Yahoo Iowa Privacy Rights

Iowa residents have certain privacy rights under the Iowa Act Relating to Consumer Data Protection (IARCDP). This notice provides a general overview of the privacy rights under the IARCDP. Further, it applies generally to all of Yahoo’s products and services. For specific information about your personal data or how your personal data is processed by a particular Yahoo product or service you may interact with, please log into your privacy controls.

The IARCDP defines certain terms in a particular manner that may differ from how those terms are used in everyday language. When these terms are used in this notice, they are used based on the definition set forth in the IARCDP. These terms are: “personal data”, “process”, “consumer”, “processor”, “controller”, “third party”, “sale of personal data”, and “targeted advertising”. Please note that Yahoo uses the terms “personal data” and “personal information” interchangeably throughout our policies.

For purposes of this notice, Yahoo may be referred to as “us”, “our” or “we” and Yahoo’s consumer customers may be referred to as “you” or “your”.

Summary of IARCDP Privacy Rights

The IARCDP provides Iowa consumers with the following privacy rights. These rights are explained in further detail in the sections below.

You may exercise these rights by logging into your privacy controls.

Note: To exercise the above rights (other than the right to opt out), you must first sign in to your account. This is how we authenticate your request to correctly associate it with your data.

Right to Confirm, Access, and Obtain a Copy of Your Personal Data

You have the right to confirm, access, and obtain a copy of your personal data that Yahoo has about you. To access and obtain a copy of your personal data, log into your privacy controls and click on the download your data link.

Right to Delete

You may request that Yahoo delete personal data provided by you by logging into your privacy controls.

If you have more than one registered account with Yahoo (for example, a Yahoo and an AOL account or multiple Yahoo accounts), you will need to exercise your deletion right within each registered account for which you wish to delete your personal data.

If you do not have a registered account with Yahoo, please refer to this help article about clearing your cookies

Limitations

Nothing in the IARCDP shall be construed to restrict Yahoo’s ability to do the following: (a) Comply with federal, state or local laws, rules, or regulations; (b) comply with a civil, criminal, or regulatory inquiry, investigation, subpoena, or summons by federal, state, local, or other governmental authorities; (c) cooperate with law enforcement agencies concerning conduct or activity that Yahoo reasonably and in good faith believes may violate federal, state, or local laws, rules, or regulations; (d) provide a product or service specifically requested by a consumer or parent or guardian of a child; (e) perform a contract to which the consumer or parent or guardian of a child is a party, including fulfilling the terms of a written warranty; (f) take steps at the request of the consumer or parent or guardian of a child prior to entering a contract; (g) take immediate steps to protect an interest that is essential for the life or physical safety of the consumer or of another natural person, and where the processing cannot be manifestly based on another legal basis; (h) prevent, detect, protect against, or respond to security incidents, identity theft, fraud, harassment, malicious or deceptive activities, or any illegal activity, preserve the integrity or security of systems or investigate, report, or prosecute those responsible for any such action; (i) engage in public or peer-reviewed scientific or statistical research in the public interest that adheres to all other applicable ethics and privacy laws and is approved, monitored, and governed by an institutional review board, or similar independent oversight entities that determine the following: (A) If the deletion of the information is likely to provide substantial benefits that do not exclusively accrue to Yahoo; (B) The expected benefits of the research outweigh the privacy risks; and (C) If Yahoo has implemented reasonable safeguards to mitigate privacy risks associated with research, including any risks associated with re-identification; (j) assist another controller, processor, or third party with any of the obligations under this section.

Right to Opt Out of Selling

Yahoo does not sell or share information that, on its own, identifies you, like your name or email address. As outlined in our Privacy Policy, we do share other identifiers with partners for product, service, and advertising reasons. Sharing this data allows us to provide the content and services you enjoy, helps our partners deliver better content and advertising, and keeps our services supported by our advertisers.

You have the right to opt out of the processing of personal data by Yahoo for purposes of the sale of your personal data. You may direct Yahoo not to sell your personal data via the sale of personal data here. Yahoo also may process your personal data for purposes of targeted advertising. If you would like to opt out of targeted advertising, you may do so via your privacy controls. Note, if you opt out of targeted advertising on Yahoo, under the IARCDP, Yahoo may still show you ads, including personalized advertisements based on your interactions with the family of Yahoo Products.

If you choose to opt out of the sale of your personal data, such action may impact how you are able to view and/or receive some services or features that Yahoo offers. This is because some of the services or features that Yahoo offers require disclosure of your personal data to third parties, and such disclosure may be deemed selling under the IARCDP.

Right to Know Certain Information About the Personal Data We Process and Share

Yahoo sells or shares different categories of personal data to third parties depending on the product or service. You may locate the specific categories of personal data sold or shared for each product or service you use by logging into your privacy controls.

Categories of Personal Data Processed: Yahoo may process different categories of personal data depending on the product or service a consumer uses. You may locate the specific categories of personal data for each product or service by logging into your privacy controls.

Below is the list of categories of personal data that Yahoo may process across all of its products or services: identifiers (e.g., technical, financial, government identifiers); contact information; physical characteristics or description information; internet or electronic network activity information; geolocation information; commercial information; biometric information; inferences, including advertising and content related inferences; medical information or health insurance information; professional or employment related information; education information; legally protected classifications; and other information that identifies you or can be reasonably linked to you.

Purposes for processing personal data: Yahoo may process your personal data for the following purposes: auditing; security and fraud prevention; debugging; short-term transient use; performing services on behalf of Yahoo; research; quality assurance service improvements; delivering content and ads; associating user activity; providing Yahoo services; providing contextual advertising; providing targeted advertising; providing personalized content; fulfilling user requests; for user communication; providing location-based services; providing promotions; creating analytics and reports for third parties; and payment processing.

Categories of Personal Data Sold or Shared: Across all of our products or services, Yahoo sells or shares the following categories of personal data with third parties: identifiers (e.g., technical, financial, government identifiers); contact information; physical characteristics or description information; internet or electronic network activity information; geolocation information; commercial information; audio, electronic, visual, thermal, olfactory or similar information; inferences, including advertising and content related inferences; professional or employment related information.

Purposes for selling or sharing personal data: Yahoo may sell or share personal data with third parties for the following purposes: deliver content and ads; associate user activity; provide Yahoo services; provide contextual advertising; provide targeted advertising; provide personalized content; fulfill user requests; user communication; provide promotions; create analytics and reports for third parties; process payments;and security and fraud prevention.

Categories of Third Parties with which Personal Data is Sold or Shared: Yahoo may sell or share personal data of our consumers with the following categories of third parties: analytics providers; social button providers; application providers; advertising partners; content providers; game developers; payment providers; search partners; voice and digital assistant providers; and security partners.

Verification Process and Exercising Your Rights

You may exercise your rights under the IARCDP by logging into your privacy controls. By logging into your privacy controls, we will verify your identity based on your login and process your request within your privacy controls. If you choose to email us at the email address below, we will need to verify your identity before we can fulfill your request. The verification process may vary depending on the nature of the request. Please refer to the Authorized Agent section in this notice for the process to submit a request via an authorized agent.

Right to Appeal

Under the IARCDP, you have the right to appeal a decision by Yahoo to decline to act on your request. If Yahoo declines to act on your request, we will inform you of this decision no later than 45 days after receipt of your request, and include the reason for declining to act, along with instructions on how to appeal the decision. If you choose to appeal, you must submit your appeal within a reasonable timeframe following receipt of the decision from Yahoo to decline to act on your request. We will respond to you in writing within 60 days of receipt of your appeal with a written explanation on any action taken or not taken, including a written explanation of the reasons for the decision. If we deny your appeal, we will also include information on how you may contact the Iowa Attorney General to submit a complaint.

To submit an appeal, please complete this form.

Contact us

If you have questions you can complete this form or you may contact us via email at Iowa_Privacy@Yahooinc.com.