This US addendum supplements the main Privacy Policy for residents of Alabama, California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Louisiana, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oklahoma, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia, and other states with similar comprehensive privacy legislation (collectively, "Covered States"). It applies when you are a consumer of a Covered State and we act as a "controller" or "business" under applicable State Privacy Laws.
Personal Data Collected and Purposes
In the past 12 months, we have collected categories of personal data as described in the main Privacy Policy sections "What personal data we collect about you" and "How we collect personal data from you." Depending on your interaction level, not all categories may apply. We use your personal data for business or commercial purposes as outlined in "Why and how we use your personal data" and retain it per "How long we keep your personal data."
We may sell or share for affiliate marketing and personalized advertising the following categories: contact information and identifiers, geolocation information, device information and unique identifiers, and internet or other electronic network activity information.
Your Privacy Rights Under State Laws
Depending on your state of residence, you may have the following rights:
- Right to Know: Request disclosure of whether we process your personal data and access to that data.
- Right to Data Portability: Obtain a copy of your personal data in a portable format.
- Right to Correct: Request correction of inaccurate personal data.
- Right to Opt-Out: Opt out of processing for personalized advertising, sale of personal data, or profiling for legally significant decisions. We process or share personal data for personalized advertising and sell personal data for monetary consideration. We do not engage in profiling for legally significant effects. Exercise this right via the "Do not sell or share my information" link on our site. We honor Global Privacy Control (GPC) signals.
- Right to Deletion: Request deletion of your personal data, subject to exceptions.
- Right to Limit Use of Sensitive Personal Data: California residents can limit use of sensitive personal data to service provision or as permitted by law. We treat opt-out preference signals as valid "Limit the Use" requests.
- Right to Non-Discrimination: We will not discriminate against you for exercising your rights.
Exercising Your Rights
To exercise your rights or ask questions, email dataprotection@theguardian.com. Opt-out and limit requests do not require verification; other requests may require identity verification. Only you or an authorized agent (for California) may make verifiable requests. Authorized agents must submit written proof of authorization.
Right to Appeal
We aim to respond within 45 days, or up to 90 days for complex requests. If we decline your request, we will provide reasons and appeal instructions. Depending on your state, you may appeal within a reasonable period. Within 60 days (45 days for Colorado and Minnesota residents) of receiving an appeal, we will respond in writing. If denied, we will provide contact information for your state attorney general's office.
California-Specific Record of Requests
We maintain a record of CCPA requests from the last calendar year (1 July 2026 to 30 June 2027). The record is available upon request.
California "Shine the Light" Privacy Rights
California residents may request a list of categories of personal data disclosed to third parties for direct marketing. We generally do not disclose data as defined under that law. To opt out of email sharing for online marketing, use "Manage My Account" or email dataprotection@theguardian.com with subject "Shine the Light."
Nevada Privacy Rights
Nevada residents may opt out of the sale of personal data to data brokers by emailing dataprotection@theguardian.com with subject "Nevada Do Not Sell Request."
Contact Us
For questions or concerns about personal data use, contact the Data Protection Officer at Guardian News & Media Limited, Kings Place, 90 York Way, London N1 9GU, or email dataprotection@theguardian.com. Material changes will be notified via email or pop-up. Last updated: 8 July 2026.
