Yahoo Montana Privacy Rights

Montana residents have certain privacy rights under the Montana Consumer Data Privacy Act (CDPA). This notice provides a general overview of the privacy rights under the CDPA. Further, it applies generally to all of Yahoo’s products and services. For specific information about your personal data or how your personal data is processed by a particular Yahoo product or service you may interact with, please log into your Yahoo privacy controls, accessible from the Yahoo Privacy Policy.

The CDPA defines certain terms in a particular manner that may differ from how those terms are used in everyday language. When these terms are used in this notice, they are used based on the definition set forth in the CDPA. These terms are: “personal data”, “process”, “consumer”, “processor”, “controller”, “third party”, “sale of personal data”, and “targeted advertising”. Please note that Yahoo uses the terms “personal data” and “personal information” interchangeably throughout our policies.

For purposes of this notice, Yahoo may be referred to as “us”, “our” or “we” and Yahoo’s consumer customers may be referred to as “you” or “your”.

Summary of CDPA Privacy Rights

The CDPA provides Montana consumers with the following privacy rights. These rights are explained in further detail in the sections below.

You may exercise these rights by logging into your Yahoo privacy controls.

Note: To exercise the above rights (other than the right to opt out), you must first sign in to your account. This is how we authenticate your request to correctly associate it with your data.

Right to Confirm, Access, and Obtain a Copy of Your Personal Data

Under the CDPA, Montana consumers have the right to confirm the processing of and access the following information:

• The categories of personal data processed by Yahoo;
• The purpose for processing personal data;
• The categories of personal data that Yahoo shares with third parties, if any; and
• The categories of third parties, if any, with which Yahoo shares personal data.

You may access and obtain a copy of this data by logging into your Yahoo privacy controls. If you do not have a Yahoo login, Yahoo is unable to confirm the ownership of personal data and will not be able to provide you with access. You can see the types of data Yahoo generally collects via our Privacy Policy.

Categories of Personal Data Processed: Yahoo may process different categories of personal data depending on the product or service a consumer uses. You may locate the specific categories of personal data for each product or service by logging into your Yahoo privacy controls.

Below is the list of categories of personal data that Yahoo may process across all of its products or services: identifiers (e.g., technical, financial, government identifiers); contact information; physical characteristics or description information; internet or electronic network activity information; geolocation information; commercial information; biometric information; inferences, including advertising and content related inferences; medical information or health insurance information; professional or employment related information; education information; legally protected classifications; and other information that identifies you or can be reasonably linked to you.

Purposes for processing personal data: Yahoo may process your personal data for the following purposes: auditing; security and fraud prevention; debugging; short-term transient use; performing services on behalf of Yahoo; research; quality assurance service improvements; delivering content and ads; associating user activity; providing Yahoo services; providing contextual advertising; providing targeted advertising; providing personalized content; fulfilling user requests; for user communication; providing location-based services; providing promotions; creating analytics and reports for third parties; and payment processing.

Categories of Personal Data Sold or Shared: Across all of our products or services, Yahoo sells or shares the following categories of personal data with third parties: identifiers (e.g., technical, financial, government identifiers); contact information; physical characteristics or description information; internet or electronic network activity information; geolocation information; commercial information; audio, electronic, visual, thermal, olfactory or similar information; inferences, including advertising and content related inferences; professional or employment related information.

Purposes for selling or sharing personal data: Yahoo may sell or share personal data with third parties for the following purposes: delivering content and ads; associating user activity; provide Yahoo services; provide contextual advertising; provide targeted advertising; provide personalized content; fulfill user requests; user communication; provide promotions; create analytics and reports for third parties; processing payments; and security and fraud prevention.

Categories of Third Parties with which Personal Data is Sold or Shared: Yahoo may sell or share personal data of our consumers with the following categories of third parties: analytics providers; social button providers; application providers; advertising partners; content providers; game developers; payment providers; search partners; voice and digital assistant providers; and security partners.

Right to Correct Inaccuracies in Your Personal Data

You have the right to correct inaccuracies in your personal data, considering the nature of the personal data and the purposes of the processing. You may exercise this right by logging into your Yahoo account and updating your personal data. Please refer to this help article about updating your account information.

Right to Delete

You may request that Yahoo delete personal data about you by logging into your Yahoo privacy controls.

If you have more than one registered account with Yahoo (for example, a Yahoo and an AOL account), you will need to exercise your deletion right within each registered account for which you wish to delete your personal data.

If you do not have a registered account with Yahoo, please refer to this help article about clearing your cookies.

If you exercise your right to delete your personal data, the CDPA allows Yahoo to retain certain personal data for limited purposes. As a result, Yahoo may retain your personal data in accordance with our records retention program to: (a) Comply with federal, state, or municipal ordinances or regulations; (b) comply with a civil, criminal, or regulatory inquiry, investigation, subpoena, or summons by federal, state, municipal, or other government authorities; (c) cooperate with law enforcement agencies concerning conduct or activity that Yahoo reasonably and in good faith believes may violate federal, state, or municipal ordinances or regulations; (d) investigate, establish, exercise, prepare for, or defend legal claims; (e) provide a product or service specifically requested by a consumer; (f) perform under a contract to which a consumer is a party, including fulfilling the terms of a written warranty; (g) take steps at the request of a consumer prior to entering a contract; (h) take immediate steps to protect an interest that is essential for the life or physical safety of the consumer or another individual and when the processing cannot be manifestly based on another legal basis; (i) prevent, detect, protect against, or respond to security incidents, identity theft, fraud, harassment, malicious or deceptive activities, or any illegal activity, preserve the integrity or security of systems, or investigate, report, or prosecute those responsible for any of these actions; (j) engage in public or peer-reviewed scientific or statistical research in the public interest that adheres to all other applicable ethics and privacy laws and is approved, monitored, and governed by an institutional review board that determines or similar independent oversight entities that determine: (A) whether the deletion of the information is likely to provide substantial benefits that do not exclusively accrue to Yahoo; (B) the expected benefits of the research outweigh the privacy risks; and (C) whether Yahoo has implemented reasonable safeguards to mitigate privacy risks associated with research, including any risks associated with reidentification; (k) assist another controller, processor, or third party with any of the obligations set forth in the CDPA.

Right to Opt Out of Selling or Targeted Advertising

Yahoo does not sell or share information that, on its own, identifies you, like your name or email address. As outlined in our Privacy Policy, we do share other identifiers with partners for product, service, and advertising reasons. Sharing this data allows us to provide the content and services you enjoy, helps our partners deliver better content and advertising, and keeps our services supported by our advertisers.

You have the right to direct Yahoo not to sell your personal data and not to process your personal data for targeted advertising. You may direct Yahoo not to sell your personal data and not to process your personal data for targeted advertising via the sale of personal data and targeted advertising control in your Yahoo privacy controls. Note, if you opt out of targeted advertising on Yahoo, under the CDPA, Yahoo may still show you ads, including personalized advertisements based on your interactions with the family of Yahoo Products.

If you choose to opt out of the sale of your personal data, such action may impact how you are able to view and/or receive some services that Yahoo offers. This is because some of the services that Yahoo offers require disclosure of your personal data to third parties, and such disclosure may be deemed selling under the CDPA.

Yahoo sells or shares different categories of personal data to third parties depending on the product or service. You may locate the specific categories of personal data sold or shared for each product or service you use by logging into your Yahoo privacy controls.

Use of Precise Geolocation Information in Montana

The CDPA requires consumer consent for the processing of precise location data for certain commercial uses. Yahoo honors this legal requirement by: (i) truncating latitude and longitude coordinate information from geolocation data that falls within the state of Montana (this converts the data into imprecise location data); (ii) obtaining the consumer’s consent prior to processing; or (iii) requiring any third party from whom Yahoo receives precise location data to obtain consent prior to providing to Yahoo.

Authorized Agent

You may use an authorized agent to submit a request to opt-out of: (i) targeted advertising, (ii) sale of your personal data, or (iii) profiling in furtherance of solely automated decisions that produce legal or similarly significant effects concerning you.

Authorized Agent Request to Opt-Out of Sale or Targeted Advertising

Users with Registered Accounts

Yahoo will comply with an opt-out request received from your authorized agent provided that Yahoo is able to authenticate your identity and the authorized agent's authority to act on your behalf.

Users without Registered Accounts

Requests to opt out of sale or targeted advertising for non-registered users must come from the device on which the user wishes to opt out of sale. As a result, an authorized agent will need to submit the request to opt out of sale or targeted advertising from the applicable device. Due to the nature of Yahoo's services, we are only able to opt a non-registered user out of sale or targeted advertising if such user takes such action on the device on which the user wishes to opt out.

Yahoo does not profile in furtherance of solely automated decisions that produce legal or similarly significant effects concerning you.

Verification Process and Exercising Your Rights

You may exercise your rights by logging into your Yahoo privacy controls. By logging into your Yahoo privacy controls, we will verify your identity based on your login and process your request within your Yahoo privacy controls. If you choose to email us at the email address below, we will need to verify your identity before we can fulfill your request. The verification process may vary depending on the nature of the request. Please refer to the Authorized Agent section (below) for the process to submit a request via an authorized agent.

Right to Appeal

Under the CDPA, you have the right to appeal a decision by Yahoo to decline to act on your request. If you choose to appeal, you must submit your appeal within a reasonable timeframe following receipt of the decision from Yahoo to decline to act on your request. We will respond to you in writing within 60 days of receipt of your appeal with an explanation on any action taken or not taken and the reasoning for our decision. If we deny your appeal, we will also include information on how you may contact the Montana Attorney General to submit a complaint.

To submit an appeal, please complete this form.

Contact Us

If you have questions you can complete this form or you may contact us via email at Montana_Privacy@Yahooinc.com.