U.S. Consumer Data Privacy Policy
LAST UPDATED: June 27, 2025
1. Scope of Privacy Policy
This U.S. Consumer Data Privacy Policy (“Privacy Policy”) is provided by Experian and its subsidiaries that act as a business or controller within the meaning of U.S. state privacy laws, or are controlled by Experian plc and use the Experian name, or that link to this policy. These companies include Experian Marketing Solutions, LLC; Experian Health, Inc.; Experian Information Solutions, Inc.; Experian Insurance Services, and are referred to in this policy as "we" or "us."
This Privacy Policy describes how we collect, use, disclose, and protect personal information to provide our services. It also describes the rights and choices you have with respect to personal information we maintain about you.
For purposes of this section, the terms “personal information” and “sensitive personal information” encompass the terms “personal data” and “sensitive personal data” and have the meaning provided under U.S. state privacy laws that are inclusive of but not limited to: the California Consumer Privacy Act, California Privacy Rights Act, Colorado Privacy Act, Connecticut Data Privacy Act, Utah Consumer Privacy Act, and Virginia Consumer Data Privacy Act. The meaning of these terms refer back to terms defined in such state privacy laws and may exclude publicly available, deidentified, and aggregated information; information subject to the Fair Credit Reporting Act, Gramm Leach Bliley Act, Health Insurance Portability and Accountability Act, and Driver’s Privacy Protection Act; or information that is otherwise exempted or excluded by state privacy laws. To the extent Experian maintains deidentified data, we commit to maintaining and using deidentified data without attempting to reidentify. To the extent that Experian sells or discloses deidentified patient information which is exempt under certain state laws, it does so pursuant to the deidentification methodology required under these laws. Any users of the services linked to this policy will be referred to as “consumers.”
2. What Personal Information We Collect, How We Use Personal Information, and To Whom We Disclose Personal Information
We collect the categories of personal information and sensitive personal information about you as identified in the chart below. As further set forth in the chart below, in the past 12 months, we have disclosed and sold your personal information to third parties for business or commercial purposes. We use cookies and other tracking technologies, and allow our advertising partners to use similar technologies, so we can, among other things, show you ads promoting Experian on other sites and services. These activities may be considered “sales,” “sharing,” or “targeted advertising” under applicable laws.
Categories of Personal Information |
Collected in the last 12 months: |
Categories of sources from which the personal information is collected: |
Business or commercial purpose for collecting, selling, sharing, and disclosing personal information: |
Sold, shared, or disclosed for a business or commercial purpose to third parties in the preceding 12 months: |
Categories of third parties to whom the personal information was sold, shared, or disclosed in the preceding 12 months: |
Personal and online identifiers (such as first and last name, postal address, telephone number, social security number, driver’s license, email address, or unique online identifiers) |
Yes |
• Affiliates |
Commercial Purposes: Business Purposes: |
Yes |
• Automotive Companies |
Commercial or transactions information (such as records of personal property or products or services purchased, obtained or considered, vehicle information, insurance claims, insurance underwriting information) |
Yes |
• Affiliates |
Commercial Purposes: Business Purposes: |
Yes |
• Automotive Companies |
Internet or other electronic network activity information (such as browsing history, search history, interactions with a website, email, application, or advertisement) |
Yes |
• Business to Business Companies |
Commercial Purposes: Business Purposes: |
Yes |
• Automotive Companies |
Biometric information (such as call recordings, facial recognition or retina/fingerprint scans) |
Yes |
• Data Collected from Consumer |
Commercial Purposes: Business Purposes: |
No |
N/A |
Geolocation information |
Yes |
|
Commercial Purposes: Business Purposes: |
Yes |
• Automotive Companies |
Sensory information (such as audio, electronic, visual, thermal, olfactory, or similar information) |
No |
N/A |
N/A |
No | N/A |
Professional or employment-related information |
Yes |
• Affiliates |
Commercial Purposes: Business Purposes: |
Yes |
• Automotive Companies |
Education Information |
Yes |
• Affiliates |
Commercial Purposes: Business Purposes: |
Yes |
• Automotive Companies |
Inferences drawn from the above information about your predicted characteristics and preferences |
Yes |
• Affiliates |
Commercial Purposes: Business Purposes: |
Yes |
• Automotive Companies |
Categories that may be considered Sensitive Personal Information |
Collected in the last 12 months: |
Categories of sources from which the sensitive personal information is collected: |
Business or commercial purpose for collecting, selling, sharing, and disclosing sensitive personal information: |
Sold, shared, or disclosed for a business or commercial purpose to third parties in the preceding 12 months: |
Categories of third parties to whom the sensitive personal information was sold, shared, or disclosed in the preceding 12 months: |
|---|---|---|---|---|---|
| This chart below reflects Experian's data practices with regard to Sensitive Personal Information in states other than Colorado, Connecticut, Delaware, Indiana, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia. | |||||
| A consumer’s social security, driver’s license, state identification card, or passport number | Yes | • Business to Business Companies • Data Collected from Consumer • Financial Services Companies • Government Agencies • Health Product Companies • Insurance Companies • Not for Profit Organizations • Other Authorized Data Compilers • Public Records • Telecommunications Companies |
Commercial Purposes: Business Purposes: |
Yes | • Automotive Companies • Business Services/Agency • Consumer Services Companies • Educational Institutions & Companies • Energy and Utility Companies • Financial Services Companies • Food & Beverage Companies • Health Product Companies • Insurance Companies • Manufacturing Companies • Marketing and Research Companies • Media and Publishing Companies • Not for Profit Organizations • Political Organizations • Public Institutions • Retail Companies • Technology/Computer Software Companies • Telecommunications Companies • Travel, Leisure & Entertainment Companies |
| A consumer’s account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account | Yes | • Business to Business Companies • Consumer Survey Companies • Financial Services Companies • Government Agencies • Health Product Companies • Not for Profit Organizations • Other Authorized Data Compilers • Public Records • Telecommunications Companies |
Commercial Purposes: Business Purposes: |
Yes | • Automotive Companies • Business Services/Agency • Consumer Services Companies • Educational Institutions & Companies • Energy and Utility Companies • Financial Services Companies • Food & Beverage Companies • Health Product Companies • Insurance Companies • Manufacturing Companies • Marketing and Research Companies • Media and Publishing Companies • Not for Profit Organizations • Public Institutions • Regulatory Authorities or Law Enforcement • Retail Companies • Technology/Computer Software Companies • Telecommunications Companies • Travel, Leisure & Entertainment Companies |
| A consumer’s precise geolocation | Yes | • Business to Business Companies • Financial Services Companies • Other Authorized Data Compilers • Telecommunications Companies • Public Records • Government Agencies |
Commercial Purposes: Business Purposes: |
Yes | • Automotive Companies • Business Services/Agency • Consumer Services Companies • Educational Institutions & Companies • Energy and Utility Companies • Financial Services Companies • Food & Beverage Companies • Health Product Companies • Insurance Companies • Manufacturing Companies • Marketing and Research Companies • Media and Publishing Companies • Not for Profit Organizations • Public Institutions • Regulatory Authorities or Law Enforcement • Retail Companies • Technology/Computer Software Companies • Telecommunications Companies • Travel, Leisure & Entertainment Companies |
| A consumer’s racial or ethnic origin, religious or philosophical beliefs, citizenship or immigration status, or union membership | Yes | • Data Modeling Software Providers |
Commercial Purposes: Business Purposes: |
Yes | • Automotive Companies • Business Services/Agency • Consumer Services Companies • Educational Institutions & Companies • Energy and Utility Companies • Financial Services Companies • Food & Beverage Companies • Health Product Companies • Insurance Companies • Manufacturing Companies • Marketing and Research Companies • Media and Publishing Companies • Not for Profit Organizations • Political Organizations • Public Institutions • Retail Companies • Technology/Computer Software Companies • Telecommunications Companies • Travel, Leisure & Entertainment Companies |
| The contents of a consumer’s mail, email, and text messages unless the business is the intended recipient of the communication | No | N/A | N/A | No | N/A |
| The processing of a consumer’s genetic data for the purpose of uniquely identifying a consumer | No | N/A | N/A | No | N/A |
| The processing of biometric information for the purpose of uniquely identifying a consumer | No | N/A | N/A | No | N/A |
| Personal information collected and analyzed concerning a consumer’s health, including medical history, medical treatment or diagnosis by a health care professional, and any mental or physical health condition or diagnosis | No | N/A | N/A | No | N/A |
| Personal information collected and analyzed concerning a consumer’s sex life or sexual orientation | No | N/A | N/A |
No | N/A |
| Personal data collected from a known child | No | N/A | N/A | No | N/A |
Notwithstanding any of the disclosures above, text messaging originator opt-in data and consent is not shared with any third parties.
If you are a Delaware, Minnesota, or Oregon resident, click here for a list of third parties (parties other than a consumer, controller, processor, or affiliate of a controller or processor) with whom we share personal information.
3. Privacy Rights Regarding Personal Information
Residents of specific states have certain rights with respect to personal information collected and processed under state privacy laws. You may exercise the following rights, subject to certain exceptions and limitations:
Right to Know/Access
You have a right to know whether Experian processes personal information about you and to access the personal information Experian maintains about you.
Right to Portability
You have the right to obtain a copy of personal information Experian maintains about you in a format that is portable and readily usable.
Right to Delete
You have the right to request deletion of the personal information that Experian maintains about you, subject to certain exceptions.
Right to Correct
You have the right to request correction of inaccurate personal information that Experian maintains about you.
Right to Opt-Out
You have the right to opt out from the sale of your personal information, use of your personal information for targeted advertising, and from certain types of profiling with legal or similar effects. In certain states, opting out also includes your right to limit the use and disclosure of sensitive personal information. This is not related to your credit report and will not affect your credit score.
Right to Non-Discrimination
You have the right not to be discriminated against for exercising any of your privacy rights granted by applicable state privacy laws.
How to Exercise Your Rights
To exercise any of the above rights, please contact us using the following information and submit the required verifying information, as further described below:
- Online at consumerprivacy.experian.com
- By phone at 1-833-210-4615
- By mail at PO Box 703, Allen, TX 75013
Verification Process For Rights to Know, Correct, and/or Delete
To exercise your rights to know/access, correct, and/or delete, we will need your complete name, mailing address, phone number, and email address. Note that we may need to request additional information from you to verify your identity or understand the scope of your request. The type of additional information will vary by request. You will not be required to create an account with us to submit a request or have it fulfilled.
In certain circumstances, we may decline a request to exercise the right to know and/or right to deletion, particularly where we are unable to verify your identity.
You may appeal Experian's decision regarding your privacy rights request. To appeal a request, please email the Privacy Rights Appeal Form to optout@experian.com and be sure to include the Privacy Rights Appeal Form when submitting an appeal. If you are not satisfied with our response to your appeal request, you may contact the attorney general of your state.
Authorized Agent
You may designate an authorized agent to make a request on your behalf through the designated methods set forth in this Privacy Policy where we can verify the authorized agent’s authority to act on your behalf.
For requests to opt-out, you may designate an authorized agent by submitting a written and signed permission designating such an agent. For requests made by an opt-out preference signal, written permission from the consumer will not be needed.
For requests to know/access, requests to delete and requests to correct personal information: (i) receiving a power of attorney valid under the laws of your state from you or your authorized agent; or (ii) receiving sufficient evidence to show that you have: (a) provided the authorized agent signed permission to act on your behalf; (b) verified your own identity directly with us pursuant to the instructions set forth in this Privacy Policy; and (c) directly confirmed with us that you provided the authorized agent permission to submit the request on your behalf. This may be done by mailing two forms of identification showing your first name, last name and current address and a signed authorization allowing an agent to request information on your behalf.
Opt-Out Preference Signals
In certain states, consumers may opt out of personal information sales, sharing and targeted advertising by broadcasting an Opt-Out Preference Signal, such as the Global Privacy Control (GPC), on browsers and/or browser extensions that support such a signal. If you choose to use the GPC signal, you will need to turn it on for each supported browser or browser extension you use. Your request to opt-out will be linked to your browser identifier only, unless it is already linked to other personal information.
If you would like us to make the connection between your browser and your account, or other personal information that we may hold that is subject to opt out when you send the Opt-Out Preference Signal and you have not yet opted out, we recommend you send your complete name and mailing address to optout@experian.com.
4. Experian as a Processor/Service Provider
To provide our services, we may process personal information we receive from or on behalf of our clients. When we do so, we act as a processor or service provider on behalf of our client who determines the purpose and means of the processing. Experian processes this information only as necessary to provide our services and at our client’s direction. The privacy policy of our client and our contractual agreement with them governs the processing of this personal information. To exercise any privacy rights in relation to personal information we may process as processor or service provider, please contact the relevant business who collected the personal information or on whose behalf this information was collected.
5. How Long We Keep Your Personal Information For
Generally, we will keep your personal information only as long as we need it to provide the Experian products and services you’ve signed up to or only as long as necessary to fulfill the purposes outlined in this privacy policy. We may also keep it to comply with our legal obligations, resolve any disputes, protect against fraudulent, deceptive or illegal activity and enforce our rights. These reasons can vary from one piece of information to the next and depend on the products or services you’re signed up to, so the amount of time we keep your personal information for may vary.
6. Data Collection of Minors’ Data
We do not collect, sell, share or disclose the personal information of minors under 16 years of age.
7. Annual User Rights Request Metrics
The CCPA requires certain businesses to compile and disclose metrics on an annual basis regarding their compliance with the CCPA and consumer rights requests. The metrics must be posted by July 1 of each year. Experian has elected to report the required metrics on a calendar year basis for the period of January 1, 2024 through December 31, 2024. During the previous calendar year, Experian facilitated the following requests from California residents who submitted requests via our online portal, by phone or mail:
|
Experian |
||||
Requests to Delete |
Requests to Correct |
Requests to Know |
Request to Opt-Out of Sale/Sharing | Request to Limit | |
Total Requests Received |
794 |
8 |
498 |
2537 | 2536 |
Number of requests complied with in whole |
794 |
8 |
498 |
2537 | 2536 |
Number of requests complied with in part |
0 |
0 |
0 |
0 | 0 |
Number of requests denied due to inability to verify consumer [1] |
0 |
0 |
0 |
0 | 0 |
Average number of days to substantively respond |
3.04 |
2.35 |
2.42 |
2.65 | 2.65 |
| Median number of days to substantively respond | 1.94 |
1.08 |
1.25 |
1.87 |
1.87 |
[1] Requests unable to be fulfilled due to unreturned Certification Form from consumer
EXPERIAN MARKETING SOLUTIONS, LLC, EXPERIAN HEALTH, INC., AND EXPERIAN INFORMATION SOLUTIONS, INC. ARE DATA BROKERS UNDER TEXAS LAW. TO CONDUCT BUSINESS IN TEXAS, A DATA BROKER MUST REGISTER WITH THE TEXAS SECRETARY OF STATE (TEXAS SOS). INFORMATION ABOUT DATA BROKER REGISTRANTS IS AVAILABLE ON THE TEXAS SOS WEBSITE.
Experian Marketing Solutions, LLC, Experian Health, Inc., and Experian Information Solutions, Inc. are data brokers under Texas law. To conduct business in Texas, a data broker must register with the Texas Secretary of State (Texas SOS). Information about data broker registrants is available on the Texas SOS website.
If our information practices change, we will post these changes on this page. We encourage you to visit this page periodically to learn of any updates.
8. Contact for More Information
For questions or concerns about Experian’s privacy policy or practices, please contact us at:
Email: privacy@experian.com
Mail:
Compliance Department
Experian
475 Anton Blvd.
Costa Mesa, CA 92626