California Information Collection and Sharing Disclosure

This chart describes the categories of personal information we collect, transfer to third parties in exchange for valuable consideration (i.e., “sold”), and disclose for a “business purpose” (as those terms are defined under California law). Please note that because this list is comprehensive it may refer to types of information that we collect and share about people other than yourself. For example, while we transfer credit card and debit card numbers for our business purpose in processing payments for orders placed on our websites, we do not collect or transfer credit card or debit card numbers of individuals that submit questions on our website’s “contact us” page.

Category of Personal Information	Collected	Sold	Disclosed for a Business Purpose	Examples of Categories of Third Parties that Receive Personal Information
Identifiers
Real name and/or alias	✓ ✓	☐ ☐	✓ ✓	Advertising networks. Third parties that help administer, manage and analyze our programs and services, such as customer service providers, loyalty program administrators, product review hosts, and survey administrators. Third parties that provide marketing and data analytics services, such as social media platforms used to deliver our ads, website/email optimization providers, marketing communications providers (e.g., email, SMS, post), and data analytics providers. Payment processors, financial institutions, and others as needed to complete transactions and for authentication, security, and fraud prevention. Third parties necessary to complete transactions and provide our products and services, including order management and fulfillment providers, delivery companies, agents, and manufacturers. Third parties that provide us with information technology services, such as internet service providers, operating systems and platforms, data centers/hosts/cloud service providers. Third parties that assist us with information technology and security programs. Third parties that assist us with fraud prevention, detection, and mitigation. Government entities, law enforcement, lawyers, auditors, consultants and other parties as required by law, including litigation.
Contact information (such as postal address, telephone number, e-mail address)	✓ ✓	☐ ☐	✓ ✓
Online identifiers (such as internet protocol address, etc.)	✓ ✓	☐ ☐	✓ ✓
Government issued ID (such as social security number, driver’s license number, passport number)	✓ ✓	☐ ☐	✓ ✓
Physical characteristics	✓ ✓	☐ ☐	✓ ✓
Signature	✓ ✓	☐ ☐	✓ ✓
Financial information
Bank account number	✓ ✓	☐ ☐	✓ ✓	Payment processors, financial institutions, and others as needed to complete transactions and for authentication, security, and fraud prevention. Third parties necessary to complete transactions and provide our products and services, including order management and fulfillment providers, deliver companies, agents, and manufacturers. Third parties that help administer, manage and analyze our programs and services, such as customer service providers. Third parties that provide us with information technology services, such as internet service providers, operating systems and platforms, data centers/hosts/cloud service providers. Third parties that assist us with information technology and security programs. Third parties that assist us with fraud prevention, detection, and mitigation. Government entities, law enforcement, lawyers, auditors, consultants and other parties as required by law, including litigation.
Credit card number	✓ ✓	☐ ☐	✓ ✓
Debit card number	✓ ✓	☐ ☐	✓ ✓
Other financial information	✓ ✓	☐ ☐	✓ ✓
Medical / health insurance information
Information regarding an individual’s medical history, mental or physical condition, or treatment	✓ ✓	☐ ☐	✓ ✓	Third parties that help administer, manage and analyze our programs and services, such as customer service providers, loyalty program administrators, product review hosts, and survey administrators.
Health insurance policy number, subscriber identification number	☐ ☐	☐ ☐	☐ ☐
Protected characteristics
Age, Race, Ethnicity, Gender, Physical or Mental Handicap, etc.	✓ ✓	☐ ☐	✓ ✓	Third parties who provide marketing and data analytics services, such as social media platforms used to deliver our ads; website/email optimization providers; marketing communications providers (e.g., email, SMS, post); and data analytics providers Third parties who provide us with information technology services, such as internet service providers, operating systems and platforms, data centers/hosts/cloud service providers Government entities, law enforcement, lawyers, auditors, consultants and other parties as required by law, including litigation
Commercial information
Information about products and services obtained from us	✓ ✓	☐ ☐	✓ ✓	Advertising networks. Third parties that help administer, manage and analyze our programs and services, such as customer service providers, loyalty program administrators, product review hosts, and survey administrators. Third parties that provide marketing and data analytics services, such as social media platforms used to deliver our ads, website/email optimization providers, marketing communications providers (e.g., email, SMS, post), and data analytics providers. Third parties that provide us with information technology services, such as internet service providers, operating systems and platforms, data centers/hosts/cloud service providers.. Third parties that assist us with information technology and security programs.
Individual’s preferences	✓ ✓	☐ ☐	✓ ✓
Other consuming histories or tendencies	✓ ✓	☐ ☐	✓ ✓
Network activity data
Browsing and/or search history	✓ ✓	☐ ☐	✓ ✓	Advertising networks. Third parties that help administer, manage and analyze our programs and services, such as customer service providers, loyalty program administrators, product review hosts, and survey administrators. Third parties that provide marketing and data analytics services, such as social media platforms used to deliver our ads, website/email optimization providers, marketing communications providers (e.g., email, SMS, post), and data analytics providers. Payment processors, financial institutions, and others as needed to complete transactions and for authentication, security, and fraud prevention. Third parties necessary to complete transactions and provide our products and services, including order management and fulfillment providers, delivery companies, agents, and manufacturers. Third parties that provide us with information technology services, such as internet service providers, operating systems and platforms, data centers/hosts/cloud service providers. Third parties that assist us with information technology and security programs. Third parties that assist us with fraud prevention, detection, and mitigation. Government entities, law enforcement, lawyers, auditors, consultants and other parties as required by law, including litigation.
Information about interactions with our website, mobile application, or advertisements	✓ ✓	☐ ☐	✓ ✓
Biometric information
Fingerprint, face print, voiceprint	☐ ☐	☐ ☐	☐ ☐	N/A
Sleep, health, exercise data	☐ ☐	☐ ☐	☐ ☐	N/A
Geolocation data
Precise physical location	✓ ✓	☐ ☐	✓ ✓	Advertising networks. Third parties that help administer, manage and analyze our programs and services, such as customer service providers, loyalty program administrators, product review hosts, and survey administrators. Third parties that provide marketing and data analytics services, such as social media platforms used to deliver our ads, website/email optimization providers, marketing communications providers (e.g., email, SMS, post), and data analytics providers.
Electronic and sensory data (i.e., audio, electronic, visual, thermal, olfactory, or similar information)
Audio recording (e.g., customer service call recordings)	✓ ✓	☐ ☐	✓ ✓	Third parties that help administer, manage and analyze our programs and services, such as customer service providers, loyalty program administrators, product review hosts, and survey administrators. Third parties that provide marketing and data analytics services, such as social media platforms used to deliver our ads, website/email optimization providers, marketing communications providers (e.g., email, SMS, post), and data analytics providers. Third parties that provide us with information technology services, such as internet service providers, operating systems and platforms, data centers/hosts/cloud service providers. Third parties that assist us with information technology and security programs. Third parties that assist us with fraud prevention, detection, and mitigation. Government entities, law enforcement, lawyers, auditors, consultants and other parties as required by law, including litigation.
Photographs	✓ ✓	☐ ☐	✓ ✓
Video surveillance	☐ ☐	☐ ☐	☐ ☐
Professional/employment information
Education	✓ ✓	☐ ☐	✓ ✓	Third parties that help administer, manage and analyze our programs and services, such as customer service providers, loyalty program administrators, product review hosts, and survey administrators. Third parties that provide marketing and data analytics services, such as social media platforms used to deliver our ads, website/email optimization providers, marketing communications providers (e.g., email, SMS, post), and data analytics providers. Third parties that assist us with fraud prevention, detection, and mitigation. Government entities, law enforcement, lawyers, auditors, consultants and other parties as required by law, including litigation.
Occupation	✓ ✓	☐ ☐	✓ ✓
Employment history	✓ ✓	☐ ☐	✓ ✓
Professional references	☐ ☐	☐ ☐	☐ ☐
Inferences drawn from any of the above information	✓ ✓	☐ ☐	✓ ✓	Advertising networks. Third parties that provide marketing and data analytics services, such as social media platforms used to deliver our ads, website/email optimization providers, marketing communications providers (e.g., email, SMS, post), and data analytics providers. Third parties that help administer, manage and analyze our programs and services, such as customer service providers, loyalty program administrators, product review hosts, and survey administrators.