Effective as of December 10, 2022
We know your privacy is important to you, and we want you to know it’s important to us too. This Privacy Policy is meant to explain our practices when it comes to your use of our products, services, apps and websites. We encourage you to take the time to review it carefully, to understand what information we collect, why we collect it, and what we do with it.
DT Corporation, including its corporate affiliates (collectively “IDT”), is a global provider of various telecommunication, payment and other services and products for our business and residential customers.
If you are a customer located in the European Economic Area (“EEA”), the following corporate affiliate of IDT Corporation processes your personal data as a controller under the General Data Protection Regulation, including for the provision of its products and services, marketing and support:
IDT Retail Europe Limited Registration number 135555314
c/o Sable Accounting Ltd, 13th Floor One Croydon, 12-16 Addiscombe Road Croydon, CR0 0XT
This Privacy Policy sets forth our policies and procedures regarding the collection, use and sharing of your personal information. We also explain the steps we take to protect your information and how you can limit the collection, use and sharing of your information.
IDT Corporation has many corporate affiliates, both in the United States and internationally, and this Privacy Policy applies generally to our customers, prospective customers, users of our products and services, users of and visitors to the IDT family of websites and applications, and members of any IDT loyalty or rewards program. In addition to this general Privacy Policy, the specific privacy policies listed below in the section Specific Product or Brand Privacy Policies also apply if you use any of the applicable products and services or interact with any of the referenced IDT affiliates.
This Privacy Policy and the policies listed below under Specific Product or Brand Privacy Policies apply only to IDT products, services, websites and applications that carry an IDT brand, and not to third party services, websites and apps to which we link.
If you do not agree with this Privacy Policy, do not access or use our products, services, websites or apps, or interact with any other aspect of our business.
The software that is made available for your use on this Site is the copyrighted work of IDT Express and/or its suppliers and partners. Use of such software is governed by these Terms of Use. You may not reverse engineer, decompile or otherwise attempt to discover the source code of the software available on the Web site. WITHOUT LIMITING THE FOREGOING, ANY ATTEMPT TO COPY OR REPRODUCE THE SOFTWARE TO ANY COMPUTER, SERVER OR LOCATION FOR FURTHER REPRODUCTION OR REDISTRIBUTION IS EXPRESSLY PROHIBITED.
IDT receives and collects both personal and non-identifying information from you when we provide you with our services, when you install, access or use our websites, apps and services and when you interact or communicate with us. Personal information means information either on its own or in conjunction with other data that enables a specific person to be identified, but does not include “de- identified,” “anonymous,” or “aggregate” information, which is not otherwise associated with a specific person. Non-identifying information means information that by itself cannot be used to identify a specific person.
When you purchase, use or sign up for one of our products or services, when you request us to contact you, or through other interactions with us, we may ask you for certain personal information, such as your name, birthdate, address, e-mail address, telephone number, and payment information. When you request support from us, we may also collect information from you such as login credentials, security code, contact information, documentation, screenshots, or other information you or we may believe is helpful to solving the issue. When you speak with our customer service or sales representative on the phone, your calls may be recorded and/or monitored for quality assurance and training purposes.
We and our service providers and vendors, such as our advertising and analytics partners, collect information about your visits to our websites and your interactions with our services, apps, advertisements and content. Depending on the service and your device, we may automatically collect information such as your IP address, service related diagnostic and performance information (how you use the service), call records or messages sent with our services, browsing history, certain data on your device, device and marketing identifiers, and geolocation data (if you use our location services).
We and our service providers may collect information in connection with your use of our services delivered via our platform.
We collect device-specific information from you, including your hardware model, operating system version, firmware, browser information, device and network configuration, device identifier, and IP address. We use the device information we collect in order to deliver and improve our services.
We use all the information we collect and receive to help us operate, provide, improve, understand, customize, support, and market our services. In addition, we use your information for general, operational and administrative purposes, including maintaining your account, authenticating you and contacting you. As used in this Privacy Policy, the terms “use,” “using” and “processing” information include using cookies or other similar technologies on a computer/phone/device, subjecting the information to statistical or other analysis and using or handling information in any way, including but not limited to, scanning, collecting, storing, evaluating, aggregating, modifying, deleting, using, combining, disclosing and sharing information among our affiliates both in and outside the United States and to select service providers and vendors.
In addition, how we use the information we collect depends on which of our services you use, how you use them, and specific preferences you may have communicated to us. We list below the specific purposes for which we collect your information.
We share all the information we collect and receive with our affiliates, both in and outside the United States, and to select service providers and vendors, to help us operate, provide, improve, understand, customize, support, and market our services, and for general, operational and administrative purposes, including maintaining your account, authenticating you and contacting you. When we share information with our service providers and vendors, we require them to use your information in accordance with our instructions and terms or with express permission from you and not to sell your information. In addition, you share your information as you use and communicate through our services.
More specifically, we may share your information as detailed below:
We share information within the IDT family of companies, including our affiliates both in and outside the United States primarily to operate, provide, support and market our services. For example, if you purchase a service, then we share your purchase information with various IDT affiliates in order to process your transaction. We may share your information in connection with a sale, merger, liquidation, or reorganization of our business or assets.
We work with various service providers and vendors for a variety of business purposes such as to help us deliver, support and market our services. We share information with these service providers and vendors to the extent reasonably necessary for them to perform work on our behalf. For example, we may provide your credit card information and billing address to our payment processing company solely for the purpose of processing payment for a transaction you have requested. More specifically we share information with the following service providers and vendors:
We may disclose personal data as required by applicable law, regulation, legal process or government request; to protect IDT, our services, our customers or the public from harm or illegal activities, and to enforce our agreements, policies and service terms. We may share personal data with our outside auditors, lawyers and regulators.
We share information about you with third parties when you give us consent to do so. For example, we often display use cases or testimonials of satisfied customers on our public websites and require your consent to identify you in your individual capacity.
You share your information as you use and communicate through our services. The name on your account, your phone number, profile name, photo, and/or online status may be displayed to people that you make calls to and to other users of the services so that they may contact you. Depending on the service you’re using, you may be able to control what’s displayed by adjusting your settings within the mobile app or your customer account, or by contacting customer care at the address provided when you signed up for the services.
We conduct credit checks on new customers in order to control the risk of non-payment. In the event of non- or late payment, we may disclose your name, address and other details to credit bureaus and agencies. They may use that information to assess your credit rating and provide that rating to other companies.
IDT does not sell, rent or lease its customer lists to third parties.
IDT has technical, organizational and physical safeguards in place to help protect against unauthorized access to, use or disclosure of the information we collect and store. Employees are trained on the importance of protecting privacy and on the proper access to, use and disclosure of customer information. IDT secures information on computer servers in a controlled, secure environment, protected from unauthorized access, use or disclosure. We use Secure Socket Layer (SSL) encrypted protection to protect the personal information transmitted to our websites. Our websites and apps are PCI compliant in connection with your credit card information. Although we work hard to protect your information that we collect and store, no program is 100% secure and we cannot guarantee that our safeguards will prevent every unauthorized attempt to access, use or disclose that information. Therefore, you acknowledge the risk that third parties may gain unauthorized access to your information. Keep your account password secret and please let us know immediately if you think your password was compromised. Remember, you are responsible for any activity under your account using your account password or other credentials. IDT maintains security and incident response plans to handle incidents involving unauthorized access to information we collect or store. If you become aware of a security issue, please contact us.
Personal information held by IDT is stored on and processed on computers situated in the United States and in the EEA. We and/or our service providers also process data in some other countries for customer care, account management and service provisioning.
If you are an EEA resident, your personal data held by IDT may be transferred to, and stored at, destinations outside the EEA that may not be subject to equivalent data protection laws, including the United States. When you sign up for service with IDT or inquire about our services, we transfer your information to the United States and other countries as necessary to perform our agreement with you or to respond to an inquiry you make. It may also be processed by staff situated outside the EEA who work for us or for one of our suppliers.
Accordingly, by using our services, you authorize the transfer of your information to the United States, where we are based, and to other locations where we and/or our service providers operate, and to its (and their) storage and use as specified in this Privacy Policy and any applicable terms of service or other agreement between you and IDT. In some cases, IDT may seek specific consent for the use or transfer of your information overseas at the time of collection. If you do not consent, we may be unable to provide you with the services you requested. The United States and other countries where we operate may not have protections for personal information equivalent to those in your home country.
Where your information is transferred outside the EEA, we will take all steps reasonably necessary to ensure that your data is subject to appropriate safeguards, such as relying on a recognized legal adequacy mechanism, and that it is treated securely and in accordance with this Privacy Policy.
To facilitate our global operations, we transfer information among our corporate affiliates in countries whose privacy and data protection laws may not be as robust as the laws of the countries where our customers and users are based. For data transfers from the EEA to the United States and other countries we make use of legally recognized data transfer mechanisms, which may include standard contractual clauses approved by the European Commission, reliance on the European Commission’s adequacy decisions about certain countries, privacy shield frameworks, binding corporate rules for transfers to data processors, or other appropriate legal mechanisms to safeguard the transfer.
Some of the service providers and vendors described in this Privacy Policy, which provide services to us under contract, are based in other countries that may not have equivalent privacy and data protection laws to the country in which you reside. When we share information of users in the EEA with such service providers and vendors, we shall make use of legally-recognized data transfer mechanisms, which may include privacy shield frameworks, the European Commission’s standard contractual clauses, binding corporate rules for transfers to data processors, or other appropriate legal mechanisms to safeguard the transfer.
We store your information until it is no longer necessary to provide the services or otherwise relevant for the purposes for which it was collected. This time period may vary depending on the type of information and the services used, as detailed below, and applicable law, which may require us to maintain information for a set amount of time. After such time, we will either delete or anonymize your information or, if this is not possible (for example, because the information has been stored in backup archives), then we will securely store your information and isolate it from any further use until deletion is possible. We may also retain aggregate information beyond this time for research purposes and to help us develop and improve our services. You cannot be identified from anonymized information retained or used for these purposes.
Your choices. You have choices about how we use and share your information and there may be additional protections that apply with regard to certain information we collect depending on where you reside.
Access to your account information. Consistent with applicable laws and data security requirements, we will reasonably honor written requests from you to access or amend your account information, such as name, address, and billing information. You are responsible for ensuring that the information on file with IDT is current and accurate. You may access and update your account information by logging into your account or contacting us as described in this Privacy Policy. Where permitted by law, we may charge a reasonable fee to process requests for access to data and may limit the number of requests per year. Your right to amend your information is subject to our records retention policies. To request deletion of your IDT account, please contact us as described in this Privacy Policy. You should know that deletion of your IDT account will result in you permanently losing access to your account and all customer data to which you previously had access through your account. Please note that certain data associated with that account may nonetheless remain on IDT’s servers in an aggregated or anonymized form that does not specifically identify you. Similarly, data associated with your account that we are required by law to maintain will also not be deleted.
Opt out of communications. You may opt out of receiving promotional communications from us by using some or all of the following methods: the unsubscribe link within each e-mail, replying STOP to a text message, updating your app notification preferences, updating your e-mail preferences within your service account settings menu, or by contacting us as provided below to have your contact information removed from our promotional list or registration database. Even after you opt out from receiving promotional messages from us, you will continue to receive transactional and informational messages from us regarding our services. Depending on your type of account with IDT, you may be able to opt out of some notification messages in your account settings.
Customer Proprietary Network Information (CPNI). For residents of the United States, CPNI is information made available to us solely by virtue of our relationship with you that relates to the type, quantity, destination, technical configuration, location, and amount of use of the telecommunications and interconnected VoIP services you purchase from us, as well as related billing information. You have a right, and we have a duty, under U.S. federal law to protect the confidentiality of your CPNI. We use and share your CPNI within the IDT family of Companies and with/to their agents, contractors and partners for marketing purposes, including to offer you services that are different from the services you currently purchase from us. If you don’t want your CPNI used for the marketing purposes described above, please contact us as described in this Privacy Policy. Unless you notify us, we may use your CPNI as described above and your choice will remain valid until you notify us that you wish to change your selection. Your decision about use of your CPNI will not affect the provision of any services you currently have with us. Note: this CPNI notice may not apply to residents of certain states, including Arizona.
Telemarketing. federal “Do Not Call” laws allow U.S. residents you to place your phone numbers on the National Do Not Call Registry to prevent telemarketing calls to those numbers. To add your numbers to this list, please call 1-888-382-1222, or visit www.donotcall.gov. Most telemarketing laws allow companies to contact their own customers without consulting the Federal or State Do Not Call lists. If you would like to be removed from IDT’s telemarketing list, please contact us as described in this Privacy Policy. Please allow 30 days for your telephone number to be removed from any sales programs that are currently underway. Please note that we may still call you regarding your services and account even if you remove your number from our telemarketing list.
Email, Text Messages and Push Notifications. Marketing emails you receive from us will include an unsubscribe feature usually found at the bottom of the email that you may use to opt out of receiving future marketing emails. Marketing text and SMS messages from us also contain an opt-out feature that you can use to prevent future marketing text and SMS messages from us. You may refuse to consent to receive calls and texts from IDT and its affiliates that require your consent, including autodialed, pre- recorded or artificial voice telemarketing calls. You may also withdraw your previously given consent to receive such calls and texts. You can opt out of receiving push notifications from us via our apps by going to your device “Settings” and clicking on “Notifications,” and then changing those settings for the applicable app. Please note that you cannot withdraw your consent to receive certain in-app messages from IDT. Your ability to manage some of our services could be limited if you withdraw your consent to receive text and SMS messages. IDT does not recommend using those services without authorization to receive such messages.
Online Information. You have choices about whether certain information collected on our websites and apps is used to customize advertising based on predictions generated from your visits over time and across different websites and apps. Similarly, many mobile devices offer controls you can set to limit the advertising use of information collected across mobile apps on your device. Please note that many opt outs use browser cookies or device controls and are specific to the device and browser you are using.
California, USA Consumers. If you are a resident of the State of California, please review Appendix A to this Privacy Policy which sets forth additional provisions that apply to you.
Virginia, USA Consumers. If you are a resident of the State of Virginia, please review Appendix B to this Privacy Policy which sets forth additional provisions that apply to you.
Your rights as an EEA resident. If you are from the EEA, you may have broader or additional rights, including:
Where the processing of your personal data by us is based on consent, you have the right to withdraw that consent without detriment at any time by contacting us. If you do not want your personal data used by IDT for any direct marketing purposes, or shared with third parties for their own marketing use, then you may opt out of such use or sharing by contacting us, even if you have previously consented to such use.
If you have any concerns or complaints regarding the treatment of your personal information by us, or you believe we have breached any privacy law in relation to your personal information, please contact us. We will treat any concerns or complaints confidentially. We will promptly investigate any concern or complaint that you raise with us.
You can exercise the rights listed above at any time by contacting us and if you feel that your request or concern has not been satisfactorily resolved, or if our response was not provided within a reasonable time, you may approach your local data protection authority (links here for residents of the EEA or Australia). You can reach the Information Commissioner’s Office (ICO) at enquiries@ico.org.uk. The ICO is the supervisory authority in the United Kingdom and can provide further information about your rights and our obligations in relation to your personal data, as well as deal with any complaints that you have about our processing of your personal data.
To learn about how IDT Express protects your personal information, refer to our Privacy Policy. Please note that any non-personal information or material sent to IDT Express will generally be deemed to NOT be confidential.
Information from children. IDT does not sell products or services for purchase by children and we do not knowingly solicit or collect personal data from children under the age of sixteen without obtaining verifiable parental consent. If you believe that a minor has disclosed personal data to IDT, please contact us. If you allow a child to use your device or our services, you should be aware that their information could be collected as described in this Privacy Policy. We encourage parents to be involved in the online activities of their children to ensure that no information is collected from a child without parental permission.
Cookies and Tracking. See Appendix C to this Privacy Policy.
Use of Third Party Advertising. The majority of the advertisements you see on IDT websites are displayed by IDT. In addition, IDT also allows third-party advertisers to display advertisements while you are viewing content on IDT websites. These advertisements are selected based on what we believe will be of most interest to you.
Electronic Communications. Unless otherwise required by applicable law, you authorize IDT to send or provide the following categories of information (“Communications”) by electronic means and not in paper format: (a) any customer agreement you have with IDT and any amendments, modifications or supplements to it; (b) your purchase and use records regarding service transactions; (c) any initial, periodic or other disclosures or notices provided in connection with the services, including without limitation those required by U.S. federal, state, international or other applicable law; (d) any customer service communications, including without limitation, communications with respect to claims of error or unauthorized use of the services; and (e) any other communication related to the services, a transaction or IDT. Electronic means may include email, SMS/MMS, App to App, text, push notification through our apps, website chat with customer service, or posting in our applicable apps or on our applicable website. Message and data rates may apply when you receive SMS/MMS, text or push notification messages on your mobile phone. You may withdraw your consent to receive all Communications electronically (except for app to app messages from IDT) at any time. In order to withdraw your consent, you must contact us. In order to access and retain Communications, you must have: (i) an Internet browser that supports 128-bit encryption, (ii) a mobile number and the capability to receive messages from or on behalf of IDT, and (iii) a device and data or Internet connection capable of supporting the foregoing.
Consent to Receive Messages. Subject to your ability to opt-out, by using any of our services, you consent to receive text messages, phone calls, faxes, postal mail, push notifications through our apps, and app to app messages from IDT and its affiliates regarding account management activities and special offers. This consent is specific to the phone number(s) you provide to us to use the services and open accounts. Where local law permits, you consent to receive phone calls from IDT even if your phone number is listed on “do not call” registries. Where local law permits, an auto-dialer and/or artificial or prerecorded message may be used to make calls or send text messages to you. Message and data rates may apply when you receive SMS/MMS, text or push notification messages on your mobile phone. You may refuse to consent to receive calls and texts from IDT and its affiliates that require your consent, including autodialed, pre-recorded or artificial voice telemarketing calls. You may also withdraw your previously given consent to receive such calls and texts. Your ability to manage and use certain features of the services could be limited if you refuse or withdraw your consent to receive these messages. You are not required to agree to promotional communications in order to purchase goods or services from us.
Changes to this policy. the event we make changes to this Privacy Policy, we’ll let you know by posting an updated policy on our website at www.idt.net.
How to contact us
If you are a resident of the EEA, the data controller responsible for your information is:
IDT Retail Europe Limited c/o Sable Accounting Ltd 13th Floor, One Croydon
12-16 Addiscombe Road, Croydon, CR0 0XT Email: legal-uk@idt.net
IDT’s Representative: Galina Kennard
IDT’s Representative’s Email: data_info@idt.net
If you live anywhere else, please direct questions about this Privacy Policy to: IDT Corporation
520 Broad Street
Newark, NJ 07102 USA
E-mail: ccpa@idt.net
Appendix A: Additional Information for California Consumers
Personal information includes information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. Personal information does not include publicly available information, including information lawfully made available to the general public by the consumer or from widely distributed media, and deidentified or aggregate consumer information. IDT collects and uses the following categories of personal information regarding California residents:
IDT collects limited sensitive personal information and limits the use of that information to those uses which are necessary for us to perform the services and provide the goods consumers have requested and for other uses as authorized by applicable California privacy laws and regulations. IDT collects the following sensitive personal information:
As a California resident you have certain additional rights regarding your personal information under the California Consumer Privacy Act of 2018 and (starting on January 1, 2023) the California Privacy Rights Act of 2020 (collectively, the “CCPA”).
To exercise your rights to know and access your personal information collected, sold, shared or disclosed by IDT, or to exercise your right to delete your personal information or to correct inaccurate personal information, please go to https://www.idt.net/ccpa-request and complete the form. To exercise your right to opt out of the sale or sharing of your personal information, or to exercise your right to limit the use and disclosure of your sensitive personal information please go to https://www.idt.net/ccpa-do-not-sell and complete the form. We will also process any opt-out of sale/sharing preference signal that meets the requirements set forth in the CCPA and its regulations. In addition, you can exercise your rights by calling the following toll-free number: 888-412-0477. Your authorized agent can make these requests on your behalf using the same links and methods.
In order to comply with a consumer request, IDT must reasonably verify the requestor. A record of each request is made as soon as it is received by our data protection team. IDT will use all reasonable measures to verify the identity of the individual making the request. We will utilize the requested data to ensure that we can verify the requestor’s identity and where we are unable to do so, we may contact you for further information, or ask you to provide evidence of your identity prior to responding to your request. This is to protect your data and rights. If a third party, relative or representative is requesting the data on your behalf, we will verify their authority to act for you and may contact you and them to confirm you and their identity and gain your authorization prior to responding to the request.
IDT will attempt to confirm receipt of each request by contacting the requestor either at the email or telephone number submitted, through the consumer’s account or by other electronic means. IDT will attempt to verify each request and if it is able to verify a request will provide a response (if necessary and applicable) within 45 days of the receipt of the request, which time period may be extended by IDT for an additional 45 days. If a delay is necessary, IDT will contact the requestor within the original 45 day period and provide the reasons for the delay. IDT may charge a fee or refuse to act on any request that is manifestly unfounded or excessive. All IDT responses shall be in writing and cover the previous 12 month period unless the consumer requests information beyond the 12 month period (only applies to personal information collected on or after January 1, 2022). Where possible the response shall be sent through the consumer’s account. Otherwise, the response shall be sent by mail or electronically. IDT is not obligated to provide a response to a consumer more than two times in any 12 month period. The CCPA contains certain exemptions and exceptions to the exercise of some of these rights. If one or more of those exemptions or exceptions applies to your request, then we may not be able to act upon your request. Where possible we will inform you of the reasons for not acting upon your request.
See Section 9 of Privacy Policy above.
More information on your rights and our obligations under the CCPA please send an email to ccpa@idt.net. For California residents with a disability please send an email to ccpa@idt.net for information on how to access this policy in another format.
Appendix B: Additional Information for Virginia Consumers
If you are a resident of Virginia, then the following section also applies to you effective January 1, 2023.
Personal data includes any information that is linked or reasonably linkable to an identified or identifiable natural person. Personal data does not include de-identified data or publicly available information. IDT collects and processes the following categories of personal data regarding Virginia residents:
The only sensitive data (as defined in the VCDPA) that IDT may collect and process is precise geolocation data (as defined in the VCDPA) from some of its apps primarily for transaction compliance reasons if the user turns on the app’s location feature.
As a Virginia resident you have certain additional rights regarding your personal data under the Virginia Consumer Data Protection Act (the “VCDPA”):
Appendix C: Cookies and Tracking Notice
A cookie is a small text file that a website saves on your computer or mobile device in order to facilitate and enhance your interaction with that service. We or our service providers may use cookies and equivalent technologies such as clear gifs, web beacons, pixel tags, Javascript, device fingerprinting, and third-party cookies on our websites and, where relevant, in our promotional e-mails.
They also help us track users, conduct research, allow you to back click to earlier registration pages viewed by you and improve our content and services. For instance, we may use web beacons on our websites to access and set cookies and otherwise help us to better understand how users are moving through our websites. Information provided by the web beacon includes the computer’s IP address, the type of browser being used and the time that the web beacon was viewed. We may also use web beacons in e-mails so that we know when such communications have been opened and to otherwise help us tailor our communications to individual users. Cookies cannot be used to run programs or deliver viruses to your computer. Cookies are uniquely assigned to you, and can only be read by a web server in the domain that issued the cookie to you. You can control and/or delete cookies as you wish. You can delete all cookies that are already on your computer and you can set most browsers to prevent them from being placed. If you do this, however, you may have to manually adjust some preferences every time you visit a site and some services and functionalities may not work. You will not be able to opt-out of any cookies or other technologies that are “strictly necessary” for the services. Where you have not set your permissions, we may also separately prompt you regarding our use of cookies on the site. We do not honor any web browser “do not track” signals or other mechanisms that provide you the ability to exercise choice regarding the collection of information about your online activities over time and across other websites or online services.
Learn more about when and how we use cookies and tracking technologies:
