- Privacy Shield Framework
- Collection of Personal Information
- Updating Your Personal Information and Privacy Preferences
- How Your Personal Information Is Used
- Legal Bases for Processing
- Information Sharing with Service Providers / Agents
- Data Retention and Data Portability
- Choice / Opt Out
- Protection of Your Personal Information
- Cookie and Tracking Technologies
- Links to third party sites
- Social Media Widgets
- Single Sign-On
- Referral Program Emails
- Entities Collecting Personal Information
- Privacy Complaints
Last updated on March 25, 2019.
Shutterstock is made up of different legal entities. This privacy notice is issued on behalf of the Shutterstock group of companies. When we refer to "Shutterstock", "we", "us" or "our" in this privacy notice, we mean the Shutterstock entity that acts as the controller or processor of your information, as explained in more detail in the "Entities Collecting Personal Information" section below.
Privacy Shield Framework
Shutterstock participates in and has certified its compliance with the EU-U.S. Privacy Shield Framework and the Swiss-U.S. Privacy Shield. Shutterstock is committed to subjecting all personal data received from European Union (EU) member countries, United Kingdom (UK), and Switzerland, respectively, in reliance on the Privacy Shield Framework, to the Framework’s applicable Principles. To learn more about the Privacy Shield Frameworks, visit the U.S. Department of Commerce’s Privacy Shield List. [https://www.privacyshield.gov/list]
Shutterstock is responsible for the processing of personal data it receives, under the Privacy Shield Framework, and subsequently transfers to a third party acting as an agent on its behalf. Shutterstock complies with the Privacy Shield Principles for all onward transfers of personal data from the EU, UK, and Switzerland, including the onward transfer liability provisions.
With respect to personal data received or transferred pursuant to the Privacy Shield Frameworks, Shutterstock is subject to the regulatory enforcement powers of the U.S. Federal Trade Commission. In certain situations, Shutterstock may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, please contact our U.S.-based third party dispute resolution provider (free of charge) at https://feedback-form.truste.com/watchdog/request.
Under certain conditions, more fully described on the Privacy Shield website [https://www.privacyshield.gov/article?id=How-to-Submit-a-Complaint], you may be entitled to invoke binding arbitration when other dispute resolution procedures have been exhausted.
Collection of Personal Information
As a visitor to the Site, you can engage in many activities without providing any Personal Information.
However, when you register to use a Shutterstock site and order products or services as a Shutterstock subscriber in order to provide the services to you, we may collect the following Personal Information from you:
- Contact information such as your name, phone and fax numbers, address and email address; and
- Billing information such as the number, expiration date, card type and billing address of your credit card;
- Demographic information such as your job title, job description and company name and company type; and
- Profile data, including your username and password, details about your purchases and the Content that you license from us.
If you submit content to Shutterstock for licensing, you may be asked to provide the following information:
- Contact information such as your name, phone number, primary address, and email address.
- Shutterstock may verify this information by asking you to either: a) upload a scan of a government issued ID (which will be stored securely on our servers); or b) provide a credit card number. If used to verify your identity, your credit card number will be used solely for the purpose of verifying your name and address. The credit card number will not be stored.
- Payment and contributor information including, but not limited to, payout method, payout email, desired display name, content focus, camera equipment, and information about your skill level and creative process.
Depending upon the activity, some of the information that we ask you to provide is identified as mandatory and some as voluntary. If you do not provide the mandatory data with respect to a particular activity, you will not be able to engage in that activity.
As is true of most websites, when you use the Site, Shutterstock or third party subprocessors contracted by Shutterstock may also collect certain technical and routing information about your computer to facilitate your use of the Site and its services. For example, we may log environmental variables, such as browser type, operating system, CPU speed, and the Internet Protocol (IP) address of your computer. We use these environmental variables to facilitate and track your use of the Site and its services. Shutterstock also uses such environmental variables to measure traffic patterns on the Site. To better understand the needs of our visitors to the Site we may occasionally match such information with your Personal Information.
In order to reduce errors in our database, authenticate our users, and prevent abuse of our system, we may on occasion supplement the Personal Information you submit to us with information from third-party sources. For example, we may supplement your contact information with address information provided by the U.S. Postal Service to qualify your information and prevent errors in our database. We may supplement the information that we collect directly from you with information stored in third-party databases, such as demographic information or company information in order to make it more likely that any marketing communications we send will be relevant and of interest to you. You may find a list of any third-party subprocessors that we use to process information here.
When you download and use our Mobile Apps or Services, we automatically collect information on the type of device you use, and operating system version. We do not ask for, access or track any location-based information from your mobile device at any time while downloading or using our Mobile Apps or Services.
Updating Your Personal Information and Privacy Preferences
Upon request Shutterstock will provide you with information about whether we hold, or process on behalf of a third party, any of your personal information. To request this information please contact us at firstname.lastname@example.org.
You have the right to access and correct, or delete your Personal Information and privacy preferences at any time. This may be accomplished by clicking on the link, "My Account", where you can view and make changes to most of your Personal Information immediately. If you wish to delete your account or request that we no longer use your information to provide you services by visiting the "My Account Preferences" link on the site and following the instructions under the section "Delete My Account". If you are a contributor, you can change your profile here. For security purposes, certain Personal Information can only be changed by contacting support. We will respond to your request promptly within a reasonable timeframe.
How Your Personal Information Is Used
- Authenticate and provide access to the Shutterstock websites, mobiles applications, and services.
- Process your financial transactions.
- Send you order / renewal confirmations.
- Register your rights, if any, to technical support or other benefits that may be made available to registered users.
- Respond to customer service requests, questions and concerns.
- Administer your account.
- Send you requested product or service information.
- Keep you informed about special offers and services of Shutterstock and selected third parties.
- Administer promotions and sweepstakes you enter and notify you of the results.
- Investigate, prevent or take action regarding illegal activities and/or violations of our Terms of Service.
- Meet our research and product/service development needs and to improve our Site, services and offerings; and
- Customize your experience, including targeting our services, search results, and offerings to you.
We store information that we collect through cookies, log files, transparent images, and/or third party sources to create a summary of your preferences. We tie your personally identifiable information, and/or your membership usage history, to information in the summary, in order to provide tailored promotions and marketing offers, to improve the content of the site for you and/or to determine your preferences.
In certain situations, Shutterstock may be required to comply with legal obligations to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
Where required by law (e.g., to comply with a subpoena, warrant, court order, or legal process served on Shutterstock), and when we believe that disclosure is necessary to protect our rights, avoid litigation, protect your safety or the safety of others, investigate fraud, and/or respond to a government request. We may also disclose information about you in order to comply with our legal obligations if we determine that such disclosure should be made for reasons of national security, law enforcement, or other issues of public importance.
Legal Bases for Processing
For individuals located in European Economic Area (EEA) and UK, we rely on the following legal bases for the processing of your personal data:
- Where processing is necessary to perform our contract with you:
- Providing access to the Shutterstock websites, mobiles applications, and services to fulfill the terms of your contract;
- Customizing your experience, including targeting our services, search results, and offerings to you.
- Providing information so that you can make decisions about Shutterstock services;
- Processing your financial transactions and sending you order / renewal confirmations;
- Register your rights, if any, to technical support or other benefits that may be made available to registered users;
- Responding to your customer service requests, questions and concerns;
- Administering your account.
- Processing is necessary to protect the vital interests of the data subject or another natural person:
- Investigating and protecting against intellectual property infringement;
- Confirming the validity of licenses to Shutterstock content;
- Investigating, preventing or taking action regarding violations of our Terms of Service.
- Processing in furtherance of Shutterstock’s legitimate interests:
- Providing, improving and customizing our website and services;
- Administering our operations and meeting our contractual obligations to our customers and contributors;
- Analyzing and understanding how our online platforms are being used;
- Maintaining the security and integrity of our websites, mobile applications and other services;
- Sending you requested product or service information and keeping you informed about special offers and services of Shutterstock and selected third parties;
- Administering promotions and sweepstakes;
- Research and product/service development for the improvement of our Site, services and offerings.
- Processing is necessary for compliance with Shutterstock’s legal obligations, including:
- Investigating and protecting against intellectual property infringement, fraud, spam, harassment, crime and security risks;
- Compliance with money laundering, bribery, corruption, and applicable sanctions laws and regulations; and
- Meeting financial reporting and other obligations under applicable securities laws.
Information Sharing with Service Providers / Agents
Shutterstock uses one or more outside credit card processing companies to bill you for our goods and services. To the best of our knowledge, these companies do not retain, share, store or use personally identifiable information for any other purpose.
We also share Personal Information with certain companies that perform services on our behalf. We only share the Personal Information which is necessary for them to perform those services. We require any company with which we may share Personal Information to protect that data in a manner consistent with this policy and to limit the use of such Personal Information to the performance of services for Shutterstock. You may find a list of these third-party subprocessors here.
We do not sell or otherwise provide Personal Information to other companies for the marketing of their own products or services.
Data Retention and Data Portability
We will retain your information for as long as your account is active and your information is needed to provide you services, as necessary to validate or enforce the licenses to use Content, or as required to fulfill our legal obligations. If you wish to delete your account or request that we no longer use your information to provide you services by visiting the "My Account Preferences" link on the site and following the instructions under the section "Delete My Account". If you are unable to access your account, please contact email@example.com. We will respond to your request within 30 days. We will retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.
If you have licensed Content from Shutterstock, you may access your license history by visiting License History.
Choice / Opt Out
You may "opt out" of receiving Shutterstock's email updates, newsletters and/or partner emails by clicking on the "My Account" link on the Site and making the appropriate selections. The choice to opt out of such communications is also generally available during the sign-up process. Shutterstock will still contact you when there are changes to the Terms of Service or Submitter Terms of Service, as applicable. In addition, we will still send you service-related announcements including, but not limited to, a registration email, benefit notification emails, emails automatically triggered by actions you took on the Site and bill related notices. Generally, you may not opt-out of these communications, which are not promotional in nature. If you wish not to receive them, you have the option of deactivating your account
If you use a Shutterstock mobile app, we may send you push notifications from time-to-time in order to update you about any events or promotions that we may be running. If you no longer wish to receive these types of communications, you may turn them off at the device level.
You may request the deletion of your Personal Data from our systems and/or opt-out of further processing of your Personal Data by visiting the "My Account – Preferences" page and following the instructions under the section titled "Delete My Personal Data". If you are unable to access your account, please contact firstname.lastname@example.org
Protection of Your Personal Information
The Personal Information that you provide in connection with the use of the Site is protected in several ways.
- Access by you to your account profile is available through a password and unique customer ID selected by you. This password is encrypted. You should strive to use a strong, alpha-numeric password which you should not divulge to anyone.
- Your Personal Information resides on secure servers that only selected Shutterstock personnel and contractors have access to via password.
- Your Personal Information is encrypted whenever it is transmitted to Shutterstock.
- When you enter sensitive information (such as credit card number) on our registration or order forms, we encrypt that information using transport layer security technology
We strive to protect the Personal Information submitted to us, both during transmission and once we receive it. However, no method of transmission over the Internet, or method of electronic storage, is 100% secure. While we take into account the sensitivity of the Personal Information we collect, process and store, and the current state of technology to use these measures protect your Personal Information, we cannot guarantee its absolute security.
If you have any questions about security on our Web Sites, you can send email to us at email@example.com.
Links to third party sites
You may be able to log in to our site using sign-in services such as Facebook Connect or an Open ID provider. These services will authenticate your identity and provide you the option to share certain personal information with us such as your name and email address to pre-populate our sign up form. Services like Facebook Connect give you the option to post information about your activities on this Web site to your profile page to share with others within your network.
Referral Program Emails
If you choose to use our referral service to tell a friend about our Site, we will ask you for your friend's name and email address. We will automatically send your friend a one-time email inviting him or her to visit the Site. Shutterstock stores this information for the sole purpose of sending this one-time email and tracking the success of our referral program.
Your friend may contact firstname.lastname@example.org to request that we remove this information from our database.
We do not intend to solicit or collect Personal Information from anyone under the age of 18. If you are under 18, do not enter information on this site or engage our services. If you believe a child of yours under the age of 18 has entered Personal Information please contact email@example.com to have the data removed and terminate the child's account.
Entities Collecting Personal Information
Personal Information on this website is collected by Shutterstock, Inc., Empire State Building, 350 Fifth Avenue, 21st Floor, New York, NY 10118, USA and its telephone number is 1-866-663-3954.
We have appointed a data protection officer (DPO) for the Shutterstock Group who is responsible for overseeing questions in relation to this privacy notice. If you have any questions, concerns, or requests about this privacy notice, how we manage your Personal Information, or any other issue relating to your Personal Information, please contact our DPO:Shutterstock, Inc.
Attn: Data Protection Officer
350 Fifth Avenue, 21st Floor, New York, NY 10118
Data Controller (Location of Incorporation or Organization)
How other members of the Shutterstock group of companies may be involved in the processing of Personal Information is described in our information about subprocessing within the Shutterstock Group.
Shutterstock’s local representative in the European Economic Area is the Shutterstock group’s main establishment in the EEA, Shutterstock Ireland Limited:Shutterstock Ireland Limited
34-37 Clarendon St, 2nd floor
Dublin 2, D02 DE61
Individuals located in certain countries, including the European Economic Area, have certain statutory rights in relation to their personal data. Subject to any exemptions provided by law, you may have the right to request access to Personal Data, seek to update, delete or correct this Information, and request to restrict further processing of your Personal Data.
To the extent that Shutterstock's processing of your Personal Data is subject to the EU General Data Protection Regulation, Shutterstock relies on its legitimate interests, described above, to process your data. Where Shutterstock processes certain Personal Data for Shutterstock's own direct marketing purposes, you have a right to object to Shutterstock's use of your Personal Data for this purpose at any time by clicking on the link, "My Account" and opting out from receiving all email. If you are a contributor, you can change your profile here.
You may request the deletion of your Personal Data from our systems and/or opt-out of further processing of your Personal Data by visiting the "My Account – Preferences" page and following the instructions under the section titled "Delete My Personal Data"
If you wish to make any other objection to the processor of your personal data, you may also object to processing by emailing firstname.lastname@example.org
Attn: Data Protection Officer
350 Fifth Avenue, 21st Floor, New York, NY 10118
Subject to applicable law, you also have the right to lodge a complaint with your local data protection authority or the Irish Data Protection Commissioner, which is Shutterstock’s lead supervisory authority in the European Union. If you are a resident of the European Economic Area and believe we maintain your Personal Data within the scope of the General Data Protection Regulation (GDPR), you may direct questions or complaints to your local data protection authority or our lead supervisory authority:Irish Data Protection Commissioner
Office of the Data Protection Commissioner
Canal House, Station Road, Portarlington, Co. Laois, R32 AP23, Ireland
Phone: +353 57 868 4757
Fax: +353 57 868 4757