Privacy Policy

PRIVACY POLICY

This Notice (this “Notice”) explains how Rack Room Shoes, Inc. and our affiliated companies (“Rack Room”, “we”, “us”, or “our”) collect, use, store, disclose, and otherwise process Personal Information (as defined below) when you interact with us, including through our website (https://www.rackroomshoes.com/privacy), mobile applications (including iOS and Android), loyalty programs, customer service channels, retail stores, and other online and offline platforms, services, and experiences where this Notice is presented or made available to you (collectively, our “Services”).

This Notice does not apply to Personal Information we collect as an employer, such as information about employees, job applicants, independent contractors, or other personnel, or to information about individuals acting on behalf of our vendors, suppliers, business partners, or other business-to-business counterparties.

Please review this Notice carefully. When you interact with us, including by visiting our website or a store, using our mobile applications, joining our Rewards Program, making a purchase (including an in-store purchase), or otherwise using our Services, your Personal Information may be collected, used, disclosed, retained, and otherwise processed as described in this Notice.

This Privacy Policy was last updated on August 8, 2026.

 

WHAT PERSONAL INFORMATION WE COLLECT

Depending on how you interact with us, we may collect the categories of Personal Information described below. “Personal Information” means information that identifies, relates to, describes, or could reasonably be linked, directly or indirectly, with a particular individual, subject to applicable law, and includes “personal data” as used in applicable privacy laws. We may not collect every example listed.

• Identifiers: name, alias, postal address, unique personal identifier, online identifier, Internet Protocol (“IP”) address, email address, telephone number, username and password. We may also collect limited Personal Information about gift recipients solely to fulfill gift orders, and we create a member number when you join our Rewards Program.


• California Customer Records Information: name, address, telephone number, billing address, shipping address, and payment information necessary to process purchases and returns.


• Protected Classification Characteristics: information such as date of birth (which may reveal age), month of birth, gender, race, and color, to the extent you provide it.


• Commercial Information: records of products and services you purchase, obtain, or consider; details of your orders and transactions; information about gift recipients to fulfill gift orders; and other purchasing histories or tendencies.


• Internet or Other Electronic Network Activity: online and device identifiers; advertising identifiers (such as IDFA or Google Advertising ID); operating system, browser, and application details; device type and model; access times; Internet service provider or mobile carrier; referring URLs; search queries; browsing and in-app activity; click-stream data; and your interactions with our Services, emails, and advertisements.


• Interaction Data: information about traffic patterns and your interactions with our Services, emails, and advertisements, including delivery status, read receipts, and interactions with links or buttons where supported by your device and carrier.


• Geolocation Data: approximate location derived from your IP address or device settings when you use our Services.


• Audio, Electronic, Visual, or Similar Information: customer-service communications and call recordings, where permitted by law; security video footage from in-store cameras, where permitted by law; and photographs or videos you provide for product reviews or customer support, or that you post on social media and tag us in. Information you post publicly on social media is visible to others, and we are not responsible for information you choose to share that way.


• Content of Communications: the content of emails, customer-service requests, chatbot conversations, website and app chats, survey responses, and delivery-related messages or instructions.


• Personal Characteristics and Demographic Information: shoe size, month of birth, gender, marital status, household income range, preferred language, household and family information you choose to provide, product preferences, and other information you voluntarily provide through our Rewards Program or other loyalty programs or surveys or focus groups. At select store locations, we also collect foot-measurement information through an optional in-store foot-measurement device, as described in the section titled “Optional In-Store Foot Measurement Technology” below. This includes the selections you enter on a touchscreen, foot measurements and other outputs generated by the scan (including a three-dimensional image of your foot and graphical representations such as pressure plots), and a recommended shoe size. We use this information to recommend footwear size and fit; we do not use it to identify you.


• Sensitive Information: such as precise geolocation when you enable location services or use location-enabled features in or near our stores. We use this information to provide location-based features you request, improve store-related functionality, maintain the security of our Services, and for other purposes permitted by applicable law. We do not use Sensitive Personal Information to infer characteristics about you, such as your race or ethnicity.


• Inferences: inferences drawn from the above to create a profile reflecting your preferences and characteristics

Where permitted by applicable law, we may combine, supplement, and enrich Personal Information we collect from or about you across our Services and other interactions with us with information we receive from other sources, including service providers, analytics and advertising partners, business partners, commercial data providers, and publicly available sources. We may use this combined information to help us better understand our customers, improve our Services, personalize your experience, support our marketing and business operations and detect fraud, protect our Services, maintain security, comply with legal obligations and otherwise operate our business.

 

HOW WE COLLECT PERSONAL INFORMATION

In accordance with applicable law, we may collect Personal Information from the following sources, depending on how you interact with us:

• Directly from you, when you make a purchase or return; create or manage an account; sign up for emails, texts, or loyalty programs; redeem rewards, participate in promotions, surveys, focus groups, or sweepstakes; participate in product sizing or fitting experiences, post reviews or other content; contact customer service; apply for a job; or otherwise use our Services, including our website, mobile application, or in our stores.


• Information generated or derived through your interactions with us, such as account credentials, purchase history, preferences, loyalty program activity and inferences drawn from your interactions, which we use to improve our Services, personalize your experience, and support our operations.


• From service providers acting on our behalf, such as providers of payment processing, order fulfillment, shipping, marketing, analytics, fraud prevention, customer support, and IT services.


• From third parties, such as advertising networks, advertising partners, analytics providers, social media platforms, data providers, and other business partners, where permitted by law.


• From affiliates and related companies, for business, operational, and administrative purposes, as permitted by law.


• From law enforcement, courts, regulators, and government agencies in connection with lawful requests, legal process, regulatory compliance, the protection of the rights, property, or safety of Rack Room Shoes, our customers, employees, or others, and to investigate, prevent, or respond to fraud, security incidents, or other unlawful activity.


• From business-transaction parties, in connection with a corporate transaction such as a merger, acquisition, financing, reorganization, bankruptcy, or sale or transfer of all or part of our business or assets, as permitted by law.


• From public sources, including publicly available information, social media platforms, public records, or information you make publicly available, where permitted by law.

Automatically, when you use our Services, such as when you visit our website, use our mobile applications, interact with our emails or digital advertisements, or visit our retail locations. We and our service providers may collect information automatically through cookies, pixels, tags, software development kits (SDK's), session replay technologies, and similar technologies and, where permitted by law, through in-store technologies such as video surveillance and in-store Wi-Fi services and device interactions in or near our stores.

 

HOW WE USE PERSONAL INFORMATION

In accordance with applicable law, we may use Personal Information for the following purposes:

• Provide and operate our Services. To provide, operate, maintain, and improve our website, mobile applications, and in-store experiences, including enabling you to browse products, create and manage your account, maintain wish lists, make purchases, track orders, and access other customer-facing features.


• Transactions and customer support. To process and fulfill purchases, returns, exchanges, and other transactions; process payments; deliver products; communicate with you about your transactions, orders, returns, or account; and provide customer service and support.


• Account, loyalty, and membership management. To create, administer, and manage your account and your participation in our loyalty program, including rewards, early access, discounts, and promotional benefits.


• Personalization. To understand how you interact with us, customize and personalize your shopping experience, remember preferences, and provide more consistent and relevant interactions across our Services and communications.


• Marketing, advertising, and communications. To send you newsletters, promotional communications, product recommendations, and other marketing materials by email and, where you have provided the required consent, by text message or other messaging channels. We may also send you shopping cart reminders or similar communications where permitted by law and consistent with your communication preferences. We may use your Personal Information, including information associated with your account, purchases (including in-store purchases), interactions with our Services, and information we collect from other sources, including service providers, advertising partners, commercial data providers, business partners, and publicly available sources to personalize your experience; tailor content, product recommendations, offers, and advertisements; create or use customer audiences, custom audiences, lookalike or similar audiences; measure and improve the effectiveness of our marketing and advertising; and support our marketing and business operations. This may involve sharing identifiers, such as your email address, phone number, customer identifiers, or online identifiers, with our service providers, analytics providers, advertising partners, commercial data providers, and social media or advertising platforms to supplement or enrich the information we maintain about you; personalize your experience; create or use customer audiences; and deliver, optimize, and measure advertising and marketing on our behalf. If you participate in a contest, sweepstakes, survey, or other promotion, we may use the information collected in connection with those activities to administer the promotion, communicate with you, fulfill prizes, and, where permitted by law, for the marketing and advertising purposes described in this Notice. We honor applicable privacy rights and choices, including opt-out requests and opt-out preference signals that we are required to recognize under applicable law.


• Analytics, research, and business operations. For internal purposes such as analytics, accounting, auditing, reporting, customer research, usability testing, and other customer research activities, identifying trends, measuring engagement, developing and improving products and services, and measuring the effectiveness of our campaigns.


• Communications and Inquiries. To respond to your inquiries, communicate with you when you contact us (including through our chat functionality), and provide important service-related messages.


• Security, fraud prevention, and integrity. To protect our customers, employees, and business; secure our Services; and detect, prevent, investigate, and respond to suspected or actual fraud, illegal activity, security incidents, and policy violations.


• Legal, compliance, and protection of rights. To comply with applicable laws, regulations, legal processes, and lawful requests from law enforcement, courts, regulators, or government authorities; enforce our agreements, policies, and terms; protect the rights, privacy, safety, property, and security of Rack Room Shoes, our customers, employees, and others; investigate, prevent, or respond to fraud, security incidents, or other unlawful activity; and establish, exercise, or defend legal claims or otherwise pursue available remedies or limit our damages.


• Corporate transactions. To evaluate or carry out a merger, acquisition, financing, reorganization, bankruptcy, or sale or transfer of all or part of our business or assets.


• With your consent. For other purposes you specifically consent to.

Where permitted by applicable law, we may de-identify or aggregate Personal Information so it can no longer reasonably identify you and use or share it for lawful business purposes such as analytics, research, and product improvement. We maintain de-identified information as de-identified information in accordance with applicable law and do not attempt to re-identify it.

 

OPTIONAL IN-STORE FOOT MEASUREMENT TECHNOLOGY

At select store locations, we offer an optional in-store foot-measurement device that measures your feet to help recommend footwear size and fit. Using the device is voluntary. If you choose to use it, you place your feet on the scanner and make selections on a touchscreen.

Information We Collect Through the Device

• Touchscreen inputs. The information you enter on the touchscreen, such as the type of shoe you are shopping for, the gender category you select (for example, Women's/Girls or Men's/Boys), your age range, your age (where applicable), and, if you ask to receive your results, the email address you provide.


• Scan outputs. Foot measurements generated by the scan (such as length, width, height, girth, and arch type), a recommended shoe size, a three-dimensional digital image of your foot, and graphical representations generated from the scan (such as pressure plots or other visual outputs).


• Technical information. Technical, diagnostic, device, and session information associated with operating the device.

How We Use Foot-Measurement Information

We use foot-measurement information to provide footwear sizing and fit recommendations; to operate, support, maintain, and improve the technology and service; to troubleshoot technical issues; to generate aggregated or de-identified insights; and for related operational purposes.

We do not use foot-measurement information to identify individuals, verify identity, recognize customers across visits, create biometric templates, or build customer profiles. The information is collected and used solely to provide footwear sizing and fit recommendations and to operate, maintain, and improve the foot-measurement service.

How Foot-Measurement Information Is Handled

The technology is provided by one or more third-party service providers that process foot-measurement information on our behalf to operate the technology, maintain the service, and provide your results. This processing may occur using cloud-based systems operated by our service provider(s). We do not currently sell or share foot-measurement information for cross-context behavioral advertising or targeted advertising, we do not use it to personalize marketing or advertising, and we do not combine it with your Rewards account or other customer profile for marketing purposes. If our practices change, we will update this Notice and provide any notice or choices required by applicable law before doing so.

Retention

We retain foot-measurement information only as long as reasonably necessary to provide scan results, operate and support the technology, or satisfy our legal obligations, resolve disputes and enforce agreements.

Children

The foot-measurement device is intended primarily for use by adults, including adults selecting footwear for a child. If the device is used to measure a child, it should be used by or under the supervision of the child's parent or legal guardian. We do not knowingly collect Personal Information directly from children under 13 without any consent required by applicable law. If we become aware that we have collected Personal Information from a child under 13 in violation of applicable law, we will take appropriate steps to delete it. Please see the Children's Privacy section below.

 

HOW WE DISCLOSE PERSONAL INFORMATION

We may disclose Personal Information for the purposes described above to the following categories of recipients, as permitted by applicable law:

• Affiliates and related companies, for business, operational, administrative, analytics, customer service, and compliance purposes.


• Service providers and vendors that perform services on our behalf, including hosting and cloud infrastructure; payment processing; order fulfillment and shipping; customer service and chat functionality; loyalty program administration; operation of optional foot-measurement technology; analytics and fraud prevention; communications (including email and providers of SMS, MMS, and RCS messaging services); and IT, security, and other business operations.


• Business and advertising partners, commercial data providers, including advertising networks, analytics providers, affiliate and performance marketing partners, and social media, search, and advertising platforms (such as Meta, Google, and Microsoft/Bing), to help us deliver, personalize, optimize, and measure advertising and marketing campaigns, perform analytics, and create or use advertising audiences. We may disclose identifiers, online identifiers, device information, internet activity information, commercial information, and other similar information to these partners through cookies, pixels, SDKs, APIs (including server-to-server integrations), and similar technologies. Where required by applicable law, these disclosures are subject to your privacy choices, including opt-out requests and opt-out preference signals that we are required to recognize under applicable law.


• Social media platforms, when you choose to interact with social media features on our Services or otherwise engage with us on social media, such as by clicking a social media button, sharing content, tagging or mentioning us, or sending us a message through a social media platform. Information you share through these interactions, and information collected by the platform, is subject to the applicable platform's privacy practices and your privacy settings with that platform.


• Law enforcement, regulators, government authorities, courts, and other third parties, as necessary to comply with applicable law, regulations, legal process, or lawful requests; respond to subpoenas, court orders, or governmental inquiries; enforce our policies, agreements, or terms; establish, exercise, or defend legal claims; protect our rights, property, safety, or security, and that of our customers, employees, or others; or detect, investigate, prevent, or prosecute fraud, security incidents, or other illegal or unauthorized activities.


• Professional advisers, such as insurers, auditors, accountants, attorneys, consultants, and other professional advisers to manage risk, obtain advice, conduct investigations, or establish, exercise, or defend legal claims.


• Corporate-transaction parties, in connection with a merger, acquisition, financing, reorganization, divestiture, bankruptcy, or sale or transfer of all or a portion of our business or assets.


• At your direction or with your consent, for other purposes you specifically consent to or direct.

 

Cookies and Similar Tracking Technologies

We use cookies and similar technologies—including cookies, pixels, web beacons, tags, software development kits (SDKs), session-replay technologies, mobile advertising identifiers, application programming interfaces (APIs), and similar technologies (collectively, “Tracking Technologies”)—on our websites, mobile applications, in digital advertising, and in HTML-formatted emails. These technologies help us operate, secure, and improve our Services; remember your preferences; understand how our Services are used; personalize your experience; detect and prevent fraud; perform analytics; deliver and measure advertising; create and use advertising audiences; support remarketing and similar advertising activities; and measure the effectiveness of our marketing campaigns.

Cookies

Cookies are small text files placed on your device that enable a website or service to recognize your browser or device during and across visits. We use both session cookies, which generally expire when your browsing session ends, and persistent cookies, which remain on your device until they expire or are deleted.

Pixels, Web Beacons, and Similar Technologies

We and our service providers, analytics providers, and advertising partners may use pixels, web beacons, tags, SDKs, and similar Tracking Technologies on our Services and in our email communications. These technologies help us understand how visitors interact with our Services and communications, perform analytics, improve our Services, deliver and measure advertising, create and use advertising audiences, support remarketing, and understand whether our advertising results in purchases or other actions.

These technologies may collect information such as device and browser information, IP address, general location derived from IP address, pages or screens viewed, links or content selected, interactions with our Services or email communications, timestamps, and similar usage information.

Depending on your privacy choices and applicable law, we may also disclose identifiers and other information directly to advertising and analytics partners through server-to-server integrations, including APIs, to support advertising delivery, conversion reporting, audience creation, analytics, fraud prevention, and related marketing activities. Our advertising and analytics partners may include Meta, Google, Microsoft/Bing, and other digital advertising partners.

Session-Replay Technologies

We may use session-replay and similar analytics technologies to better understand how users interact with our Services, diagnose technical issues, improve functionality, usability, and accessibility, and enhance the customer experience. These technologies may record interactions such as clicks, taps, scrolling, navigation paths, page performance, and error events.

Where we use these technologies, we apply technical and organizational measures, including masking and suppression, designed to reduce the collection of sensitive information entered into forms, such as passwords, payment card information, and other information designated as confidential.

Interest-Based Advertising

We work with advertising partners to display advertisements for our products and services on third-party websites, mobile applications, connected devices, and other online services, and to engage in remarketing, retargeting, audience matching, and similar advertising activities. These partners may collect or receive information about your interactions with our Services and other online services over time using Tracking Technologies and other identifiers.

Depending on applicable law, these activities may constitute the "sale," "sharing," or processing of Personal Information for targeted advertising. Subject to applicable law, you may exercise your choices regarding these activities through our cookie preferences, by enabling a recognized opt-out preference signal where we are required to honor one, or by using the other methods described in the “Your Privacy Choices” section immediately below.

 

Your Privacy Choices

You have choices regarding cookies and similar Tracking Technologies:

• Tracking Technologies and preference controls. Where available, you can manage your preferences for non-essential Tracking Technologies through our cookie banner, the “Your Privacy Choices” link in our website footer, or within our mobile application settings. Certain Tracking Technologies are necessary for the operation, functionality, security, or fraud-prevention purposes of our Services and cannot be disabled.


• Profile-level controls. Cookie and device settings apply only to the browser or device on which they are enabled. To opt out of the sale or sharing of Personal Information associated with your account or customer profile (such as loyalty, customer matching, or email-based advertising), you may submit a request through our Privacy Request Web Form.


• Browser and device settings. Most web browsers allow you to manage cookies and similar Tracking Technologies, and most mobile devices provide settings to limit or reset mobile advertising identifiers. Disabling certain Tracking Technologies may affect the functionality of our Services. For more information about cookies, please visit www.allaboutcookies.org.


• Email and messaging preferences. You may opt out of receiving marketing emails by clicking the unsubscribe link included in those messages and opt out of marketing text messages by replying STOP. Even if you opt out of marketing communications, we may continue to send you transactional or service-related communications.


• Interest-based advertising. You may opt out of receiving interest-based advertising from participating companies by visiting www.aboutads.info/choices (website advertising) or www.aboutads.info/appchoices (mobile advertising). Opting out does not mean you will stop seeing advertisements from us; rather, it means the advertisements you receive may be less relevant to your interests.


• Global Privacy Control (GPC). Some browsers and browser extensions transmit opt-out preference signals, including the Global Privacy Control (GPC). Where required by applicable law, we recognize a valid GPC signal as a request to opt out of the sale or sharing of Personal Information for that browser or device. We process opt-out preference signals in accordance with applicable law and our technical capabilities. Because opt-out preference signals may operate differently across browsers, devices, and technologies, the effect of a signal may vary depending on the specific signal and the context in which it is received.


• State privacy rights. Depending on your state of residence, you may have additional privacy rights as described in the “California Notice at Collection” and “Additional State Privacy Rights” sections of this Notice.

 

OTHER SITES, THIRD-PARTY SERVICES, AND SOCIAL MEDIA

Other Sites

Our Services may contain links to, or integrate with, websites, mobile applications, platforms, products, services, content, or other properties that we do not own or operate (“Other Sites”). We are not responsible for the content, operation, privacy practices, or data handling of Other Sites, even if you access them through or in connection with our Services. We encourage you to review the privacy policies and terms of any Other Sites before providing your Personal Information.

Third-Party Services

Certain features of our Services may integrate with or allow you to interact with third-party websites, applications, products, or services (“Third-Party Services”), including services with which you may already have an account. These Third-Party Services are provided by organizations other than us and are governed by their own privacy notices, terms, and policies. We do not own or control Third-Party Services and are not responsible for their privacy or data handling practices.

When you use a Third-Party Service through our Services, that third party may collect, use, or disclose information about you in accordance with its own privacy notice and applicable terms. Personal Information collected or processed directly by a Third-Party Service is governed by that third party's privacy notice and terms. Rack Room Shoes does not control and is not responsible for the privacy or data-handling practices of Third-Party Services.

Google Analytics

We use Google Analytics and similar analytics services to help us understand how visitors use our Services and improve their performance. To learn more about how Google Analytics collects and processes information, or to opt out, please visit policies.google.com/privacy and tools.google.com/dlpage/gaoptout.

Google Maps

Our Services use Google Maps and related Google APIs to provide features such as interactive maps, store locators, directions, address validation or lookup, and location-based search functionality.

When you use these features, Google and its affiliates may collect information such as:

• Location information, including your device's location (if you permit location access) or locations you search for;
• Identifiers, such as your IP address and device identifiers;
• Device and technical information, including device type, operating system, browser or application version, and related technical information;
• Information about your interactions with Google Maps, such as map views, panning, zooming, routing requests, and other usage information; and
• Search queries and other information you provide when searching for addresses, stores, or points of interest.

Google may use cookies and similar technologies in connection with these services. Information collected by Google through Google Maps and related APIs is subject to Google's Privacy Policy and Google Maps/Google Earth Additional Terms of Service. We encourage you to review those materials to learn more about how Google collects, uses, and shares information.

Social Media

Our Services may allow you to interact with social media platforms, including Facebook, Instagram, X, YouTube, TikTok, and other similar services. We may identify these features by displaying the applicable platform's name, logo, or branding.

If you choose to interact with us through a social media platform—for example, by following our accounts, sharing content, submitting comments or reviews, or communicating with us through social media messaging—the information you choose to share may be visible to us, the platform, and, depending on your privacy settings, other users of that platform.

Your use of social media platforms and any information collected or processed by those platforms are governed by their respective privacy notices and terms of service. We encourage you to review those notices and your privacy settings to understand how your information is collected, used, and shared.

Our use of cookies, pixels, SDKs, and similar tracking technologies associated with social media platforms is described in the “Cookies and Similar Tracking Technologies” section of this Notice.

 

ARTIFICIAL INTELLIGENCE AND AUTOMATED PROCESSING

We may use artificial intelligence (“AI”), machine learning, algorithms, and other automated technologies (collectively, “Automated Processing Technologies”) to help operate, secure, and improve our business and Services. For example, we may use these technologies for:

• Security, fraud prevention, and integrity. To help detect, prevent, investigate, and respond to fraud, abuse, unauthorized activity, cybersecurity threats, and other security incidents by analyzing transaction information, device and technical information, usage patterns, and other relevant signals.


• Customer service. To provide customer support, including AI-assisted chat or messaging tools, generate suggested responses for customer service representatives, summarize customer inquiries, and help route requests to the appropriate personnel or service provider.


• Analytics, personalization, and operations. To better understand how customers use our Services, improve our websites, mobile applications, products, and services, personalize content and experiences where permitted by law, measure performance, forecast demand, and support business operations.

These technologies may process information you provide to us, transaction and account information, information about your interactions with our Services, and device or technical information. They may generate outputs such as suggested responses, summaries, categorizations, recommendations, fraud or risk indicators, routing decisions, or aggregated analytical insights.

Where AI-assisted features are available, the information they generate may not always be accurate, complete, or appropriate for every situation. We encourage you to review AI-generated responses carefully and contact us by phone at 1-800-306-9309 or by email at customercare@rackroom.com if you need additional assistance.

We do not use Automated Processing Technologies to make decisions that produce legal or similarly significant effects concerning consumers without appropriate human involvement or as otherwise permitted or required by applicable law.

 

Children's Privacy

Our Services are intended for a general audience and are not directed to children under 13. We do not knowingly collect Personal Information directly from children under 13 without any consent required by applicable law. If we become aware that we have collected Personal Information from a child under 13 in violation of applicable law, we will take appropriate steps to delete it.

You must be at least 18 years old to enroll in the Rack Room Rewards Program. We do not knowingly permit individuals under 18 to enroll. If we become aware that a Rewards account was created for someone under 18, we may suspend or terminate the account and take any other action appropriate under our program terms and applicable law.

 

Data Security and Retention

Data Security. While no method of transmission or storage is completely secure, we take reasonable and appropriate administrative, technical, and physical measures designed to help protect Personal Information from unauthorized access, use, disclosure, alteration, and destruction. Please choose a strong password, keep it confidential, and avoid reusing passwords across multiple services.

Retention. We retain Personal Information for as long as reasonably necessary to fulfill the purposes described in this Notice, including providing products and services, managing accounts and loyalty programs, operating our business, complying with legal obligations, resolving disputes, enforcing agreements, and maintaining appropriate business records. Retention periods vary depending on the nature of the information, the purposes for which it was collected, our business needs, and applicable legal requirements. When Personal Information is no longer reasonably necessary for these purposes, we take reasonable steps to delete, de-identify, or otherwise dispose of it in accordance with applicable law.

 

California Notice at Collection

This California Notice supplements this Notice and applies solely to California residents. It provides the disclosures required by the California Consumer Privacy Act, as amended (“CCPA”), at or before the time Personal Information is collected.

The categories of Personal Information we collect, the purposes for which we collect, use, and disclose it, the categories of recipients to whom we disclose it, and our retention practices are described in the “What Personal Information We Collect,” “How We Use Personal Information,” “How We Disclose Personal Information,” and “Data Security and Retention” sections of this Notice.

Sale or Sharing of Personal Information

We may “sell” or “share” (as those terms are defined under the CCPA) certain categories of Personal Information, including identifiers and internet or other electronic network activity information, with advertising partners and analytics providers for targeted advertising, audience creation, advertising measurement, and related purposes, as described in the “Cookies and Similar Tracking Technologies” section of this Notice.

You may opt out by selecting “Your Privacy Choices” in the footer of our website, by submitting a request through our Privacy Request Web Form, or other methods we make available. We do not knowingly sell or share the Personal Information of consumers under 16 years of age.

Sensitive Personal Information

We collect Sensitive Personal Information only as described in this Notice. We use and disclose Sensitive Personal Information only as permitted by the CCPA and do not use or disclose it for purposes that would require us to provide the right to limit its use or disclosure.

Financial Incentives

We may offer financial incentives, such as discounts, promotional offers, or rewards, in connection with our loyalty program or marketing programs. Participation is voluntary, and you may withdraw at any time by calling 1-800-306-9309 or emailing customercare@rackroom.com. The value of your Personal Information is reasonably related to the value of the discounts, rewards, or other benefits provided through the applicable program. We estimate the value of your Personal Information based on factors such as the expenses related to offering the program and the revenue generated by participation.

Your California Privacy Rights

California residents have the right to:

• Know and access the Personal Information we have collected about them;
• Request correction of inaccurate Personal Information;
• Request deletion of Personal Information, subject to applicable exceptions;
• Opt out of the sale or sharing of Personal Information;
• Limit the use and disclosure of Sensitive Personal Information, where applicable; and
• Not be discriminated against for exercising their privacy rights.

To exercise your rights to know, access, correct, or delete your Personal Information, submit a verifiable request by calling 1-800-306-9309, completing our Privacy Request Web Form, or emailing customercare@rackroom.com.

We may request information necessary to verify your identity before responding to your request. You may designate an authorized agent to submit a request on your behalf, subject to verification of the agent's authority. We will use the information provided in connection with your request only to verify your identity, evaluate your request, and respond to it.

 

Additional State Privacy Rights

If you reside in a state with an applicable comprehensive consumer privacy law, including Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, the categories of Personal Information we collect, the purposes for which we collect, use, and disclose it, and the categories of recipients to whom we disclose it are described throughout this Notice. If additional state privacy laws become applicable to us, we will comply with those laws as required.

Your Privacy Rights Under Additional States

Depending on your state of residence, you may have the right to:

• Confirm whether we process your Personal Information and access the Personal Information we maintain about you.
• Correct inaccuracies in your Personal Information, taking into account the nature of the Personal Information and the purposes for which we process it.
• Delete Personal Information you provided to us or that we obtained about you, subject to applicable exceptions.
• Obtain a portable copy of certain Personal Information that we process by automated means, where required by law and technically feasible.
• Opt out of targeted advertising, the sale of Personal Information, and profiling in furtherance of decisions that produce legal or similarly significant effects concerning you. We do not currently engage in profiling that produces legal or similarly significant effects concerning consumers.
• Oregon residents may request a list of the specific third parties to whom we have disclosed Personal Information.
• Maryland residents may request a list of the categories of third parties to whom we have disclosed Personal Information, as required by applicable law.

To exercise your rights, call 1-800-306-9309, complete our Privacy Request Web Form, or emailing customercare@rackroom.com.

Except where prohibited by law, we may request information necessary to verify your identity before responding to your request. Verification generally is not required for requests to opt out of targeted advertising or the sale of Personal Information.

If we deny your request, you may appeal our decision by contacting us using the same methods described above or by following the instructions included in our response. We will review your appeal within the time required by applicable law. We will inform you in writing of any action taken or not taken in response to your appeal and provide any information required by applicable law.

Nevada Residents

Under Nevada law, certain Nevada residents have the right to direct us not to sell certain covered information that we have collected or may collect about them. We do not currently sell covered information within the meaning of Nevada law. Nevada residents who wish to submit a request may contact us at customercare@rackroom.com.

How to Contact Us

If you have questions about this Notice or our privacy practices, please contact us by phone at 1-800-306-9309 or by email at customercare@rackroom.com.

Changes to this Notice

We may update this Notice from time to time. When we do, we will revise the Effective Date at the top of this Notice. If we make material changes, we will provide any additional notice or obtain any consent required by applicable law.