PRIVACY POLICY or PRIVACY NOTICE

At Vans, we understand that you care how information about you is collected, used, and shared. This Privacy Statement describes information we may collect about you directly or indirectly; how and why we may collect, use, and share your information; and the choices you have regarding your information. As more fully described below, we collect, use and share your information to better serve you and to improve our own business processes.

This Privacy Statement applies to all of our consumers in the United States and Canada, and it describes the ways we handle personal information in different contexts, such as when consumers use our websites, mobile applications, or facilities, buy our products, participate in our promotions and events, or provide information to us in other ways.

In the United States, Vans is a division of VF Outdoor LLC, a subsidiary of VF Corporation, and in Canada, Vans is a division of VF Outdoor Canada Co., also a subsidiary of VF Corporation. For purposes of this Privacy Statement, when we use the terms “we,” “us” and “our,” or similar terms, we are referring to VF Outdoor, LLC in the United States or VF Outdoor Canada Co. in Canada.

Categories of Information We Collect
In order to help us better understand you so that we can give you an excellent customer experience, we collect information that identifies you or that we can associate with you (your “personal information”) as well as information that does not identify you (e.g., anonymous, deidentified, or aggregated data). We may also collect various categories of information directly (from you), or indirectly (from others), as more fully described below. The categories of personal information that we or our service providers collect (or have collected during the preceding 12 months) may include the following:

Identifiers (such as your name, nickname, account name, unique personal identifier, online identifier/screenname, IP address, driver’s license number, or signature);
Contact Information (such as your physical or mailing address, telephone number, or email address);
Profile information that we collect or that is inferred (such as commercial information and inferences, including products or services purchased or considered, purchasing histories or tendencies, interactions with us, preferences, psychological traits/ predispositions, behavior, attitudes, intelligence, or abilities/aptitudes, some of which may be assigned by probabilistic methods);
Education information (such as your education status or history);
Employment information (such as your employment status or history, or your professional information);
Internet activity (such as browsing history, search history, clicks, interactions with websites, applications and advertisements, or social media information);
Demographic information (such as your age, date of birth, sex or gender, race, or ethnicity);
Physical characteristics or biometric information (such as your size, height, weight, or other information relevant to your footwear and apparel preferences);
Financial information (such as your bank account number, credit card number, debit card number, other payment information); and
Location data (such as the geographical location information indicated by your mobile device or computer).

How Information About You Is Collected
When you interact with us, we may collect information about you directly. Examples of direct interaction with us include when you visit our websites, shop in our stores, communicate with our customer service representatives, attend our events, use our mobile applications, participate in our marketing efforts (including contests sweepstakes and virtual events), participate in our customer loyalty programs, or any other way you interact directly with us. When we collect information about you directly, we may ask you to affirmatively furnish the information to us (such as when we ask you for your telephone number), or we may collect the information from your electronic device (such as when you download and use our mobile applications or visit our websites) or by observing your activity (such as when you visit our stores). We and some of our service providers, contractors and advertising networks collect identifiers matched to your mobile or other devices, which can be used to deliver customized ads or content via the Internet, across different devices or browsers (sometimes called “cross-device tracking”). In some cases, we may engage service providers to help us operate our business, and they may collect data on our behalf in the course of the services they provide to us. In other cases, where permitted by applicable law, third parties may obtain information about you independently, and we may acquire that data (for example, by purchasing the data).

The following list describes the sources from which we or our service providers may collect various categories of personal information directly (from consumers like you) or indirectly (from third parties):

Identifiers may be collected directly from consumers; public records; consumer data resellers/ brokers; advertising networks; operating systems and platforms; social networks/ social media.
Contact information may be collected directly from consumers; public records; consumer data resellers/ brokers; or social networks/ social media.
Profile information may be collected directly from consumers; consumer data resellers/ brokers; advertising networks; operating systems and platforms; or social networks/ social media.
Education information may be collected directly from consumers; or consumer data resellers/ brokers.
Employment information may be collected directly from consumers; or consumer data resellers/ brokers.
Internet activity may be collected directly from consumers; consumer data resellers/ brokers; advertising networks; internet service providers; operating systems and platforms; or social networks/ social media.
Demographic information may be collected directly from consumers; or consumer data resellers/ brokers.
Physical characteristics or biometric information may be collected directly from consumers; or consumer data resellers/ brokers.
Financial information may be collected directly from consumers.
Location data may be collected directly from consumers; consumer data resellers/ brokers; advertising networks; internet service providers; operating systems and platforms; or social networks/ social media.

Why Your Information Is Collected and Used
We use the personal information we collect directly and indirectly to conduct our business, to communicate with you, and to provide better products, services, and experiences, as further described below. The specific purposes for which we or our service providers may collect and use information about you are (1) to provide the products and services that you have ordered or requested, and to communicate about your orders; (2) to enable and improve our customer service; (3) to address your comments, questions or complaints; (4) to personalize your experiences; (5) to understand your opinions, preferences and shopping habits; (6) to analyze trends and statistics; (7) to administer and fulfill our contests and other promotions, including special discounts for professionals, military personnel, students and first responders; (8) to analyze and improve our websites, mobile applications, facilities, products and services; (9) to market our products and services to you, including by sending you marketing communications and other information regarding our products, services, or special events, and to improve our marketing efforts; (10) to share reviews, testimonials, or other user-generated content; (11) to facilitate our merger or acquisition activities; (12) to secure and protect our information and technology systems, as well as information about you and other consumers; (13) to facilitate internal audits, dispute resolution or investigations; (14) to evaluate new technology for our businesses; (15) to conduct market research; (16) to formulate our business strategies; (17) to analyze information about organizations to which you may belong; (18) to enable us to monitor and evaluate our third party service providers and their activities; (19) to manage our gift card programs, loyalty programs, other stored value programs; (20) to keep records of transactions; (21) to comply with our contractual obligations; (22) to detect and address actual or potential fraud; (23) to establish and maintain data back-ups for our business continuity and disaster recovery; and (24) to comply with various legal obligations or other rules to which we are subject. The following list describes in detail the purposes for which we and our service providers collect and use each category of personal information (each number corresponds to a specific purpose above):

Identifiers: 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24.
Contact information: 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24.
Profile information may be collected: 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 22, 23, 24.
Education information: 1, 2, 3, 4, 5, 6, 7, 9, 11, 12, 13, 14, 15, 16, 17, 18, 20, 22, 23, 24.
Employment information: 1, 2, 3, 4, 5, 6, 7, 8, 9, 11, 12, 13, 14, 15, 16, 17, 18, 20, 21, 22, 23, 24.
Internet activity: 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 18, 19, 20, 21, 22, 23, 24.
Demographic information: 1, 2, 3, 4, 5, 6, 7, 8, 9, 11, 12, 13, 14, 15, 16, 18, 22, 23, 24.
Physical characteristics or biometric information: 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 18, 22, 23, 24.
Financial information: 1, 4, 5, 6, 7, 8, 9, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24.
Location data: 1, 2, 4, 5, 6, 7, 8, 9, 11, 12, 13, 14, 15, 16, 18, 22, 23, 24.

What Information About You Is Shared and With Whom
We operate under the following brand names: Altra®, Dickies®, Eastpak®, Icebreaker®, JanSport®, Kipling®, Napapijri®, Smartwool®, Supreme®, The North Face®, Timberland®, and Vans®.

We may also share your personal information with service providers who provide services to us or conduct activities on our behalf. When we share your personal information with our service providers, we instruct them to only use or share your personal information for the intended purposes, which are limited to those listed above. One example of our information sharing with a service provider is when we share your name, address, and similar contact information with a courier service for the purpose of delivering a product to you and notifying you of the status of the shipment. Our service providers include entities that perform the following activities on our behalf: marketing and advertising; order fulfillment; consumer or market research and analysis; account management; event or promotion management; fraud detection; security; customer service; payment processing; technical support; product creation. The categories of information that we may share with service providers are the following: Identifiers; Contact information; Profile information; Education information; Employment information; Internet activity; Demographic information; Physical characteristics or biometric information; Financial information; or Location data. We share these categories of information for the same purposes we collect and use them, as described above under the caption “Why Your Information Is Collected and Used.”

We may also disclose consumers’ personal information to third parties who are not our service providers for the following purposes: (11) to facilitate our merger or acquisition activities; (13) to facilitate internal audits, dispute resolution or investigations; (22) to detect and address actual or potential fraud; or (24) to comply with various legal obligations or other rules to which we are subject.

We do not sell consumers’ personal information for money. We do, however, share consumers’ personal information with certain third parties in ways that might be considered a “sale” of personal information under the California Consumer Privacy Act, even though we do not receive any financial compensation from the third parties in exchange. For example, we allow third parties, such as Facebook® and Google®, to place technologies (such as cookies) on our websites for purposes of marketing to users of our websites. To request that your personal information not be sold, please follow this hyperlink: Do Not Sell My Personal Information.

Children’s Privacy
We do not intend to collect personal information from anyone under the age of 16. If you are under the age of 16 you should not provide any personal information to us. If you are a parent or guardian of a child under the age of 16 and suspect they have provided personal information to us, you may contact us using one of the Communication Methods described in this Privacy Statement to notify us so that we may delete the information. We do not knowingly sell the personal information of consumers under 16 years of age.

Keeping Your Personal Information Secure
We store personal information on our servers or those of our service providers (including “cloud” servers), and it is accessible by authorized employees, representatives and agents who require access for the purposes described in this Privacy Statement. We have implemented reasonable security procedures and measures that are intended to protect personal information and our information technology systems that store personal information. Unfortunately, no transmission of information over the Internet nor storage of information electronically can be guaranteed to be 100% secure. In order to help protect personal information you provide to us, you: (i) should not share your password or account information with others, (ii) should use a secure internet connection and web browser, (iii) should select a unique, complex, secure password, (iv) should change your password frequently, and (v) should not use the same password elsewhere. If you become aware of any loss, theft, or unauthorized use of a password, please contact us immediately using the contact information below. By providing your email address in connection with a purchase or your use of our websites, mobile applications, or services, you are consenting to receive electronic notice of any information security issues using your most recent email address in our records.

Links To Other Websites
Our websites and mobile applications may contain links to third-party websites to which this Privacy Statement does not apply ("Linked Websites"). Your use of Linked Websites will be governed by the terms of use, privacy policies, and other terms, notices, and policies set forth on or referenced in those Linked Websites.

International Data Transfers
This Privacy Statement describes our policies and procedures in the United States and Canada. We are a global company, and personal information we collect in the United States and Canada may be transferred to other jurisdictions (such as the United States, Canada, and the European Union) as permitted by law, for the purposes described in this Privacy Statement, and the information may become subject to the laws of those jurisdictions and accessible to authorities in those jurisdictions.

Your Options Regarding Personal Information
We have established processes by which you can submit requests regarding your personal information. To exercise your options as described in this Privacy Statement, you may contact us in one of the following ways:

by telephone at +1-877-709-1800;
by completing the web form at https://www.vfc.com/Privacy-Requests; or
by mail at: VF Corporation, Attn: Privacy Officer, 105 Corporate Center Blvd., Greensboro, North Carolina, USA 27408.

Collectively, these are referred to as the “Communication Methods.” To effectively exercise your privacy options or inquire about how we handle your personal information, you must use one of these Communication Methods. You may also send questions or complaints to our Privacy Officer using the above

Communication Methods, and we will take appropriate steps to address any legitimate concerns or complaints.
The list below describes types of requests you may make to us regarding information we have collected from you:

Request to Know: You may ask us to furnish you with (i) the specific pieces of personal information we have collected about you; (ii) the categories of personal information we have collected about you; (iii) the categories of sources from which we collect information about you; (iv) the business or commercial purposes for collecting information about you; or (v) the categories of third parties with whom we share or have shared personal information about you.
Request to Delete: You may ask us to delete any personal information that we have collected from you and to direct our service providers to delete your personal information from their records.
Request to Opt-Out of Sale: You may request that we not sell your personal information.
Right to Correct: You may have a right to correct or update your personal information that has been previously provided to us.

We will make commercially reasonable efforts to accommodate your request within 30 days; however, we may notify you during the initial 30-day period that we will extend the timeframe as permitted by law. We reserve the right to deny any request to the extent permitted by applicable law. We may decline a Request to Delete, in part or in whole, if we determine that there is a lawful basis for retaining the information, including because the information is necessary to (i) complete a transaction or perform a contract between us; (ii) ensure security; (iii) debug or repair errors; (iv) exercise a legal right; (v) comply with another law or a legal obligation; (vi) conduct research; (vii) enable solely internal uses that are reasonably aligned with our consumers’ reasonable expectations; or (viii) otherwise use the information, internally, in a lawful manner that is compatible with the context in which you provided the information. We will not discriminate against you because you have made a request described in this Privacy Statement or otherwise exercised your rights under applicable law. We may offer financial or non-financial incentives in connection with programs that require you to disclose certain personal information, such as a customer loyalty program, but only if you opt in to such an incentive program. If you opt in to any such incentive program, you may opt out at any time, as described in the terms and conditions of those programs, though you may lose the benefits associated with the incentive if you require us to delete your information.

Information regarding the consumer privacy requests we received in the prior calendar year is available here.

How Your Identity Will Be Verified
For your privacy and security, and to prevent fraud and other harmful activities, when we receive a request through one of the Communication Methods, we may need to ensure that the person submitting the request is the person they purport to be. Accordingly, we may take reasonable measures to verify the identity of the person submitting the request, as further described in our privacy request web portal. If we ask you to verify your identity, you must promptly cooperate with our efforts so that we can fulfill your request.

Requests from Authorized Agents
If you submit a consumer privacy request on behalf of another person, you must verify your legal authority to act on behalf of that person, and your identity and the identity of the other person, to our satisfaction before we can fulfill your request.

How You Can Opt Out of Online Advertising or Other Promotional Communications
In addition to the options described above, you can take other steps to limit the collection, use and sharing of your personal information. You can manage how your device, mobile browser and other devices share information with our websites and mobile apps, as well as how your browser handles cookies and other tracking technologies, by adjusting the privacy and security settings on your device. Please refer to instructions provided by your service provider or the manufacturer of your device to learn how to adjust your settings. Our websites currently do not have a mechanism to recognize an Internet browser’s “Do Not Track” signals, and we cannot follow those signals. Several of the companies that utilize cookies or other tracking or monitoring mechanisms enable you to opt out of advertising through mechanisms established by trade groups. If you wish to reduce this type of third-party, interest-based advertising, you may opt out of advertising from members of the National Advertising Initiative here, and from members of the Digital Advertising Alliance here (for US) or here (for Canada). Please note the links in the prior sentence will not opt you out of receiving all marketing communications from us. There are other ways in which you can tell us whether or not you want to receive promotional communications from us. When you set-up an account or log into your account on our websites or mobile applications, you may have an opportunity to make or change your selections with respect to each brand. You also will have an opportunity to opt-out of advertising email messages from us by clicking on an "unsubscribe" hyperlink contained in commercial e-mails those brands send you. If you receive a text message (SMS or MMS) from one of our brands and would like to opt out of receiving further text messages, you may do so by following the opt-out instructions within the text message.

Changes to This Privacy Statement
We will review our Privacy Statement periodically (at least annually), and we reserve the right, in our sole discretion, to revise, change or modify this Privacy Statement at any time. We will post any changes to this Privacy Statement on our websites and they will be effective as of the date of posting. We encourage you to visit this page periodically to review this information. By engaging with us, including by visiting our website(s) or mobile application(s), after this Privacy Statement has been updated, you agree to the updated terms of this Privacy Statement. This Privacy Statement was last updated on March 23, 2022.

GIFTS FOR YOU AND YOUR CREW