Cisco Privacy Statement

Cisco Systems, Inc. and its subsidiaries (collectively "Cisco") are committed to protecting your privacy and providing you with a positive experience when directly interacting with us (i.e., visiting Cisco offices, attending Cisco events and meetings, or calling customer support), engaging with our websites, and while using our offers and services ("Solutions").
This Privacy Statement applies to direct interactions with us and Cisco websites and Solutions that link to or reference this Privacy Statement and describes how we handle Personal Data and the choices available to you regarding collection, use, access, and how to update and correct your Personal Data. Additional information on our Data practices may be provided in Cisco General Disclosures and Solution specific Cisco Offer Disclosures, offer descriptions, or other notices provided prior to or at the time of data collection. Certain Cisco interactions, websites, and Solutions may have their own privacy documentation describing how we handle Personal Data for those interactions, websites, or Solutions specifically. To the extent a specific notice for an interaction, website, or Solution differs from this Privacy Statement, the specific notice will take precedent. If there is a difference in translated, non-English versions of this Privacy Statement, the U.S.-English version will take precedence.

What is Personal Data?

"Personal Data" is any information that can reasonably be used to identify an individual, or otherwise make an individual identifiable, and may include name, address, email address, phone number, login information (such as account number and password), social media account information, or payment card number.

The types of Personal Data we may process depend on the business context and the purposes for which it was collected. It may include:

• Contact, subscription, and account, visit, and event registration details, as well as online identifiers
• Login credentials where we require an account be made
• Communications content (such as audio, video, text), social media and discussion forum, or other communications details when you interact with Cisco
• Financial Information (such as bank account details or credit card information)
• Details of an individual's business and other interests and opinions (such as information held in a customer relationship management database)
• Information about the user and usage of our websites and Solutions, including System Information such as device identifiers and telemetry (e.g., IP or MAC address) when such data is linked or tied to a specific individual’s device

If we link other data with your Personal Data, we will treat that linked data as Personal Data.

Collection and use of your Personal Data

We may collect data, including Personal Data, about you as you use our websites and Solutions and interact with us. We also acquire Personal Data from trusted third-party sources and engage third parties to collect Personal Data on our behalf, in accordance with applicable laws.

We may use your Personal Data for the purposes of operating and helping to ensure the security of our business; delivering, improving, and customizing our websites, Solutions, and interactions with you; sending notices, marketing, and other communications; and for other legitimate purposes permitted by applicable law.

We collect Personal Data for a variety of business reasons, such as:

• Customer relationship management and administration
• Improving our visitor and customer interaction and engagement
• Order processing, including billing and payment
• Asset recovery and product returns and replacements
• Creating and managing user accounts
• Provisioning websites and Solutions and enabling the use of certain features
• Analyzing, personalizing, improving accuracy, and enhancing user experience, communications, and interactions
• Sending communications to you, including for marketing or customer satisfaction purposes, either directly from Cisco or from our partners
• Managing communications preferences. You can modify your communication preferences at any time. See Your choices and selecting your communication preferences below
• Contract performance, Solution delivery, and customer service
• Managing job applications and human resources administration
• Establishing and managing customer surveys and advisory councils/boards
• Administering online education, testing, and certifications
• Facilitating conferences, webinars, sweepstakes, giveaways, and other events
• Protecting Cisco, our users, websites and Solutions, and others

If you choose to provide Cisco with a third party's Personal Data (such as name, email, and phone number), you represent that you have the third party's permission to do so. Examples include forwarding reference or marketing material to a friend or sending job referrals. Third parties may unsubscribe from any future communication following the link provided in the initial message or by submitting a Privacy Request.

In some instances, Cisco and the third parties we engage may automatically collect data through cookies, web logs, web beacons, and other similar applications. Please read the Use of cookies and similar technologies section below for more information.

Your privacy rights

We need your help to keep your Personal Data accurate and up to date. We provide options to access, correct, suppress, or delete your Personal Data:

• You can view or edit your Cisco.com Personal Data and preferences online by using the Cisco Profile Management Tool.
• When Cisco is acting as a "data controller," you may exercise your privacy rights (access, correction, deletion, objection)  directly with Cisco as described in the specific website and Solution documentation or by submitting a request through the Privacy Request form as permitted by applicable data protection laws.
• When Cisco is acting as a "data processor," and you wish to exercise your rights of access and request corrections, suppression, or deletion, Cisco will direct you to the data controller under the applicable data protection laws.
• If you need additional assistance, or help with accessing, correcting, suppressing, or deleting your Personal Data, please feel free to contact us directly. We will respond to your request within 30 days or as appropriate under applicable data protection laws. If we are unable to honor your request or need more time, we will provide you with an explanation.
  

Your choices and selecting your communication preferences

We give you the option to receive a variety of information related to our business, programs, websites, and Solutions. You can manage your communication preferences at any time through the following methods:

• By following the instructions included in each promotional email from us to unsubscribe from that mailing
• By completing and submitting this Privacy Request form or by contacting us via mail at: Cisco Systems, Inc., Privacy Office, 170 West Tasman Dr., San Jose, CA 95134, USA. Please be sure to include your name, email address, the communication received, method of delivery (such as post, email, phone call, text), and any additional information about the material you no longer wish to receive.
• For short message service (“SMS”) messages, reply "STOP," "END," or "QUIT" to the SMS text message you have received

These choices do not apply to service notifications or other required communications that are considered part of certain programs, websites, and Solutions which you may receive periodically unless you cancel or stop use in accordance with its terms and conditions. Your Personal Data may be disclosed to third parties (such as Cisco business partners or vendors) so that they may inform you about websites, programs, products, or services that may be of interest to you. To opt out of Cisco disclosing to third parties for their marketing purposes, please submit a Privacy Request.

By using or engaging with our websites or Solutions, or otherwise providing Personal Data to us or interacting with us, you agree that we may communicate with you regarding security, privacy, and administrative issues relating to your use. For example, if we learn of a system's security breach, we may attempt to notify you by posting a notice on our websites, sending an email, or otherwise contacting you.

Disclosing your Personal Data

Personal Data may be processed by third parties for the purposes of operating our business; delivering, analyzing, improving, securing, and customizing our interactions, websites and Solutions; sending marketing and other communications related to our business; and for other legitimate purposes permitted by applicable law(s); or otherwise with your consent.

Personal Data may be disclosed in the following ways:

• Within Cisco and any of our worldwide subsidiaries for the purposes of data processing, such as marketing, business operations, compliance, security, website or Solution functionality, or storage
• With business partners, service vendors, authorized third-party agents, or contractors to provide a requested website, Solution, service, or transaction. Examples include processing of orders and credit card transactions, hosting websites, seminar registration, assisting with sales-related efforts or pre/post-sales support, and providing customer support
• With Cisco business partners or vendors, so that they may share information with you about their products or services. To opt out of Cisco disclosing to third parties for their marketing purposes, please submit a Privacy Request
• With your permission, application usage and performance data with third-party Developers to help support and improve the use and performance of their Apps
• In connection with, or during negotiations of, any merger, sale of company assets, consolidation or restructuring, financing, or acquisition of all or a portion of our business by or to another company
• In response to a request for information by a competent authority or third party if we believe the disclosure is in accordance with, or is otherwise required by, any applicable law, regulation, or legal process
• With law enforcement officials, government authorities, or other third parties as necessary to comply with legal process or meet national security requirements; protect the rights, property, or safety of Cisco, our business partners, you, or others; or as otherwise required by applicable law
• In aggregated, anonymized, and/or de-identified form that cannot reasonably be used to identify you
• If we otherwise notify you and you consent to the disclosure

Security of your Personal Data

We take reasonable and appropriate steps to protect the Personal Data entrusted to us and treat it securely in accordance with this Privacy Statement. Cisco implements physical, technical, and organizational safeguards designed to protect your Personal Data from accidental or unlawful destruction, loss, alteration, and unauthorized disclosure or access. We also contractually require that our suppliers protect such information from accidental or unlawful destruction, loss, alteration, and unauthorized disclosure or access.

Retention and disposal of Personal Data

We will retain your Personal Data as needed to fulfill the purposes for which it was collected. We will retain and use your Personal Data as necessary to comply with our business requirements and legal obligations, resolve disputes, protect our assets, and enforce our rights and agreements.

We will not retain Personal Data in identifiable form when the purpose(s) for which the Personal Data was collected have been achieved and there is no legal or business need to retain such Personal Data. Thereafter, the data will either be destroyed, deleted, anonymized, and/or removed from our systems.

Use of cookies and similar technologies

Cisco uses automatic data collection tools, such as cookies, embedded web links, pixels, tags, and web beacons. These tools collect certain standard information that your browser sends to us (such as Internet Protocol [IP] address, MAC address, clickstream behavior, and telemetry).

These tools help make your visit to our websites and Solutions easier, more efficient, and personalized. We also use the information to improve our websites and Solutions, provide greater service and value, better understand your potential interest in our websites and Solutions, and provide you with more relevant ads and other content.

We partner with third parties to display advertising on our website and to manage our advertising on other sites. Our third-party partners may use cookies or similar technologies to provide you with advertising based on your browsing activities and interests. Where this type of third-party advertising is disabled, generic, non-personalized ads will continue to be displayed.

For more information, or if you would like to opt out of interest-based advertising, see How Cisco Uses Automatic Data Collection Tools.

To update your cookie preferences, click the “Cookies” or "Cookies / Do not sell or share my personal data" link at the bottom of any page on this website. Additionally, you may be able to use other tools to control cookies and similar technologies. For example, you may have controls in your internet browser to limit how the websites you visit are able to use cookies.

Please note that specific Cisco web properties may store or process data in different ways; therefore, you may need to repeat this process again for various reasons, including :

• If you have taken the action on one Cisco-owned domain (e.g., cisco.com) you may need to take action separately on another Cisco-owned domain.
• If you have chosen to use a browser that automatically clears cookies

If you clear your cookies in a particular browser, it resets your preferences / settings for that specific browser session because your choice is specific to the applicable Cisco web property and/or to the specific device and browser you are using.

You can always confirm your desired settings on a given Cisco web property by clicking the “Cookies” or "Cookies / Do not sell or share my personal data” in the footer of that page.

Automated decision-making

We process Personal Data using both manual and automated methods of processing. Automated methods are often used to assist our manual methods in accordance with applicable laws. Where an individual's legal rights and legitimate interests may be impacted by such automated decision-making, we will provide the impacted individual the opportunity to inquire about the decision or request manual review. Manual review may be conducted by Cisco employees or trusted third-party business partners working on Cisco's behalf.

Linked websites and third-party Apps

We may provide access or links to third-party websites, Apps, and services that are outside Cisco's control and governed by the respective third party’s privacy policy, not by this Privacy Statement. We encourage you to review the privacy statements posted on the websites you visit and in the applications you use.

Forums and chat rooms

If you participate in a discussion forum, local communities, or chat room on a Cisco website, you should be aware that the information you provide there (such as your public profile and comments) will be made broadly available to others and could be used to contact you, to send you unsolicited messages, or for purposes neither Cisco nor you have control over. Also, please recognize that individual forums and chat rooms may have additional rules and conditions. Cisco is not responsible for the Personal Data or any other information you choose to submit in these forums. To request removal of your Personal Data from our blog or community forum, please submit a Privacy Request. In some cases, we may not be able to remove all Personal Data and comments. In such cases, we will provide you with a response and explanation.

Children's privacy

Cisco encourages parents and guardians to take an active role in their children's online activities. Cisco does not knowingly collect Personal Data from children without appropriate parental or guardian consent. If you believe that we may have collected Personal Data from someone under the applicable age of consent in your country without proper consent, please let us know using the methods described in the Questions, comments, and how to contact us section and we will take appropriate measures to investigate and address the issue promptly.

International transfer, processing, and storage of Personal Data

As Cisco is a global organization, Personal Data may be transferred to Cisco in the United States of America, to any Cisco subsidiary worldwide, or to third parties and business partners as described above, that are located in various jurisdictions around the world. Similarly, Personal Data may be accessed from countries where Cisco or its subsidiaries have operations. Cisco will transfer your Personal Data in accordance with approved transfer mechanisms as well as any applicable local legal requirements.

By interacting with us, using our websites and Solutions or providing any Personal Data to us, where applicable law permits, you acknowledge and accept the transfer, processing, and storage of such information outside of your country of residence where data protection standards may be different.

Cisco safeguards and enables the global transfer of Personal Data in a number of ways:

• Global Privacy Certifications

Cisco’s global privacy program, described in this Privacy Statement, complies with the Global Cross-Border Privacy Rules (CBPR) and the Privacy Recognition for Processors (PRP) program requirements. The Global CBPR and PRP system provide a framework for organizations to ensure the protection of Personal Data transferred between participating Global economies. More information about the Global Privacy Framework, CBPRs, and PRP can be found on the Global CBPR Forum site. Our certification applies to our business processes across our global operations that process and transfer Personal Data to and from our affiliates around the world. To view our certifications, please see the Global CBPR System Directory and the Global PRP Directory.

To submit a privacy inquiry through Schellman, our Accountability Agent, please complete the Schellman compliance inquiry form.

The Global CBPR System Certification Mark and Global PRP System Certification Mark™ are trademarks of the International Trade Administration/Office of Global Data Policy and Privacy, used with permission.

• EU Binding Corporate Rules—Controller

Cisco's global privacy program and policies have been approved by the Dutch, Polish, Spanish, and other relevant European privacy regulators as providing additional safeguards for the protection of privacy, fundamental rights, and freedoms of individuals for transfers of Personal Data protected under European law. Cisco's EU Binding Corporate Rules—Controller (EU BCR-C) provide that international transfers made worldwide by Cisco entities bound by these rules as a controller of European Personal Data benefit from appropriate safeguards.
A copy of our EU BCR-C can be found in our Global Privacy Policy. More information about EU BCRs can be found on the European Commission site.

• U.K. Binding Corporate Rules—Controller

Cisco's global privacy program and policies have been approved by U.K.’s Information Commissioner’s Office, as providing additional safeguards for the protection of privacy, fundamental rights, and freedoms of individuals for transfers of Personal Data protected under U.K. law. Cisco's U.K. Binding Corporate Rules—Controller (U.K. BCR-C) provide that international transfers made worldwide by Cisco entities bound by these rules as a controller of U.K. Personal Data benefit from appropriate safeguards.

A summary of our U.K. BCR-C can be found here. More information about U.K. BCRs can be found on the U.K.’s Information Commissioner’s Office site.

• Data Privacy Framework

Cisco Systems, Inc. and its U.S. based subsidiaries — Amorblox, Inc.; AppDynamics LLC; Broadsoft, Inc.; Cisco OpenDNS LLC; Cisco Systems Capital Corporation; Duo Security LLC; Fluidmesh Networks LLC; Isovalent LLC; Jasper Technologies LLC; Kenna Security, Inc.; Meraki, LLC; Socio Labs LLC; Splunk LLC; Thousand Eyes LLC; and Valix, Inc. — (collectively "Cisco-U.S.") has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. DPF Principles with regards to the processing of Personal Data received from the EU and EEA in reliance on the EU-U.S. DPF and from the U.K. (and Gibraltar) in reliance on the U.K. Extension to the EU-U.S. DPF. Cisco-U.S. has also certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. DPF Principles with regards to the processing of Personal Data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this Privacy Statement and the EU-U.S. DPF Principles, the U.K. Extension to the EU-U.S. DPF Principles, and/or the Swiss-U.S. DPF Principles, the DPF Principles shall govern. For more information about the DPF program, and to view our certification, please visit the DPF Website.

Pursuant to the DPF Principles, Cisco-U.S. commits to the following:

Cisco-U.S. is responsible for the processing of Personal Data it receives under the DPF, and subsequently may transfer it to third parties acting as agents on its behalf. Cisco-U.S. complies with the DPF Principles for all onward transfers of Personal Data from the EU, EEA, U.K. (and Gibraltar), and Switzerland (for examples of such transfers, see Disclosing your Personal Data), including the onward transfer liability provisions. In certain situations, Cisco-U.S. may be required to disclose Personal Data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements. Further, Cisco-U.S. is committed to protecting Personal Data received from EU and EEA member countries, Switzerland, and the U.K. (and Gibraltar) (see Collection and use of your Personal Data for examples of the Personal Data Cisco processes when you use our websites and Solutions and interact with us) in accordance with the DPF's applicable Principles and to help ensure Personal Data collected from individuals is accessible to them as part of their individual rights when Cisco is the Controller of the Personal Data (see Your privacy rights). Furthermore, Cisco acknowledges the right of EU, EEA, U.K. (and Gibraltar), and Swiss individuals to request access to their data while it is in the U.S. and to correct, amend, and supplement inaccurate or incomplete data. Said individuals also have the right to request erasure of Personal Data that has been handled in violation of the DPF Principles. Subject individuals interested in accessing their data should see Disclosing your Personal Data for information on how to contact us, or submit a Privacy Request online.

In compliance with the EU-U.S. DPF Principles, the U.K. Extension to the EU-U.S. DPF Principles, and/or the Swiss-U.S. DPF Principles, Cisco-U.S. commits to resolve complaints about your privacy and our collection or use of your Personal Data transferred to the U.S. pursuant to the DPF Principles. EU, EEA, U.K. (and Gibraltar), and Swiss individuals with DPF inquiries or complaints, or any questions or concerns regarding Cisco-U.S. processing or international transfer of their Personal Data should first contact Cisco-U.S. by submitting a Privacy Request online.

Cisco-U.S. has further committed to refer unresolved privacy complaints under the DPF Principles to a U.S.-based independent third-party dispute resolution mechanism, DPF Services, operated by JAMS. If you do not receive timely acknowledgment of your complaint, or if your complaint is not satisfactorily addressed by Cisco, please visit https://www.jamsadr.com/file-a-dpf-claim for more information and to file a complaint. This service is provided free of charge to you.

If your DPF complaint cannot be resolved through the above channels, under certain conditions, you may invoke binding arbitration for some residual claims not resolved by other redress mechanisms. See https://www.dataprivacyframework.gov/s/article/G-Arbitration-Procedures-dpf?tabset-35584=2.

Cisco-U.S. is subject to the regulatory enforcement powers of the U.S. Federal Trade Commission.

• Standard Contractual Clauses

When we transfer Personal Data out of the jurisdiction in which it was collected to countries that do not benefit from an adequacy decision, other transfer mechanism, or exemption, we may rely on Standard Contractual Clauses where applicable (ie, Brazil, EU and EEA, Kingdom of Saudi Arabia, the U.K., and Switzerland) with appropriate safeguards in place to protect Personal Data.

Complaint resolution

Cisco commits to resolve complaints and concerns about your privacy and our collection and use of your Personal Data. If you have concerns or complaints about your privacy and our collection and use of your Personal Data, please contact us via the Privacy Request Form.

For complaints or concerns about your privacy and our collection or use of your Personal Data transferred to the U.S. pursuant to the DPF Principles, please see Data Privacy Framework.

Alternatively, you can contact the data protection supervisory authority in your jurisdiction for assistance. (Note, Cisco's main establishment in the EU is in the Netherlands. As such, our EU lead authority is the Dutch Autoriteit Persoonsgegevens.)

Updates to this Cisco Privacy Statement

We may update this Privacy Statement from time to time. If we modify our Privacy Statement, we will post the revised version here with an updated revision date. If we make material changes to our Privacy Statement, we may also notify you by other means, such as by posting a notice on our websites or sending you a notification. By continuing to use our website after such revisions are in effect, you accept and agree to the revisions and to abide by them.

SMS policy

We will not share your opt-in to an SMS campaign with any third party for purposes unrelated to providing you with the services of that campaign. We may share your Personal Data, including your SMS opt-in or consent status, with third parties that help us provide our messaging services, including but not limited to platform providers, phone companies, and any other vendors who assist us in the delivery of text messages. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties. (Business Texting available in US & Canada only)

The Cisco Privacy Statement was revised and is effective as of August 18, 2026

Previous version of the Privacy Statement

Summary version