Yelp Privacy Policy

This document is Yelp's Privacy Policy (last updated October 1, 2025), governing the collection, use, and sharing of personal information across Yelp's websites, mobile applications, and communications services, with Yelp Inc. (Delaware) serving as the data controller for non-European users and Yelp Ireland Ltd. serving as the controller for European Residents (EEA, Switzerland, UK). The policy asserts broad data collection practices including account information, precise geolocation, device identifiers, browsing and search behavior, payment data, communications content, health and biometric data in some contexts, and data obtained from third-party partners; the terms authorize use of this data for advertising, AI model training, service personalization, and sharing with advertising networks, business partners, and affiliates. Notably, the policy includes an explicit AI section disclosing that user-generated content and interactions may be used to train Yelp's AI systems, and it reserves broad rights to share data with third parties for advertising purposes while offering opt-out mechanisms that vary in scope and accessibility; the English version of the policy is stated to prevail over any translated versions, which may create comprehension barriers for non-English speakers. The policy engages GDPR and UK GDPR for European Residents, the California Consumer Privacy Act (CCPA/CPRA) and related state privacy laws for US residents, COPPA for users under 13, and Quebec Law 25 for Quebec residents; the scope and enforceability of certain data sharing and AI training provisions may require evaluation under GDPR's lawful basis requirements, CCPA's sale and sharing opt-out obligations, and emerging state AI transparency regulations. Material compliance considerations include the adequacy of consent mechanisms for sensitive data categories, the clarity of opt-out pathways for targeted advertising and AI data use, and the sufficiency of data retention disclosures post-account closure.