Privacy Policy

This Privacy Policy was last updated on: June 9th, 2023

Your privacy is important to United States of Aritzia Inc. ("Aritzia", “we”, “us”, or “our”). This Privacy Policy (“Policy”) explains how Aritzia collects, uses, discloses, and retains your information when you visit or use our website (our “services”), including the use of personal information in connection with interest-based advertising. It also describes the controls we provide you with to manage your personal information within our services and your data subject rights (such as your right to object to certain types of processing we carry out).

Aritzia is the controller of your personal information if you are in the EEA, UK and/or Switzerland. When we refer to our legal basis, we mean our legal basis under EEA and UK laws.

See Section 5 (How To Exercise Your Rights) below for additional information on data subject rights.

Table of Contents

  1. WHAT PERSONAL INFORMATION WE COLLECT
  2. HOW ARITZIA USES YOUR INFORMATION AND OUR RELATED LEGAL BASIS
  3. DISCLOSURE OF PERSONAL INFORMATION TO OTHERS
  4. RETENTION OF PERSONAL INFORMATION
  5. HOW TO EXERCISE YOUR RIGHTS
  6. COOKIES AND OTHER TECHNOLOGIES
  7. SOCIAL NETWORKING AND SIMILAR SITUATIONS
  8. PERSONAL INFORMATION OF CHILDREN
  9. OTHER WEBSITES/ONLINE SERVICES
  10. POLICY CHANGES
  11. UNSUBSCRIBING TO NEWSLETTERS AND MESSAGES
  12. INTERNATIONAL USERS
  13. CONTACTING ARITZIA'S CHIEF PRIVACY OFFICER
  1. WHAT PERSONAL INFORMATION WE COLLECT

Aritzia obtains personal information about you in four ways:

  • We collect information that you provide us:

    • Account Information: When you create or manage an account with Aritzia (including a user account for an Aritzia website), we collect your name, email address, password, shipping address, billing address, site region and size preferences. Some of the information is optional (e.g. your date of birth and phone number) so you do not have to provide it to us. You may also choose to add a ‘wish list’ to your account that shows which items you would like to purchase. If you create your Aritzia account using Facebook, it may provide us with your account information, such as your name and email address (we don’t receive your Facebook passwords) in order to create your Aritzia account. What Facebook shares with us is controlled by your Facebook privacy settings. Make sure you’re comfortable with your Facebook privacy settings by reviewing and, if necessary, updating them on Facebook.
    • Purchase Information: When you purchase products or services through an Aritzia website, we collect your name, email address, credit card and payment information, mailing and shipping address, phone number (this is optional), marketing preferences and any other information you provide. We retain your purchase history from Aritzia's websites.
    • Support Information: When you send us an email or otherwise contact us for support (e.g. when you ask us questions or for our help), including through Aritzia Concierge (available here), we collect the information you give us, i.e. your name, email address, contact details, payment card details, any questions or feedback you give us and any other personal information you provide. Some of the information may be optional (e.g. your phone number).
    • Marketing / Promotions Information: When you register, or subscribe for our newsletters or promotions, or participate in our promotions, sweepstakes, contests, or surveys, we collect the information we need for your participation, such as your name, contact information, date of birth. We generally just ask for your contact information to participate, but in some cases request other information too.
    • Online Activity Information: When you use our website we collect (including through cookies and similar trackers) the IP address you use, information so we can single out your device and information about you, such as pages or screens you viewed, how long you spent on a page or screen, navigation paths between pages or screens, information about your activity on a page or screen, access times, and duration of access. We collect information on the products you click to view through our emails. Our partners may also collect similar information, including with respect to your activities on other sites. Among other things, this helps us analyze, improve, and secure our online services, as well as support our advertising and marketing efforts. See our Cookie Policy to learn more.
  • Information from Friends and Family: We may also collect information about you from others who know you like your family or friends when they want to ship a product (including gift cards) to your address. For example, to send the package, we need them to tell us your name, email, mailing and shipping addresses. We may also collect information about you from family or friends if they send you a link to a product or article on the Aritzia website, such as your IP address. If you provide us with information about your family or friends, please make sure that you let them know you’re doing so and remind them to review our Policy which describes how we use their information.

  • Information from our Partners: We also obtain information about you from our partners, in addition to Online Activity Information. For example:

    • When you purchase one of our products through Instagram, Instagram send us your name, contact information and transaction information but not your payment card details.
    • If you discuss us or submit an inquiry or message to us through a social media platform, such as Facebook, Instagram, Pinterest and Twitter, we may be provided with your name, contact information and publicly available profile so we can follow up on your inquiries or comments.
    • Whether or not you open our emails to you and what products you click to view through our emails. This helps us gauge interest in our communications, products and promotions, and avoids us sending unwanted emails.
    • Third parties that provide us with your personal information include Envoy, Facebook, Fit Analytics, Google, Instagram, LinkedIn, Lookback, Pinterest, Emplifi and Twitter. The entities may use publicly available activities or information such as blogs, videos, internet postings, and user generated content.
    • Among other things, this helps us analyze, improve, and secure our online services, as well as support our advertising and marketing efforts. See our Cookie Policy to learn more.
  • Information from your Employer: If you work for one of our vendors or other partners, the company you work for may provide us with your contact details and other information to facilitate your role in the provision of services to or with us.

Sometimes the information we ask you to provide us is needed for contractual or legal reasons. We’ll let you know when such information is required, and the consequences of failing to provide it. You can choose not to provide certain requested information. However, you may not be able to purchase products or services or access or use certain features of Aritzia's services, such as creating an account, if we need the information to provide you with the product or service or we are legally required to collect it. For instance, we cannot complete a purchase without payment details, send you a product without an address, enter you into a contest without your contact information, provide you with Aritzia Concierge without your email and name, or create an account without your name.

  1. HOW ARITZIA USES YOUR INFORMATION AND OUR RELATED LEGAL BASIS

The information we collect is described in Section 1: What Personal Information We Collect. We use this information we obtain about you for the purposes described below.

  • Set up and manage your Account

We use your information such as your Account Information and, when you create an account through one of our partners such as Instagram, Information from our Partners to set up and manage your Aritzia account, including to develop your profile for you and delete unused accounts. As our European legal basis for processing personal information for this purpose, we rely on contractual necessity as we need this information in connection with the contract with you under our Terms of Use (which you accept when setting up your Aritzia account) and our legitimate interest in deleting expired or inactive accounts. The processing of personal information undertaken includes using and storing the personal information.

  • Provide Services

We use your information to provide our services to you. This includes using information such as your:

  • Account Information, Purchase Information and, when you make a purchase through one of our partners such as Facebook, Information from our Partners, to facilitate transactions and process orders and payments for the products and services you’ve purchased, facilitate returns and otherwise administer our relationship with you;
  • Support Information, Account Information and Purchase Information to provide you with support services, such as Aritzia Concierge;
  • Account Information, Purchase Information, Support Information and, when you make a purchase through one of our partners such as Instagram, Information from our Partners to contact and correspond with you about your transactions and your use of our products and services, such as billing and payment discrepancies and to validate receipts;
  • Support Information, Account Information, Purchase Information and, when you make a purchase or request support or ask questions through one of our partners such as Facebook, Information from our Partners to respond to your requests for support or other queries; and
  • Online Activity Information to personalise and improve your shopping experience on our website, such as by using your location (country/region) information to determine your language preferences, display accurate date and time information or personalise the layout of our website based on your interests.

The processing of personal information undertaken includes using and storing the personal information.

As our European legal basis for processing personal information for the above purposes we rely on contractual necessity as we need the information to perform our obligations under that contract such as, for example, for the sale and delivery of our products to you. This includes steps we may take at your request before you enter into a contract with us. For example, we need your address and payment details to process and deliver your orders.

Where we use or process the information outside the context of a contractual relationship with you, such as where you raise queries or ask for support that is not specifically for a contract with us, or we are given your information in order to deliver an item to you that was bought by someone else, we rely on our legitimate interests or consent as a European legal basis. We have a legitimate interest in providing these services to you, and operating our business.

We also rely on our legitimate interests as our European legal basis, to personalise our website so that it reflects your circumstances (e.g. your location/language) and in better tailoring our website to our customers’ interests. Where we place cookies for these purposes, we rely on your consent where required by applicable law.

  • Market our services and run promotions

We use your information to market our services and run promotions. This includes using information such as your:

  • Marketing / Promotions Information, Online Activity Information and Information from our Partners to market our products and services such as, for example, by providing you with information regarding our announcements, promotions, upcoming events, products, special features, and store openings which we think you may be interested in based upon the information we hold about you, such as your Purchase Information, Account Information and wish list and how you engage with our marketing emails;
  • Account Information and Online Activity Information to remind you of un-purchased items left in your online shopping cart;
  • Marketing / Promotions Information and, when you signed up through one of our partners like Instagram, Information from our Partners, to administer and facilitate your participation in sweepstakes, contests, special events, give-aways and promotions; and
  • Purchase Information and Account Information to market our products and services, such as providing our most frequent customers with early access to our sales and events.

We also combine your personal information collected through various sources, including Purchase Information, Online Activity Information and Information from our Partners, to enhance and personalise your shopping experience on our websites.

The processing of personal information undertaken includes using and storing the personal information.

As our European legal basis for processing personal information for this purpose we rely on our legitimate interests. We have a legitimate interest in marketing our business, including providing you with tailored and personalised advertising and communications to develop and promote our business and in reminding you of uncompleted purchases.

  • Improve our services

We use your information to improve our services. This includes using information such as your Purchase Information, Account Information, Marketing / Promotions Information, Support Information, Feedback Information, Online Activity Information, Information from Friends and Family and Information from our Partners, to analyze and learn about how our services are accessed and used by you and others to evaluate and improve them, including by developing new products and services, responding to trends and patterns including sentiments expressed on social media or directly to us, best managing our marketing and other communications, and responding to any complaints you may have. The processing of personal information undertaken includes using and storing the personal information.

We usually do this based on anonymous, pseudonymized or aggregated information which does not focus on you individually. For example, if we learn that most users use mobile devices, we might wish to expand on that feature, or if we see comments or reviews posted online we may use that to improve our services.

As our European legal basis for processing personal information for this purpose we rely on our legitimate interests or consent. We have a legitimate interest in operating and improving our business and best managing our communications. This legitimate interest includes providing any personalised services and understanding how our services are being used, obtaining insights into usage patterns of our services and developing ways to change our products and services so they are more interesting for you and other users increase purchases and to provide an innovative and tailored offering to our users and customers on a sustained basis. You have a right to opt out of this processing.

  • Advertise

We and our partners use your information to analyze your interactions with our services and third parties’ online services so we can tailor our advertising to what we think will interest you and monitor and measure the effectiveness of our advertising. This includes using information such as your Account Information (email address only), Online Activity Information and Information to facilitate Aritzia ads showing up on other third-party sites and platforms you visit. For instance:

  • we and our partners may use cookies to help serve you Aritzia ads better tailored to the interests you’ve shown by browsing our websites (mainly using Online Activity Information and Information from our Partners); and
  • we and our partners may use email addresses for the purposes of creating custom audiences on third-party platforms and services like Facebook and Google by matching people who visit our website with people on such platforms which may be used to show advertising to members of that audience.

The processing of personal information undertaken includes using, storing and transferring the personal information.

We and our partners use cookies and similar technology. See further information in our Cookie Policy.

As our European legal basis for processing personal information for this purpose we rely on:

  • your consent, for example where cookies are placed for targeted advertising purposes. See Section 5 (How To Exercise Your Rights) for information on your right to withdraw your consent. Your withdrawal of consent won’t affect the lawfulness of processing based on consent before its withdrawal.
  • our legitimate interests. We have a legitimate interest in advertising our business, providing you with tailored and personalised advertising and communications to develop, improve and promote our business.

See information under Paragraph 6 (Analytics and Advertising) of Section 3 (Disclosure Of Personal Information To Others) below in relation to our role as joint controller of your personal information when we share information with third parties for this purpose.

  • Safety and security

We use your information, such as your Account Information or Online Activity Information, for safety and security purposes, including the sharing of your information for such purposes. We do so as it is necessary to pursue our, your and others’ legitimate interests of ensuring the security and integrity of our services and premises, including enhancing individual’s protection against spam, fraud, abuse, crime and security risks of all types.

As our European legal basis for processing personal information for the above purposes we rely on our legitimate interests. We have a legitimate interest in ensuring that the services we provide and our premises are safe and secure.

We also rely:

  • where necessary, on a third party’s legitimate interests, such as our partners who have a legitimate interest in preventing unlawful and fraudulent activities; and
  • when we believe, in good faith, that we have a legal obligation to do so, for example to comply with a binding law enforcement request.

The processing of personal information undertaken includes using, storing, and transferring the personal information.

  • Manage our vendor / partner relationships

If you work for one of our vendors or partners, we may use Information from your Employer, such as your basic contact information, to manage our relationship with your employer and to facilitate your role in the provision of services to or with us. We rely on our legitimate interests to maintain good and efficient relations with our partners and vendors and receiving services from them which necessitates processing some limited information. The processing of personal information undertaken includes using, storing and transferring the personal information.

  • Enforcing our terms and policies

We may use your information, such as your Purchase Information, Online Activity Information and Account Information for the purposes of enforcing our Terms of Use, and other legal terms and policies.

As our European legal basis for processing personal information for the above purposes we rely on contractual necessity and our legitimate interests. We have a legitimate interest in ensuring that our Terms of Use, and other legal terms and policies are complied with in providing our services.

The processing of personal information undertaken includes using, storing and transferring the personal information.

  • Protection and legal compliance

We may use and disclose your information, such as your Purchase Information, Account Information or Online Activity Information in order to protect our and others’ interests, rights and property (for example, to protect our users from abuse or if we consider, in good faith, it’s necessary to comply with applicable legal requirements, such as tax and other government regulations and industry standards, contracts and law enforcement requests). For example, we may disclose your information where we believe, in good faith, this is required by applicable law, including to comply with a subpoena, warrant or court or arbitral order or litigation disclosure obligations. We may also disclose your information if we reasonably believe disclosure is necessary or appropriate in connection with national security, law enforcement, or other issues of public importance. For example, we may disclose information to law enforcement authorities or other businesses and organizations in connection with the detection, prevention, and prosecution of activities that we reasonably believe to be unlawful or fraudulent (including activities on our websites). Such disclosed information may include information of the individuals suspected of involvement in unlawful or fraudulent activities.

As our European legal basis for processing personal information for the above purposes we rely on:

  • our legitimate interests - we have a legitimate interest in protecting our users and visitors from abuse and ensuring that the services we provide and our premises are safe and secure and complying with laws;
  • where necessary, a third party’s legitimate interests, such as our partners or the general public who have a legitimate interest in preventing unlawful and fraudulent activities;
  • the fact that the processing is necessary in order to protect vital interests, for example, to prevent injury; and
  • when we believe, in good faith, that we have a legal obligation to do so, for example to comply with binding law enforcement request.

The processing of personal information undertaken includes using, storing and transferring the personal information.

  • Key terms explained; legal basis, legitimate interests and contractual necessity

Some of the terms that we used in Section 2 are explained here:

  • Legal basis - under EEA and UK law, processing of personal information by us must be lawful. By “legal basis” we are referring to the legal justification for our processing of your personal information under Article 6 of the GDPR or UK GDPR.
  • Legitimate interests - this is a type of legal basis that we can rely on to justify our processing of your personal information under EEA and UK law. It means that we are pursuing an interest of Aritzia or a third party, that’s legitimate; for example, our business interest in selling our products to you. We only rely on this legal basis where our legitimate interests are not overridden by the fundamental rights and freedoms of the individual.
  • Contractual necessity - this is another type of legal basis that we can rely on to justify our processing of your personal information under EEA and UK law. It means that the processing is necessary to deliver a contractual service to you or because you have asked us to do something before entering into a contract.
  1. DISCLOSURE OF PERSONAL INFORMATION TO OTHERS

We share personal information with the following types of recipients.

  1. Affiliates

Aritzia and its affiliates may share your information with each other and use it for the provision of our products and services in accordance with this Policy. We may also share your information in order to engage in marketing on behalf of and with our affiliates.

  1. Suppliers and service providers

We may disclose all or any of your information to our suppliers and service providers that perform services on our behalf (such as to help us fulfil your orders, deliver products to you, provide Aritzia Concierge, deliver customer communications, manage our data (including storing or hosting data for us), help us with marketing, provide us with email services, manage or host our websites, undertake fraud detection and address validation, and comply with tax laws). This includes, in particular, Account Information, Purchase Information, Feedback Information, Support Information, Online Activity Information, Marketing / Promotions Information, Information from your Friends and Family and Information from our Partners.

We require our suppliers and service providers to protect the privacy of your information in a manner that is consistent with applicable privacy laws.

Some of our suppliers and service providers may contact you directly in order to provide their service; for example, our delivery partners may contact you to provide you with tracking information for a delivery. Our delivery partners are often independent data controllers in certain respects.

  1. Professional advisers

Professional advisers, such as lawyers, auditors, bankers and insurers, where necessary in the course of the professional services that they render to us. These third parties are often independent data controllers.

  1. Payment Processors

We transmit your personal information, such as your Purchase Information, via an encrypted connection to our payment processors. Some of these payment processors can be independent data controllers in certain respects.

  1. Business and marketing partners

Third parties with whom we co-sponsor events or promotions, with whom we jointly offer products or services, or whose products or services may be of interest to you. These third parties are often data controllers in such respects.

  1. Analytics and advertising partners

We use third-party analytics and/or ad-serving services through providers such as Meta (previously Facebook) and Google which is further described in our Cookie Policy. The providers of these services may be data controllers and independently collect, use, and disclose your IP address together with information about your visits to this and other websites that they service in accordance with their own privacy policies (and not this Policy) so we can improve user experience on our websites and to provide you with tailored advertising and measure and monitor its effectiveness, and for the purposes described in their privacy policies. For instance, Google may use Google analytics data to better understand online behaviour and trends and improve its products and services.

If you live in Europe, when Aritzia uses some of Meta Platforms Ireland Limited’s advertising products or analytics services such as Page Insights, in relation to some of this processing of your personal information, we are a joint controller of your personal information together with Meta Platforms Ireland Limited. Meta Platforms Ireland Limited and Aritzia have divided their responsibilities under GDPR in respect of this joint processing. For example, Meta Platforms Ireland Limited is responsible for managing your individual rights relating to the joint processing.

You can exercise your data protection rights regarding the above personal information in respect of and against us or Meta Platforms Ireland Limited. To learn more about this processing, these Facebook’s webpages sets out how we share responsibilities with Meta Platforms Ireland Limited for your personal information: https://www.facebook.com/legal/controller_addendum and https://www.facebook.com/legal/terms/page_controller_addendum

In particular, further information on how Meta Platforms Ireland Limited processes personal information, including the European legal basis Meta Platforms Ireland Limited relies on and the ways to exercise your rights against Meta Platforms Ireland Limited, can be found in Meta’s Data Policy at https://www.facebook.com/about/privacy. In addition, you can find more information about how Meta collects and uses your information when you use Pages here: https://www.facebook.com/legal/terms/information_about_page_insights_data.

  1. Legal compliance and protecting rights and interests

We may disclose your information (for example Purchase Information, Account Information or Online Activity Information), where we believe, in good faith, this is required by applicable law. This can include complying with a subpoena, warrant or court or arbitral order or litigation disclosure obligations. We may also disclose your information if we reasonably believe disclosure is necessary or appropriate in connection with national security, law enforcement, or other issues of public importance. We may also disclose your information as otherwise required by law, or authorised by law in connection with a legal investigation, or if we reasonably believe the disclosure is necessary or appropriate to protect or enforce our or others’ rights, interests and remedies or protect the business, operations or customers of Aritzia or other persons (including detecting and preventing fraud and preventing violation of our Terms of Use, and other legal policies). For example, we may disclose information to law enforcement authorities or other businesses and organizations in connection with the detection, prevention, and prosecution of activities that we reasonably believe to be unlawful or fraudulent (including activities on our websites). Such disclosed information may include information about individuals suspected of involvement in unlawful or fraudulent activities.

  1. Mergers and business transfers

We may disclose your information to a third party in connection with a proposed or actual business transaction, such as a corporate reorganization, merger or acquisition, or the sale of some or all of our business or assets (including in connection with a bankruptcy proceeding) We will require that the information recipient agree to protect the privacy of your information in a manner that is consistent with this Policy. This could include all of your information relevant to the business being acquired.

  1. RETENTION OF PERSONAL INFORMATION

We retain your information for the period necessary to fulfil the purposes outlined in this Policy or where a longer retention period is be required or permitted by applicable law. For instance, we may keep your information to comply with our legal obligations, such as tax laws, to resolve disputes, to enforce our agreements or as otherwise permitted by law. The precise periods for which we keep your personal information vary depending on the nature of the information and why we need it. Factors we consider in determining these periods include the minimum required retention period prescribed by law or recommended as best practice, the period during which a claim can be made with respect to an agreement or other matter, whether the personal information has been aggregated or pseudonymized, and other relevant criteria.

For instance, we keep your Account Information until your account is deleted. We generally delete an account if it has not been used for one year. We keep your Purchase Information until satisfied that no claims can be made regarding a purchase or, if longer, as required to comply with our legal obligations. We generally keep subscriptions to our email address list until someone opts-out, though we keep the fact of the opt-out on a suppression list so we do not send them messages until they change their mind.

  1. HOW TO EXERCISE YOUR RIGHTS

You may request access to your personal information and information about our collection, use, disclosure, and retention of that information by sending your request to our Chief Privacy Officer at one of the addresses noted at Section 13 (Contacting Aritzia's Chief Privacy Officer) below. Subject to applicable exceptions and limitations prescribed by law, you will be given reasonable access to your personal information, and will be entitled to challenge the accuracy and completeness of the information and to have it amended as appropriate.

European users (i.e. those in the EEA and UK) have specific rights under local European laws, subject to various exceptions and limitations. These rights are outlined below and can be exercised by European users (if applicable under relevant local laws) by contacting our Chief Privacy Officer or as otherwise set out below:

  1. Withdraw Consent:

If we rely on consent for the processing of your personal data, you can withdraw that consent prospectively at any time by contacting us at cpo@aritzia.com. Your withdrawal of your consent won’t affecting the lawfulness of processing based on consent before its withdrawal.

  1. Right of Access:

You have a general right to find out if we hold any personal data relating to you. You also have a general right to obtain a copy of any such personal data we hold on you.

  1. Right to Rectification:

You have the right to rectify any information we hold about you that is inaccurate. You can help us maintain the accuracy and completeness of your information (including your Aritzia website Account Information) by notifying us of any changes to your information. You may update your Aritzia website Account Information through our websites or Aritzia Concierge.

  1. Right to Erasure:

You have the right, in certain cases, to have us erase any information we hold about you, provided there are valid grounds for doing so. To delete just your profile, you may use the Delete My Profile button found under the Profile section of the website. This may not delete all of your information (for example where we are required to keep your transactions for tax reasons).

  1. Right to Restriction:

You have the right, in certain cases, to temporarily restrict the processing of your personal data, provided there are valid grounds for doing so.

  1. Right to Data Portability:

You have the right, in certain cases, to obtain a commonly used machine-readable copy of the electronic information you provided to us for transfer to you or another controller if required.

  1. Right to Object:

You have the right, in certain limited cases, to object to the processing of your personal data.

  1. Cookies and Similar Technologies:

You can manage cookies and similar technologies by following the steps set out in our Cookie Policy.

  1. Right to Lodge a Complaint:

If you are unhappy with how we’ve handled your personal data, you have the right to lodge a complaint with your local European data protection supervisory authority.

  1. COOKIES AND OTHER TECHNOLOGIES

See our Cookie Policy to learn about how we use, and how to manage, cookies and similar technologies.

  1. SOCIAL NETWORKING AND SIMILAR SITUATIONS

When you post information on other services (for example, where you post information to social networking sites or link to Aritzia's Facebook or Twitter pages or when you "like" a product on your Facebook account or "pin" a product on your Pinterest account), the information that you post or share in connection with these third-party sites is visible to other persons and can be read, collected, used, and disclosed by other persons, including for sentiment analysis or to send unsolicited messages.

If you live in Europe (i.e. the EEA or UK), when we use our Aritzia Facebook page in relation to some of this processing of your personal information, we are a joint controller of your personal information together with Meta Platforms Ireland Limited. Meta Platforms Ireland Limited and Aritzia have divided their responsibilities under GDPR in respect of this joint processing. See Paragraph 6 (Analytics and advertising partners) of Section 3 (Disclosure Of Personal Information To Others) for further information on our joint controller relationship with Meta.

Otherwise, any information you provide or post to such third-party social-networking sites and other sites is governed by their own privacy policies, which you may read on the applicable site. Aritzia has no control over, or responsibility or liability for, the use, disclosure, and retention of the information that you disclose in those situations, and the use, disclosure, and retention of the disclosed information is not subject to this Policy. Please be careful when disclosing your information in those situations.

  1. PERSONAL INFORMATION OF CHILDREN

Aritzia does not knowingly collect personal information from children who are under 16 years of age. Please immediately contact Aritzia's Chief Privacy Officer at one of the addresses noted below if you believe that Aritzia has unintentionally collected personal information from a child under 16 years of age. If we learn that we have inadvertently collected the personal information of a child under 16 years of age, we will use reasonable efforts to delete that information from our systems (except to the extent that retention of the personal information is required or permitted by applicable law).

  1. OTHER WEBSITES/ONLINE SERVICES

Aritzia's website and online services may contain links to other websites or online services. Aritzia has no responsibility or liability for, or control over, those other websites or service or their collection, use, disclosure, and retention of your personal information. Please refer to the privacy policies and terms of use that apply to those other websites or online services.

  1. POLICY CHANGES

Aritzia may change this Privacy Policy from time to time in which case we will provide notice to you by posting a new version of this Privacy Policy on Aritzia's website at aritzia.com. In some cases, we may also provide notification of changes in another way, such as via email or another manner through the service. Any modifications to this Privacy Policy will be effective upon our posting the modified version (or as otherwise indicated at the time of posting).

  1. UNSUBSCRIBING TO NEWSLETTERS AND MESSAGES

You may unsubscribe from our electronic newsletters and similar messages by using the applicable self-service unsubscribe procedure. For example, by clicking an unsubscribe link in an email or by contacting Aritzia Concierge at service@aritzia.com. It can take several days for us to process your unsubscribe request so you may continue to receive communications for a short period following your request.

Although you may have unsubscribed from receiving our electronic newsletters and similar messages, if you continue to have an account with us or shop on our websites, from time to time, we may use your information for service messages and to communicate with you regarding important matters, such as information about your purchases or updates to this Policy or the Terms of Use that govern our websites. The importance of this information means you may not opt-out of receiving these types of messages and communications.

  1. INTERNATIONAL USERS

This website may be accessed by users in countries outside of the USA. We are a United States company and your information submitted by you through our websites is collected, stored and processed in the United States, Canada and other countries, regardless of the geographic location or country where the information originated. If you do not want your information being collected and maintained in the United States, Canada and other countries outside the European Economic Area (“EEA”), then you should not use our website.

When we transfer your information outside of the EEA, we ensure it benefits from an adequate level of data protection by:

  • relying on adequacy decisions by the European Commission (for example, the adequacy decision with respect to transfers from the EEA to the Canada) made under Article 45 of the GDPR, finding that the third country to which the information is being transferred offers an adequate level of data protection; or
  • if there is no adequacy decision, using standard contractual clauses approved or permitted under Article 46 of the GDPR. You can request a copy of any the standard contractual clauses relating to your information that we may have executed by contacting us using the details below. You can learn more about EU Standard Contractual Clauses more generally on this European Commission Website; or
  • binding corporate rules (“BCRs”), to the extent in force for any of our partners. You can learn more about BCRs on this European Commission Website.

The laws of other countries regarding the collection, use, disclosure, and retention of information may be different from the laws of Canada and the United States, and their laws may be different from the laws of your country. The disclosure of your information in accordance with this Policy may result in your information being transferred to and outside of Canada, the United States, or your country.

  1. CONTACTING ARITZIA'S CHIEF PRIVACY OFFICER

If you have any comments or questions about this Policy or your personal information, please contact our Chief Privacy Officer by mail or e-mail at:

Aritzia Chief Privacy Officer
#118 - 611 Alexander Street,
Vancouver, BC, Canada V6A 1E1
Facsimile + 1 604.251.6575
Email: cpo@aritzia.com.

If you are located in the EEA or the United Kingdom and have questions about your personal data or would like to request to access, update, or delete it, you may contact our representative at:

Bird & Bird GDPR Representative Services SRL
Avenue Louise 235
1050 Bruxelles
Belgium
Email: EUrepresentative.Aritzia@twobirds.com

Key Contact:
Vincent Rezzouk-Hammachi

Bird & Bird GDPR Representative Services UK
12 New Fetter Lane
London
EC4A 1JP
United Kingdom
Email: UKrepresentative.Aritzia@twobirds.com

Key Contact:
Vincent Rezzouk-Hammachi




China Addendum

If you are located within the People’s Republic of China (for the purpose of this addendum only, excluding Hong Kong, Macau and Taiwan, “China”), please read this Addendum (“China Addendum”) together with the Policy above.

  1. WHAT PERSONAL INFORMATION WE COLLECT

We may collect your Sensitive Personal Information, as defined in the China Personal Information Protection Law (PIPL), when necessary for the purposes specified in the Policy above and we will protect your Sensitive Personal Information with strict measures. Please be aware that the misuse or accidental leakage of Sensitive Personal Information may result in damage to your privacy and personal dignity or suffering damages to bodily or property safety.

  1. HOW ARITZIA USES YOUR INFORMATION AND OUR RELATED LEGAL BASIS

Apart from your consent, as our Chinese legal basis for processing personal information for the above purposes we rely on:

  • Contractual necessity: necessity arising from the conclusion or performance of a contract (including a labour contract) to which you are a party;
  • Legal obligation: compliance with legal responsibilities or obligations;
  • Protect the interests of natural person and public health emergency: responding to a public health emergency, or in an emergency to protect natural persons’ health and property;
  • Reasonable for news reporting: reasonably processed for news reporting, media supervision, and other activities conducted in the public interest;
  • Publicly-available personal information: processing personal information that is already made public legally within the reasonable scope and in accordance with the requirements of the PIPL; or
  • Other circumstances specifically permitted by Chinese laws and regulations.
  1. HOW TO YOUR EXERCISE RIGHTS

You may have specific rights under Chinese laws, subject to various exceptions and limitations.

  1. PERSONAL INFORMATION OF CHILDREN

You will be considered as a child if you are under 14 years of age (“Child”).

  1. INTERNATIONAL USERS

Where your personal information collected or generated within China is transferred to a country or region outside of China, your personal information will be secured by appropriate safeguards as set forth under Chinese laws and regulations, including without limitation, where applicable by the use of the standard contract officially published by the Chinese supervisory authority for the transfer of personal information from China to other jurisdictions.

If you do not want your information being collected and maintained in the United States, Canada and other countries outside of China, then you should not use our website.