disclosure of Sensitive Personal Information

Under the CPRA Regulations, a business must only provide the Right to Limit The Use and Disclosure of Sensitive Personal Information when Sensitive Personal Information is collected or processed for the purpose of inferring characteristics about a consumer, or does not fall under certain statutory exceptions, pursuant to CPRA §1798.121. Redbox’s use and disclosure of Sensitive Personal Information is not used for such purpose and/or falls within the statutory exceptions, and we therefore do not offer this right at this time.

Data Retention

Redbox will not retain Personal Information for longer than is reasonably necessary for each disclosed purpose outlined in this California Privacy Notice. We store personal information for as long as necessary for the purposes for which it was collected or which you subsequently authorize it and otherwise to carry out the purposes described in this Privacy Notice. Redbox criteria for determining the period of time in which we will retain Personal Information is outlined as follows:

Category Description Retention Period
Credit/Debit Card Information 16 digit primary account number (PAN) plus cardholder name, expiration date and service code 1 year after the date of the last transaction
Card security information, including full track data from magnetic stripes or chips, card verification codes or values, personal identification numbers (PINs), and/or encrypted PIN blocks Purge immediately after card authorization
Payment card transactional data 7 years post-transaction (unless a longer period is required by contract)
Customer Opt-In/Opt-Out Preferences Documentation that customer has opted in or out of a mode of communication including email and texts Permanent
Customer Information Name, email address, telephone number, address, date of birth, zip code, photos (other than driver's license photos), electronic signature 7 years after the date of the last customer interaction
Video Rental History Information identifying a customer as having requested or obtained specific video materials 7 years after the date of the last customer interaction
Driver’s Licenses/Government Identification Numbers Driver's License or other state identification number, related photograph/computerized image, Social Security number 6 months from the date of collection unless a longer retention period is required by law or regulation

Users younger than 16

Redbox does not knowingly collect or sell Personal Information of users younger than 16 years of age.

Right to Non-Discrimination for the Exercise of a Consumer’s Privacy Rights

California consumers have the right to not receive discriminatory treatment for exercising CCPA and CPRA rights. We will not discriminate against you for exercising your CCPA and CPRA rights.

Notice of Finance Incentive

Under California regulation, certain aspects of our loyalty and similar programs, which provide benefits to consumers, may be considered a financial incentive program. We collect personal information from you in connection with our loyalty program, e.g. contact information (name, email address, residential address) and commercial information (like purchase history) for a number of reasons, including to administer the program, contact you with regard to your account (if any), to provide the benefits to you, to better serve you, and to fulfill your requests associated with the program.

To opt into our loyalty or similar programs, as set forth herein you will need to provide certain information, register for an account and agree to the applicable program terms, or otherwise follow the instructions associated with the loyalty or other similar programs. Participation in our loyalty or other similar programs is voluntary and you can withdraw at any time by calling us toll-free at 1-866-733-2693.

To the extent that we provide programs that may be considered a financial incentive because the program is directly or reasonably related to the collection, deletion or retention of consumer personal information, the value is reasonably related to the overall value we receive from the personal information participants provide specific to the program minus the costs and expenses we incur in providing the program.

PERSONAL INFORMATION REDBOX COLLECTS

The Personal Information we collect about you will depend upon how you use the Redbox Platforms or otherwise interact with us. Accordingly, we may not collect all of the below information about you.

In addition to the below, we may collect and/or use additional types of information, and will do so after providing notice to you and obtaining your consent to the extent such notice and consent is required by the CCPA and CPRA.

Category of Personal Information Collected Categories of Sources from which the Information was Collected Business or Commercial Purpose(s) for which Information is Collected Categories of Third Parties to whom this type of Personal Information is Disclosed for a Business Purpose Categories of Third Parties to Whom this Type of Personal Information is Sold or Shared for Cross Contextual Advertising
Identifiers We may collect this type of information from:
  • You,
  • Cookies and Tracking Technologies,
  • Third party social media companies,
  • Third party business partners, such as data analytics providers, advertising networks, or joint marketing partners.
  • Third party data resellers.
  • allow you to participate in features we offer or to provide related customer services,
  • recognize you across the Redbox Platforms and across devices,
  • tailor content recommendations and offers we display to you,
  • process a rental, purchase, or other transaction
  • provide you with information, products, or services that you have requested or that we think may interest you,
  • investigate and prevent fraudulent transactions and other illegal activities or activities that violate our policies,
  • to comply with a legal obligation, such as respond to subpoenas or other legal process,
  • process your registration, including verifying your information is active and valid,
  • contact you with regard to your use of the Redbox Platforms or any Redbox service and, in our discretion, changes to the Redbox Platform policies.
We may disclose this type of information to:
  • Service Providers,
  • Third parties we partner with for contests, sweepstakes, or promotions,
  • Third party advertising and analytics companies,
  • Third parties who may acquire your information as a result of a merger, acquisition or otherwise ownership transition.
  • Third parties or affiliated companies when you agree to or direct that we share your information with them.
  • Other third parties (including government agencies) as required by law or in connection with court proceedings (such as pursuant to subpoenas or court orders).
  • Third party advertising, analytics, and other similar marketing business partners may have access to this data, and this may be considered a “sale” or “share” under the CCPA and CPRA under certain circumstances.
Any categories of personal information described in Section 1798.140 We may collect this type of information from:
  • You
  • allow you to participate in features we offer or to provide related customer services,
  • recognize you across the Redbox Platforms and across devices,
  • tailor content recommendations and offers we display to you,
  • process a rental, purchase, or other transaction,
  • provide you with information, products, or services that you have requested or that we think may interest you,
  • investigate and prevent fraudulent transactions and other illegal activities or activities that violate our policies,
  • process your registration, including verifying your information is active and valid,
  • contact you with regard to your use of the Redbox Platforms or any Redbox service and, in our discretion, changes to the Redbox Platform policies.

We may disclose this type of information to:

  • Service Providers,
  • Third parties we partner with for contests, sweepstakes, or promotions,
  • Third party advertising and analytics companies,
  • Third parties who may acquire your information as a result of a merger, acquisition or other ownership transition,
  • Third parties or affiliated companies when you agree to or direct that we share your information with them,
  • Other third parties (including government agencies) as required by law or in connection with court proceedings (such as pursuant to subpoenas or court orders).
  • Third party advertising, analytics, and other similar marketing business partners may have access to this data, and this may be considered a “sale” or “share” under the CCPA and CPRA under certain circumstances.
Commercial information

We may collect this type of information from:

  • You,
  • Third party social media companies,
  • Third party business partners such as data analytics providers, advertising networks, or joint marketing partners
  • Allow you to participate in features we offer or to provide related customer services,
  • tailor content recommendations and offers we display to you,
  • investigate and prevent fraudulent transactions and other illegal activities or activities that violate our policies,
  • process a rental, purchase, or other transaction.
  • improve the Redbox Platforms or our services and for internal business purposes

We may disclose this type of information to:

  • Service Providers,
  • Third parties with whom we have joint marketing and similar arrangements,
  • Third parties who may acquire your information as a result of a merger, acquisition or other ownership transition,
  • Third parties when you agree to or direct that we share your information with them,
  • Other third parties (including government agencies) as required by law or in connection with court proceedings.

Third-party advertising, analytics, and other similar marketing business partners may have access to this data, and this may be considered a “sale” or “share” under the CCPA and CPRA under certain circumstances.

Internet or other electronic network activity information We may collect this type of information from:
  • Cookies and Tracking Technologies,
  • allow you to participate in features we offer or to provide related customer services,
  • recognize you across the Redbox Platforms and across devices,
  • tailor content recommendations and offers we display to you,
  • process a rental, purchase, or other transaction,
  • investigate and prevent fraudulent transactions and other illegal activities or activities that violate our policies,
  • improve the Redbox Platforms or our services and for internal business purposes.
We may disclose this type of information to:
  • Service Providers,
  • Third parties who may acquire your information as a result of a merger, acquisition or other ownership transition,
  • Third parties when you agree to or direct that we share your information with them,
  • Other third parties (including government agencies) as required by law or in connection with court proceedings.
  • Third party advertising, analytics, and other similar marketing business partners may have access to this data, and this may be considered a “sale” or “share” under the CCPA and CPRA under certain circumstances.
Geolocation data We may collect this type of information from:
  • Cookies and Tracking Technologies,
  • allow you to participate in features we offer or to provide related customer services,
  • tailor content recommendations and offers we display to you,
  • investigate and prevent fraudulent transactions and other illegal activities or activities that violate our policies,
  • improve the Redbox Platforms or our services and for internal business purposes.
We may disclose this type of information to:
  • Service Providers,
  • Third parties who may acquire your information as a result of a merger, acquisition or other ownership transition,
  • Third parties when you agree to or direct that we share your information with them
  • Other third parties (including government agencies) as required by law or in connection with court proceedings.
  • Third party advertising, analytics, and other similar marketing business partners may have access to this data, and this may be considered a “sale” or “share” under the CCPA and CPRA under certain circumstances.
Inferences drawn from any of the information identified above to create a profile about a You We may collect this type of information from:
  • You,
  • Cookies and Tracking Technologies,
  • Third party social media companies,
  • Third party business partners, such as data analytics providers, advertising networks, or joint marketing partners,
  • Third party data resellers.
  • allow you to participate in features we offer or to provide related customer services,
  • tailor content recommendations and offers we display to you,
  • improve the Redbox Platforms or our services and for internal business purposes.
We may disclose this type of information to:
  • Service Providers,
  • Third parties who may acquire your information as a result of a merger, acquisition or other ownership transition,
  • Third parties when you agree to or direct that we share your information with them,
  • Other third parties (including government agencies) as required by law or in connection with court proceedings.
  • Third party advertising, analytics, and other similar marketing business partners may have access to this data, and this may be considered a “sale” or “share” under the CCPA and CPRA under certain circumstances.

Back to main

Contact for More Information

You can contact us for more information by writing us at Legal, Redbox Entertainment, Inc., 1 Tower Lane, Suite 800, Oakbrook Terrace, Illinois 60181 or emailing [email protected].

Other California Rights/Your California Privacy Rights

California Civil Code Section 1798.83 permits residents of California to request certain details about how their personal information has been shared during the calendar year with third parties for those third parties’ own direct marketing purposes, unless the business permits California residents to opt in to, or opt out of, this type of sharing. Redbox qualifies for this alternative option. As noted above, we will not share personal information about you with third parties for their own direct marketing purposes if you do not opt-in, or if you choose to opt-out, at the time Redbox offers you that choice.

If you are a California resident and you have questions about our practices with respect to sharing personal information with third parties for their direct marketing purposes and your ability to exercise choice, please write us at Attention Legal, Redbox Entertainment, Inc., 1 Tower Lane, Suite 800, Oakbrook Terrace, Illinois 60181. You must put the statement “Your California Privacy Rights” in the subject field of your email or in the address line of your envelope. You must include your name, street address, city, state, and ZIP code. We are not responsible for notices that are not labeled or sent properly, or do not have complete information.

Back to main

NOTICE TO VIRGINIA RESIDENTS

We set forth above in our Privacy Policy the categories of personal data we process, the purpose for processing personal data, the categories of personal data shared, and the categories of third parties with whom personal data is shared.

If you are a Virginia Consumer and would like to exercise your rights pursuant to the Virginia Consumer Data Protection Act (VCDPA), and any implementing regulations adopted thereunder, please complete this form: https://www.redbox.com/your-privacy-choices or call us toll-free at 1-866-733-2693 to submit a request.

Virginia Consumers have the following rights, all subject to the meanings and exceptions set forth in the VCDPA:

  1. To confirm whether we are processing your Personal Data and request to access such data ("Right to Access").
  2. That we correct inaccurate Personal Data we hold about you (“Right to Correct”).
  3. That we delete the Personal Data provided by you or obtained about you ("Right to Delete").
  4. To obtain a copy of the Personal Data previously provided by you to us and, to the extent feasible, in a readily usable format to allow data portability (“Right to Obtain”).
  5. To opt-out out of the processing of your Personal Data for the purposes of targeted advertising (“Right to Opt-Out of Targeted Advertising”).

*Redbox engages in online advertising practices (and certain analytics or similar activities) that may be considered “targeted advertising” under the VCDPA. To disable sharing through cookies set by 3rd parties that may be considered targeted advertising under the VCDPA, click here:

Open the Cookie Preference Center and turn the toggle switch next to “Targeting Cookies/Cookie Preferences” to the left so it turns from blue to grey, then click “Save My Preference”.

VCDPA Appeals
Pursuant to the VCDPA, if, for any reason, you would like to appeal our decision relating to your request, you have the right to submit an appeal and can do so by completing this form https://www.redbox.com/privacy-appeals or call us toll-free at 1-866-733-2693 to submit a request. Please include your full name, the basis for your appeal, and any additional information to consider.

Back to main

Notice to Nevada Residents

Redbox does not currently sell your covered information as those terms are defined under applicable Nevada law. You may still submit an opt-out request and we will honor that request as required by Nevada law if Redbox were to engage in such a sale in the future. If you are a Nevada resident and would like to opt-out of the sale of your covered information, please submit your request to https://www.redbox.com/your-privacy-choices or call us toll-free at 1-866-733-2693. Your request must include your full name, street address, city, state, zip code, and an email address so that we can contact if needed regarding this request. If you previously provided a phone number, it will assist us in making sure we identify you as someone who wants to opt-out. You may also be required to take reasonable steps as we determine from time to time in order to verify your identity and/or the authenticity of the request. Redbox will respond to your request within sixty (60) days either confirming that your request has been processed or indicating that we need an additional thirty (30) days to complete the request.

Back to main