10 Total
4 High severity
6 Medium severity
0 Low severity
Summary

This is Yelp's privacy policy — the document that explains what personal information Yelp collects about you when you use its website or app, how it uses that information, and who it shares it with. Yelp collects a wide range of data including your name, location, browsing behavior, and even phone call recordings, and shares it with advertisers and business partners. Depending on where you live, you may have rights to access, delete, or opt out of the sale or sharing of your personal data.

Technical Summary

Yelp's Privacy Policy (last updated October 1, 2025, effective January 1, 2026) governs the collection, use, and sharing of personal information across Yelp's websites, mobile applications, and communications services. The policy establishes broad data collection practices encompassing account information, usage data, location data, device identifiers, communications content, and third-party sourced data. It discloses sharing of personal information with advertising partners, business partners, service providers, and in connection with corporate transactions. The policy creates rights for US residents under CCPA/CPRA (including opt-out of data sale/sharing and sensitive data limitations), European residents under GDPR (including data subject rights and lawful basis disclosures via Yelp Ireland Ltd.), and Quebec residents under Law 25. Notably, the policy includes provisions on AI-powered features, precise geolocation tracking, and cross-context behavioral advertising.

Institutional Analysis

This policy engages CCPA/CPRA (California), GDPR (EU/EEA/UK via Yelp Ireland Ltd. as data controller), and Quebec's Law 25, requiring compliance with data subject rights including access, deletion, c…

This policy engages CCPA/CPRA (California), GDPR (EU/EEA/UK via Yelp Ireland Ltd. as data controller), and Quebec's Law 25, requiring compliance with data subject rights including access, deletion, correction, and opt-out of sale/sharing. The collection of precise geolocation, sensitive personal in…

🔒

Compliance intelligence locked

Regulatory exposure, material risk, and due diligence action items.

Evidence Provenance
Captured March 19, 2026 15:00 UTC
Document ID CA-D-000240
Version ID CA-V-000165
Wayback Machine View archived versions →
SHA-256 361a02d4cbc0c22ab0b48642c77d491b8b1c4392e16652556a5738426ddfe9b0
✓ Snapshot stored ✓ Text extracted ✓ Change verified ✓ Cryptographically signed
Change Timeline
High Severity — 4 provisions
Medium Severity — 6 provisions