Privacy Policy

This Privacy Policy was last updated on: January 18, 2024

Your privacy is important to United States of Aritzia Inc. (collectively "Aritzia", "we", "us" or "our"). This Privacy Policy describes how Aritzia handles personal information that we collect through:

• our websites and other digital properties that link to this Privacy Policy;
• our brick-and-mortar retail stores;
• orders that we fulfill for our partners;
• our surveys and other consumer research activities;
• our promotions, sweepstakes, and contests;
• our marketing activities, including when you sign up for our newsletters;
• our Aritzia Concierge service; and
• our social media accounts.

We refer to our activities described above collectively as the "Service".

For more information about your privacy rights:

• If you are a California resident, see the Notice to California Residents.
• If you are a Virginia, Colorado, Connecticut, or Utah resident, see the Notice to Virginia, Colorado, Connecticut, and Utah Residents.
• If you are a Nevada resident, see the Notice to Nevada Residents.

Your Consent

When you provide Aritzia with your personal information, you consent to Aritzia's collection, use, disclosure, and retention of your information in accordance with this Privacy Policy and as otherwise permitted by law.

Table of Contents

1. Personal Information Aritzia Collects
2. Cookies and Similar Technologies
3. How Aritzia Uses Your Personal Information
4. How Aritzia Shares Your Personal Information
5. Your Choices
6. Social Networking, Other Sites and Services
7. Retention, Location and Security of Your Personal Information
8. Cross-Jurisdictional Data Transfer
9. Accuracy of Personal Information
10. Children’s Privacy
11. Employment
12. Changes to this Privacy Policy
13. Contacting Aritzia’s Chief Privacy Officer
14. Notice to California Residents
15. Notice to Virginia, Colorado, Connecticut, and Utah Residents
16. Notice to Nevada Residents

1. Personal Information Aritzia Collects

Information you provide to us. Personal information you may provide to us through the Service or otherwise includes:

• Contact Data, such as your first and last name, email address, billing and mailing addresses, and phone number when you purchase products or services from us (including at an Aritzia retail store or through an Aritzia website), contact us through Aritzia Concierge, or when you create an online account with us.
• Profile Data, such as your username and password that you set to establish an online account with us, age, date of birth, gender, biographical details, photos, saved items in a wish list called “My List”, links to your profiles on various third-party sites including social networks, interests, preferences, and information about your participation in our events, promotions, sweepstakes, contests, or surveys.
• Communications that we exchange or you share or publish (and data created from such communications, such as transcripts and summaries), including when you communicate with us with questions, feedback, or otherwise, including through Aritzia Concierge, our client support team, online chat services, and on social media, such as through direct messages or public posts. Any communications through our online chat services or Aritzia Concierge may be monitored or recorded for quality assurance and other purposes as described in this Privacy Policy. Please do not use our online chat services or Aritzia Concierge if you do not want us to monitor or record those communications.
• Research Data that you provide when you agree to participate in our surveys or research activities (including the Research Community), such as your survey responses, profession, interviews, workshops, and audio and/or video that we record about you or captures of your device’s screen in relation to such surveys and research activities.
• Payments and Transactional Data, such as the information needed to complete your orders on or through the Service (including name, credit card information, bank account number, billing and shipping information, and, if applicable, tax exemption information), and your purchase history.
• Marketing Data, such as your preferences for receiving communications about our products, services, events, promotions and newsletters and similar messages, and details about how you engage with our communications.
• Job Application Data, such as professional credentials and skills, educational and work history, LinkedIn profile page, personal website, authorization to work in the U.S., immigration status, criminal history, and other information that may be included on a resume or curriculum vitae as well as in a cover letter. This may also include diversity information that you voluntarily provide.
• Other Information that we may collect which is not specifically listed here which we will use as described in this Privacy Policy or as otherwise disclosed at the time of collection.

Third-Party Sources. We may combine personal information we receive from you with personal information we obtain from other sources, such as:

• Public Sources, such as social media platforms, publications, and news sites.
• Business and Marketing Partners, such as marketplaces including Instagram, joint marketing partners, event co-sponsors, influencers, and promoters who participate in our affiliate marketing programs.
• Data Providers, such as information services and data licensors that provide demographic and other information about our users.
• Users of the Service, who can purchase products or services (including gift cards) for others, share a product or article with others, refer a friend, or otherwise share contact information of others with us.
• Third-Party Platforms, such as social media accounts such as Facebook, that you use and choose to connect to the Service. This data may include your username, profile picture and other information associated with your account on that third-party service that is made available to us based on your account settings on that service.

Automatic Data Collection. We, our service providers, and our business partners such as Meta Platforms, Inc. may automatically log information about you, your computer or mobile device, and your activity over time on our websites and other sites and online services, such as:

• Device Data, such as your computer or mobile device operating system type and version number, manufacturer and model, browser type, screen resolution, IP address, unique identifiers, the website you visited before browsing to our website, and general location information such as city, state or geographic area.
• Online Activity Data, such as pages or screens you viewed, how long you spent on a page or screen, navigation paths between pages or screens, information about your activity on a page or screen, access times, and duration of access.
• Security Camera Footage and Photos from our stores and offices.

Information About Others. We may also collect information about you from others who know you like your family or friends such as when they want to ship a product (including gift cards) to your address. For example, to send the package, we’d need them to tell us your name, email, mailing and shipping addresses. We may also collect information about you from family or friends if they send you a link to a product or article on the Aritzia website. If you provide us with information about your family or friends, please make sure you have their consent to and remind them to review our Privacy Policy which describes how we use their information.

2. Cookies and Similar Technologies

Aritzia's websites, online services, email messages, and advertisements may use cookies and similar technologies, such as web beacons, pixel or gif tags, and action tags. Those technologies collect information that assists Aritzia to improve products and services, is used for advertising, provides measurement services, facilitates customer communications, and improves the shopping experience.

For example, Aritzia may use information collected through cookies and similar technologies to recognize the user of Aritzia's websites and supplement our profile for that user, determine a user's general location to tailor the website content to that user's location, track use of the websites, offer personalized web page content, information and advertisements, and otherwise facilitate and improve the website experience. You may choose to decline or disable cookies if your web browser permits, but doing so may affect your ability to access or use certain features of Aritzia's websites. For more information on how to disable cookies, see Section 5 below.

Aritzia may use web beacons, pixel or gif tags, and action tags to confirm that email messages have been delivered and opened. You may opt-out of receiving emails in accordance with this Privacy Policy.

We use chat technologies, such as those provided by third parties such as Twilio, to operate chat features on the Service that you can use to communicate with us. We, Twilio, and other third parties may access and use information described in the Automatic Data Collection section above, and other personal information you share through online chats, for the purposes described in this Privacy Policy.

Do Not Track. Some Internet browsers may be configured to send “Do Not Track” signals to the online services that you visit. We currently do not respond to “Do Not Track”. To find out more about “Do Not Track,” please visit https://allaboutdnt.com/.

3. How Aritzia Uses Your Personal Information

We use your personal information for the following purposes or as otherwise described at the time we collect it:

To Provide Services. We use your personal information to:

• provide and operate the Service and our business, including our affiliate marketing programs;
• evaluate and enter into a business relationship with you, including for you to provide us with services related to our business;
• improve the Service and our business, including in response to trends, patterns, feedback, and sentiments expressed on social media or directly to us;
• establish and maintain your user profile on the Service, including tracking your orders, purchase history, and shipments and sending you reminders of items left in your shopping cart;
• remember devices from which you have previously logged in;
• communicate with you about the Service, including by sending announcements, updates, security alerts, and support and administrative messages;
• understand your needs and interests, and personalize your experience with the Service and our communications such as by using your location information to determine your language preferences or display accurate date and time information; and
• provide support for the Service, respond to your requests, questions and feedback, including through Aritzia Concierge and chat services, evaluate your satisfaction with the Service and to otherwise administer our relationship with you.

We may combine your personal information collected through various sources, including information collected at Aritzia's retail stores and through Aritzia's websites, and information obtained from other sources such as to enhance and personalize your shopping experience on our websites and to facilitate product returns.

Research and Development. We may use your personal information for research and development purposes, including to analyze and improve the Service and our business. As part of these activities, we may create aggregated, deidentified or other anonymous data from personal information we collect. We make personal information into deidentified or anonymous data by removing information that makes the data personally identifiable to you. We may use this deidentified or anonymous data and share it with third parties for our lawful business purposes, including to analyze and improve the Service and promote our business. For example, if we learn that most users use mobile devices, we might wish to expand on that feature.

Marketing and Advertising. We and our third-party advertising partners may collect and use your personal information for marketing and advertising purposes, except that such sharing with third parties does not include sharing of personal information collected through our short code text messaging programs without your consent:

• Direct Marketing. We may send you Aritzia-related or other direct marketing communications as permitted by law. You may opt-out of our marketing communications as described in the Opt-Out of Marketing Communications section below.
• Interest-Based Advertising. We may contract with third-party advertising and social media companies such as Meta Platforms, Inc. to display ads on the Service and other online services. These companies may use cookies and similar technologies to collect information about you (including the device data, online activity data and/or geolocation data described above) and your interaction over time across the Service, other online services, and with our communications, and use that information to serve ads that they think will interest you. This is called interest-based advertising. We may also share information about our users with these companies to facilitate interest-based advertising to those or similar users on other online platforms. You can learn more about your choices for limiting interest-based advertising in the Advertising Choices section below.

Manage Recruiting and Process Employment Applications. We may use personal information, such as information submitted to us in a job application, to facilitate our recruitment activities and process employment applications, such as by evaluating a job candidate for an employment activity, and monitoring recruitment statistics.

Compliance and Protection. We may use your personal information to:

• comply with applicable laws, lawful requests, and legal process, such as to respond to subpoenas or requests from government authorities;
• protect our, your or others’ rights, privacy, safety, security or property (including by making and defending legal claims and security monitoring in our stores);
• audit our internal processes for compliance with legal and contractual requirements and internal policies;
• enforce the terms and conditions that govern the Service including our Terms of Use, and other legal terms and policies; and
• prevent, identify, investigate and deter fraudulent, harmful, unauthorized, unethical or illegal activity, including cyberattacks and identity theft.

In addition to the above, applicable laws may require or permit that we process your personal information for specified purposes. This Privacy Policy should not be read as limiting our right to do so.

4. How Aritzia Shares Your Personal Information

We may share your personal information with the following parties and as otherwise described in this Privacy Policy or at the time of collection:

Affiliates. Our corporate affiliates for the provision of our products and Services consistent with this Privacy Policy.

Suppliers and Service Providers. Companies and individuals that provide services on our behalf or help us operate the Service or our business (such as IT, hosting, payment processing services, customer relationship management and support, chat and call services, print and mail fulfillment, order fulfillment and shipping, data/document storage and management, email delivery, marketing, analytics, fraud detection, event management services, promotions, sweepstakes, contests and surveys).

Financial Services Companies. Companies that check your credit and offer financing for your purchases, such as Afterpay, if you choose to use them. Afterpay may use your information in accordance with its privacy policy, https://www.afterpay.com/privacy-policy.

Payment Processors. Any payment card information you use to make a purchase on the Service is collected and processed directly by our payment processors, such as PayPal. PayPal may use your payment data in accordance with its privacy policy, https://www.paypal.com/us/webapps/mpp/ua/privacy-full.

Advertising Partners. We may share your personal information with third-party advertising companies for the interest-based advertising purposes described above.

Professional Advisors. Professional advisors, such as lawyers, accountants, auditors, bankers and insurers, where necessary in the course of the professional services that they render to us.

Authorities and Others. Law enforcement, government authorities, courts, and private parties, as we believe in good faith to be necessary or appropriate for the compliance and protection purposes described above.

Business Transferees. Relevant participants in business transactions (or potential transactions) involving a corporate divestiture, merger, consolidation, acquisition, reorganization, sale or other disposition of all or any portion of the business or assets of, or equity interests in, Aritzia or our affiliates (including, in connection with a bankruptcy or similar proceedings).

Business and Marketing Partners. Third parties with whom we co-sponsor events or promotions, with whom we jointly offer products or services (including influencers and promoters who participate in our affiliate marketing programs), or whose products or services may be of interest to you.

Third-Party Platforms. If you choose to log into the Service with, or otherwise link your Service account to, a social media such as Facebook, we may share your personal information with that third-party service. The third party’s use of the shared information will be governed by its privacy policy and the settings associated with your account with the third-party service.

Other users and the public.. You can choose to make some of your profile information visible to the public. Information visible to the public can be collected and used by them, including being cached, copied, screen captured or stored elsewhere (e.g., search engines). We are not responsible for any such use of such information.

5. Your Choices

You have the following choices with respect to your personal information. If you are a resident of California or Virginia, see additional information about your rights below.

Delete Your Profile. If you have registered for an account with us, you may delete your profile by logging into the account and selecting the “Delete my profile” option. After you delete your profile, we may continue to retain and use certain of your personal information, including for the reasons identified in the section above entitled How Aritzia Uses Your Personal Information.

Access or Update Your Information. If you have registered for an account with us, you may review and update certain account information by logging into the account.

Opt-Out of Marketing Communications. You may opt-out of marketing-related messages by using the applicable self-service unsubscribe procedure (for example, by clicking an unsubscribe link in an email, replying STOP to the short code or telephone number from which text messages are being sent or adjusting your website user account preferences), or by contacting us at service@aritzia.com or at 1-855-274-8942. From time to time, Aritzia may use your personal information to communicate with you regarding important matters, such as information about your purchases or updates to Aritzia's Privacy Policy or the Terms of Use that govern Aritzia's websites. Because that information is important, you may not opt-out of receiving these communications.

Cookies. Most browsers let you remove and/or stop accepting cookies from the websites you visit. To do this, follow the instructions in your browser’s settings. Many browsers accept cookies by default until you change your settings. If you do not accept cookies, however, you may not be able to use all functionality of the Service and it may not work properly. For more information about cookies, including how to see what cookies have been set on your browser and how to manage and delete them, visit https://allaboutcookies.org/. We use Google Analytics, including the Google signals feature, to help us understand user activity and patterns on the sites. You can learn more about Google Analytics cookies at https://developers.google.com/analytics/resources/concepts/gaConceptsCookies and about how Google collects and processes your data at https://policies.google.com/technologies/partner-sites. You can prevent the use of Google Analytics relating to your use of our sites by downloading and installing a browser plugin available at https://tools.google.com/dlpage/gaoptout?hl=en.

Local Storage. You may be able to limit use of HTML5 cookies in your browser settings. Unlike other cookies, Flash-based local storage cannot be removed or rejected via your browser settings, but you can adjust the settings of your Flash player to block it. Blocking Flash storage may impede the functionality of Flash applications, including those employed by the Service. For more information on Flash local storage visit https://www.adobe.com/products/flashplayer/end-of-life.html.

You can also manage your cookie preferences (including for cookies relating to advertising) by visiting our Cookie Preference Center.

Advertising Choices. You can limit use of your information for interest-based advertising by:

• Browser Settings. Blocking third-party cookies in your browser settings.
• Privacy Browsers/Plug-Ins. By using privacy browsers or ad-blocking browser plug-ins that let you block tracking technologies.

• Platform Settings. Google and Facebook offer opt-out features that let you opt-out of use of your information for interest-based advertising:

  • Google: https://adssettings.google.com/
  • Facebook: https://www.facebook.com/about/ads

• Ad Industry Tools. Opting out of interest-based ads from companies participating in the following industry opt-out programs:

  • Network Advertising Initiative: https://thenai.org/opt-out/
  • Digital Advertising Alliance: https://optout.aboutads.info/?c=2&lang=EN
  • AppChoices mobile app, available at https://youradchoices.com/appchoices, which will allow you to opt-out of interest-based ads in mobile apps served by participating members of the Digital Advertising Alliance.
• Mobile Settings. Using your mobile device settings to limit use of the advertising ID associated with your mobile device for interest-based advertising purposes.

Declining to Provide Information. We need to collect personal information to provide certain services, such as your address to ship a product. If you do not provide the information requested, we may not be able to provide those services.

Declining to Use Our Online Chat Services. Any communications through our online chat services may be monitored or recorded for quality assurance and other purposes as described in this Privacy Policy. Please do not use our online chat services if you do not want us to monitor or record those communications.

Third-Party Platforms. If you choose to connect to the Service through your social media account, such as Facebook, you may be able to use your settings in your account with that platform to limit the information we receive from it. If you revoke our ability to access information from a third-party platform, that choice will not apply to information that we have already received from that third party.

Please note that we also may work with companies that offer their own opt-out mechanisms or do not participate in the opt-out mechanisms described above. We do not control those mechanisms and even after using these opt-out mechanisms, you may receive interest-based advertising from other companies.

6. Social Networking, Other Sites and Services

When you use certain aspects of Aritzia's websites or other services, or post information to other social networking sites, for example, there may be links to Aritzia's Facebook or Twitter pages or you may be able to "like" a product on your Facebook account or "pin" a product on your Pinterest account, the information that you post or share in connection with these third-party sites is visible to other persons and can be read, collected, used, and disclosed by other persons, including to send unsolicited messages. In such cases, you will be leaving Aritzia's website and going to the third party's website. These links are not an endorsement of, or representation that we are affiliated with, any third party. In addition, our content may be included on web pages or in mobile applications or other online services that are not associated with us. Any information you provide or post to such third-party social-networking sites and other sites is governed by their own privacy policies, which you may read on the applicable site. You are solely responsible for the information that you choose to post or share in those situations. Aritzia has no control over, or responsibility or liability for, the use, disclosure, and retention of the information that you disclose in those situations, and the use, disclosure, and retention of the disclosed information is not subject to this Policy. Please be careful when disclosing your information in those situations.

7. Retention, Location and Security of Your Personal Information

Aritzia retains your personal information for the period necessary to fulfill the purposes outlined in this Privacy Policy or such longer retention period as may be required or permitted by applicable law.

Aritzia will store and process your personal information in Canada, the United States, and other countries. The laws of other countries regarding the collection, use, disclosure, and retention of personal information may be different from the laws of the United States. The disclosure of your information in accordance with this Privacy Policy may result in your personal information being transferred outside of the United States.

Aritzia employs reasonable safeguards - including administrative, technical and physical measures - appropriate to the sensitivity of the personal information in its possession or under its control in order to protect that information from unauthorized access, collection, use, disclosure, disposal, or similar risks. While Aritzia uses reasonable efforts to protect your information, no method of transmission over the Internet, or method of electronic storage, is 100% secure, and therefore, Aritzia cannot guarantee absolute security of your personal information.

8. Cross-Jurisdictional Data Transfer

We are a United States company and your information submitted by you through our websites is collected and maintained in the United States, Canada and other countries, regardless of the geographic location or country where the information originated.

By providing us with your personal information, you acknowledge and agree that such personal information may be transferred to other jurisdictions for processing and storage, where laws regarding the protection of personal information may be less stringent than the laws in your jurisdiction. If you do not consent to your information being collected and maintained in the United States, Canada and other countries, then you should not enter such information through our websites.

Further, such personal information may be accessible to law enforcement, national security authorities, and the courts of such jurisdictions in accordance with applicable law.

This website may be accessed by users in countries outside of the United States, however, this website is intended for use by individuals located in the United States only. We make no representations or warranties that aritzia.com/us/en is appropriate or available for use in countries outside of the United States (such as laws relating to default cookie settings).

9. Accuracy of Personal Information

You can help us maintain the accuracy and completeness of your information (including your Aritzia website account information) by notifying us of any changes to your information. You may update your Aritzia website account information through our websites, Aritzia Concierge, or at a retail location.

10. Children’s Privacy

Aritzia does not knowingly collect personal information from children who are under 13 years of age without the consent of their legal guardian. Please immediately contact Aritzia's Chief Privacy Officer at one of the addresses noted below under Contacting Aritzia’s Chief Privacy Officer if you believe that Aritzia has unintentionally collected personal information from a child under 13 years of age without the consent of their legal guardian. If Aritzia learns that it has inadvertently collected personal information from a child under 13 years of age without the consent of their legal guardian, Aritzia will use reasonable efforts to delete that information from its systems (except to the extent that retention of the personal information is required or permitted by applicable law).

11. Employment

Aritzia may use and disclose your personal information to administer and process your application for employment with Aritzia and related matters. If we hire you, please see the applicable privacy notice (such as the Employee Privacy Policy) for more information on how we handle your personal information.

12. Changes to this Privacy Policy

Aritzia may change this Privacy Policy from time to time, in which case we will notify you by posting a new version of this Privacy Policy on Aritzia's website at aritzia.com/us/en. In some cases, we may also provide notification of changes in another way that we believe is reasonably likely to reach you, such as via email or another manner through the Service. Any modifications to this Privacy Policy will be effective upon our posting the modified version (or as otherwise indicated at the time of posting). In all cases, your continued use of the Service after the posting of any modified Privacy Policy indicates your acceptance of the modified Privacy Policy.

13. Contacting Aritzia’s Chief Privacy Officer

If you have any comments or questions about this Privacy Policy or your personal information, please contact Aritzia's Chief Privacy Officer by mail or email at: Aritzia - Chief Privacy Officer, #118 - 611 Alexander Street, Vancouver, BC, Canada V6A 1E1 or email: cpo@aritzia.com.

14. Notice to California Residents

Scope. This section applies only to California residents. It describes how we collect, use and share Personal Information of California residents when we act as a “business” as defined under the California Consumer Privacy Act of 2018 (“CCPA”), and their rights with respect to their Personal Information. For purposes of this section, “Personal Information” has the meaning given in the CCPA but does not include information exempted from the scope of the CCPA. In some cases, we may provide a different privacy notice to certain categories of California residents, in which case that notice will apply instead of this section.

Your California Privacy Rights. As a California resident, you have the rights listed below. However, these rights are not absolute, and in certain cases we may decline your request as permitted by law.

• Know/Information. You can request information about the categories of Personal Information that we have collected; the categories of sources from which we collected Personal Information; the business or commercial purpose for collecting, sharing and/or selling Personal Information; the categories of any Personal Information that we sold or disclosed for a business purpose; and the categories of any third parties with whom Personal Information was sold, shared or disclosed for a business purpose.

• Access. You can request a copy of the Personal Information that we have collected about you.
• Correction. You can ask us to correct inaccurate Personal Information that we have collected about you.
• Deletion. You can ask us to delete the Personal Information that we have collected from you.
• Opt-out.
  • Opt-out of tracking for targeted advertising purposes. You can opt-out of certain tracking activities for targeted advertising (also known as interest-based advertising) purposes.
  • Opt-out of the sale of Personal Information. You can opt-out of the sale of your Personal Information. We do not “sell” your Personal Information except to the extent that use of the interest-based advertising services described above constitutes a “sale” under the CCPA.
• Nondiscrimination. You are entitled to exercise the rights described above free from discrimination as prohibited by the CCPA.

Exercising your right to information/know, access, correction, and deletion.

• calling us toll free at 1-855-274-7545
• emailing cpo@aritzia.com

Exercising your right to opt-out of tracking for targeted advertising purposes. While we do not sell Personal Information for money, like many companies, we use services that help deliver interest-based ads to you as described above. The CCPA classifies our use of some of these services as “selling” your Personal Information to, or “sharing” your Personal Information with, the advertising partners that provide the services from which you have the right to opt-out. You can by submit requests to opt-out of tracking for selling/sharing/targeted advertising purposes here: Do Not Sell or Share My Personal Information. Your request to opt-out will apply only to the browser and the device from which you submit the request. You can also broadcast the Global Privacy Control (GPC) to opt-out for each participating browser system that you use. Learn more at the Global Privacy Control website.

Verification of identity. We may need to verify your identity in order to process your information/know, access, correction, or deletion requests and reserve the right to confirm your residency. To verify your identity, we may require government identification, a declaration under penalty of perjury, authentication into your Service account, personal identifiers we can match against information we may have collected from you previously, confirmation of your request using the email or telephone account stated in the request, or other information, where permitted by law.

Authorized agents. Your authorized agent may be able to make a request on your behalf. However, we may need to verify your authorized agent’s identity and authority to act on your behalf. We may require a copy of a valid power of attorney given to your authorized agent pursuant to applicable law. If you have not provided your agent with such a power of attorney, we may ask you to take additional steps permitted by law to verify that your request is authorized, such as by providing your agent with written and signed permission to exercise your rights on your behalf, the information we request to verify your identity, and confirmation that you have given the authorized agent permission to submit the request.

Sales. We do not “sell” Personal Information as defined by the CCPA and have not sold Personal Information in the preceding 12 months except to the extent that use of the interest-based advertising services described above constitutes a “sale” under the CCPA. We do not have actual knowledge that we have sold or shared the Personal Information of California residents under 16 years of age.

Sensitive Personal Information. We do not use or disclose sensitive Personal Information for purposes that California residents have a right to limit under the CCPA.

Retention. The criteria for deciding how long to retain Personal Information is generally based on whether such period is sufficient to fulfill the purposes for which we collected it as described in this notice, including complying with our legal obligations.

Deidentification. We do not to attempt to reidentify deidentified information derived from Personal Information, except for the purpose of testing whether our deidentification processes comply with applicable law.

Personal Information that we collect, use and disclose The chart below summarizes the Personal Information we collect by reference to the categories of Personal Information specified in the CCPA (Cal. Civ. Code §1798.140) and describes our practices currently and during the 12 months preceding the effective date of this Privacy Policy. The terms in the chart refer to the categories of information, sources, purposes and third parties described above in this Privacy Policy in more detail. Information you voluntarily provide to us, such as in free-form webforms, may contain other categories of Personal Information not described below. In addition to the disclosures described in the chart below, we disclose Personal Information as described in the How Aritzia Shares Your Personal Information section above.

For information about the categories of sources of this information, see the section above entitled Personal Information Aritzia Collects.

For information about the purposes for collecting, using, and disclosing personal information, see the section above entitled How Aritzia Uses Your Personal Information.

15. Notice to Virginia, Colorado, Connecticut, and Utah Residents

Scope. This section applies only to Virginia, Colorado, Connecticut, and Utah residents and only to the extent applicable to you. It describes how we collect, use, and share Personal Data of Virginia, Colorado, Connecticut, and Utah residents in our capacity as a covered business under the Virginia Consumer Data Protection Act (“VCDPA”), the Colorado Privacy Act (“CPA”), the Connecticut Act Concerning Personal Data Privacy and Online Monitoring (“PDPOM”), and the Utah Consumer Privacy Act (“UCPA”) and your rights with respect to that Personal Data. For purposes of this section, the term “Personal Data” has the meaning given in the VCDPA, CPA, PDPOM, and UCPA as applicable, but does not include information exempted from the scope of the these laws.

Your Virginia, Colorado, Connecticut, and Utah privacy rights. As a Virginia, Colorado, Connecticut, or Utah resident, you have some or all of the rights listed below. However, these rights are not absolute, and we may decline your request as permitted by law. You can ask to appeal any denial of your request in the same manner through which you may submit a request.

• Access. You can request confirmation on whether we are processing your Personal Data and/or a copy of the Personal Data that we have collected about you.
• Correction. You can ask us to correct inaccurate Personal Data that we have collected about you.
• Deletion. You can request that we delete the Personal Data we have obtained about you or that you have provided to us.
• Opt-out of tracking for targeted advertising purposes. You can opt-out of certain tracking activities for targeted advertising (also known as interest-based advertising) purposes.
• Opt-out of profiling. If we process your Personal Data for profiling purposes as defined by the VCDPA, CPA, PDPOM, and/or UCPA you can opt-out of such processing.
• Non-discrimination. You have the right to be free from discrimination as prohibited by the VCDPA, CPA, PDPOM, and/or UCPA.

Exercising your right to access, correction, and deletion and opt-out of profiling.

• calling us toll free at 1-855-274-7545
• emailing cpo@aritzia.com

Exercising your right to opt-out of tracking for targeted advertising purposes. You can submit requests to opt-out of tracking for targeted advertising purposes HERE.

Authentication. We may need to verify your identity in order to process your access, correction, or deletion requests and reserve the right to confirm your residency. To verify your identity, we may require government identification, a declaration under penalty of perjury, authentication into your Service account, personal identifiers we can match against information we may have collected from you previously, confirmation of your request using the email or telephone account stated in the request, or other information, where permitted by law and as consistent with requirements in law.

Authorized agents.  Your authorized agent may be able to make a request on your behalf. However, we may need to verify your authorized agent’s identity and authority to act on your behalf. We may require a copy of a valid power of attorney given to your authorized agent pursuant to applicable law. If you have not provided your agent with such a power of attorney, we may ask you to take additional steps permitted by law to verify that your request is authorized, such as by providing your agent with written and signed permission to exercise your rights on your behalf, the information we request to verify your identity, and confirmation that you have given the authorized agent permission to submit the request.

Additional information for Colorado residents.  

• Sensitive Personal Data. We do not have actual knowledge that we have processed the Personal Data of Colorado residents under 13 years of age or the Sensitive Personal Data of Colorado residents.
• Profiling  We do not engage in profiling, as defined by the CPA, in furtherance of decisions that produce legal or similarly significant effects.

16. Notice to Nevada Residents

Nevada consumers who have purchased goods or services from us may opt-out of the sale of covered information pursuant to Nevada law. We do not engage in such sales, but you may contact us at cpo@aritzia.com if you have questions.