Snapshot 229512
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Experian Global Sites Argentina Australia Austria Brazil Bulgaria Canada Chile China Colombia Denmark Germany Hong Kong India Ireland Italy Japan Malaysia Mexico Netherlands New Zealand Norway Panama Peru Singapore South Africa Spain Sweden Switzerland Taiwan Türkiye United Kingdom United States U.S. Consumer Data Privacy Notice LAST UPDATED: June 24, 2026 1. Scope of Privacy Notice This U.S. Consumer Data Privacy Notice (“Privacy Notice”) is provided by Experian and its subsidiaries that act as a business or controller within the meaning of U.S. state privacy laws, or that link to this notice. These companies include Experian Marketing Solutions, LLC; Experian Health, Inc.; Experian Information Solutions, Inc.; Experian Insurance Services, and are referred to in this notice as "we" or "us." We provide the consumer rights described in this Privacy Notice. For rights available to consumers who interact with other Experian subsidiaries, please visit those subsidiaries’ respective privacy notices. This Privacy Notice describes how we collect, use, disclose, and protect personal information to provide our services. It also describes the rights and choices you have with respect to personal information we maintain about you. For purposes of this section, the terms “personal information” and “sensitive personal information” encompass the terms “personal data” and “sensitive personal data” and have the meaning provided under U.S. state privacy laws that are inclusive of but not limited to: the California Consumer Privacy Act, including the California Privacy Rights Act, the Colorado Privacy Act, the Connecticut Data Privacy Act, the Delaware Personal Data Privacy Act, the Indiana Consumer Data Protection Act, the Iowa Consumer Data Protection Act, the Kentucky Consumer Data Protection Act, the Maryland Online Data Privacy Act, the Minnesota Consumer Data Privacy Act, the Montana Consumer Data Privacy Act, the Nebraska Data Privacy Act, the New Hampshire Data Privacy Act, the New Jersey Data Protection Act, the Oregon Consumer Privacy Act, the Rhode Island Data Transparency and Privacy Protection Act, the Tennessee Information Protection Act, the Texas Data Privacy and Security Act, the Utah Consumer Privacy Act, and the Virginia Consumer Data Privacy Act. The meaning of these terms refer back to terms defined in such state privacy laws and may exclude publicly available, deidentified, and aggregated information; information subject to the Fair Credit Reporting Act, Gramm-Leach-Bliley Act, Health Insurance Portability and Accountability Act, and Driver’s Privacy Protection Act; or information that is otherwise exempted or excluded by state privacy laws. To the extent Experian maintains deidentified data, we commit to maintaining and using deidentified data without attempting to reidentify. To the extent that Experian sells or discloses deidentified patient information which is exempt under certain state laws, it does so pursuant to the deidentification methodology required under these laws. Any users of the services linked to this notice will be referred to as “consumers.” 2. What Personal Information We Collect, How We Use Personal Information, and To Whom We Disclose Personal Information We collect the categories of personal information and sensitive personal information about you as identified in the chart below. As further set forth in the charts below, in the past 12 months, we have disclosed and sold personal information about you to third parties for business or commercial purposes. We use cookies and other tracking technologies, and allow our advertising partners to use similar technologies, so we can, among other things, show you ads promoting Experian on other sites and services. These activities may be considered “sales,” “sharing,” or “targeted advertising” under applicable laws. Categories of Personal Information: Collected in the last 12 months: Categories of sources from which the personal information is collected: Business or commercial purpose for collecting, selling, sharing, and disclosing personal information: Sold, shared, or disclosed for a business or commercial purpose to third parties in the preceding 12 months: Categories of third parties to whom the personal information was sold, shared, or disclosed in the preceding 12 months: Personal and online identifiers (such as first and last name, postal address, telephone number, social security number, driver’s license, email address, or unique online identifiers) Yes • Affiliates • Automotive Companies • Consumer Survey Companies • Data Collected from Consumer • Financial Services Companies • Government Agencies • Health Product Companies • Lifestyle & Interest Product Companies • Not for Profit Organizations • Other Authorized Data Compilers • Other Product Companies not Categorized • Parenting Product Companies • Public Records • Publishing Product Companies • Telecommunications Companies Commercial Purposes: • Marketing • Helping businesses find new customers • Developing insights as to consumer interests and behaviors • Keeping contact information up to date and relevant • Enabling relevant and personalized marketing messages • Location services • Analytics • Decisioning • Fraud and identify theft prevention and protection • Commercial credit reporting • Research and development • Debt recovery Business Purposes: • Auditing • Internal research • Quality control • Improving our services • Legal compliance • Advertising and marketing products • Communicate with consumers about our services • To detect and protect against security incidents • Cloud computing and storage • Analytics Providers • Social Publishers Yes • Automotive Companies • Business to Business Companies • Business Services/Agency • Consumer Services Companies • Educational Institutions & Companies • Energy and Utility Companies • Financial Services Companies • Food & Beverage Companies • Government Agencies • Health Product Companies • Insurance Companies • Manufacturing Companies • Marketing and Research Companies • Media and Publishing Companies • Not for Profit Organizations • Other Authorized Data Compilers • Political Organizations • Public Institutions • Regulatory Authorities or Law Enforcement • Retail Companies • Technology/Computer Software Companies • Telecommunications Companies • Travel, Leisure & Entertainment Companies Commercial or transactions information (such as records of personal property or products or services purchased, obtained or considered, vehicle information, insurance claims, insurance underwriting information) Yes • Affiliates • Apparel & Accessory Companies • Automotive Companies • Business to Business Companies • Business Services/Agency • Consumer Services Companies • Data Collected from Consumer • Financial Services Companies • Gift Product Companies • Health Product Companies • Other Authorized Data Compilers • Other Product Companies Not Categorized • Parenting Product Companies • Publishing Product Companies • Public Records Commercial Purposes: • Marketing • Helping businesses find new customers • Developing insights as to consumer interests and behaviors • Keeping contact information up to date and relevant • Enabling relevant and personalized marketing messages • Location services • Analytics • Decisioning • Fraud and identify theft prevention and protection • Commercial credit reporting • Research and development • Debt recovery Business Purposes: • Auditing • Internal research • Quality control • Improving our services • Legal compliance • Advertising and marketing products • Communicate with consumers about our services • To detect and protect against security incidents • Cloud computing and storage • Analytics Providers • Social Publishers Yes • Automotive Companies • Business to Business Companies • Business Services/Agency • Consumer Services Companies • Educational Institutions & Companies • Energy and Utility Companies • Financial Services Companies • Food & Beverage Companies • Government Agencies • Health Product Companies • Insurance Companies • Manufacturing Companies • Marketing and Research Companies • Media and Publishing Companies • Not for Profit Organizations • Other Authorized Data Compilers • Political Organizations • Public Institutions • Public Records • Regulatory Authorities or Law Enforcement • Retail Companies • Technology/Computer Software Companies • Telecommunications Companies • Travel, Leisure & Entertainment Companies Internet or other electronic network activity information (such as browsing history, search history, interactions with a website, email, application, or advertisement) Yes • Business to Business Companies • Financial Services Companies • Government Agencies • Other Authorized Data Compiler • Publishing Product Companies Commercial Purposes: • Marketing • Helping businesses find new customers • Developing insights as to consumer interests and behaviors • Keeping contact information up to date and relevant • Enabling relevant and personalized marketing messages • Location services • Analytics • Decisioning • Fraud and identify theft prevention and protection • Commercial credit reporting • Research and development • Debt recovery Business Purposes: • Auditing • Internal research • Quality control • Improving our services • Legal compliance • Advertising and marketing products • Communicate with consumers about our services • To detect and protect against security incidents • Cloud computing and storage • Analytics Providers • Social Publishers Yes • Automotive Companies • Business Services/Agency • Consumer Services Companies • Educational Institutions & Companies • Energy and Utility Companies • Financial Services Companies • Food & Beverage Companies • Health Product Companies • Insurance Companies • Manufacturing Companies • Marketing and Research Companies • Media and Publishing Companies • Not for Profit Organizations • Political Organizations • Public Institutions • Retail Companies • Technology/Computer Software Companies • Telecommunications Companies • Travel, Leisure & Entertainment Companies Biometric information (such as call recordings, facial recognition or retina/fingerprint scans) Yes • Data Collected from Consumer Commercial Purposes: • Fraud and identify theft prevention and protection Business Purposes: • To detect and protect against security incidents No N/A Geolocation information Yes • Affiliates • Automotive Companies • Business to Business Companies • Data Collected from Consumer • Financial Services Companies • Government Agencies • Health Product Companies • Not for Profit Organizations • Online & Mobile Websites & Apps • Other Authorized Data Compilers • Public Records • Telecommunications Companies Commercial Purposes: • Marketing • Helping businesses find new customers • Developing insights as to consumer interests and behaviors • Keeping contact information up to date and relevant • Enabling relevant and personalized marketing messages • Location services • Analytics • Decisioning • Fraud and identify theft prevention and protection • Commercial credit reporting • Research and development • Debt recovery Business Purposes: • Auditing • Internal research • Quality control • Improving our services • Legal compliance • Advertising and marketing products • Communicate with consumers about our services • To detect and protect against security incidents • Cloud computing and storage • Analytics Providers • Social Publishers Yes • Automotive Companies • Business Services/Agency • Consumer Services Companies • Educational Institutions & Companies • Energy and Utility Companies • Financial Services Companies • Food & Beverage Companies • Health Product Companies • Insurance Companies • Manufacturing Companies • Marketing and Research Companies • Media and Publishing Companies • Not for Profit Organizations • Political Organizations • Public Institutions • Retail Companies • Technology/Computer Software Companies • Telecommunications Companies • Travel, Leisure & Entertainment Companies Sensory information (such as audio, electronic, visual, thermal, olfactory, or similar information) No N/A N/A No N/A Professional or employment-related information Yes • Affiliates • Business to Business Companies • Consumer Survey Companies • Data Collected from Consumer • Financial Services Companies • Government Agencies • Health Product Companies • Insurance Companies • Not for Profit Organizations • Other Authorized Data Compilers • Telecommunications Companies Commercial Purposes: • Marketing • Helping businesses find new customers • Developing insights as to consumer interests and behaviors • Keeping contact information up to date and relevant • Enabling relevant and personalized marketing messages • Location services • Analytics • Decisioning • Fraud and identify theft prevention and protection • Commercial credit reporting • Research and development • Debt recovery Business Purposes: • Auditing • Internal research • Quality control • Improving our services • Legal compliance • Advertising and marketing products • Communicate with consumers about our services • To detect and protect against security incidents • Cloud computing and storage • Analytics Providers • Social Publishers Yes • Automotive Companies • Business Services/Agency • Consumer Services Companies • Educational Institutions & Companies • Energy and Utility Companies • Financial Services Companies • Food & Beverage Companies • Health Product Companies • Insurance Companies • Manufacturing Companies • Marketing and Research Companies • Media and Publishing Companies • Not for Profit Organizations • Political Organizations • Public Institutions • Regulatory Authorities or Law Enforcement • Retail Companies • Technology/Computer Software Companies • Telecommunications Companies • Travel, Leisure & Entertainment Companies Education Information Yes • Affiliates • Data Collected from Consumer • Public Records • Other Authorized Data Compilers • Consumer Survey Companies Commercial Purposes: • Marketing • Helping businesses find new customers • Developing insights as to consumer interests and behaviors • Keeping contact information up to date and relevant • Enabling relevant and personalized marketing messages • Location services • Analytics • Decisioning • Fraud and identify theft prevention and protection • Commercial credit reporting • Research and development • Debt recovery Business Purposes: • Auditing • Internal research • Quality control • Improving our services • Legal compliance • Advertising and marketing products • Communicate with consumers about our services • To detect and protect against security incidents • Cloud computing and storage • Analytics Providers • Social Publishers Yes • Automotive Companies • Business Services/Agency • Consumer Services Companies • Educational Institutions & Companies • Energy and Utility Companies • Financial Services Companies • Food & Beverage Companies • Health Product Companies • Insurance Companies • Manufacturing Companies • Marketing and Research Companies • Media and Publishing Companies • Not for Profit Organizations • Political Organizations • Public Institutions • Retail Companies • Technology/Computer Software Companies • Telecommunications Companies • Travel, Leisure & Entertainment Companies Inferences drawn from the above information about your predicted characteristics and preferences Yes • Affiliates • Business to Business Companies • Data Modeling Software Providers • Financial Services Companies • Government Agencies • Other Authorized Data Compilers • Telecommunications Companies Commercial Purposes: • Marketing • Helping businesses find new customers • Developing insights as to consumer interests and behaviors • Keeping contact information up to date and relevant • Enabling relevant and personalized marketing messages • Location services • Analytics • Decisioning • Fraud and identify theft prevention and protection • Commercial credit reporting • Research and development • Debt recovery Business Purposes: • Auditing • Internal research • Quality control • Improving our services • Legal compliance • Advertising and marketing products • Communicate with consumers about our services • To detect and protect against security incidents • Cloud computing and storage • Analytics Providers • Social Publishers Yes • Automotive Companies • Business Services/Agency • Consumer Services Companies • Educational Institutions & Companies • Energy and Utility Companies • Financial Services Companies • Food & Beverage Companies • Health Product Companies • Insurance Companies • Manufacturing Companies • Marketing and Research Companies • Media and Publishing Companies • Not for Profit Organizations • Political Organizations • Public Institutions • Retail Companies • Technology/Computer Software Companies • Telecommunications Companies • Travel, Leisure & Entertainment Companies Categories that may be considered Sensitive Personal Information: Collected in the last 12 months: Categories of sources from which the sensitive personal information is collected: Business or commercial purpose for collecting, selling, sharing, and disclosing sensitive personal information: Sold, shared, or disclosed for a business or commercial purpose to third parties in the preceding 12 months: Categories of third parties to whom the sensitive personal information was sold, shared, or disclosed in the preceding 12 months: This chart below reflects Experian's data practices with regard to Sensitive Personal Information in states other than Colorado, Connecticut, Delaware, Indiana, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia. Experian does not collect sensitive personal information in these states. A consumer’s social security, driver’s license, state identification card, or passport number Yes • Business to Business Companies • Data Collected from Consumer • Financial Services Companies • Government Agencies • Health Product Companies • Insurance Companies • Not for Profit Organizations • Other Authorized Data Compilers • Public Records • Telecommunications Companies Commercial Purposes: • Marketing • Helping businesses find new customers • Developing insights as to consumer interests and behaviors • Keeping contact information up to date and relevant • Enabling relevant and personalized marketing messages • Location services • Analytics • Decisioning • Fraud and identify theft prevention and protection • Commercial credit reporting • Research and development • Debt recovery Business Purposes: • Auditing • Internal research • Quality control • Improving our services • Legal compliance • Advertising and marketing products • Communicate with consumers about our services • To detect and protect against security incidents • Cloud computing and storage • Analytics Providers • Social Publishers Yes • Automotive Companies • Business Services/Agency • Consumer Services Companies • Educational Institutions & Companies • Energy and Utility Companies • Financial Services Companies • Food & Beverage Companies • Health Product Companies • Insurance Companies • Manufacturing Companies • Marketing and Research Companies • Media and Publishing Companies • Not for Profit Organizations • Political Organizations • Public Institutions • Retail Companies • Technology/Computer Software Companies • Telecommunications Companies • Travel, Leisure & Entertainment Companies A consumer’s account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account Yes • Business to Business Companies • Consumer Survey Companies • Financial Services Companies • Government Agencies • Health Product Companies • Not for Profit Organizations • Other Authorized Data Compilers • Public Records • Telecommunications Companies Commercial Purposes: • Marketing • Helping businesses find new customers • Developing insights as to consumer interests and behaviors • Keeping contact information up to date and relevant • Enabling relevant and personalized marketing messages • Location services • Analytics • Decisioning • Fraud and identify theft prevention and protection • Commercial credit reporting • Research and development • Debt recovery Business Purposes: • Auditing • Internal research • Quality control • Improving our services • Legal compliance • Advertising and marketing products • Communicate with consumers about our services • To detect and protect against security incidents • Cloud computing and storage • Analytics Providers • Social Publishers Yes • Automotive Companies • Business Services/Agency • Consumer Services Companies • Educational Institutions & Companies • Energy and Utility Companies • Financial Services Companies • Food & Beverage Companies • Health Product Companies • Insurance Companies • Manufacturing Companies • Marketing and Research Companies • Media and Publishing Companies • Not for Profit Organizations • Public Institutions • Regulatory Authorities or Law Enforcement • Retail Companies • Technology/Computer Software Companies • Telecommunications Companies • Travel, Leisure & Entertainment Companies A consumer’s precise geolocation Yes • Business to Business Companies • Financial Services Companies • Other Authorized Data Compilers • Telecommunications Companies • Public Records • Government Agencies Commercial Purposes: • Marketing • Helping businesses find new customers • Developing insights as to consumer interests and behaviors • Keeping contact information up to date and relevant • Enabling relevant and personalized marketing messages • Location services • Analytics • Decisioning • Fraud and identify theft prevention and protection • Commercial credit reporting • Research and development • Debt recovery Business Purposes: • Auditing • Internal research • Quality control • Improving our services • Legal compliance • Advertising and marketing products • Communicate with consumers about our services • To detect and protect against security incidents • Cloud computing and storage • Analytics Providers • Social Publishers Yes • Automotive Companies • Business Services/Agency • Consumer Services Companies • Educational Institutions & Companies • Energy and Utility Companies • Financial Services Companies • Food & Beverage Companies • Health Product Companies • Insurance Companies • Manufacturing Companies • Marketing and Research Companies • Media and Publishing Companies • Not for Profit Organizations • Public Institutions • Regulatory Authorities or Law Enforcement • Retail Companies • Technology/Computer Software Companies • Telecommunications Companies • Travel, Leisure & Entertainment Companies A consumer’s racial or ethnic origin, religious or philosophical beliefs, citizenship or immigration status, or union membership Yes • Data Modeling Software Providers Commercial Purposes: • Marketing • Helping businesses find new customers • Developing insights as to consumer interests and behaviors • Keeping contact information up to date and relevant • Enabling relevant and personalized marketing messages • Location services • Analytics • Decisioning • Fraud and identify theft prevention and protection • Commercial credit reporting • Research and development • Debt recovery Business Purposes: • Auditing • Internal research • Quality control • Improving our services • Legal compliance • Advertising and marketing products • Communicate with consumers about our services • To detect and protect against security incidents • Cloud computing and storage • Analytics Providers • Social Publishers Yes • Automotive Companies • Business Services/Agency • Consumer Services Companies • Educational Institutions & Companies • Energy and Utility Companies • Financial Services Companies • Food & Beverage Companies • Health Product Companies • Insurance Companies • Manufacturing Companies • Marketing and Research Companies • Media and Publishing Companies • Not for Profit Organizations • Political Organizations • Public Institutions • Retail Companies • Technology/Computer Software Companies • Telecommunications Companies • Travel, Leisure & Entertainment Companies The contents of a consumer’s mail, email, and text messages unless the business is the intended recipient of the communication No N/A N/A No N/A The processing of a consumer’s genetic data for the purpose of uniquely identifying a consumer No N/A N/A No N/A The processing of biometric information for the purpose of uniquely identifying a consumer No N/A N/A No N/A Personal information collected and analyzed concerning a consumer’s health, including medical history, medical treatment or diagnosis by a health care professional, and any mental or physical health condition or diagnosis No N/A N/A No N/A Personal information collected and analyzed concerning a consumer’s sex life or sexual orientation No N/A N/A No N/A Personal information collected from a known child No N/A N/A No N/A Click here for a list of third parties (parties other than a consumer, controller, processor, or affiliate of a controller or processor) with whom we share or disclose personal information. 3. Digital Advertising Alliance Opt-Out You may have rights to opt out of targeted advertising, sales, and/or sharing of personal information under state privacy laws depending on your state of residence. Please refer to the “Privacy Rights Regarding Personal Information” section of this notice below to learn about these state law rights. Experian adheres to the Digital Advertising Alliance (DAA) Self-Regulatory Principles. Through the DAA’s opt-out tools, you can opt out of certain forms of online advertising by Experian and other companies participating in the DAA program. The DAA opt-out tools apply specifically to online behavioral advertising. You can opt out of online behavioral advertising through the DAA Consumer Choice page, which is available in versions for desktop and mobile browsers. The DAA also offers a separate choice tool for the collection of cross-app data on mobile devices for online personalized advertising and other applicable uses. To exercise choice applicable to companies participating in this choice tool, you can install the DAA’s AppChoices app. 4. Privacy Rights Regarding Personal Information Residents of specific states have certain rights with respect to personal information collected and processed under state privacy laws. However, consumers from all states and territories may submit privacy rights requests through our Privacy Rights Portal. Requests relating to personal information collected in the context of employment or an application for employment as well as personal information collected in a business context are limited to California residents. You may exercise the following rights, subject to certain exceptions and limitations: Right to Know/Access You have a right to know whether Experian processes personal information about you and to access the personal information Experian maintains about you. Right to Portability You have the right to obtain a copy of personal information Experian maintains about you in a format that is portable and readily usable. Right to Delete You have the right to request deletion of the personal information that Experian maintains about you, subject to certain exceptions. Right to Correct You have the right to request correction of inaccurate personal information that Experian maintains about you. Right to Opt-Out You have the right to opt out from the sale/sharing of personal information, use of personal information for targeted advertising, and profiling that produces a legal or similarly significant effects. Because Experian does not engage in profiling in furtherance of a decision that produces legal or similarly significant effects within the meaning of U.S. state privacy laws, Experian does not offer this as an opt out option. In certain states, opting out also includes your right to limit the use and disclosure of sensitive personal information. This is not related to your credit report and will not affect your credit score. Please note your privacy rights settings are linked to your current address. If you change addresses, you may need to resubmit your privacy rights request. Right to Not Be Discriminated Against or Retaliated Against You have the right not to be discriminated against or retaliated against for exercising any of your privacy rights granted by applicable state privacy laws. For California residents, this includes when acting as a job applicant, employee, or an independent contractor. How to Exercise Your Rights To exercise your rights, please contact us using the following information. Opt-out requests and requests to limit the collection and use of sensitive information associated with you can be made online, by mail, or by email and do not require verification. Correction requests can be made online or by mail. Know/access requests and deletion requests can be made online, by mail, or phone. Online at consumerprivacy.experian.com By phone at 1-833-210-4615 By mail at PO Box 703, Allen, TX 75013 By email at optout@experian.com (for opt out and limit only) Verification Process For Right to Know/Access, Correct, and/or Delete To exercise your rights to know/access, correct, and/or delete online, we will need your complete name, current address, phone number, and email address. Please note that social security number and date of birth are not required but may be provided to help us better locate personal information about you across our businesses. Once your information has been located, you will need to confirm your identity by correctly answering the authentication questions. To exercise your rights to know/access, correct, and/or delete by mail, you must provide one item of documentation to verify your identity and one other piece of documentation to verify your address. To verify your identity, you must provide one of the following pieces of documentation: a valid driver’s license; a valid state or military ID; or a valid passport. To verify your address, you must provide one of the following pieces of documentation: a current rental lease agreement or house deed; a utility bill such as gas, water, cable, or residential or cell phone bill with the correct address; or a bank or insurance statement. You will not be required to create an account with us to submit a request or have it fulfilled. We may decline a request to exercise the right to know/access, right to correct, and/or right to delete where we are unable to verify your identity. You may appeal Experian's denial of your privacy rights request. To appeal a denial, please email the Privacy Rights Appeal Form provided to you upon denial of your request to optout@experian.com. Be sure to include the Privacy Rights Appeal Form when submitting an appeal. Authorized Agent You may designate an authorized agent to make a request on your behalf through the designated methods set forth in this Privacy Notice where we can verify the authorized agent’s authority to act on your behalf. For requests to opt-out, you may designate an authorized agent by submitting a written and signed permission to designate such an agent. For requests made by an opt-out preference signal, written permission from the consumer will not be needed. For requests to know/access, requests to delete, and requests to correct, Experian must receive: (i) a power of attorney valid under the laws of your state from you or your authorized agent; or (ii) sufficient evidence to show that you have: (a) provided the authorized agent signed permission to act on your behalf; (b) verified your own identity directly with us pursuant to the instructions set forth in this Privacy Notice; and (c) directly confirmed with us that you provided the authorized agent permission to submit the request on your behalf. This may be done by mailing two forms of identification showing your first name, last name, and current address and a signed authorization allowing an agent to request information on your behalf. Opt-Out Preference Signals In certain states, consumers may opt out of personal information sales, sharing, and targeted advertising by broadcasting an Opt-Out Preference Signal, such as the Global Privacy Control (GPC), on browsers and/or browser extensions that support such a signal. If you choose to use the GPC signal, you will need to turn it on for each supported browser or browser extension you use. Your request to opt-out will be linked to your browser identifier only, unless it is already linked to other personal information. If you would like us to make the connection between your browser and your account, or other personal information that we may hold that is subject to opt out when you send the Opt-Out Preference Signal and you have not yet opted out, we recommend you send your complete name and mailing address to optout@experian.com. 5. Experian as a Processor/Service Provider To provide our services, we may process personal information we receive from or on behalf of our clients. When we do so, we act as a processor or service provider on behalf of our client who determines the purpose and means of the processing. Experian processes this information only as necessary to provide our services and at our client’s direction. The privacy notice of our client and our contractual agreement with them governs the processing of this personal information. To exercise any privacy rights in relation to personal information we may process as a processor or service provider, please contact the relevant business who collected the personal information or on whose behalf this information was collected. 6. How Long We Keep Personal Information Generally, we will keep personal information only as long as we need it to provide the Experian products and services you’ve signed up to receive or only as long as necessary to fulfill the purposes outlined in this Privacy Notice. We may also keep it to comply with our legal obligations, resolve any disputes, protect against fraudulent, deceptive, or illegal activity and enforce our rights. These reasons can vary from one piece of information to the next and depend on the products or services, so the amount of time we keep personal information may vary. 7. Data Collection of Minors’ Data We do not collect, sell, share or disclose the personal information of minors under 16 years of age. 8. Annual User Rights Request Metrics The CCPA requires certain businesses to compile and disclose metrics on an annual basis regarding their compliance with the CCPA and consumer rights requests. The metrics must be posted by July 1 of each year. Experian has elected to report the required metrics on a calendar year basis for the period of January 1, 2025 through December 31, 2025. During the previous calendar year, Experian facilitated the following requests from California residents who submitted requests via our online portal, by phone or mail: Experian Requests to Delete Requests to Correct Requests to Know Request to Opt-Out of Sale/Sharing Request to Limit Total Requests Received 1127 274 704 4700 4660 Number of requests complied with in whole 1127 274 704 4700 4660 Number of requests complied with in part 0 0 0 0 0 Number of requests denied due to inability to verify consumer [1] 0 0 0 0 0 Average number of days to substantively respond 2 2 2 2 2 Median number of days to substantively respond 2 2 2 2 2 [1] Requests unable to be fulfilled due to unreturned Certification Form from consumer EXPERIAN MARKETING SOLUTIONS, LLC, EXPERIAN HEALTH, INC., AND EXPERIAN INFORMATION SOLUTIONS, INC. ARE DATA BROKERS UNDER TEXAS LAW. TO CONDUCT BUSINESS IN TEXAS, A DATA BROKER MUST REGISTER WITH THE TEXAS SECRETARY OF STATE (TEXAS SOS). INFORMATION ABOUT DATA BROKER REGISTRANTS IS AVAILABLE ON THE TEXAS SOS WEBSITE. Experian Marketing Solutions, LLC, Experian Health, Inc., and Experian Information Solutions, Inc. are data brokers under Texas law. To conduct business in Texas, a data broker must register with the Texas Secretary of State (Texas SOS). Information about data broker registrants is available on the Texas SOS website. If our information practices change, we will post these changes on this page. We encourage you to visit this page periodically to learn of any updates. 9. Contact for More Information For questions about this Privacy Notice or our privacy practices, please contact us at: Email: privacy@experian.com Mail: Compliance Department Experian 475 Anton Blvd. Costa Mesa, CA 92626 Industries Automotive Banks Credit Unions Debt Collection Energy/Utilities Fintech Health Mortgage Public Sector Telecommunications Solutions and Services Account Aggregation Affinity Loyalty Products Consulting Services Data Breach Resolution Decisioning Experian Marketing Services Fraud Management Partner Solutions Regulatory Compliance Risk Management Data Big Data Business Data Consumer Credit Data Consumer Data & Insights Data Quality Rental Data Additional Resources Experian Social Media Reporting to Experian Thought Leadership Blogs Business Information Data Quality Trends Experian Insights Healthcare Marketing Forward Legal Terms & Conditions Privacy Center U.S. Consumer Data Privacy Notice Ad Choices Press Careers Investor Relations Contact Us EXPERIAN'S INCLUSION AND BELONGING Learn more how Experian is committed DATA PRIVACY Your privacy choices