About This Document
This US addendum supplements the Guardian's Privacy Policy for residents of states with comprehensive privacy legislation, including Alabama, California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Louisiana, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oklahoma, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia, and similar states ("Covered States"). It explains rights under laws such as the California Consumer Privacy Act (CCPA), Virginia Consumer Data Protection Act, Colorado Privacy Act, and others (collectively "State Privacy Laws").
Personal Data Collected
In the past 12 months, we have collected categories of personal data as described in the Privacy Policy's sections on what we collect, how we collect, and why we use it. We may sell or share for affiliate marketing and personalized advertising the following categories: contact information and identifiers, geolocation information, device information and unique identifiers, and internet or other electronic network activity information.
Your US Privacy Rights
Depending on your state, you may have the right to know what personal data we process, access it, obtain a copy in a portable format (data portability), correct inaccurate data, opt out of personalized advertising or sale of personal data, delete your data, and limit use of sensitive personal data. We do not discriminate against you for exercising these rights. You can opt out via the "Do not sell or share my information" link on our site or by using Global Privacy Control (GPC) signals.
Exercising Your Rights
To exercise your rights, email dataprotection@theguardian.com. Opt-out requests do not require verification; other requests may require identity verification. Authorized agents for California residents must provide written proof of authorization.
Right to Appeal
We respond to requests within 45 days, with possible extension to 90 days for complex requests. If we decline your request, we will provide reasons and instructions for appeal. Appeals must be submitted within a reasonable period; we respond within 60 days (45 days for Colorado and Minnesota residents). If denied, we provide contact information for your state attorney general.
California-Specific Rights
California residents may request a list of personal data disclosed for direct marketing ("Shine the Light"). We do not generally disclose such data; to opt out of email sharing for marketing, use your account settings or email dataprotection@theguardian.com with "Shine the Light" in the subject line. We keep a record of CCPA requests from the last calendar year (from 1 July 2026).
Nevada Privacy Rights
Nevada residents may opt out of the sale of personal data by emailing dataprotection@theguardian.com with subject "Nevada Do Not Sell Request."
Contact Us
For questions or concerns about your personal data, contact the Data Protection Officer at Guardian News & Media Limited, Kings Place, 90 York Way, London N1 9GU, or email dataprotection@theguardian.com. Material changes to this policy are notified via email or pop-up. Last updated: 8 July 2026.
