Effective Date: Sunday, March 2nd, 2025

This Privacy Policy (“Privacy Policy”) describes how C.C. Filson Co. and our affiliated entities (collectively, “Company,” “we,” “us,” or “our”) may collect, use, and disclose personal information that we collect through our website at filson.com or through other websites that link to this Privacy Policy (the “Site”). If you are a resident of California or certain other U.S. states, please visit our Additional Disclosures for U.S. States section for more information.

This Privacy Policy is incorporated into and made a part of our terms, any applicable mobile app end user license agreement, and any other agreement that references this Privacy Policy or governs access to or use of the Site (together, our “Terms”).

By accessing, browsing, or otherwise using the Site, by accepting or entering into our Terms, you agree on behalf of yourself and any organization or company that you represent (together, “you”) that you have read and understand this Privacy Policy and that you consent to our collection, use, and disclosure of your personal information and other collected information pursuant to the terms of this Privacy Policy. If you do not agree with this Privacy Policy, do not access or use the Site.

1. PERSONAL INFORMATION WE OBTAIN

We may obtain the following categories of personal information directly from you, automatically when you visit our Site, or from our service providers or third parties, depending on how you interact with us:

• Identifiers, including names, contact information, Internet Protocol (“IP”) address, Site login credentials, or other similar identifiers.
• Personal Records, including your signature and telephone number.
• Characteristics of Protected Classifications, including age and gender.
• Internet or Other Electronic Network Activity, including device identifiers, mobile network, operating system details, MAC address, IP address, log files, cookies, language preferences, referring URLs, length of visits, traffic data, pages viewed, and information regarding interactions with the Site.
• Geolocation Data, including approximate location, which may be based on your ZIP code or IP address.
• Commercial Information, including billing address information, amount and types of orders, services and products requested or purchased, shipping information.
• Audio, Electronic, Visual, Thermal, Olfactory, or similar information, including photos and videos you upload to the Site.
• Inferences, including inferences from other personal information we process to create a profile about you reflecting your preferences and interests.

We may also collect information about you from external services, such as if you choose to use an online feature offered through another website, in connection with tracking technology.

Payment. Payments submitted in connection with the Site must be made via the Site by credit, debit card, or through alternate payment methods (such as Google Pay, PayPal, etc.) where such alternate payment methods are made available as an option. Please note that alternate payment methods may be provided by third parties (e.g., Google Pay via Google), subject to that third party’s privacy policy. This Privacy Policy does not apply to such third party’s collection and use of your information. Please review the applicable third party’s privacy policy. With regard to credit and debit card payment, all credit and debit card information is provided directly to our third-party payment processor. To submit payment using the Site, you will need to provide your name, email address, telephone number, and your credit or debit card number, expiration date, and security code, as well as any such information as necessary to verify the applicable payment. Our payment processor will use your payment-related information in accordance with its privacy policy. Where online storefront on the Services is hosted or powered by a third party, we encourage you to review any posted terms and privacy policies.

User-Generated Content. You are responsible for any data, information, images, messages, documents, and other content that you enter, submit, create, post, upload, transmit, or otherwise provide through or using the Site, including by providing feedback, participating in forums or discussion boards, by uploading or providing photographs, by submitting product reviews or testimonials, by commenting on blog posts, or by populating a user account or profile (where such options are made available to you). “User-Generated Content” means all data, feedback, information, images, messages, documents, and other content that is entered into, submitted to, posted on, uploaded to, transmitted, streamed, created, or displayed using, or otherwise provided via or using the Site by you or on your behalf. All User-Generated Content is provided at your own risk. We cannot guarantee that User-Generated Content you provide will not be viewed by unauthorized persons. You understand that, even after removal, copies of User-Generated Content you have provided may remain viewable in cached and archived pages and may have been copied or stored by Internet archives and other Site users. We will make User-Generated Content available, including publicly available, to other Service users and to the public, as applicable and at its sole discretion, and will use and disclose User-Generated Content for the purpose for which it was provided as indicated at the point of collection. For more information on User-Generated Content, please review our Terms of Use.

2. HOW WE USE PERSONAL INFORMATION

We may use personal information for the following purposes:

• Provide Services You Request, including by maintaining or servicing your account; operating and maintaining our Site; providing information about our services; processing your payments and orders; communicating with you about our services; and responding to your requests and questions.
• Communicate With You, including providing account notifications or order status updates; providing product recall notifications; confirming your preferences; engaging with you on social media; or providing you information about relevant programs, contests, sweepstakes, or other promotions or offerings.
• Promotional Communications, to the extent permitted by applicable law and in accordance with your preferences, use collected information to send you promotional communications about Company and our products and services. We will obtain your prior consent for such promotional communications solely to the extent required by applicable law. In order to provide you with a personalized experience, these communications may be tailored to your preferences based on, for example, inferences we make using your visits to the Site or the links you click on in Company emails. Please note that pixel tags, cookies and other online trackers may be used within emails to track your interactions with those websites and when emails are opened. You may opt out of receiving promotional communications from us at any time by following the unsubscribe instructions contained in the applicable email or by contacting us using the contact information provided below under “Contact Us.” Specifically with regard to text messaging, if you opt in to receiving text messages (SMS and MMS) on the Site when prompted, Company may send you autodialed and other text messages at the telephone number you provide relating to your use of the Site. Consenting to receiving text messages is not required to buy goods or services or to otherwise do business with us. Message and data rates may apply. Note that, even if you opt out of receiving promotional communications from Company, you may still receive administrative communications from us with respect to your use of the Site.
• Improve How We Do Business, including improving our products and services and your shopping experience.
• Conduct Business Analytics, including forecasting and planning, developing statistics on engagement with our Site, and measuring how well marketing and promotional activities perform.
• Security and Integrity, including protecting our Site from cyber risks; authenticating Site users; preventing, identifying, investigating, and responding to fraud, illegal or malicious activities, and other liabilities; enforcing our policies and terms; protecting our rights; fulfilling our legal obligations; and generally providing you with a secure experience when using our Site.
• Quality, Safety, and Internal Research, including evaluating how our services perform; repairing or improving the quality of our services; tracking and responding to quality and security issues; and developing new or enhanced products and service offerings.
• Advertising and Marketing, including measuring the use of our services and effectiveness of our advertising and marketing; and uncovering insights to improve our services and provide our users with enhanced features and functionalities, such as personalized experiences.
• Operate Our Business, including performing system administration and technology management, including optimizing our Site; for recordkeeping and auditing purposes; for risk management, investigations, reporting and other legal and compliance reasons; identifying prospective customers, business clients, suppliers, and other vendors; administering our relationships with our customers, business clients, suppliers, and other vendors; fulfilling purposes that we describe to you at the time we collect your information and in connection with mergers, acquisitions, divestitures, or similar corporate transactions.
• Lawful Processes & Protection of Company, including in accordance with and in response to regulatory authorities, courts with competent jurisdiction, valid law enforcement requests, governmental agency requests, emergency services, and other necessary third parties for legal, protection, security, and safety purposes (e.g., to comply with laws or regulations, to respond to subpoenas and legal processes, to perform credit checks, to protect the safety of our employees, agents, and customers, or any other person). We may use collected information and share it with third parties if we believe doing so is necessary or appropriate to protect our rights or the rights of others, including to enforce our agreements, policies, and terms, to bring legal action, to protect our operations and assets, or to pursue remedies or limit damages that we may sustain.
• De-Identified and Aggregated Data, including to de-identify and/or aggregate personal information and User-Generated Content, and aggregate other collected information, and use and disclose that aggregate and/or de-identified data for our business purposes, in each case to the extent permitted by applicable law. To the extent we create de-identified and/or aggregate personal information, we take reasonable measures designed to maintain such information in de-identified and/or aggregate form. Once de-identified or aggregated, we will not attempt to re-identify the data (other than to confirm our de-identification and aggregation processes worked).
• Consent, with your consent, we may use and share your personal information and other collected information in ways not specifically described in this Privacy Policy.

3. HOW WE DISCLOSE PERSONAL INFORMATION

We may disclose personal information to other parties for the following purposes:

Categories of Third Parties Disclosed to	Purposes for Disclosure
Identifiers Affiliates, Subsidiaries, and Related Entities. Subsequent owner(s), successor(s), or assignee(s) of Company. Third Party Service Providers, which include, for example, payment processing companies, data analytics and advertising providers, fraud prevention providers, cloud storage providers, IT service providers, delivery partners, and marketing companies. Law Enforcement.	Provide Services You Request Communicate with You Promotional Communications Improve How We Do Business Conduct Business Analytics Security and Integrity Quality, Safety, and Internal Research Advertising and Marketing Operate Our Business Lawful Processes & Protection of Company De-Identified and Aggregated Data
Personal Records	Same purposes as above.
Protected Classifications Under Applicable Law	Same purposes as above.
Internet or Other Electronic Network Activity	Same purposes as above.
Commercial Information	Same purposes as above.
Geolocation Data	Same purposes as above.
Audio, Electronic, Visual, Thermal, Olfactory, or Similar Information	Same purposes as above.
Inferences	Same purposes as above.

Co-Branded Services. From time to time, we may enter into an arrangement with another company that is not owned by or affiliated with us to provide additional features on the Site. These arrangements may include business partners, sponsors, and co-branded online services (referred to here as “Co-Branded Services”), some of which may link out to the applicable partner’s websites and services. This Privacy Policy does not apply to any such partners’ use of your personal information. By participating in activities or providing your information on these Co-Branded Services, you hereby direct us to provide your information to those partners. Separate privacy policies may apply to these partners’ uses of your personal information.

We may combine your personal information with data we obtain from our Site, our services, other users, or third parties. We reserve the right to convert, or permit others to convert, your personal information into deidentified, anonymized, or aggregated data, as permitted by law.

4. COOKIES, TRACKING TECHNOLOGIES, AND INTEREST-BASED ADVERTISING

As you navigate and use the Services, certain information can be passively collected using various technologies. We passively collect a variety of types of information in a variety of ways, including as described below.

User Activity
We collect information on how the Site are used, for example, the features you use, the links that you click on, your search parameters, data reflecting transactions that have taken place using the Site, how you interact with other users, performance statistics, and other usage data. We collect information that your browser sends whenever you visit our Site (“Log Data”). This Log Data may include information such as your computer’s Internet Protocol (“IP”) address, browser type, browser version, the pages of our website that you visit, the time and date of your visit, the time spent on those pages and other statistics.

IP Addresses and Related Data
The servers used to operate and provide the Site may collect data pertaining to you and the equipment, software, and communication methods you use to access the Internet and the Site, including IP addresses assigned to the computers and other devices from where you access the Internet, your Internet service provider (ISP), device ID numbers and unique identifiers, your media access control (MAC) address, your operating system, your device’s screen resolution, your web browser type, the pages you access on the Site, the websites you access before and after visiting the Site, the length of time you spend on the Site, date and time stamps, clickstream data, your approximate geographic location, performance statistics, and usage data. Company may use this information to administer the Site and their servers, to generate statistical information, to monitor and analyze Site traffic and usage patterns, to monitor and help prevent fraud, to investigate complaints and violations of our policies, and to improve the Site.

We may combine this information with other collected information (including personal information) and information obtained from third parties for security reasons and to protect our rights or the rights of others. The suppliers that we use to provide the Site may collect information about your visits to the Site and other websites. Some of this information may be collected using cookies and similar tracking technologies as explained below.

Cookies and Tracking Technologies
The Site automatically uses cookies to track your use of the Site in order to facilitate and enhance the user experience on the Site and for other purposes as described below. Cookies are small pieces of information that are stored on your device’s hard drive by your web browser. We use cookies to learn and track how you access and use the Site, including when and how users visit the Site and how popular particular Site pages are and aren’t. We also use cookies to recognize Site users, to help display information on the Site, and to improve your enjoyment and the usefulness of the Site, for example, by remembering and displaying certain information.

The Site may use both cookies that we implement and cookies implemented by our suppliers and other third parties. “First-party” cookies allow your browser to talk to the actual website that you are visiting, whereas “third-party” cookies allow your browser to talk to third-party websites, such as the source of an ad that appears on the website you are visiting or a third-party analytics provider. Our suppliers may use cookies and tracking technologies to track Site users across the Internet to understand how you get to the Site and for the analytics purposes disclosed in this Privacy Policy. We do not have access to or control over these cookies and this Privacy Policy does not cover the use of third-party cookies. Click here for information on the cookies used by Meta. Click here and here for information on the cookies used by Google.

A cookie can either be a “session” cookie or a “persistent” cookie. Session cookies exist only for so long as you are visiting the applicable website. Session cookies are typically deleted or removed when you exit or quit your browser application. Persistent cookies exist for a set period of time, for example, six (6) months or one (1) year. Each time you visit a website that has implemented a persistent cookie, that cookie will remain active until its predetermined expiration date. You can also manually delete persistent cookies as discussed above.

The types of information collected by a cookie and the purposes for which that information is used depends on the type of cookie. By way of illustration, the types of cookies used, the types of information collected by those cookies, and the purposes for which that information are used are described below. We may combine information collected by cookies with other collected information.

• Operationally necessary cookies (also called essential cookies). These are cookies that are required for the operation of the Site. For example, these cookies are required to identify irregular website behavior, prevent fraudulent activity, and improve security. They also allow users of the Site to make use of its functions. Without these cookies, features and services you have requested will not be able to be provided.
• Functional cookies. These cookies allow us to offer you enhanced functionality when accessing or using the Site. This may include remembering choices you make, for example, remembering your preferences or settings, remembering if you reacted to something on or through the Site so that you are not asked to react to it again, remembering if you have used any feature of the Site before, and enabling social media components. If functional cookies are disabled, various functions of the Site may be unavailable to you or may not work the way you want them to.
• Performance cookies (also called analytical cookies). These cookies assess the performance of the Site, including as part of our analytic practices to help us understand how visitors use and interact with the Site, for example, which pages on our websites users visit most often. These cookies also enable us to personalize content and remember your preferences. These cookies help us improve the way our websites work and provide a better, personalized user experience.
• Advertising or targeted cookies. These cookies record your visits to the Site, the pages you visit on our websites, and the links you have clicked. They gather information about your browsing habits and remember that you have visited a particular website. Company and its third-party advertising platforms or networks may use this information to make the Site and its content more relevant to your interests (this is sometimes called “behavioral” or “targeted” advertising and is further discussed above). These cookies are also used to limit the number of times you see an advertisement and to help measure the effectiveness of advertising campaigns. To find out more about interest-based ads and your choices, please visit the Digital Advertising Alliance, the Network Advertising Initiative, the Interactive Advertising Bureau (IAB) Europe, http://www.allaboutcookies.org, and http://www.youronlinechoices.com.

For more information about cookies, including about advertising cookies and your choices regarding cookies, we suggest you visit the following websites: https://www.consumer.ftc.gov/articles/0042-online-tracking; http://www.allaboutcookies.org; and http://www.youronlinechoices.eu.

Most browsers automatically accept cookies. Browsers generally also allow users to manage cookies in the browser’s settings. For example, a browser may allow you to reject cookies from certain websites, reject certain types of cookies regardless of the website, reject or disable all cookies from all websites, and/or delete previously stored cookies. Some browsers also give you the option of being notified every time a cookie is sent to your browser by a website. You can disable or limit cookies but doing so may impact your use and enjoyment of the Site and other websites. For example, the Site may not be able to be personalized for you, may no longer capture or remember your preferences or other choices you have made on the Site in the past, and may not remember your name or contact information or other information you have entered using the Site, and our website may not recognize the device(s) you use to access the Site.

Changing your cookie preferences in one browser will not necessarily carry over to other browsers, so you may need to adjust your preferences each time you get a new device, install a new browser, upgrade an existing browser, or alter or delete a browser’s cookie file.

The Site may also use the following types of tracking technologies: web beacons (also called clear GIFs), flash cookies, and pixels (also called pixel tags). Web beacons are tiny graphics with unique identifiers that function similar to how cookies function but, in contrast to cookies, web beacons are embedded invisibly on websites. Flash cookies collect and store information about your use of a website and are commonly used for advertisements and videos. Cookie management tools provided by your browser will not remove and cannot be used to manage Flash cookies. Click here for information on how to manage Flash cookies. Pixel tags can be placed on websites or within emails to track your interactions with those websites and when emails are opened.

Analytics. The Site uses third-party analytics tools (e.g., Google Analytics) to collect and process data about your use of the Site, including when you visit the Site, URLs of the websites that you visit prior to visiting the Site and when you visit those websites, and IP addresses assigned to the devices from where you access the Internet. Our analytics providers may set and read cookies to collect this data, and your web browser will automatically send data collected by those cookies to our analytics providers. Our analytics providers use this data to provide us with reports that we will use to improve the Site’s structure and content.

For more information on how Google uses this data, visit Google’s Privacy Notice and Google’s page on How Google uses data when you use our partners' sites or apps. To prevent this data from being used by Google Analytics, follow the instructions to download and install the Google Analytics Opt-out Browser Add-on for each browser you use. Using the Google Analytics Opt-out Browser Add-on will not prevent Company from using other analytics tools and will not prevent data from being sent to the Site itself or to Google. For more information about how Google Analytics uses cookies to measure user interactions on websites, visit Google Analytics Cookie Usage on Websites. You may disable cookies as discussed below, but that may impact your use and enjoyment of the Site.

Interest-Based Advertising
Interest-based advertising (also known as online behavioral advertising) occurs when advertisements are displayed to you based on information collected from your online interactions over time and across multiple websites that you visit, or across multiple devices or online services that you may use. Companies that engage in interest-based advertising use this information to predict your preferences and show you ads that are most likely to be of interest to you.

Some of the content, applications, and tracking technologies on our websites and mobile applications is controlled by third parties, which include ad tech companies (such as Meta or Google) or other online service providers that serve interest-based advertisements. These third parties may use Cookies, web beacons, and other storage technologies to collect or receive information from our Site and elsewhere on the internet and use that information to provide measurement services as well as for interest-based advertising.

We do not control these third parties' collection or use of your information to serve interest-based advertising. However, these third parties may provide you with ways to choose not to have your information collected or used in this way. Through Google Ads, Google uses your Internet searches, cookies, and similar identifiers (e.g., pixel tags) to collect information about your visits to the Site and your interaction with our products and services to generate targeted advertisements to you on other websites that you visit across the Internet. We may also enable and implement Google Analytics Advertising Features on the Site. To opt out of remarketing advertising provided through Google, to customize your ad preferences, or to limit Google’s collection or use this information, visit Google’s Safety Center and Google’s Ad Settings and follow Google’s personalized ad opt-out instructions.

For certain Meta advertising services, Meta Ireland is a Joint Controller (as defined in the GDPR) and that information required under the GDPR related to such processing can be found at https://www.facebook.com/about/privacy. We work with Meta and use their advertising services to measure and improve our ads and marketing efforts, as well as to display more relevant advertising to you. For further information on how Meta Ireland processes your personal information, including the legal basis, and the ways to exercise your rights, please visit https://www.facebook.com/about/privacy.

You can block the collection and use of information related to you by online platforms and ad tech companies for the purpose of serving interest-based advertising by visiting the following websites of the self-regulatory programs of which those companies are members:

• The Network Advertising Initiative’s opt-out page
• The Digital Advertising Alliance’s opt-out page

Please remember that changing your settings with individual web browsers or ad networks will not necessarily carry over to other browsers or ad networks. As a result, depending on the opt-outs you request, you may still see our ads from time to time. Your device may also include a feature (“Limit Ad Tracking” on iOS or “Opt Out of Interest-Based Ads” on Android) that allows you to opt out of having certain information collected through apps used for behavioral advertising purposes. You may still see “contextual” ads even if you opt out of interest-based ads. These ads, however, are based on the context of what you are looking at on the websites and pages you visit. Even if you opt out of interest-based ads you will still receive these non-personalized, contextual ads.

Your Cookie Choices
Your web browser may have settings that allow you to transmit a “Do Not Track” signal when you visit various websites or use online services. Like many websites, our Site is not designed to respond to “Do Not Track” signals received from browsers. To learn more about “Do Not Track” signals, visit allaboutdnt.com. You may set your browser to notify you of or decline the receipt of cookies; however, certain features of the Site may not function properly or be available if your browser is configured to disable cookies. We are not responsible for opt-out processes provided by external parties.

Additionally, residents of certain U.S. states may opt out by broadcasting an Opt-Out Preference Signal under applicable law, including the Global Privacy Control (GPC), depending on which browsers and/or browser extensions you use that may support such a signal. To look at extensions and browsers supporting the GPC browser signal, visit https://globalprivacycontrol.org/. Note that if you choose to use the GPC signal, you will need to turn it on for each supported browser or browser extension you use.

5. INTERACTIVE FEATURES AND THIRD-PARTY INTEGRATIONS

Live Chat
We may engage vendors to provide certain interactive features on the Site. Your use of these interactive features is voluntary, and we may retain the information that you submit through the features. For example, we may offer an interactive chat feature on our Site to answer questions and for other customer service purposes. When you participate in the interactive chat, either with a virtual or live agent, the contents of the chat may be captured and kept as a transcript. By using these features, you understand that our vendors may process the information obtained through the feature to provide the service on our behalf.

Social Media
The Site may implement widgets, tools, or applications provided by social media platforms and the Services may otherwise allow for interaction, integration, or content sharing with third-party social media platforms and companies. We may be required to implement cookies, plug-ins, and APIs provided by those social media platforms in order to facilitate those communications and features. By choosing to use any third-party social media platform or choosing to share content or communications with any social media platform, you allow us to share information with the designated social media platform. Interactions, integrations, and content sharing with a social media platform and their features may require or allow the social media company to collect information from or about you, whether through cookies, registration information, or otherwise. Social media companies may track your online activity even when you do not choose to interact with the social media platform or its widgets or other features. We encourage you to review the privacy policy of any social media platform that you use or visit in connection with the Site, as those platforms’ respective privacy policies will govern their collection, use, and disclosure of information they collect from you. We cannot control any policies or terms of such third party platform. As a result, we cannot be responsible for any use or disclosure of your information or content by third-party platforms, which you use at your own risk.

The Site may also use the advertising services and networks offered by social media platforms to deliver advertising content. Use of these services requires social media platforms to implement cookies or pixel tags to deliver ads to you while you are logged into the applicable social media platform.

If you do not want social media platforms to collect information relating to you via the Site or to link information collected via the Site to your social media accounts, we suggest that you: (a) do not connect to or share information with social media platforms using the Site; (b) hide social media platform plug-ins using an ad blocker; (c) always log off completely from social media platforms before visiting the Site or other websites and delete all related cookies; and, (d) where the option is made available by a social media platform, disable the advertising services and networks operated by that platform. You hereby acknowledge that Company makes no guarantee that exercising the foregoing options is guaranteed to prevent applicable social media platforms from tracking you and, further, you acknowledge that Company is not responsible for a social media platform’s tracking of you.

Additionally, Company is active on social media. You may have the opportunity to comment on social media platforms regarding, as well as send us reviews and testimonials regarding, Company and the products and services we offer and/or to submit or upload related photos and other materials. Company reserves the right to post on the Site, other websites, and social media pages any comments, photos, or content that you post on our social media pages or provide to us (whether through social media or otherwise) to the extent permitted by applicable law.

Embedded Content
We may also offer third-party integrations on the Site. If you choose to connect a third-party account to our system, you should refer to that party’s privacy policy for information on how your personal information is collected, used and protected. One such integration is YouTube API Services, which may serve content and collect, store, use, process, and disclose from your devices as described in this Privacy Policy. For more information about the YouTube API Services, please refer to YouTube’s Terms of Service. In addition to exercising your choices as described in this Privacy Policy, you can revoke access to your personal information collected and processed through the YouTube API Services using Google’s security settings at security.google.com/settings/security/permissions.

6. SWEEPSTAKES, CONTESTS, AND PROMOTIONS

We may use your personal information to send you marketing materials, to conduct surveys, contests, sweepstakes, and to award prizes. We may request additional information to participate in contests and surveys (such as your contact information, photos, personal opinions, preferences, and interests). Participation in these promotions is completely voluntary and you may choose whether or not to participate and therefore disclose your information. Contact information will be used to notify the winners and award prizes. Your personal information may be disclosed to third parties or the public in connection with the administration of a promotion, including, without limitation, in connection with winner selection, prize fulfillment, and as required by law or permitted by the promotion’s official rules, such as on a winner’s list. Our surveys, contents, sweepstakes and other promotions may be subject to additional terms and conditions.

7. EXTERNAL WEBSITES

The Site may contain links to external websites. Please be aware that we cannot control and are not responsible for the information collection practices of such websites, which may differ from our privacy practices. We encourage you to review and understand the privacy policies of these websites before providing any information to them.

8. YOUR CHOICES

Please allow a reasonable amount of time for any changes to your settings to take effect.

Account Information
If you have an account with us, you can log in and update, modify, and delete your personal information from within your account.

Marketing
You may choose to provide us with your email address for the purpose of allowing us to send newsletters, surveys, offers, and other promotional materials to you, as well as targeted offers from third parties. You can stop receiving promotional emails by logging into your account or following the unsubscribe instructions in emails that you receive. If you decide not to receive promotional emails, we may still send you service-related communications.

Catalogs
To opt out of receiving catalogs by mail, please visit https://www.shinola.com/catalog-unsubscribe.html and https://www.filson.com/catalogunsubscribe.html. Note that you may still receive other mailers and flyers sent to your physical mailing address.

Cookies, Tracking Technologies, and Interest-Based Advertising
Information about Cookies and interest-based advertising and how to opt out are described in the Cookies, Tracking Technologies, and Interest-Based Advertising section of this Privacy Policy. If you disable certain cookies, please note that some parts of our websites may not function properly. If you have opted-out of sales or set other preferences, then those opt-outs or preferences may be lost if you delete your cookies.

Privacy Rights
The purpose of this section of the Privacy Policy is to inform you of our privacy options. Some U.S. states and other jurisdictions outside of the U.S. provide these options and rights to their residents.

Depending on the laws applicable to Company’s processing of your personal information and the location in which you reside, you may have the ability to exercise the rights listed below and in this section of the Privacy Policy. Subject to foregoing, in addition to all application limitations, exemptions, or exceptions—regarding our collection and use of your personal information—these rights may include, to the extent applicable:

• Right to Confirm: The right to confirm whether we are processing your personal information.
• Right to Access: You may have the right to request access to any of your personal information that we hold. Specifically, you may have the right to request the disclosure of (1) what personal information has been collected; (2) the categories of sources from which the personal information was collected; (3) the business or commercial purpose for collecting or selling personal information; (4) the categories of personal information sold and to what third parties it was sold to (if applicable); (5) the categories of third parties with whom we share personal information and to what third parties it was shared with; and (5) the specific pieces of personal information we have collected about you.
• Right to Data Portability: You may have the right to receive all such personal information about you from Company in a structured, commonly used and machine-readable format, and also to require us to transmit it to another entity where this is technically feasible.
• Right to Deletion: You may have the right to request the deletion of your personal information that we have collected.
• Right to Correction: You may have the right to request the correction of your personal information that we collected.
• Right to Lodge a Complaint: You also may have the right to lodge a complaint with a government regulator (e.g., your state attorney general) or supervisory authority, in particular in your country of residence, if you consider that the collection and use of your personal information violates this Privacy Policy or applicable law.

To exercise these rights, please see the “Exercise Your Rights” section of the Privacy Policy below. Additionally, if you have any concerns, complaints, or other issues with regard to our collection, use or other processing of your personal information, please contact us via the means set forth under the “Contact Us” section of the Privacy Policy below.

9. SITE VISITORS FROM OUTSIDE THE UNITED STATES & TRANSFERS

The Site is hosted in the United States. If you are visiting the Site from outside the United States, please be aware that your information will be transferred to, stored, and processed in jurisdictions other than your country of residence, including the United States. The data protection laws of these jurisdictions, including the United States, might not be the same as those in your country. By accessing, receiving, or using the Site or by providing consent to us (where consent is required by applicable law), you specifically acknowledge and agree that information will be transferred outside of the country from which you access the Site (including, for example, to the United States) and that such countries’ data protection and related laws, regulations, and rules may be different than, and may not be as protective as, those of the jurisdiction from where you access the Site. Your use of or access to the Site constitutes your consent to such transfers.

Additionally, where required by applicable law, we have ensured that your personal information included in such transfers is adequately protected through the use of contractual clauses or other adequate measures allowed or required under such applicable laws for example, by signing relevant EU standard contractual clauses as approved by the European Commission (the form for these clauses can be found here). Subject to applicable law, you have the right to obtain details about the mechanism under which your personal information is transferred cross-border. For more information about these transfer mechanisms, please contact us as set out in the “Contact Us” section below.

10. SECURITY

Personal information you provide to us should be relevant to the purposes for which it is to be used, and, to the extent necessary for those purposes should be accurate, complete, and up to date. We have implemented reasonable procedural, technical, and physical safeguards to protect personal information against unauthorized or illegal access, destruction, use, modification, disclosure, loss or theft. We want you to feel confident using the Site. However, no data transmission or storage system is guaranteed to be completely secure in all circumstances.

11. CHILDREN

The Site is not intended for, nor targeted to, children under 16, and we do not knowingly collect any personal information from children under 16. If we become aware that an individual submitting information is under 16, we will delete the information in accordance with applicable law.

12. RETENTION

We will retain your personal information for as long as it’s needed to fulfill the purposes outlined in this Privacy Policy and our Terms unless a longer retention period is required or permitted by law (e.g., tax, accounting, or other legal requirements).

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it; if that is not possible (e.g., because your personal information has been stored in back-up archives), we will securely store your personal information and isolate it from any further processing until deletion is possible.

13. STATE SPECIFIC DISCLOSURES AND RIGHTS

Certain U.S. states (for example, California, Colorado, Connecticut, Texas, Virginia) require additional disclosures and provide users residing in such U.S. states with additional choices and rights. This section of the Privacy Policy only applies to individuals located in such U.S. states and where such U.S. state data protection laws apply to Company’s processing of your personal information.

Sources. Consistent with the Privacy Policy above, we collect certain categories of personal information directly from you and, in some circumstances, third parties. The categories of sources that we collect personal information from in the prior 12 months includes the following:

• Our third party service providers;
• Advertising networks;
• Affiliated, subsidiaries, and related companies;
• Third party websites and mobile applications (e.g., websites that share information with us or our advertising partners);
• Social media companies;
• Our Site and services; and
• Your communications with us.

No Sensitive Personal Information. We do not knowingly collect information that is considered “sensitive” under applicable law.

Rights. Applicable laws in your jurisdiction may grant you certain rights—subject to all applicable limitations, exemptions, or exceptions—regarding our collection and use of your personal information. In addition to those rights set forth in the “Privacy Rights” section of the Privacy Policy above, these rights may include, to the extent applicable and to the extent granted under applicable law:

• The right to opt-out of targeted advertising and the sharing of personal information that is shared for cross-contextual behavioral advertising purposes;
• The right to opt-out of the sale of your personal information;
• The right to not be discriminated against due to your exercise of your rights under applicable law. We do not discriminate against users for exercising the rights granted to them under applicable law and that are applicable to our processing of your personal information.

We do not use your personal information to profile you via purely automated means in furtherance of decisions that produce legal or significantly similar effects (as may be defined under applicable law).

The above rights are only exercisable by you where the applicable law grants you the right being exerted and where no exception or exemption under applicable law applies. You may also have a registered agent (if and only as permitted under applicable law) that you authorize to act on your behalf. If you have a registered agent act on your behalf, we have the right to authenticate such agent’s authority to act. To exercise the rights described herein (only to the extent applicable), you may submit a verifiable request to us by through the methods set forth under the “Exercise Your Rights” section below.

Selling and Sharing. We do not sell your personal information as the concept of “selling” is traditionally understood as being the exchange of something for money. However, we sell your personal information to, and share your personal information with, third parties for the purpose of cross-contextual behavioral advertising purposes (e.g., targeted advertising and remarketing). Applicable U.S. state data protection laws hold such disclosures and sharing to be considered “selling” or “sharing”. Therefore, you have the right to opt out of such selling and sharing. In the preceding 12 months, we have sold or shared the following categories of personal information with the following categories of third parties and for the following purposes:

Category of Personal Information Sold or Shared	Category of Third-Party Recipient	Purpose
Identifiers	Analytics, marketing, advertising, and remarketing partners and service providers	Analytical and targeted advertising purposes (including, without limitation, cross-contextual behavioral advertising). Specifically, to target advertisements for goods and services and to display those advertisements on other websites.
Internet or other electronic network activity information	Analytics, marketing, advertising, and remarketing partners and service providers	Analytical and targeted advertising purposes (including, without limitation, cross-contextual behavioral advertising). Specifically, to target advertisements for goods and services and to display those advertisements on other websites.

You have the right to opt out of the selling or sharing of your Personal Data as described herein. You may exercise this right to opt out by utilizing the Global Privacy Control as mentioned in the “How We Respond to Do Not Track Signals” section above, or by clicking the “Your Privacy Choices” option in the footer of the website and changing your settings as described on that pop-up. If you have any questions, concerns, or would like more information on our ability to opt out, you can contact us by emailing: customerservice@filson.com.

We do not knowingly sell or share for cross-contextual behavioral advertising purposes, the personal information of anyone under the age of 16 years old. See the “Children” section of this Privacy Policy above for more information.

California’s Shine the Light Law: California residents may ask us to provide them with (i) a list of certain categories of personal information that we have disclosed to other parties, including affiliates, for their direct marketing purposes during the immediately preceding calendar year, and (ii) the identity of those other parties. California residents may make one such request per calendar year. To make a Shine the Light request, you may contact us by email or postal mail using the information provided in the “Contact Us” section. In your request, please state that you are a California resident and provide a current California mailing address for our response.

14. ADDITIONAL INFORMATION FOR INDIVIDUALS LOCATED IN THE EEA

This section of the Privacy Policy applies to residents of countries or jurisdictions located in the EEA, including, without limitation, the European Union and the United Kingdom.

Legal Bases We Rely on When Processing Personal Information. To the extent the European Union’s General Data Protection Regulation or other similar law applies to you (including, without limitation, those located in the United Kingdom) and is applicable to Company, we process your personal information for the purposes set forth in this Privacy Policy under the following legal bases (as applicable):

• Our Contract With You: Our processing is necessary to perform our obligations under a contract with you or to perform steps requested by you prior to entering into a contract with you: (e.g., to verify the information you have provided to us).
• Our Legitimate Interests: Our processing is necessary for our legitimate interests, including to protect the security of our Services; to protect the health and safety of you or others; to establish, protect and defend our legal rights and interests; to prevent fraud and verify identity and authorization of clients; to understand and analyze usage trends; and to improve our products and services. Additionally, we have a legitimate interest in promoting our operations and goals as an organization and sending marketing communications for that purpose.
• Legal Compliance: Where our processing is required to comply with applicable law (for example, to maintain your payment transaction history for tax reporting purposes) e.g., in response to subpoenas, court orders and other lawful requests by regulators, courts and law enforcement agencies, or related to national security requests.
• Your Consent: When we have your express consent as defined by applicable law.

Rights. To the extent the European Union’s General Data Protection Regulation or other law granting particular rights to data subjects applies to you (including, without limitation, those located in the United Kingdom) and subject to all applicable exceptions and exemptions granted under such applicable laws, you may have the following rights with regard to our processing of your personal information in addition to those rights set forth in the “Privacy Rights” section of the Privacy Policy above:

• Right to Restrict Personal Information Use and Right to Object: You may have the right to restrict our use of your personal information where (i) you contest the accuracy of the personal information; (ii) the use is unlawful but you do not want us to erase the personal information; (iii) we no longer need the personal information for the relevant purposes, but you require it for the establishment, exercise or defense of legal claims; or (iv) you have objected to our personal information use justified on our legitimate interests pending verification as to whether Company has compelling interests to continue the relevant personal information use.

15. EXERCISE YOUR RIGHTS

If this Privacy Policy expressly stated above that you have certain rights or applicable law grants you certain rights as it relates to this Privacy Policy and collected information, you may submit a verifiable request to us by

• Telephone: [1-844-744-6652] [1-800-624-0201]
• Emailing: customerservice@filson.com
• Visiting: filson.com/pages/customer-care

Please note that to exercise your rights to opt-out of targeted advertising and/or the sale of your personal information, you must follow the instructions provided under the “Selling and Sharing” section of the Privacy Policy above. Only you or a registered agent (if and only as permitted under applicable law) that you authorize to act on your behalf, may make a verifiable consumer request related to your personal information. If you have a registered agent act on your behalf, we have the right to authenticate such agent’s authority to act. Without limiting the foregoing, the verifiable consumer request must:

• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative.
• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. Making a verifiable consumer request does not require you to create an account with us. We will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.

We will respond to your request within the applicable timeframe required under applicable law. If we deny your request, you can appeal such denial by emailing us at customerservice@filson.com. If the appeal is denied, you may submit a compliant to the applicable government regulator or authority in the jurisdiction in which you are located (which, for U.S. residents, includes the state Attorney General in the state in which you reside).

16. INTERNATIONAL TRANSFERS OF PERSONAL INFORMATION

Due to the fact that Company’s business is international, your personal information and other Collected Information may be transferred to, stored in, and processed in any country where our or our suppliers’ servers, databases, or facilities are located or operated. By accessing, receiving, or using the Services or by providing consent to us (where consent is required by applicable law), you specifically acknowledge and agree that information will be transferred outside of the country from which you access the Services (including, for example, to the United States, Canada, and [ ]) and that such countries’ data protection and related laws, regulations, and rules may be different than, and may not be as protective as, those of the jurisdiction from where you access the Services. Your use of or access to the Services constitutes your consent to such transfers.

Additionally, where required by applicable law, we have ensured that your personal information included in such transfers is adequately protected through the use of contractual clauses or other adequate measures allowed or required under such applicable laws for example, by signing relevant EU standard contractual clauses as approved by the European Commission (the form for these clauses can be found here). Subject to applicable law, you have the right to obtain details about the mechanism under which your personal information is transferred cross-border. For more information about these transfer mechanisms, please contact us as set out in the “Contact Us” section below.

17. CHANGES TO THIS POLICY

This Privacy Policy may change from time to time, which will be indicated by updates to the “Effective Date” at the beginning of this Privacy Policy. Your continued use of the Site after any update to this Policy will constitute your acceptance of the changes.

18. CONTACT US

If you have questions about this Privacy Policy, you can contact us at:

Filson Company
Attention Customer Service
6111 S. 288th St.
Kent, WA 98032

Email: customerservice@filson.com
Phone: 1-800-624-0201