Your California Privacy Rights

Overview

At Nordstrom Rack, we appreciate the trust you place in us when you choose to visit our stores and use our websites and mobile applications and we take that responsibility seriously. This California Privacy Rights Notice (the “Notice”) supplements the Nordstrom Rack Privacy Policy by describing your privacy rights if you are a California resident (“you”), and including information on how to submit a request to exercise your rights. It also describes our current practices for each of the topics addressed in the Notice, as well as our practices regarding personal information collected, used, disclosed, or “sold” as of the effective date of this Notice.

California law defines “personal information” broadly as information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual or household. This Notice also uses that definition for personal information.

California law provides you the right to request:

• Access. Request access to the specific pieces of personal information collected about you
• Deletion. Request deletion of your personal information
• Disclosure. Request disclosure of the categories of personal information we collect, the categories of sources from which we collect that information, the purposes for which we collect, sell or disclose that information, and the categories of third parties with whom we share the information
• Opt-Out. Opt-out of the “sale” of your personal information

Click on the following links to go directly to the corresponding sections of this Notice:

• Categories of Personal Information We Collect
• Purposes for Which We Use Personal Information
• Categories of Personal Information We Have Disclosed for a Business Purpose
• Categories of Personal Information We Have “Sold”
• Submitting a Request
• Right to Non-Discrimination
• Requests from Authorized Agents
• Contact for More Information
• Updates to This Notice
• Effective Date

Categories of Personal Information We Collect

Please refer to the “What Categories of Information We Collect” section in our Privacy Policy to understand the categories of personal information we may have collected about you. Please see the “How We Collect Information” section in our Privacy Policy to understand the sources from which we get personal information.

Purposes for Which We Use Personal Information

Please refer to the “How We Use Information” section in our Privacy Policy to understand the purposes for which personal information is used.

In addition, we may offer certain discounts or rewards in connection with Nordy Club, our loyalty program, or other promotions we may offer from time to time in exchange for our use of your personal information that you provide. Where we offer discounts or rewards in this manner, we will obtain your consent to our use of your personal information for this purpose.

Categories of Personal Information We Have Disclosed for a Business Purpose

We share personal information about you with service providers and third parties for business purposes, such as operational purposes and other purposes related to providing you with the products and services you seek from us. We provide more information about the business purposes for which we disclose personal information in the “How We Share Information” section of our Privacy Policy. We may share any of the categories of personal information listed in the “What Categories of Information We Collect” section of our Privacy Policy for business purposes.

Categories of Personal Information We Have “Sold”

We do not provide personal information about you to other companies for money. We do share personal information with companies that we work with, including to help us market or advertise to you. When this information is in a format that directly identifies you by name, it is generally not shared with any companies for third party marketing or advertising purposes. You can find more details about our practices in our Privacy Policy, including in the “Online Advertising and Third Parties We Work With” section. Even though we do not provide personal information to these companies for money, California law may characterize our providing the following categories of information we share with companies that provide services to you or to us, such as personalizing your experience with us or helping us to market or advertise our products and services to you, as “sales” of personal information:

• Device and browsing information and other Internet activity information
• Purchase or other commercial information
• Demographic information
• Identifiers and contact information
• Inferences

Please see the “What Categories of Information We Collect” section of our Privacy Policy for further information about what these categories of personal information include. See the “Submitting a Request” section below to request to opt-out. Nordstrom does not knowingly “sell” the personal information of minors under 16 years of age.

Submitting a Request

To exercise your California privacy rights, submit a request using one of the methods described below, and provide the information required. Once we receive your request, we will validate the information that you provide and send a message to the email address you provide in the request, asking you to verify that it is your email address. Please follow the instructions in that email to verify your email address. We will begin processing your request once you verify your email address.

• Request Access to the specific pieces of personal information about you that we have collected in the preceding 12 months.
• Request Deletion of the personal information that we have collected from you. We may retain personal information as required or permitted by law, and will maintain a copy of your deletion request.
• Request Disclosure of the categories of personal information we collect, the categories of sources from which we collect that information, the purposes for which we collect, sell or disclose that information, and the categories of third parties to whom we disclose information.
• Request to Opt-out (“Do Not Sell My Information”) of “selling” your personal information. You must also adjust settings using each device and browser you use with this website, as well as adjust settings within each mobile application if you use any of our mobile apps. Nordstrom may continue to collect and share personal information about you with third parties as described in our Privacy Policy if that sharing is not a “sale” of personal information, such as to continue to provide services to you. When you adjust your settings at the settings link above, you will only opt out of the “selling” activity on the browser, device, and website you are using when you tap the Confirm button. If you use a Nordstrom mobile app, you will also need to opt out of the “selling” activity under the Do Not Sell My Info menu item for each app. You must submit a “Do Not Sell My Info” request and adjust settings for your opt-out of “selling” request to be effective.

Completing the online request forms linked above allows us to receive and begin working on your request most efficiently, but if you prefer to talk to someone on the phone, or you have a disability that makes it difficult to use the online request forms, you may call 877-653-0390 to submit a request.

Right to Non-Discrimination

We do not discriminate against you for requesting any of the rights noted above.

Requests from Authorized Agents

If you would like an authorized agent to submit a request on your behalf, please send us an email at privacy@nordstrom.com for instructions and details on proof required for use of an authorized agent.

Contact for More Information

If you have questions about our privacy policies or practices, please contact us using the contact information noted in the “Additional Information and Contacting Us” section of our Privacy Policy.

Updates to This Notice

We may make changes to this Notice, and may apply any changes to information previously collected, as permitted by law. When we make material changes to this Notice, we will notify you by posting the updated Notice on our website, and we will update the effective date at the end of this Notice.

Effective Date

This Notice is effective December 31, 2019.