Privacy Policy (original) (raw)

Last Updated/Effective Date: July 1, 2024

Table of Contents

  1. SCOPE AND APPLICATION: What and who this Policy covers
  2. COLLECTION OF INFORMATION: The sources of and methods by which we, our service providers, and our advertisers collect information from and about you, including information about your interaction with the Company Services
  3. USE AND DISCLOSURE: How we use the information we collect from and about you, and who we might share it with and why
  4. SECURITY: How we protect your information from loss or misuse
  5. USER ACCESS AND CONTROL: How you can access and control the information we maintain about you
  6. OTHER IMPORTANT INFORMATION: Other things you should know about this Policy and how we handle your information
  7. CONTACT US: How to contact Company about this Policy
  8. CALIFORNIA CONSUMER PRIVACY ACT NOTICE: Other things you should know if you reside in California
  9. FOR CONSUMERS IN VIRGINIA, COLORADO, CONNECTICUT, AND OTHER U.S. STATES WITH SIMILAR PRIVACY LAWS: Other things you should know if you are a consumer residing in Virginia, Colorado, Connecticut, or other states with similar privacy laws

1. SCOPE AND APPLICATION

EHM Productions, Inc. ("Company" or "we") wants you to be familiar with how we collect, use and disclose information from and about you. This Privacy Policy describes our practices in connection with information collected through services such as websites, mobile sites, applications ("apps"), and widgets that link to or are otherwise subject to this Privacy Policy (collectively, the "Company Services"). A list of our affiliated companies ("Company Affiliates") is available at FoxCorporation.com.

Certain state privacy laws require particular disclosures in privacy policies. California residents, please see the California Consumer Privacy Act Notice in Section 8 below. Consumers in Virginia, Colorado, Connecticut, and other states with similar privacy laws, please see Section 9 below. By using Company Services, you agree to the terms and conditions of this Privacy Policy.

As set forth in our Terms of Use at https://www.tmz.com/terms/, the Company Services are for a general audience, are not targeted to children, and do not knowingly collect personal information from children under 16 years of age.

This Privacy Policy applies to all users, including both those who use the Company Services without being registered with or subscribing to a Company Service and those who have registered with or subscribed to a Company Service.

This Privacy Policy applies to Company's collection, use, and disclosure of your personal information (i.e., information that identifies a specific person, such as full name or email address). It also describes generally Company's practices for handling non-personal information (for example, interests, demographics and services usage). Please note that the information that we may collect, use, and/or disclose varies based upon a user's interactions with the Company Services.

2. COLLECTION OF INFORMATION

Depending on your interactions with us, Company and our service providers may collect the following information from and about you:

Registration Information is information you submit to register for a Company Service, for example, to receive a newsletter, or enter a contest or sweepstakes. Registration Information also may include, for example, name, email address, gender, zip code and birthday.

Public Information and Posts consist of comments or content that you post to the Company Services and the information about you that accompanies those posts or content, which may include a name, user name, comments, likes, status, profile information and picture. Public Information and Posts are always public, which means they are available to everyone and may be displayed in search results on external search engines.

Information from Social Media. If you access or log-in to a Company Service through a social media service or connect a Company Service to a social media service, information we collect may also include your user ID and/or user name associated with that social media service, any information or content you have permitted the social media service to share with us, such as your profile picture, email address or friends lists, and any information you have made public in connection with that social media service. When you access the Company Services through social media services or when you connect a Company Service to social media services, you are authorizing Company to collect, store, and use that information and content in accordance with this Privacy Policy.

Activity Information. When you access and interact with the Company Services, Company and its service providers may collect certain information about those visits. For example, in order to permit your connection to the Company Services, our servers receive and record information about your computer, device, and browser, including potentially your IP address, browser type, and other software or hardware information. If you access the Company Services from a mobile or other device, we may collect a unique device identifier assigned to that device, or other transactional information for that device. In certain circumstances, we also may collect geolocation data (including your precise location).

Cookies and other tracking technologies (such as browser cookies, pixels, beacons, local storage, and other mechanisms) use various approaches to collect and store data. Some of these technologies store data in the browser or on your device. Other technologies may use network-related or other information to recognize your device (e.g., IP address). Company's websites, apps and other services may use these technologies, for example, when you first request a web page and to store data on your computer or other device so the website or app can access information when you make subsequent requests for pages from that service. Depending on your interactions with us, these technologies may also be used to collect and store information about your usage of the Company Services, such as pages you have visited, search history, and the video and other content you have viewed.

Other parties that support the Company Services, for example, by serving advertisements, providing analytics, or other services, may also use these technologies to collect similar information when you use the Company Services or other parties' services. Those other parties may also use these technologies, along with activity information they collect, to recognize you across the devices you use, such as a mobile device and a laptop or other computer. In some circumstances, their use is governed by the privacy policies of the parties using such technologies. For more information about advertising networks and similar entities that use these technologies, including your choices with respect to them, see the section entitled "To deliver relevant advertisements," below.

Your browser may be initially set to accept cookies, but you can change your settings to notify you when a cookie is being set or updated, and to block cookies altogether. Please consult the "Help" section of your browser for more information, including on how to clear data from local storage and, depending on your browser, how to turn off other data collection by the browser. For more information about Google Analytics, please review the site "How Google uses information from sites or apps that use our services," located at www.google.com/policies/privacy/partners/. To opt out of Google Analytics specifically, please go to https://tools.google.com/dlpage/gaoptout. Please note that by blocking any or all cookies you may not have access to certain features, content or personalization available through the Company Services.

Information from Other Sources. We may supplement the information we collect with information from other sources, such as publicly available information about your online and offline activity from social media services, advertising technology companies, advertisers, commercially available sources, and information from our Company Affiliates or business partners.

Depending on your interactions with us, Company may not have collected information from you for each of the categories above.

"Do Not Track". At this time we do not respond to the "Do Not Track" signal, as we await the work of interested stakeholders and others to develop standards for how the "Do Not Track" signal should be interpreted.

3. USE AND DISCLOSURE

We may use and disclose some or all of the information we collect from and about you for the purposes listed below. Please note that these uses and disclosures may vary based on your interactions with us.

To provide the Company Services. We use information we collect from and about you to provide the Company Services. This may include:

To allow service providers to assist us in providing and managing the Company Services. Information we collect from and about you may be made available to certain service providers, such as contractors, analytics and other measurement companies, and agents or sponsors, who help us analyze and understand your use of the Company Services, and manage and/or provide the Company Services.

To allow social sharing functionality. If you log in with or connect a social media service account with Company Services, we may share your user name, picture, and likes, as well as your activities and comments with other Company Services users and with your friends associated with your social media service. We may also share the same information with the social media service provider. By logging in with or connecting your Company Services account with a social media service, you are authorizing us to share certain information we collect from and about you with the social media service provider, other users and your friends and you understand that the social media service’s use of the shared information will be governed by the social media service’s privacy policy. If you do not want your personal information shared in this way, please do not connect your social media service account with your Company Services account and do not participate in social sharing on Company Services.

To deliver video content. In the ordinary course of our business, we may share information that we collect from or about you with other parties in order to process your requests and fulfill your orders for video content offered through the Company Services, including, for example, to provide you with access to localized content and video content recommendations.

To provide co-branded services and features. We may offer co-branded services or features, such as contests, sweepstakes or other promotions together with other companies (“Co-Branded Services”). These Co-Branded Services may be hosted on Company Services or on that other party’s service. By virtue of these relationships, we may share information you submit in connection with the Co-Branded Service with that party. That other party’s use of your information will be governed by its privacy policy.

To deliver relevant advertisements. Company and our service providers may use information we collect from and about you as described in this Privacy Policy to deliver and measure relevant, more personalized ads to you when you use the Company Services or another service (on any of your devices). This may include, for example, sharing certain information with advertising technology companies (e.g., identity partners), such as an advertising identifier for your device, IP address, or a "hash" of an identifier (i.e., a value generated using a cryptographic hash algorithm). In some instances, these entities may return an online identification code that we may store in a first party cookie, or other similar technology, for our use in online and cross-channel advertising and it may be shared with advertising companies to enable interest-based and targeted advertising. To opt out of this use, please go to https://privacy.tmz.com/main/web/main for TMZ and https://privacy.toofab.com/main/web/main for TooFab.

As noted above, advertising technology companies and advertisers may use cookies and similar technologies to collect information such as demographic information, inferred interests, aggregated information, and information about the different devices and/or browsers you use and your activity on such devices and browsers, to assist them in delivering advertising that is more relevant to your interests. Such information may also be used to deliver more relevant advertising to you across marketing channels, including email. If you wish to opt out of tailored advertising in Company Services, please go to http://privacy.tmz.com/main/web/main for TMZ and https://privacy.toofab.com/main/web/main for TooFab. To find out more about advertising networks and similar entities that use these technologies, see https://youradchoices.com/. In addition, for more information about advertising industry opt outs, please visit http://optout.aboutads.info/#/ or http://optout.networkadvertising.org/# on each of your devices and browsers, and, for mobile devices, you can use the AppChoices app at https://youradchoices.com/appchoices. In addition, to opt out in mobile apps, you may use your device’s setting to opt out of ads personalization or similar settings. Similarly, to opt out on connected TVs that support opt outs, please use the device setting “opt out of ads personalization,” “Interest-based Ads,” or equivalent settings on your device. Please note that opting out does not mean that you will stop seeing all ads.

To contact you. Company may periodically send promotional materials or notifications related to the Company Services. If you want to stop receiving promotional materials, you can follow the unsubscribe instructions at the bottom of each email. There are certain service notifications and other non-promotional emails that you may not opt-out of, such as notifications of changes to the Company Services or policies. If you have installed a mobile app and you wish to stop receiving push notifications, you can change the settings either on your mobile device or through the app.

To share with our Company Affiliates. Company may share information we collect from and about you as described in this Privacy Policy with Company Affiliates for the purposes described in this Privacy Policy. A link to a website that lists Company Affiliates can be found at the beginning of this policy. Users who visit Company Affiliates’ services should still refer to their separate privacy policies, which may differ in some respects from this Privacy Policy.

To share with business partners. Company may share information we collect from and about you as described in this Privacy Policy with business partners to permit them to send you marketing communications consistent with your choices.

To protect the rights of Company and others. There may be instances when Company may use or disclose information we collect from and about you as described in this Privacy Policy, including situations where Company has a good faith belief that such use or disclosure is necessary in order to: (i) protect, enforce, or defend the legal rights, privacy, safety, or property of company or our Company Affiliates or our or their employees, agents and contractors (including enforcement of our agreements and our terms of use); (ii) protect the safety, privacy, and security of users of the Company Services or members of the public; (iii) protect against fraud or for risk management purposes; (iv) comply with the law or legal process; or (v) respond to requests from public and government authorities.

To complete a merger or sale of assets or other corporate transaction. If Company sells all or part of its business or makes a sale or transfer of its assets or is otherwise involved in an acquisition, reorganization, merger or transfer of all or a part of its business (including in connection with a bankruptcy or similar proceedings), or other corporate transaction, Company may transfer or disclose information we collect from and about you as described in this Privacy Policy to the party or parties involved in the transaction as part of that transaction.

Depending on your interactions with us, Company may not have collected, used, or disclosed information from or about you in each of the categories above, and to the extent that Company has disclosed information from or about you, it may not include all of the information that we collect from and about you as described in this Privacy Policy.

Please note that when the information collected from or about you does not identify you as a specific person, we may use that information for any purpose or share it with other parties, to the extent permitted by applicable law.

4. SECURITY

Company uses commercially reasonable administrative, technical, personnel, and physical measures designed to safeguard information in its possession against loss, theft and unauthorized use, disclosure, or modification. However, no one can guarantee the complete safety of your information.

5. USER ACCESS AND CONTROL

If you would like to access personal information we hold about you, delete, or correct personal information that you have previously provided directly to us, please visit https://fcprivacy.exterro.net/portal/dsar.htm?target=TMZ and submit a request. Please note that, for security reasons, we will ask you to verify your identity in order to proceed with your request. If you would like to suppress, or otherwise limit our use of your personal information, you may contact us as outlined in Section 7. In your request, please include your email address, name, address, and telephone number and specify clearly what information you would like to suppress or limit. We will try to comply with your request as soon as reasonably practicable and consistent with applicable law. Please note that, subject to applicable law, in some cases we may not comply with your request where we may require your information in order to comply with applicable law, or to protect, enforce or defend our rights or employee rights, or those of a Company Affiliate.

If you are a resident of California, please see the section entitled “California Consumer Privacy Act Notice,” below, for more information about the rights you have under California law. If you are a consumer in Virginia, Colorado, Connecticut, or other state with a similar privacy law, please see the section entitled “For Consumers in Virginia, Colorado, and Connecticut, and Other U.S. States with Similar Privacy Laws,” below, for more information about your rights under Virginia, Colorado, Connecticut, and other similar state privacy laws.

If you are under 18 and a registered user of the Company Services, you may ask us to remove content or information that you have posted to the Company Services by writing to privacy@tmz.com. Please note that your request does not ensure complete or comprehensive removal of the content or information, as, for example, some of your content may have been reposted by another user.

You may request that we not share your personal information on a going-forward basis with Company Affiliates or unaffiliated third parties for their direct marketing purposes by contacting us as outlined in Section 7. We will try to comply with your request(s) as soon as reasonably practicable and consistent with applicable law.

6. OTHER IMPORTANT INFORMATION

Updates to Privacy Policy. Company may modify this Privacy Policy. Please look at the Effective Date at the top of this Privacy Policy to see when this Privacy Policy was last revised. Any changes to this Privacy Policy will become effective when we post the revised Privacy Policy on the Company Services.

Location of Data. The Company Services are hosted in and managed from the United States. If you are a user located outside the United States, you understand and consent to having any personal information processed in the United States or in any other country in which we have facilities or in which we engage service providers. The United States and other countries’ data protection laws may not be the same as those in your jurisdiction. In certain circumstances, courts, law enforcement agencies, regulatory agencies or security authorities in the United States may be entitled to access your personal information.

Linked Services. The Company Services may be linked to sites operated by unaffiliated companies, and may carry advertisements or offer content, functionality, games, newsletters, contests or sweepstakes, or applications developed and maintained by unaffiliated companies. Company is not responsible for the privacy practices of unaffiliated companies, and once you leave the Company Services or click an advertisement you should check the applicable privacy policy of the other service.

In addition, Company is not responsible for the privacy or data security practices of other organizations, such as Meta, Instagram, X (formerly Twitter), Apple, Google, Microsoft or any other app developer, app provider, social media platform provider, operating system provider, wireless service provider, or device manufacturer, including in connection with any information you disclose to other organizations through or in connection with the Company Services.

Collection of Personal Financial Information by a Payment Service. In some cases, we may use an unaffiliated payment service to allow you to purchase a product or make payments (“Payment Service”). If you wish to purchase a product or make a payment using a Payment Service, you will be directed to a Payment Service webpage. Any information that you provide to a Payment Service will be subject to the applicable Payment Service's privacy policy, rather than this Privacy Policy. We are not responsible for any Payment Service's use of information collected through any Payment Service.

Data Retention. We will retain your information for the period necessary to fulfill the purposes outlined in this Privacy Policy unless a longer retention period is required or allowed by law.

Remember that even after you cancel your account, or if you ask us to delete your personal information, copies of some information from your account may remain viewable in some circumstances where, for example, you have shared information with social media or other services. Because of the nature of caching technology, your account may not be instantly inaccessible to others. We may also retain backup information related to your account on our servers for some time after cancellation or your request for deletion, for fraud detection or to comply with applicable law or our internal security or recordkeeping policies. It may not always be possible to completely remove or delete all of your information due to technical constraints or contractual, financial or legal requirements.

Deidentified Information. To the extent we process “deidentified” personal information, as defined under applicable law, we will maintain and use that information in deidentified form and will not attempt to reidentify the information except as permitted by applicable law.

7. CONTACT US

If you have questions about this Privacy Policy, please contact us at:

Email: privacy@tmz.com

8. CALIFORNIA CONSUMER PRIVACY ACT NOTICE

This California Consumer Privacy Act Notice Section provides information for California residents in connection with the California Consumer Privacy Act (“CCPA”). California residents who are prospective, current, or former Company employees; or contractors, emergency contacts, or beneficiaries may view our workforce-related California privacy notice at https://www.fox.com/workforce-privacy-notice/. California residents who are business consumers acting as employees, owners, directors, officers or independent contractors of an entity conducting due diligence or providing or receiving a product or service from the Company (“Business-to-Business Contacts”) may view our B2B privacy notice at https://www.tmz.com/pages/privacy-policy-b2b/.Under the CCPA, and for purposes of this Section, “Personal Information” generally means information that identifies, relates to, or describes a particular California resident and includes the categories listed below. This Section 8 provides details about the categories of Personal Information of California residents that we have collected, disclosed, or “sold” or “shared” during the last 12 months, as well as rights California residents have under California law. Please note that, depending on the California resident’s interactions with us, Company may not have collected, disclosed, or “sold” or “shared” each (or any) of these categories of Personal Information about each individual.

Categories of Personal Information Collected, Disclosed, and/or Sold or Shared:

The categories of Personal Information that we have collected, disclosed, and/or “sold” or “shared” are below, along with the categories of third parties to whom each category of Personal Information was disclosed, and/or “sold” or “shared.” Please note that we disclose some categories of Personal Information in connection with certain types of advertisements, which could be considered “selling” or “sharing” under the CCPA. Also, as explained above, depending on the California resident’s interactions with us, Company may not have collected, disclosed, or “sold” or “shared” each (or any) of these categories of Personal Information about each individual. Additionally, we do not knowingly “sell” or "share" Personal Information of minors under 16 years of age.

We have collected, disclosed, and/or "sold" or "shared" to third parties the following categories of Personal Information:

A. Identifiers, such as name, IP address, email address, and online and device identifiers

Categories of Third Parties to Whom Personal Information Is Disclosed - Service providers, Company Affiliates, and other providers or partners that support our operational business purposes

Categories of Third Parties to Whom Personal Information Is "Sold" or “Shared” - Advertising technology companies, advertisers, and Company Affiliates for the purpose of targeted advertising

B. Personal information, as defined in the California Customer Records law, such as contact and financial information

Categories of Third Parties to Whom Personal Information Is Disclosed – Service providers, Company Affiliates, and other providers or partners that support our operational business purposes

Categories of Third Parties to Whom Personal Information is "Sold" or "Shared" - N/A

C. Characteristics of protected classifications under California law, such as age or gender

Categories of Third Parties to Whom Personal Information Is Disclosed - Service providers, Company Affiliates, and other providers or partners that support our operational business purposes

Categories of Third Parties to Whom Personal Information Is "Sold" or "Shared" - Advertising technology companies, advertisers, and Company Affiliates for the purpose of targeted advertising

D. Commercial information, such as transaction information and purchase history

Categories of Third Parties to Whom Personal Information Is Disclosed - Service providers, Company Affiliates, and other providers or partners that support our operational business purposes

Categories of Third Parties to Whom Personal Information is "Sold" or "Shared" - Advertising technology companies, advertisers, and Company Affiliates for the purpose of targeted advertising

E. Internet or network activity information, such as browsing history and interactions with our websites, mobile, or connected TV applications (collectively, "Company Digital Properties")

Categories of Third Parties to Whom Personal Information Is Disclosed - Service providers, Company Affiliates, and other providers or partners that support our operational business purposes

Categories of Third Parties to Whom Personal Information is "Sold" or "Shared" - Advertising technology companies, advertisers, and Company Affiliates for the purpose of targeted advertising

H. Audio, electronic, visual and other similar information, such as call recordings

Categories of Third Parties to Whom Personal Information Is Disclosed - Service providers, Company Affiliates, and other providers or partners that support our operational business purposes

Categories of Third Parties to Whom Personal Information is "Sold" or "Shared" - N/A

I. Professional or employment-related information, such as work history and prior employer

Categories of Third Parties to Whom Personal Information Is Disclosed - Service providers, Company Affiliates, and other providers or partners that support our operational business purposes

Categories of Third Parties to Whom Personal Information is "Sold" or "Shared" - N/A

J. Non-public education information (e.g., in connection with news or entertainment productions)

Categories of Third Parties to Whom Personal Information Is Disclosed - Service providers, Company Affiliates, and other providers or partners that support our operational business purposes

Categories of Third Parties to Whom Personal Information is "Sold" or "Shared" - N/A

K. Inferences drawn from any of the Personal Information listed above to create a profile or summary about, for example, an individual’s preferences and characteristics.

Categories of Third Parties to Whom Personal Information Is Disclosed - Service providers, Company Affiliates, and other providers or partners that support our operational business purposes

Categories of Third Parties to Whom Personal Information is "Sold" or "Shared" - Advertising technology companies, advertisers, and Company Affiliates for the purpose of targeted advertising

Please note that the CCPA definitions of "sale" and "share" do not include, for example, the transfer of Personal Information as an asset that is a part of a merger, bankruptcy, or other similar transaction involving all or any portion of our business.

Sources of Personal Information. We collect Personal Information directly from California residents themselves, as well as from social media platforms (e.g., if the individual has connected a social media account to a Company Digital Property); business partners (e.g., in connection with TMZ tours); joint marketing, co-branding, co-promotional, or advertising partners, including advertising technology companies and advertisers; Company Affiliates; and sources of demographic and other information. Depending on the individual’s interactions with us, Company may not have collected Personal Information from each (or any) of these categories of sources.

Purposes. We may use Personal Information and/or disclose it to third parties for the following purposes:

Depending on the California resident’s interactions with us, Company may not have used Personal Information collected about that resident for each of these purposes, and to the extent that Company has disclosed Personal Information about that resident, it may not include all of the Personal Information collected about that resident.

Sensitive Personal Information. We do not process “sensitive” Personal Information for purposes other than those specified in the CCPA Regulations section 7027(m) (such as to provide the services and for security purposes).

Data Retention. We will retain Personal Information from or about you as reasonably necessary and proportionate to achieve the purpose(s) for which the Personal Information was collected or processed as outlined in this Section 8 unless a longer retention period is required or allowed by law.

California Rights. If you are a California consumer, you have the following rights:

(1) Right to Know. You have the right to request that we disclose to you the following information:

To make a request for your Personal Information, please visit https://fcprivacy.exterro.net/portal/dsar.htm?target=TMZ or call us at 888-596-3929. You will need to provide your name and email address, along with other details about your request. You will then receive verification instructions by email. But you do not need to have an account/profile to submit a request. In some circumstances, we may need additional information from you to verify your identity or proceed with your request.

You can use an authorized agent to submit a request for your Personal Information. When submitting a request online, your authorized agent should select the “Other” option on the form and, in the field provided, include your name and your email address. In addition to verifying your identity, as described above, we also will need to verify your authorized agent’s ability to act on your behalf (e.g., by receiving a copy of your signed permission). Once verification is complete, we may communicate directly with you for privacy and security reasons.

Please note that, in some instances, we may decline to honor your request, where, for example, we are unable to verify your identity or an exception to this right applies.

(2) Right to Request Correction. You have the right to request that we correct inaccurate Personal Information we collected about you.

To make a request for correction of inaccurate Personal Information, please visit https://fcprivacy.exterro.net/portal/dsar.htm?target=TMZ or call us at 888-596-3929. You will need to provide your name, email address, and the Personal Information you would like to have corrected, along with other details about your request. You will then receive verification instructions by email. But you do not need to have an account/profile to submit a request. In some circumstances, we may need additional information from you to verify your identity or proceed with your request.

You can use an authorized agent to submit a request for correction of inaccurate Personal Information. When submitting a request online, your authorized agent should select the “Other” option on the form and, in the field provided, include your name, your email address, and the Personal Information you would like to have corrected. In addition to verifying your identity, as described above, we also will need to verify your authorized agent’s ability to act on your behalf (e.g., by receiving a copy of your signed permission). Once verification is complete, we may communicate directly with you /for privacy and security reasons.

Please note that, in some instances, we may decline to honor your request where, for example, we are unable to verify your identity or an exception to this right applies.

(3) Right to Request Deletion. You have the right to request that we delete Personal Information we collected from you.

To make a request for deletion, please visit https://fcprivacy.exterro.net/portal/dsar.htm?target=TMZ or call us at 888-596-3929. You will need to provide your name and email address, along with other details about your request. You will then receive verification instructions by email. But you do not need to have an account/profile to submit a request. Please note that you also will be asked to separately confirm that you would like to proceed with your deletion request. In some circumstances, we may need additional information from you to verify your identity or proceed with your request.

You can use an authorized agent to submit a request for deletion. When submitting a request online, your authorized agent should select the “Other” option on the form and, in the field provided, include your name, and your email address. In addition to verifying your identity, as described above, we also will need to verify your authorized agent’s ability to act on your behalf (e.g., by receiving a copy of your signed permission). Once verification is complete, we may communicate directly with you for privacy and security reasons.

Please note that, in some instances, we may decline to honor your request where, for example, we are unable to verify your identity or an exception to this right applies.

(4) Right to Opt-Out of Sale or Sharing.

As noted above in this section, and depending on your interactions with us, we may share some categories of Personal Information in connection with certain types of advertisements. This may be considered "selling" or "sharing" under the CCPA.

To opt out, you can visit our "Your Privacy Choices" Internet Webpages at:

TMZ: http://privacy.tmz.com/main/web/main

TooFab: https://privacy.toofab.com/main/web/main

You can opt out of the “sale” and “sharing” of your Personal Information by clicking on the toggle and hitting the “submit” button at the bottom of the screen. For mobile and connected TV apps, you may visit “Your Privacy Choices” in Account/Settings for more information and to exercise your choices. You will need to select your preference on each device. If you have enabled a global privacy control feature on your device, we process that opt-out preference signal in a frictionless manner. Please note that we do not "sell" or "share" your Personal Information on either TMZTour.com or whothebleepisthat.com.

(5) Right to be Free from Discrimination. You have the right to be free from unlawful discrimination for exercising your rights under the CCPA.

(6) Record Keeping. Our CCPA Recordkeeping page can be found at https://www.tmz.com/pages/recordkeeping/.

9. FOR CONSUMERS IN VIRGINIA, COLORADO, CONNECTICUT, AND OTHER U.S. STATES WITH SIMILAR PRIVACY LAWS

Depending on where you live, you may have certain additional rights regarding your personal information. This section provides information for consumers residing in Virginia, Colorado, or Connecticut in connection with the Virginia Consumer Data Protection Act (“VCDPA”) the Colorado Privacy Act (“CPA”), the Connecticut Data Privacy Act (the “CDPA”), and other states with similar privacy laws. Under the VCDPA, the CPA the CDPA, and other similar state privacy laws, and for purposes of this Section, “Personal Data” generally means information that identifies, relates to, or describes a particular consumer residing in Virginia, Colorado, Connecticut, or other state with a similar privacy law and includes the categories listed below. Depending on your interactions with us, we and our advertising partners may use certain Personal Data to deliver online advertisements to you on your devices tailored to your interests. Depending on where you live, this may be considered "selling" under some state laws (for example, Colorado and Connecticut law) and "targeted advertising" (for example, under Virginia, Colorado, and Connecticut law). This Section 9 provides details about the categories of Personal Data of consumers in Virginia, Colorado, Connecticut, and other states with similar privacy laws that we have collected, disclosed, or “sold” or processed for purposes of targeted advertising, as well as rights consumers in Virginia, Colorado, Connecticut, and other states with similar privacy laws have under their states’ laws. Please note that, depending on the consumer’s interactions with us, Company may not have collected, disclosed, processed for purposes of targeted advertising, or “sold” each (or any) of these categories of Personal Data for each listed purpose.

Categories of Personal Data Collected, Disclosed, or “Sold”, or Processed for Targeted Advertising:

The categories of Personal Data that we collected, disclosed, processed for purposes of targeted advertising (e.g., under the Virginia law), or “sold” (e.g., under Colorado and Connecticut laws) are below, along with the purposes for processing, and categories of third parties to whom each category of Personal Data was disclosed or “sold” or processed for the purpose of targeted advertising. As noted above, we process some categories of Personal Data in connection with targeted advertising, which could be considered “selling” under some state privacy laws (e.g., Colorado and Connecticut). Additionally, as also explained, depending on the consumer’s interactions with us, Company may not have collected, disclosed, processed for purposes of targeted advertising, or “sold,” each (or any) of these categories of Personal Data for each listed purpose. Further, we do not knowingly sell or process Personal Data of children under 13 years of age.

A. Identifiers, such as name, IP address, email address, and online and device identifiers

Purposes for Processing - To provide the Company Services, to allow service providers to assist us in providing and managing the Company Services, to deliver video content, to provide co-branded services and features, to deliver relevant advertisements, to contact you, to share with our Company Affiliates, to share with business partners (consistent with your choices)

Categories of Third Parties to Whom Personal Data Is Disclosed - Service providers (like hosting providers, content delivery networks, email marketing platforms), Company Affiliates, and other partners or providers that support our operational business purposes

Categories of Third Parties to Whom Personal Data is Sold or Processed for Targeted Advertising - Advertising technology companies, advertisers, and Company Affiliates;

Virginia: Processed for targeted advertising; Colorado and Connecticut: Sold for purposes of targeted advertising

B. Personal information, such as contact and financial information

Purposes for Processing - To provide the Company Services, to allow service providers to assist us in providing and managing the Company Services, to provide co-branded services and features, to contact you, to share with our Company Affiliates, to share with business partners (consistent with your choices)

Categories of Third Parties to Whom Personal Data Is Disclosed – Service providers (e.g., that help with order fulfillment, contest or sweepstakes providers), Company Affiliates, and other partners or providers that support our operational business purposes

Categories of Third Parties to Whom Personal Data is Sold or Processed for Targeted Advertising - N/A

C. Characteristics of protected classifications, such as age or gender

Purposes for Processing - To provide the Company Services, to allow service providers to assist us in providing and managing the Company Services, to deliver relevant advertisements, to share with our Company Affiliates

Categories of Third Parties to Whom Personal Data Is Disclosed - Service providers (like contest or sweepstakes providers), Company Affiliates, and other providers or partners that support our operational business purposes

Categories of Third Parties to Whom Personal Data is Sold or Processed for Targeted Advertising - Advertising technology companies, advertisers, and Company Affiliates;

Virginia: Processed for targeted advertising, Colorado and Connecticut: Sold for purposes of targeted advertising

D. Commercial information, such as transaction information and purchase history

Purposes for Processing - To provide the Company Services, to allow service providers to assist us in providing and managing the Company Services, to deliver relevant advertisements, to share with our Company Affiliates, to share with business partners (consistent with your choices)

Categories of Third Parties to Whom Personal Data Is Disclosed - Service providers (e.g., in connection with order fulfillment and payment services), Company Affiliates, and other providers or partners that support our operational business purposes

Categories of Third Parties to Whom Personal Data is Sold or Processed for Targeted Advertising - Advertising technology companies, advertisers, and Company Affiliates;

Virginia: Processed for targeted advertising, Colorado and Connecticut: Sold for purposes of targeted advertising

E. Internet or network activity information, such as browsing history and interactions with our websites, mobile, or connected TV applications (collectively, "Company Digital Properties")

Purposes for Processing - To provide the Company Services, to allow service providers to assist us in providing and managing the Company Services, to deliver relevant advertisements, to share with our Company Affiliates

Categories of Third Parties to Whom Personal Data Is Disclosed - Service providers (like analytics providers), Company Affiliates, and other providers or partners that support our operational business purposes

Categories of Third Parties to Whom Personal Data is Sold or Processed for Targeted Advertising - Advertising technology companies, advertisers, and Company Affiliates;

Virginia: Processed for targeted advertising, Colorado and Connecticut: Sold for purposes of targeted advertising

G. Audio, electronic, visual and other similar information, such as call recordings

Purposes for Processing - To provide the Company Services, to allow service providers to assist us in providing and managing the Company Services, to share with our Company Affiliates

Categories of Third Parties to Whom Personal Data Is Disclosed - Service providers (e.g., in connection with customer support), Company Affiliates, and other providers or partners that support our operational business purposes

Categories of Third Parties to Whom Personal Data is Sold or Processed for Targeted Advertising - N/A

H. Professional or employment-related information, such as work history and prior employer

Purposes for Processing - To provide the Company Services, to allow service providers to assist us in providing and managing the Company Services, to share with our Company Affiliates

Categories of Third Parties to Whom Personal Data Is Disclosed - Service providers (e.g., in connection with productions), Company Affiliates, and other providers or partners that support our operational business purposes

Categories of Third Parties to Whom Personal Data is Processed for Targeted Advertising - N/A

I. Non-public education information (e.g., in connection with news or entertainment productions)

Purposes for Processing - To provide the Company Services, to allow service providers to assist us in providing and managing the Company Services, to provide co-branded services and features, to share with our Company Affiliates

Categories of Third Parties to Whom Personal Data Is Disclosed - Service providers (e.g., in connection with productions), Company Affiliates, and other providers or partners that support our operational business purposes

Categories of Third Parties to Whom Personal Data is Sold or Processed for Targeted Advertising - N/A

J. Inferences drawn from any of the Personal Information listed above to create a profile or summary about, for example, an individual’s preferences and characteristics.

Purposes for Processing - To provide the Company Services, to allow service providers to assist us in providing and managing the Company Services, to deliver relevant advertisements, to share with our Company Affiliates

Categories of Third Parties to Whom Personal Data Is Disclosed - Service providers (like analytics providers), Company Affiliates, and other providers or partners that support our operational business purposes

Categories of Third Parties to Whom Personal Data is Sold or Processed for Targeted Advertising – Advertising technology companies advertisers, and Company Affiliates;

Virginia: Processed for targeted advertising, Colorado and Connecticut: Sold for purposes of targeted advertising.

In addition, please note that we may process Personal Data in each of the above categories in order to protect the rights of the Company and others, and/or to complete a merger or sale of assets or other corporate transaction. For more details about our purposes for processing, including how other parties may process Personal Data, please see the Use and Disclosure section above.

Please note that, under Virginia and other similar state privacy laws, the definition of “sale” is the exchange of information for monetary consideration and does not include, for example, the transfer of Personal Data as an asset that is part of a merger, bankruptcy, or other similar transaction involving of all or any portion of our business. We do not “sell” Personal Data as defined under Virginia law.

As noted above, the definition of “sale” under Colorado and Connecticut laws is different than the definition of that word under Virginia law. We and our advertising partners use certain Personal Data to deliver online advertisements to you on your devices tailored to your interests, which could be considered “selling” under the Colorado and Connecticut laws. State privacy laws’ definitions of “sale,” however, do not include the transfer of Personal Data as an asset that is part of a merger, bankruptcy, or other similar transaction involving all or any portion of our business.

As explained, depending on the consumer’s interactions with us, Company may not have collected, disclosed, processed for purposes of targeted advertising, or “sold” each (or any) of these categories of Personal Data for each listed purpose.

In addition, we do not engage in “profiling” in furtherance of decisions that produce a legal or similarly significant effect.

Sensitive Personal Information: We do not process “sensitive” Personal Data in connection with the Company Services.

Consumer Rights under Virginia, Colorado, Connecticut, and other similar laws. If you are a consumer in Virginia, Colorado, Connecticut, or other state with a similar privacy law, you have the following rights:

(1) Right to Access and Portability. You have the right to confirm whether we are processing Personal Data concerning you, and to request that we disclose to you the Personal Data we collected from or about you, including in a portable form.

To confirm whether or not we are processing your Personal Data, or to make a request for your Personal Data, please go to https://fcprivacy.exterro.net/portal/dsar.htm?target=TMZ or call us at 888-596-3929. You will need to provide your name and email address, along with other details about your request. You will then receive verification instructions by email. In some circumstances, we may need additional information from you to verify your identity or proceed with your request.

You can use an authorized agent to submit a request for your Personal Data. When submitting a request online, your authorized agent should select the “Other” option on the form and, in the field provided, include your name and your email address. In addition to verifying your identity, as described above, we also will need to verify your authorized agent’s ability to act on your behalf (e.g., by receiving a copy of your signed permission). Once verification is complete, we may communicate directly with you for privacy and security reasons.

Please note that, in some instances, we may decline to honor your request where, for example, we are unable to verify your identity or an exception to this right applies.

(2) Right to Request Deletion. You have the right to request that we delete Personal Data we collected from you or about you.

To make a request for deletion, please go to https://fcprivacy.exterro.net/portal/dsar.htm?target=TMZ or call us at 888-596-3929. You will need to provide your name and email address, along with other details about your request. You will then receive verification instructions by email. Please note that you also will be asked to separately confirm that you would like to proceed with your deletion request. In some circumstances, we may need additional information from you to verify your identity or proceed with your request.

You can use an authorized agent to submit a request for deletion. When submitting a request online, your authorized agent should select the “Other” option on the form and, in the field provided, include your name and your email address. In addition to verifying your identity, as described above, we also will need to verify your authorized agent’s ability to act on your behalf (e.g., by receiving a copy of your signed permission). Once verification is complete, we may communicate directly with you for privacy and security reasons.

Please note that, in some instances, we may decline to honor your request where, for example, we are unable to verify your identity or an exception to this right applies.

(3) Right to Request Correction. You have the right to request that we correct inaccurate Personal Data we collected from or about you.

To make a request for correction of inaccurate Personal Data, please go to https://fcprivacy.exterro.net/portal/dsar.htm?target=TMZ or call us at 888-596-3929. You will need to provide your name, email address, and the Personal Data you would like to be corrected, along with other details about your request. You will then receive verification instructions by email. In some circumstances, we may need additional information from you to verify your identity or proceed with your request.

You can use an authorized agent to submit a request for correction of inaccurate Personal Data. When submitting a request online, your authorized agent should select the “Other” option on the form and, in the field provided, include your name, your email address, and the Personal Data you would like to be corrected. In addition to verifying your identity, as described above, we also will need to verify your authorized agent’s ability to act on your behalf (e.g., by receiving a copy of your signed permission). Once verification is complete, we may communicate directly with you for privacy and security reasons.

Please note that, in some instances, we may decline to honor your request where, for example, we are unable to verify your identity or an exception to this right applies.

(4) Right to Opt-Out of Targeted Advertising (in Virginia, Colorado, Connecticut, and Other States with Similar Privacy Laws) and/or “Sale” (e.g., in Colorado and Connecticut). As noted above in this section, and depending on your interactions with us, we may process and share some categories of Personal Data in connection with targeted advertising. Under some states’ privacy laws (e.g., Colorado and Connecticut), this processing may be considered a “sale.” To opt out of targeted advertising and/or “sales,” you can visit our “Your Privacy Choices” Internet Webpages at:

TMZ: https://privacy.tmz.com/main/web/main

TooFab: https://privacy.toofab.com/main/web/main

Consumers residing in Virginia, Colorado, Connecticut, and other states with similar privacy laws can opt out of targeted advertising and/or “sale” by clicking on the toggle and hitting the “submit” button at the bottom of the screen. For mobile and connected TV apps, you may visit “Your Privacy Choices” in Account/Settings for more information and to exercise your choices. You will need to select your preference on each device. If you or your agent has enabled a global privacy control feature on your device, we process that preference signal in a frictionless manner.

Please note that we do not process Personal Data for the purposes of targeted advertising on either TMZTour.com or whothebleepisthat.com.

(5) Right to Appeal. If we decline to take action in response to your personal data rights request, consumers in Virginia, Colorado, Connecticut, and states with similar privacy laws may request an appeal, by notifying us through our privacy rights portal by following the instructions provided with the response to your request.

(6) Right to be Free from Discrimination. You have the right to be free from unlawful discrimination for exercising your rights under the laws of Virginia, Colorado, Connecticut and other states with similar privacy laws.