We may collect (and may have collected during the 12-month period prior to the Last Updated date of this U.S.A. Privacy Supplementary provisions) the following categories of personal information about you:

Identifiers: identifiers such as a real name, alias, postal address, unique personal identifier (such as a device identifier; cookies, beacons, pixel tags, mobile ad identifiers and similar technology; customer number, unique pseudonym, or user alias; telephone number and other forms of persistent or probabilistic identifiers), online identifier, internet protocol address, email address, account name, passport number and other similar identifiers

Protected Classifications: characteristics of protected classifications under certain federal law, such as national origin, age, sex, gender, gender expression, marital status.

Commercial Information: commercial information, including records of personal property, products or services purchased, obtained, or considered, and other purchasing or consuming histories or tendencies

Online Activity: Internet and other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding your interaction with websites, applications or advertisements

Geolocation data: Physical location or movements. For example, city, state, country, and ZIP code associated with your IP address or derived through Wi-Fi triangulation; and, with your permission in accordance with your mobile device settings, and precise geolocation information from GPS based functionality on your mobile devices.

Inferences: inferences drawn from any of the information identified above to create a profile about you reflecting your preferences, characteristics, psychological trends, predispositions, behavior, attitudes.

We may use (and may have used during the 12-month period prior to the Last Updated date of this U.S.A. Privacy Supplementary provisions) the categories of personal information listed above for the purposes described in our Global Privacy Notice and for the following business purposes:

-         Performing services, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, providing analytics services, providing storage, or providing similar services;

-         Providing advertising and marketing services;

-         Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance;

-         Short-term, transient use, such as non-personalized advertising shown as part of your current interaction with us;

-         Helping to ensure security and integrity;

-         Undertaking activities to verify or maintain the quality or safety of our services or devices and to improve, upgrade, or enhance them;

-         Debugging to identify and repair errors; 

We will retain your personal information as described in the “How long we store your data” section of the Global Privacy Notice.

During the 12-month period prior to the Last Updated Date of this U.S.A. Privacy Supplementary provisions, we may have obtained personal information about you from the following categories of sources:

-         Directly from you, such as when you make a purchase in-store or online, call our Customer Service center, complete our customer information cards, attend one of our events or participate in a survey 

-         From your devices, such as when you visit Stella McCartney websites

-         Our affiliated entities and subsidiaries

-         Social networks

-         Online advertising companies (including advertising networks)

-         Internet service providers

-         Data analytics providers

-         Operating systems and platforms

-         Law enforcement authorities, regulators, third-party subpoenas and government entities

-         Data brokers and data aggregators, including data append and cleansing companies

-         Publicly available sources and databases.

If you are a resident of the states of California, Colorado, Connecticut, Delaware, Iowa, Marylan, Montana, Nebraska, Nevada, New Hampshire, Oregon, Texas, Utah, or Virginia in the United States, the following supplementary disclosures apply to you.

We do not sell or share your personal information in exchange for monetary consideration. We disclose categories of personal data we collect to the categories of recipients set forth below. Different state privacy laws in the United States provide consumers the right to opt-out of certain data processing. This includes the display advertisements that are based on personal data obtained or inferred over time from an individual’s activities across businesses or distinctively branded sites, applications or services (“Targeted Advertising”, also referred to in California as “cross-context behavioral advertising”). Some states also provide the right to opt-out of “Sharing”, which includes providing or making available personal information to third parties for such Targeted Advertising activity. We may use certain personal data that you provide to advertise to you. This may include making available your personal data to certain third parties in a way that may constitute a Sale and/or Sharing, as well as using your personal data for purposes of Targeted Advertising. If you are in one of those jurisdictions, You have the right to opt out of these types of disclosures of your information, as detailed below.

During the 12-month period prior to the Last Updated date of this U.S.A. Privacy Supplementary provisions, we may have disclosed the following categories of personal information:

-         Identifiers,

-         Commercial Information,

-         Online Activity, and

-         Inferences.

We do not have actual knowledge that we sell or share the personal information of minors under 16 years of age.

Depending on your state of residency and subject to certain legal limitations and exceptions, you may be able to exercise some or all of the following rights:

Right to Know: The right to confirm whether we are processing personal data about you and, for residents of California and Oregon law only, to obtain certain personalized details about the personal data we have collected about you, including:

-         The categories of personal data collected;

-         The categories of sources of the personal data;

-         The purposes for which the personal data were collected;

-         The categories of personal data disclosed to third parties (if any), and the categories of recipients to whom this personal data were disclosed;

-         The categories of personal data shared for targeted advertising purposes (if any), and the categories of recipients to whom the personal data were disclosed for these purposes;

-         The categories of personal data sold (if any) and the categories of third parties to whom the personal data were sold; and

-         For Oregon residents only, a list of specific third parties to whom personal data have been disclosed.

Access: You have the right to request that we disclose to you the personal information we have collected, used, disclosed and sold or shared about you. 

Correction: You have the right to request that we correct the personal information we maintain about you, if that information is inaccurate.

Deletion: You have the right to request that we delete certain personal information we have collected from you, subject to certain exceptions.

Opt-Out of Sale or Sharing: You have the right to opt-out of the sale of your personal information or the sharing of your personal information for cross-context behavioral advertising purposes

Request a List of Third Parties: depending on your state of residency, you may have the right to request third parties with whom your data has been shared.

How to Submit a Request: To submit an access, correction or deletion request, submit a request or opt-out of the sale or sharing of your personal information by emailing privacy@stellamccartney.com

To exercise your right to opt out of targeted advertising or "sales" or “share” of your personal information, please click on the “Do Not Sell or Share My Personal information” link at the bottom of our home page.

In certain circumstances, you are permitted to use an authorized agent to submit requests on your behalf through the designated methods set forth above where we can verify the authorized agent’s authority to act on your behalf. In order to verify the authorized agent’s authority, we generally require evidence of either (i) a valid power of attorney or (ii) a signed letter containing your name and contact information, the name and contact information of the authorized agent, and a statement of authorization for the request. Depending on the evidence provided and your state of residency, we may still need to separately reach out to you to confirm the authorized agent has permission to act on your behalf and to verify your identity in connection with the request.

To submit a request as an authorized agent on behalf of a consumer, please email privacy@stellamccartney.com with the subject line “Authorized Agent Request.”

Verifying Requests: To help protect your privacy and maintain security, we will take steps to verify your identity before complying with your access, deletion or correction request. If you request access to or deletion or correction of your personal information, we may require you to provide certain information, including:

Contact information (such as name, phone number, and address); and

Information about your transactions with Stella McCartney.

In addition, if you ask us to provide you with specific pieces of personal information, we will require you to sign a declaration under penalty of perjury that you are the consumer whose personal information is the subject of the request. 

Additional Information: If you choose to exercise any of your rights, you have the right to not receive discriminatory treatment by us. 

We may deny your deletion request if retaining the information is necessary for us or our service providers to:

-         Complete the transaction for which we collected the personal information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you.

-         Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.

-         Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 seq.).

-         Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us.

-         Comply with a legal obligation.

-         Make other internal and lawful uses of that information that are compatible with the context in which you provided it.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.