Privacy Policy

---

This privacy policy describes the processing of information provided or collected on the sites and applications where this privacy policy is posted, whether on our digital properties or on applications we make available on third-party sites or platforms. It also describes the processing of guest information provided to us or collected by us offline in our physical properties, such as in our stores, theme parks, resorts, and cruise ships, or through our guest call centers. We follow this privacy policy in accordance with applicable law in the places where we operate. In some cases, we may provide additional data privacy notices specific to certain products, practices, or regions. Those terms are to be read in conjunction with this policy.

Please keep in mind that when you provide information to us on a third-party site or platform (for example, via our applications), the information you provide may be separately collected by the third-party site or platform. The information we collect is covered by this privacy policy, and the information the third-party site or platform collects is subject to the third-party site or platform’s privacy practices. Privacy choices you have made on the third-party site or platform will not apply to our use of the information we have collected directly through our applications. Please also keep in mind that our sites and applications may contain links to other sites not owned or controlled by us and we are not responsible for the privacy practices of those sites. We encourage you to be aware when you leave our sites or applications and to read the privacy policies of other sites that may collect your personal information.

This notice to California residents is provided under California law. It provides our “Notice at Collection,” provides certain mandated disclosures about our treatment of California residents’ information, both online and offline, explains your privacy rights, and provides our “Notice of Financial Incentives.”

We may collect the following categories of personal information (as defined in the California Consumer Privacy Act (CCPA) and the California Customer Records statute), including sensitive personal information (as defined in the CCPA):

• Identifiers, such as name, email address, username and password, postal address, telephone number, signature, government-issued identifier, license plate number, IP address, and other similar identifiers.
• Characteristics of protected classifications and demographic information, such as gender, age, race, disability status, sexual orientation, gender identity, military/veteran status, marital status, national origin, and medical information.
• Commercial information, including information about your interests and consuming history or tendencies, such as products or services considered; transaction information when you request information, contact Guest Services, or purchase, return, request or exchange a product or service, including payment card information or other financial information; information provided in response to surveys or other research conducted on our behalf; and information you provide in public forums.
• Internet or other electronic network activity information, including information regarding your interactions with us online and information we obtain from third parties about use of our applications on third-party platforms or devices.
• Geolocation data, including precise or approximate location information provided by a mobile device or other device or product interacting with or detected by our sites, applications, or physical properties, where we are permitted by law to process this information.
• Audio, electronic, visual, or similar information, including telephone call recordings, other voice recordings, and still or video images captured by cameras or readers on or around our physical properties.
• Inferences based on the above.

Colorado law provides Colorado residents with the rights listed below.

Right to Access
You have the right to know and see what personal data we have collected about you in a usable format.

Right to Delete
You have the right to request that we delete the personal data we have collected about you, subject to applicable legal exceptions.

Right to Correct
You have the right to request that we correct inaccurate personal data.

Right to Opt Out of Targeted Advertising and Sale of Personal Data
You have the right to “opt out” of “targeted advertising” and the “sale” of your “personal data” (as defined under Colorado law).

Making Access, Deletion, and Correction Requests

To submit a request by phone, you may call (877) 466-6669. Before completing your request, we may need to verify your identity. We will send you a link to verify your email address and may request additional documentation or information solely for the purpose of verifying your identity.

Making Requests to Opt Out of Targeted Advertising or the Sale of Personal Data
To submit a request to “opt out” of “targeted advertising” or the “sale” of your “personal data,” you may click on the “Do Not Sell or Share My Personal Information” link in our website footers or in our application settings, or you may choose to enable online, where available, a universal tool that automatically communicates your opt-out preferences, such as the Global Privacy Control (“GPC”). We will process the GPC signal as a request to opt out.

Instructions for Using an Authorized Agent to Make Requests
You may use an authorized agent to submit an access, deletion, correction, or opt-out request on your behalf. An authorized agent must have your signed permission to submit a request on your behalf or provide proof that they have power of attorney in accordance with applicable law. Before completing requests from authorized agents, we may contact you directly to confirm you’ve given your permission and/or to verify your identity. Authorized agents may submit requests at usprivacy.disney.com/agents.

To appeal our decision regarding a request related to these rights, you may email us at usprivacy@twdc.com.

Members of The Walt Disney Family of Companies may offer various and different loyalty or promotional programs that provide certain benefits to our guests. For example, we may provide special offers or discounts to our guests as part of certain programs, promotional campaigns, subscriptions, or other offerings. We may also provide discounts when guests sign up to receive marketing messages or when guests claim a specific offer. In this notice about our loyalty programs, we refer to these various programs and offerings as the “Programs.”

To learn more about the details of our Programs, including the material terms, please visit our Loyalty Programs/Financial Incentives page, where you can review the specific terms of each Program and learn how to opt out at any time in accordance with the applicable terms of each program. If you have any questions or require assistance, please contact us at usprivacy@twdc.com.

In general, we collect personal information to support and fulfill the Programs, which could include identifiers, demographic information, commercial information, Internet or other electronic network activity information, geolocation data, audio, electronic, visual or similar information, and inferences drawn from the above. For additional details on the types of information we may collect, please see “Types of Information We Collect” in our Privacy Policy. The Programs may be considered to be “bona fide loyalty programs” under Colorado law. As personal information is necessary to fulfill the Program benefits, if you decide to exercise your deletion rights, you will not be able to participate in the Programs.

To the extent the Programs are reasonably related to the value of guest personal information, the method for calculating this value would include the expenses related to our offer (such as the costs of providing discounts, free shipping, or other promotions, intellectual property or marketing costs, and other related expenses).  The value of the guest personal information that we collect will vary depending on the engagement by each guest.