Established on November 1, 2011
At GEO Group, we recognize the importance of the personal information entrusted to us by our customers and believe we have a social responsibility to endeavor to protect this information. To give GEO Group customers reassurance and peace of mind, we will comply with laws and regulations governing the protection of personal information and make every effort to promote proper management and use of personal data.
We will comply with laws and regulations applicable to the handling of personal information as well as privacy guidelines established by government agencies and other relevant organizations.
We will collect personal information by lawful and fair means and will use collected personal information only to the extent necessary to achieve the specified purposes.
We will share personal information with third parties only if this is compatible with the specified purposes, customers have given their prior consent, or we are permitted to do so by laws and regulations.
We will establish systems for the appropriate management of personal information and endeavor to prevent personal information from being leaked, lost or damaged, including implementing information security measures and providing ongoing training on the protection of personal information to officers and employees. We will also make continuous improvements to management systems for the protection of personal information.
We will establish a point of contact for dealing with customer inquiries about personal information held and requests for its disclosure, correction or deletion, and we will respond to requests promptly and appropriately within reason.
Revised on September 1, 2025
GEO HOLDINGS CORPORATION (hereinafter “we,” “our,” and “us”) is committed to handling personal information appropriately in accordance with the Privacy Policy.
The personal information we collect from you will be handled appropriately, only to the extent necessary to achieve the following specified purposes.
(For customers using our services)
(For Shareholders)
(For Business Partners)
Whenever we collect personal information for a new purpose other than the above specified purposes, the intended purpose will be announced or notified.
GEO Group companies (companies specified in the scope of joint users below) may jointly use personal information within the scope necessary to achieve the following specified purposes.
We will not share personal information with third parties unless customers have given their prior consent or we are permitted to do so by laws and regulations.
We may entrust business operations in whole or in part to contractors and provide them with personal information to the extent necessary. In such cases, we will enter into an agreement on the protection of personal information with such contractors and exercise appropriate supervision.
We will take the utmost care in rigorously managing personal information to prevent personal data breaches such as unauthorized access, loss, destruction, falsification and leakage of personal information. When collecting personal information over the internet or on a mobile communication device, we use standard Secure Socket Layers or SSL technology where necessary to protect personal data.
We may use cookies and web beacons to improve our customers’ experience of using our website and to understand their preferences.
We may revise this Privacy Policy to reflect developments such as initiatives to further protect personal information or amendments to relevant laws and regulations or guidelines established by government agencies and other organizations. In such cases, the revised policy will take effect immediately.
We will respond promptly and within reason to any requests from customers themselves or their authorized representatives. To make a request, please use the contact details provided in “9. Contact Details for Requests Concerning the Handling of Personal Information.”
For inquiries and requests about our handling of personal information or the disclosure or correction of personal information held, please contact us using the form below.
For customers of 2ND STREET residing in the European Economic Area (EEA) and the United Kingdom (UK), we handle their personal data in accordance with the provisions of sections 1. through 9. of the above “Handling of Personal Information (Privacy Policy),” as well as the following provisions, in compliance with the General Data Protection Regulation (GDPR) and the GDPR as incorporated into UK domestic law (collectively referred to as the “GDPR”). In the event of any conflict between the provisions of sections 1. through 9. of the above “Handling of Personal Information (Privacy Policy)” and the provisions set forth below, the provisions below shall prevail.
We, along with 2ND STREET CORPORATION, jointly determine the purposes and means of handling personal data of customers of 2ND STREET. Regarding the handling of personal data of customers of 2ND STREET, 2ND STREET CORPORATION and we (hereinafter referred to as “Our Group”) are joint controllers within the meaning of the GDPR.
Our Group collects the following personal data.
Our Group processes your personal data for the following purposes on the following lawful bases.
| Purposes | Lawful Bases |
|---|---|
| A. To respond to customer inquiries, provide after-sales service, and support customers | The legitimate interest of Our Group: necessary for appropriately responding to your inquiry |
| B. To receive and process orders for products and services, ship and deliver them, and settle payments | Necessary for the performance of a contract with you |
| C. To confirm your identity, eligibility and other details, and to contact you regarding the use of our products and services and billing | Necessary for the performance of a contract with you |
| D. To enable customers to use services provided by Our Group seamlessly across the group | The legitimate interest of Our Group: necessary for enhancing customer convenience by enabling seamless use of services provided by each GEO group companies |
| E. To analyze acquired browsing and purchase history in order to deliver direct mail, display advertisements, and conduct other advertising, promotional, and marketing activities related to products and services of Our Group companies, tailored to individual interests and preferences, or to provide personal information to third parties for such purposes | Your consent |
| F. To provide information about products and services handled by companies that we deem appropriate | Your consent |
| G. To conduct surveys and monitor programs on behalf of companies that we deem appropriate | Your consent |
| H. To analyze acquired browsing and purchase history for marketing analysis, including the sales and usage trends of products and services tailored to individual interests and preferences | Your consent |
| I. Where we deem it essential to improve the products and services we provide, and beneficial to our customers | The legitimate interest of Our Group: necessary for improving our products and services |
| J. To protect and maintain functions of the website | The legitimate interest of Our Group: necessary for protecting and maintaining functions of the website |
Where Our Group collects, uses or discloses your personal data based on your consent, you can revoke your consent at any time.
Our Group may disclose your personal data as described below. In such cases, Our Group will take the necessary steps in accordance with applicable laws and regulations before disclosing the data.
| Purpose | Categories of Recipients |
|---|---|
| A. To respond to customer inquiries, provide after-sales service, and support customers |
|
| B. To receive and process orders for products and services, ship and deliver them, and settle payments |
|
| C. To confirm your identity, eligibility and other details, and to contact you regarding the use of our products and services and billing |
|
| D. To enable customers to use services provided by Our Group seamlessly across the group |
|
| E. To analyze acquired browsing and purchase history in order to deliver direct mail, display advertisements, and conduct other advertising, promotional, and marketing activities related to products and services of Our Group companies, tailored to individual interests and preferences, or to provide personal information to third parties for such purposes |
|
| F. To provide information about products and services handled by companies that we deem appropriate |
|
| G. To conduct surveys and monitor programs on behalf of companies that we deem appropriate |
|
| H. To analyze acquired browsing and purchase history for marketing analysis, including the sales and usage trends of products and services tailored to individual interests and preferences |
|
| I. Where we deem it essential to improve the products and services we provide, and beneficial to our customers |
|
| J. To protect and maintain functions of the website |
|
Our Group may also disclose your personal data to government authorities and other agencies to comply with legal obligations and demands.
The disclosure described in section 4 above may involve cross-border transfers of personal data to countries or regions outside the EEA, the UK, or Japan. In such cases, Our Group will implement one of the data protection measures listed below:
For more information on these measures, please contact Our Group via the general inquiry form referred to in section 8 below.
Our Group retains your personal data for as long as it is necessary for the purposes described in section 3. above or consistent with applicable laws. Our Group will delete or anonymize your personal data when it no longer needs it in accordance with applicable laws and Our Group’sestablished procedures.
Our Group usually does not collect and store personal data about children who it knows reside in the EEA or the UK and are under 16 years of age. If Our Group discovers that it has unintentionally collected data from a child who resides in the EEA or the UK in a way that does not meet the requirements under the GDPR and other applicable laws, it will delete the data immediately.
You have the following rights regarding the use of their personal data by Our Group, in accordance with the conditions set forth in the GDPR.
If you would like to exercise any of these rights, or if you have any inquiries about your rights, please contact Our Group by using the following methods.
Email:datarequest@datarep.com
Web form:https://www.datarep.com/data-request
You can lodge complaints about Our Group’s way of processing your personal data with a data protection supervisory authority that has a jurisdiction over the region where you reside.
Contact information of data protection supervisory authorities is available at the following URL.
For EEA residents:https://edpb.europa.eu/about-edpb/about-edpb/members_en
For UK residents:https://ico.org.uk/
For customers of 2ND STREET residing in the State of California, United States, we handle their personal information in accordance with the provisions of sections 1. through 9. of the above “Handling of Personal Information (Privacy Policy),” as well as the following provisions, in compliance with the California Consumer Privacy Act, as amended (CCPA). In the event of any conflict between the provisions of sections 1. through 9. of the above “Handling of Personal Information (Privacy Policy)” and the provisions set forth below, the provisions below shall prevail.
We, along with 2ND STREET CORPORATION, jointly determine the purposes and means of handling personal information of customers of 2ND STREET. Regarding the handling of personal information of customers of 2ND STREET, 2ND STREET CORPORATION and we (hereinafter referred to as “Our Group”) are businesses within the meaning of the CCPA. The content set forth in section 1. through 5. below constitutes a notice at the collection provided by Our Group pursuant to CCPA §1798.100(a), and the content set forth in section 6. through 12. below sets forth the contents of the privacy policy published by us in accordance with CCPA §1798.130(a)(5). For the privacy policy published by 2ND STREET CORPORATION, please refer to the table below:
2ND STREET CORPORATION Privacy policy
Our Group collects the following categories of personal information.
| Categories of Personal Information as Stipulated in CCPA 1798.140.(v)(1) |
|---|
| a. Identifiers such as a real name, postal address, unique personal identifier, online identifier, email address, login ID, or the similar identifiers |
| b. Commercial information, including records of products you purchased, obtained, or considered, or other purchasing or consuming histories or tendencies |
| c. Internet or other electronic network activity information, including browsing history, search history, and information regarding your interaction with our websites |
| d. Audio, electronic, visual or similar information such as recording of your inquiry |
| e. Sensitive personal information, which is your account log-in ID for our websites in combination with any required security or access code, password, or credentials allowing access to the accounts |
Our Group collects and processes your personal information for the following purposes.
Our Group may entrust the processing of your personal data in whole or in part to our group companies and other external vendors to the extent necessary to achieve the purposes as described in section 2. above. Such disclosure may involve a sale or sharing of your personal information to a third party within the meaning of the CCPA.
When a business “sells” or “shares,” as defined in the CCPA, personal information of a consumer to or with a third party, the consumer has a right to opt-out of the sale or sharing.
To exercise this right, please either (a) click the “Do Not Sell or Share My Personal Information” link, or (b) enable an “opt-out preference signal“ or “Global Privacy Control“ in your browser.
Our Group retains your personal information for as long as it is necessary for the purposes described in section 2. above or consistent with applicable laws. Our Group will delete or anonymize your personal information when it no longer needs it in accordance with applicable laws and our established procedures.
The following are the categories of personal information we have collected in the preceding 12 months and their sources.
| Categories of Personal Information | Sources |
|---|---|
| a. Identifiers such as a real name, postal address, unique personal identifier, online identifier, email address, login ID, or other similar identifiers |
|
| b. Commercial information, including records of products you purchased, obtained, or considered, or other purchasing or consuming histories or tendencies |
|
| c. Internet or other electronic network activity information, including browsing history, search history, and information regarding your interaction with our websites |
|
| d. Audio, electronic, visual or similar information such as recording of your inquiry |
|
| e. Sensitive personal information, which is your account log-in ID for our websites in combination with any required security or access code, password, or credentials allowing access to the accounts |
|
The purposes for which we use personal information are as described in section 2. above.
The following are the details of the personal information we have sold or shared in the previous 12 months.
| Categories of Personal Information (As listed in Section 6.) |
Categories of Third Parties | Purposes |
|---|---|---|
| c. Internet or other electronic network activity information, including browsing history, search history, and information regarding your interaction with our websites |
|
H. |
|
E. |
We usually do not collect and store personal information about children who we know reside in California and are under 13 years of age. If we discover that we have unintentionally collected information from a child who reside in California in a way that does not meet the requirements under the CCPA and other applicable laws, we will delete the information immediately.
As shown below, we may disclose certain categories of your personal information to third parties. In such cases, we will take appropriate measures, including obtaining your consent, in accordance with applicable laws.
| Categories of Personal Information (As listed in section 6.) |
Categories of Recipients | Purposes (As listed in section 2.) |
|---|---|---|
|
a. Identifiers such as a real name, postal address, unique personal identifier, online identifier, email address, login ID or other similar identifiers
b. Commercial information, including records of products you purchased, obtained, or considered, or other purchasing or consuming histories or tendencies d. Audio, electronic, visual or similar information such as recording of your inquiry e. Sensitive personal information, which is your account log-in ID for our websites in combination with any required security or access code, password, or credentials allowing access to the accounts |
|
A. |
| a. Identifiers such as a real name, postal address, unique personal identifier, online identifier, email address, login ID or other similar identifiers |
|
B. |
| a. Identifiers such as a real name, postal address, unique personal identifier, online identifier, email address, login ID or other similar identifiers |
|
C. |
|
a. Identifiers such as a real name, postal address, unique personal identifier, online identifier, email address, login ID or other similar identifiers
e. Sensitive personal information, which is your account log-in ID for our websites in combination with any required security or access code, password, or credentials allowing access to the accounts |
|
D. |
|
a. Identifiers such as a real name, postal address, unique personal identifier, online identifier, login ID, email address, account name or other similar identifiers
c. Internet or other electronic network activity information, including browsing history, search history, and information regarding your interaction with our websites |
|
E. |
| a. Identifiers such as a real name, postal address, unique personal identifier, online identifier, email address, login ID or other similar identifiers |
|
F. G. I. |
| c. Internet or other electronic network activity information, including browsing history, search history, and information regarding your interaction with our websites |
|
H. |
| c. Internet or other electronic network activity information, including browsing history, search history, and information regarding your interaction with our websites |
|
J. |
We may also disclose your personal information to government authorities and other agencies to comply with legal obligations and demands.
You have the following legal rights set out in the CCPA with the processing of your personal information by us, in accordance with the conditions set forth in the CCPA.
If you would like to exercise any of these rights, or if you have any inquiries about your rights, please contact us by using the following methods. We may ask you to provide additional information that is reasonably necessary for identity verification.
If you wish to exercise your right to opt out, please click the “Do Not Sell or Share My Personal Information” link available on this website.
When you use an authorized agent to submit a request to know, a request to delete, or a request to correct inaccurate personal information, we may require that you:
We may deny a request from an agent that does not submit a proof that they have been authorized by you to act on your own behalf.
Cookies are small data files stored on a user’s device (such as a computer or smartphone) when the user visits our website.
By using cookies, we are able to provide essential website functions, understand usage patterns, and improve the overall user experience.
We use cookies for the following purposes:
The cookies used on our website include the following categories:
We may use services provided by third parties for analytics, advertising, or other functionalities.
These third parties may place cookies on users’ devices in accordance with their own policies.
Users may manage, restrict, or disable cookies through their browser settings or other management tools provided by us.
Please note that disabling cookies may affect the availability or functionality of certain parts of the website.
This Cookie Policy is intended to supplement our Privacy Policy and explains our general approach to the use of cookies.
We may update this Cookie Policy from time to time in response to legal, technical, or operational changes.
Any updates will become effective upon being posted on our website.
We use cookies and similar tracking technologies to enhance the functionality of our website, provide content and advertising tailored to users’ interests, enable social media features, and analyze website usage in order to improve our website.
Data related to users’ use of our website collected through cookies may be shared with partners that provide advertising delivery, social media, or analytics services (“Service Partners”).
These Service Partners may combine such data with other information provided by users to them, data collected when users use services provided by such partners, or data collected from websites other than ours, and may use such combined data to optimize advertising delivered to users by third-party businesses on the internet.
For details on external transmission of user information, please click here.