This notice to California residents is provided under California law, including the California Consumer Privacy Act (“CCPA”), Cal. Civ. Code 1798.100, et seq. This notice supplements our Privacy Policy by explaining your privacy rights if you are a California resident, providing our “notice at collection,” and providing certain mandated disclosures about our treatment of California residents’ information, both online and offline.

Expand All

We collect these categories of personal information when you interact with us: identifiers/contact information, demographic information (such as gender and age), payment card information associated with you, commercial information, Internet or other electronic network activity information, geolocation data, audio, electronic, visual or similar information, and inferences drawn from the above.

We collect this information so that we can best serve you, including to fulfill your requests and to share offers that we think you may be interested in.  A more detailed description of these purposes is in our Privacy Policy under “Use of Your Information by The Walt Disney Family of Companies.”

California residents also have the right to “opt out” of the “sale” of their “personal information” to “third parties” (as those terms are defined in the CCPA and described below).

We also make the following disclosures for purposes of compliance with the CCPA:

  • We collected the following categories of personal information in the last 12 months: identifiers/contact information, demographic information (such as gender and age), payment card information associated with you, commercial information, Internet or other electronic network activity information, geolocation data, audio, electronic, visual or similar information, and inferences drawn from the above.
  • The sources of personal information from whom we collected are: directly from our guests, third-party sites or platforms that you link with your registration account, analytics tools, social networks, advertising networks, and third-party services that update or supplement information we hold about you.
  • The business or commercial purposes of collecting personal information are as summarized in our “notice at collection” section, and as described in more detail in our Privacy Policy under “Use of Your Information by The Walt Disney Family of Companies.”
  • We disclosed the following categories of personal information for a business purpose in the last 12 months: identifiers/contact information, demographic information (such as gender and age), payment card information associated with you, commercial information, Internet or other electronic network activity information, geolocation data, audio, electronic, visual or similar information, and inferences drawn from the above. We disclosed each category to third-party business partners and service providers, third-party sites or platforms such as social networking sites, and other third parties as described in the “Sharing Your Personal Information with Other Entities” section of the Privacy Policy.
  • As the term is defined by the CCPA, we “sold” the following categories of personal information in the last 12 months: identifiers/contact information, Internet or other electronic network activity information, and inferences drawn from the above. We “sold” each category to advertising networks, data analytics providers, and social networks.
  • The business or commercial purposes of “selling” personal information is for third-party companies to perform services on our behalf, such as marketing, advertising, and audience measurement.
  • We do not “sell” personal information of known minors under 16 years of age.

Right to Access
If you are a California resident, you have the right to request, up to two times each year, access to categories and specific pieces of personal information about you that we collect, use, disclose, and sell.

Right to Delete
If you are a California resident, you have the right to request that we delete personal information that we collect from you, subject to applicable legal exceptions.

Right to Opt Out of Sale of Personal Information
If you are a California resident, you have the right to “opt out” of the “sale” of your “personal information” to “third parties” (as those terms are defined in the CCPA).

Process to Make a CCPA Request

Making Access and Deletion Requests

To make an access or deletion request, please visit ccpa.disney.com. Before completing your request, we may need to verify your identity. We will send you a link to verify your email address and may request additional documentation or information solely for the purpose of verifying your identity.

Instructions for Authorized Agents Making Access and Deletion Requests

You may also use an authorized agent to submit an access or deletion request on your behalf.  Authorized agents may submit access and deletion requests at ccpa.disney.com/agents. An authorized agent must have your signed permission to submit a request on your behalf or provide proof that they have power of attorney in accordance with California probate law. Authorized agents that are business entities must be registered with the California Secretary of State to conduct business in California. Before completing requests from authorized agents, we may contact you directly to confirm you’ve given your permission and/or to verify your identity.

Making Requests to “Opt Out” of the “Sale” of “Personal Information”

To submit a request to opt out of the sale of your personal information, you may visit our “Do Not Sell My Personal Information” Rights page or send an email to [email protected] with the subject line “do not sell info.”  You may also use an authorized agent to submit a request to opt out on your behalf if you provide the authorized agent signed written permission to do so.  Authorized agents may submit requests to opt out by sending an email to [email protected] with the subject line “do not sell info.”

You have the right not to receive discriminatory treatment for the exercise of your privacy rights conferred by the CCPA.

Shine the Light Act
If you are a California resident, California Civil Code Section 1798.83 permits you to request information regarding the disclosure of your personal information by certain members of The Walt Disney Family of Companies to third parties for the third parties’ direct marketing purposes. We take great pride in the relationship of trust we have built with our guests over many years and we are dedicated to treating your personal information with care and respect. Pursuant to California Civil Code Section 1798.83(c)(2), members of The Walt Disney Family of Companies do not share guests’ personal information with other member companies or others outside The Walt Disney Family of Companies for those parties’ direct marketing use unless a guest elects that we do so.

  • To make such a request, please send an email to [email protected] or write us at:
    CA Privacy Rights
    Disney Interactive Media Group
    500 South Buena Vista Street
    Mail Code 7667
    Burbank, CA 91521-7667

Removal of Content
If you are a California resident under the age of 18, and a registered user of any site where this policy is posted, California Business and Professions Code Section 22581 permits you to request and obtain removal of content or information you have publicly posted.

  • To make such a request, please send an email with a detailed description of the specific content or information to [email protected]. Please be aware that such a request does not ensure complete or comprehensive removal of the content or information you have posted and that there may be circumstances in which the law does not require or allow removal even if requested.

If you have a question about our privacy policies, please send an email to [email protected] or write us at:

CA Privacy Rights
Disney Interactive Media Group
500 South Buena Vista Street
Mail Code 7667
Burbank, CA 91521-7667

SCOPE OF THIS POLICY

This privacy policy describes the processing of information provided or collected on the sites and applications where this privacy policy is posted, whether on our digital properties or on applications we make available on third-party sites or platforms. It also describes the processing of guest information provided to us or collected by us offline in our physical properties, such as in our stores, theme parks, resorts, and cruise ships, or through our guest call centers. We follow this privacy policy in accordance with applicable law in the places where we operate. In some cases, we may provide additional data privacy notices specific to certain products, practices, or regions. Those terms are to be read in conjunction with this policy.

Please keep in mind that when you provide information to us on a third-party site or platform (for example, via our applications), the information you provide may be separately collected by the third-party site or platform. The information we collect is covered by this privacy policy, and the information the third-party site or platform collects is subject to the third-party site or platform’s privacy practices. Privacy choices you have made on the third-party site or platform will not apply to our use of the information we have collected directly through our applications. Please also keep in mind that our sites and applications may contain links to other sites not owned or controlled by us and we are not responsible for the privacy practices of those sites. We encourage you to be aware when you leave our sites or applications and to read the privacy policies of other sites that may collect your personal information.

Expand All

Our company includes many different brands. When you visit, shop, or create an account with us, or use sites and applications, your information is controlled by a member of The Walt Disney Family of Companies. The list of relevant data controllers can be found here.

We collect two basic types of information – personal information (as defined in this policy) and anonymous information (as defined in this policy) – and we may use personal and anonymous information to create a third type of information, aggregate information (also defined in this policy).   In particular, we collect:

  • Registration information you provide when you create an account, enter a promotion, or link your profile on a third-party site or platform with your registration account, such as your first name and surname, country of residence, gender, date of birth, email address, username, and password;
  • Transaction information you provide when you request information, contact Guest Services, or purchase, return, request, or exchange a product or service from us, such as your postal address, telephone number, and payment information;
  • Information you provide in public forums on our sites and applications, such as your public posts;
  • Information sent either one-to-one or within a limited group using our message, chat, post, or similar functionality, where we are permitted by applicable law to collect this information;
  • Information we obtain from a third party, such as a site or platform provider, about use of our applications on third-party platforms or devices;
  • Location information, including location information provided by a mobile or other device interacting with one of our sites, applications, or physical properties (including through beacon technologies), or associated with your IP address or other online or device identifier, where we are permitted by law to process this information;
  • Activity information about your use, and the use by any person(s) you authorize through your account, of our sites and applications, such as the content you view or post, how often you use our services, and your preferences;
  • Usage, viewing, technical, and device data when you visit our sites, use our applications on third-party sites or platforms, or open emails we send, or connect with our wireless Internet access services and other similar technologies, including your browser or device type, unique device identifier, and IP address;
  • Still or video images captured by cameras or readers on or around our physical properties; and
  • Call recordings when you call our reservation centers or other guest services phone numbers.
  • We collect information you provide to us when you request or purchase products, services, or information from us, register with us (including when you link your profile on a third-party site or platform with your registration account), participate in public forums or other activities on our sites and applications, respond to guest surveys, visit our physical properties, call our reservation centers or other guest services phone numbers, or otherwise interact with us using one or more devices. You may provide information in a variety of ways, including by typing or using voice commands.
  • We collect information through a variety of technologies, such as cookies, Flash cookies, pixels, tags, software development kits, application program interfaces, and Web beacons, including when you visit our sites and applications or use our applications on third-party sites or platforms using one or more devices, whether or not you are logged in or registered. Please visit Online Tracking Technologies and Advertising for further information, including Do Not Track and how to disable cookies and otherwise make choices with respect to such data collection.
  • We collect information using analytics tools, including when you visit our sites and applications or use our applications on third-party sites or platforms.
  • We acquire information from other trusted sources to update or supplement the information you provided or we collected automatically, such as when we validate postal address information using third party services.  Applicable law may require that you authorize the third party to share your information with us before we can acquire it.

The member of The Walt Disney Family of Companies that is the data controller for your information is responsible for and may use your information for the purposes described in this policy. Other members of The Walt Disney Family of Companies may access your information where they perform services on behalf of the data controllers (as data processors) and, unless prohibited under applicable law, for use on their own behalf (as data controllers) for the purposes described in this policy. Consistent with applicable law and choices and controls that may be available to you, we may use information collected from you, or from devices associated with you, to:

  • Provide you with the experiences, products, and services you request, view, engage with, or purchase;
  • Communicate with you about your account or transactions with us and send you information or request feedback about features on our sites and applications or changes to our policies;
  • Send you offers and promotions for our products and services or third-party products and services;
  • Personalize content and experiences;
  • Provide you with targeted advertising based on your activity on our sites and applications and on third-party sites and applications;
  • Operate, understand, optimize, develop, or improve our sites, applications, products, services and operations, including by using guest survey research and analytics tools; and
  • Detect, investigate and prevent activities that may violate our policies, pose safety issues, or be fraudulent or illegal; and
  • Notify you of product recalls or safety issues.

We will not share your personal information with a third party outside The Walt Disney Family of Companies except in limited circumstances, including:

  • When you allow us to share your personal information with another company, by electing to share your personal information with carefully selected companies so that they can send you offers and promotions about their products and services;
  • When you direct us to share your personal information with another company to fulfill your request, such as:
    • When you book travel packages with us that include goods or services provided by third-party partners, such as airlines, ground transportation providers, third-party hotels, and travel insurance providers; and
    • When you book dining reservations through us for restaurants operated by third parties.
  • When you direct us to share your personal information with third-party sites or platforms, such as social networking sites.
  • Please note that once we share your personal information with another company in the above circumstances, the information received by the other company is controlled by that company and becomes subject to the other company’s privacy practices.
  • When we cooperate with financial institutions to offer co-branded products or services to you, such as our co-branded Disney Rewards Visa Card; however, we will do so only if permitted by applicable law and, in these cases, the financial institutions are prohibited from using your personal information for purposes other than those related to the co-branded products or services;
  • When you provide personal information to National Geographic Partners, a joint venture between The Walt Disney Company and the National Geographic Society, National Geographic Partners may share that information with the National Geographic Society, and once shared, the information will be controlled by and subject to the privacy policy of the National Geographic Society;
  • When companies perform services on our behalf, like package delivery, marketing and advertising, and  customer service; however, these companies are prohibited from using your personal information for purposes other than those requested by us or required by law; and
  • When we share your personal information with third parties in connection with the sale of a business, to enforce our Terms of Use or rules, to ensure the safety and security of our guests and third parties, to protect our rights and property and the rights and property of our guests and third parties, to comply with legal process, or in other cases if we believe in good faith that disclosure is required by law.

We provide you the ability to exercise certain controls and choices regarding our collection, use and sharing of your information. In accordance with applicable law, your controls and choices may include:

  • Correcting, updating, and deleting (Logout);
  • Choosing or changing your choices for subscriptions, newsletters, and alerts;
  • Choosing whether to receive from us offers and promotions for our products and services, or products and services that we think may be of interest to you;
  • Choosing whether we share your personal information with other companies so they can send you offers and promotions about their products and services;
  • Controlling targeted advertising from many ad networks and partners; data exchanges; and marketing analytics and digital advertising and marketing service providers (by visiting the Digital Advertising Alliance);
  • Choosing to control targeted advertising you receive within applications by using the settings and choices made available to you through your device(s), for example, by re-setting your device’s advertising identifier and/or opting out of interest based ads;
  • Choosing to limit participation in Nielsen digital measurement research (for non-Panelists);
  • Requesting removal of your personal information from a public forum on one of our sites or application; and
  • Requesting access to the personal information we hold about you and that we amend or delete it.

You may exercise these controls and choices in various ways, including by visiting Communication Choices (under the Privacy Controls tab), contacting Guest Services, following instructions provided in communications sent to you, or by using your device or other available settings (for example, by re-setting your device’s advertising identifier and/or opting out of interest based ads). You can opt out of interest based ads by visiting the Digital Advertising Alliance or European Interactive Digital Advertising Alliance or using the opt-out mechanism in the “Interest Based Ads” link in the footer of the site you are visiting.

Please be aware that if you do not allow us to collect personal information from you, we may not be able to deliver certain experiences, products, and services to you, and some of our services may not be able to take account of your interests and preferences. If collection of personal information is mandatory, we will make that clear at the point of collection so that you can make an informed decision whether to participate.  If you have questions about the specific personal information about you that we process or retain, and your rights regarding that personal information, please contact Guest Services.

We recognize the need to provide further privacy protections with respect to personal information we may collect from children on our sites and applications. Some of the features on our sites and applications are age-gated so that they are not available for use by children, and we do not knowingly collect personal information from children in connection with those features. When we intend to collect personal information from children, we take additional steps to protect children’s privacy, including:

  • Notifying parents about our information practices with regard to children, including the types of personal information we may collect from children, the uses to which we may put that information, and whether and with whom we may share that information;
  • In accordance with applicable law, and our practices, obtaining consent from parents for the collection of personal information from their children, or for sending information about our products and services directly to their children;
  • Limiting our collection of personal information from children to no more than is reasonably necessary to participate in an online activity; and
  • Giving parents access or the ability to request access to personal information we have collected from their children and the ability to request that the personal information be changed or deleted.

For additional information about our practices in the United States regarding children’s personal information, please read our Children’s Privacy Policy.

The security, integrity, and confidentiality of your information are extremely important to us. We have implemented technical, administrative, and physical security measures that are designed to protect guest information from unauthorized access, disclosure, use, and modification. We regularly review our security procedures to consider appropriate new technology and methods. Please be aware that, despite our best efforts, no security measures are perfect or impenetrable. We will retain your personal information for the length of time needed to fulfill the purposes outlined in this privacy policy unless a longer retention period is required or permitted by law.

We operate globally and may transfer your personal information to individual companies of The Walt Disney Family of Companies or third parties in locations around the world for the purposes described in this privacy policy. Wherever your personal information is transferred, stored or processed by us, we will take reasonable steps to safeguard the privacy of your personal information. These steps may include implementing standard contractual clauses where recognized by law, obtaining your consent, or other lawful means of transferring personal information.

From time to time, we may change this privacy policy to accommodate new technologies, industry practices, regulatory requirements or for other purposes. We will provide notice to you if these changes are material and, where required by applicable law, we will obtain your consent. Notice may be by email to you at the last email address you provided us, by posting notice of such changes on our sites and applications, or by other means, consistent with applicable law.

If you have a comment or question about this privacy policy, please contact Guest Services.

Notice to California Residents: If you are a California resident, you may have certain additional privacy rights. Visit our Your California Privacy Rights page for more information, including how Authorized Agents may make certain requests on behalf of California Residents.

Notice to UK & EU Residents: If you are an EU or UK resident, you may have certain additional privacy rights. Visit our UK & EU Privacy Rights page for more information.

Notice to Brazilian Residents: If you are a Brazilian resident, you may have certain additional privacy rights. Visit our Data Protection in Brazil page for more information.

The Walt Disney Family of Companies (“TWDC”) is committed to protecting the privacy of children who use our sites and applications.
Learn about your California Privacy Rights.