CALIFORNIA PRIVACY STATEMENT

This California Privacy Statement (“California Statement”) supplements the Privacy Statement and applies solely to visitors, users, and others who reside in the State of California (“consumers” or “you”). We adopted this California Statement to comply with California privacy laws, including the California Consumer Privacy Act (“CCPA”). Any terms defined in the CCPA and not defined here have the same meaning when used in this California Statement.

Notice of Collection and Use of Personal Information

We collect information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household (“personal information”). In addition, we may collect data that is not identifiable to you or otherwise associated with you, such as aggregated data, and is not personal information. To the extent this data is stored or associated with personal information, it will be treated as personal information; otherwise, the data is not subject to this notice.

Categories of Personal Information

Within the last twelve (12) months, we have collected the following categories of personal information:

1. Identifiers, such as a real name, alias, postal address, unique personal identifier, online identifier, internet protocol address, email address, account name, driver’s license number, or other similar identifiers.
2. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code 1798.80(e)), such as name, signature, address, telephone number, credit card number, debit card number, or any other financial information.
3. Commercial information, including records of products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
4. Internet or other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an internet website, application, or advertisement.
5. Geolocation data.
6. Audio, electronic, visual, thermal, olfactory, or similar information, such as voicemails, CCTV images, or social media profile pictures.
7. Inferences drawn from any of the information above to create a profile about a consumer reflecting the consumer’s preferences, characteristics (such as gender), and behavior.

We will not collect additional categories of personal information other than those categories listed above. If we intend to collect additional categories of personal information, we will provide you with a new notice at or before the time of collection.

Use of Personal Information

We collect and process your personal information for our business and commercial purposes, which include the following:

• Providing you with information tailored to your requests, responding to inquiries, and delivering services and products;
• For marketing purposes, including sending you messages about us, our partners, and the products and services we offer, which may from time to time include contests, rewards, events, and special offers for products and services. These communications may be tailored based on the communications preferences you select when providing us with your information or your activity on the Services, such as an abandoned cart;
• Operating, maintaining, and improving the quality and security of the Services and such content, products and/or services as we may make available through the Services;
• Communicating with you by email and push notification, in each case with your consent if such consent is required in accordance with applicable laws or software platforms, about products, services, order status, and other topics;
• Compliance with applicable laws, regulations, rules and requests of relevant law enforcement and/or other governmental agencies;
• We try to protect our and our partners’ rights, property, or health and safety, and the rights, property, and health and safety of our customers, users and other third parties; and
• For other purposes, as permitted or required by law.

We will not use the personal information we collected for material different, unrelated, or incompatible purposes without providing you with notice.

Sources of Personal Information

We collect personal information from and about you from the following sources:

• From You – When you provide it to us directly;
• Operating Systems and Platforms – Automatically through logging and analytics tools, and as a result of your use of and access to the Services;
• Data Analytics Providers – They provide web analytics and usage information to us through the use of cookies, pixels, and tracking technologies, such as Google Analytics;
• From Service Providers – That we have engaged to provide services to us, including services related to shipping, returns, customer support, fraud mitigation, and email marketing;
• From Third Parties – From third-party sources, including payment processors (such as PayPal), fulfillment providers, and social networks (through your interactions with us on social media websites).

Sharing of Personal Information

Within the last twelve (12) months, we have shared the following categories of personal information for a business purpose with the following categories of third parties:

• Category 1 (e.g., identifiers): Affiliates, Payment Processors (such as PayPal), Fulfillment Providers and Government Entities
• Category 2 (e.g., customer records): Affiliates, Payment Processors (such as PayPal), Fulfillment Providers and Government Entities
• Category 3 (e.g., commercial information): Affiliates, Fulfillment Providers and Government Entities
• Category 4 (e.g., internet activity): Affiliates, Fulfillment Providers and Government Entities
• Category 5 (e.g., geolocation): Affiliates and Fulfillment Providers
• Category 6 (e.g., audio, electronic): Affiliates and Government Entities
• Category 7 (e.g., inferences): Affiliates

California Privacy Rights

California Civil Code Section 1798.83, known as the “Shine the Light” law, permits our users who are California residents to request and obtain from us a list of what personal information (if any) we disclosed to third parties for their own direct marketing purposes in the preceding calendar year and the names and addresses of those third parties. Requests may be made only once per year per person, must be sent to the email address below, and are free of charge.

We do not disclose personal information protected under the “Shine the Light” law to third parties for their own direct marketing purposes.

In addition, the CCPA provides California residents with the following rights:

1. Right to Know: You have the right to request that we disclose certain information to you about the personal information we collected, used, disclosed, and sold about you in the past 12 months. This includes a request to know any or all of the following:
2. The categories of personal information collected about you;
3. The categories of sources from which we collected your personal information;
4. The categories of personal information that we have sold or disclosed about you for a business purpose;
5. The categories of third parties to whom your personal information was disclosed for a business purpose;
6. Our business or commercial purpose for collecting or selling your personal information; and
7. The specific pieces of personal information we have collected about you.
8. Data Portability: You have the right to request a copy of the personal information we hold about you.
9. Right to Deletion: You have the right to request that we delete the personal information we collected from you and maintained it, subject to certain exceptions. Please note that if you request the deletion of your personal information, we may deny your request or may retain certain elements of your personal information if it is necessary for us or our service providers to:
10. Complete the transaction for which the personal information was collected, provide a good or service requested by you, or reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform a contract between our business and you.
11. Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity; or prosecute those responsible for that activity.
12. Debug to identify and repair errors that impair existing intended functionality.
13. Exercise free speech, ensuring the right of another consumer to exercise his or her right of free speech, or exercise another right provided for by law.
14. Comply with the California Electronic Communications Privacy Act pursuant to Chapter 3.6 (commencing with Section 1546) of Title 12 of Part 2 of the Penal Code.
15. Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the deletion of the information is likely to render impossible or seriously impair the achievement of such research if you have provided informed consent.
16. To enable solely internal uses that are reasonably aligned with your expectations based on your relationship with us.
17. Comply with a legal obligation.
18. Otherwise use the personal information, internally, in a lawful manner that is compatible with the context in which you provided the information.
19. Right to Opt-In to Financial Incentives: You have the right to opt-in to financial incentives. You also have the right to opt out at any time. However, Kith does not currently utilize a loyalty or financial incentive program.
20. Right to Opt-Out/In: You have the right to opt out of the sale of your personal information. You also have the right to opt-in to the sale of personal information. However, we do not sell your personal information. We do not and will not knowingly sell the personal information of minors under the age of 16 without affirmative authorization. 
21. Right to Non-Discrimination: You have the right not to receive discriminatory treatment by us for the exercise of your CCPA privacy rights. Unless permitted by the CCPA, we will not:

1. Deny you goods or services.
2. Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
3. Provide you with a different level or quality of goods or services.
4. Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

Some of our Services, however, may require your personal information. If you choose not to provide your personal information that is necessary to provide any aspect of our Services, you may not be able to use those Services. In addition, as described in the section captioned “Your Choices” in the Privacy Statement page, it is possible to change your browser settings to block the automatic collection of certain information.

Submitting a Verified Consumer Request

To exercise your Right to Know, Data Portability, and Right to Delete, you must provide us with sufficient information to allow us to verify your identity, and describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it. Once we receive the information you provide to us, we will review it and determine if more information is necessary to verify your identity as required by law, and we may request additional information in order to do so.

To exercise your California privacy rights described above, please submit a verifiable request to us by: 

• Emailing us at DPO@delows.com
• Calling us at the number shown on our Contact Us page

If you have an account with us, you can exercise any of the above rights from your account. If you don’t have an account or if you are unable to access, control, or delete your information from within your account, you can contact us through any of the above methods.

Only you, or a person authorized by you to act on your behalf, may make a verifiable consumer request related to your personal information.

You may only make a verifiable consumer request for Right to Know or Data Portability twice within a 12-month period. The verifiable consumer request must:

• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative. Given the sensitivity of the personal information that we collect and retain, we will need to verify your identity with at least 2 pieces of information, such as Name, Address or Customer Email.
• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We may deny your request if we are unable to verify your identity or have reason to believe that the request is fraudulent.

Authorized Agent

If any authorized agent submits a consumer request on your behalf, in order to confirm that person or entity’s authority to act on your behalf and verify the authorized agent’s identity, we require an email be sent to DPO@delows.com, along with the below items: 

• To verify your authorization to request on behalf of a California resident, provide one or more of the following: (1) California Secretary of State authorization, (2) written permission from the California resident, or (3) power of attorney.
• To verify your identity, provide evidence of your identity.
• To verify the identity of the California resident for whom the request is being made, provide the information set forth above for the verification of the consumer request 

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. Making a verifiable consumer request does not require creating an account with us. However, if you do have an existing login, we will require you to log in to submit a request. We will only use personal information provided in a verifiable consumer request to verify the request’s identity or authority to make the request.

We will acknowledge receipt of the request within ten (14) business days of its receipt. We will respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing. We will deliver our written response by mail or electronically, at your option. Any disclosures we provide will only cover the 12-month period preceding the receipt of the verifiable consumer request. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For Data Portability requests, we will provide the responsive information in a portable and, to the extent technically feasible, in readily usable format that allows you to transmit the information to another entity without hindrance. 

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

Tracking

We use analytics systems and providers and participate in ad networks that process personal information about your online activities over time and across third-party websites or online services. We do not currently process or comply with any web browser’s “do not track” signal or other mechanisms that provide consumers with the ability to exercise choice regarding the collection of personal information about their online activities over time and across third-party websites. 

Note, however, that you may find information about how to opt out of Google Analytics and/or block or reject certain tracking technologies in our Cookie Policy.

Updates to this California Statement

We reserve the right, at any time, to modify, alter, and/or update this California Statement, and any such modifications, alterations, or updates will be effective upon our posting of the revised California Statement. Your continued use of the Services following our posting of any revised California Statement will constitute your acknowledgment of the amended California Statement.

Additional Information

If you have any questions or concerns about this California Statement and/or how we process your personal information, or would like to exercise any of the rights set forth above, please contact us at:

Attn: Data Protection Officer

DELOWS

1379 Park Western Drive, unit 606

San Pedro, CA 90732

DPO@delows.com

For more information about how users with disabilities can access this California Statement in an alternative format, please contact us at customerservice@delows.com.

Effective Date: January 1st, 2022