Updated December 1, 2022
Table of Contents
What information does CenturyLink obtain and how do we use customer information?
Does CenturyLink share customer information?
What choices do our customers have about information we obtain and how we use it?
What access do customers have to information about themselves?
How does CenturyLink secure customer information?
Changes to this Privacy Notice
Signing up and ordering services. When customers sign up for service, we ask for their name, street address, email address, how they want their listing to appear in phone directories and directory assistance, and contact information. We may ask for date of birth, social security or driver's license numbers (to confirm identity or determine creditworthiness), billing information including whether bills should be sent by mail or set up for online access, and bank account or credit card information if a customer elects to pay electronically. We may keep some of this information and use it for future marketing purposes even if a customer does not complete an order with us and your submission of that information is deemed consent to our use of the information as contemplated in this privacy notice. We also keep notes of contacts we have with our customers.
Recording, reviewing or monitoring of your interactions with CenturyLink. For quality assurance, training and online session analysis we sometimes review your interactions with us. This may include email correspondence, recorded conversations with our agents and recorded online sessions. We also save the text of "click to chat" sessions with our online sales and service consultants and may save screen shots when customers give our repair personnel remote access to their computers for technical support.
By using CenturyLink’s app, you agree to CenturyLink’s use of third-party analytics and monitoring software to record system and user actions within our app. We use this data to detect and resolve issues and to ensure that the app is functioning as designed within the user experience. Aggregated, anonymous statistical information and data that is not identifiable to any person or entity could be used by the third party for auditing, research and analysis purposes to operate and improve the system subject to contractual limits.
Network recording of service usage. We record information about usage of our networks or systems. For example, we may log dates and times and the telephone numbers of calls to and from our customers, especially when the information is necessary for toll billing. Generally, we do not retain any call information for local landline calls. If a customer activates a "call trace" feature, we will record the number of the calling party. And when we are your Internet service provider (ISP), we maintain logs of the total volume of data a user transmits, and the date, time and length of time that a user accessed the Internet through our services, including the user's IP address at the time. For more about information we gather see the section entitled "When CenturyLink is your internet service provider."
Information gathered when visiting CenturyLink websites. When a visitor goes to a CenturyLink website (such as CenturyLink.com or CenturyLink.net), we receive information about the visitor's operating system and its browser, the site accessed immediately before accessing our website, pages the visitor goes to within our website, average time spent on our site, and sometimes the website accessed after leaving it along with other relevant statistics. For analysis and investigative purposes we may also record and view a visitor’s online sessions, but we do not include any sensitive information such as social security numbers or credit card information. We also get the visitor's Internet Protocol (IP) address,* including the city and state of its location. That lets us customize product availability and pricing for that community. We may also retain information entered by visitors on our online order pages, even if the visitor does not complete an order and submission of that information is deemed consent to our use of the information as contemplated in this privacy notice.
*An IP address is assigned to a visitor's browser by the visitor's ISP. The IP address identifies visitors on the Internet by a number, and part of that number usually identifies the visitor's city and state. Your IP address stays the same while you're connected to the Internet, but a new one may get assigned between Internet sessions.
When other companies advertise on CenturyLink websites. When other companies advertise on our websites like CenturyLink.net, the ad networks and advertisers we work with may put a cookie or web beacon on your computer. Learn more about cookies and web beacons.
Information obtained when clicking on CenturyLink ads on other websites. When we place ads on others' websites, the ad networks we work with provide general information about visitors who click on our ads, including the types of browsers they use and their city and state. The ad networks we work with may use that information to predict what CenturyLink ads may be most effective in a location.
Multiple privacy notices might apply. In some cases, more than one privacy notice will determine how information about you is obtained and used. For example, when we sell you services either with or through another business (such as an Internet, television or wireless service), their privacy notices will be relevant. This is also true when you access non-CenturyLink websites.
Personal Information obtained from third parties. Sometimes, we receive information about our customers from other businesses. This happens, for example, when another business sells our services, or when we bundle our services with services from a television or wireless company. It also happens when we bill for a business, such as a long distance company or other type of service provider. We also obtain information about our customers from businesses that gather it from many sources, such as the Census Bureau and public records and companies that collect demographic data. This could include information such as gender, age range, education, income levels and length of residence. Finally, we work with companies that provide us email addresses for our customers.
Routine business use of Personal Information. We use Personal Information that we obtain from customers or generate while providing our services to set up and maintain accounts, provide and repair our services and equipment, respond to customers' questions and concerns, bill and collect for our services, plan for future development of our network and services, to market our services, and communicate with our customers and others about our services. We also use our customer information, and information we obtain from third parties, including demographic data to help us serve our customers, predict what new services they may want and determine a customers’ creditworthiness. We do not resell customer information that we buy from third parties.
As a provider of local, long distance, and Voice over Internet Protocol (VoIP) services, we use customer information as outlined above under general practices.
When we provide VoIP service, we rely on our customers to keep their service addresses current by updating their online customer profile when they change locations. In the event of an emergency, we provide this information to 911 service providers so they can help emergency responders find you.
As your ISP, we gather and use information as outlined above under general practices.
Information we obtain when CenturyLink provides internet access. We gather and use information generated on our networks to manage them, to plan for future development of our network and services, to market our services, and to keep our services running efficiently. For example, we monitor data to check for viruses, to control spam, to prevent attacks that might disable our services, to ensure that your traffic does not violate your subscriber agreement or our acceptable use policies, and to guard against other inappropriate or illegal activity. This involves looking at the characteristics of our network traffic, such as traffic volumes, beginning and ending points of transmissions, and the types of applications being used to send traffic across our network. We may also gather details from the modem, for example, the number and types of devices connected and the method of connection (Wi-Fi versus wired) to aid in customer troubleshooting and network operations.
Sometimes we need to look into the content of the data (such as the specific websites being visited, files being transmitted, or application being used) for the purposes described above, in circumstances when we are concerned about fraud or harassment, to repair a problem we detect or that a customer contacts us about, or when we are providing the content of broadband traffic to law enforcement which we only do as authorized by law.
Most of the specific information we obtain that is attributable to a user is kept only for a matter of hours or days. We may retain data for longer if, for example, we see patterns in the traffic that give us concerns about potential harm to our network, or if we are doing a specific study on the impact of certain applications used on our networks. We also retain for longer periods logs of the total amounts of data transmitted, and the date, time, and duration of access to the Internet through our services by a user, including the user's IP address at the time.
We may analyze some elements of your online activity, including websites visited, and other communications, such as past customer service calls, for purposes relating to new services, service changes, or promotional offers that may improve your customer experience.
Location Based Advertising. We may let advertisers know whether we provide you Internet access based on a geographic attribute to enable them to target ads to you on that basis. You will not see more ads as a result of this service, just ads intended for those in the location where we provide your service. We will not tell advertisers your service address, your physical location, or your web browsing incidences, and we will not provide them any information by which they could identify you. In some instances, we may place a cookie on your computer to keep track of what ads have been displayed through this service.
Children's use of CenturyLink internet services. We understand that children may use our internet services. We urge you to pay attention to what your children are doing on the internet and what sites they are visiting. Read about obtaining information from children under 13. For more information about online safety, please visit OnGuardOnline.gov, the Federal Trade Commission resource for internet safety.
In addition to the information described above under General practices we provide both self home monitored service and alarm monitoring service. If we provide you self home monitored service, we will know if your device is activated. If we provide alarm monitoring services for you we need to gather information about your home or business, the alarm set up within it, your alarm access codes, and the code word you will use to confirm false alarms. We may also be able to see whether your alarm is activated (armed) or not, and histories of past alarms. In some instances, we can change your alarm access code from our service center. This information and our access to your system enable us to respond appropriately when your alarm goes off. We also ask you for contact information for those you would like us to call in the event we are unable to reach you when your alarm goes off. For more detailed information, download our CenturyLink Smart Home Security Privacy Notice.
We may also record and view online sessions (excluding sensitive information such as social security numbers and credit card information) and obtain information about visitors when they interact with our sites, such as which pages they visit and anything they may click on. We use this information to analyze, manage and improve our sites. To improve our visitors' experiences, we may store preferences or other information provided to personalize service offerings and ads. For example, we may use a stored telephone number and location to show local product availability and pricing.
We also use information gathered from our sites, including individual online sessions for security, investigative and analytical purposes, such as to detect unauthorized intrusions, prevent malicious attacks and fraud, and help ensure a safe online experience for our visitors and customers.
We may also keep information entered by visitors on our online order pages, even if the visitor does not complete an order and submission of that information is deemed consent to our use of the information as contemplated in this privacy notice. We may use this information for marketing purposes.
Obtaining information from children under 13. Unless otherwise indicated, our websites are intended for general audiences and not directed to children. We do not knowingly collect Personal Information from children under 13. Note that other providers' web pages are accessible through links on many of our websites, and those providers may have different practices on collecting and using information from children under 13. If you are concerned about those sites, please review them and their privacy notices.
Sharing information within CenturyLink. CenturyLink is made up of a number of companies and we share information among them as permitted by law or with your consent. You benefit when we better understand your interests and needs. And knowing more about how our customers use our services and sharing that information among our companies helps us improve our networks, the services we provide, and our customer service. It also lets us personalize our interactions with you, including your online experience.
Sharing information with companies who support our services. We share customer information as needed with companies that help us market, sell, provide, plan, bill and collect for, and otherwise support our services. Often when these companies act on our behalf, they refer to themselves as "CenturyLink." We also share limited customer information with companies that provide our customers with telephone equipment, Internet services, television offerings, and wireless services that we may sell as part of our service packages. We require these companies to use our information only for the purposes we specify and to keep it safe and confidential.
Providing information when lawfully permitted and necessary. Like other businesses, we may share information: (1) to comply with laws or to respond to lawful demands such as subpoenas or court orders; (2) to assert or defend our legal rights or the rights of our employees, agents, contractors, or customers; (3) to investigate and protect against fraud, harassment, threats to our network, or other types of unlawful activity involving us, other providers we do business with, or our customers; (4) to protect our property, including our networks, or the property or networks of others; or (5) as otherwise permitted by law.
Sharing information when merging, selling or transferring part of our business, or acquiring another business. If we decide to merge, sell or transfer a part of our business to or with another company, or to acquire part or all of another company, customer information may be shared or transferred as part of the decision process or as a result of the sale. We might also provide customer information to another company if we decide to stop providing a service. This information may be about the characteristics of our business and groups of customers, or it could include information about specific customers.
Providing information when customers ask. Upon customer request and subject to proper authentication, we will disclose account information to third parties. Please see the Customer Support information on this page for the numbers to call.
Caller ID. We disclose customer information through call-identifying products and services like Caller ID. In some instances, you can block that disclosure. For more information about call-identifying features and how to block disclosure of that information go to our frequently asked questions.
Sharing of Customer Proprietary Network Information (CPNI). CPNI is a subcategory of protected customer information defined by federal law as information about a consumer's account, including usage and billing of telecommunications services. Those services are offered by providers of traditional local, long distance, and wireless services, as well as providers of Voice over Internet Protocol (VoIP) services to consumers. CPNI includes what services you subscribe to, how you use them, and what you are charged for them. It does not include your name, address, telephone number or other types of information such as information about your telephone equipment or television service. Communications companies are required to treat CPNI confidentially, and we do. The FCC regulates when and how CPNI can be shared and used. To find out more about the FCC's CPNI rules go to our frequently asked questions.
Subject to the exceptions described below, we share customer information with third parties for their own use only where the law requires it or customers have consented to it. For the most part, federal law covers the release of information in these circumstances. From time to time we may contact you on behalf of an external business partner about a particular offering that may be of interest to you. In those cases, your personal information is not transferred to the third party.
Providing information to other carriers and service providers. In certain circumstances, we share customer information with carriers and other service providers, including competing local and long distance companies, VoIP providers, Internet service providers, and billing companies so that they can accurately provide and bill for their services. This exchange of information is often legally required, and is also consistent with industry standards. In some cases the customer whose information is being provided is a customer of both CenturyLink and the other provider. In other cases, the other provider has told us that it has the customer's permission to receive the information. And we will also share information with another provider if we suspect fraud, harassment, a threat to their networks, or some other unlawful activity.
For example, companies like CenturyLink are legally required to provide customer information to long distance and other service providers (or their billing agents) so they can verify orders, be aware of customer moves, get paid for their services and for other similar non-marketing purposes. We are required to provide such information even if the information is not listed or published, and the law limits these companies in their use of the information.
Directory publishers. By law, when CenturyLink accepts a directory listing for publication, we must provide that listing information to all directory publishers - both our official publisher as well as third-party publishers. When we receive listings from other carriers, they tell us what directories (if any) they want their customer information published in. Once publishers have the listing information, they can use, sort, organize or package the information in any manner they wish: arranged by name or by telephone number, for example, or published in paper directories, electronic directories over the Internet, on CDs, or in any future directory format that may be developed.
We are also required to give directory publishers the names and addresses of customers with non-listed and non-published information. These publishers can use this information only to deliver their directories and for no other purpose.
If you have elected to have your name, address and telephone number published in white pages directories (which means that it will be public information), that information may be used by others for their own marketing or to create marketing lists. You can choose not to be included on lists that may be used by others for marketing.
Directory assistance providers. The Federal Communications Commission requires carriers to share customer names, addresses, and telephone numbers with directory assistance providers (including names but not telephone numbers of non-published customers). Some of these providers offer Internet or online directory assistance services. The FCC does not allow us to restrict how these providers use the customer information we give them. But we do require companies that buy our directory assistance information to sign a contract agreeing to honor restrictions you have asked for, such as that it not be published, when they use the information for purposes other than directory assistance.
Emergency service providers. Federal law requires us to provide customer names, addresses, and telephone numbers - including information on non-published and non-listed customers - to emergency services providers, including 911 and reverse-911 providers (who notify the public of emergencies). This information is also provided to those responsible for answering 911 calls when they receive such calls.
Credit reporting businesses. We may provide information on customers' payment histories to credit evaluation or reporting businesses. We may permit those businesses to incorporate that information into their own databases as part of offering their services.
Identity confirmation services. We may also allow companies to match information provided to them by their potential customers with name and address information in our databases to confirm the identity of their potential customers, and the length of their service with us.
California Shine the Light Law. California Civil Code Section 1798.83 entitles California customers to request information concerning whether a business has disclosed personal information to any third parties for the third parties' direct marketing uses within the previous calendar year. California customers who want more information about our compliance with this law or have questions or concerns about our privacy practices and notices may contact our Privacy Office.
California Consumer Privacy Act (CCPA). See our notice about privacy rights for California residents.
Our websites contain links to websites of other businesses. We are not responsible for information those sites collect. If you are concerned about the information collected by these other sites, please review their privacy notices.
When other companies advertise on CenturyLink websites such as CenturyLink.net, the ad networks and advertisers we work with to place ads there may put a cookie or web beacon on your computer. Learn more about cookies and web beacons.
Responding to lawful process. We may provide customer information to the government in response to a subpoena, warrant or court order. Among the information we might be asked to provide are a customer's name, address, telephone number, account number, any Internet Protocol or network address that we assigned to the customer, records of service usage (including interactive session times and durations), how long the customer has subscribed to our services (including start date and the types of services used), and the means and source of customer payment (including any credit card or bank account number used to pay for our services). In response to a search warrant or court order, we may be required to disclose to law enforcement agencies the content of and records relating to telephone calls, email messages (including attachments), Internet usage, and data we may store on your behalf if we provide you cloud computing or managed hosting services. We do not provide notice to our customers of law enforcement demands for information. But our usual policy is to provide notice and the opportunity to object when we receive requests related to civil lawsuits whether from the government or private parties. See additional information regarding requests from the government for customer information.
Voluntary release of information in an emergency. We may provide customer information to the government if we believe in good faith that an emergency involving immediate danger of death or serious physical injury to any person requires disclosure without delay.
Other voluntary releases of information. Under certain conditions, we voluntarily share information with governmental agencies:
Reporting of child pornography. Like other service providers, we are required to report apparent violations of laws concerning child pornography when we have a reasonable belief of facts or circumstances that warrant a report. In those cases, we contact the National Center for Missing and Exploited Children and may also contact law enforcement directly.
Telephone directory treatment. You can choose whether and how your entry appears in CenturyLink directories and through CenturyLink directory assistance. You can choose not to have your name and address in these directory services at all or opt for full names or initials, or full or partial addresses.
Product choices. We provide a number of telephone related services that may help you protect your privacy. For more information about these services, please see the Customer Support information on this page for the numbers to call.
Third party marketing. If you have elected to have your name, address and telephone number published in white pages directories (which means that it will be public information), that information may be used by others for their own marketing or to create marketing lists. You can opt-out of inclusion on lists that may be used by others for marketing.
Opting out of marketing communications. You can ask not to receive our marketing calls, mail and email. You will still receive bills, email notices that your bill is available if you subscribe to paperless billing and service related contacts and notices from us even if you choose not to receive marketing contacts. See choices regarding marketing contacts below.
Opting out of other communications. You may receive repair, billing and order status notifications from us via text or email messages. You may choose not to receive these messages by following the "unsubscribe" instructions in the email message, replying to the text message with "stop" or please see the contact information on this page. Customers who use My CenturyLink may also change their preferences in their account profile by selecting "Manage Notifications".
You can choose not to be published in our directories or listed in our directory assistance service. A non-published status means that a number is unavailable in both places, while a non-listed status means that name and number are not printed in directories but are available through directory assistance. To make one of these choices (for which there is usually a fee), please see the contact information on this page.
If you choose to be listed in a directory, you can limit the information provided. For example, you can decide to list only your last name and first initial, or you may use either a community address (such as "Wake Forest," or "Phoenix") or no address at all.
Please note that we are required to give non-published and non-listed customer names and addresses to directory publishers for directory deliveries and to directory assistance providers. But we mark the information so that they know our customers' privacy choices and by contract we require them to follow those preferences.
Telephone. Federal Do Not Call laws allow you to place residential landline and wireless phone numbers on the National Do Not Call Registry to prevent telemarketing calls to those numbers. If you would like to add your numbers to this list, you may do so by calling 1-888-382-1222, or by visiting www.donotcall.gov.
Please note that being on a federal or state Do Not Call list will not keep customers from getting our marketing calls because we have an established business relationship with our customers.
Residential customers who don't want to receive our marketing telephone calls may ask to be placed on our internal Do Not Call list. If a current CenturyLink customer does not want to receive our marketing calls, the customer must expressly tell us not to call by getting on our internal Do Not Call list. Please see the contact information on this page for options.
Direct mail. If you want to stop direct mail marketing, including the receipt of catalogs, from companies other than CenturyLink, you should contact them directly or go to the Direct Marketing Association (DMA) website for more information.
If you do not want to receive our direct mail marketing, you must expressly tell us by using this form or by contacting Customer Support. We will stop sending you direct mail marketing for two years from the date of your request.
Email marketing. To stop receiving commercial emails from us, follow the "unsubscribe" instructions on any marketing email message, complete the opt-out form, or contact us.
Customers who use My CenturyLink may also go to their account profile to change their email preferences.
Please note in most cases it may take up to thirty days for your choices regarding marketing contacts to become effective. In certain circumstances involving direct mail, it may take longer to implement your choice. We appreciate your patience as you may receive a few more marketing communications from us while we update your preferences. If you are our customer, you will still receive billing and service related emails from us even if you choose not to receive marketing contacts.
Access through billing statements. Your monthly billing statement contains the primary name on your account, the services you subscribe to or use, and the amount billed. A paper billing statement may contain less detailed information about specific services or usage than information available online. Both may contain other information, such as regulatory notices and charges passed on to you from other service providers. If you find a mistake in the information we have or if you have any questions about your account, please contact us.
Telephone and online access. We will discuss your account with you or with someone you authorize (once the caller is properly authenticated). Information may also be available to an authorized user through your online account profile or through interactive tools on our website such as "click to chat." If you want to authorize someone to talk about your services or other account details, contact Customer Support.
Releasing information upon written request. Upon your request and subject to proper authentication, we will disclose account information to third parties. Please contact us using one of the options on this page.
Restricted access to information. Only CenturyLink employees, agents, service providers and other businesses we work and share information with and who have a legitimate business purpose are authorized to access customer information. This access is strictly defined (often involving password controlled access and other security controls) and subject to policies and contracts requiring confidential treatment of the information.
Securing sensitive information. We use secure technologies to transfer sensitive information and comply with a variety of industry standards, and federal and state laws regarding the protection of customer information.
Employee and vendor training. We require employees to protect customers' information. We train our employees on those policies when they are hired, and we update that training periodically. When necessary, we train vendors on our policies as well.
Although we have security measures in place to protect against the access, misuse and disclosure of information under our control we cannot guarantee that your information will never be disclosed in a manner inconsistent with our policies and practices or that our safeguards will prohibit all attempts to defeat these measures. If you think information about you or others has been disclosed without proper authorization, please contact our Privacy Office online or write to us at:
100 CenturyLink Drive
Monroe LA 71203
We update this privacy notice from time to time to reflect evolving technology and other service, process and policy changes. We will notify you of any material changes by posting a notice on our website home page and the privacy notice page for 30 days before making the change.
If you have questions about this notice, our practices, concerns about your personal information, or require assistance in managing your choices, please contact our Privacy Office online, or write to us at:
100 CenturyLink Drive
Monroe LA 71203
Questions or comments about CenturyLink Privacy Notice:
Password reset, billing, or service-related issues:
Chief Privacy Officer
Associate General Counsel:
100 CenturyLink Drive
Monroe LA 71203