Privacy Notice

Last Reviewed: Jan 1, 2023
We last updated our Privacy Notice on Jan 1, 2023. These updates included:

• Updated California Privacy Rights section
• Addition of Virginia Privacy Rights
• Revised disclosures about the categories of personal information we may collect
• Revised disclosures about how we collect information
• Revised disclosures about how we use your information
• Added section how about how long we keep your information.
• Clarified how we protect your information

This Privacy Notice explains how Bonobos collects, uses, and discloses your personal information. Personal information is information that identifies you or reasonably can be linked to information that identifies you. (Some laws define "personal information" differently, and we use those definitions when they are applicable. Rest assured, though, that no matter where you live, we treat your personal information with respect, and we collect, use, and share it only as described in this Notice.)

It applies when you visit our website, mobile app, official social media sites, or other online properties, (collectively "Sites"), and at our Guideshop locations in person. Bonobos recognizes that you care about how your information is used, and your privacy is important to us. This Privacy Notice explains the choices you can make about what information we disclose. Please read this Privacy Notice carefully.

CHANGES TO THIS PRIVACY NOTICE

Please check our Privacy Notice periodically for changes. We will provide additional notice of significant updates. We will post the date our Notice was last updated at the top of the Privacy Notice.

INFORMATION WE COLLECT AND HOW WE COLLECT IT

Information We Collect

We may collect or receive the following categories of personal information. Not all categories may be collected or received about every individual:

• Identifiers: Personal identifiers, such as name, telephone number, physical address, email address, government-issued identifiers (e.g., national identification numbers, driver’s license numbers), and signatures
• Device Information and Online Activity: Device and online identifiers, account login information, keystroke patterns indicative of human or bot website/app usage, mobile and web network activity and related information (such as Mac address, IP address, cookie IDs, browser activity, and other information associated with your browsing history), and social media information
• Commercial Information: Purchase and transaction history information (such as products or services you have purchased, rented, or returned), health and safety-related information, product testimonials, travel and vacation information, and competition entries
• Communications: Communication details (such as the content of emails, text messages, or other communications), call logs, and calendar information where we are a party to the exchange
• Demographic Information: Demographic information, such as age (including information about children under the age of 13 with respect to certain purchases and services (e.g., tobacco purchases), gender, citizenship, ethnicity, date of birth, family or marital status, household income, education, professional and employment information, family health, number of children, number of cars owned, and software or virtual assets owned
• Financial Information: Financial information, such as credit or debit card numbers, financial account numbers, and claims information
• Biometric Information: Biometric information, such as voice prints, imagery of the iris or retina, face geometry, and palm prints or fingerprints
• Geolocation: Location information, such as geolocation information
• Sensory Information: Audio, visual information, and other sensory information such as photographs and audio and video recordings
• Background Information: Background and criminal information, such as background checks and criminal convictions
• Inferences: Individual preferences and characteristics, such as inferences related to shopping patterns and behaviors, intelligence, and aptitudes

How We Collect Information

We collect information from you in a variety of ways. It may be:

• Provided directly by you or a member of your household
• Collected from a device associated with you or your household
• Collected through in-store technology
• Collected from another company within our family of companies
• Collected from an external third-party source
• Collected from another solution or asset
• Collected from other sources, when it is appropriate, to help us correct or supplement our records, improve the quality or personalization of our services, increase the appeal and relevance of advertising, and to prevent or detect fraud

Information Provided Directly by You or a Member of Your Household: Bonobos collects personal information about you when you interact with our Sites, including when you create an account, join our mailing list, make a purchase, or engage in an online chat with our customer service representatives. We also collect personal information when you make an appointment to visit, or visit us in person at, one of our Guideshop locations.

If you make a purchase through our Sites, our third-party payment processor service providers may also collect billing information, such as your first and last name, email address, phone number, credit card or debit card number, and billing and shipping addresses. If you make a purchase over the phone, we will collect this personal information and disclose it to our third-party payment processor service providers.

We may associate personal information you provide to us across our Sites with personal information that you provide to us in person in our Guideshop locations.

Information We Collect from a Device Associated with You or Your Household: We may automatically collect personal information from your use of our mobile app and devices that you use to interact with our app and Sites, as well as from your interaction with emails that we send to you. The personal information we automatically collect may include your geolocation and other data, including your IP address, browser type, device type, the webpage you visited before coming to our Site, pages you visited on our Sites, time spent on those pages, information you searched for on the Sites, when and for how long you visited the Sites, and similar information, which we collect through cookies, beacons, and other technologies. The information we automatically collect will be associated with any personal information that you have provided to us.

We may use this information to provide you location-based advertisements and social media posts. We may also use this personal information for analytics purposes. You may be able to discontinue our collection of geolocation information by our app by changing the app's settings or the location settings on your mobile device.

Information We Collect Through In-Store Technology: We may collect your personal information from technology we use in our stores, such as our facility cameras. We operate cameras in store for security and operational purposes, for example, to help us improve the design of our stores to better serve our customers.

Information We Collect from Another Company within Our Family of Companies: We may collect your personal information from another organization within our corporate family of companies, such as with Walmart or Sam’s Club.

Information We Receive From External Third-Party Sources: We receive personal information about you from other sources to help us correct or supplement our records, improve the quality or personalization of our service to you, prevent or detect fraud, and for other business purposes.

HOW WE USE INFORMATION WE COLLECT ABOUT YOU

We use your personal information to provide you products and services, such as to fulfill your requests for products or to help us personalize our services and marketing to you. We also use your personal information to support our business functions, such as fraud prevention, marketing, and legal functions. Some examples include:

• Performing services, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytics services, providing storage, or providing similar services
• Providing advertising and marketing services, including targeted advertising
• To conduct auditing and monitoring of transactions and engagement, including auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance
• Short-term, transient use, such as non-personalized advertising shown as part of your current interaction with us
• Helping to ensure security and integrity and prevent fraud
• Undertaking activities to verify or maintain the quality or safety of our services or devices and to improve, upgrade, or enhance them
• Debugging to identify and repair errors
• To conduct business analysis, such as analytics, projections, identifying areas for operational improvement
• To conduct research and development, including undertaking internal research for technological development and demonstration
• To fulfill our legal function or obligations

We may use sensitive personal information for each of the purposes described above and to make inferences about customers, which we may use to promote certain products or services.

To the extent we process deidentified information, we will maintain and use the information in deidentified form and will not attempt to reidentify the information unless permitted by applicable law.

If you decide at any time that you no longer wish to receive marketing and promotional materials from us, please follow the unsubscribe instructions provided in any of the communications you receive from us. You may also contact us at privacy@bonobos.com and explain your request.

WHEN WE DISCLOSE PERSONAL INFORMATION

We are careful to disclose your personal information in ways that respect your privacy and only as described in this Notice. We view you as a valued customer, not a product, and we do not sell or rent your personal information to others for money.

We may disclose your personal information with other brands and businesses within the Walmart corporate family. When we do, the information will be used in ways that are consistent with this Notice.

All of the categories of personal information that we collect have been disclosed to other companies, including those within our corporate family, for a business purpose. We also may disclose your personal information to service providers who perform services and functions on our behalf to support our interactions with you including, for example, providing our products and services, providing site operations and maintenance services, providing database management, processing your purchases, administering surveys or contests, or communicating with you.

We may disclose your personal information to other third parties, including law enforcement authorities, when we determine that doing so is appropriate to:

• enforce our Terms of Service;
• protect our property, services, and legal rights;
• prevent physical harm to persons or the property of others;
• prevent fraud or other illegal activity against Bonobos and others;
• support auditing, compliance, and corporate governance functions;
• comply with subpoenas, court orders, or similar legal processes, including to law enforcement agencies, regulators and courts; or
• comply with any and all applicable laws.

Aggregated, Non-Identifying Information: Bonobos may disclose aggregated information that is not individually identifiable (or personal information) with third parties for industry analysis, demographic analysis, and targeted ad delivery.

Finally, we may provide your personal information to third parties for these third parties' own marketing and other business purposes. You may opt out of our continuing to share your information for these purposes by contacting us at privacy@bonobos.com .

Categories of Personal Information We Disclose to Each Type of Third Party:

We may disclose your personal information to certain categories of third parties, as described below.

HOW BONOBOS USES COOKIES AND OTHER TECHNOLOGIES

When you visit our Sites, Bonobos may place pieces of code, commonly referred to as "cookies," or similar technology on your devices. Bonobos may begin collecting information about you or your activity on devices associated with you through cookies or similar technologies as soon as you visit our Sites. We use advertising identifiers similar to cookies in our mobile applications. By using our Sites, you permit Bonobos to collect and use your personal information from activity on devices associated with you in accordance with this Privacy Notice.

Bonobos uses cookies for a number of purposes: First, we use persistent cookies to save your login information for future logins to our Sites and to collect and analyze information about your online activity to help us improve our services. Second, we use session ID cookies to enable certain features of the Sites to better understand how you interact with the Sites, and to monitor aggregate use of our Sites by Bonobos users. Unlike persistent cookies, session cookies are deleted from your computer when you log off of the Sites and close your browser.

We also may use "pixel tags," "web beacons," and other technologies on our Sites to collect usage, demographic, and geographic location data, which allow us to count users who have visited certain pages of the Sites, to deliver branded services, and to help determine the effectiveness of promotional or advertising campaigns.

Some internet browsers (e.g. Internet Explorer, Safari, Chrome) offer their own opt outs for interest-based advertising. The ad networks and ad service providers we participate with may not recognize these opt outs. Information about how to opt out of certain online interest-based advertising is discussed in the next section of this Privacy Notice.

THIRD-PARTY ADVERTISEMENTS

Third parties, including advertisers, may collect information, potentially including personal information, about your activities over time and across different websites when you use the Sites. Those third parties may use cookies, pixel tags, web beacons, mobile application advertising identifiers and other technologies. Those third parties may also provide Bonobos with information and reports about data collection, ad response measurement, analytical information, and assist with delivery of relevant marketing messages and advertisements.

Collection of your information by third parties is not governed by this Privacy Notice. Many third-party advertisers and some web browsers and mobile devices allow you to opt out of third-party advertising. Information and resources regarding how to opt out of interest-based advertising are available from the Digital Advertising Alliance at http://www.aboutads.info/choices/.

HOW TO MODIFY OR DELETE PERSONAL INFORMATION

You can request that we review, modify, and delete your personal account information by contacting us or by making edits via the "My Accounts" section of the Sites. If you request that we delete your personal information, your account may become deactivated. If you would like us to modify or delete your account information, please contact us at privacy@bonobos.com with a request that we delete your personal information from our database. We will use commercially reasonable efforts to honor your request. We may retain an archived copy of your records as required by law or for legitimate business purposes.

If you are a California resident, please refer to the “California Privacy Rights” section for additional information on your rights under the California Consumer Privacy Act.

HOW BONOBOS PROTECTS PERSONAL INFORMATION

Bonobos has implemented an information security program that includes administrative, technical and physical controls reasonably designed to safeguard your personal information.

HOW LONG BONOBOS KEEPS PERSONAL INFORMATION

We will keep the personal information we collect about you for as long as necessary to carry out the purposes set forth in this Privacy Notice or any other notice provided at the time of data collection, but no longer than as required or permitted under applicable law or our internal policy. We dispose of the information we collect in accordance with our retention policies and procedures.

BUSINESS TRANSFERS AND CORPORATE CHANGES

We reserve the right to disclose, sell, or transfer all information related to the Sites, including personal information:

• to a subsequent owner, co-owner or operator of one or more of the Sites; or
• in connection with a corporate merger, consolidation, or restructuring; the sale of substantially all of our stock and/or assets; or other corporate change, including, without limitation, during the course of any due diligence process.

INFORMATION WE TRANSFER

The Sites to which this Privacy Notice applies are subject to U.S. law, unless otherwise stated in this Privacy Notice. By using the Sites or providing us with your information, you are directly transferring your information to us in the United States. In addition, we may transfer the information that we collect through the Sites to other countries where we do business. These countries may not have the same data protection laws as the country in which you reside. When we transfer personal information we collect about you to other countries, we will protect that information as described in this Privacy Notice, even though a given country may not have the same privacy and data protection laws as the country in which you reside. You agree to and acknowledge our collection, transfer, and processing of your personal information in accordance with this Privacy Notice.

CHILDREN'S PRIVACY

Our Sites are general audience sites not directed at children under the age of 13. If we obtain actual knowledge that any information we collect has been provided by a child under the age of 13, we will delete that information.

STATE PRIVACY RIGHTS

Virginia Consumer Data Protection Act

Virginia residents can exercise the following rights by going to the footer of our website or settings section of our app and selecting the “Request My Personal Information” link:

1. Request to Access My Personal Information
2. Delete My Personal Information
3. Correct My Personal Information

Virginia residents can exercise the following rights by going to the footer of our website or the settings section of our app and selecting the “My Privacy Choices” link:

1. Opt Out of the Processing of My Personal Information for Purposes of Targeted Advertising

If we decline to take action on one of your rights as a Virginia resident, you can submit an appeal by going to our privacy request page .

California Consumer Privacy Act:

Note: This California section uses certain terms that have the meaning given to them in the California Consumer Privacy Act of 2018 (as amended by the California Privacy Rights Act of 2020) and its implementing regulations.

Sale and Sharing of Personal Information

We may sell or share personal information with third parties for various purposes including cross-context behavioral advertising or sharing among Walmart-affiliated entities. These kinds of disclosures may be deemed selling or sharing personal information under California law and you have the right to opt out of these disclosures. We may sell or share for cross-context behavioral advertising purposes (and may have sold or shared during the 12-month period prior to the Last Updated date of this Notice) the following categories of personal information to the following categories of third parties:

Sale or Share of Personal Information of Consumers under 16 Years of Age

We do not knowingly sell or share (for cross-context behavioral advertising) the personal information of consumers under 16 years of age. For more information about treatment of children’s personal information, see the Children’s Privacy section above.

What Are Your California Privacy Rights?

If you are a California resident, you can make certain requests regarding your personal information, and we will fulfill each request to the extent required by law. If we are unable to comply with your request in whole or in part, we will notify you with reasons for the denial.

As stated in more detail below, you can request that we:

1. Provide you with access to a copy of and certain details regarding the personal information we have about you.
2. Delete your personal information.
3. Stop selling your personal information or sharing your personal information for cross-context behavioral advertising.
4. Correct your inaccurate personal information.
5. Limit the use or disclosure of your sensitive personal information (SPI).

To exercise any of these privacy rights, call 1-877-294-7737, press one, and say, “I’d like to exercise my privacy rights.” Or follow the instructions below specific to the type of request.

1. Request to Access My Personal Information: You have the right to request access to the personal information we may have collected about you. To access your personal information, click “Request My Personal Information.”

Requests to access your personal information may be submitted up to two times in a rolling twelve-month period. In response, we will return to you the following categories of information, to the extent required by law:

• The categories of personal information we have collected about you.
• The categories of sources from which we collect your personal information.
• The business or commercial purpose for collecting, selling, or sharing your personal information.
• The categories of third parties to whom we disclose personal information.
• The specific pieces of personal information we have collected about you.
• A list of categories of personal information that we have sold or shared for cross- context behavioral advertising, along with the categories of third parties we sold it to or shared it with for cross-context behavioral advertising.
• A list of categories of personal information that we have disclosed for a business purpose, along with the categories of third parties we disclosed it to.
2. Delete My Personal Information: You have the right to ask that we delete your personal information. Once we receive a request, we will delete the personal information (to the extent required by law) we hold about you as of the date of your request from our records and direct our service providers to do the same. Choosing to delete your personal information may impact your ability to use our websites and online features, including closure of your online account, and limit your use of in- store functions that require your personal information. To delete your personal information, click “Request My Personal Information.”
3. Stop Selling or Sharing My Personal Information: You have the right to opt-out of the sale of your personal information or sharing of your personal information for cross-context behavioral advertising and can request that we stop by clicking “My Privacy Choices” or by using the Global Privacy Control as described below.

   Your opt-out request may be processed differently depending on whether you are logged into your account. If you are logged in, your preference will be associated with your account, and the device on which you exercised your choice. When you log in from another device or browser, it too will be automatically opted out. If you are not logged into your account, your request will only be associated with that one browser. We also support your use of the Global Privacy Control (GPC). If you notify us of your privacy preferences through GPC, we will honor your request with respect to the browser or device that sends us the GPC signal, and when you login to your account from that device, the opt-out will extend to your account, as well. If you change your preference from opt-in to opt-out, you may be asked to confirm your preference prior to it taking effect. After opting out of the sale of your personal information or sharing of your personal information for cross-context behavioral advertising, you may still receive ads from us, however they will not be tailored to you.

4. Correct My Personal Information: You have the right to ask that we correct the personal information we may have collected about you if that information is inaccurate. We reserve the right to request identifying documentation from you in certain circumstances, as permitted by law. To correct your personal information, click “Request My Personal Information.”
5. Limit the Use and Disclosure of SPI: You have the right to ask that we limit our use and disclosure of your SPI to certain purposes permitted by law and can do so by clicking “My Privacy Choices.”

We will not discriminate against you for exercising your rights. We will not deny you goods or services, charge different prices or rates, provide a different level of service or quality of goods, or suggest that you might receive a different price or level of quality for goods. Some programs or membership services require usage of personal information to function, so compliance with your request may impact those experiences.

How Do We Verify Your Identity to Complete Your Access, Correction and Deletion Requests:

If you request access to, or the correction or deletion of, your personal information we will verify your identity before disclosing the requested information. To do so, we may ask that you log into your account or provide us with your:

• First name*, Middle initial, Last name*
• Address*
• Email address
• Phone number

*Required Field

When you make a request, you will be asked to answer a few questions about yourself to help us verify your identity. Third-party identification services may help us with verification to prevent disclosure of your personal information resulting from fraudulent requests. You may be asked to log into your online account and complete a one-time passcode validation. In the event more documentation is necessary to verify your identity, we will notify you directly.

What If You Can’t Verify My Identity? If we can’t verify your identity, we will notify you, and your request(s) to access, request, or delete your personal information may not be processed. Any requests may be denied if we have reason to believe they are fraudulent.

How Do I Submit a Request Using an Authorized Agent? If you’d like an authorized agent to exercise your rights for you, they may use the same links described above to submit requests. We require documentation demonstrating your agent’s authority to submit requests on your behalf. For example, a valid power of attorney or other documentation, including a letter, signed by you (the California resident) authorizing the agent to submit your requests. You can download a sample letter from the request form. Documentation may be uploaded at the time you submit your request on our website or provided to us up to 10 business days after. If you submit your request by calling, you can email your forms to  consumerprivacy@wal- mart.com .

Number of Requests Received in 2022 To view metrics about our privacy requests, click How Many California Consumer Privacy Act Requests Did We Fulfill Last Year? .

Shine the Light California residents also have the right to request that we provide you with (a) a list of certain categories of personal information we have disclosed to third parties for their direct marketing purposes during the immediately preceding calendar year and (b) the identity of those third parties. To exercise this right, contact us at the address provided in the How to Contact Bonobos section below.

Notice of Financial Incentive If we provide a financial incentive, we will provide you with the details, including how the incentive is related to your data before you participate so that you may make an informed decision about whether and how to participate. In the event you decide to take advantage of a financial incentive, you will always have the right to withdraw from participation and we will provide you with directions on how to do so.

HOW TO CONTACT BONOBOS

Please contact us if you have any questions or comments about our privacy practices or this Privacy Notice. You can reach us online at privacy@bonobos.com or you can write to us at:

Bonobos, Inc.
Attn: Legal
45 W. 25th Street, 5th Floor
New York, NY 10010