The table below provides more detail about the categories of information we collect and process.

1. We collect the following information that you provide to us when you use our consumer services.

   Type of information	When we collect it
   Your account information, demographic information, contact information.	When you sign up for an account.
   Your contact information, account information, and identity documents.	To provide customer support or manage your account in limited cases.
   Your feedback and call recordings.	During phone calls and whenever you interact with our customer support team.
   Declared user-preference information you provide to tailor your experience, such as stock symbols and favourite sports teams.	At the time you provide the information.
   Financial information you provide to pay for subscription services.	When you make the payment or subscribe to our services.
   Contact information and user-generated content that you provide in surveys, comments, and Yahoo-sponsored promotions.	When you provide information on our consumer services in surveys, comments, and Yahoo-sponsored promotions.

2. We collect the following information when you use our consumer services (direct collection).

   Type of information	When we collect it
   Information about your activity, including the following:
   Your online activity information on our consumer services, such as which ads or articles you clicked on, your search queries, apps you’ve installed or used, and the frequency, duration and time of day of your visits.	When you click on ads or articles or install or use our sites and apps.
   Your email information.	When you use Yahoo or AOL email services to send or receive emails.
   The site you visited or the app you used immediately before and after using our consumer services.	When you start using and stop using our consumer services.
   Purchase information about the type and duration of your subscriptions or purchases from us on our consumer services.	When your subscription with us starts and ends, or the purchase is made.
   Information about your device, including the following:
   Device information such as your device’s language settings, geographic region and time zone. Technical identifiers such as IP addresses, internet service provider, device identifiers and mobile phone network. Precise geolocation information and approximate geolocation information, based on your IP address and GPS, Wi-Fi or Bluetooth signals.	When you use our consumer services.

3. We collect the following information when you use third party sites and apps that use our digital advertising services (indirect collection).

   Type of information	When we collect it
   Information about your activity, including the following:
   Your online activity information on third party sites and apps, such as which ads or articles you clicked on.	When you click on ads that we provide through our digital advertising services.
   Information about your device, including the following:
   Device information such as your device’s language settings, geographic region and time zone. Technical identifiers such as IP addresses, internet service provider, device identifiers and mobile phone network. Precise geolocation information and approximate geolocation information, based on your IP address and GPS, Wi-Fi or Bluetooth signals.	When you use a partner site or app that uses our digital advertising services.

4. We collect the following information from partners through contractual agreements, or from publicly available sources.

   Type of information	When we collect it
   Information from publicly available sources, or from our commercial partners and third-party data providers under contracts with them, including technical identifiers, demographic information, device information, online activity information, inferred interests, precise geolocation information and approximate geolocation information.	When we access the information from publicly available sources or enter into agreements with partners who provide the services to us.
   Contact information and demographic information from social media platforms.	When you use your social media login to use our consumer services.

1. To perform our contract with you

   We process your information when it is necessary to enter into or keep our contract with you. You can find the terms of the contract in the Terms of Service.

   1. Processing carried out to provide you with our consumer services

      Category of information we process	Why we process this information
      Email information Contact information	To provide our email service to you.
      Contact information Financial information Purchase information	To provide you with a subscription service, process your subscription payment, and provide you with a record of your purchase history.
      Account information Contact information Identity documents	To give you secure access to your account, and in certain circumstances to verify your identity when you contact us for customer support. We only ask for identity documents if necessary for security purposes.
      Device information	To optimise the version of our consumer services that you request. For example, if you use our consumer services on a mobile device, we will show you the mobile version, and will show you the desktop version if you are on a laptop or desktop computer.
      Technical identifiers	To remember your log-in information when you sign into our consumer services.
      Declared user-preference information	To provide you with features or display content that you have requested on our consumer services. For example, we will save and maintain the stock symbols you add to your finance portfolio or the sports teams you follow on our sports site.
      Online activity information Technical identifiers Approximate geolocation information	To process the queries that you type into our search services and provide you with relevant search results. To display articles, videos and other content from us and our content partners. We will not personalise the content we show you without your consent.
      Online activity information Technical identifiers Approximate geolocation information Device identifiers	To detect network and system outages, monitor our system and network performance, and balance traffic across our network infrastructure.
      Approximate geolocation information	To provide you with the appropriate consumer services available in your region (for example, providing localised search results such as restaurants near your current location when you search for restaurants). We will not use your precise geolocation information without your consent.
      Declared user-preference information Contact information Demographic information Feedback	To increase engagement with you on our consumer services through promotions you choose to take part in.

2. With your consent

   We need your consent (permission) to use your information for certain processing activities. This means that we will only perform this processing once you agree by taking an action such as clicking ‘I agree’. You can withdraw your consent for any of the processing stated below (i to v) through your privacy controls.

   1. Processing carried out to provide certain features of our consumer services

      Category of information we process	Why we process this information
      Email information	To provide you with product features such as: email features (for example, tracking packages, identifying travel-related emails, including those relating to flight and hotel bookings, and one-tap unsubscribing from emails you no longer want to receive), and other features across our consumer services (for example, on the Yahoo homepage in certain countries you can view your spending based on the purchase receipts you have been emailed). If you are using our services in the EEA, UK, or Switzerland you can go to your privacy controls to control how we use your email information for product features.
      Contact information	To send you newsletters that you have subscribed to as part of your use of our consumer services.

   2. Processing carried out to provide tailored advertising, including to build an advertising interest profile

      Category of information we process	Why we process this information
      Account information Approximate geolocation information Contact information Declared user-preference information Demographic information Device information Inferred interests Online activity information Precise geolocation information Purchase information Technical identifiers	To target and deliver tailored ads to you on our consumer services and on the sites and apps of other companies that use our digital advertising services. To measure how effective our ads are and to create advertising interest profiles based on your inferred interests. If you withhold or withdraw your consent for us to use your personal information to target and deliver advertising to you, we will still show you ads, but these ads will not be tailored to you based on these categories of information. Please see how digital advertising works to learn more about how we use your information to provide advertising to you. Yahoo's advertising policies do not allow the processing of data from children known to be under 18 for targeted advertising purposes.
      Commercial emails	To create advertising interest profiles to personalise the ads we show you across our services. You can use your privacy controls to control whether we can analyse your commercial emails, such as receipts from retailers, for advertising purposes. Please see the ‘Yahoo and AOL Mail’ section in our consumer services page for more information.

   3. Processing carried out to provide tailored content to you, including to build a content interest profile

      Category of information we process	Why we process this information
      Account information Approximate geolocation information Contact information Declared user-preference information Demographic information Device information Inferred interests Online activity information Precise geolocation information Purchase information Technical identifiers	To provide tailored content to you and to create content interest profiles based on your inferred interests. For example, if you frequently read articles on our consumer services about sports or financial markets, we will create profiles that identify you as a ‘sports enthusiast’ or ‘financial news consumer’. When you visit our consumer services in the future, you will see more articles about those interests. Similarly, if you add a company’s stock symbol to your Yahoo stock portfolio, we will show you more news articles about that company. If you withhold or withdraw your consent for us to use your personal information to provide tailored content to you, we will still show you content, but it will not be based on your inferred interests. Also, we will not use cookies and similar technologies to measure how you interact with the content we show you.
      Commercial emails	To create content interest profiles to personalise the content we show you on our consumer services. You can use your privacy controls to control whether we use your commercial emails to personalise the content we show you. Please see the ‘Yahoo and AOL Mail’ section in our consumer services page for more information.

   4. Processing carried out to market our services directly to you and promote partners’ products and services

      Category of information we process

      Why we process this information

      Contact information Demographic information

      To directly market our consumer services to you, and promote partners’ products and services, when you: sign up for an account with any of our consumer services tell us what you are interested in, or use certain consumer services for which your information is needed so we can provide the feature you are requesting. We also use your email address to send you newsletters that you have subscribed to as part of our consumer services.

   5. Processing carried out to understand, develop and improve our consumer services

      Category of information we process

      Why we process this information

      Commercial emails

      To create aggregate statistics using non-identifiable information from commercial emails that you and our other users have received. These aggregate statistics help us to understand how our consumer services are used, what commercial products and services are most popular, and other consumer behaviour. If you are using our services in the EEA, UK or Switzerland, you can use your privacy controls to control whether we include non-identifiable information from your commercial emails in our aggregate statistics. Please see the ‘Yahoo and AOL Mail’ section in our consumer services page for more information.

3. Based on legitimate interest

   We process your information when it is in our or our partners’ legitimate interests.

   1. Processing carried out to measure, understand, develop, and improve our consumer services

      Category of information we process

      Why we process this information

      Account information Contact information Declared user-preference information Demographic information Device information Feedback Financial information Approximate geolocation information Inferred interests Online activity information Precise geolocation information Purchase information Technical identifiers User-generated content

      To create insights which help us to: measure and understand how our consumer services are working and how they are being used, and create more relevant content, services and features for our consumer services compile aggregate statistics on the use of our consumer services and create general website metrics (for example, the number of users who visited a Yahoo site, read an article or watched a video on our consumer services). Examples of this type of processing include: counting the number of times an article is read or a video is watched on our consumer services counting and comparing the different types of browsers or devices that are used to access our consumer services testing for quality assurance (including security testing), bug detection and removal, and measuring service performance (for example, the time it takes our pages and apps to load).

   2. Processing carried out for authentication and security purposes, including to prevent and detect fraudulent, abusive or unlawful activity

      Category of information we process	Why we process this information
      Account information Contact information Identity documents	To verify your identity in certain cases, such as when you forget your password or when you request access to your information.
      All categories of information	To prevent and detect fraudulent, abusive or unlawful activity and to protect your account and our systems. We use your IP address to protect our consumer services from advertising-related fraud and other harmful technologies and activities. We also analyse your email information for viruses and other malware that would harm the performance or security of our email services and network. For example, we use email information for performance monitoring, security analysis, failure and outage detection and repair, troubleshooting and debugging, capacity planning and forecasting, traffic optimisation and load balancing.

   3. Processing carried out to investigate, identify, bring or defend against legal claims, to share information with other relevant parties, including law-enforcement agencies, and to respond to legal requests

      Category of information we process

      Why we process this information

      All categories of information

      To consider, and where appropriate, respond to legal requests, legal claims, litigation or other disputes. To detect, investigate or tackle: fraud and other illegal activity, or security and technical issues. This may involve sharing information with other technology companies to protect against security threats and report illegal material or content to law-enforcement agencies, government departments or other authorities. We share your information with our external advisors when we get legal advice, or with others in connection with legal claims and other disputes.

   4. Processing carried out to provide advertising

      Category of information we process

      Why we process this information

      Technical identifiers

      To deliver ads to you and protect our consumer services from advertising-related fraud. For example, if we do not have your consent to use cookies and similar technologies to provide you with ads, or to personalise the ads we show you, we will show you ads based on information like the page you are on or the time of day (these are often referred to as basic or contextual ads). When we show these ads, we will use your IP address to deliver the ads and make sure that you are not a fraudulent user. Please see how digital advertising works to learn more about how we use your information to provide advertising to you.

4. Meet our legal obligations

   We process your information when it is necessary for us to do so in order to meet our legal obligations.

   Category of information we process	Why we process this information
   Approximate geolocation information Technical identifiers	We will process your IP address to determine the jurisdiction and legal terms that apply to you.
   Account information Online activity information Technical identifiers	To apply your privacy choices across our services.
   All categories of information	To respond to a valid legal request from a regulator, law-enforcement agency or other public authority. Examples of valid legal requests include search warrants or court orders. The following are examples of our legal obligations under Irish and EU laws: If public bodies including the Irish Revenue Commissioners and the Office of the Director of Corporate Enforcement ask us for information, we must keep to company and taxation laws (such as the Companies Act 2014). If Irish law-enforcement agencies ask us for information relating to a criminal investigation, we must keep to the Criminal Justice (Miscellaneous Provisions) Act 1997 (as amended), where it applies. If the Irish Competition and Consumer Protection Commission asks us for information, we must keep to competition and consumer law (such as the Competition and Consumer Protection Act 2014). When we collect, process, store and keep personal information we must keep to data protection law (including the General Data Protection Regulation, the Data Protection Act 2018 and the European Communities (Electronic Communications Networks and Services) (Privacy and Electronic Communications) Regulations 2011). We must keep to any court order requiring us to provide information relating to legal proceedings, including orders made under regulation (EU) No 1215/2012 on jurisdiction and recognising and enforcing judgments in civil and commercial matters.

5. Protect vital interests

   We process your information when it is necessary for us to do so in order to protect your vital interests or those of another person.

   Category of information we process

   Why we process this information

   All categories of information

   To review and share information, including with law-enforcement agencies and others, in circumstances where your or someone else’s vital interests need to be protected, such as in an emergency. Vital interests include protecting your (and other people’s) life and physical or mental wellbeing, and detecting, removing and reporting illegal content. For example, we use detection tools to identify child sexual abuse material (CSAM) in our email service. When we detect CSAM, it is reported to the United States National Center for Missing & Exploited Children. When protecting vital interests we aim to combat harmful conduct and promote safety, integrity and security, including when we are investigating reports of harmful behaviour or are taking appropriate action, such as sharing information with relevant authorities when someone needs help.

How to exercise your privacy rights

You can exercise your privacy rights by visiting your privacy controls. You can also exercise your privacy rights by filling in our privacy form.

1. Withdraw your consent

   If you have given us your consent to process your information or to use cookies and similar technologies, you can withdraw your consent at any time. You can do this through your privacy controls.

   Please note that withdrawing your consent will not affect the lawfulness of any processing carried out based on your consent before it was withdrawn.

2. Object to the processing of your information

   You have the right to object to us processing your personal information. You can update your marketing preferences at any time by visiting your privacy controls. You can also object by filling in our privacy form.

   When you make an objection we will consider a number of factors including:

   • your reasonable expectations
   • the benefits and risks to you, us or other people, and
   • other available ways that would achieve the same outcome.

3. Restrict the processing of your information

   In certain circumstances you can restrict the processing of your information for a period of time, as long as there are valid reasons for doing so. To do this please contact us using our privacy form.

4. Get copies of your information

   You have the right to ask us for a copy of the personal information we hold about you. You can download a copy of your information from your privacy controls or by using our privacy form.

5. Get your information in an accessible way

   This right, known as the right to data portability, allows you to receive information that is accessible and machine-readable, and to ask an organisation to transfer your information to another organisation (for example, another email provider). You can arrange this through your privacy controls.

6. Delete your information

   You have the right, in certain cases, to ask us to delete your information. We will delete the information unless we are required by law to keep it or we have a valid business reason for keeping it.

   You can delete your account and the information associated with it, at any time, by visiting your privacy controls or by contacting us using our privacy form.

   When you ask us to delete your account, we will delete your information or make it anonymous within 30 days, unless there are overriding circumstances for us to keep it (for example, if we are required by law to keep it).

   You can ask for specific URLs to no longer appear in search results for your name on Yahoo Search and AOL Search. This is often referred to as the right to be forgotten. You can make this request by visiting our right to be forgotten page.

7. Correct your information

   You have the right to correct the information you provided if it is no longer accurate or is incomplete. You can update your information at any time by visiting your account info page or you can contact us using our privacy form.

8. Raise a concern

   If you have any questions or concerns about how your information is processed, you can contact our Data Protection Officer by emailing dpo-contact@yahooinc.com or by writing to us at the address provided in the how to contact us section below. If you are not satisfied with our response, you also have the right to make a complaint to the data protection regulator in the country you live or work in. Find your local data protection regulator.

   If you live in Switzerland, you can contact the Federal Data Protection and Information Commissioner (FDPIC).

   If you live in the UK you can contact the Information Commissioner’s Office (ICO).

For example, we keep the content of your email account for as long as your account is active. To keep your account active you must log in at least once every 12 months. If your account becomes inactive, your mailbox will be automatically deleted and cannot be restored. If your account continues to be inactive for a further six months, making it inactive for a total of 18 months, your account will be automatically scheduled for deactivation and deletion by our systems. We will tell you using your alternative communications channel (if you have set one up) before this happens.

Please note that paid subscriber accounts remain active during the subscription period regardless of account activity.

The countries we transfer personal information to include Australia, the United Kingdom, India, the United States, Canada, Singapore, Taiwan and Israel.

If you have any questions about the standard contractual clauses, or would like to get a copy of them, you can contact us using our privacy form or the contact information provided in the section below.