Your US State Privacy Rights

Last Modified: 06/28/2024

This page contains additional information relevant to residents of certain US states that have their own data privacy laws and regulations, and associated rights. This content should be read in conjunction with our Privacy Policy.

This notice to California residents is provided under California law. It provides our “Notice at Collection,” provides certain mandated disclosures about our treatment of California residents’ information, both online and offline, explains your privacy rights, and provides our “Notice of Financial Incentives.”

NOTICE AT COLLECTION

We may collect the following categories of personal information (as defined in the California Consumer Privacy Act (CCPA) and the California Customer Records statute), including sensitive personal information (as defined in the CCPA):

  • Identifiers, such as name, email address, username and password, postal address, telephone number, signature, government-issued identifier, license plate number, IP address, and other similar identifiers.
  • Characteristics of protected classifications and demographic information, such as gender, age, race, disability status, sexual orientation, gender identity, military/veteran status, marital status, national origin, and medical information.
  • Commercial information, including information about your interests and consuming history or tendencies, such as products or services considered; transaction information when you request information, contact Guest Services, or purchase, return, request or exchange a product or service, including payment card information or other financial information; information provided in response to surveys or other research conducted on our behalf; and information you provide in public forums.
  • Internet or other electronic network activity information, including information regarding your interactions with us online and information we obtain from third parties about use of our applications on third-party platforms or devices.
  • Geolocation data, including precise or approximate location information provided by a mobile device or other device or product interacting with or detected by our sites, applications, or physical properties, where we are permitted by law to process this information.
  • Audio, electronic, visual, or similar information, including telephone call recordings, other voice recordings, and still or video images captured by cameras or readers on or around our physical properties.
  • Inferences based on the above.

We collect this information so that we can best serve you, including to fulfill your requests and to share offers or information that we think you may be interested in. As further described in the “Use of Your Information by The Walt Disney Family of Companies” section in our Privacy Policy, we generally collect and use the above-listed categories of personal information to provide and manage our sites, applications, products, and services, and for other business or commercial purposes, such as advertising, marketing, and to improve our products and services.

Certain data collection on our sites and applications by third parties for purposes of interest-based advertising and social media tools may be a “sale” or “sharing” under California privacy law. As defined by California law, we “sold” or “shared” certain data elements within the following categories of personal information: identifiers, demographic information, commercial information, Internet or other electronic network activity information, approximate geolocation, and inferences drawn from the above.

If you would like to opt out of the sale or sharing of your personal information, you may click the “Do Not Sell or Share My Personal Information” link in our website footers or in our application settings. Please note that your opt-out choice is specific to the digital property and to the device and browser you are using. You may additionally choose to provide the information requested in this opt-out form, which may enable us to take action on your opt-out request more broadly than for a specific digital property.

We retain each category of personal information that we collect for as long as necessary to fulfill the purposes described in our Privacy Policy, including to satisfy legal or reporting requirements. What this means in practice will vary for different types of information, but the criteria assessed in the data retention analysis take into account ongoing business or legal needs for the information, for example in relation to tax, health and safety, and potential or actual disputes or investigations.

More information, including a description of your legal rights, can be found in the “California Privacy Rights” section below.

ADDITIONAL PRIVACY MANDATORY DISCLOSURES

We also make the following disclosures for purposes of compliance with California privacy law:

  • We collected the following categories of personal information in the last 12 months: identifiers, characteristics of protected classifications and demographic information, commercial information, Internet or other electronic network activity information, geolocation data, audio, electronic, visual or similar information, and inferences drawn from the above.
  • The sources of personal information from whom we collected are: directly from our guests, third-party sites or platforms that you link with your registration account, analytics tools, social networks, advertising networks, and third-party services that update or supplement information we hold about you.
  • The business or commercial purposes of collecting personal information are as summarized in our “Notice at Collection” section, and as described in more detail in our Privacy Policy under “Use of Your Information by The Walt Disney Family of Companies.”
  • We disclosed certain data elements within the following categories of personal information for a business purpose in the last 12 months: identifiers, characteristics of protected classifications and demographic information, commercial information, Internet or other electronic network activity information, geolocation data, audio, electronic, visual or similar information, and inferences drawn from the above. We disclosed each category to business partners, service providers, government entities, and other third parties as described in the “Sharing Your Personal Information with Other Entities” section of the Privacy Policy.
  • As defined by applicable law, we “sold” or “shared” certain data elements within the following categories of personal information in the last 12 months: identifiers, demographic information, commercial information, Internet or other electronic network activity information, approximate geolocation, and inferences drawn from the above. We “sold” or “shared” each category to or with entities who provide advertising, marketing, or audience measurement; other online third-party branded tools or functionality (such as maps or video players); and social networks.
  • The business or commercial purposes of “selling” or “sharing” personal information is to assist us with advertising, marketing, audience measurement, and other functionality on our digital properties.
  • We do not “sell” or “share” the personal information of known minors under 16 years of age.
  • We do not use or disclose sensitive personal information for purposes other than those specified in Section 7027(m) of the CCPA regulations.

YOUR CALIFORNIA PRIVACY RIGHTS

Right to Know
You have the right to request that we disclose to you the categories of personal information we have collected about you, as well as the sources of such personal information, the purposes, and the categories of third parties with whom such personal information is shared.

Right to Access
You have the right to request, up to two times each year, access to categories and specific pieces of personal information about you that we collect, use, disclose, sell, and share.

Right to Delete
You have the right to request that we delete personal information that we collect from you, subject to applicable legal exceptions.

Right to Correct
You have the right to request that we correct inaccurate personal information that we maintain about you, subject to applicable legal exceptions.

Right to Opt Out of Sale or Sharing of Personal Information
You have the right to “opt out” of the “sale” or “sharing” of your “personal information” to or with “third parties” (as those terms are defined by applicable law).

Removal of Content
If you are a California resident under the age of 18, and a registered user of any site where this policy is posted, California Business and Professions Code Section 22581 permits you to request and obtain removal of content or information you have publicly posted.

Shine the Light
California Civil Code Section 1798.83 permits you to request information regarding the disclosure of your personal information by certain members of The Walt Disney Family of Companies to third parties for the third parties’ direct marketing purposes. The Walt Disney Family of Companies does not share guests’ personal information with other member companies or others outside The Walt Disney Family of Companies for those parties’ direct marketing use unless a guest elects that we do so.

Right Not to Receive Discriminatory Treatment
You have the right not to receive discriminatory treatment for the exercise of your privacy rights. If you choose to exercise any of these rights, you will not receive different prices or quality of services unless permitted by applicable law, including if those differences are reasonably related to your information. For example, if you exercise your right to opt out of “sale” or “sharing” of your ”personal information,” the ads you view may not be tailored to your interests.

EXERCISING YOUR CALIFORNIA PRIVACY RIGHTS

Making Requests to Know, Access, Delete, or Correct Your Personal Information
To make a request to know or to make an access, deletion, or correction request, please visit usprivacy.disney.com. To submit a request by phone, you may call (877) 466-6669. Before completing your request, we may need to verify your identity. We will send you a link to verify your email address and may request additional documentation or information solely for the purpose of verifying your identity.

Making Requests to Opt Out of the Sale or Sharing of Personal Information
To submit a request to “opt out” of the “sale” or “sharing” of your “personal information,” you may click the “Do Not Sell or Share My Personal Information” link in our website footers or in our application settings, or you may choose to enable online, where available, a universal tool that automatically communicates your opt-out preferences, such as the Global Privacy Control (“GPC”). We will process the GPC signal as a request to opt out.

Instructions for Using an Authorized Agent to Make Requests
You may use an authorized agent to submit a request to know or an access, deletion, correction, or opt-out request on your behalf. An authorized agent must have your signed permission to submit a request on your behalf or provide proof that they have power of attorney in accordance with applicable law. Before completing requests from authorized agents, we may contact you directly to confirm you’ve given your permission and/or to verify your identity. Authorized agents may submit requests at usprivacy.disney.com/agents.

Making Requests for Removal of Content
California residents under the age of 18 may make requests to remove content by sending an email with a detailed description of the specific content or information to be removed to usprivacy@twdc.com. Please be aware that such a request does not ensure complete or comprehensive removal of the content or information you have posted and that there may be circumstances in which the law does not require or allow removal even if requested.

Making Shine the Light Request
To make a request for information under the Shine the Light Act, please send an email to usprivacy@twdc.com.

CALIFORNIA PRIVACY RIGHTS METRICS

Request to Know

Requests Received: 637
Requests Completed in Whole or in Part: 513
Requests Denied*: 124
Average Days to Complete: 4

Request to Delete

Requests Received: 5,838
Requests Completed in Whole or in Part: 5,115
Requests Denied*: 723
Average Days to Complete: 5

Request to Correct

Requests Received: 234
Requests Completed in Whole or in Part: 163
Requests Denied*: 71
Average Days to Complete: 4

Do Not Sell My Personal Information

Requests Received: 2,064,748
Requests Completed in Whole or in Part: 2,064,748
Requests Denied*: 0
Average Days to Complete: 1

This data reflects all requests received from individuals in the US as well as certain requests from individuals outside of the US between January 1 and December 31, 2023.

* Requests may be denied in whole or in part due to various factors including because a request was not verifiable, was not made by a consumer, was made multiple times, or called for information exempt from disclosure.

NOTICE OF FINANCIAL INCENTIVES

Members of The Walt Disney Family of Companies may offer various and different loyalty or promotional programs that provide certain benefits to our guests. For example, we may provide special offers or discounts to our guests as part of certain programs, promotional campaigns, subscriptions, or other offerings. We may also provide discounts when guests sign up to receive marketing messages or when guests claim a specific offer. In this Notice of Financial Incentives, we refer to these various programs and offerings as the “Programs.”

To learn more about the details of our Programs, including the material terms, please visit our Loyalty Programs/Financial Incentives page, where you can review the specific terms of each Program and learn how to opt out at any time in accordance with the applicable terms of each program. If you have any questions or require assistance, please contact us at usprivacy@twdc.com.

In general, we collect personal information to support and fulfill the Programs, which could include identifiers, demographic information, commercial information, Internet or other electronic network activity information, geolocation data, audio, electronic, visual or similar information, and inferences drawn from the above. For additional details on the types of information we may collect, please see “Types of Information We Collect” in our Privacy Policy. Because we collect personal information, the Programs may be considered to be “financial incentives” or “price or service differences” under California law.

To the extent the Programs are reasonably related to the value of guest personal information, the method for calculating this value would include the expenses related to our offer (such as the costs of providing discounts, free shipping, or other promotions, intellectual property or marketing costs, and other related expenses). The value of the guest personal information that we collect will vary depending on the engagement by each guest.

CONTACT INFORMATION

If you have a question about our privacy policies and information practices, please send an email to usprivacy@twdc.com.

Colorado law provides Colorado residents with the rights listed below.

Right to Access
You have the right to know and see what personal data we have collected about you in a usable format.

Right to Delete
You have the right to request that we delete the personal data we have collected about you, subject to applicable legal exceptions.

Right to Correct
You have the right to request that we correct inaccurate personal data.

Right to Opt Out of Targeted Advertising and Sale of Personal Data
You have the right to “opt out” of “targeted advertising” and the “sale” of your “personal data” (as defined under Colorado law).

EXERCISING YOUR COLORADO PRIVACY RIGHTS

Making Access, Deletion, and Correction Requests

To make an access, deletion, or correction request, please visit usprivacy.disney.com. To submit a request by phone, you may call (877) 466-6669. Before completing your request, we may need to verify your identity. We will send you a link to verify your email address and may request additional documentation or information solely for the purpose of verifying your identity.

Making Requests to Opt Out of Targeted Advertising or the Sale of Personal Data
To submit a request to “opt out” of “targeted advertising” or the “sale” of your “personal data,” you may click on the “Do Not Sell or Share My Personal Information” link in our website footers or in our application settings, or you may choose to enable online, where available, a universal tool that automatically communicates your opt-out preferences, such as the Global Privacy Control (“GPC”). We will process the GPC signal as a request to opt out.

Instructions for Using an Authorized Agent to Make Requests
You may use an authorized agent to submit an access, deletion, correction, or opt-out request on your behalf. An authorized agent must have your signed permission to submit a request on your behalf or provide proof that they have power of attorney in accordance with applicable law. Before completing requests from authorized agents, we may contact you directly to confirm you’ve given your permission and/or to verify your identity. Authorized agents may submit requests at usprivacy.disney.com/agents.

To appeal our decision regarding a request related to these rights, you may email us at usprivacy@twdc.com.

NOTICE ABOUT OUR LOYALTY PROGRAMS

Members of The Walt Disney Family of Companies may offer various and different loyalty or promotional programs that provide certain benefits to our guests. For example, we may provide special offers or discounts to our guests as part of certain programs, promotional campaigns, subscriptions, or other offerings. We may also provide discounts when guests sign up to receive marketing messages or when guests claim a specific offer. In this notice about our loyalty programs, we refer to these various programs and offerings as the “Programs.”

To learn more about the details of our Programs, including the material terms, please visit our Loyalty Programs/Financial Incentives page, where you can review the specific terms of each Program and learn how to opt out at any time in accordance with the applicable terms of each program. If you have any questions or require assistance, please contact us at usprivacy@twdc.com.

In general, we collect personal information to support and fulfill the Programs, which could include identifiers, demographic information, commercial information, Internet or other electronic network activity information, geolocation data, audio, electronic, visual or similar information, and inferences drawn from the above. For additional details on the types of information we may collect, please see “Types of Information We Collect” in our Privacy Policy. The Programs may be considered to be “bona fide loyalty programs” under Colorado law. As personal information is necessary to fulfill the Program benefits, if you decide to exercise your deletion rights, you will not be able to participate in the Programs.

To the extent the Programs are reasonably related to the value of guest personal information, the method for calculating this value would include the expenses related to our offer (such as the costs of providing discounts, free shipping, or other promotions, intellectual property or marketing costs, and other related expenses).  The value of the guest personal information that we collect will vary depending on the engagement by each guest.

CONTACT INFORMATION

If you have a question about our privacy policies, please send an email to usprivacy@twdc.com.

Connecticut law provides Connecticut residents with the rights listed below.

Right to Access
You have the right to know and see what personal data we have collected about you in a usable format.

Right to Delete
You have the right to request that we delete the personal data we have collected about you, subject to applicable legal exceptions.

Right to Correct
You have the right to request that we correct inaccurate personal data.

Right to Opt Out of Targeted Advertising and Sale of Personal Data
You have the right to “opt out” of “targeted advertising” and the “sale” of your “personal data” (as defined under Connecticut law).

EXERCISING YOUR CONNECTICUT PRIVACY RIGHTS

Making Access, Deletion, and Correction Requests
To make an access, deletion, or correction request, please visit usprivacy.disney.com. To submit a request by phone, you may call (877) 466-6669. Before completing your request, we may need to verify your identity. We will send you a link to verify your email address and may request additional documentation or information solely for the purpose of verifying your identity.

Making Requests to Opt Out of Targeted Advertising or the Sale of Personal Data
To submit a request to “opt out” of “targeted advertising” or the “sale” of your “personal data,” you may click on the “Do Not Sell or Share My Personal Information” link in our website footers or in our application settings, or you may choose to enable online, where available, a universal tool that automatically communicates your opt-out preferences, such as the Global Privacy Control (“GPC”). We will process the GPC signal as a request to opt out.

Instructions for Using an Authorized Agent to Make Requests
You may use an authorized agent to submit a request to opt out of targeted advertising or the sale of personal data. Authorized agents may submit such requests at usprivacy.disney.com/agents. Authorized agents can make a request on your behalf if we are provided with verification of your identity and confirmation that you provided the agent authority to act on your behalf.

To appeal our decision regarding a request related to these rights, you may email us at usprivacy@twdc.com.

Utah law provides Utah residents with the rights listed below.

Right to Access
You have the right to know and see what personal data we have collected about you in a usable format.

Right to Delete
You have the right to request that we delete the personal data we have collected about you, subject to applicable legal exceptions.

Right to Opt Out of Targeted Advertising
You have the right to “opt out” of “targeted advertising” (as defined under Utah law). We do not “sell” personal data as defined under Utah law.

EXERCISING YOUR UTAH PRIVACY RIGHTS

Making Access and Deletion Requests
To make an access or deletion request, please visit usprivacy.disney.com. To submit a request by phone, you may call (877) 466-6669. Before completing your request, we may need to verify your identity. We will send you a link to verify your email address and may request additional documentation or information solely for the purpose of verifying your identity.

Making Requests to Opt Out of Targeted Advertising
To submit a request to “opt out” of “targeted advertising” you may click on the “Do Not Sell or Share My Personal Information” link in our website footers or in our application settings, or you may choose to enable online, where available, a universal tool that automatically communicates your opt-out preferences, such as the Global Privacy Control (“GPC”). We will process the GPC signal as a request to opt out.

Virginia law provides Virginia residents with the rights listed below.

Right to Access
You have the right to know and see what personal data we have collected about you in a usable format.

Right to Delete
You have the right to request that we delete the personal data we have collected about you, subject to applicable legal exceptions.

Right to Correct
You have the right to request that we correct inaccurate personal data.

Right to Opt Out of Targeted Advertising
You have the right to “opt out” of “targeted advertising” (as defined under Virginia law). We do not “sell” personal data as defined under Virginia law.

EXERCISING YOUR VIRGINIA PRIVACY RIGHTS

Making Access, Deletion, and Correction Requests
To make an access, deletion, or correction request, please visit usprivacy.disney.com. To submit a request by phone, you may call (877) 466-6669. Before completing your request, we may need to verify your identity. We will send you a link to verify your email address and may request additional documentation or information solely for the purpose of verifying your identity.

Making Requests to Opt Out of Targeted Advertising
To submit a request to “opt out” of “targeted advertising” you may click on the link “Do Not Sell or Share My Personal Information” on the footer of our websites or you may choose to enable online, where available, a universal tool that automatically communicates your opt-out preferences, such as the Global Privacy Control (“GPC”). We will process the GPC signal as a request to opt out.

To appeal our decision regarding a request related to these rights, you may email us at usprivacy@twdc.com.

Back to Top back-to-top