SFGATE Privacy Notice changes — 20260501_rev01

363

Notes about the information in the table below:

364

365

- Not all the listed categories of information below will necessarily be collected or received about every individual.

366

- Not all examples of a particular "category of personal information" will necessarily be collected or received about every individual.

367

- Personal information handling practices may differ depending on which of the brands and businesses you engage with when interacting with the Hearst Services.

368

369

<table><tbody><tr><td>Category of Personal Information</td><td>Categories of Sources from Which Personal Information Was Collected(See Section B of this Privacy Notice for additional information)</td><td>Business or Commercial Purpose for Collecting and Providing the Category of Personal Information(See Sections C and D of this Privacy Notice for additional information)</td><td>Categories of Third Parties and Other Entities to Which We Provide Personal Information(See Section D of this Privacy Notice for additional information)</td></tr><tr><td>Identifiers (§1798.140 (v)(1)(A) and (B)) which include elements such as: (i) contact information (e.g., name, mailing address, email address, phone number); and (ii) online identifiers (e.g., Internet protocol (IP) address, account numbers, device identifiers such as mobile advertising IDs)</td><td>• Directly from you • From your friends or contacts (for example, if they forward you one of our articles) • From cookies and similar technologies • From third-party websites or apps, content distribution channels and platforms • From third-party data suppliers and business partners • From Social Media Platforms and similar services</td><td>• To provide you with and to improve the Hearst Services • To communicate with you • For advertising and marketing purposes for us or third parties, including targeted advertising • To protect our or others' rights</td><td>• With affiliates and subsidiaries • With service providers • With advertising, marketing, and personalization partners • With content measurement companies • With Social Media Platforms • With business partners • With government authorities as required by law or as necessary to protect our rights</td></tr><tr><td>Demographics (§1798.140 (v)(1)(C)) which include elements such as age and gender</td><td>• Directly from you • From cookies and similar technologies • From third-party websites or apps, content distribution channels and platforms • From third-party data suppliers and business partners • From Social Media Platforms and similar services</td><td>• To provide you with and to improve the Hearst Services • For advertising and marketing purposes for us or third parties, including targeted advertising</td><td>• With affiliates and subsidiaries • With service providers • With advertising, marketing, and personalization partners • With content measurement companies • With Social Media Platforms • With business partners • With government authorities as required by law or as necessary to protect our rights</td></tr><tr><td>Personal Information under subdivision (e) of Section 1798.80 of the California Civil Code (§1798.140 (v)(1)(B)) which includes payment information(e.g., payment card number, expiration date and billing information)</td><td>• Directly from you</td><td>• To provide you with and to improve the Hearst Services • To protect our or others' rights</td><td>• With affiliates and subsidiaries • With service providers • With government authorities as required by law or as necessary to protect our rights</td></tr><tr><td>Commercial Information (§1798.140 (o)(1)(D)) which includes elements such as transactional information(e.g., activity, subscriptions, requests, purchases, items in your cart but not completed purchases)</td><td>• Directly from you • From cookies and similar technologies</td><td>• To provide you with and to improve the Hearst Services • To communicate with you • For advertising and marketing purposes for us or third parties, including targeted advertising • To protect our or others' rights</td><td>• With affiliates and subsidiaries • With service providers • With advertising, and personalization marketing partners • With Social Media Platforms • With business partners • With government authorities as required by law or as necessary to protect our rights</td></tr><tr><td>Internet or other electronic network activity (§1798.140 (v)(1)(F)) which includes elements such as information about how you use, access, or interact with the Hearst Services such as comments, photos, videos and other content you choose to publish on the Hearst Services, information about your device, browser or operating system</td><td>• From cookies and similar technologies • From third-party websites and apps, content distribution channels and platforms • From third-party data suppliers and business partners • From Social Media Platforms and similar services</td><td>• To provide you with and to improve the Hearst Services • To communicate with you • For advertising and marketing purposes for us or third parties, including targeted advertising • To protect our or others' rights</td><td>• With affiliates and subsidiaries • With service providers • With advertising, marketing, and personalization partners • With content measurement companies • With Social Media Platforms • With business partners • With government authorities as required by law or as necessary to protect our rights</td></tr><tr><td>Geolocation Data (§1798.140 (v)(1)(G)) which includes elements such as location information(e.g., city and state, or precise location information if location services are active on your device)</td><td>• Directly from you • From cookies and similar technologies</td><td>• To provide you with and to improve the Hearst Services • To communicate with you • For advertising and marketing purposes for us or third parties, including targeted advertising • To protect our or others' rights</td><td>• With affiliates and subsidiaries • With service providers • With advertising, marketing, and personalization partners • With content measurement companies • With Social Media Platforms • With business partners • With government authorities as required by law or as necessary to protect our rights</td></tr><tr><td>Audio, Electronic, Visual, Thermal, Olfactory or Similar Information (§1798.140 (v)(1)(H)) which includes elements such as recordings of your calls with our call center</td><td>• Directly from you</td><td>• To provide you with and to improve the Hearst Services • To communicate with you • To protect our or others' rights</td><td>• With affiliates and subsidiaries • With service providers • With government authorities as required by law or as necessary to protect our rights</td></tr><tr><td>Professional or Employment-Related Information (§1798.140 (v)(1)(I)) which includes elements such as your professional email address, phone number or other contact information if you have used such professional or employment related personal information to order a subscription, register for an account or to receive communications</td><td>• Directly from you • From third-party data suppliers and business partners • From Social Media Platforms and similar service</td><td>• To provide you with and to improve the Hearst Services • To communicate with you • For advertising and marketing purposes for us or third parties, including targeted advertising • To protect our or others' rights</td><td>• With affiliates and subsidiaries • With service providers • With advertising, marketing, and personalization partners • With content measurement companies • With Social Media Platforms • With business partners • With government authorities as required by law or as necessary to protect our rights</td></tr><tr><td>Inferences (§1798.140 (v)(1)(K)) which include elements such as inferences regarding your preferences or other characteristics (e.g., cooking enthusiast, travel, food and dining)</td><td>• Directly from you • From cookies and similar technologies • From third-party websites and apps, content distribution channels and platforms • From third-party data suppliers and business partners • From Social Media Platforms and similar services</td><td>• To provide you with and to improve the Hearst Services • To communicate with you • For advertising and marketing purposes for us or third parties, including targeted advertising • To protect our or others' rights</td><td>• With affiliates and subsidiaries • With service providers • With advertising, marketing, and personalization partners • With content measurement companies • With Social Media Platforms • With business partners • With government authorities as required by law or as necessary to protect our rights</td></tr><tr><td>Sensitive Personal Information (§1798.140 (ae)(1),(2)) which include elements such as your race or precise geolocation when you enable geolocation on your device.</td><td>• Directly from you • From third-party data suppliers and business partners • From surveys and consumer research</td><td>• To provide you with and to improve the Hearst Services • For advertising and marketing purposes</td><td>• With affiliates and subsidiaries • With service providers • With advertising, marketing, and personalization partners</td></tr></tbody></table>

369

<table><tbody><tr><td>Category of Personal Information</td><td>Categories of Sources from Which Personal Information Was Collected(See Section B of this Privacy Notice for additional information)</td><td>Business or Commercial Purpose for Collecting and Providing the Category of Personal Information(See Sections C and D of this Privacy Notice for additional information)</td><td>Categories of Third Parties and Other Entities to Which We Provide Personal Information(See Section D of this Privacy Notice for additional information)</td></tr><tr><td>Identifiers (§1798.140 (v)(1)(A) and (B)) which include elements such as: (i) contact information (e.g., name, mailing address, email address, phone number); and (ii) online identifiers (e.g., Internet protocol (IP) address, account numbers, device identifiers such as mobile advertising IDs)</td><td>• Directly from you • From your friends or contacts (for example, if they forward you one of our articles) • From cookies and similar technologies • From third-party websites or apps, content distribution channels and platforms • From third-party data suppliers and business partners • From Social Media Platforms and similar services</td><td>• To provide you with and to improve the Hearst Services • To communicate with you • For advertising and marketing purposes for us or third parties, including targeted advertising • To protect our or others' rights</td><td>• With affiliates and subsidiaries • With service providers • With advertising, marketing, and personalization partners • With content measurement companies • With Social Media Platforms • With business partners • With government authorities as required by law or as necessary to protect our rights</td></tr><tr><td>Demographics (§1798.140 (v)(1)(C)) which include elements such as age and gender</td><td>• Directly from you • From cookies and similar technologies • From third-party websites or apps, content distribution channels and platforms • From third-party data suppliers and business partners • From Social Media Platforms and similar services</td><td>• To provide you with and to improve the Hearst Services • For advertising and marketing purposes for us or third parties, including targeted advertising</td><td>• With affiliates and subsidiaries • With service providers • With advertising, marketing, and personalization partners • With content measurement companies • With Social Media Platforms • With business partners • With government authorities as required by law or as necessary to protect our rights</td></tr><tr><td>Personal Information under subdivision (e) of Section 1798.80 of the California Civil Code (§1798.140 (v)(1)(B)) which includes payment information(e.g., payment card number, expiration date and billing information)</td><td>• Directly from you</td><td>• To provide you with and to improve the Hearst Services • To protect our or others' rights</td><td>• With affiliates and subsidiaries • With service providers • With government authorities as required by law or as necessary to protect our rights</td></tr><tr><td>Commercial Information (§1798.140 (o)(1)(D)) which includes elements such as transactional information(e.g., activity, subscriptions, requests, purchases, items in your cart but not completed purchases)</td><td>• Directly from you • From cookies and similar technologies</td><td>• To provide you with and to improve the Hearst Services • To communicate with you • For advertising and marketing purposes for us or third parties, including targeted advertising • To protect our or others' rights</td><td>• With affiliates and subsidiaries • With service providers • With advertising, and personalization marketing partners • With Social Media Platforms • With business partners • With government authorities as required by law or as necessary to protect our rights</td></tr><tr><td>Internet or other electronic network activity (§1798.140 (v)(1)(F)) which includes elements such as information about how you use, access, or interact with the Hearst Services such as comments, photos, videos and other content you choose to publish on the Hearst Services, information about your device, browser or operating system</td><td>• From cookies and similar technologies • From third-party websites and apps, content distribution channels and platforms • From third-party data suppliers and business partners • From Social Media Platforms and similar services</td><td>• To provide you with and to improve the Hearst Services • To communicate with you • For advertising and marketing purposes for us or third parties, including targeted advertising • To protect our or others' rights</td><td>• With affiliates and subsidiaries • With service providers • With advertising, marketing, and personalization partners • With content measurement companies • With Social Media Platforms • With business partners • With government authorities as required by law or as necessary to protect our rights</td></tr><tr><td>Geolocation Data (§1798.140 (v)(1)(G)) which includes elements such as location information(e.g., city and state, or precise location information if location services are active on your device)</td><td>• Directly from you • From cookies and similar technologies</td><td>• To provide you with and to improve the Hearst Services • To communicate with you • For advertising and marketing purposes for us or third parties, including targeted advertising • To protect our or others' rights</td><td>• With affiliates and subsidiaries • With service providers • With advertising, marketing, and personalization partners • With content measurement companies • With Social Media Platforms • With business partners • With government authorities as required by law or as necessary to protect our rights</td></tr><tr><td>Audio, Electronic, Visual, Thermal, Olfactory or Similar Information (§1798.140 (v)(1)(H)) which includes elements such as recordings of your calls with our call center</td><td>• Directly from you</td><td>• To provide you with and to improve the Hearst Services • To communicate with you • To protect our or others' rights</td><td>• With affiliates and subsidiaries • With service providers • With government authorities as required by law or as necessary to protect our rights</td></tr><tr><td>Professional or Employment-Related Information (§1798.140 (v)(1)(I)) which includes elements such as your professional email address, phone number or other contact information if you have used such professional or employment related personal information to order a subscription, register for an account or to receive communications</td><td>• Directly from you • From third-party data suppliers and business partners • From Social Media Platforms and similar service</td><td>• To provide you with and to improve the Hearst Services • To communicate with you • For advertising and marketing purposes for us or third parties, including targeted advertising • To protect our or others' rights</td><td>• With affiliates and subsidiaries • With service providers • With advertising, marketing, and personalization partners • With content measurement companies • With Social Media Platforms • With business partners • With government authorities as required by law or as necessary to protect our rights</td></tr><tr><td>Inferences (§1798.140 (v)(1)(K)) which include elements such as inferences regarding your preferences or other characteristics (e.g., cooking enthusiast, travel, food and dining)</td><td>• Directly from you • From cookies and similar technologies • From third-party websites and apps, content distribution channels and platforms • From third-party data suppliers and business partners • From Social Media Platforms and similar services</td><td>• To provide you with and to improve the Hearst Services • To communicate with you • For advertising and marketing purposes for us or third parties, including targeted advertising • To protect our or others' rights</td><td>• With affiliates and subsidiaries • With service providers • With advertising, marketing, and personalization partners • With content measurement companies • With Social Media Platforms • With business partners • With government authorities as required by law or as necessary to protect our rights</td></tr><tr><td>Sensitive Personal Information (§1798.140 (ae)(1),(2)) which include elements such as your race or precise geolocation when you enable geolocation on your device.</td><td>• Directly from you • From third-party data suppliers and business partners • From surveys and consumer research</td><td>• To provide you with and to improve the Hearst Services • For advertising and marketing purposes</td><td>• With affiliates and subsidiaries • With service providers • With advertising, marketing, and personalization partners</td></tr></tbody></table>

370

371

For each of the categories listed above, we will retain your personal information for as long as needed or permitted, depending on the purpose for obtaining that personal information and consistent with applicable laws. We will keep your personal information for as long as we have a relationship with you (e.g., to provide you with the Hearst Services or to complete transactions that you request). Once our relationship with you has come to an end, we will retain your personal information for a period of time that enables us to:

372

373

- Maintain business records for analysis, understanding market trends, and/or audit purposes and to improve the Hearst Services.

374

- Comply with record retention requirements under applicable laws or other relevant legal or regulatory requirements.

375

- Defend, establish, exercise, or bring any existing or potential legal claims.

Privacy Notice

Full text changes — 20251101_rev01 to 20260501_rev01