Website Privacy Notice

This Notice applies to any users of this website or any location where this Notice appears, which is owned by International Paper and its divisions, subsidiaries, and affiliates (collectively referred to as ‘Company’)

At International Paper, our approach to privacy and data protection begins with one of our core values: we are committed to doing the right things, in the right ways, for the right reasons, all of the time. Our Company collects, uses, stores, and protects your Personal Data in accordance with its ethical values and in compliance with applicable data protection legislations in the countries in which it operates. Our Company has implemented technical and organizational measures to protect any information we may collect. Legislations within specific jurisdictions may require that our Company supplement this Notice and comply with local legislations, and nothing in this Notice is intended to limit the Company’s rights and obligations or the rights of data subjects under mandatory local legislations. Nothing in this Notice is intended to form a contract of engagement or otherwise.

If you are in a jurisdiction that recognizes the concept of a Data Controller or similar, the Data Controller is International Paper Company and/or its relevant divisions, subsidiaries, and affiliates that interact with you. “Personal Data” means any information relating to an identified or identifiable person. 

If you have any questions about how your Personal Data is being used, you can contact the Data Privacy team using the details mentioned at the end of this Notice.

We collect, store, and process your Personal Data in several ways including when you: 

  • Visit or interact with our websites either directly or through third-party platforms;  
  • Register an account with us and/or purchase products through our website; 
  • Correspond with us across any of our channels (e.g. messaging platforms such as text message, social media and email) 
  • Submit a review regarding our products at our websites, and branded pages and applications.  

 The following categories of Personal Data are followed by information about their source(s), purpose(s), legal bases and disclosure(s). 

Categories of Personal Data 

Examples of Personal Data and their sources 

Purposes and legal bases for Personal Data Processing 

Basic Personal Data 

We may collect your personal information such as your full name, the company you work for, address, telephone number, and e-mail address. Where you create an online account, we may also collect your username and password. We may collect information about your participation in our events, including access or dietary requirements, and information about your marketing preferences where you have provided consent as required by applicable law. 

 

We also automatically collect limited technical information when you visit our websites, including your IP address and information obtained through cookies or similar tracking technologies, as described in our Cookies Notice. 

 

We obtain this information directly from you when you contact us, fill out a form on our websites, register for an event, subscribe to marketing communications, or interact with our digital platforms, our employees or representatives. 

We use these Personal Data to respond to enquiries; provide and improve the features, products, and services you request; verify identity where required; communicate with you about your account and activities; manage onboarding of customers, suppliers, and partners; send notices of changes to any of our websites or policies; and, where permitted by law, send you updates and marketing information about our products, services, and events based on your expressed preferences. 

We process such Personal Data on the basis of the performance of our contract with you or your organisation; to comply with legal obligations; on our legitimate interests in managing and improving our offers to and relationships with customers, suppliers and partners; and, where required by law, on your consent (for example, for electronic direct marketing or cookies). 

Commercial and Supplier Data 

We may collect and process information relating to the products and services that you or your organisation purchase from us, supply to us, or otherwise engage with us in a business context. This may include details such as the type and quantity of products or services, order and purchase history, pricing, billing and shipping addresses, account status, delivery and logistics information, and records of correspondence, complaints, or claims. We may also collect financial information, such as bank account or payment details, for the purpose of processing supplier payments, issuing customer refunds, and managing our accounts and invoicing processes. 

Where necessary to assess and manage our commercial relationships, we may also obtain information about your organisation’s financial standing or creditworthiness from reputable third-party agencies or compliance screening providers. 

We collect this information directly from you or your organisation during our purchasing, supply, or onboarding processes, and in some cases from third parties such as payment service providers, credit reference agencies, compliance screening partners, or publicly available sources. 

 

We may use this Personal Data to perform all management activities connected with fulfilment of customer orders and supplier agreements, including administrative management of the contract, delivery of goods, processing payments and refunds, managing claims and disputes, conducting due diligence and fraud prevention, complying with tax and accounting obligations, and keeping you informed or updated.  

 

We process your Personal Data based on performance of our contract with you or your organisation; to comply with legal obligations; and on our legitimate interests in risk management, fraud prevention and defending legal claims. 

Recruitment Data 

If you apply for a role with us, we may collect your name, contact details, CV or résumé, employment history, qualifications, references and information you provide through our recruitment systems. We may also obtain information from recruitment agencies or publicly available professional profiles. 

We get this directly from you during the application process, from recruitment partners engaged by us, and from publicly available sources where appropriate for the role. 

We use these Personal Data to assess your suitability, communicate with you during the process, conduct interviews and pre‑employment checks, and comply with employment law requirements. 

 

We process this Personal Data on the basis of our legitimate interests in recruiting and selecting staff; performance of a contract where necessary to enter into an employment contract; compliance with legal obligations such as right‑to‑work checks; and, where applicable, your consent, for example to retain your details for future opportunities. 

Internet or other similar network activity 

You can generally visit the website without providing any Personal Data about yourself (such as, e.g., your name). In this case we only collect and store Personal Data about your website access which will automatically be transmitted from your browser to us when you access the website. 

We get this indirectly from you (e.g., from observing your actions on our Sites) or from third parties like data analytics providers. This may include: IP address, MAC address or other unique identifier information (“Device Identifier”) for the computer, mobile device, technology or other device (collectively, “Device”), domain name, browser type and version, browsing history, search history, information about your visit (including products viewed, purchased or search for), details of any website which has referred you to our website, application, or advertisement; location and time zone setting, browser plug-types and versions, operating system and platform, page responses times and errors. 

 

We use this Personal Data to enable the technical delivery of our website's content to your device; to improve our online services and the experience you receive when engaging with us online; as well as for purposes of the technical security of our website.  

 

Depending on the laws applicable in the country you are based, we will process your Personal Data with your consent, and/or for the performance of our contract with you, and/or on the basis of our legitimate interests (where applicable and depending on the country you are based) in ensuring the security of the website, optimizing the website and services we offer to you, improving marketing, analytics, or site functionality, or as otherwise permitted by law. 

In certain jurisdictions you may be able to select your cookies preferences based on consent. 

 

Communication Data 

We may collect communication Personal Data from various sources, including contact lists, demographic information originally collected from other companies within Company group, and Personal Data legally obtained from other third parties, which may be combined with other information that we collect for the purposes described in this section, including information on your communications with us (e.g. your emails, letters, calls, posts and messages on our social media). 

We use such Personal Data to provide and improve the features, products and services you request; to provide you with personalized content, information, and to deliver relevant advertising.  

Depending on the laws that apply in your country, we will process your Personal Data on the basis of our legitimate interest, for the performance of our contract with you and, when required by law, on your consent.  

Other Personal Data we may collect with your consent 

We get this Personal Data directly from you. This may include: 

  • Information you provide by calling, e-mailing, texting, or by responding to surveys. 
  • Other information we have collected from you with your consent. 

 

We use such Personal Data to provide and improve the features, products and services you request; to provide you with personalized content, information, and other information on our products or Company group of companies; when we perform our duties in a contract with you; and/or for processing of Personal Data needed for the assessment and acceptance of customers. 

Depending on the laws that apply in your country, we process your Personal Data on the basis of our legitimate interest, for the performance of our contract with you and, when required by law, on your consent. 

 

You may be able to access our website from a third-party site or vice versa.  Your use of third-party websites is governed by the privacy notice or policy of that site.  Different terms and conditions and privacy policies may apply.  They may send their own cookies or tracking files to your Device, and they may collect your Personal Data for their own purposes.  That information is not subject to this Notice. 

We store your Personal Data processed for the purposes stated in this Notice, and in any case only as long as legally permissible. Once our business relationship with you has ended and your data is no longer required for these purposes, we will delete your data, unless your data is required also for other purposes set out in this Notice, and/or is necessary to fulfil applicable legal or regulatory obligations. We also may store your data for dealing with any complaints regarding our products and services. Our retention periods are determined as per the legal requirements of the country you are based. 

As a global entity, we may disclose your Personal Data to:   

  • Within our group of Companies;  
  • Third-parties who provide goods or services to help us conduct our business and improve our services;  
  • External auditors and/or legal advisors; 
  • Other parties to whom we are authorised or required by law to disclose information; 
  • Law enforcement and other government authorities. To do so, the authority requires an appropriate judicial order or warrant, for which they need to demonstrate that the disclosure of the requested or intercepted information is required. We reserve the right to challenge these requests.  

We may share or transfer your Personal Data in the course of any direct or indirect reorganization process including, but not limited to, mergers, acquisitions, divestitures, bankruptcies, and sales of all or part of our assets. Your Personal Data may be shared following the completion of such transaction and/or during the assessment pending transfer (subject to confidentiality requirements). If transferred, your Personal Data will remain subject to this Notice or a policy that, at a minimum, protects your privacy to an equal degree as this Notice unless you otherwise consent. 

In accordance with the disclosure requirements of the CCPA, International Paper does not sell or share your personal information in exchange for monetary compensation. 

As a global organization, we may transfer your Personal Data to our affiliated companies or to other third parties, in accordance with applicable local law, depending on the country you are based. We may also transfer your Personal Data from your country or jurisdiction to other countries or jurisdictions in accordance with legal requirements. To the extent we transfer or store your personal data to/in countries outside your jurisdiction that do not ensure a level of data protection considered adequate by competent authorities, we have put into place appropriate safeguards (such as the standard contractual clauses approved by relevant jurisdictions or other cross border mechanisms as prescribed by relevant jurisdictions) to ensure that your personal data will always be protected adequately and as required.  

  • For international data transfers subject to EEA, UK and Swiss Law we primarily use European Union Commission Standard Contractual Clauses.  
  • For transfers between other jurisdictions, we may rely on other legal mechanisms for international transfers, as appropriate under the relevant law.  

We implement comprehensive technical, physical and organizational measures to ensure a level of security appropriate to the risk to the Personal Data we process and to ensure compliance with applicable legal requirements. These measures are aimed at safeguarding the ongoing integrity and confidentiality of Personal Data. We evaluate and improve these measures on an ongoing basis. Our Chief Information Security Officer (CISO) and Global Chief Privacy Officer (CPO) oversee our cybersecurity and privacy programs globally. 

Our websites are designed and intended for adults. We understand the importance of taking extra precautions to protect the privacy and safety of children using Company products and services.  

If you learn that a child has, in violation of this Notice, registered for email newsletters, or otherwise provided their Personal Data, please report it to us using the contact information provided at the bottom of this Notice. If we become aware that an underage user has provided Personal Data without parental permission, we will terminate that account and delete all Personal Data provided by that user to the extent feasible and as soon as practicable.  

Depending on the country you are based, we may use your Personal Data to carry out age verification checks and enforce any such age restrictions. 

The Company may use artificial intelligence (AI) technologies to enhance our services. We are committed to the safe and responsible use of AI, in accordance with applicable laws. 

Under applicable data protection laws, you may have the following rights in relation to your Personal Data, subject to certain conditions and limitations: 

  • Right to be informed – to receive clear information about how your Personal Data is collected, used, and shared. 
  • Right of access – to request a copy of your Personal Data held by the Company. 
  • Right to rectification – to request correction of inaccurate or incomplete Personal Data. 
  • Right to erasure – to request deletion of your Personal Data where there is no lawful reason for its continued processing. 
  • Right to restrict processing – to request that we limit the use of your Personal Data in certain circumstances. 
  • Right to data portability – to receive your Personal Data in a structured, commonly used, and machine-readable format, and to transmit it to another controller, where technically feasible. 
  • Right to object – to object to the processing of your Personal Data where we rely on legitimate interests or where your data is used for direct marketing. 
  • Rights in relation to automated decision-making – to not be subject to decisions based solely on automated processing, including profiling, which produce legal or similarly significant effects. 

If processing is based on your consent, you may have the right to withdraw that consent at any time. This will not affect the lawfulness of processing carried out before the withdrawal. 

Your rights may vary depending on your location and applicable local laws. We will respond to all requests in accordance with applicable legal obligations. If you wish to exercise any of these rights or have concerns about how your Personal Data is handled, please contact us using the details provided at the end of this Notice. You also have the right to lodge a complaint with your local data protection authority. 

We may update this Notice periodically. We will tell you about important changes by posting a notice and changing the date on this Privacy Notice. To the extent permitted by law, any changes we make to this Notice become effective immediately when we post the revised Notice on the Site. We recommend that you review this Notice regularly for changes.  Where allowed by law, if there is any conflict between the English version of this Notice and a translated version, the English version prevails. 

If you have any questions, concerns, or complaints about this Privacy Notice, or our privacy practices in general, email us here. 

Last updated: November 2025