Yahoo Virginia Privacy Rights
Virginia Residents have certain Privacy Rights under Virginia's Consumer Data Protection Act of 2021, also known as the VCDPA. This notice provides a general overview of the privacy rights under the VCDPA. Further, it applies generally to all of our products and services. For specific information about your personal data or how your personal data is processed by a particular Yahoo product or service you may interact with, please sign into your privacy controls.
The VCDPA defines certain terms in a particular manner that may differ from how those terms are used in everyday language. When these terms are used in this notice, they are used based on the definition set forth in the VCDPA. These terms are "personal data", "consumer", "controller", "processor", "sensitive data", "targeted advertising", "third party", and "sale" or "sell". Please note that Yahoo uses the terms "personal data" and "personal information" interchangeably throughout our policies.
For purposes of this page, Yahoo may be referred to as "us", "our" or "we" and Yahoo's consumer customers may be referred to as "you" or "your".
Summary of VCDPA Privacy Rights
The VCDPA provides Virginia consumers with the following five privacy rights. These rights are explained in further detail in the sections below.
- The right to confirm whether or not a controller is processing the consumer's personal data and right to access such personal data.
- The right to correct inaccuracies in the consumer's personal data, taking into account the nature and purpose of processing of personal data.
- The right to delete personal data provided by or obtained about the consumer.
- The right to obtain a copy of personal data that the consumer previously provided to the controller.
- The right to opt out of processing of personal data for the following purposes:
- Targeted advertising
- The sale of personal data; or
- Profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer.
You may exercise these rights by signing into your privacy controls.
Note: To exercise the above rights (other than the right to opt out), you must first sign in to your account. This is how we authenticate your request to correctly associate it with your data.
Right to Confirm, Access, and Obtain a Copy of Your Personal Data
You have the right to confirm our processing of your personal data and access such personal data. You also have the right to obtain a copy of your personal data that you previously provided to Yahoo.
Right to Delete
You may request that Yahoo delete personal data we have collected about you by signing into your privacy controls.
If you have more than one registered account with Yahoo, you will need to exercise your deletion right within each registered account for which you wish to delete your personal data.
If you do not have a registered account with Yahoo, please refer to this help article about clearing your cookies.
Limitations
The VCDPA does not restrict Yahoo's ability to: comply with federal, state, or local laws, rules or regulations; comply with a legal inquiry, investigation, subpoena, or summons by federal, state, local, or other governmental authorities; reasonably and in good faith cooperate with law enforcement agencies; investigate, establish, exercise, prepare for, or defend legal claims; provide a product or service that you request, or perform a contract with you; protect the interests essential for your or another person's life or physical safety; prevent, detect, protect against, or respond to security incidents, fraud, harassment, or other malicious or illegal activities; engage in peer-reviewed scientific or statistical research in the public interest; conduct internal research to develop, improve, or repair products or services; or debug our products and services to identify and repair existing or intended functionality.
Right to Opt Out of Selling or Targeted Advertising
Yahoo does not sell or share data that, on its own, identifies you, like your name or email address. As outlined in our Privacy Policy, we do share other identifiers with partners for product, service and targeted advertising reasons. Sharing this data allows us to provide the content and services you enjoy, helps our partners deliver better content and advertising, and keeps our services supported by our advertisers.
You have the right to direct Yahoo not to sell your personal data and to not use your personal data for targeted advertising. You may direct Yahoo to opt you out of selling your personal data and using your personal data for targeted advertising above or via the sale of personal data and targeted advertising control in your privacy controls. Note, if you opt out of targeted advertising on Yahoo, under the VCDPA Yahoo may still show you ads, including personalized advertisements based on your interactions with the family of Yahoo products.
If you choose to opt out of the sale of your personal data, such action may impact how you are able to view and/or receive some services that Yahoo offers. This is because some of the services that Yahoo offers require disclosure of your personal data to third parties and such disclosure may be deemed selling under the VCDPA.
Yahoo sells or shares different categories of personal information to third parties depending on the product or service. You may locate the specific categories of personal data sold or shared in the last 12 months for each product or service you use by signing into your privacy controls.
Yahoo does not process personal data for the purposes of profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer.
Across all of our products and services, Yahoo sells or shares the following categories of personal data to third parties: identifiers (e.g., technical, financial, government identifiers); contact information; physical characteristics or description information; internet or electronic network activity information; geolocation information; commercial information; audio, electronic, visual, thermal, olfactory or similar information; inferences, including advertising and content related inferences; professional or employment related information.
Right to Confirm and Access Certain Information About the Personal Data We Process
Under the VCDPA, Virginia consumers have the right to confirm the processing of and access the following information:
Categories of personal data: Yahoo may collect, use, disclose, or otherwise sell or share different categories of personal data depending on the product or service a consumer uses. You may locate the specific categories of personal data for each product or service by signing into your privacy controls.
Below is the full list of categories of personal data that Yahoo may collect, use, disclose for a business purpose or otherwise sell or share: identifiers (e.g., technical, financial, government identifiers); contact information; physical characteristics or description information; internet or electronic network activity information; geolocation information; commercial information; audio, electronic, visual, thermal, olfactory or similar information; biometric information; inferences, including advertising and content related inferences; medical information or health insurance information; professional or employment related information; education information; legally protected classifications; and other information that identifies or can be reasonably associated or linked with you.
Purposes for processing personal data: Yahoo may process your personal data for the following purposes: auditing; security and fraud prevention; debugging; short-term transient use; performing services on behalf of Yahoo; research; quality assurance service improvements; delivering content and ads; associating user activity; providing Yahoo services; providing contextual advertising; providing targeted advertising; providing personalized content; fulfilling user requests; for user communication; providing location-based services; providing promotions; creating analytics and reports for third parties; and payment processing.
Categories of third parties: Yahoo may sell or share personal data of our consumers with the following categories of third parties: analytics providers; social button providers; application providers; advertising partners; content providers; game developers; payment providers; search partners; voice and digital assistant providers; and security partners.
Right to Correct
Under the VCDPA, Virginia consumers have the right to correct inaccuracies in their personal data. You may correct certain data by following instructions in this help article.
Use of Precise Geolocation Information in Virginia
The VCDPA requires consumer consent for the collection of precise location data for certain commercial uses. Yahoo honors this legal requirement by truncating latitude and longitude coordinate information from geolocation data that falls within the state of Virginia. This converts the data into imprecise location data. Virginia residents do not need to manage or effectuate their Precise Location Information opt-out in your privacy controls to receive this privacy protection.
Verification Process for Access and Deletion
You may access and/or delete your personal data by signing into your privacy controls. We will verify your identity based on your login and process your request within your privacy controls. If you choose to email us at the email address below, we will need to verify your identity before we can fulfill your request. The verification process may vary depending on the nature of the request. If Yahoo denies your request, you may appeal by contacting us via email at virginia_privacy@yahooinc.com.
Contact Us
If you have questions, you can complete this form, or you may contact us via email at virginia_privacy@yahooinc.com.
Last updated: December 2025