California Annual Privacy Policy

Effective as of: October 10, 2024

This ANNUAL PRIVACY POLICY FOR CALIFORNIA RESIDENTS (“California Notice”) supplements the information contained in the main Privacy Policy applicable to the bookoutlet.com and bookoutlet.ca websites (“Sites”) of Book Depot Inc. (“Book Depot,” “we,” “us,” or “our”), and applies solely to visitors, users, and others who reside in the State of California (“consumers” or “you”). This California Notice sets out how we use and protect any personal information you may have provided to us through your use of our Sites, by computer or mobile device, social media, by phone via text message, in writing or otherwise (collectively with the Sites, the “Services”). We adopt this California Notice to comply with the California Consumer Privacy Act of 2018 (“CCPA”) and other applicable California privacy laws.

This California Notice explains how Book Depot Inc. collects, uses, shares, and stores your “personal information” (as defined under the CCPA) and certain other data when you use the Services, and how you may exercise certain rights you have in connection with your privacy and personal information. Personal information is generally defined under California law as information that, by itself or in combination with other information, identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked with a particular consumer or household (“Personal Information”). Any Personal Information that Book Depot Inc. collects will be treated as set forth below and/or in Book Depot Inc.’s main Privacy Policy.

For ease of reference, you may click on any of the following links to jump to one of the sections addressed below:

1. Scope of this California Notice

2. Contact Information

3. Personal Information Collection and Disclosures

4. Your Rights and Choices

5. Other California Privacy Laws

Scope of this California Notice

This California Notice covers only the Services identified above and is only applicable to consumers who reside in California. This California Notice does not apply to visitors, users, and others who provide information to us through our Services but do not reside in California, and this California Notice does not apply to information which you may send us by means other than through the Services. Other Book Depot Inc. websites, locations and certain products or services, whether online or offline, may have their own specific privacy policies or notices which apply instead of this California Notice, and you should consult those accordingly. Furthermore, the Sites may contain links to external websites and other online locations, including those embedded in third-party advertisements or sponsor information that are not controlled by Book Depot Inc.. Book Depot Inc. is not responsible for the privacy practices and data collection policies for such third-party services. You should consult the privacy policies or notices of those third-party services for details about how they handle your Personal Information.

Contact Information

If you believe there has been some violation of this California Notice, if you believe that Personal Information you supplied to Book Depot Inc. has been compromised or inappropriately accessed by a person outside of Book Depot Inc., or if you have any questions about this California Notice, please contact us using the contact details below:

EMAIL: [email protected]

PHONE: 800-801-7193

MAIL:   Book Depot Inc.,

Attention: Compliance

67 Front Street North

Thorold, Ontario, Canada L2V 1X3

If you do not agree to the collection and use of your Personal Information as described in this California Notice or in our Privacy Policy, please do not provide us with any information and cease using the Services.

Personal Information Collection and Disclosures

A requirement under the CCPA is to provide California residents with information on our data collection, use, disclosure, and retention (“processing“) activities related to Personal Information in the preceding 12 months.

Categories of Personal Information Collected and Their Sources

Please see the chart, below, which describes the categories of Personal Information we collected over the past 12 months, including the sources from which we obtained the Personal Information. Please note that not all categories or specific types of Personal Information described below will be collected or processed for every individual and our data collection practices may vary based on the nature of your relationship with us and what information you choose to provide to us.

Our Use of Your Personal Information

Over the last 12 months, we may have used your Personal Information for the following purposes:

Sharing Your Personal Information

Over the last 12 months, we have shared your Personal Information with the following categories of third parties for the following purposes:

General Third Parties

The following third parties may receive any of the categories of Personal Information described above, depending on the circumstances:

Vendors who provide data storage and hosting;

• Governmental authorities and law enforcement (in response to legal requirements); and/or

• Third parties involved in a potential or actual merger, acquisition, consolidation, bankruptcy, or similar proceedings

Data Retention Period

Over the past 12 months we have retained your Personal Information in accordance with the retention timeframes noted in our main policy.

Selling and/or Sharing Your Personal Information

Over the past 12 months, we did not engage in any direct sale of your Personal Information as a way to generate monetary revenue.

However, as described in our main Privacy Policy and further below in this California Notice, we have used certain third-party online analytics and advertising providers which may have access to your IP address, online ID, and online activity information. Such third-party access may cause you to receive targeted advertising based on your browsing behavior on our Sites and elsewhere online.

As a California resident, such access for targeted advertising purposes may be considered “Selling” or “Sharing” your Personal Information under the CCPA. Under the CCPA, you have the right to opt-out of any such “Sale” or “Sharing” of Personal Information for targeted advertising purposes by using our interactive request form, which is available through the “Do Not Sell or Share My Personal Information” toggle within the cookies widget.

Selling and/or Sharing Personal Information of Minors

Over the past 12 months, we did not knowingly Sell or Share the Personal Information of minors under the age of 16 years old.

Sensitive Personal Information Processing Activities

Over the past 12 months, we did not knowingly collect or use your Sensitive Personal Information (as defined under the CCPA).

Profling / Automated Decisionmaking Activities

Over the past 12 months, other than as described above, we did not conduct profiling activities or make automated decisions about you based on your Personal Information.

California Notice of Financial Incentive

Over the past 12 months, we did provide financial incentives with respect to the collection of your Personal Information, which is further described below.

In the past 12 months, we provided a $5 dollar coupon following a $25 or more purchase on our Sites if an individual signs up for our marketing emails. Individuals who create an account are automatically signed up for our loyalty program. We also provided loyalty points to individuals who have signed up for our loyalty program when they refer to their friends to our Sites and/or if the friend purchases a product from our Sites. The loyalty points are allocated as follows: loyalty points users receive 100 Points and their friend receives $5 off their first purchase of $25 or more at our Sites and earn 100 points ($5 in Rewards) when they make their first purchase. The loyalty program is limited to 5 successful referrals per week. Our good-faith estimate of the value of your personal information is the value of the benefit we offer to you through the loyalty program. We have calculated such value by using the expense of offering the program in proportion to the benefit that is offered to you through the program.

Individual can opt-in to our loyalty program on our Sites. If you signed up for our loyalty program you can opt-out at any time by clicking the “opt-out” feature in the My Rewards section in your account.

Your Rights and Choices

The CCPA provides California consumers with specific rights regarding their Personal Information. More specifically, you have the following rights regarding Book Depot Inc.’s collection, use, and sharing of your Personal Information:

• The right to request that we disclose what Personal Information we collect, use, disclose or sell about you;

• The right to request the deletion of Personal Information we have collected or maintain about you;

• The right to opt-out of the sale of your Personal Information or the sharing of your Personal Information for cross contextual behavioral advertising purposes (targeted advertising);

• The right to limit any processing of your sensitive Personal Information for purposes of inferring characteristics about you (to the extent applicable);

• The right to opt-out of any profiling or automated decision-making activities that may be made with respect to your Personal Information; and

• The right not to receive discriminatory treatment by us, in terms of the services and prices offered on or through our Services, because you exercised these rights regarding the collection, use and sharing of your Personal Information.

If you would like to exercise any of the above rights, please contact us or visit the Manage Cookies Preferences widget to exercise your opt-out rights under the CCPA, including for example, the disclosure of your Personal Information for targeted advertising purposes. For further information on how to exercise your privacy request please go to the “Your Rights and Choices” section of our main Privacy Policy. Please note that in certain instances we may be able to reject your request if permitted under the CCPA. We will provide you with the reason if we reject your request. If the request relates to information that we need to make the Services function properly for you, you may no longer be able to use the Services.

As mentioned in the main Privacy Policy, the Sites may use cookies, pixel tags and related third-party tracking technologies and analytics services that are operated by third party service providers and/or social media platforms among other third parties (“Third-Party Services”) which may collect information pertaining to your device and how you may interact with our Sites. You may have the ability to exercise your rights under California law with respect to how your information is shared with or collected by these Third-Party Services on or through the Sites by communicating your choices directly with the Third-Party Services. Please see the below chart for further details on how to exercise your rights directly with such Third-Party Services.

You can also generally opt-out of receiving targeted ads from third party advertisers and ad networks who are members of the Network Advertising Initiative (NAI) by visiting the Network Advertising Initiative (NAI) opt out page. You may opt-out of receiving targeted advertisements from other companies that perform interest-based or targeted advertising services, including some that we may work with, via the Digital Advertising Alliance (DAA) opt out page. Please note that when using the ad industry opt-out tools described above, you may need to execute opt-outs for each browser or device that you use, and that other companies’ opt-outs may function differently than our opt-out.

Other California Privacy Laws

Shine the Light

Pursuant to Section 1798.83 of the California Civil Code, residents of California have the right to request from a business, with whom the California resident has an established business relationship, certain information with respect to the types of Personal Information the business shares with third parties for those third parties' direct marketing purposes and the identities of the third parties with whom the business has shared such information during the immediately preceding calendar year. To exercise your rights, you may make one request each year by contacting us.

Do Not Track

Some browsers also have a “do not track” feature that lets you tell websites that you do not want to have your online activities tracked. We do not honor “do not track” signals.