Yahoo Connecticut Privacy Rights

Connecticut residents have certain privacy rights under the Connecticut Data Privacy Act (CTDPA). This notice provides a general overview of the privacy rights under the CTDPA. Further, it applies generally to all of Yahoo's products and services. For specific information about your personal data or how your personal data is processed by a particular Yahoo product or service you may interact with, please log into your privacy controls.

The CTDPA defines certain terms in a particular manner that may differ from how those terms are used in everyday language. When these terms are used in this notice, they are used based on the definitions set forth in the CTDPA. These terms are: "personal data", "process", "consumer", "processor", "controller", "third party", "sale" or "sell", and "targeted advertising". Please note that Yahoo uses the terms "personal data" and "personal information" interchangeably throughout our policies.

For purposes of this notice, Yahoo may be referred to as "us", "our" or "we" and Yahoo's consumer customers may be referred to as "you".

Summary of CTDPA Privacy Rights

The CTDPA provides Connecticut consumers with the following privacy rights:

Find out how to exercise these rights, and other information, below.

Note: To exercise the above rights (other than the right to opt out), you must first sign in to your account. This is how we authenticate your request to correctly associate it with your data.

Right to Confirm, Access, and Obtain a Copy of Your Personal Data

You have the right to confirm, access, and obtain a copy of your personal data that Yahoo has about you. To access and obtain a copy of your personal data, log into your privacy controls and click on the download your data link.

Right to Correct Inaccurate Personal Data

You have the right to correct inaccurate information that we maintain about you, taking into account the nature of the personal data and the purposes of the processing of your personal data. You may exercise this right by logging into your Yahoo account and updating your personal info. Please refer to this help article about updating your account info.

Right to Delete

You may request that Yahoo delete personal data we have collected about you by logging into your privacy controls.

If you have more than one registered account with Yahoo (for example, a Yahoo and an AOL account, or two Yahoo accounts), you will need to exercise your deletion right within each registered account for which you wish to delete your personal data.

If you do not have a registered account with Yahoo, please refer to this help article about clearing your cookies.

If you exercise your right to delete your data, the CTDPA allows Yahoo to retain certain personal data for limited purposes. As a result, Yahoo may retain your personal data in accordance with our records retention program to: comply with federal, state, or municipal ordinances or regulations; comply with a civil, criminal, or regulatory inquiry, investigation, subpoena, or summons by federal, state, municipal, or other governmental authorities; reasonably and in good faith cooperate with law enforcement agencies; investigate, establish, exercise, prepare for, or defend legal claims; provide a product or service that you specifically requested or perform a contract with you; protect the interests essential for your or another person's life or physical safety; prevent, detect, protect against, or respond to security incidents, identity theft, fraud, harassment, or other malicious, deceptive, or illegal activities, preserve the integrity or security of systems or investigate, report, or prosecute those responsible for any such action; engage in public or peer reviewed scientific or statistical research in the public interest; assist another controller, processor, or third party with any of Yahoo's obligations under the CTDPA; process personal data for reasons of public interest in the area of public health, community health, or population health; conduct internal research to develop, improve, or repair products, services, or technology; effectuate a product recall; identify and repair technical errors that impair existing or intended functionality; perform internal operations that are reasonably aligned with your expectations or reasonably anticipated based on your existing relationship with Yahoo; or engage in public or peer-reviewed scientific or statistical research in the public interest that adheres to all other applicable ethics and privacy laws and is approved, monitored and governed by an institutional review board.

Right to Opt Out of Selling or Targeted Advertising

Yahoo does not sell or share information that, on its own, identifies you, like your name or email address. As outlined in our Privacy Policy, we do share other identifiers with partners for product, service, and advertising reasons. Sharing this data allows us to provide the content and services you enjoy, helps our partners deliver better content and advertising, and keeps our services supported by our advertisers.

You have the right to direct Yahoo not to sell your personal data and not to use your personal data for targeted advertising. You may direct Yahoo not to sell your personal data and using your personal data for targeted advertising above or via the sale of personal data and targeted advertising control in your privacy controls. Note, if you opt out of Targeted Advertising on Yahoo, under the CTDPA Yahoo may still show you ads, including personalized advertisements based on your interactions with the family of Yahoo products.

If you choose to opt out of the sale of your personal data, such action may impact how you are able to view and/or receive some services that Yahoo offers. This is because some of the services that Yahoo offers require disclosure of your personal data to third parties, and such disclosure may be deemed selling under the CTDPA. Yahoo sells or shares different categories of personal data to third parties depending on the product or service. You may locate the specific categories of personal data sold or shared in the last 12 months for each product or service you use by logging into your privacy controls.

Across all of our products or services, Yahoo sells or shares the following categories of personal data to third parties: identifiers (e.g., technical, financial, government identifiers); contact information; physical characteristics or description information; internet or electronic network activity information; geolocation information; commercial information; audio, electronic, visual, thermal, olfactory or similar information; inferences, including advertising and content related inferences; professional or employment related information.

If you choose to opt out of selling, Yahoo may continue to sell your personal data under the following limited exceptions: the sale is reasonably necessary to enable a third party to provide a benefit to which you are entitled; the sale of personal data to third parties is clearly disclosed in the terms of the program; and the third party uses the personal data only for purposes of facilitating such a benefit to which you are entitled and does not retain or otherwise use or disclose the personal data for any other purpose.

Right to Know Certain Information About the Personal Data We Collect and Share

Under the CTDPA, Connecticut consumers have the right to know the following information:

Categories of personal data: Yahoo may process or otherwise sell or share different categories of personal data depending on the products and services you use. You can find the specific categories of personal data for each product or service by signing into your privacy controls, clicking on each product under "View your activity," and selecting the "Categories of Information" tab.

Purposes for processing personal data: Yahoo may process your personal data for the following purposes: auditing; security and fraud prevention; debugging; short-term transient use; research; quality assurance service improvements; delivering content and ads; associating user activity; providing Yahoo services; providing contextual advertising; providing targeted advertising; providing personalized content; fulfilling user requests; for user communication; providing location-based services; providing promotions; creating analytics and reports for third parties; and payment processing.

Categories of personal data shared with third parties: Below is the list of categories of personal data that Yahoo may process or otherwise sell or share with third parties: identifiers (e.g., technical, financial, government identifiers); contact information; physical characteristics or description information; internet or electronic network activity information; geolocation information; commercial information; audio, electronic, visual, thermal, olfactory or similar information; biometric information; inferences, including advertising and content related inferences; medical information or health insurance information; professional or employment related information; education information; legally protected classifications; and other information that identifies or can be reasonably associated or linked with you.

Yahoo may disclose personal data to processors for the following purposes: auditing; security; debugging; short-term transient use; performing services on behalf of Yahoo; research; and quality assurance and service improvements.

Yahoo may sell or share personal data with third parties for the following purposes: delivering content and ads; associating user activity; provide Yahoo services; provide contextual advertising; provide targeted advertising; provide personalized content; fulfill user requests; user communication; provide location-based services; provide promotions; create analytics and reports for third parties; processing payments; and security and fraud prevention.

Categories of Third Parties: Yahoo may sell or share personal data with the following categories of third parties: analytics providers; social button providers; application providers; advertising partners; content providers; game developers; payment providers; search partners; voice and digital assistant providers; and security partners.

Use of Precise Geolocation Information in Connecticut

The CTDPA requires consumer consent for the collection of precise location data for certain commercial uses. Yahoo honors this legal requirement by truncating latitude and longitude coordinate information from geolocation data that falls within the state of Connecticut. This converts the data into imprecise location data. Connecticut residents do not need to manage or effectuate their Precise Location Information opt-out in Yahoo's Privacy Dashboard to receive this privacy protection.

Authorized Agent

You may use an authorized agent to submit a request to opt-out of (i) targeted advertising, (ii) sale of your personal data, or (iii) profiling in furtherance of solely automated decisions that produce legal or similarly significant effects concerning you.

Authorized Agent Request to Opt-Out of Sale or Targeted Advertising

Users with Registered Accounts

Yahoo will comply with an opt-out request received from your authorized agent provided that Yahoo is able to authenticate your identity and the authorized agent's authority to act on your behalf.

Users without Registered Accounts

Requests to opt out of sale or targeted advertising for non-registered users must come from the device on which the user wishes to opt out of sale. As a result, an authorized agent will need to submit the request to opt out of sale or targeted advertising from the applicable device. Due to the nature of Yahoo's services, we are only able to opt a non-registered user out of sale or targeted advertising if such user takes such action on the device on which the user wishes to opt out.

Yahoo does not profile in furtherance of solely automated decisions that produce legal or similarly significant effects concerning you.

Verification Process for Exercising Your Rights

You may exercise your rights under the CTDPA by logging into your privacy controls. By logging into your Yahoo Privacy Dashboard, we will verify your identity based on your login and process your request within the Privacy Dashboard. If you choose to email us at the email address below, we will need to verify your identity before we can fulfill your request. The verification process may vary depending on the nature of the request. Please refer to the Authorized Agent section (above) for the process to submit a request via an authorized agent.

Right to Appeal

Under the CTDPA, you have the right to appeal a decision by Yahoo to decline to act on your request. If you choose to appeal, you must submit your appeal within a reasonable timeframe following receipt of the decision from Yahoo to decline to act on your request. We will respond to you in writing within 60 days of receipt of your appeal with an explanation on any action taken or not taken and the reasoning for our decision. If we deny your appeal, we will also include information on how you may contact the Connecticut Attorney General to submit a complaint.

To submit an appeal, please complete this form.

Contact Us

If you have questions you can complete this form or you may contact us via email at Connecticut_privacy@yahooinc.com.