Skip to content

U.S. State Privacy Notice

SERIOUS
DATED 2025-02-24 · VERSION 20260811_rev01 · FIRST CAPTURED VERSION

What changed, in plain language

How reviews are made

This is a first capture of Vimeo's U.S. State Privacy Notice — the diff adds all 348 lines and contains no earlier text, so nothing here can be compared against a previous version and no claim is made about what an earlier version said. Read as a standalone document, the notice says Vimeo discloses several categories of personal data — account and contact identifiers, purchase history, browsing activity, rough location, and inferences about your interests — to advertising and social-media partners it calls "Third-Party Digital Businesses," in ways that count as a "Sale" or "Sharing" under state privacy laws. You can opt out, but the browser-level Global Privacy Control signal only covers cookie data, not data like your email address, and it must be re-enabled on every browser and device. Vimeo gives no retention time limits, and getting all your data deleted normally means deleting your whole account and all your videos. Nevada opt-out requests are collected through a Google Form with no identity-verification process built yet.

Changes that may affect you

Your identifiers, location, browsing, and purchase history go to ad partners as a "Sale" or "Sharing"SERIOUS
DATA SHARING

Vimeo's own table says six categories of your data — including email and cookie IDs, address and payment card information, what you bought or looked at, your search and browsing activity on the Service, your approximate location, and inferences it draws about your interests — are disclosed to "Third-Party Digital Businesses" (advertising companies and social platforms) in ways state law treats as selling or sharing. This happens unless you opt out.

“Sale/Sharing: Third-Party Digital Businesses”

What you can do — Opt out twice: click "Your Privacy Choices" in the footer of every Vimeo site you use, on each browser and device, for cookie data; and file a separate request at vimeo.com/help/contact to stop targeting based on your email address and other non-cookie data.

A browser opt-out signal only covers part of your dataMATERIAL
DATA SHARING

Vimeo honors Global Privacy Control, but says it cannot apply that signal to data like your email address. It also applies only to the exact browser and device you set it on, and clearing cookies wipes it. So people who think turning on GPC stops all ad targeting are only partly protected.

“Due to technical limitations, we are unable to apply GPC signals to non-cookie PI; however, you can make a DNS/Share request as to non-cookie PI at our webform as described above.”

What you can do — Don't rely on GPC alone — also submit the non-cookie opt-out webform at vimeo.com/help/contact, and re-check your setting on each new browser or device.

No stated limit on how long your data is keptMATERIAL
DATA RETENTION

Vimeo declines to give any retention periods and instead keeps data for as long as it judges it has a "legitimate purpose." The same self-assessment is applied to data you specifically ask it to delete, so a deletion request can come back partly refused.

“we are unable to provide data retention ranges based on categories of PI in a way that would be meaningful and transparent to you”

What you can do — When you file a deletion request, ask Vimeo in writing to list exactly which data it is keeping and the legal reason — the notice says it will respond with those reasons.

Full deletion costs you your account and all your videosMATERIAL
OTHER

To get everything deleted you generally have to close your account, which takes down all the content you uploaded. Vimeo can also meet a deletion request by de-identifying or aggregating your data instead of erasing it, and backups and archives are left alone.

“Deleting all data will typically require the deletion of your account, along with all content, including your videos.”

What you can do — Download or back up your videos before submitting a deletion request; if you only want specific data removed, say so rather than asking for everything.

Vimeo collects information about you from other peopleMATERIAL
DATA COLLECTION

Sources include not just you and your device but vendors, advertising partners, affiliates, other third parties, and other Vimeo users — specifically people who upload videos you appear in. That means data can be gathered about you even if you never created an account.

“We collect PI directly from you or your device, Vendors, Third-Party Digital Businesses, our Affiliates and Related Entities, other users (e.g. users who upload content you appear in), and other third parties.”
All your data can transfer if the company changes handsMATERIAL
DATA SHARING

Vimeo reserves the right to hand over everything covered by this notice in a merger, restructuring, or asset sale — and also during due diligence, meaning before any deal is finalized and to a buyer that may walk away.

“We also reserve the right to disclose and transfer all such information in connection with a merger, consolidation, restructuring, the sale of substantially all of our interests and/or assets or other corporate change, and during the course of any due diligence process”
Vimeo can charge a fee for or refuse your privacy requestMINOR
OTHER

If Vimeo decides a request is excessive, repetitive, unfounded, or overly burdensome, it can charge you or simply decline. It promises an explanation and a cost estimate first, but it makes the call on what counts as excessive.

“charge a reasonable fee, or refuse to act upon a request, if your request is excessive, repetitive, unfounded, or overly burdensome”

What you can do — If your request is refused and you live in Colorado, Connecticut, or Virginia, reply to Vimeo's response email to appeal — the notice says that's how to exercise your appeal right.

Nevada opt-out is collected but not yet usableMINOR
OTHER

Nevada residents can submit their name and email to a Google Form to opt out of future data sales, but Vimeo says it will only build a verification process and let people actually complete the opt-out if its plans change. You are also responsible for keeping that email address current.

“At that time, we will create a process for verifying your identity and providing an opportunity to verified consumers to complete their opt-out.”

What you can do — Nevada residents: submit the form, but don't treat it as an active opt-out — also use the "Your Privacy Choices" cookie tool and the non-cookie webform, which work today.

People outside the listed states get no guaranteed rightsMINOR
OTHER

If your state isn't one of the roughly eighteen named in the notice, Vimeo says it will consider your privacy request but keeps full discretion over how — or whether — to act on it.

“For residents of states without Consumer privacy rights, we will consider requests but reserve the right to apply discretion in how we process such requests.”
Some data is placed outside these protections entirelyMINOR
OTHER

Data Vimeo considers de-identified or aggregated is not treated as personal information, and it may choose not to treat publicly available information as personal information either — so your rights to see, correct, or delete it may not apply. The notice also doesn't cover data collected by third-party plug-ins, embedded content, and certain tracking tools on Vimeo's pages.

“we do not treat deidentified data or aggregate consumer information as PI, and we may elect not to treat publicly available information as PI”

Changelog

  1. + ADDEDFirst capture of this notice — no earlier version to compare

    The entire document appears as new text in this record. There is no previous text in the diff, so nothing can be said about whether or how the notice changed. Everything below describes what the notice says as it stands today.

    This U.S. State Privacy Notice (the "**Notice**") applies to "**Consumers**" as defined under the California Consumer Privacy Act (the "**CCPA**")

  2. + ADDEDSix kinds of your data go to advertising partners as a "Sale" or "Sharing"

    A table lists what Vimeo collects and who receives it. Identifiers (account name, email, IP address, cookie ID), personal records (address, contact info, payment card info), purchase history, browsing and search activity on the Service, rough location, and inferences about your interests are all marked as going to "Third-Party Digital Businesses" — advertising and social-media companies — in ways treated as a Sale or Sharing under state law.

    Sale/Sharing: Third-Party Digital Businesses

  3. + ADDEDSome data is labeled sensitive but is not sold or shared

    Your login and password, and the content of messages you send other Vimeo users, are treated as "Sensitive PI." Both are marked "Sale/Sharing: N/A," meaning Vimeo says it does not sell or share them with advertising partners. Pronouns, call recordings, and job title are also marked as not sold or shared.

    \*considered Sensitive PI or Sensitive Data under certain of the U.S. Privacy Laws

  4. + ADDEDNo time limits on how long data is kept

    Vimeo says it cannot give retention periods for each type of data. How long anything is kept depends on whether Vimeo decides it still has a "legitimate purpose" for keeping it — the same test it applies to data you ask it to delete.

    we are unable to provide data retention ranges based on categories of PI in a way that would be meaningful and transparent to you

  5. + ADDEDDeleting your data usually means deleting your account and videos

    A full deletion request normally can't be done without closing your account and losing everything you uploaded. Vimeo may also satisfy a deletion request by de-identifying or aggregating your data rather than erasing it, and data in backups and archives is excluded.

    Deleting all data will typically require the deletion of your account, along with all content, including your videos.

  6. + ADDEDBrowser opt-out signals don't cover everything

    Vimeo says it honors Global Privacy Control signals, but only for cookie-based data. To stop targeting based on things like your email address you have to file a separate request through a webform. The cookie opt-out also has to be set on every site, app, browser, and device, and is lost if you clear cookies.

    Due to technical limitations, we are unable to apply GPC signals to non-cookie PI

  7. + ADDEDData can come from other people, not just you

    Vimeo says it collects information about you from vendors, advertising partners, affiliates, other third parties, and other users — including people who upload videos you appear in.

    other users (e.g. users who upload content you appear in), and other third parties

  8. + ADDEDYour data transfers if the company is sold

    Vimeo reserves the right to hand over all this information in a merger, restructuring, or sale of the business, including during due diligence before any deal closes.

    We also reserve the right to disclose and transfer all such information in connection with a merger, consolidation, restructuring, the sale of substantially all of our interests and/or assets or other corporate change, and during the course of any due diligence process

  9. + ADDEDRequests can be charged for or refused

    Vimeo says it usually won't charge, but it may charge a fee or turn down a request it considers excessive, repetitive, unfounded, or overly burdensome. It says it will explain why and give you a cost estimate before charging.

    charge a reasonable fee, or refuse to act upon a request, if your request is excessive, repetitive, unfounded, or overly burdensome

  10. + ADDEDPeople in states without privacy laws get no guarantees

    If your state hasn't passed one of the listed privacy laws, Vimeo says it will consider your request but decides at its own discretion how to handle it.

    For residents of states without Consumer privacy rights, we will consider requests but reserve the right to apply discretion in how we process such requests.

  11. + ADDEDNevada opt-out is a form with no verification process yet

    Vimeo says it doesn't currently sell "covered information" under Nevada law. Nevada residents who want to opt out of future sales submit a name and email through a Google Form; Vimeo says it will build an identity-verification process and let people finish the opt-out only if its plans change.

    At that time, we will create a process for verifying your identity and providing an opportunity to verified consumers to complete their opt-out.

  12. + ADDEDSome protective statements

    Vimeo states it does not knowingly sell or share data of anyone under 16, does not disclose data to third parties for their own direct marketing under California's "Shine the Light" law, and does not do profiling or automated decision-making that would require opt-out rights. California residents under 18 can ask to have content they posted removed.

    we do not knowingly Sell or Share the PI of Consumers under the age of 16

Full text changes

COLOUR MARKS THE SEVERITY OF A FLAGGED CLAUSE · + AND − MARK ADDED AND REMOVED

1⌘Ctrlk
2
3- [Home](https://vimeo.com/legal/home)
4- [Terms](https://vimeo.com/legal)
5- [Policies](https://vimeo.com/legal/policies)
6- [Transparency](https://vimeo.com/legal/transparency)
7
81. [Terms](https://vimeo.com/legal)
92. [Privacy](https://vimeo.com/legal/privacy)
10
11## U.S. State Privacy Notice
12
13Last Updated: February 24, 2025
14
15This U.S. State Privacy Notice (the "**Notice**") applies to "**Consumers**" as defined under the California Consumer Privacy Act (the "**CCPA**"), the Colorado Privacy Act (the "**CPA**"), Connecticut's Act Concerning Personal Data Privacy, and Online Monitoring, the Delaware Personal Data Privacy Act, the Indiana Consumer Data Protection Act, the Iowa Consumer Data Protection Act, the Kentucky Consumer Data Privacy Act, the Nebraska Data Privacy Act, the New Hampshire Privacy Act, the New Jersey Data Protection Act (the "**NJDPA**"), the Maryland Online Data Privacy Act, the Minnesota Consumer Data Privacy Act, the Montana Consumer Data Privacy Act, Chapter 603A of the Nevada Revised Statutes, the Oregon Consumer Privacy Act ("**OCPA**"), the Texas Data Privacy and Security Act ("**TDPSA**"), the Utah Consumer Privacy Act, the Virginia Consumer Data Protection Act, and all laws implementing, supplementing or amending the foregoing, including regulations promulgated thereunder (collectively, "**U.S. Privacy Laws**"), and forms part of Vimeo's [Privacy Policy](https://vimeo.com/legal/privacy/policy). In the event of a conflict between any other Vimeo policy, statement, or notice and this Notice, this Notice will prevail as to Consumers and their rights under the applicable state privacy law. Capitalized terms used but not defined herein will have the meanings given to them in Vimeo's [Privacy Policy](https://vimeo.com/legal/privacy/policy).
16
17- **Section 1** of this Notice provides notice of our data practices, including our collection, use, and disclosure of Consumer personal information (which shall include reference to similar terms such as personal data, which we refer to herein as "**PI**").
18
19- **Section 2** of this Notice provides information regarding Consumer rights and how you may exercise them.
20
21- **Section 3** of this Notice provides additional information for California residents.
22
23- **Section 4** of this Notice provides additional information for Nevada residents.
24
25- **Section 5** of this Notice provides our contact information.
26
27This Notice does not apply to data that is not treated as personal information or personal data under U.S. Privacy Laws or to the extent the data is subject to an exemption under U.S. Privacy Laws. This Notice also does not apply to information collected by third-party content, websites, applications, platform, code (e.g., plug-ins, application programming interfaces, and software development kits), and certain cookies and other tracking technologies.
28
29## 1\. Description of Data Practices
30
31The description of our data practices in this Notice covers the twelve (12) months prior to the "Last Updated" date and will be updated at least annually. This Notice also applies to our current data practices such that it is also meant to provide you with "notice at collection." For any new or substantially different processing activities not described in this Notice, we will notify you as required by U.S. Privacy Laws, including by either providing additional information at the point of collection, or by updating this Notice.
32
33### A. PI Collection, Use, & Disclosures
34
35In general, we collect, retain, use, and disclose your PI (including the categories of PI shown in the table below) in order to provide our services and operate our business, which include both the business purposes and commercial purposes described in Vimeo's [Privacy Policy](https://vimeo.com/legal/privacy/policy), including in the "[How We Use Your Data](https://vimeo.com/legal/privacy/policy)" section (collectively, "**Processing Purposes**"). This may include disclosing or otherwise making PI available to our vendors that perform services for us, such as those authorized vendors described in "[With Whom We Share Your Data](https://vimeo.com/legal/privacy/policy)" (including "Service Providers" and "Processors" defined under U.S. Privacy Laws) ("**Vendors**").
36
37Our business purposes also include the disclosure of PI to certain recipients, such as:
38
39- Vendors in furtherance of the Processing Purposes.
40
41- You, or other parties at your direction or through your intentional action.
42
43- Assignees as part of a Business Transaction (defined below) where another party assumes control over all or part of our business.
44
45- The government or private parties to comply with law or legal process.
46
47- In addition, our Vendors and the other recipients listed in the below table may, subject to contractual restrictions imposed by us and/or legal obligations, also use and disclose your PI for business purposes. For example, our Vendors and the other categories of recipients listed in the table below may engage subcontractors to enable them to perform services for us or process for our business purposes.
48
49Some of the Processing Purposes, as we discuss below the table, implicate "Sale," "Sharing," and or "Targeted advertising." For more details on the meaning of Sale, Sharing, and Targeted Advertising, and how to opt out of them, please visit the [Do Not Sell/Share/Target](https://vimeo.com/legal/privacy/us-state-notice) section below.
50
51The table below outlines the categories of PI (including examples) and categories of recipients also corresponding to each category of PI. The right column states the categories of recipients that receive those specific categories of PI and Sensitive PI as part of disclosures for business purposes, as well as disclosures which may be considered a Sale or Sharing under certain U.S. Privacy Laws:
52
53**Category of PI**
54
55**Categories of Recipients**
56
57Identifiers (such as account name, email address, IP address, cookie ID)
58
59Disclosures for business purposes:
60
61- Software and other business Vendors ("**Business Vendors**")
62
63- Marketing Vendors
64
65- Subsidiaries and affiliates ("**Affiliates and Related Entities**")
66
67Sale/Sharing: Third-Party Digital Businesses
68
69Personal Records (such as address, contact information, payment card information)
70
71Disclosures for business purposes:
72
73- Business Vendors
74
75- Marketing Vendors
76
77- Fraud prevention partners
78
79- Affiliates and related entities
80
81Sale/Sharing: Third-Party Digital Businesses
82
83Personal Characteristics or Traits (such as pronouns)
84
85Disclosures for business purposes:
86
87- Business Vendors
88
89- Marketing Vendors
90
91- Fraud prevention partners
92
93- Affiliates and related entities
94
95Sale/Sharing: N/A
96
97Transaction / Commercial Information (such as products or services used, purchased, or considered; and other purchasing or consuming histories or tendencies)
98
99Disclosures for business purposes:
100
101- Business Vendors
102
103- Marketing Vendors
104
105- Affiliates and Related Entities
106
107Sale/Sharing: Third-Party Digital Businesses
108
109Internet Usage Information (such as search, browsing history, and other interactions with the Service)
110
111Disclosures for business purposes:
112
113- Business Vendors
114
115- Marketing Vendors
116
117- Affiliates and Related Entities
118
119Sale/Sharing: Third-Party Digital Businesses
120
121Location Data (such as where you enable location-based features on your device, or where we may infer your rough location (such as zip code) based on IP address as part of the Service)
122
123Disclosures for business purposes:
124
125- Business Vendors
126
127- Marketing Vendors
128
129- Affiliates and Related Entities
130
131Sale/Sharing: Third-Party Digital Businesses
132
133Audiovisual and Similar Information (such as customer service and sales call recordings)
134
135Disclosures for business purposes:
136
137- Business Vendors
138
139- Marketing Vendors
140
141- Affiliates and Related Entities
142
143Sale/Sharing: N/A
144
145Professional or Employment Information (such as your title and affiliated organization)
146
147Disclosures for business purposes:
148
149- Business Vendors
150
151- Marketing Vendors
152
153- Affiliates and Related Entities
154
155Sale/Sharing: N/A
156
157Inferences from PI Collected (Inferences we make about you or your interests using PI we have collected)
158
159Disclosures for business purposes:
160
161- Business Vendors
162
163- Marketing Vendors
164
165- Affiliates and Related Entities
166
167Sale/Sharing: Third-Party Digital Businesses
168
169Account Information and Password\* (we store your account log-in in combination with a password in our systems)
170
171Disclosures for business purposes:
172
173- Business Vendors
174
175- Affiliates and Related Entities
176
177Sale/Sharing: N/A
178
179Communication Content\* (such as when you send a message to another Vimeo user on the platform)
180
181Disclosures for business purposes:
182
183- Business Vendors
184
185- Affiliates and Related Entities
186
187Sale/Sharing: N/A
188
189\*considered Sensitive PI or Sensitive Data under certain of the U.S. Privacy Laws, which we refer to in this Notice as "**Sensitive PI**"
190
191We also reserve the right to disclose and transfer all such information in connection with a merger, consolidation, restructuring, the sale of substantially all of our interests and/or assets or other corporate change, and during the course of any due diligence process (collectively, "**Business Transactions**").
192
193As permitted by applicable law, we do not treat deidentified data or aggregate consumer information as PI, and we may elect not to treat publicly available information as PI.
194
195#### **Processing Purposes Implicating Sale, Sharing, Targeted Advertising, and Profiling**
196
197When you provide us PI for the following Processing Purposes, we may use and disclose certain PI that you provide for such purposes in a way that may constitute Selling and/or Sharing, as well as Processing of your PI for purposes of Targeted Advertising.
198
199- Operating our services
200
201- Research, development, and analytics
202
203- For purposes disclosed at the time you provide your PI
204
205- For our legitimate business purposes that are compatible with the purpose of collecting your PI and that are not prohibited by law
206
207Processing Purposes that may implicate Selling and/or Sharing, as well as Processing of your PI for Targeted Advertising include the following:
208
209- Customizing your experience
210
211- Marketing and advertising
212
213- For purposes disclosed at the time you provide your PI
214
215- For our legitimate business purposes that are compatible with the purpose of collecting your PI and that are not prohibited by law
216
217### B. Sources
218
219We collect PI directly from you or your device, Vendors, Third-Party Digital Businesses, our Affiliates and Related Entities, other users (e.g. users who upload content you appear in), and other third parties.
220
221### C. Retention
222
223Because there are so many different types of PI in each category, and various use cases for different types of data, we are unable to provide data retention ranges based on categories of PI in a way that would be meaningful and transparent to you. Actual retention periods depend upon how long we have a legitimate purpose for the retention consistent with the collection purposes and applicable law. For instance, we may maintain business records for so long as relevant to our business, and may have a legal obligation to hold PI for so long as potentially relevant to prospective or actual litigation or government investigation (see Vimeo's [Privacy Policy](https://vimeo.com/legal/privacy/policy) for additional information). We apply the same criteria for determining if we have a legitimate purpose for retaining your PI that you ask us to delete. If you make a deletion request, we will conduct a review of your PI to confirm if legitimate ongoing retention purposes exist, will limit the retention to such purposes for so long as the purpose continues, and will respond to you with information on any retention purposes on which we rely for not deleting your PI. For more information on deletion requests see the [Right to Delete](https://vimeo.com/legal/privacy/us-state-notice) section.
224
225## 2\. Consumer Rights
226
227We provide Consumers (users who are residents of certain states, as defined above) the privacy rights described in this section. For residents of states without Consumer privacy rights, we will consider requests but reserve the right to apply discretion in how we process such requests.
228
229### A. Making a Request and Scope of Requests
230
231Any request you submit to us is subject to an identity verification process ("**Verifiable Consumer Request**") as described in the [Verifying Your Request](https://vimeo.com/legal/privacy/us-state-notice) section below.
232
233To make a request, other than a Do Not Sell/Share/Target request, please submit your request to us by one of the methods below.
234
235For instructions on how to submit a Do Not Sell/Share/Target request, please go to the [Do Not Sell/Share/Target](https://vimeo.com/legal/privacy/us-state-notice) section below.
236
237Some information we maintain about Consumers that is technically considered PI may nonetheless not be sufficiently associated with information that you provide when making your request. For example, if you provide your name and email address when making a request, we may be unable to associate that information with certain data collection on the Service such as clickstream data tied only to a pseudonymous browser ID. Where we are unable to associate such information with the information you provide, we are therefore unable to associate such information with you and cannot include such information in response to those requests. If we cannot comply with a request, we will explain the reasons in our response.
238
239We will make commercially reasonable efforts to identify PI that we collect, process, store, disclose, and otherwise use and to respond to your privacy requests. We will typically not charge a fee to fully respond to your requests; in some circumstances, the U.S. Privacy Laws permit us to, and we may, charge a reasonable fee, or refuse to act upon a request, if your request is excessive, repetitive, unfounded, or overly burdensome. If we determine that the request warrants a fee, or if we decide to refuse it, we will give you notice explaining why we made that decision in our response to you. You will be provided a cost estimate and the opportunity to accept such fees before we will charge you for responding to your request.
240
241### B. Verifying Your Request
242
243When you make a request, we will verify that you are the person you say you are, or, if you are seeking information on behalf of another person, that you are authorized to make the request on their behalf (see our "[Authorizing an Agent](https://vimeo.com/legal/privacy/us-state-notice)" section immediately below). In addition, we will compare the information you have provided to ensure that we maintain PI about you in our systems. As an initial matter, we ask that you provide us with, at a minimum, full name and email address. Depending on the nature of the request and whether we have the email address you have provided in our systems, we may request further information from you in order to verify that you are the Consumer making the request. We will review the information provided as part of your request, and may ask you to provide additional information via e-mail or other means to complete the verification process. We will not fulfill your Right to Know (Categories), Right to Know (Specific Pieces), Right to Delete, or Right to Correction request unless you have provided sufficient information for us to reasonably verify you are the Consumer that is the subject of the request. The same verification process does not apply to opt-outs of Sale or Sharing, or limitation of Sensitive PI requests, but we may apply authentication measures if we suspect fraud (such as verifying access to the email provided when making the request).
244
245The verification standards we are required to apply for each type of request vary. We verify your categories requests and certain deletion and correction requests (e.g., those that are less sensitive in nature) to a reasonable degree of certainty, which may include matching at least two data points provided by you with data points maintained by us, which we have determined to be reliable for the purpose of verifying you. For certain deletion and correction requests (such as those that relate to PI that is more sensitive in nature) and for specific pieces requests, we apply a verification standard of reasonably high degree of certainty. This standard includes matching at least three data points provided by you with data points maintained by us, which we have determined to be reliable for the purpose of verifying you, and may include obtaining a signed declaration from you, under penalty of perjury, that you are the individual whose PI is the subject of the request.
246
247If we cannot verify you in respect of certain requests, such as if you do not provide the requested information, we will still take certain action as required by certain U.S. Privacy Laws. For example, if you are a California Consumer:
248
249- If we cannot verify your deletion request, we will refer you to this Notice for a general description of our data practices.
250
251- If we cannot verify your specific pieces request, we will treat it as a categories request.
252
253### C. Authorizing an Agent
254
255You may designate an authorized agent to submit your Consumer request on your behalf. An authorized agent submitting a request on your behalf must have sufficient evidence that you have authorized that person to submit the request on your behalf, which may include, at a minimum, evidence of signed permission to submit the request and, as permitted under the U.S. Privacy Laws, we also may require the Consumer to either verify their own identity or directly confirm with us that they provided the agent permission to submit the request.
256
257### D. Your Consumer Privacy Rights
258
259Under the applicable U.S. Privacy Laws, Consumers have the following rights, which can be exercised directly or, in certain cases, through an authorized agent:
260
261#### **i. Right to Limit Sensitive PI Processing**
262
263You may, depending on your state of residency, have the right to direct businesses to limit their use and disclosure of Sensitive PI if we use or disclose it beyond certain internal business purposes. Where applicable, we will treat such a request as a revocation of any consent that you may have provided to your processing of Sensitive PI.
264
265#### **ii. Right to Know**
266
267**Categories:** If you are a California resident, you have the right to request that we provide certain information to you about our collection, use, and disclosure of your PI over the 12-month period prior to the request date related to categories of PI. You can request that we confirm whether we are processing your personal information, and disclose to you: (1) the categories of PI we collected about you; (2) the categories of sources for the PI; (3) our business or commercial purpose for collecting or selling that PI; (4) a list of the categories of PI disclosed for a business purpose in the prior 12 months and, for each category of PI, the categories of recipients; and (5) a list of the categories of PI sold or shared about you in the prior 12 months and, for each, the categories of recipients
268
269**Specific Pieces:** You have the right to request a transportable copy of the specific pieces of PI we collected about you. In some states, such as California, this includes the right to PI collected in the 12-month period preceding your request. Please note that PI is retained by us for various time periods, so there may be certain information that we have collected about you that we do not retain for 12 months (and thus, it would not be able to be included in our response to you). Based on your state of residence, we may apply a limit on the number of "right to know" requests you make over a particular time period, as permitted under U.S. Privacy Laws.
270
271#### **iii. Right to Confirm**
272
273You have the right to confirm if we are processing your PI and to access your PI, as just stated in the two immediately prior paragraphs.
274
275#### **iv. Right to Delete**
276
277You have the right to request that we delete some or all of the PI that we have about you. Deleting all data will typically require the deletion of your account, along with all content, including your videos. After we confirm that your deletion request is a Verifiable Consumer Request, subject to permitted retention exceptions, we will carry out one or more of the following: (i) permanently erase your PI on our existing systems with the exception of archived or back-up systems, (ii) de-identify your PI, or (iii) aggregate your PI with other information. Where legal exceptions will apply to your request for deletion, we will tell you which one(s) and will limit retention to the permitted purpose(s) under U.S. Privacy Laws.
278
279#### **v. Right to Correct**
280
281You have the right to request that we correct inaccuracies that you find in your PI maintained by Vimeo.
282
283Under the various U.S. Privacy Laws, Consumers have the right to opt out of certain processing activities. California and certain other states have opt-outs specific to Targeted Advertising activities - which California's law refers to as "cross-context behavioral advertising," and others simply as Targeted Advertising - which involve the use of PI from different businesses or services to target advertisements to you. California provides Consumers the right to opt out of Sharing, which includes providing or making available PI to third parties for such Targeted Advertising activities, while other states provide Consumers the right to opt out from processing PI for Targeted Advertising more broadly. There are broad and differing concepts of the Sale of PI under the various U.S. State Privacy Laws, all of which, at a minimum, require providing or otherwise making available PI to a third party.
284
285"**Third-Party Digital Businesses**" are third-party business partners, including social media platforms and other tech companies that offer digital advertising services, which may operate tracking technologies that collect PI about you on our Services ("**cookie PI**"), or otherwise collect and process PI that we make available about you, including digital activity information and traditional PI such as email address ("**non-cookie PI**"). We will treat PI collected by Third-Party Digital Businesses as implicating Sale, Sharing, and/or processing for Targeted Advertising where required, and accordingly apply opt-out requests that you make to such activities, as we describe in further detail below.
286
287When you opt out pursuant to the instructions below, it will have the effect of opting you out of Sale, Sharing, and processing of your PI for Targeted Advertising, such that our opt-out process is intended to combine all of these state opt-outs into a single opt-out. Instructions for opting out are below. Please note that there are distinct instructions for opting out of cookie PI and non-cookie PI, which we explain further, below.
288
289Opt-out for non-cookie PI: If you would like to submit a request to opt out of our processing of your non-cookie PI (e.g., your email address) for Targeted Advertising, or opt out of the Sale or Sharing of such data, make an opt-out request [here](https://vimeo.com/help/contact).
290
291Opt-out for cookie PI: If you would like to submit a request to opt out of our processing of your cookie-related PI for Targeted Advertising, or opt out of the sale/sharing of such PI, you can exercise an opt-out request. A tool is available on our website, which you can access via the "Your Privacy Choices" link in the footer to exercise your opt-out rights. You must exercise your preferences on each of our websites and apps you visit, from each browser you use, and on each device that you use. Since your browser opt-out is designated by a cookie, if you clear or block cookies, your preferences will no longer be effective and you will need to enable them again.
292
293Some U.S. Privacy Laws require us to state that we do not knowingly Sell or Share the PI of Consumers under the age of 16.
294
295**Global Privacy Control or "GPC"**
296
297Some U.S. Privacy Laws require businesses to process GPC signals, which are referred to in some states as opt-out preference signals. GPC signals are signals sent by a platform, technology, or mechanism, enabled by individuals on their devices or browsers, that communicate the individual's choice to opt out of Sale, Sharing, and/or Targeted Advertising or limit the use and disclosure of their Sensitive PI, such that the GPC signal effectively automatically communicates such requests. To use GPC, you can download an internet browser or a plugin to use on your current internet browser and follow the settings to enable the OOPS/GPC. To our knowledge, we have configured the settings of our consent management platform to receive and process GPC signals as required by the U.S. Privacy Laws on our websites. We will apply GPC signals as Do Not Sell/Share requests as to cookie PI. Due to technical limitations, we are unable to apply GPC signals to non-cookie PI; however, you can make a DNS/Share request as to non-cookie PI at our webform as described above. Notably, when you are visiting our website on a particular device and browser, we will apply the GPC signal and corresponding Do Not Sell/Share/Target as to cookie-PI only to that specific device and browser. You must re-enable GPC if you visit our website on a different device and/or browser.
298
299We are required by certain U.S. Privacy Laws to state that we do not: (1) charge any additional fees for use of our websites if you have enabled GPC; (2) change your experience with our websites if you use GPC; or (3) display a notification, pop-up, text, graphic, animation, sound, video, or any interstitial in response to GPC (except that we may from time-to-time display on our website or consent management platform that you have enabled GPC).
300
301**Automated Decision Making and Profiling**
302
303You have the right to opt out of profiling in furtherance of decisions that produce legal or similarly significant effects.
304
305We do not believe we carry out profiling or automated decision-making activities in a manner that requires us to provide opt-out rights. If we change our practices, we will change this policy and provide you with the right to opt out of such activities as required by the applicable U.S. Privacy Laws, subject to any applicable exceptions.
306
307#### **vii. Right to Non-Discrimination**
308
309You have the right not to receive discriminatory treatment, in a manner prohibited by U.S. Privacy Laws, for the exercise of your privacy rights.
310
311#### **viii. Right to Appeal**
312
313Residents of certain states have the right to appeal a decision regarding a privacy request. You can exercise this right by responding to the email we send containing our response to your request, and following the instructions in such email. As of the Last Updated date, residents of Colorado, Connecticut, and Virginia have this right.
314
315## 3\. Additional Notices for California Residents
316
317### A. Shine the Light Law
318
319Under California's "Shine the Light" law, California residents have the right to opt out of disclosing information to third parties for the purpose of allowing such third parties to directly market their products and services. At this time, we do not engage in this type of disclosure.
320
321### B. California Minors
322
323Any California residents under the age of eighteen (18) who have registered to use our online services, and who posted content or information on the service, can request removal by contacting us at [\[email protected\]](https://vimeo.com/cdn-cgi/l/email-protection#e797958e9186849ea7918e8a8288c984888a), detailing where the content or information is posted and attesting that you posted it. We will then make reasonably good faith efforts to remove the post from prospective public view or anonymize it, so the minor cannot be individually identified to the extent required by applicable law. This removal process cannot ensure complete or comprehensive removal. For instance, third parties may have republished or archived content by search engines and others that we do not control.
324
325## 4\. Additional Notices for Nevada Residents
326
327Nevada residents have the right to opt out of the sale of certain "covered information" collected by operators of websites or online services. We currently do not sell covered information, as "sale" is defined by such law, and we don't have plans to sell this information. However, if you would like to opt out of the future sale of personal information covered by the Act, you can provide us with your name and email address [here](https://forms.gle/Fz9PvcKHMdT7WTer5). You are responsible for updating any change in your email address by the same method and we are not obligated to cross-reference other emails you may have otherwise provided us for other purposes. We will maintain this information and contact you if our plans change. At that time, we will create a process for verifying your identity and providing an opportunity to verified consumers to complete their opt-out.
328
329## 5\. Contact Us
330
331If you have any questions about Vimeo's [Privacy Policy](https://vimeo.com/legal/privacy/policy), this Notice or practices described in it, you may contact us at:
332
333_**Vimeo.com, Inc.**_ _Attention: Data Protection Officer_ _330 West 34th Street, 10th Floor_ _New York, New York 10001_ [_\[email protected\]_](https://vimeo.com/cdn-cgi/l/email-protection#4737352e3126243e07312e2a22286924282a)
334
335- [1\. Description of Data Practices]()
336- [A. PI Collection, Use, & Disclosures]()
337- [B. Sources]()
338- [C. Retention]()
339- [2\. Consumer Rights]()
340- [A. Making a Request and Scope of Requests]()
341- [B. Verifying Your Request]()
342- [C. Authorizing an Agent]()
343- [D. Your Consumer Privacy Rights]()
344- [3\. Additional Notices for California Residents]()
345- [A. Shine the Light Law]()
346- [B. California Minors]()
347- [4\. Additional Notices for Nevada Residents]()
348- [5\. Contact Us]()