This assessment covers the linked Combined.
Grade B+ — Fair terms (score 81/100)
BiblioCommons explicitly pledges not to sell personal data, but reserves the right to transfer data in a merger and lacks a specific commitment to notify users of security breaches.
No data sale. Broad merger transfer clause. No breach notification commitment.
The Controller reserves the right that in the event of a bankruptcy filing, mergers with third parties, acquisition by third parties, sale of assets (all or partial)... that the Controller shall be entitled share (or sell as an ancillary aspect of the overarching business transaction) the Personal Data provided by the Data Subject to the third party.
Your personal data is considered a business asset that can be transferred or sold to another company if BiblioCommons is acquired or merges.
the Controller cannot and does not guarantee the privacy, security, authenticity or non-corruption of any information transmitted through the internet or any for information stored in any third-party system connected to the internet.
The company disclaims responsibility for the security of your data, effectively removing liability for breaches.
The Controller may from time to time update this Privacy Policy, with the updated policy to be posted on the Controller’s Website. ... The Controller recommends that Data Subjects revisit this Privacy Policy from time to time on a regular basis.
The company can change its privacy terms at any time without notifying you directly; you are expected to check for updates yourself.
The Controller will not sell, rent or loan a Data Subject’s information to third parties
The company makes an explicit, positive commitment not to monetize your personal data through sales.
would like to update or delete incorrect Personal Data, please contact Controller
You have a defined process to request the deletion of your personal information.
Last reviewed 2026-10-12 under rubric v3.6.