CINXE.COM

<!doctype html> <html data-n-head-ssr lang="en-us" data-n-head="%7B%22lang%22:%7B%22ssr%22:%22en-us%22%7D%7D"> <head> <meta data-n-head="ssr" charset="utf-8"><meta data-n-head="ssr" name="viewport" content="width=device-width,initial-scale=1"><meta data-n-head="ssr" data-hid="contentSecurityPolicy" http-equiv="Content-Security-Policy" content=" default-src 'self' https: http:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: http: *.googletagmanager.com *.mutinycdn.com; style-src 'self' 'unsafe-inline' https: http: https://fonts.googleapis.com; object-src https: http:; base-uri 'self'; connect-src 'self' https: http: wss: ws: *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.mutinyhq.com *.mutinyhq.io *.mutinycdn.com; frame-src 'self' https: http:; img-src 'self' https: http: data: *.google-analytics.com *.googletagmanager.com *.mutinycdn.com; manifest-src 'self'; media-src 'self' https: http:; child-src 'self' blob: https: http:; font-src 'self' https: http: data: https://fonts.gstatic.com; "><meta data-n-head="ssr" data-hid="formatDetection" name="format-detection" content="telephone=no"><meta data-n-head="ssr" data-hid="msapplication-TileImage" name="msapplication-TileImage" content="/nuxt-images/ico/mstile-144x144.png?cache=20220414"><meta data-n-head="ssr" data-hid="msapplication-config" name="msapplication-config" content="/nuxt-images/ico/browserconfig.xml"><meta data-n-head="ssr" data-hid="robots" name="robots" content="index, follow"><meta data-n-head="ssr" data-hid="description" name="description" content="Supplement to our Privacy Statement for residents in certain U.S. States. This also includes our Notice at Collection under California law"><meta data-n-head="ssr" data-hid="twitter:description" name="twitter:description" content="Supplement to our Privacy Statement for residents in certain U.S. States. This also includes our Notice at Collection under California law"><meta data-n-head="ssr" data-hid="og:description" property="og:description" content="Supplement to our Privacy Statement for residents in certain U.S. States. This also includes our Notice at Collection under California law"><meta data-n-head="ssr" data-hid="og:title" property="og:title" content="U.S. State Privacy Rights and Disclosures"><meta data-n-head="ssr" data-hid="twitter:creator" name="twitter:creator" content="@Gitlab"><meta data-n-head="ssr" data-hid="twitter:site" name="twitter:site" content="@Gitlab"><meta data-n-head="ssr" data-hid="twitter:card" name="twitter:card" content="summary_large_image"><meta data-n-head="ssr" data-hid="twitter:image:alt" name="twitter:image:alt" content="undefined"><meta data-n-head="ssr" data-hid="og:image:alt" property="og:image:alt" content="undefined"><meta data-n-head="ssr" data-hid="og:url" name="og:url" content="https://about.gitlab.com/privacy/us-state-privacy-rights-and-disclosures"><meta data-n-head="ssr" data-hid="og:type" property="og:type" content="article"><meta data-n-head="ssr" data-hid="twitter:title" name="twitter:title" content="U.S. State Privacy Rights and Disclosures"><meta data-n-head="ssr" data-hid="twitter:image" name="twitter:image" content="https://about.gitlab.com/nuxt-images/open-graph/open-graph-gitlab.png"><meta data-n-head="ssr" data-hid="og:image" property="og:image" content="https://about.gitlab.com/nuxt-images/open-graph/open-graph-gitlab.png"><title>U.S. State Privacy Rights and Disclosures | GitLab</title><link data-n-head="ssr" rel="shortcut icon" type="image/x-icon" href="/nuxt-images/ico/favicon.ico?cache=20220414"><link data-n-head="ssr" rel="icon" type="image/png" sizes="192x192" href="/nuxt-images/ico/favicon-192x192.png?cache=2022041"><link data-n-head="ssr" rel="icon" type="image/png" sizes="160x160" href="/nuxt-images/ico/favicon-160x160.png?cache=2022041"><link data-n-head="ssr" rel="icon" type="image/png" sizes="96x96" href="/nuxt-images/ico/favicon-96x96.png?cache=2022041"><link data-n-head="ssr" rel="icon" type="image/png" sizes="32x32" href="/nuxt-images/ico/favicon-32x32.png?cache=2022041"><link data-n-head="ssr" rel="icon" type="image/png" sizes="16x16" href="/nuxt-images/ico/favicon-16x16.png?cache=2022041"><link data-n-head="ssr" rel="apple-touch-icon" sizes="57x57" href="/nuxt-images/ico/apple-touch-icon-57x57.png?cache=2022041"><link data-n-head="ssr" rel="apple-touch-icon" sizes="60x60" href="/nuxt-images/ico/apple-touch-icon-60x60.png?cache=2022041"><link data-n-head="ssr" rel="apple-touch-icon" sizes="72x72" href="/nuxt-images/ico/apple-touch-icon-72x72.png?cache=2022041"><link data-n-head="ssr" rel="apple-touch-icon" sizes="76x76" href="/nuxt-images/ico/apple-touch-icon-76x76.png?cache=2022041"><link data-n-head="ssr" rel="apple-touch-icon" sizes="114x114" href="/nuxt-images/ico/apple-touch-icon-114x114.png?cache=2022041"><link data-n-head="ssr" rel="apple-touch-icon" sizes="120x120" href="/nuxt-images/ico/apple-touch-icon-120x120.png?cache=2022041"><link data-n-head="ssr" rel="apple-touch-icon" sizes="144x144" href="/nuxt-images/ico/apple-touch-icon-144x144.png?cache=2022041"><link data-n-head="ssr" rel="apple-touch-icon" sizes="152x152" href="/nuxt-images/ico/apple-touch-icon-152x152.png?cache=2022041"><link data-n-head="ssr" rel="apple-touch-icon" sizes="180x180" href="/nuxt-images/ico/apple-touch-icon-180x180.png?cache=2022041"><link data-n-head="ssr" rel="alternate" type="application/atom+xml" title="Blog" href="/atom.xml"><link data-n-head="ssr" rel="alternate" type="application/atom+xml" title="All Releases" href="/all-releases.xml"><link data-n-head="ssr" rel="alternate" type="application/atom+xml" title="Security Releases" href="/security-releases.xml"><link data-n-head="ssr" rel="alternate" type="application/atom+xml" title="Major Releases" href="/releases.xml"><link data-n-head="ssr" rel="canonical" href="https://about.gitlab.com/privacy/us-state-privacy-rights-and-disclosures/"><link data-n-head="ssr" rel="preload" as="image" href="/_nuxt/image/eecfc0.svg"><link data-n-head="ssr" rel="preload" as="image" href="/_nuxt/image/c843cb.svg"><script data-n-head="ssr" data-hid="oneTrustSDK" src="https://cdn.cookielaw.org/scripttemplates/otSDKStub.js" type="text/javascript" charset="utf-8" data-domain-script="7f944245-c5cd-4eed-a90e-dd955adfdd08" defer></script><script data-n-head="ssr" src="https://cdn.cookielaw.org/consent/7f944245-c5cd-4eed-a90e-dd955adfdd08.js" type="text/javascript" charset="UTF-8" defer></script><script data-n-head="ssr" data-hid="oneTrustAutoBlocking" src="https://cdn.cookielaw.org/consent/7f944245-c5cd-4eed-a90e-dd955adfdd08/OtAutoBlock.js" type="text/javascript" defer></script><script data-n-head="ssr" data-hid="oneTrustGeolocation" src="https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location/geofeed" type="text/javascript" defer></script><script data-n-head="ssr" data-hid="mutiny">!function(){var i,n,c=window.mutiny=window.mutiny||{};window.mutiny.client||(c.client={_queue:{}},i=["identify","trackConversion"],n=[].concat(i,["defaultOptOut","optOut","optIn"]),n.forEach(function(n){var u;c.client[n]=(u=n,function(){for(var n=arguments.length,t=new Array(n),e=0;e<n;e++)t[e]=arguments[e];if(c.client._queue[u]=c.client._queue[u]||[],i.includes(u))return new Promise(function(n,e){c.client._queue[u].push({args:t,resolve:n,reject:e})});c.client._queue[u].push({args:t})})}))}()</script><script data-n-head="ssr" data-hid="mutiny-script" src="https://client-registry.mutinycdn.com/personalize/client/c18972324098ea25.js" data-cfasync="false"></script><script data-n-head="ssr" data-hid="gtagConsent" defer>function gtag(){dataLayer.push(arguments)}window.dataLayer=window.dataLayer||[];const defaultConsents=window.dataLayer.filter(t=>t.length&&0<=Array.from(t).indexOf("default"));defaultConsents.length<=2&&(gtag("consent","default",{analytics_storage:"granted",ad_storage:"granted",functionality_storage:"granted",wait_for_update:500}),gtag("consent","default",{analytics_storage:"denied",ad_storage:"denied",functionality_storage:"denied",region:["AT","BE","BG","HR","CY","CZ","DK","EE","FI","FR","DE","GR","HU","IE","IT","LV","LT","LU","MT","NL","PL","PT","RO","SK","SI","ES","SE","IS","LI","NO","RU","GB","PE","CO","KR","CA-QC"],wait_for_update:500})),window.geofeed=t=>{dataLayer.push({event:"OneTrustCountryLoad",oneTrustCountryId:t.country.toString(),oneTrustStateId:t.state?.toString()})}</script><script data-n-head="ssr" data-hid="bizible" src="//cdn.bizible.com/scripts/bizible.js" defer type="text/javascript"></script><script data-n-head="ssr" data-hid="munchkin" src="//munchkin.marketo.net/munchkin.js" defer type="text/javascript"></script><script data-n-head="ssr" src="https://extend.vimeocdn.com/ga/115027220.js" defer type="text/javascript"></script><script data-n-head="ssr" data-hid="schemaOrg" type="application/ld+json">{"@context":"https://schema.org","@type":"Corporation","name":"GitLab","legalName":"GitLab Inc.","tickerSymbol":"GTLB","url":"https://about.gitlab.com","logo":"https://gitlab.com/gitlab-com/gitlab-artwork/raw/master/logo/logo.png","description":"Supplement to our Privacy Statement for residents in certain U.S. States. This also includes our Notice at Collection under California law","foundingDate":"2011","founders":[{"@type":"Person","name":"Sid Sijbrandij"},{"@type":"Person","name":"Dmitriy Zaporozhets"}],"slogan":"Our mission is to change all creative work from read-only to read-write so that everyone can contribute.","address":{"@type":"PostalAddress","streetAddress":"268 Bush Street #350","addressLocality":"San Francisco","addressRegion":"CA","postalCode":"94104","addressCountry":"USA"},"awards":"Comparably's Best Engineering Team 2021, 2021 Gartner Magic Quadrant for Application Security Testing - Challenger, DevOps Dozen award for the Best DevOps Solution Provider for 2019, 451 Firestarter Award from 451 Research","knowsAbout":[{"@type":"Thing","name":"DevOps"},{"@type":"Thing","name":"CI/CD"},{"@type":"Thing","name":"DevSecOps"},{"@type":"Thing","name":"GitOps"},{"@type":"Thing","name":"DevOps Platform"}],"sameAs":["https://www.facebook.com/gitlab","https://twitter.com/gitlab","https://www.linkedin.com/company/gitlab-com","https://www.youtube.com/channel/UCnMGQ8QHMAnVIsI3xJrihhg"]}</script><link rel="preload" href="/_nuxt/a5e5ed7.js" as="script"><link rel="preload" href="/_nuxt/41dd6a4.js" as="script"><link rel="preload" href="/_nuxt/css/fd182ce.css" as="style"><link rel="preload" href="/_nuxt/5a8cdbe.js" as="script"><link rel="preload" href="/_nuxt/css/4fb7a35.css" as="style"><link rel="preload" href="/_nuxt/52a471a.js" as="script"><link rel="stylesheet" href="/_nuxt/css/fd182ce.css"><link rel="stylesheet" href="/_nuxt/css/4fb7a35.css"><link rel="preload" href="/_nuxt/static/1732377904/privacy/us-state-privacy-rights-and-disclosures/state.js" as="script"><link rel="preload" href="/_nuxt/static/1732377904/privacy/us-state-privacy-rights-and-disclosures/payload.js" as="script"><link rel="preload" href="/_nuxt/static/1732377904/manifest.js" as="script"> </head> <body> <div data-server-rendered="true" id="__nuxt"><div id="__layout"><div data-fetch-key="0"><a href="/gitlab-duo/" data-ga-name="gitlab duo enterprise" data-ga-location="header" data-fetch-key="data-v-dbfc8738:0" data-v-dbfc8738><div class="banner" data-v-dbfc8738><img src="/_nuxt/image/eecfc0.svg" alt="" class="slp-ml-24 banner_image" data-v-dbfc8738> <button type="button" class="slp-btn cta slp-btn-tertiary" data-v-52cd803a data-v-dbfc8738> GitLab Duo Enterprise is now available. <div role="img" aria-hidden="true" class="slp-icon slp-ml-8 arrow-icon slp-icon--color-color-text-300" style="color:color-text-300;width:16px;height:16px" data-v-e356681a data-v-dbfc8738><div data-v-e356681a><svg width="16" height="16" viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M10.159 10.72a.75.75 0 101.06 1.06l3.25-3.25L15 8l-.53-.53-3.25-3.25a.75.75 0 00-1.061 1.06l1.97 1.97H1.75a.75.75 0 100 1.5h10.379l-1.97 1.97z"/></svg></div></div></button> <img src="/_nuxt/image/c843cb.svg" alt="" class="banner_image" data-v-dbfc8738></div></a> <div data-fetch-key="SlpNavigationHOC:0" class="nav-hoc"></div> <div class="slp-container" data-v-db4b02a6><div class="slp-container hero" data-v-db4b02a6 data-v-16e77bfc><div class="slp-row" data-v-2d4c763f data-v-16e77bfc><div class="container slp-col-md-12" data-v-7737f7b0 data-v-16e77bfc><h5 class="slp-text-heading5-bold" data-v-19cf63b5 data-v-16e77bfc>Last updated: June 25, 2023</h5> <h1 class="slp-mb-32 slp-text-heading1-bold" data-v-19cf63b5 data-v-16e77bfc>Privacy Notice applicable for residents of the United States.</h1> <hr class="hero__divider" data-v-7737f7b0 data-v-16e77bfc> <div class="slp-text-body1" data-v-19cf63b5 data-v-16e77bfc><div data-v-19cf63b5 data-v-16e77bfc><p>This page supplements our <a href="https://about.gitlab.com/privacy/">Privacy Statement</a> and provides additional information for residents in certain US States which have specific privacy laws, including the rights available to those residents. This page includes our <strong>NOTICE AT COLLECTION</strong> under California law.</p> </div></div> <div class="hero__buttons" data-v-7737f7b0 data-v-16e77bfc> </div></div></div></div> <div data-v-495d6e81><div id="collapsible-sidebar-wrapper" data-v-495d6e81><div id="collapsible-sidebar-content" data-v-495d6e81><section data-v-495d6e81><div class="slp-container" data-v-db4b02a6 data-v-5f88c873><div class="slp-col-md" data-v-7737f7b0 data-v-5f88c873><div class="decoration" data-v-7737f7b0 data-v-5f88c873></div> <div class="anchor-header" data-v-7737f7b0 data-v-5f88c873><h2 id="California" class="copy_block__header slp-text-heading2-bold" data-v-19cf63b5 data-v-5f88c873>California </h2> <a href="#California" data-v-7737f7b0 data-v-5f88c873><div role="img" aria-hidden="true" class="slp-icon slp-icon--size-md slp-icon--color-color-text-300" style="color:color-text-300" data-v-e356681a data-v-5f88c873><div data-v-e356681a><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 16 16"><path fill="currentColor" fill-rule="evenodd" d="M9.683 6.676l-.047-.048C8.27 5.26 6.07 5.243 4.726 6.588l-2.29 2.29c-1.344 1.344-1.328 3.544.04 4.91 1.366 1.368 3.564 1.385 4.908.04l1.753-1.752c-.695.074-1.457-.078-2.176-.444L5.934 12.66c-.634.634-1.67.625-2.312-.017a1.637 1.637 0 01-.017-2.312L6.035 7.9c.634-.634 1.67-.625 2.312.017.024.024.048.05.07.075l.003-.002c.36.36.943.366 1.3.01a.922.922 0 00-.01-1.3l-.027-.024zM6.58 9.586l.048.05c1.367 1.366 3.565 1.384 4.91.04l2.29-2.292c1.344-1.343 1.328-3.542-.04-4.91-1.366-1.366-3.564-1.384-4.908-.04L7.127 4.187c.695-.074 1.457.078 2.176.444l1.028-1.027c.635-.634 1.67-.624 2.313.017.643.644.652 1.678.018 2.312l-2.43 2.432c-.635.634-1.67.624-2.313-.018a1.636 1.636 0 01-.07-.075l-.003.004a.918.918 0 00-1.3-.01.922.922 0 00.01 1.3c.01.007.018.015.027.023z"/></svg></div></div></a></div> <div class="copy_block__content copy" data-v-7737f7b0 data-v-5f88c873><div class="block" data-v-7737f7b0 data-v-5f88c873><div class="slp-text-body1" data-v-19cf63b5 data-v-5f88c873><div class="copy_block__text" data-v-19cf63b5 data-v-5f88c873><p><strong>Effective 1 January 2023</strong></p> <p>This Notice at Collection is provided under California law which requires us to provide California residents with additional information on how GitLab collects, uses, retains, and discloses Personal Information. California residents' additional rights are also summarized.</p> <h3 id="personal-information-we-collect">Personal Information We Collect <a class="header-anchor" href="#personal-information-we-collect" aria-hidden="true"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M12.2426 3.75736C11.4615 2.97631 10.1952 2.97631 9.41416 3.75736L7.99995 5.17157C7.60942 5.56209 6.97626 5.56209 6.58573 5.17157C6.19521 4.78105 6.19521 4.14788 6.58573 3.75736L7.99995 2.34314C9.56205 0.781046 12.0947 0.781046 13.6568 2.34314C15.2189 3.90524 15.2189 6.4379 13.6568 8L12.2426 9.41421C11.8521 9.80473 11.2189 9.80473 10.8284 9.41421C10.4379 9.02369 10.4379 8.39052 10.8284 8L12.2426 6.58578C13.0236 5.80473 13.0236 4.5384 12.2426 3.75736Z" fill="#333333"/><path d="M10.5355 5.4645C10.926 5.85502 10.926 6.48819 10.5355 6.87871L6.87863 10.5356C6.4881 10.9261 5.85494 10.9261 5.46441 10.5356C5.07389 10.145 5.07389 9.51188 5.46441 9.12135L9.12127 5.4645C9.51179 5.07397 10.145 5.07397 10.5355 5.4645Z" fill="#333333"/><path d="M3.75742 9.41422C2.97637 10.1953 2.97637 11.4616 3.75742 12.2426C4.53847 13.0237 5.8048 13.0237 6.58584 12.2426L8.00006 10.8284C8.39058 10.4379 9.02375 10.4379 9.41427 10.8284C9.8048 11.219 9.8048 11.8521 9.41427 12.2426L8.00006 13.6569C6.43796 15.219 3.9053 15.219 2.3432 13.6569C0.781107 12.0948 0.781107 9.56211 2.3432 8.00001L3.75742 6.5858C4.14794 6.19527 4.78111 6.19527 5.17163 6.5858C5.56216 6.97632 5.56215 7.60948 5.17163 8.00001L3.75742 9.41422Z" fill="#333333"/></svg></a></h3> <p>In the preceding twelve months, GitLab or our service providers may have collected the following categories of Personal Information for business or commercial purposes:</p> <ul> <li>Identifiers/Contact Information (such as a real name, alias, postal address, unique personal identifier, online identifier, internet protocol address, email address, user name, or other similar identifiers);</li> <li>Personal Information, as defined in the California customer records law section 1798.80 (such as name, contact information, employment history, credit card number, debit card number or any other financial information);</li> <li>Commercial Information (such as records of products or services purchased, obtained, or considered);</li> <li>Internet or other electronic network activity information (such as data analytics and browsing history);</li> <li>Geolocation Data (such as device location);</li> <li>Audio, electronic, visual or similar information (such as call or video recordings);</li> <li>Professional or employment-related information);</li> <li>Inferred information (such as preferences, characteristics, and predispositions); and</li> <li>Sensitive Personal Information, which may include: <ul> <li>Government identification, such as state identification information;</li> <li>Log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account; and</li> <li>The contents of your email and other electronic communications unless we are the intended recipient of the communication.</li> </ul> </li> </ul> <h3 id="sources-of-personal-information-we-collect">Sources of Personal Information We Collect <a class="header-anchor" href="#sources-of-personal-information-we-collect" aria-hidden="true"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M12.2426 3.75736C11.4615 2.97631 10.1952 2.97631 9.41416 3.75736L7.99995 5.17157C7.60942 5.56209 6.97626 5.56209 6.58573 5.17157C6.19521 4.78105 6.19521 4.14788 6.58573 3.75736L7.99995 2.34314C9.56205 0.781046 12.0947 0.781046 13.6568 2.34314C15.2189 3.90524 15.2189 6.4379 13.6568 8L12.2426 9.41421C11.8521 9.80473 11.2189 9.80473 10.8284 9.41421C10.4379 9.02369 10.4379 8.39052 10.8284 8L12.2426 6.58578C13.0236 5.80473 13.0236 4.5384 12.2426 3.75736Z" fill="#333333"/><path d="M10.5355 5.4645C10.926 5.85502 10.926 6.48819 10.5355 6.87871L6.87863 10.5356C6.4881 10.9261 5.85494 10.9261 5.46441 10.5356C5.07389 10.145 5.07389 9.51188 5.46441 9.12135L9.12127 5.4645C9.51179 5.07397 10.145 5.07397 10.5355 5.4645Z" fill="#333333"/><path d="M3.75742 9.41422C2.97637 10.1953 2.97637 11.4616 3.75742 12.2426C4.53847 13.0237 5.8048 13.0237 6.58584 12.2426L8.00006 10.8284C8.39058 10.4379 9.02375 10.4379 9.41427 10.8284C9.8048 11.219 9.8048 11.8521 9.41427 12.2426L8.00006 13.6569C6.43796 15.219 3.9053 15.219 2.3432 13.6569C0.781107 12.0948 0.781107 9.56211 2.3432 8.00001L3.75742 6.5858C4.14794 6.19527 4.78111 6.19527 5.17163 6.5858C5.56216 6.97632 5.56215 7.60948 5.17163 8.00001L3.75742 9.41422Z" fill="#333333"/></svg></a></h3> <p>We collect Personal Information from the following categories of sources, which are described in more detail in our <a href="https://about.gitlab.com/privacy/#what-personal-data-does-gitlab-collect-about-me">Privacy Statement</a>:</p> <ul> <li>Information you provide directly;</li> <li>Information we collect automatically through your acces to and use of our websites and services;</li> <li>Vendors and Partners;</li> <li>Third Party Sign-in services; and</li> <li>Other users of our services.</li> </ul> <h3 id="business-or-commercial-purposes-for-collection-of-personal-information">Business or Commercial Purposes for Collection of Personal Information <a class="header-anchor" href="#business-or-commercial-purposes-for-collection-of-personal-information" aria-hidden="true"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M12.2426 3.75736C11.4615 2.97631 10.1952 2.97631 9.41416 3.75736L7.99995 5.17157C7.60942 5.56209 6.97626 5.56209 6.58573 5.17157C6.19521 4.78105 6.19521 4.14788 6.58573 3.75736L7.99995 2.34314C9.56205 0.781046 12.0947 0.781046 13.6568 2.34314C15.2189 3.90524 15.2189 6.4379 13.6568 8L12.2426 9.41421C11.8521 9.80473 11.2189 9.80473 10.8284 9.41421C10.4379 9.02369 10.4379 8.39052 10.8284 8L12.2426 6.58578C13.0236 5.80473 13.0236 4.5384 12.2426 3.75736Z" fill="#333333"/><path d="M10.5355 5.4645C10.926 5.85502 10.926 6.48819 10.5355 6.87871L6.87863 10.5356C6.4881 10.9261 5.85494 10.9261 5.46441 10.5356C5.07389 10.145 5.07389 9.51188 5.46441 9.12135L9.12127 5.4645C9.51179 5.07397 10.145 5.07397 10.5355 5.4645Z" fill="#333333"/><path d="M3.75742 9.41422C2.97637 10.1953 2.97637 11.4616 3.75742 12.2426C4.53847 13.0237 5.8048 13.0237 6.58584 12.2426L8.00006 10.8284C8.39058 10.4379 9.02375 10.4379 9.41427 10.8284C9.8048 11.219 9.8048 11.8521 9.41427 12.2426L8.00006 13.6569C6.43796 15.219 3.9053 15.219 2.3432 13.6569C0.781107 12.0948 0.781107 9.56211 2.3432 8.00001L3.75742 6.5858C4.14794 6.19527 4.78111 6.19527 5.17163 6.5858C5.56216 6.97632 5.56215 7.60948 5.17163 8.00001L3.75742 9.41422Z" fill="#333333"/></svg></a></h3> <p>We use the Personal Information we collect for the following Business or Commercial purposes, which are further described in our Privacy Statement or otherwise disclosed to you:</p> <table> <thead> <tr> <th>Purpose of Use</th> <th>Categories of Personal Information</th> </tr> </thead> <tbody> <tr> <td><strong>Auditing interactions with consumers.</strong> To understand how our services are used and to improve services, provide trainings and educational opportunities, to enforce legal terms that govern our services</td> <td><ul><li>Identifiers/Contact information</li><li>Commercial information</li><li>Internet or other electronic network activity information</li><li>Geolocation data</li><li>Professional or employment-related information</li><li>Audio, electronic visual or similar information</li><li>Inferred Information</li></ul></td> </tr> <tr> <td><strong>Detecting security incidents and debugging.</strong> To maintain the security of our services, detect and prevent fraud and abuse.</td> <td><ul><li>Identifiers/Contact information</li><li>Personal Information, as defined in the California customer records law section 1798.80</li><li>Commercial Information</li><li>Internet or other electronic network activity information</li><li>Geolocation data</li><li>Sensitive Personal Information</li></ul></td> </tr> <tr> <td><strong>Contextual customization of ads.</strong> To understand you and your preferences in order to display advertising to you and to send you marketing content, offers, and promotions.</td> <td><ul><li>Identifiers/Contact information</li><li>Commercial information</li><li>Internet or other electronic network activity information</li><li>Geolocation data</li><li>Professional or employment-related information</li><li>Inferred information</li><ul></ul></ul></td> </tr> <tr> <td><strong>Internal Research.</strong> To improve and develop new services or features, diagnose issues, analyze use and measure effectiveness of our services to improve them in order to obtain and retain customers, and conduct research.</td> <td><ul><li>Identifiers/Contact information</li><li>Commercial information</li><li>Internet or other electronic network activity information</li><li>Geolocation data</li><li>Professional or employment-related information</li><li>Inferred information</li><ul></ul></ul></td> </tr> <tr> <td><strong>Maintaining Quality and Safety.</strong> To understand how our services are used and improve the services, to provide a forum to discuss services, to protect the rights, safety and property of GitLab, you or any third-party</td> <td><ul><li>Identifiers/Contact information</li><li>Personal Information, as defined in the California customer records law section 1798.80</li><li>Commercial information</li><li>Internet or other electronic network activity information</li><li>Geolocation data</li><li>Inferred Information</li><ul></ul></ul></td> </tr> <tr> <td><strong>Providing Customer Service, Maintaining/Servicing Customer Accounts, Verifying Customer Information.</strong> To create, identify and authenticate your access to the services, provide customer support and respond to your questions or feedback.</td> <td><ul><li> Identifiers/Contact information</li><li>Personal Information, as defined in the California customer records law section 1798.80</li><li>Commercial information</li><li>Internet or other electronic network activity information</li><li>Geolocation data</li><li> Professional or employment-related information</li><li>Sensitive Personal Information</li><ul></ul></ul></td> </tr> <tr> <td><strong>Communication with Customers.</strong> To send you information, including confirmations, technical notices and releases, security alerts, schedule maintenance, and to support administrative messages such as password reset requests.</td> <td><ul><li>Identifiers/Contact information</li><li>Commercial information</li><li>Internet or other electronic network activity information</li><li>Geolocation data</li><li>Professional or employment-related information</li><li>Sensitive Personal Information</li><ul></ul></ul></td> </tr> <tr> <td><strong>Processing Payments.</strong> To perform business operations such as billing, renewals, and payment processing.</td> <td><ul><li>Identifiers/Contact information</li><li>Personal Information, as defined in the Callifornia customer records law section 1798.80</li><li>Commercial Information</li><li>Sensitive Personal Information</li><ul></ul></ul></td> </tr> </tbody> </table> <h3 id="categories-of-personal-information-disclosed-for-a-business-purpose">Categories of Personal Information Disclosed for a Business Purpose <a class="header-anchor" href="#categories-of-personal-information-disclosed-for-a-business-purpose" aria-hidden="true"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M12.2426 3.75736C11.4615 2.97631 10.1952 2.97631 9.41416 3.75736L7.99995 5.17157C7.60942 5.56209 6.97626 5.56209 6.58573 5.17157C6.19521 4.78105 6.19521 4.14788 6.58573 3.75736L7.99995 2.34314C9.56205 0.781046 12.0947 0.781046 13.6568 2.34314C15.2189 3.90524 15.2189 6.4379 13.6568 8L12.2426 9.41421C11.8521 9.80473 11.2189 9.80473 10.8284 9.41421C10.4379 9.02369 10.4379 8.39052 10.8284 8L12.2426 6.58578C13.0236 5.80473 13.0236 4.5384 12.2426 3.75736Z" fill="#333333"/><path d="M10.5355 5.4645C10.926 5.85502 10.926 6.48819 10.5355 6.87871L6.87863 10.5356C6.4881 10.9261 5.85494 10.9261 5.46441 10.5356C5.07389 10.145 5.07389 9.51188 5.46441 9.12135L9.12127 5.4645C9.51179 5.07397 10.145 5.07397 10.5355 5.4645Z" fill="#333333"/><path d="M3.75742 9.41422C2.97637 10.1953 2.97637 11.4616 3.75742 12.2426C4.53847 13.0237 5.8048 13.0237 6.58584 12.2426L8.00006 10.8284C8.39058 10.4379 9.02375 10.4379 9.41427 10.8284C9.8048 11.219 9.8048 11.8521 9.41427 12.2426L8.00006 13.6569C6.43796 15.219 3.9053 15.219 2.3432 13.6569C0.781107 12.0948 0.781107 9.56211 2.3432 8.00001L3.75742 6.5858C4.14794 6.19527 4.78111 6.19527 5.17163 6.5858C5.56216 6.97632 5.56215 7.60948 5.17163 8.00001L3.75742 9.41422Z" fill="#333333"/></svg></a></h3> <p>We disclosed the following categories of Personal Information for a business purpose in the preceding 12-months: identifiers/contact information; Personal Information, as defined in the California customer records law section 1798.80; commercial information; internet or other electronic network activity information; geolocation data (such as device location); audio, electronic, visual or similar information (such as call or video recordings); professional or employment-related information; and inferred information (such as preferences, characteristics, and predispositions). We disclosed each category with our affiliated companies; order processing, and fulfillment vendors; payment processors and financial institutions; analytics and research vendors; information technology vendors; fraud prevention and security vendors; vendors supporting legal, compliance, accounting, audits and other internal functions; certain marketing and advertising vendors; and other third-parties as descibed in the "<a href="https://about.gitlab.com/privacy/#with-whom-does-gitlab-share-my-personal-data">With Whom does GitLab Share my Personal data?</a>" section of our Privacy Statement.</p> <h3 id="categories-of-personal-information-sold-or-shared">Categories of Personal Information Sold or Shared <a class="header-anchor" href="#categories-of-personal-information-sold-or-shared" aria-hidden="true"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M12.2426 3.75736C11.4615 2.97631 10.1952 2.97631 9.41416 3.75736L7.99995 5.17157C7.60942 5.56209 6.97626 5.56209 6.58573 5.17157C6.19521 4.78105 6.19521 4.14788 6.58573 3.75736L7.99995 2.34314C9.56205 0.781046 12.0947 0.781046 13.6568 2.34314C15.2189 3.90524 15.2189 6.4379 13.6568 8L12.2426 9.41421C11.8521 9.80473 11.2189 9.80473 10.8284 9.41421C10.4379 9.02369 10.4379 8.39052 10.8284 8L12.2426 6.58578C13.0236 5.80473 13.0236 4.5384 12.2426 3.75736Z" fill="#333333"/><path d="M10.5355 5.4645C10.926 5.85502 10.926 6.48819 10.5355 6.87871L6.87863 10.5356C6.4881 10.9261 5.85494 10.9261 5.46441 10.5356C5.07389 10.145 5.07389 9.51188 5.46441 9.12135L9.12127 5.4645C9.51179 5.07397 10.145 5.07397 10.5355 5.4645Z" fill="#333333"/><path d="M3.75742 9.41422C2.97637 10.1953 2.97637 11.4616 3.75742 12.2426C4.53847 13.0237 5.8048 13.0237 6.58584 12.2426L8.00006 10.8284C8.39058 10.4379 9.02375 10.4379 9.41427 10.8284C9.8048 11.219 9.8048 11.8521 9.41427 12.2426L8.00006 13.6569C6.43796 15.219 3.9053 15.219 2.3432 13.6569C0.781107 12.0948 0.781107 9.56211 2.3432 8.00001L3.75742 6.5858C4.14794 6.19527 4.78111 6.19527 5.17163 6.5858C5.56216 6.97632 5.56215 7.60948 5.17163 8.00001L3.75742 9.41422Z" fill="#333333"/></svg></a></h3> <p>Under California law, the transmission of cookie identifiers and browsing behaviors to third-parties for interest-based advertising or cross-context behavioral advertising may be considered a sale of Personal Information. Subject to certain uses of the Services, we may share such Personal Information with third-parties, which may be considered a sale. We do not sell or share Sensitive Personal Information, nor do we sell or share any Personal Information about individuals who we know are under the age of 16. In the preceding 12-months, GitLab may have sold or shared the following categories of Personal Information to the following categories of third-party recipients for the purposes listed below.</p> <table> <thead> <tr> <th>Categories of Personal Information Sold or Shared</th> <th>Categories of Third-Party Recipients</th> <th>Purpose of Disclosure</th> </tr> </thead> <tbody> <tr> <td>Identifiers/Contact information<br>Internet or other electronic network activity information<br>Geolocation data<br>Inferred information</td> <td>Data Analytics Providers, Advertising Networks, Social Networks</td> <td>Interest based advertising, data enrichment</td> </tr> </tbody> </table> <h3 id="retention-and-deletion">Retention and Deletion <a class="header-anchor" href="#retention-and-deletion" aria-hidden="true"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M12.2426 3.75736C11.4615 2.97631 10.1952 2.97631 9.41416 3.75736L7.99995 5.17157C7.60942 5.56209 6.97626 5.56209 6.58573 5.17157C6.19521 4.78105 6.19521 4.14788 6.58573 3.75736L7.99995 2.34314C9.56205 0.781046 12.0947 0.781046 13.6568 2.34314C15.2189 3.90524 15.2189 6.4379 13.6568 8L12.2426 9.41421C11.8521 9.80473 11.2189 9.80473 10.8284 9.41421C10.4379 9.02369 10.4379 8.39052 10.8284 8L12.2426 6.58578C13.0236 5.80473 13.0236 4.5384 12.2426 3.75736Z" fill="#333333"/><path d="M10.5355 5.4645C10.926 5.85502 10.926 6.48819 10.5355 6.87871L6.87863 10.5356C6.4881 10.9261 5.85494 10.9261 5.46441 10.5356C5.07389 10.145 5.07389 9.51188 5.46441 9.12135L9.12127 5.4645C9.51179 5.07397 10.145 5.07397 10.5355 5.4645Z" fill="#333333"/><path d="M3.75742 9.41422C2.97637 10.1953 2.97637 11.4616 3.75742 12.2426C4.53847 13.0237 5.8048 13.0237 6.58584 12.2426L8.00006 10.8284C8.39058 10.4379 9.02375 10.4379 9.41427 10.8284C9.8048 11.219 9.8048 11.8521 9.41427 12.2426L8.00006 13.6569C6.43796 15.219 3.9053 15.219 2.3432 13.6569C0.781107 12.0948 0.781107 9.56211 2.3432 8.00001L3.75742 6.5858C4.14794 6.19527 4.78111 6.19527 5.17163 6.5858C5.56216 6.97632 5.56215 7.60948 5.17163 8.00001L3.75742 9.41422Z" fill="#333333"/></svg></a></h3> <p>Please review the <a href="https://about.gitlab.com/privacy/#Data%20Retention">Data Retention</a> section of our Privacy Statement for more information about how long GitLab retains Personal Information.</p> </div></div>   </div></div></div></div></section><section data-v-495d6e81><div class="slp-container" data-v-db4b02a6 data-v-5f88c873><div class="slp-col-md" data-v-7737f7b0 data-v-5f88c873><div class="decoration" data-v-7737f7b0 data-v-5f88c873></div> <div class="anchor-header" data-v-7737f7b0 data-v-5f88c873><h2 id="california-privacy-rights" class="copy_block__header slp-text-heading2-bold" data-v-19cf63b5 data-v-5f88c873>California Privacy Rights </h2> <a href="#california-privacy-rights" data-v-7737f7b0 data-v-5f88c873><div role="img" aria-hidden="true" class="slp-icon slp-icon--size-md slp-icon--color-color-text-300" style="color:color-text-300" data-v-e356681a data-v-5f88c873><div data-v-e356681a><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 16 16"><path fill="currentColor" fill-rule="evenodd" d="M9.683 6.676l-.047-.048C8.27 5.26 6.07 5.243 4.726 6.588l-2.29 2.29c-1.344 1.344-1.328 3.544.04 4.91 1.366 1.368 3.564 1.385 4.908.04l1.753-1.752c-.695.074-1.457-.078-2.176-.444L5.934 12.66c-.634.634-1.67.625-2.312-.017a1.637 1.637 0 01-.017-2.312L6.035 7.9c.634-.634 1.67-.625 2.312.017.024.024.048.05.07.075l.003-.002c.36.36.943.366 1.3.01a.922.922 0 00-.01-1.3l-.027-.024zM6.58 9.586l.048.05c1.367 1.366 3.565 1.384 4.91.04l2.29-2.292c1.344-1.343 1.328-3.542-.04-4.91-1.366-1.366-3.564-1.384-4.908-.04L7.127 4.187c.695-.074 1.457.078 2.176.444l1.028-1.027c.635-.634 1.67-.624 2.313.017.643.644.652 1.678.018 2.312l-2.43 2.432c-.635.634-1.67.624-2.313-.018a1.636 1.636 0 01-.07-.075l-.003.004a.918.918 0 00-1.3-.01.922.922 0 00.01 1.3c.01.007.018.015.027.023z"/></svg></div></div></a></div> <div class="copy_block__content copy" data-v-7737f7b0 data-v-5f88c873><div class="block" data-v-7737f7b0 data-v-5f88c873><div class="slp-text-body1" data-v-19cf63b5 data-v-5f88c873><div class="copy_block__text" data-v-19cf63b5 data-v-5f88c873><p>You are entitled to certain rights as a California resident, which include:</p> <ul> <li>Right to Know, in addition to what we have provided in this US State Privacy Rights and Disclosures Statement, what Personal Information we have collected from you in the preceding 12 months, including access to specific categories and pieces of Personal Information about you that we collect, use, disclose, sell, and share;</li> <li>Right to delete your Personal Information;</li> <li>Right correct your Personal Information;</li> <li>Right to non-discrimination of service or price if you exercise your privacy rights, and GitLab will not deny providing you with the Services or charge you different prices if you exercise your rights;</li> <li>You have the right to know whether your Personal Information is sold or shared and to opt-out of the sale of your Personal Information. You may opt-out of interest-based advertising based on your browser by exercising the Do Not Sell or Share My Personal Information link in the footer or header of our sites. You may exercise all other California rights as described in the <a href="https://about.gitlab.com/privacy/#what-are-my-rights-and-choices-regarding-personal-data">Rights and Choices</a> section of the GitLab Privacy Statement; and</li> <li>You have the right to receive notice of our privacy practices at or before the point where your Personal Information is collected. This US State Privacy Rights and Disclosures as well as our Privacy Statement serve as our Notice of Collection.</li> </ul> <p>You may designate, in writing or through a power of attorney, an authorized agent to make requests on your behalf to exercise your rights under California law. Before accepting such a request from an agent, we will require the agent to provide proof you have authorized them to act on your behalf, and we may need you to verify your identity directly with us. To provide or delete specific pieces of Personal Information we will need to verify your identity to the degree of certainty required by law. We will verify your request by using one of the methods set forth <a href="https://handbook.gitlab.com/handbook/gdpr/">here</a>.</p> </div></div>   </div></div></div></div></section><section data-v-495d6e81><div class="slp-container" data-v-db4b02a6 data-v-5f88c873><div class="slp-col-md" data-v-7737f7b0 data-v-5f88c873><div class="decoration" data-v-7737f7b0 data-v-5f88c873></div> <div class="anchor-header" data-v-7737f7b0 data-v-5f88c873><h2 id="virginia" class="copy_block__header slp-text-heading2-bold" data-v-19cf63b5 data-v-5f88c873>Virginia </h2> <a href="#virginia" data-v-7737f7b0 data-v-5f88c873><div role="img" aria-hidden="true" class="slp-icon slp-icon--size-md slp-icon--color-color-text-300" style="color:color-text-300" data-v-e356681a data-v-5f88c873><div data-v-e356681a><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 16 16"><path fill="currentColor" fill-rule="evenodd" d="M9.683 6.676l-.047-.048C8.27 5.26 6.07 5.243 4.726 6.588l-2.29 2.29c-1.344 1.344-1.328 3.544.04 4.91 1.366 1.368 3.564 1.385 4.908.04l1.753-1.752c-.695.074-1.457-.078-2.176-.444L5.934 12.66c-.634.634-1.67.625-2.312-.017a1.637 1.637 0 01-.017-2.312L6.035 7.9c.634-.634 1.67-.625 2.312.017.024.024.048.05.07.075l.003-.002c.36.36.943.366 1.3.01a.922.922 0 00-.01-1.3l-.027-.024zM6.58 9.586l.048.05c1.367 1.366 3.565 1.384 4.91.04l2.29-2.292c1.344-1.343 1.328-3.542-.04-4.91-1.366-1.366-3.564-1.384-4.908-.04L7.127 4.187c.695-.074 1.457.078 2.176.444l1.028-1.027c.635-.634 1.67-.624 2.313.017.643.644.652 1.678.018 2.312l-2.43 2.432c-.635.634-1.67.624-2.313-.018a1.636 1.636 0 01-.07-.075l-.003.004a.918.918 0 00-1.3-.01.922.922 0 00.01 1.3c.01.007.018.015.027.023z"/></svg></div></div></a></div> <div class="copy_block__content copy" data-v-7737f7b0 data-v-5f88c873><div class="block" data-v-7737f7b0 data-v-5f88c873><div class="slp-text-body1" data-v-19cf63b5 data-v-5f88c873><div class="copy_block__text" data-v-19cf63b5 data-v-5f88c873><p><strong>Effective 1 January 2023</strong></p> <p>This notice is provided under the Virginia Consumer Data Protection Act ("VCDPA") and explains the privacy rights of Virginia residents. It also provides certain mandated disclosures about our treatment of Virginia residents' Personal Data.</p> <h3 id="categories-of-personal-data-processed">Categories of Personal Data processed <a class="header-anchor" href="#categories-of-personal-data-processed" aria-hidden="true"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M12.2426 3.75736C11.4615 2.97631 10.1952 2.97631 9.41416 3.75736L7.99995 5.17157C7.60942 5.56209 6.97626 5.56209 6.58573 5.17157C6.19521 4.78105 6.19521 4.14788 6.58573 3.75736L7.99995 2.34314C9.56205 0.781046 12.0947 0.781046 13.6568 2.34314C15.2189 3.90524 15.2189 6.4379 13.6568 8L12.2426 9.41421C11.8521 9.80473 11.2189 9.80473 10.8284 9.41421C10.4379 9.02369 10.4379 8.39052 10.8284 8L12.2426 6.58578C13.0236 5.80473 13.0236 4.5384 12.2426 3.75736Z" fill="#333333"/><path d="M10.5355 5.4645C10.926 5.85502 10.926 6.48819 10.5355 6.87871L6.87863 10.5356C6.4881 10.9261 5.85494 10.9261 5.46441 10.5356C5.07389 10.145 5.07389 9.51188 5.46441 9.12135L9.12127 5.4645C9.51179 5.07397 10.145 5.07397 10.5355 5.4645Z" fill="#333333"/><path d="M3.75742 9.41422C2.97637 10.1953 2.97637 11.4616 3.75742 12.2426C4.53847 13.0237 5.8048 13.0237 6.58584 12.2426L8.00006 10.8284C8.39058 10.4379 9.02375 10.4379 9.41427 10.8284C9.8048 11.219 9.8048 11.8521 9.41427 12.2426L8.00006 13.6569C6.43796 15.219 3.9053 15.219 2.3432 13.6569C0.781107 12.0948 0.781107 9.56211 2.3432 8.00001L3.75742 6.5858C4.14794 6.19527 4.78111 6.19527 5.17163 6.5858C5.56216 6.97632 5.56215 7.60948 5.17163 8.00001L3.75742 9.41422Z" fill="#333333"/></svg></a></h3> <p>We collect the Personal Data detailed in the "<a href="https://about.gitlab.com/privacy/#what-personal-data-does-gitlab-collect-about-me">What Personal Data does GitLab collect about me?</a>" section of our Privacy Statement.</p> <h3 id="purpose-for-processing-personal-data">Purpose for processing Personal Data <a class="header-anchor" href="#purpose-for-processing-personal-data" aria-hidden="true"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M12.2426 3.75736C11.4615 2.97631 10.1952 2.97631 9.41416 3.75736L7.99995 5.17157C7.60942 5.56209 6.97626 5.56209 6.58573 5.17157C6.19521 4.78105 6.19521 4.14788 6.58573 3.75736L7.99995 2.34314C9.56205 0.781046 12.0947 0.781046 13.6568 2.34314C15.2189 3.90524 15.2189 6.4379 13.6568 8L12.2426 9.41421C11.8521 9.80473 11.2189 9.80473 10.8284 9.41421C10.4379 9.02369 10.4379 8.39052 10.8284 8L12.2426 6.58578C13.0236 5.80473 13.0236 4.5384 12.2426 3.75736Z" fill="#333333"/><path d="M10.5355 5.4645C10.926 5.85502 10.926 6.48819 10.5355 6.87871L6.87863 10.5356C6.4881 10.9261 5.85494 10.9261 5.46441 10.5356C5.07389 10.145 5.07389 9.51188 5.46441 9.12135L9.12127 5.4645C9.51179 5.07397 10.145 5.07397 10.5355 5.4645Z" fill="#333333"/><path d="M3.75742 9.41422C2.97637 10.1953 2.97637 11.4616 3.75742 12.2426C4.53847 13.0237 5.8048 13.0237 6.58584 12.2426L8.00006 10.8284C8.39058 10.4379 9.02375 10.4379 9.41427 10.8284C9.8048 11.219 9.8048 11.8521 9.41427 12.2426L8.00006 13.6569C6.43796 15.219 3.9053 15.219 2.3432 13.6569C0.781107 12.0948 0.781107 9.56211 2.3432 8.00001L3.75742 6.5858C4.14794 6.19527 4.78111 6.19527 5.17163 6.5858C5.56216 6.97632 5.56215 7.60948 5.17163 8.00001L3.75742 9.41422Z" fill="#333333"/></svg></a></h3> <p>The purposes for processing your Personal Data are found in the "<a href="https://about.gitlab.com/privacy/#how-does-gitlab-use-my-personal-data-and-our-legal-basis-for-processing">How Does GitLab use my Personal Data and our Legal Basis For Processing</a>" section of our Privacy Statement.</p> <h3 id="disclosure-of-personal-data">Disclosure of Personal Data <a class="header-anchor" href="#disclosure-of-personal-data" aria-hidden="true"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M12.2426 3.75736C11.4615 2.97631 10.1952 2.97631 9.41416 3.75736L7.99995 5.17157C7.60942 5.56209 6.97626 5.56209 6.58573 5.17157C6.19521 4.78105 6.19521 4.14788 6.58573 3.75736L7.99995 2.34314C9.56205 0.781046 12.0947 0.781046 13.6568 2.34314C15.2189 3.90524 15.2189 6.4379 13.6568 8L12.2426 9.41421C11.8521 9.80473 11.2189 9.80473 10.8284 9.41421C10.4379 9.02369 10.4379 8.39052 10.8284 8L12.2426 6.58578C13.0236 5.80473 13.0236 4.5384 12.2426 3.75736Z" fill="#333333"/><path d="M10.5355 5.4645C10.926 5.85502 10.926 6.48819 10.5355 6.87871L6.87863 10.5356C6.4881 10.9261 5.85494 10.9261 5.46441 10.5356C5.07389 10.145 5.07389 9.51188 5.46441 9.12135L9.12127 5.4645C9.51179 5.07397 10.145 5.07397 10.5355 5.4645Z" fill="#333333"/><path d="M3.75742 9.41422C2.97637 10.1953 2.97637 11.4616 3.75742 12.2426C4.53847 13.0237 5.8048 13.0237 6.58584 12.2426L8.00006 10.8284C8.39058 10.4379 9.02375 10.4379 9.41427 10.8284C9.8048 11.219 9.8048 11.8521 9.41427 12.2426L8.00006 13.6569C6.43796 15.219 3.9053 15.219 2.3432 13.6569C0.781107 12.0948 0.781107 9.56211 2.3432 8.00001L3.75742 6.5858C4.14794 6.19527 4.78111 6.19527 5.17163 6.5858C5.56216 6.97632 5.56215 7.60948 5.17163 8.00001L3.75742 9.41422Z" fill="#333333"/></svg></a></h3> <p>We may share each of the categories of Personal Data listed in our Privacy Statement with those third-parties detailed in the section titled "<a href="https://about.gitlab.com/privacy/#with-whom-does-gitlab-share-my-personal-data">With Whom does GitLab share my Personal Data?</a>"</p> <h3 id="virginia-resident-rights">Virginia Resident Rights <a class="header-anchor" href="#virginia-resident-rights" aria-hidden="true"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M12.2426 3.75736C11.4615 2.97631 10.1952 2.97631 9.41416 3.75736L7.99995 5.17157C7.60942 5.56209 6.97626 5.56209 6.58573 5.17157C6.19521 4.78105 6.19521 4.14788 6.58573 3.75736L7.99995 2.34314C9.56205 0.781046 12.0947 0.781046 13.6568 2.34314C15.2189 3.90524 15.2189 6.4379 13.6568 8L12.2426 9.41421C11.8521 9.80473 11.2189 9.80473 10.8284 9.41421C10.4379 9.02369 10.4379 8.39052 10.8284 8L12.2426 6.58578C13.0236 5.80473 13.0236 4.5384 12.2426 3.75736Z" fill="#333333"/><path d="M10.5355 5.4645C10.926 5.85502 10.926 6.48819 10.5355 6.87871L6.87863 10.5356C6.4881 10.9261 5.85494 10.9261 5.46441 10.5356C5.07389 10.145 5.07389 9.51188 5.46441 9.12135L9.12127 5.4645C9.51179 5.07397 10.145 5.07397 10.5355 5.4645Z" fill="#333333"/><path d="M3.75742 9.41422C2.97637 10.1953 2.97637 11.4616 3.75742 12.2426C4.53847 13.0237 5.8048 13.0237 6.58584 12.2426L8.00006 10.8284C8.39058 10.4379 9.02375 10.4379 9.41427 10.8284C9.8048 11.219 9.8048 11.8521 9.41427 12.2426L8.00006 13.6569C6.43796 15.219 3.9053 15.219 2.3432 13.6569C0.781107 12.0948 0.781107 9.56211 2.3432 8.00001L3.75742 6.5858C4.14794 6.19527 4.78111 6.19527 5.17163 6.5858C5.56216 6.97632 5.56215 7.60948 5.17163 8.00001L3.75742 9.41422Z" fill="#333333"/></svg></a></h3> <ul> <li>Right to know whether GitLab processes your Personal Data and to access it;</li> <li>Right to correct inaccuracies in Personal Data;</li> <li>Right to delete Personal Data;</li> <li>Right of data portability;</li> <li>Right to opt out from targeted advertising; and</li> <li>Right to opt out from the sale of Personal Data.</li> </ul> <h3 id="how-to-exercise-virginia-privacy-rights">How to Exercise Virginia Privacy Rights <a class="header-anchor" href="#how-to-exercise-virginia-privacy-rights" aria-hidden="true"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M12.2426 3.75736C11.4615 2.97631 10.1952 2.97631 9.41416 3.75736L7.99995 5.17157C7.60942 5.56209 6.97626 5.56209 6.58573 5.17157C6.19521 4.78105 6.19521 4.14788 6.58573 3.75736L7.99995 2.34314C9.56205 0.781046 12.0947 0.781046 13.6568 2.34314C15.2189 3.90524 15.2189 6.4379 13.6568 8L12.2426 9.41421C11.8521 9.80473 11.2189 9.80473 10.8284 9.41421C10.4379 9.02369 10.4379 8.39052 10.8284 8L12.2426 6.58578C13.0236 5.80473 13.0236 4.5384 12.2426 3.75736Z" fill="#333333"/><path d="M10.5355 5.4645C10.926 5.85502 10.926 6.48819 10.5355 6.87871L6.87863 10.5356C6.4881 10.9261 5.85494 10.9261 5.46441 10.5356C5.07389 10.145 5.07389 9.51188 5.46441 9.12135L9.12127 5.4645C9.51179 5.07397 10.145 5.07397 10.5355 5.4645Z" fill="#333333"/><path d="M3.75742 9.41422C2.97637 10.1953 2.97637 11.4616 3.75742 12.2426C4.53847 13.0237 5.8048 13.0237 6.58584 12.2426L8.00006 10.8284C8.39058 10.4379 9.02375 10.4379 9.41427 10.8284C9.8048 11.219 9.8048 11.8521 9.41427 12.2426L8.00006 13.6569C6.43796 15.219 3.9053 15.219 2.3432 13.6569C0.781107 12.0948 0.781107 9.56211 2.3432 8.00001L3.75742 6.5858C4.14794 6.19527 4.78111 6.19527 5.17163 6.5858C5.56216 6.97632 5.56215 7.60948 5.17163 8.00001L3.75742 9.41422Z" fill="#333333"/></svg></a></h3> <p>To make an access, correction, deletion or portability request, use the <a href="https://handbook.gitlab.com/handbook/gdpr/">Personal Data Request Form</a>. You may designate in writing or through a power of attorney, an authorized agent to make requests on your behalf to exercise your rights under VCDPA. Before accepting such a request from an agent, we will require the agent to provide proof you have authorized them to act on your behalf, and we may need you to verify your identity directly with us. To provide or delete specific pieces of Personal Data we will need to verify your identity to the degree of certainty required by law. We will verify your request by using one of the methods set for <a href="https://handbook.gitlab.com/handbook/gdpr/">here</a>. We do not sell your Personal Data, as the term "sale" is defined under the VCDPA.</p> <h3 id="personal-data-processed-for-targeted-advertising">Personal Data processed for Targeted Advertising <a class="header-anchor" href="#personal-data-processed-for-targeted-advertising" aria-hidden="true"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M12.2426 3.75736C11.4615 2.97631 10.1952 2.97631 9.41416 3.75736L7.99995 5.17157C7.60942 5.56209 6.97626 5.56209 6.58573 5.17157C6.19521 4.78105 6.19521 4.14788 6.58573 3.75736L7.99995 2.34314C9.56205 0.781046 12.0947 0.781046 13.6568 2.34314C15.2189 3.90524 15.2189 6.4379 13.6568 8L12.2426 9.41421C11.8521 9.80473 11.2189 9.80473 10.8284 9.41421C10.4379 9.02369 10.4379 8.39052 10.8284 8L12.2426 6.58578C13.0236 5.80473 13.0236 4.5384 12.2426 3.75736Z" fill="#333333"/><path d="M10.5355 5.4645C10.926 5.85502 10.926 6.48819 10.5355 6.87871L6.87863 10.5356C6.4881 10.9261 5.85494 10.9261 5.46441 10.5356C5.07389 10.145 5.07389 9.51188 5.46441 9.12135L9.12127 5.4645C9.51179 5.07397 10.145 5.07397 10.5355 5.4645Z" fill="#333333"/><path d="M3.75742 9.41422C2.97637 10.1953 2.97637 11.4616 3.75742 12.2426C4.53847 13.0237 5.8048 13.0237 6.58584 12.2426L8.00006 10.8284C8.39058 10.4379 9.02375 10.4379 9.41427 10.8284C9.8048 11.219 9.8048 11.8521 9.41427 12.2426L8.00006 13.6569C6.43796 15.219 3.9053 15.219 2.3432 13.6569C0.781107 12.0948 0.781107 9.56211 2.3432 8.00001L3.75742 6.5858C4.14794 6.19527 4.78111 6.19527 5.17163 6.5858C5.56216 6.97632 5.56215 7.60948 5.17163 8.00001L3.75742 9.41422Z" fill="#333333"/></svg></a></h3> <p>We process and disclose the following categories of Personal Data for targeted advertising: device information and identifiers, website usage data, and other online activity data provided through cookies and similar tracking technologies. We share each category with advertising agencies, data anlytics providers, and social networks.</p> <h3 id="how-to-optout-from-targeted-advertising">How to Opt-Out from Targeted Advertising <a class="header-anchor" href="#how-to-optout-from-targeted-advertising" aria-hidden="true"><svg width="16" height="16" viewBox="0 0 16 16" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M12.2426 3.75736C11.4615 2.97631 10.1952 2.97631 9.41416 3.75736L7.99995 5.17157C7.60942 5.56209 6.97626 5.56209 6.58573 5.17157C6.19521 4.78105 6.19521 4.14788 6.58573 3.75736L7.99995 2.34314C9.56205 0.781046 12.0947 0.781046 13.6568 2.34314C15.2189 3.90524 15.2189 6.4379 13.6568 8L12.2426 9.41421C11.8521 9.80473 11.2189 9.80473 10.8284 9.41421C10.4379 9.02369 10.4379 8.39052 10.8284 8L12.2426 6.58578C13.0236 5.80473 13.0236 4.5384 12.2426 3.75736Z" fill="#333333"/><path d="M10.5355 5.4645C10.926 5.85502 10.926 6.48819 10.5355 6.87871L6.87863 10.5356C6.4881 10.9261 5.85494 10.9261 5.46441 10.5356C5.07389 10.145 5.07389 9.51188 5.46441 9.12135L9.12127 5.4645C9.51179 5.07397 10.145 5.07397 10.5355 5.4645Z" fill="#333333"/><path d="M3.75742 9.41422C2.97637 10.1953 2.97637 11.4616 3.75742 12.2426C4.53847 13.0237 5.8048 13.0237 6.58584 12.2426L8.00006 10.8284C8.39058 10.4379 9.02375 10.4379 9.41427 10.8284C9.8048 11.219 9.8048 11.8521 9.41427 12.2426L8.00006 13.6569C6.43796 15.219 3.9053 15.219 2.3432 13.6569C0.781107 12.0948 0.781107 9.56211 2.3432 8.00001L3.75742 6.5858C4.14794 6.19527 4.78111 6.19527 5.17163 6.5858C5.56216 6.97632 5.56215 7.60948 5.17163 8.00001L3.75742 9.41422Z" fill="#333333"/></svg></a></h3> <p>To opt out from targeted advertising, click on the Cookie Preferences link in the footer or header of each of our website pages. An opt-out request will be specific to the device and browser you are using. Therefore you will need to opt-out from each browser that you use to access GitLab websites and services.</p> </div></div>   </div></div></div></div></section></div><section id="collapsible-sidebar" data-v-495d6e81><div class="anchors" data-v-495d6e81><div class="nav-heading slp-text-body3-bold" data-v-19cf63b5 data-v-495d6e81>On this page</div><div class="depth-0" data-v-2c4a6705 data-v-495d6e81><div class="depth-1" data-v-2c4a6705 data-v-2c4a6705><a href="#California" data-ga-name="" data-ga-location="" class="anchor" data-v-2c4a6705>California</a></div><div class="depth-1" data-v-2c4a6705 data-v-2c4a6705><a href="#california-privacy-rights" data-ga-name="" data-ga-location="" class="anchor" data-v-2c4a6705>California Privacy Rights</a></div><div class="depth-1" data-v-2c4a6705 data-v-2c4a6705><a href="#virginia" data-ga-name="" data-ga-location="" class="anchor" data-v-2c4a6705>Virginia</a></div></div></div></section></div></div> <div data-fetch-key="data-v-002728ec:0" class="slp-container" style="display:none" data-v-db4b02a6 data-v-002728ec><div class="slp-container slp-my-96" data-v-db4b02a6 data-v-002728ec><div class="slp-row w-100 prevent-overflow" data-v-2d4c763f data-v-002728ec><div data-aos="fade-right" data-aos-duration="800" class="slp-col-lg-6" data-v-7737f7b0 data-v-002728ec><h2 class="slp-mb-16 slp-pr-72 slp-text-heading2-bold" data-v-19cf63b5 data-v-002728ec>Take GitLab for a spin</h2> <p class="slp-mb-24 slp-text-heading4" data-v-19cf63b5 data-v-002728ec> See what your team can do with a single platform for software delivery. </p> <a href="https://gitlab.com/-/trial_registrations/new?glm_content=privacy/us-state-privacy-rights-and-disclosures&glm_source=about.gitlab.com" data-ga-name="free trial" data-ga-location="feature" aria-label="feature free trial" class="slp-btn slp-btn-primary" data-v-52cd803a data-v-002728ec> Get free trial </a>  </div> <div data-aos="fade-left" data-aos-duration="800" class="slp-mt-64-sm slp-col-lg-6" data-v-7737f7b0 data-v-002728ec><div class="slp-flex w-100" data-v-7737f7b0 data-v-002728ec><div class="vertical-line" data-v-7737f7b0 data-v-002728ec></div> <div class="slp-flex w-100 right-column" data-v-7737f7b0 data-v-002728ec><img src="//images.ctfassets.net/xz1dnu24egyd/2ouky0TRvapIoHpqLsJD1C/4a96055848d7e679da16c7d15ea4295d/next-step.png?" alt="Headshots of three people" class="slp-mb-16 right-column_image" data-v-7737f7b0 data-v-002728ec> <p class="slp-mb-24 slp-text-heading4" data-v-19cf63b5 data-v-002728ec> Have a question? We're here to help. </p> <a href="/sales/" data-ga-name="sales" data-ga-location="feature" aria-label="feature sales" class="slp-btn slp-btn-tertiary" data-v-52cd803a data-v-002728ec> Talk to an expert <div role="img" aria-hidden="true" alt="Chevron Right Icon" class="slp-icon slp-icon--color-color-text-300" style="color:color-text-300;width:16px;height:16px" data-v-e356681a data-v-002728ec><div data-v-e356681a><svg width="16" height="16" viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M5.22 2.22a.75.75 0 011.06 0l5.252 5.252a.75.75 0 010 1.06L6.28 13.784a.75.75 0 11-1.06-1.06l4.72-4.723L5.22 3.28a.75.75 0 010-1.06z"/></svg></div></div></a></div></div></div></div></div></div></div> <section data-fetch-key="SlpFooterHOC:0"></section></div></div></div><script defer src="/_nuxt/static/1732377904/privacy/us-state-privacy-rights-and-disclosures/state.js"></script><script src="/_nuxt/a5e5ed7.js" defer></script><script src="/_nuxt/41dd6a4.js" defer></script><script src="/_nuxt/5a8cdbe.js" defer></script><script src="/_nuxt/52a471a.js" defer></script> </body> </html>