Hulu Privacy Policy (Superseded URL)

This privacy policy, last modified September 30, 2025, governs the collection, use, and sharing of personal information by The Walt Disney Family of Companies — including Hulu — across digital properties, applications on third-party platforms, and physical properties such as theme parks, resorts, and cruise ships, with Hulu operating as a named member entity subject to these terms. The agreement states that personal information, including registration data, transaction data, precise or approximate location information, device identifiers, IP addresses, viewing activity, call recordings, and still or video images captured at physical properties, may be used to provide services, send promotional communications, deliver targeted advertising based on activity on Disney sites and on third-party sites and applications, and to share data across all members of The Walt Disney Family of Companies for their own independent purposes as data controllers. The policy states that Hulu may share information with its business partners including content programmers, distributors, and device partners, and that with user consent Hulu may share viewing information together with certain personal information with these and other third parties; the policy also authorizes sharing of limited personal information such as certain identifiers or hashed email addresses with third parties for targeted advertising measurement on Disney and third-party platforms. The policy engages COPPA, the California Consumer Privacy Act, and equivalent US state privacy statutes, GDPR and UK GDPR for EU and UK residents, and Brazil's Lei Geral de Protecao de Dados, with jurisdiction-specific rights pages and supplemental notices referenced for each region. Material compliance considerations include the breadth of intra-family data sharing across more than 50 named brand entities without opt-in consent, the Hulu-specific viewing data sharing provision that conditions broader third-party sharing on user consent, and the retention of personal information for the length of time needed to fulfill policy purposes or as required by law, without specifying defined retention periods for each data category.