YOUR CALIFORNIA PRIVACY RIGHTS

Consumers residing in California are afforded certain additional rights with respect to their personal data under the California Consumer Privacy Act (“CCPA”). If you are a California resident, this section applies to you. Collection and Use of Personal Data: In the preceding 12 months, we have collected the following categories of personal data: identifiers (such as name and contact information), commercial information (such as products purchased or returned), internet or other electronic network activity information (such as browsing behavior), geolocation data, audio information (such as customer support call recordings), and inferences we make based on the personal data we collect about you. For more details about the personal data we collect and the sources of such collection, please see “What personal data do we collect about you?” in the privacy policy above. We use the personal data we collect for the business and commercial purposes described in “What do we use this personal data for?” in the privacy policy above. Disclosure of Personal Data: In the preceding 12 months, we have disclosed the categories of personal data listed above to third parties for business or commercial purposes. Please see “Who do we share this personal data with?” in the privacy policy above, for details. Sale of Personal Data: California law requires that we provide transparency about personal data we “sell,” which for purposes of the CCPA broadly means scenarios in which we have shared personal data with third parties in exchange for monetary or other valuable consideration. We do not, and will not, sell your identifying information such as your name, email address, phone number or postal address. As described above in the “Marketing” and “Cookies” sections in the privacy policy above, we do share identifiers such as cookies and, where applicable, the advertising identifier associated with your mobile device with our advertising partners so that they can show advertisements that are targeted to your interests. In order to opt out of disclosures to these third parties for purposes of showing you targeted advertisements, please follow the opt out instructions in the “Marketing” section of the privacy policy above. Your Rights: Subject to certain limitations, you have the right to request: more information about the categories and specific pieces of personal data we have collected and disclosed for a business purpose in the last 12 months; deletion of your personal data; and that we stop selling your personal data. You may make these requests by emailing customer.experience@thehutgroup.com or visiting THIS PAGE . Once we receive your request, we will verify it by asking you to provide information related to your account or your recent interactions with us, such as information regarding a recent purchase. If you would like to use an authorized agent to exercise your rights, we may request evidence that you have provided such agent with power of attorney or that the agent otherwise has valid written authority to submit requests on your behalf. We will not discriminate against you if you exercise your rights under the CCPA.