Effective Date: February 21, 2024
California, Colorado, Connecticut, Utah, and Virginia have enacted consumer privacy laws that grant their residents certain rights and require additional disclosures. This U.S. State Privacy Notice ("State Law Notice") addresses these state-specific requirements and also serves as our California notice at collection.
If you are a resident of one of the states listed above, this State Law Notice, together with our Privacy Notice, applies to you.
We may update this State Law Notice from time to time. If we make changes, we will notify you by revising the Effective Date above and, in some cases, we may provide you with more prominent notice (for example, by adding a statement to our homepage or sending you a notification), such as in connection with making material changes to this State Law Notice. We encourage you to review this State Law Notice regularly to stay informed about our information practices and the choices available to you.
Contents
- Collection, Use, and Disclosure of Personal Information
- Other Details About Our Information Practices
- Additional Privacy Rights
Collection, Use, and Disclosure of Personal Information
As described in our Privacy Notice, we collect, use, and disclose personal information about you. Below, we use two different tables to explain this same information in accordance with state privacy laws. The tables describe our data practices now and over the past 12 months.
Collection, Use, and Disclosure of Personal Information for Business purposes
Category of Personal Information | Categories of Recipients | Use of Personal Information |
---|---|---|
Identifiers (such as your IP address and contact information, including name and email address) | Cloud service providers, payment processing companies, analytics companies, fraud prevention companies, marketing companies, operational and administrative services companies | We use this personal information to:
|
Characteristics of Protected Classifications Under California or U.S. Law (such as your gender) | Cloud service providers, payment processing companies, analytics companies, fraud prevention companies, marketing companies, operational and administrative services companies | We use this personal information to:
|
Commercial Information (such as records of donations) | Cloud service providers, payment processing companies, marketing companies, fraud prevention companies | Same as "Identifiers" above. |
Employment information (such as whether you are an employee of REI) | Cloud service providers, analytics companies, operational and administrative services companies | Same as "Identifiers" above. |
Internet or Other Electronic Network Activity Information (such as browsing history and information about your activities on our Services) | Cloud service providers, analytics companies, marketing companies, fraud prevention companies | We use this personal information to:
|
Geolocation Data (such as city of residence) | Cloud service providers, analytics companies, fraud prevention companies, operational and administrative services companies | We use this personal information to:
|
Inferences about you (such as approximate location derived from IP address or information drawn about your preferences based on your behavior) | Cloud service providers, analytics companies, marketing companies | We use this personal information to:
|
We do not sell or share personal information to third parties.
Other Details About Our Information Practices
- As described in more detail in our Privacy Notice, we collect personal information from different sources, including: directly from you; automatically when you access or use our Services; and from third-party sources, including from REI, mailing list providers and non-profit data services, and other users if they decide to make a donation in your honor and ask us to notify you.
- We do not knowingly collect personal information about consumers under the age of 16.
- We do not collect information that is considered "sensitive" under state privacy laws.
- We store personal information for as long as necessary to carry out the purposes for which we originally collected it and for other business purposes explained in this State Law Notice.
Additional Privacy Rights
Access, Correction, and Deletion. You have the right to (1) request to know more about and access your personal information, including in a portable format, (2) request deletion of your personal information, and (3) request correction of inaccurate personal information. To request access, correction, or deletion of your personal information, you may submit this webform or email us at privacy@REIFund.org. We will verify your request by asking you to provide certain information, such as information regarding a recent donation.
Nondiscrimination
We will not discriminate against you for exercising your privacy rights.
Authorized Agents
If you reside in California, Colorado, or Connecticut, you can designate an authorized agent to submit a privacy rights request on your behalf. We may ask authorized agents to submit proof of their authority to make a request, such as a valid power of attorney or proof that they have signed permission from the consumer who is the subject of the request. In some cases, we may be required to contact the consumer to verify his or her identity or confirm the authorized agent has permission to submit the request. Authorized agents can submit rights requests by following the instructions provided above.
Appeals
In some cases, we may deny your privacy rights request. You have the right to appeal our decision by contacting us at privacy@REIFund.org. If you have concerns about the result of an appeal, you may contact the attorney general in the state where you reside.
Contact Us
If you have any questions, comments or concerns about this State Law Notice or about our privacy practices, please email privacy@REIFund.org. You may also direct your privacy-related comments or questions to the following address:
REI Cooperative Action Fund
Attention: Privacy
1700 45th Street E, Suite 101
Sumner, Washington 98390