Privacy Policy

Privacy Policy

Updated as of March 21, 2024

Fantastic Sams Franchise Corporation (“Fantastic Sams,” “we,” “us” or “our”) (A) owns the Fantastic Sams franchise system (the “Franchise System”) that operates under the trademarks of Fantastic Sams (the “Trademarks”), (B) licenses independently owned and operated Fantastic Sams salons (“Franchised Salon(s)”) the right to use the Franchise System and Trademarks, and (C) licenses subfranchisors (“Subfranchisors”) to use the Fantastic Sams Franchise System to license independently owned and operated Franchised Salons.

The purpose of this Privacy Policy (“Privacy Policy”) is to explain the types of information Fantastic Sams collects, uses, and shares about you when you when you visit or use the www.fantasticsams.com website (including any mobile optimized versions of our site) (the “Website”), any software applications made available by us for use on or through computer and mobile devices (the “App(s)”), any social media pages that we may control, any content offered by Fantastic Sams or when you otherwise contact or interact with us (collectively, the “Services”). The terms “you” and “your” refers to you, the user. If you are using the Services on behalf of a business, association, or other entity, “you” or “your” will also refer to such business, association, or other entity, unless the context clearly dictates otherwise. You agree that you are authorized to consent to these terms on behalf of such business, association, or other entity, and we can rely on this. This Privacy Policy also explains how Fantastic Sams may use and share your Personal Information (as defined in Section 1), as well as the choices available to you.

By using/continuing to use the Services, you acknowledge you have read and understand, and are agreeing to the collection, storage, use, and disclosure of your Personal Information as described in this this Privacy Policy, and you agree to the Terms of Use which is incorporated by reference. https://fantasticsams.com/terms If you choose to access or use the Services, your access and use, and any dispute over privacy is subject to this Privacy Policy and our Terms of Use, including, but not limited to, limitations on damages and resolution of disputes. If you do not agree with this Privacy Policy, please do not access or use the Services or provide us with any of your Personal Information (defined below).

This Privacy Policy does not apply to Franchised Salons or Subfranchisors

Franchised Salons and Subfranchisors are owned and operated by independent business- people, therefore this Privacy Policy does not apply to your interactions with Franchised Salons or Subfranchisors. For example, a Franchised Salon or Subfranchisor may use email or other methods of communicating with its guests. Each Franchised Salon and Subfranchisor is solely responsible for those types of communication, and you should contact the Franchised Salon or Subfranchisor (as applicable) directly to understand how it may treat your personal information.

Eligibility to Use the Services

To use the Services you must be, and represent and warrant that you are, at least the age of majority in your state, province or jurisdiction of residence and competent to agree to these terms; or if you are under the age of majority in your state, province or jurisdiction of residence, you represent and warrant that you are over the age of thirteen (13) and your parent or legal guardian has reviewed this Privacy Policy with you and accepts them on your behalf; parents or legal guardians are responsible for the activities of their minor dependents while using the Services.

Types of Personal Information We Collect

Generally, we may collect four (4) types of personal information about you: (A) information and content you give us directly; (B) information we obtain automatically when you use our Service; (C) demographic information; and (D) information we get about you from other sources. When we talk about “Personal Information” in this Privacy Policy, we are talking about any information collected in accordance with this section. Please see below for more information on each category.:

Information and Content You Give Us Directly
Personal Information. Personal information, such as your name, address, telephone number, e-mail address, username, password, and any other information you directly provide us on or through the Service.
Email Correspondences. Records and copies of your email messages together with your email address and our responses, if you choose to correspond with us through email.
Transaction Information. We or service providers working on our behalf may collect information and details about any purchase or transactions made on the Service. This includes payment information, such as your credit or debit card number and other card information; other account and authentication information; and billing, shipping, and contact details. We do not collect or store payment card information ourselves; rather we rely on third party payment processors (e.g., Stripe) to store and process this information as part of the Service.
Employment Information. We collect the employment information of employees of Fantastic Sams and job applicants, including contents of job applications.
Information We Obtain Automatically When You Use Our Services
1. Activity Information. Details of your visits to our Services, including the types of content you view or engage with; the features you use; the actions you take; the people or accounts you interact with; the time, frequency, and duration of your activities; and other information about your use of and actions on the Service.
2. Equipment Information. Information about your computer and internet connection, including your device or computer operating system, IP address, browser type, and browser language.
3. Location Information. Information about the location of your device, including GPS location, for purposes of enhancing or facilitating the Service. For example, we may use information about the location of the device you are using to help us understand how the Service and functionality are being used and to deliver more relevant advertising. If you do not want to share your location, you can disable location sharing in the settings on your device.
4. Cookies, Pixel Tags/Web Beacons, and Other Technologies. Cookies, pixel tags, web beacons, clear GIFs, javascript, entity tags, HTML5 local storage, resettable device identifiers, or other similar technologies (collectively, the “Technologies”) may be used by us, as well as third parties that provide the content, advertising, or other functionality on the Services to automatically collect information through your use of the Services. Please see Section 7 for more information on the technologies we may use for this automatic data collection.
Demographic Information

We may collect demographic, statistical, or other aggregate information that is about you, but individually does not identify you. Some of this information may be derived from Personal Information, but it is not Personal Information and cannot be tied back to you. Examples of such aggregate information include gender, age, and race.

Information We Get About You from Other Sources

We may receive information about you from other sources and add it to our information, including from third-party services and organizations who have the right to provide us with such information. We protect this information according to the practices described in this Privacy Policy, plus any additional restrictions imposed by the source of the data. These sources may include: online and offline data providers, from which we obtain demographic, interest-based, and online advertising related data; publicly-available sources such as open government databases or social networks; and service providers who provide us with information, and updates to that information, based on their relationship with you. By gathering additional information about you, we can correct inaccurate information, enhance the security of your transactions, and give you product or service recommendations and special offers that are more likely to interest you.

How is Personal Information Used by Fantastic Sams?

We may use the information we collect about you in a variety of ways, to provide our Service, for administrative purposes, and to market and advertise our Service and products.

We Use Your Personal Information to Provide Our Services

We may use your Personal Information to:

provide the Services and its content to you.
respond to your inquiries and/or fulfill your requests (for example, if you contact us with a question, we will use personal information like your email address or phone number to reply to your inquiry).
complete and fulfill any purchases or requests for services (for example, to process payment and initiate shipping of an order of products).
fulfill any other purpose for which you provide Personal Information.
communicate with you about an account.
inform you about important changes to, or other news about, the Services or any of its features or content.
We Use Your Information for Administrative Purposes

We may use your Personal Information to:

evaluate your candidacy for employment.
maintain, market and improve our loyalty program.
operate, maintain, improve, personalize, and analyze the Services.
monitor and analyze trends, usage, and activities for marketing or advertising purposes.
detect, prevent, or investigate security breaches, fraud, and other unauthorized or illegal activity.
carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection.
maintain appropriate records for internal administrative purposes.
allow you to participate in interactive features on the Services.
develop, improve, and analyze our predictive models, both experimental and underlying the Services.
We Use Your Information to Market and Advertise our Services and Products

We may use your Personal Information to:

send you marketing communications, such as information about features, newsletters, offers, promotions, contests, and events.
present products and services to you that we think may be of interest to you.
share information across Services and devices to provide a more tailored and consistent experience on the Services.
How is the Personal Information We Collect Disclosed or Shared?

We may share aggregated or de-identified information that does not identify you with third parties, franchisees, or affiliates for a variety of business purposes without any restrictions, including to provide our Service and/or to protect us or others, except as prohibited by law. We may share or disclose information in the event of a major business transaction such as a merger, sale, or asset transfer. The following circumstances describe in additional detail the ways we may share or disclose your Personal Information that we collect or that you provide under this Privacy Policy:

We Disclose Your Information to Provide Our Service
1. Franchisees, Subfranchisors, and Franchisees of Subfranchisors[1]. We may share your Personal Information with our franchisees, who individually own and operate Franchised Salons. We may also share your information with our Subfranchisors. Your Personal Information may also be shared with the franchisees of the Subfranchisor who individually own and operate Franchised Salons, either by us or the Subfranchisor.
2. Affiliates[2]. We may disclose your information to our affiliates, who may use your Personal Information as described in this Privacy Policy, including for their direct marketing purposes. (California residents have certain rights set forth below.)
3. Vendors and Service Providers. We may share your Personal Information with vendors and service providers with whom we, our affiliates, or our franchisees have a business relationship. For example, we may share your information with travel service companies, financial service companies, insurance companies, payment and credit card processing companies, accountants and legal advisors, and email delivery services such as advertising agencies and email or marketing automation providers and other vendors. Service providers are bound by contractual obligations to keep Personal Information confidential and use it only for the purposes for which we disclose it to them. Some of our aspects of our Service utilize framing techniques to serve content to you from our third-party providers, while preserving the look and feel of the Service. In such cases, please note that the information you provide is being provided to the third party.
4. Advertising/Marketing Service Providers. We may share your Personal Information with marketing service providers to assess, develop, and provide you with promotions and special offers that may interest you, administer contests, sweepstakes, events, or for other promotional purposes.
5. Consent or to Fulfill the Purpose that Information was Provided. We may share your Personal Information to fulfill the purpose for which you provide that information, with your consent, or for any other purpose disclosed by us when you provide the information.
6. Improvement of Analytics and Research Studies. We may share your Personal Information with research associates and other third-party research organizations to assess, develop, improve, and exchange predictive modeling and data analytics for purposes of improving outcomes. For example, we may use your Personal Information as a part of a data set that will be used to improve the accuracy of our product outcomes predictive modeling algorithms or in connection with various Fantastic Sams product studies.
7. We May Disclose Your Information in the Event of a Merger, Sale or Other Asset Transfers

If we become involved in a merger, acquisition, financing due diligence, divestiture, restructuring, reorganization, bankruptcy, dissolution, sale, or transfer of some or all of our assets (whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding), or transition of Service to another provider, your Personal Information may be sold or transferred to business entities or people involved in such process.

We Disclose Your Information to Protect Us or Others

We may share your Personal Information to government or public agencies, law enforcement authorities, regulators, and/or any other person or entity having legal authority or justification for receipt of your Personal Information if:

we believe that we are required to do so by law;
we believe that we are permitted to do so by law or legal process;
to respond to a claim; or
to protect the rights, property, or safety of Fantastic Sams, its affiliates, its subfranchisors, any of their franchisees, or others.

Personal Information that you post on or through the public areas of the Services (e.g., chat rooms, bulletin boards, and discussion groups) are generally accessible to, and may be collected and used by, others which may result in unsolicited messages or other contact from others. Users of the Services are encouraged to exercise caution when providing personal information about themselves in public or interactive areas.

Your Privacy Choices and Rights
1. Mechanisms to Control Your Information
  1. Cookies and Other Tracking Technologies. You may be able to set your browser to reject cookies and certain other technologies by adjusting the appropriate settings in your browser. Each browser is different, but many common browsers have preferences that may be adjusted to allow you to either accept or reject cookies and certain other technologies before they are set or installed, or allow you to remove or reject the use or installation of certain technologies altogether. We recommend that you refer to the “Help” menu in your browser to learn how to modify your browser settings. If you disable or refuse cookies, please note that some parts of the Service may become inaccessible or may not function properly.
  2. Communications from Fantastic Sams. If you do not wish to have your contact information used by Fantastic Sams to promote our own or third-party products or services, you can opt-out by: (1) informing us of your preference at the time you sign up for your Service account (if applicable), or complete any other form on or through the Services which we collect your data; (2) modifying your user preferences in your account profile by checking or unchecking the relevant boxes; (3) following the opt-out instructions at the bottom of the promotional emails we send you; or (4) sending us an email stating your request. Please note that we may also send you non-promotional communications, however you will not be able to opt-out of these communications (e.g., transactional communications, including emails about your account; communications regarding our Service; and communications about updates to this Privacy Policy and the Terms of Use).
  3. “Do Not Track”. Your browser settings may allow you to automatically transmit a “Do Not Track” signal to online services you visit indicating that you do not wish to be tracked. Please note, however, there is no industry consensus as to what site operators should do with regard to these signals. Accordingly, we do not monitor or take action with respect to “Do Not Track” signals or other similar mechanisms. For more information on “Do Not Track,” visit http://www.allaboutdnt.com.
2. Accessing and Correcting Your Information

In accordance with applicable law, you may have the right to:

Access Personal Information. You may access Personal Information about you, including: (1) confirming whether we are processing your Personal Information; (2) obtaining access to or a copy of your Personal Information; and (3) receiving an electronic copy of personal information that you have provided to us, or asking us to send that information to another company (the "right of data portability").
Request Correction of Personal Information. You may request correction of your Personal Information where it is inaccurate, incomplete, or improperly possessed.
Request Deletion/Erasure of Personal Information. You may request deletion/erasure of your Personal Information held by us about you. Please note: we cannot delete your Personal Information except by also deleting your account.
Restrict/Opt-out of Processing. You may request to restrict/opt-out of the processing of your Personal Information, including for the purpose(s) of: (1) targeted advertising; (2) sale or sharing of personal information; or (3) profiling to make decisions that have legal or other significant effects on you.
Withdraw Consent. You may have the right to withdraw consent where such consent is required to share or use Personal Information.

If you would like to exercise any of these rights, you may send us an email to legal@fantasticsams.com to request access to, correction of or removal of any Personal Information that you have provided to us. We will process such requests in accordance with applicable law. Please note that copies of information that is updated, modified or deleted may remain viewable in cached and archived pages for a period of time, and we may maintain records in our systems of this information as well.

Non-Discrimination. Residents have the right not to receive discriminatory treatment by covered businesses for the exercise of their rights conferred by the applicable privacy law.
Verification. To protect your privacy, we will take the following steps to verify your identity before fulfilling your request. When you make a request, we will ask you to provide sufficient information that allows us to reasonably verify you are the person about whom we collected Personal Information or an authorized representative, which may include asking you to answer questions regarding your account and use of our Service.
1. State Specific Privacy Rights

A number of states require us to provide residents of those states with additional information and rights. Please click here to see a list of those states and links to the state-specific disclosures.

Your Right to Appeal

If you are dissatisfied with the refusal of Fantastic Sams to take action in accordance with the exercise of your rights in the “Accessing and Correcting Your Information” section above, you may request reconsideration by Fantastic Sams, by sending a written request for reconsideration to the mailing address found in the “Contact Information” section below. Within sixty (60) days of Fantastic Sams’ receipt of such written request for reconsideration, Fantastic Sams shall inform you in writing (at the address indicated in your initial written request) of any action taken or not taken in response to your request for reconsideration, including a written explanation of the reasons for the decision. In addition, if your request for reconsideration is denied, you have the right to appeal to the applicable supervisory authority in your jurisdiction of residence (see subsection (E) below and the state-specific privacy notices for more information).

Complaints to Data Protection Authority

You have the right to complain to a Data Protection Authority about our collection and use of your Personal Information. For more information, if you are in the European Economic Area (EEA), please contact your local data protection authority in the EEA.

How Do We Protect Your Personal Information?

Fantastic Sams has implemented safeguards reasonably designed to help protect your Personal Information. Such safeguards include the implementation of various technical, physical, administrative and organizational security measures intended to reduce the risk of loss, misuse, unauthorized access, disclosure, or modification of your information. All information you provide to us is stored on our secure servers behind firewalls.

The safety and security of your information is also dependent on you. If we have given you (or where you have chosen) a password for access to certain parts of the Services, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.

While we have employed security technologies and procedures to assist safeguarding your Personal Information, no system or network can be guaranteed to be 100% secure, and we cannot ensure or guarantee the security of any information that is provided to us. Unauthorized entry or use, hardware or software failure, and other factors may compromise the security of user information at any time. Any transmission of Personal Information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Service.

International Transfer of Personal Information

If you provide Personal Information through the Services, you acknowledge and agree that such Personal Information may be transferred from your current location to the offices and servers of Fantastic Sams and the other third parties referenced in this Privacy Policy located in the United States or other countries, which may have data protection laws that are different from the laws where you live. We endeavor to safeguard your information consistent with the requirements of such laws, where applicable.

Cookies and Other Tracking Technologies
Description of the Technologies. We as well as third parties that provide the content, advertising, or other functionality on the Services may use Technologies to automatically collect information through your use of the Services. The following describes some of these Technologies we may use for this automatic data collection:
1. Cookies. Cookies are small pieces of information that this Website (or the other Services) sends to your computer and that are stored on your computer’s hard drive either for (a) the duration of your visit on a website ("session cookies") or (b) for a fixed period ("persistent cookies"). Cookies save your preferences and record browser activity. Cookies may be used to enhance your experience using the Services. For example, a cookie may save login information so that you don’t need to login every time that you use the Services. Cookies mays also be used for marketing purposes to determine how the Services are used.
2. Web Beacons. Web beacons are small files that are embedded in webpages, applications, and emails (also known as "clear gifs", "pixel tags", "web bugs", and "single-pixel gifs") that collect information about engagement on our Services. For example, web beacons allow us to track who has visited those webpages or opened an email, to test the effectiveness of our marketing, and for other related website statistics.
3. JavaScripts. JavaScripts are code snippets embedded in various parts of websites and applications that facilitate a variety of operations including accelerating the refresh speed of certain functionality or monitoring usage of various online components.
4. Entity Tags. Entity Tags are HTTP code mechanisms that allow portions of websites to be stored or "cached" within your browser and validates these caches when the website is opened, accelerating website performance since the web server does not need to send a full response if the content has not changed.
5. HTML5 Local Storage. HTML5 local storage allows data from websites to be stored or "cached" within your browser to store and retrieve data in HTML5 pages when the website is revisited.
6. Resettable Device Identifiers. Resettable device identifiers (also known as "advertising identifiers") are similar to cookies and are found on many mobile devices and tablets (for example, the "Identifier for Advertisers" or "IDFA" on Apple iOS devices and the "Google Advertising ID" on Android devices), and certain streaming media devices. Like cookies, resettable device identifiers are used to make online advertising more relevant.
Our Uses of the Technologies. We may also use these technologies for security purposes, to facilitate navigation, to display information more effectively, and to better serve you with more tailored information, as well as for Website administration purposes (e.g., to gather statistical information about the usage of our websites in order to continually improve the design and functionality), to understand how users use our Website, and to assist us with resolving questions regarding use of the Website.
Mechanisms to Control Cookies and Other Technologies. You may be able to set your browser to reject cookies and certain other technologies by adjusting the appropriate settings in your browser. Each browser is different, but many common browsers have preferences that may be adjusted to allow you to either accept or reject cookies and certain other technologies before they are set or installed, or allow you to remove or reject the use or installation of certain technologies altogether. We recommend that you refer to the “Help” menu in your browser to learn how to modify your browser settings. To learn how you can manage your Flash cookie settings, visit the Flash player settings page on Adobe's website. If you disable or refuse cookies, please note that some parts of the Service may become inaccessible or may not function properly.
Third Party Technologies. This Privacy Policy covers the use of cookies by Fantastic Sams and does not cover the use of tracking technologies by any third parties. The Services may contain links, content, advertising, or references to other websites or applications run by third parties, including advertisers, ad networks and servers, content providers, and application providers. These third parties may use cookies or other tracking technologies to collect information about you when you interact with their content on the Services, such as advertising vendors to using Web beacons and cookies on our registration pages for payment verification. The information they collect may be associated with your Personal Information or they may collect information about your online activities over time and across different websites. Please be aware that we do not control these third parties' tracking technologies or when and how they may be used. Therefore, Fantastic Sams does not claim nor accept responsibility for any privacy policies, practices, or procedures of any such third party. We encourage you to read the privacy statements and terms and conditions of linked or referenced websites you enter. We do not endorse, screen, or approve, and are not responsible for the practices of such third parties or the content of their application or website. Providing Personal Information to third-party websites or applications is at your own risk. If you have any questions about an ad or other targeted content, you should contact the responsible provider directly.
Google Analytics. The Services may use Google Analytics, which uses cookies and similar technologies to collect and analyze information about use of the Services and report on activities and trends. This service may also collect information regarding the use of other websites, apps and online resources. You can learn about Google’s practices by going to www.google.com/policies/privacy/partners/, and opt-out of them by downloading the Google Analytics opt-out browser add-on, available at https://tools.google.com/dlpage/gaoptout.
Personal Information Retention Period

We keep your information for the length of time needed to carry out the purpose outlined in this Privacy Policy and to adhere to our policies on keeping records (unless a longer period is needed by law). Our records policies reflect applicable laws. We will retain and use your information to the extent necessary to manage your relationship with us, personalize and improve your overall customer experience, and to comply with our legal obligations. Where we retain data, we do so in accordance with our record retention policies and any limitation periods and records retention obligations that are imposed by applicable law.

Miscellaneous
Children’s Online Privacy. We are especially committed to protecting the privacy of children. The Services are intended for general audiences and are not directed to children under thirteen (13) years of age. Fantastic Sams does not knowingly collect personal information from children under the age of thirteen (13) in a manner that is not permitted by the U.S. Children’s Online Privacy Protection ACT (“COPPA”). If we become aware that a child under thirteen (13) years of age has provided us with personal information, we will use reasonable efforts to immediately delete the child’s information from our records, unless we have a legal obligation to keep it. If you are a parent or legal guardian and think your child under the age of thirteen (13) has given us information without your consent, please contact us at legal@fantasticsams.com.
Changes to this Privacy Policy. We reserve the right to revise this Privacy Policy from time to time in order to reflect, changes to our practices or for other operational, legal, or regulatory reasons. Should we update this Privacy Policy, updated versions of this Privacy Policy will be posted on the Website. We may elect to notify you of material changes by mail, email, posting of modified Privacy Policy, or some other similar manner. However, it is your responsibility to review this Privacy Policy periodically, so that you can be up to date on our most recent Privacy Policy and procedures. Your continued use of or access to the Services following the posting of any changes to this Privacy Policy constitutes acceptance of those changes.
Third-Party Websites and Applications. Our Services may offer links to websites or applications that are not run by us but by third parties. These third-party services, websites or applications are not controlled by us, and may have privacy policies that differ from our own. We encourage our users to read the privacy policies and terms and conditions of each website and application with which they interact. We do not endorse, screen or approve, and are not responsible for the practices of such third parties or the content of their application or website. Providing Personal Information to third-party websites or applications is at your own risk.
Contact Information. If, after reviewing this Privacy Policy, you would like more information about our privacy practices, or have questions or concerns regarding the Privacy Policy or your Personal Information, please send an email to legal@fantasticsams.com.

California Privacy Notice

California law requires us to disclose certain information related to our privacy practices. This California Privacy Notice (the “CA Notice”) supplements the information contained in the Fantastic Sams Franchise Corporation Privacy Policy (the “Privacy Policy”) and applies solely to all visitors, users, and others who reside in the State of California ("consumers" or "you"). We adopt this notice to comply with the California Consumer Privacy Act of 2018 (CCPA), and California Privacy Rights Act of 2020 (CPRA) (together, the “CCPA”) and any terms defined under the CCPA have the same meaning when used in this CA Notice. Capitalized terms used but not defined herein shall have the respective meanings set forth in the Privacy Policy. As used in this CA Notice only, “personal information” has the meaning set forth in the CCPA.

To understand our privacy practices, you should refer to our Privacy Policy in addition to this supplement applicable to California residents.

Categories of Personal Information Collected and Disclosed

The CCPA provides California residents with the right to know what categories of personal information covered businesses have collected about them and whether such businesses have disclosed that personal information for a business purpose (e.g., to a service provider) in the preceding twelve (12) months. This information can be found in the table below:

Category of Personal Information Collected	Category of Third Parties Personal Information is Disclosed to for a Business Purpose
Identifiers. A real name, postal address, Internet Protocol address, email address, or other similar identifiers.	Service providers
Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)) A name, address, telephone number, employment, employment history, bank account number, credit card number, debit card number, or any other financial information.	Service providers
Commercial information Records of products or Service purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.	Advertising partners Service providers
Internet or other electronic network activity Browsing history, search history, information on a consumer's interaction with an internet website, application, or advertisement.	Advertising partners Service providers
Inferences drawn from other personal information to create a profile about a consumer Profile reflecting a consumer's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.	Advertising partners Service providers
Professional or employment-related information Collect the employment information of employees of Fantastic Sams and job applicants, including contents of job applications, employee personnel records, and employee communications.	Service providers
Business-to-Business related information Personal Information of an individual acting in a business capacity for our customers, to provide our Service to such customer.	Service providers
Geolocation data As described above, we may collect your IP address automatically when you use our Service. We may be able to determine your general location based on your device’s IP address.	Advertising partners Service providers
Category of Sensitive Personal Information Collected	Category of Third Parties Sensitive Personal Information is Disclosed to for a Business Purpose
Biometric Information The processing of biometric information for the purpose of uniquely identifying a consumer.
Precise Geolocation Data Any data that is derived from a device, and that is used or intended to be used to locate a consumer within a geographic area that is equal to or less than the area of a circle with a radius of 1,850 feet, except as prescribed by regulations.
Government Identifiers Personal Information that consists of social security/other government issues identification.
Racial or Ethnic Origin Personal Information that consists of your racial or ethnic origin.
Mental/Physical Health Diagnosis Personal Information that consists of a mental/physical health diagnosis.

We may use any of the categories of information listed above for other business or operational purposes compatible with the context in which the personal information was collected. The categories of sources from which we collect personal information and our business and commercial purposes for using personal information are set forth in "Types of Information We Collect" and "How is Personal Information Collected and Used by Fantastic Sams?" of the Privacy Policy, respectively.

We may share any of the information listed above with service providers, which are companies that we engage for business purposes to conduct activities on our behalf. Service providers are restricted from using personal information for any purpose that is not related to our engagement.

“Sales” or “Sharing” of Personal Information under the CCPA

California residents have the right to opt out of the “sale” or “sharing” of their personal information to third parties. The CCPA defines “sale” to mean selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating a consumer’s personal information to a third party for monetary or other valuable consideration (which may be considered “sales” under the CCPA even if no money is exchanged). The CCPA defines “sharing” to mean sharing, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating a consumer’s personal information to a third party for cross-context behavioral advertising, whether or not for monetary or other valuable consideration. The categories of personal information we have "sold" or “shared” and the categories of third parties we have "sold" or “shared” personal information to in the preceding twelve months are listed below

Category of Personal Information Sold or Shared by the Fantastic Sams	Category of Third Parties Personal Information is Sold or Shared to
Identifiers. A real name, postal address, telephone number, unique personal identifier, online identifier, email address, or other similar identifiers.	?
Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)) A name, address, telephone number.	N/A
Commercial information Records of products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.	N/A
Internet or other electronic network activity Browsing history, search history, information on a consumer's interaction with an internet website, application, or advertisement.	N/A
Inferences drawn from other personal information to create a profile about a consumer Profile reflecting a consumer's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.	N/A

Other California Consumer Privacy Rights

California residents have additional rights regarding their personal information. This section describes those additional rights and explains how to exercise those rights.

Authorized Agent. Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your Personal Information. You may also make a verifiable consumer request on behalf of your minor child. To designate an authorized agent, please contact us as set forth in “Contact Information” in the Privacy Policy and provide written authorization signed by you and your designated agent.
California Shine the Light. The California "Shine the Light" law permits users who are California residents to request and obtain from us once a year, free of charge, a list of the third parties to whom we have disclosed their personal information (if any) for their direct marketing purposes in the prior calendar year, as well as the type of personal information disclosed to those parties. If you are a California resident and would like to exercise any of your rights under the law, please contact us as set forth in the "Contact Information" section of the Privacy Policy. We will process such requests in accordance with applicable laws.
Opt-out of "Sales or Sharing". California residents may opt-out of the "sale or sharing" of their personal information by contacting us as set forth in the "Contact Information" section of the Privacy Policy. California residents (or their authorized agent) may also exercise your right to limit the disclosure of your sensitive personal information, by clicking on this "Limit the Use of My Sensitive Personal Information" link.

Colorado Privacy Notice

Colorado requires us to disclose certain information related to our privacy practices. This Colorado Privacy Notice (the “CO Notice”) supplements the information contained in the Fantastic Sams Franchise Corporation Privacy Policy (the “Privacy Policy”) and applies solely to all visitors, users, and others who reside in the State of Colorado ("consumers" or "you"). We adopt this notice to comply with the Colorado Privacy Act (the “CPA”) and any terms defined under the CPA have the same meaning when used in this CO Notice. Capitalized terms used but not defined herein shall have the respective meanings set forth in the Privacy Policy.

To understand our privacy practices, you should refer to our Privacy Policy in addition to this supplement applicable to Colorado residents.

Categories of Personal Data Collected or Processed

The CPA requires covered businesses to provide residents of Colorado with the right to know the categories of “personal data” (as defined under applicable law) covered businesses have collected or processed about them and the categories of third parties with whom such personal data has been shared. Residents of Colorado can find this information below:

Category of Personal Data Collected or Processed	Category of Third Parties Personal Data is Shared With
Identifiers. A real name, Internet Protocol address, email address, or other similar identifiers.	Service providers
Commercial information Records of products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.	N/A
Internet or other electronic network activity Browsing history, search history, information on a consumer's interaction with an internet website, application, or advertisement.	Service providers
Inferences drawn from other personal information to create a profile about a consumer Profile reflecting a consumer's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.	N/A
Geolocation data As described above, we may collect your IP address automatically when you use our Services. We may be able to determine your general location based on your device’s IP address.	Service Providers

“Sales” or Sharing for Targeted Advertising under the CPA

Residents of Colorado have the right to opt-out of the “sale” of their personal data to third parties or the processing of their personal data for targeted advertising (see Section 3 below). For purposes of this paragraph the definition of “sale”, “sell” or “sold” means “the exchange of personal data for monetary or other valuable consideration by a controller to a third party” as defined in the CPA. However, please note, in accordance with the CPA certain specific exceptions to “sale” may apply, including the disclosure of personal data to a processor that processes personal data on behalf of a controller. For purposes of this paragraph the definition of “targeted advertising” means “displaying to a consumer an advertisement that is selected based on personal data obtained or inferred over time from the consumer’s activities across nonaffiliated websites, applications or online services to predict consumer preferences or interests” as defined in the CPA. However, please note, as further described in the CPA certain specific exceptions to “targeted advertising” may apply. If a consumer wishes to exercise their right to opt-out of the sale of personal data or processing of personal data for targeted advertising, they may do so by following this link. The categories of personal data “sold” or processed for targeted advertising can be found below:

Category of Personal Data Sold to Third Parties or Processed for Targeted Advertising	Category of Third Parties Personal Data is Sold to or Processed by for Targeted Advertising
	N/A

Right to Opt-Out

Colorado residents (or an authorized agent thereof) may request to opt-out of the processing of your personal data for the purpose(s) of: (A) targeted advertising; (B) sale of personal data; or (C) profiling to make decisions that have legal or other significant effects on you. If you would like to exercise this right, you may send us an email to request to opt-out. We will process such requests in accordance with applicable law. Please note: You may broadcast an Opt-Out Preference Signal, such as the Global Privacy Control (GPC) (on the browsers and/or browser extensions that support such a signal), however we do not currently honor such signals or similar mechanisms.

Connecticut Privacy Notice

Connecticut requires us to disclose certain information related to our privacy practices. This Connecticut Privacy Notice (the “CT Notice”) supplements the information contained in the Fantastic Sams Franchise Corporation Privacy Policy (the “Privacy Policy”) and applies solely to all visitors, users, and others who reside in the State of Connecticut ("consumers" or "you"). We adopt this notice to comply with the Connecticut Data Privacy Act (the “CTDPA”) and any terms defined under the CTDPA have the same meaning when used in this CT Notice. Capitalized terms used but not defined herein shall have the respective meanings set forth in the Privacy Policy.

To understand our privacy practices, you should refer to our Privacy Policy in addition to this supplement applicable to Connecticut residents.

Sharing of Personal Data

The CTDPA requires covered businesses to provide residents of Connecticut with the right to know the categories of “personal data” (as defined under applicable law) covered businesses shared with third parties and the categories of third parties with whom such personal data has been shared. Residents of Connecticut can find this information below:

Category of Personal Data Shared	Category of Third Parties Personal Data is Shared With
Identifiers. A real name, Internet Protocol address, email address, or other similar identifiers.	Service providers
Commercial information Records of products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.	N/A
Internet or other electronic network activity Browsing history, search history, information on a consumer's interaction with an internet website, application, or advertisement.	Service providers
Inferences drawn from other personal information to create a profile about a consumer Profile reflecting a consumer's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.	N/A
Geolocation data As described above, we may collect your IP address automatically when you use our Services. We may be able to determine your general location based on your device’s IP address.	Service Providers

“Sales” or Sharing for Targeted Advertising under the CTDPA

Residents of Connecticut have the right to opt-out of the “sale” of their personal data to third parties or the processing of their personal data for targeted advertising (see Section 3 below). For purposes of this paragraph the definition of “sale”, “sell” or “sold” means “the exchange of personal data for monetary or other valuable consideration by a controller to a third party” as defined in the CTDPA. However, please note, in accordance with the CTDPA certain specific exceptions to “sale” may apply, including the disclosure of personal data to a processor that processes personal data on behalf of a controller. For purposes of this paragraph the definition of “targeted advertising” means “displaying to a consumer an advertisement that is selected based on personal data obtained or inferred over time from the consumer’s activities across nonaffiliated websites, applications or online services to predict consumer preferences or interests” as defined in the CTDPA. However, please note, as further described in the CTDPA certain specific exceptions to “targeted advertising” may apply. If a consumer wishes to exercise their right to opt-out of the sale of personal data or processing of personal data for targeted advertising, they may do so by following this link. The categories of personal data “sold” or processed for targeted advertising can be found below:

Category of Personal Data Sold to Third Parties or Processed for Targeted Advertising	Category of Third Parties Personal Data is Sold to or Processed by for Targeted Advertising
	N/A

Right to Opt-Out

Connecticut residents (or an authorized agent thereof) may request to opt-out of the processing of your personal data for the purpose(s) of: (A) targeted advertising; (B) sale of personal data; or (C) profiling to make decisions that have legal or other significant effects on you. If you would like to exercise this right, you may send us an email to request to opt-out. We will process such requests in accordance with applicable law. Please note: You may broadcast an Opt-Out Preference Signal, such as the Global Privacy Control (GPC) (on the browsers and/or browser extensions that support such a signal), however we do not currently honor such signals or similar mechanisms.

Right to Appeal a Denied Appeal

If your request for reconsideration of Fantastic Sams’ refusal to take action in accordance with the exercise of your rights in the “Accessing and Correcting Your Personal Information” section of the Privacy Policy is denied, you have the right to file a complaint with the Connecticut Office of the Attorney General by visiting the “File a Compliant” page here or contacting the Consumer Assistance Unit at 860-808-5420.

Nevada Privacy Notice

Nevada law requires us to provide all visitors, users, and others who reside in the State of Nevada ("you") certain additional privacy rights. This Nevada Privacy Notice (the “NV Notice”) supplements the information contained in the Fantastic Sams Franchise Corporation Privacy Policy (the “PrivacyPolicy”) and applies solely to you. If you are a resident of Nevada, you have the right to opt-out of the sale of certain Personal Information to third parties who intend to sell or license that Personal Information, even if your Personal Information is not currently being sold. If you would like to exercise this right, please contact us via the information found in the “Contact Information” section of the Privacy Policy.

Utah Privacy Notice

Utah requires us to disclose certain information related to our privacy practices. This Utah Privacy Notice (the “UT Notice”) supplements the information contained in the Fantastic Sams Franchise Corporation Privacy Policy (the “Privacy Policy”) and applies solely to all visitors, users, and others who reside in the State of Utah ("consumers" or "you"). We adopt this notice to comply with the Utah Consumer Privacy Act (the “UCPA”) and any terms defined under the UCPA have the same meaning when used in this UT Notice. Capitalized terms used but not defined herein shall have the respective meanings set forth in the Privacy Policy.

To understand our privacy practices, you should refer to our Privacy Policy in addition to this supplement applicable to Utah residents.

Sharing of Personal Data

The UCPA requires covered businesses to provide residents of Utah with the right to know the categories of “personal data” (as defined under applicable law) covered businesses shared with third parties and the categories of third parties with whom such personal data has been shared. Residents of Utah can find this information below:

Category of Personal Data Shared	Category of Third Parties Personal Data is Shared With
Identifiers. A real name, Internet Protocol address, email address, or other similar identifiers.	Service providers
Commercial information Records of products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.	N/A
Internet or other electronic network activity Browsing history, search history, information on a consumer's interaction with an internet website, application, or advertisement.	Service providers
Inferences drawn from other personal information to create a profile about a consumer Profile reflecting a consumer's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.	N/A
Geolocation data As described above, we may collect your IP address automatically when you use our Services. We may be able to determine your general location based on your device’s IP address.	Service Providers

“Sales” or Sharing for Targeted Advertising under the UCPA

Residents of Utah have the right to opt-out of the “sale” of their personal data to third parties or the processing of their personal data for targeted advertising (see Section 3 below). For purposes of this paragraph the definition of “sale”, “sell” or “sold” means “the exchange of personal data for monetary or other valuable consideration by a controller to a third party” as defined in the UCPA. However, please note, in accordance with the UCPA certain specific exceptions to “sale” may apply, including the disclosure of personal data to a processor that processes personal data on behalf of a controller. For purposes of this paragraph the definition of “targeted advertising” means “displaying to a consumer an advertisement that is selected based on personal data obtained or inferred over time from the consumer’s activities across nonaffiliated websites, applications or online services to predict consumer preferences or interests” as defined in the UCPA. However, please note, as further described in the UCPA certain specific exceptions to “targeted advertising” may apply. If a consumer wishes to exercise their right to opt-out of the sale of personal data or processing of personal data for targeted advertising, they may do so by following this link. The categories of personal data “sold” or processed for targeted advertising can be found below:

Category of Personal Data Sold to Third Parties or Processed for Targeted Advertising	Category of Third Parties Personal Data is Sold to or Processed by for Targeted Advertising
	N/A

Right to Opt-Out

Utah residents may request to opt-out of the processing of your personal data for the purpose(s) of: (A) targeted advertising; or (B) sale of personal data. If you would like to exercise this right, you may send us an email to request to opt-out. We will process such requests in accordance with applicable law.

Virginia Privacy Notice

Virginia requires us to disclose certain information related to our privacy practices. This Virginia Privacy Notice (the “VA Notice”) supplements the information contained in the Fantastic Sams Franchise Corporation Privacy Policy (the “Privacy Policy”) and applies solely to all visitors, users, and others who reside in the State of Virginia ("consumers" or "you"). We adopt this notice to comply with the Virginia Consumer Data Protection Act (the “VCDPA”) and any terms defined under the VCDPA have the same meaning when used in this VA Notice. Capitalized terms used but not defined herein shall have the respective meanings set forth in the Privacy Policy.

To understand our privacy practices, you should refer to our Privacy Policy in addition to this supplement applicable to Virginia residents.

Sharing of Personal Data

The VCDPA requires covered businesses to provide residents of Virginia with the right to know the categories of “personal data” (as defined under applicable law) covered businesses shared with third parties and the categories of third parties with whom such personal data has been shared. Residents of Virginia can find this information below:

Category of Personal Data Shared	Category of Third Parties Personal Data is Shared With
Identifiers. A real name, Internet Protocol address, email address, or other similar identifiers.	Service providers
Commercial information Records of products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.	N/A
Internet or other electronic network activity Browsing history, search history, information on a consumer's interaction with an internet website, application, or advertisement.	Service providers
Inferences drawn from other personal information to create a profile about a consumer Profile reflecting a consumer's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.	N/A
Professional or employment-related information Collect the employment information of employees of Fantastic Sams, including contents of job applications, employee personnel records, and employee communications.	N/A
Geolocation data As described above, we may collect your IP address automatically when you use our Services. We may be able to determine your general location based on your device’s IP address.	Service Providers

“Sales” or Sharing for Targeted Advertising under the VCDPA

Residents of Virginia have the right to opt-out of the “sale” of their personal data to third parties or the processing of their personal data for targeted advertising (see Section 3 below). For purposes of this paragraph the definition of “sale” means any “exchange of personal data for monetary consideration by us to a third party” as defined in the VCDPA. However, please note, in accordance with the VCDPA certain specific exceptions to “sale” may apply, including the disclosure of personal data to a processor that processes personal data on behalf of a controller. For purposes of this paragraph the definition of “targeted advertising” means “displaying advertisements to you where the advertisement is selected based on personal data obtained from your activities over time and across non-affiliated websites or online applications to predict your preferences or interests” as defined in the VCDPA. However, please note, as further described in the VCDPA certain specific exceptions to “targeted advertising” may apply. If a consumer wishes to exercise their right to opt-out of the sale of personal data or processing of personal data for targeted advertising, they may do so by following this link. The categories of personal data “sold” or processed for targeted advertising can be found below:

Category of Personal Data Sold to Third Parties or Processed for Targeted Advertising	Category of Third Parties Personal Data is Sold to or Processed by for Targeted Advertising
	N/A

Right to Opt-Out

Virginia residents may request to opt-out of the processing of your personal data for the purpose(s) of: (A) targeted advertising; (B) sale of personal data; or (C) profiling to make decisions that have legal or other significant effects on you. If you would like to exercise this right, you may send us an email to request to opt-out. We will process such requests in accordance with applicable law.

Social links