Privacy

TABLE OF CONTENTS

SCOPE OF PRIVACY POLICY
COLLECTION OF PERSONAL INFORMATION
HOW WE USE THE PERSONAL INFORMATION
SHARING AND DISCLOSING PERSONAL INFORMATION
YOUR PRIVACY CHOICES AND RIGHTS; ACCESSING AND MANAGING YOUR PERSONAL INFORMATION
ADDITIONAL PRIVACY INFO
CONTACT Foot Locker

1. Scope of Privacy Policy

This Privacy Policy applies to information that Foot Locker Inc. d/b/a Foot Locker (referred to herein as “Foot Locker,” “Company,” “we,” “us” or “our”) collects, uses, shares or otherwise processes that identifies, describes, relates to, or can otherwise be associated with individuals (individually and collectively referred to herein as “you”, “your and “yours”) (“Personal Information”) in connection with the following customer facing operations in the United States and Canada (individually, “Service” and collectively, “Services”):

in one of our stores, at one of our events or otherwise offline;
through interactions with our customer service representatives in store, online or over the phone/mobile;
in connection with our marketing mail or e-mail lists or store communications; or
on or through our website (porask.club or any subdomain thereof) including any virtual assistant tools, chatbots or similar functionality available on our website), native mobile applications (such as our Foot Locker Mobile Application (“Foot Locker App”)) or other internet websites, applications or services (including social media, surveys, sweepstakes, contests, product rating submissions or reviews) from which you are accessing this version of the Privacy Policy or which link directly to this version of the Privacy Policy (each referred to herein as a “Website,” and collectively, the “Websites”).

This Privacy Notice provides you details about the Personal Information we collect, use, share or otherwise process, the purposes for which we use that Personal Information to whom and for what purposes we may disclose that Personal Information, how we protect that Personal Information, the rights and choices you have with respect to that Personal Information, and how you can reach us to get answers to your questions

The Website and/or Services may contain links to other websites, applications and services maintained by third parties. The privacy and data protection practices of such third parties are governed by the privacy policies of those organizations. Please review the privacy policies of those organizations to better understand their privacy practices.

2. Collection of Personal Information

A. Personal Information That You Provide

When you use the Services, you may provide us with Personal Information about you. This may include your name, email address telephone number, mailing address and other personal information. When you use the Services, we may also collect information related to your use of the Services and aggregate this with information about other users. This helps us improve the Services and your experience with them. In addition, when you use the Services, we may also collect the Personal Information.

Depending upon our relationship with you, we may collect the following categories and types of Personal Information from and about you:

Categories of Personal Information We Collect

Examples of Personal Information Collected

Categories of Sources of Personal Information

Business Purpose for Collection of Personal Information

Identifiers

Name, profile data, social media account, IP address

Directly from You or Your use of the Services; Cookies and Other Tracking Technologies; Third Parties (such as affiliates, agents, service providers and other users)

Developing, Improving, and Providing the Service, Identification, Communications, Marketing, Analytics, Security, Legal, Compliance and Regulatory Obligations

Contact/Registered User Account Information

Email Address, Home Address, Billing Address, Phone Number

Directly from You or Your use of the Services; Third Parties (such as affiliates, agents, service providers and other users)

Developing, Improving, and Providing the Service, Identification, Communicating with You, Marketing, Analytics, Security, Legal, Compliance and Regulatory Obligations

Commercial Information

Transaction data including products and/or services offered, considered, or purchased

Directly from You or Your use of the Services; Third Parties (such as affiliates, agents, service providers and other users)

Developing, Improving, and Providing the Service, Identification, Communications, Marketing, Analytics, Security, Legal, Compliance and Regulatory Obligations

Financial Data/Payment Information

Credit card or other financial account information

Directly from You or Your use of the Services; Third Parties (such as affiliates, agents, service providers and other users)

Improving and Providing the Service, Identification, Communications, Security, Legal, Compliance and Regulatory Obligations

Internet or Other Network or Device Activities Including Information from Cookies

Unique device and app identifiers, browsing history or other usage data, the browser and operating system you are using, the URL or advertisement that referred you to the service, the search terms you entered into a search engine that led you to the service, areas within the service that you visited, which links you clicked on, which pages or content you viewed and for how long, other similar information and statistics about your interactions, such as content response times, download errors and length of visits to certain pages and other information commonly shared when browsers communicate with websites

Directly from You or Your use of the Services; Cookies and Other Tracking Technologies; Third Parties (such as affiliates, agents, service providers and other users)

Developing, Improving, and Providing the Service, Identification, Communications, Marketing, Analytics, Security, Legal, Compliance and Regulatory Obligations

Approximate Geolocation Information

Your approximate location

Directly from You or Your use of the Services; Cookies and Other Tracking Technologies; Third Parties (such as affiliates, agents, service providers and other users)

Developing, Improving, and Providing the Service, Identification, Communications, Marketing, Analytics, Security, Legal, Compliance and Regulatory Obligations

Platform Communications

Communication Information (e.g., your name, contact information, and the contents of any messages you send)

Directly from You, Your use of the Services, and users with whom you communicate

Providing the Service, Security, Legal, Compliance and Regulatory Obligations

With your consent, the contents of any messages you send may be used to Develop and Improve the Service

Other information that identifies or can be reasonably associated with you

User-generated content, (e.g., feedback, ratings and job postings), information on work previously performed via the service and outside the service

Directly from You or Your use of the Services; Service Providers; Third Parties (such as affiliates, agents, and other users)

Developing, Improving, and Providing the Service, Identification, Communications, Marketing, Analytics, Security, Legal, Compliance and Regulatory Obligations

B. Non-Identifying and De-Identified Information

Non-Identifying Information/Usernames: We also may collect other information that does not identify you directly, such as zip codes, demographic data, information about your use of the Services (“Non-Identifying Information”). We may combine information collected from Website users, whether they are registered or not. In some cases, we may render Personal Information (generally, email address) into a form of Non-Identifying Information referred to in this Privacy Policy as “Hashed Information.” This is typically accomplished using a mathematical process (commonly known as a hash function) to convert information into a code. While the code does not identify you directly, it may be used by Foot Locker’s partners to connect your activity and interests.
Combination of Personal and Non-Identifying Information: We may combine your Personal Information with Non-Identifying Information, but Foot Locker will treat the combined information as Personal Information.
De-Identified Information: We may also de-identify or aggregate information and convert it into non-personal information so that it can no longer reasonably be used to identify you (“De-Identified Information”). We may use De-Identified Information for any of the purposes described in the “How We Use the Personal Information” section below. We will maintain and use De-Identified Information in de-identified form and will not attempt to reidentify the information, except to confirm our de-identification processes or unless required by law.

C. Personal Information We Collect From Other Sources

We also collect Personal Information about you from other sources including third parties from whom we have purchased business contact information and from public databases, publicly accessible websites, such a, social media platforms, which we may combine with Personal Information that you have provided to Foot Locker. Such Personal Information may include, without limitation, phone numbers, mailing addresses, email addresses and Personal Information available at public facing websites and/or social media profiles. Please note that publicly available information is not considered Personal Information in some jurisdictions.

In addition, in connection with your use of the Services, you may be interacting with third party artificial intelligence and large language model tools including, without limitation, ChatGPT. ChatGPT is an artificial intelligence program that generates dialogue by using machine learning algorithms to process and analyze large amounts of data to generate responses to user inquiries. We are not responsible for any information that you provide and/or otherwise disclose to ChatGPT, and we have no control over the manner in which ChatGPT uses or shares information. Prior to disclosing or communicating any personal information utilizing the Services, in addition to reviewing the policies set forth herein, you should also review ChatGPT’s privacy policy at https://openai.com/policies/privacy-policy/.

D. Personal Information Collected Automatically

Device and Usage: When you visit the Services, our servers automatically record information that may include Personal Information. Personal Information we collect may include, without limitation: the web address you came from or are going to, your device (including model and manufacturer), your operating system, the type and version of web browser you are using, your internet service provider/mobile carrier, unique identifiers, your Internet Protocol (IP) address (or proxy server), general location your mobile network carrier, the duration of your visit, your time zone, system configuration information and additional information provided by your web browser or device. Whether we collect some or all of this information depends on the type of device you are using and your device settings. To learn more about what information your browser or device makes available to us, please check the policies of your device manufacturer or software provider. You may be able to control the Personal Information you provide to us through your settings and/or as described below.
Cookies and Other Tracking Mechanisms: Like many other businesses, the Services, use cookies and other technologies to receive and store certain types of information, which may include Personal Information, when you interact with us through your computer or mobile device. Using these technologies helps us customize your experience with the Services and improve your experience with the Services through analytics and advertising services. Some information on these technologies, as well as the types of information we may use these technologies to collect, is included below:
Cookie Data: A cookie is a small amount of data that a website stores on your device that we can later retrieve. When we use cookies, we may use cookies that last until you close your browser (“Session Cookies”) or cookies that last until they are deleted by you or your browser (“Persistent Cookies”). Depending on how you are accessing the Services, we may use cookies or similar technology to administer the Services, store your preferences for certain kinds of information, analyze trends and gather information about the Services’ visitors, or to make emails more useful or interesting (for example, we may receive a confirmation when you open an e-mail from us, if your device or settings support such capabilities). For further information about how cookies work, visit www.aboutcookies.org or www.allaboutcookies.org. The Help portion of the toolbar on most browsers will tell you how to manage your cookies as well. You may stop or restrict the placement of cookies on your computer or remove them from your browser by adjusting your web browser preferences. Visitors to the Services who disable cookies will be able to browse certain areas of the Services, but some features may not function as well. For information on how you can manage your cookie and/or email preferences, please review “Your Privacy Choices and Rights; Accessing and Managing Your Personal Information” section below.
Cross-Device Use: We and our third party providers, including Google, may use the Personal Information collected about you (whether directly from the Services, through your device(s), or from a third party) to help us and our third party providers identify other devices that you use (e.g., a mobile phone, tablet, other computer, etc.). We and our third party providers also may use cross-device and other information we learn about you to serve targeted advertising on your devices and to send you e-mails.
Social Plugins: We may use social plugins in connection with the Services, such as plugins for Facebook, LinkedIn, Twitter, and Instagram. When you view a website that contains a plugin, your browser will create a direct link to the third parties’ servers. If you are logged into your social media account, the social media platform will record the visit to your social media account. Please visit the social media platform’s privacy policy for more information.
Third-Party Ad Networks, Analytics and Similar Third Parties: We may work with advertising networks, advertising agencies, analytics service providers and other vendors to provide us with information regarding how users interact with the Services and traffic on the Services, including pages viewed and the actions taken when visiting or using the Services and to provide us with information regarding the use of the Services and the effectiveness of our advertisements. Our service providers may collect certain information about your visits to and activity on the Services as well as other websites or services, they may set and access their own tracking technologies on your device (including cookies and web beacons), and may use that information to show you targeted advertisements. Some of these parties may collect Personal Information when you visit the Services or other online websites and services. We may also share certain Non-Identifying Information with these parties, including Hashed Information, in connection with the services they provide to us. If you wish to opt out of interest-based advertising from participating companies, you must opt out on each device and each browser where you want your choice to apply. You can choose to opt-out of receiving certain interest-based advertising as described in “Your Privacy Choices and Rights; Accessing and Managing Your Personal Information” section below. If you choose to opt out, please note you will continue to receive advertisements, but they may be less relevant to you. You can also control how participating third-party ad companies use the Personal Information that they collect about your visits to the Website, and those of third parties, in order to display more relevant targeted advertising to you. If you are in the United States of America, you can obtain more information and opt out of receiving targeted ads from participating third-party ad networks at aboutads.info/choices (Digital Advertising Alliance).
Do Not Track Signals and GPC: Please note that your browser setting may allow you to automatically transmit a “Do Not Track” signal to websites and online services you visit. Foot Locker does not generally alter its practices when it receives a “Do Not Track” signal from a visitor’s browser. To find out more about “Do Not Track,” please visit http://www.allaboutdnt.com. Global Privacy Control (GPC) is a technical specification that you can use to inform websites of your privacy preferences regarding ad trackers. If you do choose to set up GPC, it may impact the functionality of the Services, but we honor the GPC signal on a per-browser basis automatically in your cookie preferences.

E. Children.

The Services are general audience and intended for users thirteen (13) years and older. We do not knowingly collect Personal Information from anyone younger than age thirteen (13). If we become aware that a child younger than thirteen (13) has provided us with Personal Information, we will use commercially reasonable efforts to delete such information from our files. If you are the parent or legal guardian of a child younger than age thirteen (13) and believe that Foot Locker has collected Personal Information from your child, please contact us at: [email protected].

3. How We Use the Personal Information

A. How We Use the Personal Information

We use information including Personal Information collected through the Services to provide and improve the Services, develop new services and products, process your requests, prevent fraud, provide you with information and advertising that may interest you, comply with the law, and as otherwise permitted with your consent. We use the information we collect for the following purposes:

To develop, provide, and improve the Services, complete your transactions, address your inquiries, process your registration, verify the information you provide is valid, and for compliance and internal business purposes.
To process transactions including, without limitation, delivering the purchased products or services requested;
For customer service interactions including, without limitation, to send you information and updates pertaining to any orders of products, unless you decide to opt-in to the Foot Locker promotional newsletter lists;
If you opt-in, Foot Locker may use this information to notify you of any company updates, new arrivals, or any promotions you might find of value. If you don’t wish to receive these newsletters or updates then simply use the “UNSUBSCRIBE” feature in the footer of the email.
To improve the customer experience including, without limitation, to tailor content we display to you and offers we may present to you, both on the Services and elsewhere online.
To enforce and comply with the law, including to conduct an investigation, to protect the property and rights of Foot Locker or a third party, to protect the safety of the public or any person, or to prevent or stop activity we may consider to be, or to pose a risk of being, illegal, fraudulent, unethical or legally actionable activity.
For the purposes disclosed at the time you provide your information, with your consent, and as further described in this Privacy Policy.
To Honor Our Contractual Commitments to You.
For Our Legitimate Interests. In many cases, we handle Personal Information on the grounds that it furthers our legitimate interests in commercial activities, such as the following, in ways that are not overridden by the interests or fundamental rights and freedoms of the affected individuals:
Providing the Services;
Detecting security incidents, protecting against malicious, deceptive, fraudulent or illegal activity, and prosecuting those responsible for that activity;
Measuring interest and engagement in the Services;
Short-term, transient use, such as contextual customization of ads;
Improving, upgrading or enhancing the Services;
Developing new products and services;
Ensuring internal quality control and safety;
Authenticating and verifying individual identities;
Debugging to identify and repair errors with the Services;
Auditing relating to interactions, transactions and other compliance activities;
Enforcing our agreements and policies;
Analyzing and improving our business;
Engaging in communications, including marketing and responding to your inquiries about our services;
Addressing information security needs and protecting our users, Foot Locker, and others;
Managing legal issues; and/or
Complying with legal obligations. We need to use and disclose Personal Information in certain ways to comply with our legal obligations.

4. Sharing and Disclosing Personal Information

We do not sell your Personal Information for monetary consideration, and we do not share your Personal Information with third parties for those third parties’ marketing purposes unless we first provide you with the opportunity to opt-in to or opt-out of such sharing. However, we may use technologies on the Services for the purposes of advertising or marketing to you and understanding how you interact with our ads. This may be considered a “sale” or “sharing” of personal information for targeted advertising under applicable data protection laws. We may also share information we have collected about you, including Personal Information, as disclosed at the time you provide your information, with your consent, as otherwise described in this Privacy Policy, or for the following business or commercial purposes:

A. Disclosure of Personal Information

Foot Locker may disclose Personal Information and other information as follows:

Affiliates: We may disclose the Personal Information to our affiliates or subsidiaries; however, if we do so, their use and disclosure of your Personal Information will be subject to this Privacy Policy.
Service Providers: We may disclose Personal Information to third-party service providers who use this information to perform services for us, such as hosting providers, cloud services providers, customer service providers, event planners, advisors, consultants, and/or support providers. For example in connection with international orders, Foot Locker collaborates with Passport Global (“Passport”) in connection with facilitating the processing of the order and delivering the products subject to the order to customers located in international jurisdictions outside of the United States. In that regard, your payment information, shipping address, and any additional information required or requested to complete your order will be shared directly with Passport and its nominated agents and contractors, in order to enable Passport to complete such international orders. In addition, Foot Locker collaborates with Frate Returns in connection with processing returns of products and orders, and may disclose your Personal Information with Frate Return in connection with such orders and to consummate returns of same. In that regard, prior to placing any international orders or returning any products online, please make sure that you reviewed the terms and conditions and privacy policies of such service providers including, without limitation, Passport and Frate Returns in connection with their use, collection, processing and disclosure practices in connection with any Personal Information you submit to such third-party platforms.
Advertising, Social Media and Analytics Providers: We share your Personal Information with advertising, social media and analytics providers as described above.
Third Parties that Help Provide the Messaging Service: We will not share your opt-in to an SMS short code campaign with a third party for purposes unrelated to supporting you in connection with that campaign. We may share your Personal Information with third parties that help us provide the messaging service, including, but not limited to, platform providers, phone companies, and other vendors who assist us in the delivery of text messages.
Additional Disclosures: Foot Locker may also disclose your Personal Information when you direct us to, or otherwise give your specific consent, or with others for any legitimate business purpose that does not conflict with the statements made in this Privacy Policy or applicable law.

B. Disclosure of Personal Information As Required by Law, Acquisition or Merger

We may disclose your Personal Information if we are required to do so by law or we, in good faith, believe that such action is necessary to: (i) comply with the law or with legal processes; (ii) protect and defend our rights and property; (iii) protect against misuse or unauthorized use of the Websites and/or Services; or (iv) protect the safety or property of our users or the public (among other things, this means that if you provide false information or attempt to pose as someone else, information about you may be disclosed as part of any investigation into your actions).

If Foot Locker goes through a business transition, such as a merger, acquisition, or sale of all or a portion of its assets, your Personal Information may be among the assets transferred.

C. Aggregate or De-Identified Information

We may disclose aggregate, or de-identified information about users for marketing, advertising, research, compliance, or other purposes.

5. Your Privacy Choices and Rights; Accessing and Managing Your Personal Information

You may have certain choices and rights associated with your personal information, including opting out of targeted advertising or other disclosures to third parties. Residents of certain locations may have the right to have an authorized agent submit requests on your behalf. You or your authorized agent may request that Foot Locker honor these rights by contacting us as outlined in the “Contact Us” section below, or submitting a request here. Depending on your location, you may also opt out of targeted advertising here.

Non-Discrimination: You will not receive any discriminatory treatment by us for the exercise of your privacy rights.

Verifying Your Request: Only you, or a person that you authorize to act on your behalf, may make a request related to your personal information. In the case of access and deletion, your request must be verifiable before we can fulfill such request. Verifying your request will require you to provide sufficient information for us to reasonably verify that you are the person about whom we collected personal information or a person authorized to act on your behalf. We will only use the personal information that you have provided in a verifiable request in order to verify your request. We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority. Please note that we may charge a reasonable fee or refuse to act on a request if such request is excessive, repetitive or manifestly unfounded.

A. California Residents

“Shine the Light” and “Eraser” Laws: Residents of the State of California may request a list of all third parties to which we have disclosed certain information during the preceding year for those third parties’ direct marketing purposes.

California Consumer Privacy Act (CCPA)/California Privacy Rights Act (CPRA): The CCPA, as amended by the CPRA, provides California residents and/or their authorized agents with specific rights regarding the collection and processing of their personal information. This section does not apply to our handling of information that is exempt under the CCPA such as publicly available information, de-identified or aggregated information or information that is covered under another law such as the Health Insurance Portability and Accountability Act (HIPAA) or the Fair Credit Reporting Act (FCRA). Where we have committed to maintaining and using Personal Information in a deidentified form, we agree not to reidentify deidentified data except as permitted by applicable law.

Your Right to Know: California residents have the right to request that we disclose the following information to you about our collection and use of your personal information over the past twelve (12) months. We may ask you to provide certain information to identify yourself so that we may compare it with our records in order to verify your request. Upon verification, we will disclose to you:

The categories of personal information we have collected about you.
The categories of sources for the personal information we have collected about you.
The specific pieces of personal information we have collected about you.

Our business or commercial purpose for collecting or “selling” your personal information as defined by the CCPA.

The categories of third parties to whom we have sold or shared your personal information, if any, and the categories of personal information that we have shared with each third-party recipient.

Your Right to Opt-Out of “Sale” or “Sharing” of Personal Information: California residents have the right to opt-out of the “sale” or “sharing” of their personal information as defined by the CCPA by clicking here or by contacting us using the information in the “Contact Us” section below.

Please note that we do not knowingly “sell” the personal information of any individuals under the age of 18.

Where we are “sharing” your personal information with third parties for the purposes of cross-context behavioral advertising or profiling, you may opt-out of such sharing at any time by submitting a request as directed on the homepage of our website or by contacting us using the information in the “Contact Us” section below.

Your Right to Limit Use of Sensitive Personal Information: California residents may have the right to request that businesses limit the use of any sensitive personal information to those uses which are necessary to perform the Services or for other specifically-enumerated business purposes under the CCPA, as amended by the CPRA. Please note that we do not use sensitive personal information other than as necessary to perform the Services or as specifically permitted under the CCPA.

Your Right to Delete: California residents have the right to request that we delete any of the personal information collected from you and retained by us, subject to certain exceptions. We may ask you to provide certain information to identify yourself so that we may compare it with our records in order to verify your request. Once your request is verified and we have determined that we are required to delete the requested personal information in accordance with the CCPA, we will delete, and direct our service providers to delete your personal information from their records. Your request to delete personal information that we have collected may be denied if we conclude it is necessary for us to retain such personal information under one or more of the exceptions listed in the CCPA.

Your Right to Correct: Under the CCPA, as amended by the CPRA, California residents have the right to request that we correct any inaccurate personal information we maintain about you, taking into account the nature of the personal information and the purposes for which we are processing such personal information. We will use commercially reasonable efforts to correct such inaccurate personal information about you.

Non-Discrimination: You will not receive any discriminatory treatment by us for the exercise of your privacy rights conferred by the CCPA.

B. Colorado, Connecticut, Delaware, Iowa, Montana, Nebraska, Nevada, New Hampshire, New Jersey, Oregon, Texas, Utah and Virginia Residents

If you are a resident of Colorado, Connecticut, Delaware, Iowa, Montana, Nebraska, Nevada, New Hampshire, New Jersey, Oregon, Texas, Utah or Virginia, you have certain rights related to your Personal Information. If you or an authorized agent wish to exercise these rights, you can submit a request using the methods listed below. There may be situations where the Company cannot grant a request, for example to complete a transaction to you or comply with law. These options do not apply to publicly available information from government records nor to deidentified or aggregated information.

You have the right to request access to your Personal Information that the Company collects, uses, sells, shares or discloses to third parties.
You have the right to request the deletion of your Personal Information that the Company collects about you.
You have the right to withdraw the consent to processing of your Personal Information. (CO/CT/OR/MT/DE/NH/NJ Residents Only)
You have the right to limit use and disclosure of sensitive personal information to a third party if the Company uses that information for any purpose other that the designated purpose agreed to.
You have the right to correct inaccurate personal information that Macy’s has collected about you. ( CO/CT/VA/OR/TX/MT/DE/NH/NE/NJ Residents Only)
You have the right to opt-out of the selling or sharing of your Personal Information to third parties.
You have the right to opt-out of automated decision making including profiling against any information the Company has collected about you. (CO/CT/VA/OR/TX/MT/DE/NH/NE/NJ Residents Only)
You have the right to appeal should the Company be unable to take action on your Privacy Request. (CO/CT/VA/OR/TX/MT/IA/DE/NH/NE/NJ Residents Only)
You have the right to request that the Company provide a list of specific third parties, other than natural persons, to which your personal information has been disclosed.
You have the right to request that the Company provide a list of the categories of third parties to which your personal information may have been disclosed. (DE Residents Only)
The Company will never discriminate nor retaliate against you if you choose to exercise any of these privacy rights.

Depending on your state of residence, you may have additional rights related to opt-out of the “Sale” of Personal Information to unaffiliated third parties and the right to opt-out of Targeted Advertising (as those rights are defined in the applicable state laws).

Process to Submit an Opt-Out of “Sale” or “Targeted Advertising”: There are two separate processes to follow in order to request to be opted out of “Sale” or Targeted Advertising:

For opting-out of Sale or Targeted Advertising Tracking Technologies, you can update your preferences at any time by either (a) updating your preferences by clicking the Your Privacy Choices at the footer of the Website, at any time, or (b) broadcasting a legally recognized opt-out preference signal, such as the Global Privacy Control (GPC) (when accessing the Website via the browsers and/or browser extensions that support such signals).

For opting-out of “Sale” or Targeted Advertising activities based on Personal Information collected by us (e.g. activity related to shopping in store or on the Website, participating in promotional or marketing activities, creating an account on the Website, registering to receive email communications from us, etc.), please submit a request using the Opt-Out of Sale/Targeted Advertising Request Form.

E. For Residents Located in the European Economic Area (EEA), United Kingdom (UK) or Switzerland

If you are a resident located in the EEA, United Kingdom or Switzerland, you have a number of rights under applicable data protection laws in relation to your Personal Information including the following rights under certain circumstances:

Access. You have the right to request a copy of the Personal Information we are processing about you. For your own privacy and security, at our discretion we may require you to prove your identity before providing the requested information in accordance with the applicable law.
Rectification. You have the right to have incomplete or inaccurate Personal Information that we process about you rectified.
Deletion. You have the right to request that we delete Personal Information that we process about you, except we are not obliged to do so if we need to retain such data in order to comply with a legal obligation or to establish, exercise or defend legal claims.
Restriction. You have the right to restrict our processing of your Personal Information where you believe such data to be inaccurate; our processing is unlawful; or that we no longer need to process such Personal Information for a particular purpose unless we are not able to delete the data due to a legal or other obligation or because you do not wish for us to delete it.
Portability. You have the right to obtain Personal Information we hold about you, in a structured, electronic format, and to transmit such data to another data controller, where this is (a) Personal Information which you have provided to us, and (b) if we are processing that information on the basis of your consent or to perform a contract with you.
Objection. Where the legal justification for our processing of your Personal Information is our legitimate interest, you have the right to object to such processing on grounds relating to your particular situation. We will abide by your request unless we have compelling legitimate grounds for the processing which override your interests and rights, or if we need to continue to process the Personal Information for the establishment, exercise or defense of a legal claim.
Withdrawing Consent. If you have consented to our processing of your Personal Information, you have the right to withdraw your consent at any time, free of charge. This includes cases where you wish to opt out from marketing and promotional messages that you receive from us. You may unsubscribe from marketing and promotional messages by clicking the link within the body of marketing or promotional communications.

You can make a request to exercise any of these rights in relation to your personal data by contacting us as indicated below at “Contact Foot Locker “.

You also have the right to lodge a complaint with the local data protection authority if you believe that we have not complied with applicable data protection laws. Please click the following link for a list of local data protection authorities in the EEA countries: https://www.edpb.europa.eu/about-edpb/about-edpb/members_en. In the UK, you have a right to lodge a complaint with the Information Commissioner’s Office (ICO) about the processing of your Personal Information.

F. For Residents Located in Canada

The following apply to residents located in Canada:

Consent: We will obtain your consent to collect, use or disclose Personal Information except where we are authorized or permitted by law to do so without consent. For example, we may collect, use or disclose Personal Information without your knowledge or consent where:
the information is publicly available, as defined by statute or regulation;
we are obtaining legal advice; or
we reasonably expect that obtaining consent would compromise an investigation or proceeding.

Other exceptions may apply. Your consent can be express, implied or given through an authorized representative such as a lawyer, agent or broker. Consent may be provided orally, in writing, electronically, through inaction (such as when you fail to notify us that you do not wish your Personal Information collected/used/disclosed for various purposes after you have received notice of those purposes) or otherwise. You may withdraw consent at any time, subject to legal, contractual and other restrictions, provided that you give reasonable notice of withdrawal of consent to us. On receipt of notice of withdrawal of consent, we will inform you of the likely consequences of the withdrawal of consent, which may include the inability of us to provide portions of the Website or other services for which that information is necessary.

Limits on Collection of Personal Information: We will not collect Personal Information indiscriminately but will limit collection of personal information to that which is reasonable and necessary. We will also collect Personal Information as authorized by law.
Limits for Using, Disclosing and Retaining Personal Information: Your Personal Information will only be used or disclosed for the purposes set out herein and as authorized by law.
Retention of Personal Information. We will keep Personal Information used to make a decision affecting you for at least one year after using it to make the decision, except to the extent that you delete or remove that information yourself. We will destroy, erase or make anonymous documents or other records containing Personal Information as soon as it is reasonable to assume that the original purpose is no longer being served by retention of the information and retention is no longer necessary for a legal or business purpose. We will take due care when destroying Personal Information so as to prevent unauthorized access to the information.
Access: Upon written request to our Privacy Officer and authentication of identity, we will provide you your Personal Information under our control. We will also give you information about the ways in which that information is being used and a description of the individuals and organizations to whom that information has been disclosed. We may charge you a reasonable fee for doing so.

We will make the information available within 30 days of receiving a written request or provide written notice where additional time is required to fulfill the request. In some situations, we may not be able to provide access to certain Personal Information (e.g., if disclosure would reveal Personal Information about another individual, the Personal Information is protected by solicitor/client privilege, the information was collected for the purposes of an investigation or where disclosure of the information would reveal confidential commercial information that could harm the competitive position of us). We may also be prevented bylaw from providing access to certain Personal Information. Where an access request is refused, we will notify you in writing, document the reasons for refusal and outline further steps which are available to you.
Accuracy: We will make a reasonable effort to ensure that Personal Information we are using or disclosing is accurate and complete. If you demonstrate the inaccuracy or incompleteness of Personal Information, we will amend the information as required. If appropriate, we will send the amended information to third parties to whom the information has been disclosed. When a challenge regarding the accuracy of Personal Information is not resolved to your satisfaction, we will annotate the Personal Information under our control with a note that the correction was requested but not made.
Withdrawal of Consent to Process: Canadian Residents have the right to withdraw consent to processing similar to the deletion right. To withdraw consent to processing, please submit a deletion request to Foot Locker using the contact information set forth in the “Contact Foot Locker” section below.

G. For Residents of Australia and New Zealand

Storing and disclosing your Personal Information

Residents of Australia and New Zealand accessing and using the Website are notified that your Personal Information may be held and processed overseas. Overseas countries where your data may be stored include the United States and other locations where the Company has operations. When we pass on or share your Personal Information in this way, we take steps to ensure it is treated in the same way that we would treat it and we comply with applicable law. Where reasonably possible, we seek to work with information and records from which Personal Information has been removed.

Your Personal Information – Your Rights

Right to Unsubscribe: You have the right to unsubscribe from receiving marketing emails from the Company, as well as the right to unsubscribe from any of the programs that we offer. You can unsubscribe by clicking on the unsubscribe link at the bottom of any Company email that you receive, or by emailing us at [email protected] with your request. Please note that if you already have requested products or services when you decide to withdraw consent, there may be a short period of time for us to update your preferences and ensure that we honor your request.
Managing Your Information: The accuracy, integrity and security of your Personal Information is very important and the Company takes reasonable steps to ensure that these priorities are addressed. We encourage you to contact us to update or correct your Personal Information if it changes or if you believe that any information that we have collected about you is inaccurate. Consistent with legal requirements and limitations, the Company also permits you to obtain a copy of Personal Information that we hold about you. To do so, please use the contact information in the Questions or Concerns section of this privacy policy. Please note that we will likely require additional information from you in order to honor your request, such as to ensure proper authentication.
Safeguarding Your Personal Information: The Company follows applicable laws and requirements to protect and safeguard your Personal Information. We have adopted physical, electronic, and administrative safeguards that are designed to protect your Personal Information, by reducing the risk of loss, misuse, alteration, theft, unauthorized access, or unauthorized disclosure.

For example, when you place an order on our Website, we use Secure Socket Layer (SSL) technology, an encryption tool that provides security while transmitting information over the Internet. We also use firewall technology, password controls, and other technological and procedural safeguards in respect of your online interactions with the Company.

We evaluate our privacy safeguards on an ongoing basis to help minimize risks from new security threats as they become known. Although we have implemented the above security measures, we note that 100% guaranteed security is not possible for any company.

Requests for access to your Personal Information and complaints about privacy

You may wish to contact us to request access to your Personal Information, to seek to correct it or to make a complaint about privacy. Our contact details are set out below.

We will respond to your request for access to Personal Information we hold about you as soon as we reasonably can, including if we are unable to provide you with access (such as when we no longer hold the information).

We do not impose any charge for a request for access, but we may charge you a reasonable fee for our costs associated with providing you with access and retrieval costs.

For complaints about privacy, we will establish in consultation with you a reasonable process, including timeframes, for seeking to resolve your complaint.

Complaints

Australian Residents: If you believe that we have violated any of the Australian Privacy Principles, you can contact us at the addresses listed above. We will investigate your complaint and try to resolve any issue to your satisfaction. If we do not adequately answer your concerns, you will have the right to make a complaint in writing to the Office of the Australian Information Commissioner, https://www.oaic.gov.au/.

New Zealand residents: If you believe that we have violated the Privacy Act 2020, you can contact us at the addresses listed above. We will investigate your complaint and try to resolve any issue to your satisfaction. If we do not adequately answer your concerns, you will have the right to make a complaint in writing to the Office of the Privacy Commissioner, https://www.privacy.org.nz/

6. Additional Privacy Info

A. Security

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any Personal Information we process. However, despite our safeguards and efforts to secure your Personal Information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your Personal Information. Although we will do our best to protect your Personal Information, transmission of Personal Information in connection with the Services is at your own risk. You should only access the the Services within a secure environment.

You should take steps to protect against unauthorized access to your password, mobile device, and computer by, among other things, signing off after using a shared computer, choosing a robust and unique password for each account that nobody else knows or can easily guess, and keeping your log-in and password private. You are responsible for maintaining the security of your password or other form of authentication involved in accessing password-protected or secured resources. In order to protect you and your information, Foot Locker may suspend your use of the Services without notice, pending an investigation, if any suspicious activity or security breach is suspected. We are not responsible for any lost, stolen, or compromised passwords or for any unauthorized account activity that may result.

B. Changes to This Privacy Statement

We reserve the right to change or update this Privacy Policy at any time. Changes to the Privacy Policy will be posted at this URL. We encourage you to periodically review this Privacy Policy for any changes.

C. Data Retention

We will retain your Personal Information as long as reasonably necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements, subject to certain exceptions as described to you and/or allowed by law. Other third parties may have different practices, and you should refer to their privacy policies.

We may retain your Personal Information for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation or other lawful basis.

To determine the appropriate retention period for Personal Information, we consider the amount, nature and sensitivity of the Personal Information, the potential risk of harm from unauthorized use or disclosure of your Personal Information, the purposes for which we process your Personal Information and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting, compliance or other requirements.

We may anonymize your Personal Information (so that it can no longer be associated with you) for research or statistical purposes and use this information indefinitely without further notice to you.

D. Information Processing in the U.S. and Other Countries

Your Personal Information and other information may be stored, transferred and processed by us in the United States and in other countries by our affiliates or our service providers. By providing Personal Information to us, you consent to the collection, maintenance, processing and transfer of such information in and to the United States and other countries and territories, pursuant to the laws of the United States or such other jurisdictions, which may provide lesser privacy protections than the laws of other countries, and you acknowledge that your information may thus be subject to U.S. and foreign laws and accessible to U.S. and foreign governments, courts, law enforcement and regulatory agencies.

7. Contact Foot Locker

A. Updating Your Choices

If you have any questions regarding this Privacy Policy, or if at any time after providing your Personal Information to Foot Locker, you want to change your Personal Information, or if you would like to assert any of the rights listed above, please direct your request to [email protected].

B. Foot Locker Contact Information

You may reach our Data Privacy Officer at [email protected].