Additional State-Specific Privacy Disclosures

Last updated: June 28, 2024

This additional state-specific privacy disclosure page ("Disclosure") supplements the Zappos Privacy Notice and is effective as of June 28, 2024. The Zappos Privacy Notice describes the personal information that we collect, the sources from which we collect it, the purposes for which we use it, the limited circumstances under which we share personal information, and with whom we share it. These additional disclosures are required by certain state privacy laws and provide a Notice at Collection underthe California Privacy Rights Act:

Categories of personal information collected. The personal information that Zappos collects, or has collected from consumers in the twelve months prior to the effective date above, falls into the following categories established by the California Privacy Rights Act and other state privacy laws, depending on which Zappos service is used:

• identifiers such as your name, alias, address, phone numbers, or IP address, or your Zappos account log-in information;
• personal information, such as a credit card number or other payment information;
• commercial information, such as purchase activity;
• internet or other electronic network activity information, including browsing history, or information used to prevent and detect fraud or other unauthorized activity, including informing customers if such activity were to affect them;
• geolocation data, such as the location of your device or computer
• visual information, such images and videos if you upload them, for example in connection with reviews; and
• inference data, such as information about your purchase preferences.

Categories of personal information disclosed for a business purpose. The personal information that Zappos disclosed to the third parties identified in the “Does Zappos.com Share the Information It Receives?” section of the Zappos Privacy Notice in the twelve months prior to the effective date above falls into the following categories established by the California Privacy Rights Act and other state privacy laws, depending on which Zappos service is used:

• identifiers such as your name, address, phone numbers, or IP address, for example if we use a third party carrier to deliver your order;
• personal information, such as a credit card number or other payment information, for example if we use a third-party payment processor;
• commercial information, such as the details of a product or service you purchased if a third party service provider is assisting to provide that product or service to you;
• internet or other electronic network activity information, such as if we use a service provider to help us gather crash reports for analyzing the health of our devices and services, or information relating to our prevention and detection of fraud or other unauthorized activity, which may require disclosing certain information about potentially affected customers to law enforcement;
• audio or visual information, for example if a service provider reviews recordings of customer service phone calls for quality assurance purposes;

and

• inference data, for example if we use a service provider to help us optimize the accuracy of your shipping address to make sure your order reaches you.

Advertising.As explained in the “What About Third-Party Advertisers and Links to Other Websites?” section in the Zappos Privacy Notice, Zappos shares limited information to help ensure you receive more useful and relevant Zappos ads and to measure their effectiveness. Any personal information Zappos may have shared for the purpose of cross-context behavioral advertising, as that term is defined by the California Privacy Rights Act, in the twelve months prior to the effective date above falls into the following categories:

• identifiers such as a cookie, a device identifier, or a code derived from applying irreversible cryptography to other information like an email address; we do not share your name or other information that directly identifies you with ad companies.
• internet or other electronic network activity information, such as whether you downloaded an app or other measures of ad effectiveness; for example, if you have already downloaded one of our apps, we will share an advertising identifier and data about that event so that you will not be served an ad to download the app again.

The categories of third parties with whom Zappos may share personal information for the purpose of cross-context behavioral advertising are identified in the “Does Zappos.com Share the Information it Receives?” and “What About Third-Party Advertisers and Links to Other Websites?” sections of the Zappos Privacy Notice. Zappos also processes personal information for the purposes of targeted advertising as that term is defined under certain state privacy laws Zappos does not share, as that term is defined under the California Privacy Rights Act, personal information of individuals under 18 years of age.

Your Data Rights. You may have certain data rights under state privacy laws, including to request information about the collection of your personal information by Zappos, to access your personal information in a portable format, and to correct or delete your personal information. If you wish to do any of these things, please call us at 1-800-927-7671 or email privacy@zappos.com. Additionally, you may have the right to opt out of the processing of your personal data for cross-context behavioral advertising (also referred to as targeted advertising under certain state privacy laws). To do so, please visit our “Interest-Based Ads Policy” where you can opt out of cross-context behavioral advertising. You may have the right to appeal the denial of any of these rights by calling us at 1-800-927-7671 or emailing privacy@zappos.com. Depending on your data choices, certain services may be limited or unavailable.

To ensure the security of your Zappos account, we will generally ask you to verify your request using the contact information you have already provided. If you do not have an account, or if you are an authorized agent under applicable state law, please contact us by one of the methods listed above.

No Sale of Personal Information. In the twelve months prior to the effective date of this Disclosure, Zappos has not sold any personal information of consumers, as those terms are defined under the California Privacy Rights Act.

De-Identified Data Disclosure. Zappos may use de-identified data in some instances. Zappos either maintains such data without attempting to reidentify it or treats such data as personal data subject to applicable law.

California Privacy Rights Act Retention Disclosure. To enable your continued use of Zappos services, we keep your personal information for as long as it is required in order to fulfill the relevant purposes described in theZappos Privacy Notice, as permitted or as may be required by law, or as otherwise communicated to you. For example, we retain your transaction history so that you can review past purchases (and repeat orders if desired) and what addresses you have shipped orders to, and to improve the relevance of products and content we recommend.

California Privacy Rights Act Sensitive Personal Information Disclosure. The categories of data that Zappos collects and discloses for a business purpose may include "sensitive personal information" as defined under the California Privacy Rights Act. Zappos does not use or disclose sensitive personal information for any purpose not expressly permitted by the California Privacy Rights Act.

California Privacy Rights Act Non-discrimination Statement. Zappos will not discriminate against any consumer for exercising their rights under the California Privacy Rights Act.

Colorado Privacy Act and Oregon Consumer Privacy Act Profiling Disclosure. Zappos does not engage in profiling of consumers in furtherance of automated decisions that produce legal or similarly significant effects, as those terms are defined under the Colorado Privacy Act or the Oregon Consumer Privacy Act.

Oregon Consumer Privacy Act Controller Entity Disclosure.The controller entity that is subject to the Zappos Privacy Notice and this Disclosure is Zappos.com LLC.

For questions or concerns about this Disclosure or the Privacy Notice, please call us at 1-800-927-7671 or email privacy@zappos.com.