My Disney Experience

"Location information, including precise or approximate location information provided by a mobile or other device interacting with one of our sites, applications, or physical properties (including through beacon technologies), or associated with your IP address or other online or device identifier, where we are permitted by law to process this information."

Disney collects precise location data through multiple methods including GPS, beacon technologies, IP addresses, and device identifiers, covering both digital and physical properties like theme parks and stores.

"Other members of The Walt Disney Family of Companies may access your information where they perform services on behalf of the data controllers (as data processors) and, unless prohibited under applicable law, for use on their own behalf (as data controllers) for the purposes described in this policy."

Your data is shared across dozens of Disney subsidiaries and affiliates (Disney+, Hulu, ESPN, Marvel, ABC, etc.), each of which can use your data as independent data controllers for their own purposes.

"Usage, viewing, technical, and device data when you visit our sites, use our applications on third-party sites or platforms, or open emails we send, or connect with our wireless Internet access services and other similar technologies, including your browser or device type, unique device identifier, and IP address."

Disney collects device identifiers, browser fingerprinting data, and activity across its vast portfolio of sites, apps, third-party platforms, emails, and physical properties, enabling comprehensive cross-service user profiling.

"We will retain your personal information for the length of time needed to fulfill the purposes outlined in this privacy policy unless a longer retention period is required or permitted by law."

The retention policy provides no concrete timelines and allows indefinite retention as long as Disney deems it necessary to fulfill any purpose in the broad policy, or as 'permitted by law.'

"From time to time, we may change this privacy policy to accommodate new technologies, industry practices, regulatory requirements or for other purposes. We will provide notice to you if these changes are material and, where required by applicable law, we will obtain your consent."

Disney reserves the right to change the privacy policy for broad reasons, only obtaining consent 'where required by applicable law' — meaning in most jurisdictions, changes take effect with mere notice via email or website posting.

"We collect information through a variety of technologies, such as cookies, Flash cookies, pixels, tags, software development kits, application program interfaces, and Web beacons, including when you visit our sites and applications or use our applications on third-party sites or platforms using one or more devices, whether or not you are logged in or registered."

Disney deploys a wide array of tracking technologies including SDKs, pixels, and web beacons to collect device and behavioral data even when users are not logged in, across both Disney and third-party platforms.