Oracle Facilities and Physical Security Privacy Policy
1. Introduction
This Oracle Facilities and Physical Security Privacy Policy (also referred to as the “Privacy Policy”) provides information on the collection, use, and sharing (collectively referred to as “processing” or “process”) of personal information by Oracle Corporation and its affiliates (“Oracle”, “we” or “us”) as part of our safety and security measures for Oracle-managed campuses, facilities, or data centers (“Facilities”) as well as Oracle networks and systems.
This Privacy Policy was last updated on March 5, 2026. However, the Privacy Policy can change over time, for example to comply with legal requirements or to meet changing business, safety, and security needs. The most up-to-date version can be found on this website. In case there is an important change that we want to highlight to you, we will also inform you in another appropriate way (for example via a statement of changes on our website).
As used in this Privacy Policy, “personal information” or “personal data” means information that relates to an identified individual or to an identifiable individual. Please refer to Section 3 below for more detailed information on specific pieces of personal information we process.
2. Scope
This Privacy Policy applies to the processing of personal information about you by Oracle as a controller for the purposes specified in Section 4. This Privacy Policy does not apply to the following activities:
-
Personal information collected by Oracle during in-person meetings at Oracle Facilities or at Oracle events related to marketing and sales activities. Oracle may collect your personal information in connection with in-person marketing and sales activities, including events at Oracle Facilities. Please refer to Oracle’s General Privacy Policy for information on how Oracle processes personal information related to these activities, available at https://www.oracle.com/legal/privacy/privacy-policy.
-
Personal information collected about you by Oracle customers. Oracle customers are responsible for their own personal information, Biometric Data, and facial recognition data collection and processing practices, including when customers use Oracle products or services to process such personal information. You are encouraged to review the relevant privacy policy of the company who collected your information from you. Please consult that company directly if you have any further questions about its use of personal information.
-
Personal information processed by Oracle to provide Cloud, Technical Support, Consulting/ACS or other services to Oracle customers. “Services personal information” is personal information processed by Oracle on behalf of a customer in order to provide and perform contracted services. If you are an Oracle customer and Oracle is processing personal information or Biometric Data on behalf of your company, please refer to the Services Privacy Policy for information on how Oracle processes services personal information, available at https://www.oracle.com/legal/privacy/services-privacy-policy/.
3. Which categories and specific pieces of personal information about you do we process?
Oracle may collect and process personal information you provided directly when you visit an Oracle Facility or access Oracle networks or systems, and indirectly, including from security footage at such locations (described in further detail below).
Categories and specific pieces of personal information that Oracle may collect and process, include: